surma
bcb3e4d8e5
Load world extensions from commit snapshots with last-good recovery
2026-11-07 10:38:20 +00:00
surma
534fa50615
Merge v3-t32: pi-durable patch (P3-a), headless harness with channel input (P3-b) (T32)
...
# Conflicts:
# host/src/harness/mod.rs
2026-11-07 06:56:42 +00:00
surma
5d63dcfb18
Merge v3-t36: git status refreshes the index stat cache (T36)
2026-11-07 06:51:25 +00:00
surma
e1cfaa93bf
git: refresh index stat cache after CLI status
2026-11-07 02:39:08 +00:00
surma
c8525c3acb
Carry durable input hooks and add a headless harness channel
2026-11-07 01:03:17 +00:00
surma
9d11ab381e
Merge v3-t37: agent definitions, skills, model families and the definition parser (T37, P3-e part 1)
2026-11-07 00:59:10 +00:00
surma
0dc97c7682
feat: port world agents, skills, and pure definition parser
...
Rewrite Ultimate roles for the WASI world and explicit repositories. Add approved proxy model families, ordered overlays, and executable parser and asset checks.
2026-11-07 00:57:27 +00:00
surma
9cae803323
Merge v3-t34: git forms for workspaces and the lander, conversation trailer (T34)
2026-11-07 00:49:35 +00:00
surma
54229adad2
git: add workspace coordination forms and conversation trailers
2026-11-07 00:44:49 +00:00
surma
4dd6161091
Merge v3-t29: wasi:http hook, credential injection, guest TCP/DNS with the admin rule, one shared host API (T29)
2026-11-07 00:27:30 +00:00
surma
c91ecbf7a4
Share owned host API state between HTTP hooks and native pages
2026-11-07 00:23:57 +00:00
surma
aaf6d9b54f
Merge v3-t22: init request race and shared-compiler lifetime fixes (T22 Rework 2)
2026-11-07 00:01:50 +00:00
surma
17d67aadcc
Refresh unit requests and preserve shared compilation across runtime shutdown
2026-11-06 23:53:54 +00:00
surma
45d099c3e4
Merge branch 'v3' into v3-t29
...
# Conflicts:
# host/Cargo.toml
# host/src/harness/mod.rs
2026-11-06 23:46:27 +00:00
surma
9517515efe
api: shut the init supervisor down gracefully after the console (merge fix for T22 + T25)
2026-11-06 23:43:49 +00:00
surma
bb162abd4d
T29: use QuickJS and verify the HTTP hook and guest networking
2026-11-06 23:38:21 +00:00
surma
904415063a
Merge v3-t25: host API routes and host-served approval, passkey and secret-entry pages (T25)
2026-11-06 23:24:26 +00:00
surma
c500ecd281
api: merge v3 proofs and add host approval pages and listener
2026-11-06 23:18:24 +00:00
surma
65464069d3
Merge v3-t22: init as a WASI systemd subset, file watchers, exit pollables (T22)
2026-11-06 23:15:39 +00:00
surma
7c7656c4a8
Merge branch 'v3' into v3-t29
...
# Conflicts:
# host/Cargo.toml
2026-11-06 22:50:21 +00:00
surma
fb83e0c067
WIP T29: credential hook, pinned HTTP transport and guest networking
2026-11-06 22:49:27 +00:00
surma
5a00cf3feb
Merge v3-p2-fix: security review fixes for the credentials manager (T27, T28)
...
Typed passkey proofs checked inside mutation transactions, ports and normalized
paths, overrides on GrantCreate, payload digests, key file checks, retention
(D57), scripts in QuickJS inside Wasmtime (D58), RSA on aws-lc-rs, OAuth2
token URL checks. 85 credential tests plus durable and harness tests pass.
2026-11-06 22:47:16 +00:00
surma
e332e76807
cred: reject the reserved host and migrate durable fixtures
2026-11-06 22:44:17 +00:00
surma
aeb14a0b70
Merge v3-t30: curl for the world on wasi:http (T30)
2026-11-06 22:44:03 +00:00
surma
47948d7047
Frame curl requests and scope the test fixture lifecycle
2026-11-06 22:41:47 +00:00
surma
6c9eccaa21
Add WASI curl CLI and native HTTP comparisons
2026-11-06 22:31:22 +00:00
surma
86c5d8a4e4
cred: isolate scripts in WASI and move RSA signing to AWS-LC
2026-11-06 22:22:49 +00:00
surma
f234b2d1e2
Merge v3 with T15 into v3-t22
2026-11-06 22:20:05 +00:00
surma
5b3e1393f5
cred: complete core proof, policy, storage and injection fixes
2026-11-06 22:19:35 +00:00
surma
e33d3fac3b
Merge v3-t15: shared compile cache, precompile, /bin/*.wasm and /src/sausage copies (T15)
2026-11-06 22:18:53 +00:00
surma
b3d91d37e3
process: keep Cranelift's default optimization level
...
Compiles are cached per content and guests run many times; OptLevel::None
saved 12.7% compile time but slows every run.
2026-11-06 22:18:33 +00:00
surma
e8732ede15
Limit background compilation and reduce cold compile cost
2026-11-06 21:39:22 +00:00
surma
a75094054e
Merge branch 'v3' into v3-p2-fix
2026-11-06 21:31:50 +00:00
surma
b3d3558b31
cred: stage T27 core fixes and security regressions before T26 merge (WIP)
2026-11-06 21:31:50 +00:00
surma
940ae61af6
cred: blind RSA signatures and stage T28 security regressions (WIP)
2026-11-06 21:17:52 +00:00
surma
b0a651868f
Merge v3-t26: credential requests as durable tasks, llm-proxy token as an item (T26)
2026-11-06 21:16:56 +00:00
surma
abe420f0d4
Make credential requests durable and store proxy authentication
2026-11-06 21:13:40 +00:00
surma
c70948efe2
api: add public credential routes and SSH signing oracle
2026-11-06 21:05:11 +00:00
surma
16a9a9eb6c
Merge v3-p2-cred: credentials manager library (T19, T20, T21)
...
Items, rules, grants for conversation subtrees and programs, requests, edit
requests, audit, the injection pipeline, V8 scripts, signing, OAuth2 refresh,
WebAuthn registration and bound assertions, and encrypted secret entry.
50 tests pass. Security review T24 runs on this code.
2026-11-06 20:24:15 +00:00
surma
30dcd4c2ca
cred: keep typed secret entry configuration valid
2026-11-06 20:16:24 +00:00
surma
091f679905
cred: port native items grants requests and injection core
2026-11-06 20:05:54 +00:00
surma
cd324678fe
Preserve indexed executable modes in WASI git
2026-11-06 20:04:06 +00:00
surma
457a966068
Isolate watcher queues and selectively reload resolved service binaries
2026-11-06 20:00:29 +00:00
surma
3e33a85a6c
Merge branch 'v3' into v3-t15
2026-11-06 19:50:23 +00:00
surma
4f9919d8dd
Share compilation and copy independent commands and source into new worlds
2026-11-06 19:50:23 +00:00
surma
b39bbd4f18
Run world service policy in WASI init with pollable process observation
2026-11-06 19:49:19 +00:00
surma
1d2eb894a2
Merge v3-t23: ssh CLI and git SSH transport, signing via the host API (T23)
2026-11-06 19:48:25 +00:00
surma
11569119e6
cred: initialize V8 inside its Tokio executor and verify concurrent limits
2026-11-06 19:47:15 +00:00
surma
99a8e3a8be
Add WASI SSH CLI and in-process Git SSH transport
2026-11-06 19:42:00 +00:00
surma
a7e99d52f5
cred: reject non-32-byte raw ES256 scalars
2026-11-06 19:29:35 +00:00