0xkite
2bba117d2a
fix(supervisor): harden bundle projection admission
...
Preserve known non-skill metadata in projection commitments, reject duplicate and oversized bundles, close Codex exec grammar ambiguity, and keep raw-bundle requirements explicit. Keep layer-2 Sage materialization tests out of this layer.
Validated by the exact layer-1 build and 75-test suite; Apple lifecycle remains a separately skipped layer-2 concern.
Signed-off-by: 0xkite <me@hack4kitesdev.dev>
2026-08-29 09:02:55 -06:00
velinussage
4fe180a38f
Accept known non-skill Sage bundle kinds and place Codex exec flags after exec.
...
Mixed libraries were failing start because any non-skill entry aborted the
projection. The managed sandbox bypass also has to sit after `exec` so
headless Codex can run inside Glove.
2026-08-28 09:49:29 -04:00
0xkite
9ac024866f
Merge pull request #21 from 0xkite/fix/adoption-digest-order
...
fix(adoption): align snapshot digest ordering
2026-08-23 21:45:22 -06:00
0xkite
3ba6ce46a1
fix(adoption): align snapshot digest ordering
...
Revalidation walked immutable payloads depth-first while planning hashed a flat lexicographic path sequence. Sort bounded descriptor-safe records before hashing so valid adopted Pi packages retain their canonical identity.
2026-08-23 21:19:23 -06:00
0xkite
4ad346eb8d
Merge pull request #20 from 0xkite/test/managed-client-matrix
...
test: add managed client adoption matrix
2026-08-23 10:12:00 -06:00
0xkite
d2884cdef9
test: add managed client adoption matrix
2026-08-23 09:18:59 -06:00
0xkite
188ceb481a
Merge pull request #19 from 0xkite/fix/asan-contained-yams-lsan
...
test: contain synthetic child sanitizer behavior
2026-08-23 09:18:35 -06:00
0xkite
e3efe3bffc
fix(test): isolate contained leak sanitizer
2026-08-23 08:33:33 -06:00
0xkite
37078b0057
Merge pull request #18 from 0xkite/refactor/receipt-audit-handlers
...
refactor(control): extract receipt handlers
2026-08-15 06:42:23 -06:00
0xkite
41aba6af8f
refactor(control): extract receipt handlers
2026-08-15 05:39:18 -06:00
0xkite
ef1929a2f2
Merge pull request #17 from 0xkite/refactor/receipt-audit-wire
...
refactor(control): extract receipt wire
2026-08-15 05:32:42 -06:00
0xkite
3743c64a78
refactor(control): extract receipt wire
2026-08-15 04:35:12 -06:00
0xkite
d39c7edd5a
Merge pull request #16 from 0xkite/refactor/cli-policy-wire
...
refactor(host): extract policy wire
2026-08-15 04:32:24 -06:00
0xkite
119c5e98c3
refactor(host): extract policy wire
2026-08-15 03:30:48 -06:00
0xkite
ae6d11ffbc
Merge pull request #15 from 0xkite/refactor/cli-doctor-wire
...
refactor(host): extract doctor wire
2026-08-15 03:28:00 -06:00
0xkite
a4f6bcd38b
refactor(host): extract doctor wire
2026-08-15 02:29:54 -06:00
0xkite
6c0e1c5d90
Merge pull request #13 from 0xkite/refactor/runtime-snapshot-engine
...
refactor(host): extract runtime snapshot engine
2026-08-15 02:25:51 -06:00
0xkite
dd13e928c7
merge: update runtime snapshot branch
2026-08-15 01:23:24 -06:00
0xkite
80548d58a9
Merge pull request #14 from 0xkite/fix/ci-actionlint-version
...
fix(ci): restore preflight baseline
2026-08-15 01:20:21 -06:00
0xkite
06d6ebb37a
fix(linux): join bridge before closing
2026-08-15 00:21:07 -06:00
0xkite
f1d6a0897e
fix(fuzz): use portable session path
2026-08-14 23:41:43 -06:00
0xkite
43cc02de49
fix(fuzz): resolve runtime ABI library
2026-08-14 22:48:36 -06:00
0xkite
766ad205f4
fix(fuzz): order packaged runtime linkage
2026-08-14 22:07:04 -06:00
0xkite
ac59e58be8
fix(fuzz): retain runtime ABI library
2026-08-14 21:07:38 -06:00
0xkite
0c827bdebc
fix(fuzz): bridge Ubuntu runtime ABI
2026-08-14 20:13:48 -06:00
0xkite
3c538d0fcd
fix(ci): align Linux fuzzer C++ ABI
2026-08-14 19:33:55 -06:00
0xkite
ef7413232c
fix(test): scope leak tracing to parent
2026-08-14 18:40:38 -06:00
0xkite
e0faa4e6bc
fix(ci): isolate namespace test leak tracing
2026-08-14 17:50:56 -06:00
0xkite
fda02033a0
fix(ci): pin compatible macOS fuzzer LLVM
2026-08-14 17:03:08 -06:00
0xkite
a74f814f4f
fix(ci): validate complete fuzzer policies
2026-08-14 16:10:42 -06:00
0xkite
ad02703151
fix(ci): require complete designated initializers
2026-08-14 15:27:14 -06:00
0xkite
22b60726c2
fix(control): initialize validation session state
2026-08-14 14:45:39 -06:00
0xkite
7a141c55a8
ci: deduplicate pull request preflight
2026-08-14 14:17:17 -06:00
0xkite
434d86d9c2
fix(host): seal snapshots after publication
2026-08-14 14:16:33 -06:00
0xkite
79d04f5e9b
fix(control): restore hosted CI portability
2026-08-14 13:26:03 -06:00
0xkite
afa46f901a
style: apply pinned clang-format baseline
2026-08-14 13:20:48 -06:00
0xkite
44e69dbf1a
fix(ci): normalize actionlint version prefix
2026-08-14 13:18:19 -06:00
0xkite
0178744bb6
refactor(host): extract runtime snapshot engine
2026-08-14 13:16:37 -06:00
0xkite
c0049a7719
Merge pull request #11 from 0xkite/refactor/runtime-policy-wire
...
refactor(host): extract runtime_policy_wire structs into header
2026-08-14 12:31:03 -06:00
0xkite
41dc8b616a
refactor(host): extract runtime_policy_wire structs into header
...
Move the runtime_policy_wire structs (session_policy, egress_policy, secret_mount_policy, resource_profile, path_access, path_alias, projection_destination, runtime_template, pi_settings_discovery, pi_package_metadata, egress_target_policy) out of runtime_policy.cpp into runtime_policy_wire.hpp. runtime_policy.cpp 2,199 -> 2,109 lines. ctest green. (Also commits clang-format cleanup of session_registry_replay.hpp from #128.)
2026-08-14 12:30:47 -06:00
0xkite
8829e652d0
Merge pull request #10 from 0xkite/refactor/session-registry-replay-module
...
refactor(control): extract session registry replay lookups into module
2026-08-14 12:28:08 -06:00
0xkite
0d4e6f2bf5
refactor(control): extract session registry replay lookups into module
...
Move start_reservation_from_record, the *_record_from_wire converters, find_*_replay_locked, and append_record_locked out of session_registry.cpp into session_registry_replay.{hpp,cpp}, completing #128 . session_registry.cpp 2,641 -> 2,092 lines (was 4,387). Replay semantics preserved (ctest green).
2026-08-14 12:27:52 -06:00
0xkite
f13ebbaa00
Merge pull request #9 from 0xkite/refactor/session-registry-recovery-module
...
refactor(control): extract session registry recovery state machine
2026-08-14 12:24:46 -06:00
0xkite
c92dafe380
refactor(control): extract session registry recovery state machine
...
Move initialize_empty, read_persisted_record, accept_recovered_record, recover, verify_identity, and rollback_append out of session_registry.cpp into session_registry_recovery.{hpp,cpp}. session_registry.cpp 3,096 -> 2,641 lines. Recovery semantics preserved (ctest green).
2026-08-14 12:24:29 -06:00
0xkite
5c160a02e7
Merge pull request #8 from 0xkite/refactor/session-registry-io-helpers
...
refactor(control): move session registry io + conversion helpers into impl header
2026-08-14 12:21:20 -06:00
0xkite
6e5e150a08
refactor(control): move session registry io + conversion helpers into impl header
...
Move valid_identifier, no_process_identity, no_resource_identity, process_identity_from_wire, read_at, write_at, sync_descriptor, inspect_file, capture_identity, open_registry, public_record, and valid_record_shape out of session_registry.cpp into session_registry_impl.hpp (inline, in glove::control). Exposes the shared helpers needed by the recovery module. session_registry.cpp 3,559 -> 3,096 lines. ctest green.
2026-08-14 12:20:37 -06:00
0xkite
a20bcaede9
Merge pull request #7 from 0xkite/refactor/session-registry-impl-header
...
refactor(control): extract session registry internal state into impl header
2026-08-14 12:14:39 -06:00
0xkite
8d639d5348
refactor(control): extract session registry internal state into impl header
...
Move the on-disk constants, unique_fd, opened_registry, registry_identity, error helpers, and session_registry::implementation struct out of session_registry.cpp into session_registry_impl.hpp (internal header). This exposes the internal state needed by the recovery/replay module. session_registry.cpp 3,638 -> 3,559 lines. ctest green.
2026-08-14 12:14:22 -06:00
0xkite
bce4553f40
Merge pull request #6 from 0xkite/refactor/session-registry-recovery-structs
...
refactor(control): extract session registry replay lookup structs
2026-08-14 12:08:41 -06:00
0xkite
91299dacf2
style(control): fix include ordering in session_registry_wire.hpp
2026-08-14 12:08:22 -06:00
