Commit Graph

Select branches

Hide Pull Requests

agent-coordination-mvp

docs/agent-waits

master

sidecar-app-store

Mono Color

• 7a5cf89819 port the DNS section, as a choice rather than a decision pastilhasandClaude Opus 5 2026-08-12 18:45:24 +00:00
• 192293cdca offer to add an ssh key even when one already exists pastilhasandClaude Opus 5 2026-08-12 18:42:58 +00:00
• 9591f917f5 port ssh keys and hardening as one section, and make the hardening actually work pastilhasandClaude Opus 5 2026-08-12 18:39:23 +00:00
• b1cc916258 detect root by uid, not by the name root pastilhasandClaude Opus 5 2026-08-12 18:36:16 +00:00
• d9d4085033 warn against working as root at the username prompt pastilhasandClaude Opus 5 2026-08-12 18:33:32 +00:00
• c0eb3e3a85 create the user account first, and fix the sudoers filename bug that found pastilhasandClaude Opus 5 2026-08-12 18:31:29 +00:00
• fbb90c917d default the username to whoever ran sudo, and look up their real home pastilhasandClaude Opus 5 2026-08-12 18:27:46 +00:00
• 3fb0e5c887 port the user account section, and stop clobbering files in the home pastilhasandClaude Opus 5 2026-08-12 18:22:40 +00:00
• 458510a0a8 scope sleep to homelab, and port the boot hang fix pastilhasandClaude Opus 5 2026-08-12 18:17:17 +00:00
• c87127ff93 port the sleep and suspend section pastilhasandClaude Opus 5 2026-08-12 18:11:16 +00:00
• 6ffd3534bd do not offer the ballast on a dev machine, and route its alerts through one place pastilhasandClaude Opus 5 2026-08-12 18:09:03 +00:00
• d19dc5a92a ask where the ballast goes and how big it is pastilhasandClaude Opus 5 2026-08-12 18:05:42 +00:00
• d4b9b7b334 ask where Officer should be installed, in pre-flight pastilhasandClaude Opus 5 2026-08-12 18:02:28 +00:00
• 6947284f1b check the root filesystem is actually using the whole drive pastilhasandClaude Opus 5 2026-08-12 17:59:38 +00:00
• 9b0e05bfd8 add three resource-pressure sections, each asked rather than assumed pastilhasandClaude Opus 5 2026-08-12 17:54:48 +00:00
• 716a6e2750 port the swap section, and size it against the disk pastilhasandClaude Opus 5 2026-08-12 17:48:45 +00:00
• b5948f9673 refresh the package index in pre-flight, not inside a skippable step pastilhasandClaude Opus 5 2026-08-12 17:45:19 +00:00
• 6480788979 port the timezone section pastilhasandClaude Opus 5 2026-08-12 17:43:20 +00:00
• 163f8d5899 port the locale section pastilhasandClaude Opus 5 2026-08-12 17:41:49 +00:00
• 1beb357f2e drop the ominous wording from the system update prompt pastilhasandClaude Opus 5 2026-08-12 17:39:16 +00:00
• 454faf5406 list what the system update would actually upgrade pastilhasandClaude Opus 5 2026-08-12 17:39:00 +00:00
• f896d4882f one section per concern, each announced and confirmed before it acts pastilhasandClaude Opus 5 2026-08-12 17:37:31 +00:00
• a5ef9f7662 report what a section actually installed, not what it was asked for pastilhasandClaude Opus 5 2026-08-12 17:34:34 +00:00
• dd655577e3 make the machine-role question require an answer pastilhasandClaude Opus 5 2026-08-12 17:32:41 +00:00
• 5cb243eed9 port into a clean script instead of editing the original in place pastilhasandClaude Opus 5 2026-08-12 17:30:29 +00:00
• 7622239949 split the upstream binaries out of the package section pastilhasandClaude Opus 5 2026-08-12 17:28:46 +00:00
• bba6d854bc stop the run at the end of the rewritten sections pastilhasandClaude Opus 5 2026-08-12 17:25:38 +00:00
• dbdef23d29 install what is missing and keep what is there, per package manager pastilhasandClaude Opus 5 2026-08-12 17:19:46 +00:00
• 41ff8030e9 ask what the machine is for, once, in pre-flight pastilhasandClaude Opus 5 2026-08-12 17:11:47 +00:00
• 34bb8fc22a put the superseded setup scripts in setup-old, and repair what the move broke pastilhasandClaude Opus 5 2026-08-12 17:07:28 +00:00
• 44141faf0a split machine-setup into an entry point and a base library pastilhasandClaude Opus 5 2026-08-12 17:02:15 +00:00
• dda214ffb0 detect the operating system before any step runs pastilhasandClaude Opus 5 2026-08-12 16:55:06 +00:00
• 483bb15d8a vendor the ubuntu machine provisioning script, verbatim pastilhasandClaude Opus 5 2026-08-12 16:54:47 +00:00
• 315073cf3b move the pm2 ecosystem files into ecosystem-files/ for reference pastilhasandClaude Opus 5 2026-08-12 16:54:35 +00:00
• 79da78008a turn the field report into something an agent can follow pastilhasandClaude Opus 5 2026-08-12 16:52:27 +00:00
• 015e280e5c document how to launch the watcher, since the mechanism is what did not transfer pastilhasandClaude Opus 5 2026-08-12 16:44:20 +00:00
• e9d0261e87 a field report on two agents working one branch pastilhasandClaude Opus 5 2026-08-12 16:37:48 +00:00
• 2eedbcda54 bind nginx proxy manager to the tailscale address pastilhasandClaude Opus 5 2026-08-12 07:24:30 +02:00
• 4e404f17c8 split the optional host dependencies out of setup.sh pastilhasandClaude Opus 5 2026-08-12 07:24:19 +02:00
• cec8fbe57e the acl check could not fail, because sudo drops DATA_PATH pastilhasandClaude Opus 5 2026-08-12 04:34:30 +00:00
• 76cd7c20bf sever the ACL as well as the ownership pastilhasandClaude Opus 5 2026-08-12 04:28:59 +00:00
• a2f63dc534 severing ownership does not sever the ACL, and neither the spec nor the checker said so pastilhasandClaude Opus 5 2026-08-12 04:24:31 +00:00
• 46799dada8 deprovision a member's linux account when the platform account goes pastilhasandClaude Opus 5 2026-08-12 04:19:50 +00:00
• f34d7fef70 merge: a checker for the deprovision spec, and the trap that makes it pass for free pastilhas 2026-08-12 04:11:38 +00:00
• 35715546e2 a checker for the deprovision spec, and the trap that makes it pass for free pastilhasandClaude Opus 5 2026-08-12 04:05:48 +00:00
• f5f509a99d scripts/setup is the initial install, nothing else pastilhasandClaude Opus 5 2026-08-12 04:05:06 +00:00
• 9c353f5f0d move host setup into scripts/setup/ pastilhasandClaude Opus 5 2026-08-12 04:02:19 +00:00
• 37adc65a12 delete the spent one-shot scripts pastilhasandClaude Opus 5 2026-08-12 03:58:13 +00:00
• a6acfea9a6 carry the two threads todo.md was missing pastilhas 2026-08-12 03:52:29 +00:00
• a730fc0fe0 keep the three open threads the comms channel was holding pastilhas 2026-08-12 03:52:11 +00:00
• dcaee2fc95 keep the three open threads the COMMS channel was holding pastilhasandClaude Opus 5 2026-08-12 02:06:57 +00:00
• 7040536f1f merge sidecar-app-store: per-user Claude pastilhasandClaude Opus 5 2026-08-12 01:58:14 +00:00
• c73ffed806 close the comms channel, keep what was still open sidecar-app-store pastilhasandClaude Opus 5 2026-08-12 01:58:00 +00:00
• ec1997fd0e a chat with no chosen directory runs in the caller's own home pastilhasandClaude Opus 5 2026-08-12 01:54:19 +00:00
• 6c84c74c91 give a member a chat cwd they can actually enter pastilhasandClaude Opus 5 2026-08-12 01:44:43 +00:00
• 661b3d761f 42: the first member turn ran clean, and its cwd is unreachable by the member pastilhasandClaude Opus 5 2026-08-12 01:43:01 +00:00
• 2a8f0049a3 handle OSC 52, so "press c to copy" reaches the user's clipboard pastilhasandClaude Opus 5 2026-08-12 01:34:37 +00:00
• 532ad15ac1 drop the import the gate left behind pastilhasandClaude Opus 5 2026-08-12 01:12:35 +00:00
• c59df4f866 let members use chat pastilhasandClaude Opus 5 2026-08-12 01:12:00 +00:00
• ba64a412f2 40: nothing on the list is actionable by either agent pastilhasandClaude Opus 5 2026-08-12 01:06:42 +00:00
• 53f36f07e4 adopt host's terminator: the list, not the guess pastilhasandClaude Opus 5 2026-08-12 01:05:55 +00:00
• 0947d31330 38: the privilege drop is proven on a real member account pastilhasandClaude Opus 5 2026-08-12 01:04:25 +00:00
• c5522700ff compare the binary as a string, and prove the uid by file ownership pastilhasandClaude Opus 5 2026-08-12 01:03:17 +00:00
• 85249a2756 36: the privilege drop works, and the binary check refuses every member turn pastilhasandClaude Opus 5 2026-08-12 01:01:13 +00:00
• 9bab67aca5 test the privilege drop without lifting a gate pastilhasandClaude Opus 5 2026-08-12 00:57:18 +00:00
• bae3ebf7ba 34: the alternation needs a stop condition, and the unblock order is circular pastilhasandClaude Opus 5 2026-08-12 00:55:22 +00:00
• e7346c8790 reply even when there is nothing to say pastilhasandClaude Opus 5 2026-08-12 00:54:06 +00:00
• 584074c845 32: all three callers fixed, nothing left passing an email pastilhasandClaude Opus 5 2026-08-12 00:51:52 +00:00
• 1575df3f78 stop building cwds out of an email address pastilhasandClaude Opus 5 2026-08-12 00:51:09 +00:00
• 2bb8128619 30: resolveBaseCwd's outside callers still pass an email pastilhasandClaude Opus 5 2026-08-12 00:50:10 +00:00
• 95951fbe5a resolve transcripts and cwd against the caller's home, not the owner's pastilhasandClaude Opus 5 2026-08-12 00:48:09 +00:00
• 519109a342 28: agreed, with one correction — the backstop is not waiting on a reprovision pastilhasandClaude Opus 5 2026-08-12 00:41:37 +00:00
• a3431abeac stop before the history layer pastilhasandClaude Opus 5 2026-08-12 00:40:46 +00:00
• 4d96083c20 26: the three-way identity holds pastilhasandClaude Opus 5 2026-08-12 00:39:47 +00:00
• 6aeb304f56 never spell "I don't know whose turn this is" as "the owner" pastilhasandClaude Opus 5 2026-08-12 00:38:39 +00:00
• 92e014c19f 24: resolveMemberRun answers "I don't know" with the owner's identity pastilhasandClaude Opus 5 2026-08-12 00:34:48 +00:00
• 311b2ea55c populate member from the authenticated socket pastilhasandClaude Opus 5 2026-08-12 00:33:03 +00:00
• b646140dbf 22: the backstop is in the right process, and Bun honours it pastilhasandClaude Opus 5 2026-08-12 00:25:29 +00:00
• 8c4f150c15 stop one conversation's transport hiccup from killing every session pastilhasandClaude Opus 5 2026-08-12 00:23:20 +00:00
• 0bc7858302 20: scoping verified, stop before deprovisionOsAccount, and the sidecar is crashing pastilhasandClaude Opus 5 2026-08-12 00:20:18 +00:00
• d59adbf1f2 scope the six sessionKey commands to their caller pastilhasandClaude Opus 5 2026-08-12 00:17:53 +00:00
• 9833822625 pass the member's gid instead of reusing their uid pastilhasandClaude Opus 5 2026-08-12 00:13:50 +00:00
• 4ef99bf3e5 16: storage fix is right, but it group-owns docker storage by uid pastilhasandClaude Opus 5 2026-08-12 00:11:03 +00:00
• 893130940e create docker's storage ourselves, so the strip is not a race pastilhasandClaude Opus 5 2026-08-12 00:08:55 +00:00
• e99949b1ac 14: claude installs and runs for a member, first time anywhere pastilhasandClaude Opus 5 2026-08-12 00:07:02 +00:00
• ef000aaf51 pipe the installer into bash, and stop inventing a root-owned .local pastilhasandClaude Opus 5 2026-08-11 23:46:59 +00:00
• 52b021bbe2 12: first real provision failed three ways, and two are repeats pastilhasandClaude Opus 5 2026-08-11 23:44:03 +00:00
• 7cb402b25a chat sessions record whose they are, and refuse a mismatched caller pastilhasandClaude Opus 5 2026-08-11 23:33:08 +00:00
• 4da82e7f91 spec deprovisionOsAccount, from a real teardown rather than from reading the code pastilhasandClaude Opus 5 2026-08-11 23:26:23 +00:00
• 73c359fd5f 10 (amended again): chat sessions have no identity, and it should block the gates pastilhasandClaude Opus 5 2026-08-11 23:16:50 +00:00
• 80e1a746c0 10 (amended): the teardown is done, and terminate-user does not reap everything pastilhasandClaude Opus 5 2026-08-11 23:11:44 +00:00
• d051aff4e0 10: operations done, chmodSync proven on a real install, green teardown warning pastilhasandClaude Opus 5 2026-08-11 23:04:55 +00:00
• 07ab3f9e7a 08: chmodSync verified, and the box now repairs itself at next bootstrap pastilhasandClaude Opus 5 2026-08-11 22:46:53 +00:00
• 3e0daee611 chmod the mcp config, because writeFileSync's mode never fires on it pastilhasandClaude Opus 5 2026-08-11 22:45:34 +00:00
• fe30164452 06: writeFileSync's mode is ignored on an existing file, so the 0600 never fires pastilhasandClaude Opus 5 2026-08-11 22:44:07 +00:00
• df4503180f stop handing a member's turn the owner's mcp config, and close the file pastilhasandClaude Opus 5 2026-08-11 22:42:22 +00:00
• fe7bd49bc7 04: mcp-config is not branched, and it points at a world-readable owner token pastilhasandClaude Opus 5 2026-08-11 22:40:33 +00:00
• fbabc22ed7 wire the member branch into the SDK spawn, still unreachable pastilhasandClaude Opus 5 2026-08-11 22:27:45 +00:00
• c15bd082b5 02: the probe fix verified live, and the owner has not ruled on wire-first pastilhasandClaude Opus 5 2026-08-11 22:25:30 +00:00
• baa2d29fa4 read the probe off stdout by position, and renumber comms pastilhasandClaude Opus 5 2026-08-11 22:23:27 +00:00