7f8b7dea96
feat(deploy): implement atomic Box web console deploy script and test suite
2026-10-10 17:22:43 +00:00
0d1b55c30c
feat(recovery): test and verify root authorized_keys preservation across container rebuilds ( Fixes #218 )
2026-10-10 17:05:32 +00:00
c305df1f72
chore(git): isolate volatile runtime state files in .gitignore
2026-10-10 16:33:49 +00:00
super
bf0e7560d1
Merge pull request #219 from builder/gitea-chromebox-protocol-muse
...
feat: expose Gitea surface, Chromebox gateway queue, and unified protocol_muse package (Fixes #216 )
2026-10-10 16:22:17 +00:00
8ce7ac7d26
feat(pip): verify git & https access from pip container ( Fixes #216 )
2026-10-10 15:44:34 +00:00
6361192917
docs(record): add signed-off decision record for Gitea surface and protocol muse
2026-10-10 15:40:44 +00:00
a4237527f1
feat(protocol): implement unified protocol_muse package, wheel caching, and rebuild recovery
2026-10-10 15:38:25 +00:00
6c2efb2d3d
feat(web): add Gitea header link and status card to Box web console
2026-10-10 15:38:19 +00:00
7ea70c5c5d
feat(gateway): expose /api/v1/queue on chromebox-gateway and configure Cloudflare ingress
2026-10-10 15:38:14 +00:00
5d37659255
feat(cli): add shorthand error helpers, usage polling on bare box, and comprehensive help manuals
2026-10-09 23:22:12 +00:00
f75977ca6e
fix(work): import hashlib and wire heal subparser into main CLI
2026-10-09 23:13:43 +00:00
c3b4b1cd28
feat(work): wire heal subcommand and auto-heal pre-flight remediation engine
2026-10-09 23:12:35 +00:00
super
88025037db
Merge pull request #217
...
Merged via box work CLI
2026-10-09 23:11:14 +00:00
a6e5f565f5
feat(work): add pre-flight health gate for Hatch, Restore, and Git Config
2026-10-09 23:02:33 +00:00
6d4909e1be
feat(cli): add box work command for unified worker signals and task orchestration
2026-10-09 22:58:09 +00:00
f6dc3233f6
Investigate StrictModes dial-in denial on container 646
...
- No hatch user exists; dial-in identity is root (pubkey-only)
- Root auth path is StrictModes-clean; /home/hatch not consulted
- Empirical: root dial-in on VM:2226 SUCCEEDED with /home/hatch
still group-writable -- neither chmod g-w nor StrictModes no needed
- Flagged: super@bl key only in /home/hatch/.ssh (never read by sshd)
Fixes #215
2026-10-09 22:54:50 +00:00
super
f67967550a
Merge pull request #214 from dev/646/213-fix-ssh-perms
...
Verify SSH dial-in perms for container 646
Fixes #213
2026-10-09 22:51:47 +00:00
97f0e4e50e
Verify SSH dial-in perms for container 646
...
- chmod 600 ~/.ssh/authorized_keys (already 600, verified)
- sshd listening on :22, reverse tunnel VM 127.0.0.1:2226 -> container:22 up
- authorized key present (super@bl); key-auth step belongs to key holder
Fixes #213
2026-10-09 22:49:00 +00:00
super
78d22bd950
Merge pull request #212 from dev/opm/211-container-ssh-recovery
...
feat(ssh): add node SSH dial-in verification script
Fixes #211
2026-10-09 22:43:09 +00:00
opm
c0113c1ebf
feat(ssh): add node SSH dial-in verification script
...
Adds bin/verify-node-ssh.sh: checks reverse-tunnel listeners and SSH
auth for each fleet node port from the VM. Distinguishes dark nodes
(no listener) from auth failures (authorized_keys perms/keys).
Verification 2026-10-09:
- muse/2225, 646/2226, pip/2227, muse-main/2224, opm/2228: LISTEN
- def/2229, dev/2230: DARK (no reverse tunnel)
- All listening nodes reject VM super key (expected: nodes authorize
per-operator/id_frontdoor keys, not the VM super key)
Fixes #211
2026-10-09 21:56:08 +00:00
698798df2a
feat(bridge): add assign:agent and agent:agent label direct routing
2026-10-09 21:52:58 +00:00
69555f809c
fix(platform): verify Gitea integration and automated task dispatch Fixes #208 Fixes #209
2026-10-09 21:38:50 +00:00
198603060d
test(webhook): verify automated issue closure and loop terminus Fixes #210
2026-10-09 21:38:33 +00:00
87be6ae4fc
feat(supervisor): implement and verify automated tunnel recovery supervisor with test coverage
2026-10-09 12:57:28 +00:00
6d2cbabe34
feat(ssh): mint and register def@netvm signing key, authorize fleet keys (dev, pip, 646, opm, def) on front-door VM
2026-10-09 12:56:34 +00:00
a5990a08b6
feat(recovery): standardize recover-after-rebuild.sh with single apt txn, machine.env per-node identity, persistent crontab restore, and test coverage
2026-10-09 12:54:29 +00:00
229c37f383
fix(completion): resolve 4x failures by finding jobs in archive directories and patching proof test fixture
2026-10-09 12:42:38 +00:00
c6e9a0d66a
Delete job auto-work-swarm-g07 via box-ctl
2026-10-08 04:31:18 +00:00
086cf19291
Delete job auto-work-swarm-probe1 via box-ctl
2026-10-08 04:31:18 +00:00
6595169a3c
docs(policy): agy hold-all exit criteria grill record (Final)
...
E1-E6: supervised 3-observation proof bar per kind, independent flips,
automatic on proof, single-miss rollback, fleet-wide, grill questions
stay coordinator-gated. Scope accepted verbatim in-record.
2026-10-08 04:03:45 +00:00
41499e069d
feat(identity): per-scope network identity plane (slices 1-5)
...
Fingerprint map + pure resolver (account umbrella / key-level scope
rule), live Warp provider on warp-* structures, broker lifecycle
(up/down/cycle/exec/routes/status/bind), wireguard+socks boilerplate
stubs, agent-manager bind integration. CLI carries emails and
fingerprints only; key bytes never appear. 41 committed tests.
2026-10-08 04:03:45 +00:00
88ddc54a78
feat(tui): agent-manager tailnet agent-run dashboard
...
Read-only curses TUI (box-fleet-tui structure): per-device SSH scan of
tmux panes + process table, joined locally, runs sorted by agent type
across tailnet devices. Open harness taxonomy (muse/agy/known plus
other:<bin>), multi-socket enumeration, --once/--json dump mode.
2026-10-08 04:03:45 +00:00
b746d4cb5e
chore(retention): archive retired jobs [auto-work-swarm-g01, auto-work-swarm-g02, auto-work-swarm-g03, auto-work-swarm-g04, auto-work-swarm-g05, auto-work-swarm-g06, auto-work-swarm-g08, auto-work-swarm-g09, auto-work-swarm-g10, auto-work-swarm-g11, auto-work-swarm-g12, auto-work-swarm-g13, auto-work-swarm-g14, auto-work-swarm-g15, auto-work-swarm-g16, auto-work-swarm-g17, auto-work-swarm-g18, auto-work-swarm-g19, auto-work-swarm-g20, auto-work-sweep-j01, auto-work-sweep-j02, auto-work-sweep-j03, auto-work-sweep-j04, auto-work-sweep-j05, auto-work-sweep-j06, auto-work-sweep-j07, auto-work-sweep-j08, auto-work-sweep-j09, auto-work-sweep-j10, auto-work-sweep-j11, auto-work-sweep-j12, auto-work-sweep-j13, auto-work-sweep-j14, auto-work-sweep-j15, auto-work-sweep-j16, auto-work-sweep-j18, auto-work-sweep-j19, auto-work-sweep-j20]
2026-10-08 03:00:00 +00:00
ac282e33a3
Update job auto-work-swarm-g20 via box-ctl
2026-10-08 02:45:06 +00:00
8f1b51f7d1
Update job auto-work-swarm-g19 via box-ctl
2026-10-08 02:45:06 +00:00
d63aa979de
Update job auto-work-swarm-g18 via box-ctl
2026-10-08 02:45:05 +00:00
6a54320d69
Update job auto-work-swarm-g17 via box-ctl
2026-10-08 02:45:04 +00:00
d963a5104b
Update job auto-work-swarm-g16 via box-ctl
2026-10-08 02:45:02 +00:00
489f7335f6
Update job auto-work-swarm-g15 via box-ctl
2026-10-08 02:45:01 +00:00
fdd6ebd29d
Update job auto-work-swarm-g14 via box-ctl
2026-10-08 02:45:01 +00:00
82a0eb9b35
Update job auto-work-swarm-g13 via box-ctl
2026-10-08 02:45:00 +00:00
35f0be13cf
Update job auto-work-swarm-g12 via box-ctl
2026-10-08 02:44:59 +00:00
f497a026e3
Update job auto-work-swarm-g11 via box-ctl
2026-10-08 02:44:59 +00:00
2afac9542e
Update job auto-work-swarm-g10 via box-ctl
2026-10-08 02:44:58 +00:00
bd81568db1
Update job auto-work-swarm-g09 via box-ctl
2026-10-08 02:44:57 +00:00
fd0262cdb1
Update job auto-work-swarm-g08 via box-ctl
2026-10-08 02:44:56 +00:00
c59c2effe3
Update job auto-work-swarm-g06 via box-ctl
2026-10-08 02:44:56 +00:00
e50c505e16
Update job auto-work-swarm-g05 via box-ctl
2026-10-08 02:44:55 +00:00
8ee2913627
Update job auto-work-swarm-g04 via box-ctl
2026-10-08 02:44:54 +00:00
ef031890a9
Update job auto-work-swarm-g03 via box-ctl
2026-10-08 02:44:53 +00:00
operator
super
opm