Commit Graph

  • 2fe8a498d2 ci: retrigger NativeAOT pipeline on updated runner [CI] justme 2026-10-10 06:04:30 -07:00
  • 15f159ab39 ci: raise WSL runner PID budget for NativeAOT [CI] justme 2026-10-10 06:03:44 -07:00
  • 010576bc2a ci: document cached Buildah network helpers [CI] justme 2026-10-10 05:57:43 -07:00
  • c2ab9eab3b ci: install Buildah network helpers in runner [CI] justme 2026-10-10 05:53:01 -07:00
  • a77f12545b ci: initialize isolated Buildah auth files [CI] justme 2026-10-10 05:51:13 -07:00
  • 9919de53d3 ci: keep WSL agent online for pipelines [CI] justme 2026-10-10 05:48:48 -07:00
  • 1975253beb ci: bake cached toolchain into Podman agent and fix nested Buildah [CI] justme 2026-10-10 05:44:21 -07:00
  • 2e1dbcf4ce ci: use cache path for NuGet scratch [CI] justme 2026-10-10 04:40:09 -07:00
  • a1101424d2 ci: add .NET 10 NativeAOT AotAnywhere builder [CI] justme 2026-10-10 04:36:34 -07:00
  • 0d08e90dab perf(tests): isolate network E2E and await QUIC cleanup justme 2026-10-10 19:33:36 +08:00
  • 047df83a84 ci: queue fresh dev image pipeline [CI] [SKIP TESTS] justme 2026-10-10 19:05:23 +08:00
  • 145660f0a2 ci: retrigger dev image pipeline [CI] [SKIP TESTS] justme 2026-10-10 19:03:13 +08:00
  • a1b8af8509 ci: bound and cancel Buildah commands [CI] [SKIP TESTS] justme 2026-10-10 17:30:55 +08:00
  • a3b9671d62 ci: rotate Buildah storage after cache mount failure [CI] [SKIP TESTS] justme 2026-10-10 16:43:42 +08:00
  • e49e701a73 ci: restore Zig toolset for clean AOT builds [CI] [SKIP TESTS] justme 2026-10-10 16:32:04 +08:00
  • 7512ae0f00 ci: build ARM64 dev images with AotAnywhere [CI] [SKIP TESTS] justme 2026-10-10 16:16:17 +08:00
  • da353d239a ci: isolate caches and trust ARM Alpine keys [CI] [SKIP TESTS] justme 2026-10-10 15:51:10 +08:00
  • 49812e94c0 ci: cross-build dev images with AotAnywhere [CI] [SKIP TESTS] justme 2026-10-10 15:45:45 +08:00
  • 376020fe34 fix(ci): isolate per-arch node build workspaces [CI] [SKIP TESTS] justme 2026-10-10 15:27:55 +08:00
  • d9938e4b96 ci: build node ARM64 images in parallel [CI] [SKIP TESTS] justme 2026-10-10 15:22:23 +08:00
  • 8b3abd5b22 feat(ci): publish ARM64 development node images [CI] [SKIP TESTS] justme 2026-10-10 15:19:30 +08:00
  • 32507fcb4d docs(protocol): document stopping and Probe retries [CI] [SKIP TESTS] justme 2026-10-10 14:34:18 +08:00
  • 85c2043f2f feat(display): explain QUIC state and compact panels [CI] justme 2026-10-10 14:17:43 +08:00
  • efb50d0efe feat(admin): show Probe status and retry links justme 2026-10-10 14:17:19 +08:00
  • 97ab3cc740 feat(runtime): track node lifecycle and QUIC link state justme 2026-10-10 14:16:57 +08:00
  • 238046d959 test(backend): parallelize isolated fixtures [CI] [SKIP TESTS] justme 2026-10-10 04:54:18 +08:00
  • 77d8404f59 ci(test): load MsQuic for Linux tests [CI] justme 2026-10-10 04:11:55 +08:00
  • 29d998bc94 build(quic): bundle Linux runtime libraries [CI] justme 2026-10-10 04:01:24 +08:00
  • e2e5e437cb docs(deploy): document QUIC runtime and port requirements [CI] justme 2026-10-10 03:00:47 +08:00
  • b25b111134 feat(display): add compact QUIC and host health views justme 2026-10-10 03:00:23 +08:00
  • b964dc2bbc feat(quic): replace probe UDP data plane with QUIC datagrams justme 2026-10-10 02:59:56 +08:00
  • 4609048865 docs: merge the API guidelines into api.md; drop the one-off trial reports; fix the node-update description (Quadlet restart vs host updater); tidy TODO [CI] justme 2026-10-09 22:29:42 +08:00
  • 900bbde46a ci: run the slow e2e tests after the image builds (a parallel run got the backend AOT compile OOM-killed) justme 2026-10-09 15:24:07 +08:00
  • 2d31bd091e ci: gate on the fast tests (about 20s); slow end-to-end tests run in parallel with the image build [CI] justme 2026-10-09 14:30:38 +08:00
  • c9c21f8056 ci: fix the failed-test retry (wildcard filter, ignore zero-test exit code, two attempts) [CI] justme 2026-10-09 14:09:54 +08:00
  • b2b63c065d ci: sync packaging and docs into the test cache; retry failed tests once [CI] justme 2026-10-09 14:02:42 +08:00
  • 0873acf66a fix(link): ride out short path blackouts: 30s handshake, 180s idle limit, 90s keepalive, faster probe reconnect [CI] justme 2026-10-09 13:46:59 +08:00
  • be04045c8c ci: incremental backend tests, cached web dependencies, web build in parallel with the tests justme 2026-10-09 13:39:55 +08:00
  • 006814823b docs: main-only workflow, CI-filled versions, dev version format [CI] justme 2026-10-09 13:20:30 +08:00
  • 7ff0d0f4e6 feat: print build info at startup; version placeholders filled in by CI [CI SKIP] justme 2026-10-09 13:20:30 +08:00
  • a9f78f99df ci: version from the tag or the commits since it; dev images from main gated on tests; recognise -dev. tags [CI SKIP] justme 2026-10-09 13:20:30 +08:00
  • a3338e1cf3 fix(display): background quality as a three-way choice (blurred, sharp, original) [CI] justme 2026-10-09 04:57:01 +08:00
  • 044ce0c339 feat(display): background photo groups with blurred, compressed and original versions; veil, sway and blur options in the appearance panel [CI] justme 2026-10-09 04:50:11 +08:00
  • 725fe17a7d chore: release 0.4.0 [CI] v0.4.0 justme 2026-10-09 03:54:56 +08:00
  • e49990776b feat(display): falling snow in three depth layers with wind, mouse and bullet time; appearance panel; dark glass tinted from the background [CI SKIP] justme 2026-10-09 03:54:49 +08:00
  • f8e8bb8acb feat(display): pointer-sway background with a dark variant; acrylic glass tokens [CI] justme 2026-10-09 03:09:14 +08:00
  • 70f20d38d0 feat(display): site name and avatar in the top bar, content aligned left [CI SKIP] justme 2026-10-09 03:08:54 +08:00
  • 7ff03a9628 fix(display): a hovered card no longer covers the top bar [CI SKIP] justme 2026-10-09 03:08:53 +08:00
  • 5dce387c87 ci: build a dev image to test automatic node updates [CI] justme 2026-10-09 02:10:38 +08:00
  • 535bb3517d feat: node updates by restart, auto by default; Podman Quadlet install from the panel alongside compose [CI] justme 2026-10-09 01:33:22 +08:00
  • 88b1a0a9bb feat: probe host stats, node cards with a separate lines panel grouped by carrier, Windows host sampling, manual carrier override [CI] justme 2026-10-08 21:56:19 +08:00
  • bac1c27e72 fix: compose passes .env through env_file; clearer name and channel messages [CI] justme 2026-10-08 20:47:38 +08:00
  • 12be44645f feat: install nodes and the backend from a static compose file; remove dead code [CI] justme 2026-10-08 20:24:23 +08:00
  • e014a19554 docs: reorganize into design, security, api, ops and dev; drop stale designs; refresh the diagrams [CI] justme 2026-10-08 19:37:56 +08:00
  • 636a784043 fix: the panel polls the registry for its own and the nodes' releases [CI] justme 2026-10-08 19:09:21 +08:00
  • 0f8f3f9a54 feat: trusted release keys setting; drop the duplicate release registration route [CI] justme 2026-10-08 18:50:16 +08:00
  • 904ea2b0ae refactor: remove the runtime binary binding; every release registration path verifies the CI signature [CI] justme 2026-10-08 18:30:05 +08:00
  • 675a2bc5b4 Merge branch 'main' into dev dev justme 2026-10-08 16:26:33 +08:00
  • a4f3d1892a ci: all-platform node binaries in the signed release manifest; signed SHA256SUMS for the archives; web build once before the parallel backend builds; release 0.3.3 [CI SKIP] v0.3.3 justme 2026-10-08 16:26:29 +08:00
  • 76efc15e9a Merge branch 'main' into dev justme 2026-10-08 16:13:02 +08:00
  • cab505b837 fix(ci): back to building the web apps inside the backend build; the two architectures run one after the other; release 0.3.2 [CI SKIP] v0.3.2 justme 2026-10-08 16:12:59 +08:00
  • 3ee8b6bb3d Merge branch 'main' into dev justme 2026-10-08 16:05:42 +08:00
  • cd9e677331 fix(ci): build the web apps once before the two backend architectures; release 0.3.1 [CI] v0.3.1 justme 2026-10-08 16:05:38 +08:00
  • 0fa2f2a26a Merge branch 'main' into dev justme 2026-10-08 15:59:32 +08:00
  • 879d1c8593 fix: installer checks containers only; the panel reads signed manifests from the registry when it has none; unsigned-updater nodes are labeled from the panel's manifests; sign node release images; release 0.3.0 [CI] v0.3.0 justme 2026-10-08 15:59:28 +08:00
  • 0e7a8c14fb Merge branch 'main' into dev justme 2026-10-08 15:30:16 +08:00
  • 4a1e48db20 test: share one operator and trust root across the trust tests; make the setup test cleanup best-effort [CI SKIP] justme 2026-10-08 15:30:12 +08:00
  • 4a15dba8de Merge branch 'main' into dev justme 2026-10-08 06:47:15 +08:00
  • f22fdf8b68 feat: first-run claim wizard (no default admin, claim code from the backend log); owner list shows account and passkey; container install first [CI] justme 2026-10-08 06:47:10 +08:00
  • 2ae63653c4 feat: the node itself requires an owner passkey (shared by agent and probe) and reports it; the panel derives the account and passkey it is bound to [CI] justme 2026-10-08 06:15:07 +08:00
  • 8c37db1577 feat: every agent and probe must have an owner passkey, enforced by the panel, the installers and fleet-enroll [CI] justme 2026-10-08 06:04:04 +08:00
  • 8410735377 Merge branch 'main' into dev justme 2026-10-08 05:44:20 +08:00
  • 0b384a58f5 fix: hash the node binary without the registry auth file that does not exist yet [CI] justme 2026-10-08 05:43:51 +08:00
  • 6310358490 Merge branch 'main' into dev justme 2026-10-08 05:41:02 +08:00
  • 4841f7b15b feat: bind each node to the binary it runs at its first handshake; refuse changes that are not in a CI-signed manifest [CI] justme 2026-10-08 05:39:13 +08:00
  • 117d34a2af feat: signed manifests live in the image registry; updaters and first deploys fetch and verify them without the panel [CI] justme 2026-10-08 05:05:13 +08:00
  • 4106f831dc feat!: drop the backend-side elevation windows; password and passkey sessions share capabilities, passkeys guard what nodes verify; the trust page lists added and removed passkeys [CI] justme 2026-10-08 04:57:28 +08:00
  • 0dc8c6fe34 Merge branch 'main' into dev justme 2026-10-08 04:23:16 +08:00
  • f704c66dd9 feat: CI registers release manifests without a token; the panel verifies the CI signature instead [CI] justme 2026-10-08 04:22:01 +08:00
  • 1f70c8d31e Merge branch 'main' into dev justme 2026-10-08 04:10:29 +08:00
  • fbda9487d5 feat: serve the web apps from the Backend (embedded, allow-listed, no filesystem access) so passkeys bind to the panel's own domain [CI] justme 2026-10-08 04:09:40 +08:00
  • 4a3631f82b fix: gate password sessions on the login method so data-source sessions also get the passkey-only page [CI SKIP] justme 2026-10-08 04:09:39 +08:00
  • 3b88a3419d ci: build the dev images for the genesis-pinned trust model [CI] justme 2026-10-08 03:28:03 +08:00
  • 0e0b925c8b Merge branch 'main' into dev justme 2026-10-08 03:22:20 +08:00
  • a2f88a344b feat!: genesis-pinned operator set, server identity with an encrypted control link, key-less join codes; release key continuity v0.2.0 justme 2026-10-08 03:21:44 +08:00
  • 9bb6841dce feat: pinned agents and probes only accept peers carrying the operator's proof; the panel ships the signed operator chain with the rosters [CI SKIP] justme 2026-10-07 23:24:33 +08:00
  • fc2bbdcc6d feat: operator trust root: passkey-signed operator set, signed join codes, nodes verify and pin the chain at enrollment [CI SKIP] justme 2026-10-07 23:19:59 +08:00
  • 321cacac32 feat: operator trust chain library (passkey-signed operator set, grants and code-key bindings) [CI SKIP] justme 2026-10-07 23:09:09 +08:00
  • 36f9816f40 test: allow the installer manifest paths in the OpenAPI layout check [CI SKIP] justme 2026-10-07 23:02:50 +08:00
  • 310b2b5b19 feat: the one-line installer verifies the CI-signed release manifest and pulls the image by digest [CI] justme 2026-10-07 23:01:45 +08:00
  • a19e6548d3 feat: trust forwarded client addresses only from configured proxies (rate limit, audit, SSE) [CI] justme 2026-10-07 22:51:44 +08:00
  • ff45ad086e feat!: sensitive actions need a fresh passkey touch (elevation windows), plus login page hint cleanup [CI] justme 2026-10-07 22:29:24 +08:00
  • 1379b8c7cb feat: audit log of admin writes, sign-ins and key creation, with an audit tab [CI] justme 2026-10-07 22:17:52 +08:00
  • 359313a57b feat: record who created join codes and who added each node [CI] justme 2026-10-07 22:12:15 +08:00
  • 6385c1b9a3 feat: sign in with a passkey (WebAuthn, ES256, discoverable credentials) and manage your passkeys [CI] justme 2026-10-07 21:16:00 +08:00
  • ddb6608e32 feat!: capabilities replace API token scopes; every admin endpoint declares one, with a picker UI [CI] justme 2026-10-07 20:56:36 +08:00
  • 55b80f0a97 docs: access control and enrollment trust chain design [CI SKIP] justme 2026-10-07 20:45:23 +08:00
  • f01bb8fd63 ci: sync main into dev [CI SKIP] justme 2026-10-07 20:03:38 +08:00
  • af2962fc58 feat: one-line install for agents and probes from one shared script (curl | bash, zsh, PowerShell) [CI] justme 2026-10-07 20:02:38 +08:00
  • 5528753d45 feat: deploy-node.sh backend takes extra env settings with --env [CI SKIP] justme 2026-10-07 19:40:13 +08:00