operator-main 0d25696860 docs: exec-server -> exec-constrained stale references (bl:8444) ...

- docs/TOKEN_POLICY.md: rewritten for exec-constrained.py (named ops,
  -n exec-constrained, {op,args,ts,nonce} envelope; rotate endpoint gone)
- bin/chromebox-gateway.py: exec-server naming -> shared exec token files
- docs/DM-HTTPS-DESIGN-646.md + docs/DM-OVER-HTTPS-DESIGN.md: port
  8443->8444, namespace exec-server->exec-constrained, envelope updated,
  cloudflared port fix marked done 2026-10-04

2026-10-04 13:04:45 +00:00

..

__pycache__

Remove wrongly-specced opp-dm.py and dev-dm.py; dm.py is the headless DM tool

2026-10-03 20:34:33 +00:00

accounts-health.py

Remove wrongly-specced opp-dm.py and dev-dm.py; dm.py is the headless DM tool

2026-10-03 20:34:33 +00:00

accounts-health.sh

Remove wrongly-specced opp-dm.py and dev-dm.py; dm.py is the headless DM tool

2026-10-03 20:34:33 +00:00

agent-health.sh

agent-health.sh: Verify CDP port liveness, not just API success\n\nThe watchdog only checked if the API responded, missing zombie\nbrowsers (process alive but CDP not listening). Now explicitly\nchecks via ss -tln in the netns before trying the API.\nAlso: kill by exact PIDs instead of unreliable pkill patterns,\nand warn if port still bound after kill.

2026-10-04 02:23:20 +00:00

box-chat-cdp.py

bin/box-chat.py + box-chat-cdp.py — read-only bl helper for Box thread oversight

2026-10-04 04:31:39 +00:00

box-chat.py

bin/box-chat.py + box-chat-cdp.py — read-only bl helper for Box thread oversight

2026-10-04 04:31:39 +00:00

box-ctl.py

Add box-ctl.py: allowlisted bl helper for Box API mutations\n\n- 14 actions: timer-list/status/create/delete/start/stop/enable/disable,\n job-list/get/put/delete/trigger, notify\n- Name regex ^[a-z0-9-]{1,64}$, full job schema validation per design §6\n- Cron→OnCalendar conversion + systemd-analyze verification\n- Fixed unit templates (only validated name interpolated)\n- Git commits on job put/delete; audit log to box-ctl.jsonl\n- No shell=True, no string interpolation into commands\n- Tested: full lifecycle on bl (boxtest job)

2026-10-04 04:02:19 +00:00

bridge.py

bridge.py: front-door to muse.ai metadata bridge CLI

2026-10-03 18:59:52 +00:00

cdp_queue.py

Add cdp_queue.py: per-browser CDP operation queue

2026-10-04 13:04:24 +00:00

cdp-relay-watchdog.sh

Watchdog upgrades: stage-specific logging + new CDP relay watchdog

2026-10-04 12:40:56 +00:00

chat-state-check.py

chat-state tap: per-node main+sidechat reporter for box

2026-10-04 01:59:00 +00:00

chat-state-report.py

chat-state tap: per-node main+sidechat reporter for box

2026-10-04 01:59:00 +00:00

chromebox-gateway.py

docs: exec-server -> exec-constrained stale references (bl:8444)

2026-10-04 13:04:45 +00:00

chromebox-watchdog.sh

Watchdog upgrades: stage-specific logging + new CDP relay watchdog

2026-10-04 12:40:56 +00:00

dm-listener.py

dm-listener: auto-route 646 Message commands

2026-10-03 20:00:43 +00:00

dm-sign.sh

DM: signed-DM pipeline (dm-sign.sh) + attribution unification + honest docs

2026-10-04 02:31:37 +00:00

dm.py

DM: signed-DM pipeline (dm-sign.sh) + attribution unification + honest docs

2026-10-04 02:31:37 +00:00

job-dispatch.py

UUID-based sidechat reuse for heartbeat\n\n- Add url command to muse-chat-api.py\n- Dispatcher: reuse_key -> thread UUID mapping in job-sidechats.json\n- Capture UUID after first send, reuse on subsequent runs\n- Fixes multi-spawn bug (was matching by auto-generated title)

2026-10-04 04:03:28 +00:00

meta-ac-snapshot.py

Remove wrongly-specced opp-dm.py and dev-dm.py; dm.py is the headless DM tool

2026-10-03 20:34:33 +00:00

meta-acct.py

meta-acct: Accounts Center read API (list-linked, security-status, login-activity)\n\nImplements the read ops from META-ACCOUNTS-API.md via the agent browser\nsession. Key finding: phone-OTP login leaves a full Meta session -\naccountscenter.meta.com loads without redirect.\n\nAlso: 646 node fully registered (warp-646, CDP 9430, active).

2026-10-03 19:20:47 +00:00

meta-acct.sh

meta-acct: Accounts Center read API (list-linked, security-status, login-activity)\n\nImplements the read ops from META-ACCOUNTS-API.md via the agent browser\nsession. Key finding: phone-OTP login leaves a full Meta session -\naccountscenter.meta.com loads without redirect.\n\nAlso: 646 node fully registered (warp-646, CDP 9430, active).

2026-10-03 19:20:47 +00:00

meta-creds.sh

meta-creds.sh: operator CLI for Meta credential store

2026-10-03 14:48:24 +00:00

muse-auth.py

Add holdings logging to muse-auth.py (log_holdings/get_holdings, logs/auth-holdings.log)

2026-10-03 22:32:54 +00:00

muse-chat-api.py

UUID-based sidechat reuse for heartbeat\n\n- Add url command to muse-chat-api.py\n- Dispatcher: reuse_key -> thread UUID mapping in job-sidechats.json\n- Capture UUID after first send, reuse on subsequent runs\n- Fixes multi-spawn bug (was matching by auto-generated title)

2026-10-04 04:03:28 +00:00

muse-signin.py

multi-account selection: --account-name hint, exit 3 NEEDS_HUMAN

2026-10-03 21:30:32 +00:00

netvm-accounts.sh

NetVM: netvm-accounts.sh operator view + fleet accounts

2026-10-03 01:24:11 -04:00

netvm-cdp-relay.py

NetVM: CDP via userspace relay (REDIRECT to loopback did not establish)

2026-10-03 01:00:37 -04:00

netvm-cdp.sh

NetVM: CDP on by default (deterministic port), --headless mode, netvm-cdp.sh helper

2026-10-03 00:53:04 -04:00

netvm-chrome.sh

NetVM: netvm-chrome.sh auto-detects Wayland display

2026-10-03 01:34:12 -04:00

netvm-docs-server.py

Remove wrongly-specced opp-dm.py and dev-dm.py; dm.py is the headless DM tool

2026-10-03 20:34:33 +00:00

netvm-enter-inner.sh

NetVM: replace resolv.conf symlink with real file (bwrap-safe DNS fix)

2026-10-03 01:48:33 -04:00

netvm-enter.sh

NetVM: 1:1 profile:node mapping — hashed iface names, netvm-enter + netvm-chrome launcher

2026-10-03 00:43:08 -04:00

netvm-exec.sh

NetVM: agent-friendly exec primitive (local + fleet)

2026-10-03 01:05:35 -04:00

netvm-fleet.sh

NetVM: netvm-accounts.sh operator view + fleet accounts

2026-10-03 01:24:11 -04:00

netvm-names.sh

bulk onboarding step 1: netvm-provision-node.sh + CDP_PORT_OVERRIDE

2026-10-03 20:54:56 +00:00

netvm-new-identity.sh

NetVM: human-run identity script (netvm-new-identity.sh)

2026-10-03 00:10:52 -04:00

netvm-node-down.sh

NetVM: CDP via userspace relay (REDIRECT to loopback did not establish)

2026-10-03 01:00:37 -04:00

netvm-node-up.sh

enforce WireGuard persistent-keepalive 25 (NAT expiry fix)

2026-10-03 10:01:13 -04:00

netvm-provision-edge.sh

NetVM: /etc/netvm 711 so operators can stat (not read) identities

2026-10-03 01:06:00 -04:00

netvm-provision-node.sh

bulk onboarding step 1: netvm-provision-node.sh + CDP_PORT_OVERRIDE

2026-10-03 20:54:56 +00:00

netvm-reaper.sh

netvm-reaper.sh: reap stale headless browsers

2026-10-03 15:46:35 +00:00

netvm-registry.py

propagation: single registry drives all node references

2026-10-03 21:28:36 +00:00

netvm-topology.sh

netvm-topology.sh: relay check by connectivity, not pidfiles

2026-10-04 12:41:40 +00:00

netvm-verify.sh

NetVM: per-node Warp egress design + lifecycle scripts

2026-10-03 00:01:09 -04:00

onboard-driver.py

multi-account selection: --account-name hint, exit 3 NEEDS_HUMAN

2026-10-03 21:30:32 +00:00

p2p-relay.py

p2p-relay: add watermark to prevent duplicates

2026-10-03 19:25:42 +00:00

rate_limiter.py

Add shared rate_limiter.py module\n\nModular rate limiter any .py script can use:\n from rate_limiter import rate_limit_wait\n rate_limit_wait(agent)\n\nToken bucket per agent: 1 op/3s sustained, burst 5, max 20/min.\nState in /tmp/netvm-rate-limit.json.

2026-10-04 02:40:56 +00:00

sidechat_manager.py

Fix sidechat selectors from DOM investigation\n\n- + button: [data-testid=hatch-chat-compose] (SVG, no text)\n- Panel: [data-testid=hatch-chat-switcher-trigger] (idempotent)\n- ensure_sidebar: check + button presence, not text (was false-positive\n on DM text containing Side chats)

2026-10-04 03:36:06 +00:00

thread-listener.py

thread-listener: auto-execute 646 THREAD commands

2026-10-03 19:43:40 +00:00