c79382b1c1
feat(work): add auto-heal engine, chat filtering, and CDP revival to box work
2026-10-09 19:11:28 -04:00
b7a73234fc
feat(work): add pre-flight health gate for Hatch, Restore, and Git Config
2026-10-09 19:01:40 -04:00
35c59bfcb2
feat(cli): add box work command for unified worker signals and task orchestration
2026-10-09 18:57:16 -04:00
ef2a4c419a
feat(netns): bwrap-contained chrome + proton wrapper
...
- netvm-chrome.sh --contained: bwrap fs jail inside netns (profile
home only + vault ro at /tmp/vault, Chromium sandbox stays on)
- netvm-proton.sh: run proton-cli as the profile identity in netns
+ jail (config dir + static binary, PROTON_NO_INPUT=1)
2026-10-08 13:23:06 -04:00
ab7d1215e0
feat(netvm): add waypipe support and cgroup/netns wrapping for chromebox
2026-10-05 13:41:05 -04:00
4b92277686
muse-chat-api: add navigate command for thread URLs
2026-10-03 10:21:31 -04:00
b061a53c6d
muse-chat-api.py: CDP chat client (send/messages/wait) for smoke headless
2026-10-03 10:19:22 -04:00
8d11925fe1
enforce WireGuard persistent-keepalive 25 (NAT expiry fix)
2026-10-03 10:01:13 -04:00
94e1e94062
fast-path node-up when tunnel already passes traffic
2026-10-03 09:40:48 -04:00
aff5683165
NetVM: replace resolv.conf symlink with real file (bwrap-safe DNS fix)
2026-10-03 01:48:33 -04:00
1d79a69cec
NetVM: netvm-chrome.sh auto-detects Wayland display
2026-10-03 01:34:12 -04:00
835ed3cbe9
NetVM: netvm-accounts.sh operator view + fleet accounts
2026-10-03 01:24:11 -04:00
1349e8bb7b
NetVM: /etc/netvm 711 so operators can stat (not read) identities
2026-10-03 01:06:00 -04:00
9f76e30ff9
NetVM: agent-friendly exec primitive (local + fleet)
2026-10-03 01:05:35 -04:00
bded49d6fd
NetVM: topology shows CDP relay status
2026-10-03 01:02:25 -04:00
dba2375ee1
NetVM: CDP via userspace relay (REDIRECT to loopback did not establish)
2026-10-03 01:00:37 -04:00
e6b8cb2391
NetVM: topology shows REDIRECT counters
2026-10-03 00:59:53 -04:00
63d1d10055
NetVM: never NAT host<->netvm traffic (fixes host->netns CDP)
2026-10-03 00:58:23 -04:00
921e45566a
NetVM: topology shows full CDP bridge detail
2026-10-03 00:57:43 -04:00
0b716c9799
NetVM: topology reports CDP bridge rules
2026-10-03 00:57:11 -04:00
6984ec4df0
NetVM: CDP bridge — REDIRECT veth IP:CDP_PORT to loopback in netns
2026-10-03 00:55:39 -04:00
fa48228ef4
NetVM: CDP on by default (deterministic port), --headless mode, netvm-cdp.sh helper
2026-10-03 00:53:04 -04:00
b86b6fa4b5
NetVM: 1:1 profile:node mapping — hashed iface names, netvm-enter + netvm-chrome launcher
2026-10-03 00:43:08 -04:00
ecb9c50f86
NetVM: harden up/down against zombie-netns interface strays
2026-10-03 00:37:43 -04:00
c3d85377ba
NetVM: topology also shows host links and netns list
2026-10-03 00:37:10 -04:00
2f0ae6f292
NetVM: topology egress check via v4 trace endpoint
2026-10-03 00:36:42 -04:00
6edeb09c5a
NetVM: topology shows handshake, routes, NAT
2026-10-03 00:35:39 -04:00
fedfdeacb0
NetVM: strip all wg-quick-only keys for wg setconf
2026-10-03 00:34:48 -04:00
33233ccba0
NetVM: veth+NAT plumbing for isolated netns (endpoint bypass, no routing loop)
2026-10-03 00:34:43 -04:00
6144e6d58e
NetVM: node-up skips interface move when already in netns
2026-10-03 00:33:43 -04:00
9fb2990d73
NetVM: fix wg setconf to take config filename (not stdin)
2026-10-03 00:33:37 -04:00
8ba8e3d7ec
NetVM: sudoers file sorts last (zz-) so NOPASSWD beats blanket grants
2026-10-03 00:17:41 -04:00
626918ff94
NetVM: fleet control script (netvm-fleet.sh) for operators
2026-10-03 00:16:42 -04:00
324d1c654f
NetVM: human-run identity script (netvm-new-identity.sh)
2026-10-03 00:10:52 -04:00
e20f6cf665
NetVM: edge provisioning script (sudoers allowlist for operator)
2026-10-03 00:05:14 -04:00
0f2a87b08a
NetVM: per-node Warp egress design + lifecycle scripts
2026-10-03 00:01:09 -04:00
operator