amadan

carlos / platform Public

Merge remote-tracking branch 'origin/main' into design-region-ha-rev5

Paul Campbell pushed by claude bf813540380592e3e7e7092886f977f83e3b1c45 parent 0c8ad11parent 9bed97b
109 files changed, +12769 −228
  • AGENTS.md +19 −0
  • README.md +6 −0
  • apimode.go +45 −8
  • cli.go +55 −0
  • cli_test.go +92 −0
  • cmd/console/main.go +17 −0
  • deploy.go +49 −4
  • docs/site/cli.md +57 −9
  • docs/superpowers/plans/2026-09-25-isolated-exec-4-layout-amendments.md +133 −0
  • docs/superpowers/specs/2026-09-11-isolated-exec-design.md +63 −1
  • domains_cli.go +106 −6
  • internal/activator/maintenance.go +63 −1
  • internal/activator/maintenance_test.go +136 −0
  • internal/appconfig/syncexec.go +35 −1
  • internal/appconfig/syncexec_test.go +58 −0
  • internal/cgroup/cgroup.go +29 −0
  • internal/console/apidomains.go +50 −8
  • internal/console/apistatuslayout.go +117 −0
  • internal/console/apistatuslayout_test.go +188 −0
  • internal/console/appdomains.go +5 −0
  • internal/console/appsettings.go +14 −5
  • internal/console/authcli.go +4 −0
  • internal/console/domainattach.go +52 −7
  • internal/console/domainpolicy.go +159 −0
  • internal/console/domainproof_test.go +425 −0
  • internal/console/domainstate.go +20 −1
  • internal/console/domainstate_test.go +5 −0
  • internal/console/instancepage.go +37 −1
  • internal/console/instancepage_test.go +53 −1
  • internal/console/server.go +23 −3
  • internal/console/store.go +7 −5
  • internal/console/svcroutes_test.go +7 −2
  • internal/console/templates/app_instance.html +1 −0
  • internal/console/view.go +8 −0
  • internal/domains/aliases.go +12 −1
  • internal/domains/claims.go +184 −21
  • internal/domains/claims_proof_test.go +243 −0
  • internal/edge/fleetapi_e2e_test.go +77 −0
  • internal/edge/storedoor.go +120 −33
  • internal/edge/storedoor_test.go +84 −10
  • internal/edge/wildcard.go +11 −1
  • internal/edge/wildcard_parents_test.go +5 −2
  • internal/edge/wildcard_test.go +10 −7
  • internal/host/agent.go +85 −20
  • internal/host/agent_isolated_test.go +27 −4
  • internal/host/agent_layout_test.go +629 −0
  • internal/host/layoutleg.go +396 −0
  • internal/host/movespass.go +7 −7
  • internal/host/movespass_test.go +30 −0
  • internal/host/systemapply.go +106 −1
  • internal/host/systemapply_test.go +170 −0
  • internal/host/units/carlos-app@.service +6 −0
  • internal/host/units/carlos-edge.service +20 −1
  • internal/host/units/carlos-instance-probe.service +54 −1
  • internal/host/units/carlos-instance-seed@.service +48 −1
  • internal/host/units/carlos-instance-sidecar@.service +48 −1
  • internal/host/units/carlos-instance@.service +48 −1
  • internal/host/units_hardening_test.go +148 −0
  • internal/host/units_isolation_test.go +27 −3
  • internal/instancectl/hardening.go +342 −0
  • internal/instancectl/hardening_test.go +185 −0
  • internal/instancectl/peer_linux.go +11 −0
  • internal/instancectl/peer_other.go +1 −0
  • internal/instancectl/server.go +56 −7
  • internal/instancectl/server_test.go +2 −2
  • internal/instanceexec/exec.go +2 −2
  • internal/instanceexec/probe.go +60 −2
  • internal/instanceexec/probe_hardening.go +193 −0
  • internal/instanceexec/probe_hardening_test.go +221 −0
  • internal/instanceexec/probe_linux.go +1 −1
  • internal/instanceexec/probe_test.go +40 −19
  • internal/instanceexec/scope_linux.go +146 −0
  • internal/instanceexec/scope_other.go +13 −0
  • internal/instancefs/dirs_linux.go +158 −0
  • internal/instancefs/dirs_linux_test.go +231 −0
  • internal/instancefs/instancefs.go +24 −0
  • internal/instancefs/instancefs_linux.go +22 −0
  • internal/instancefs/instancefs_linux_test.go +23 −0
  • internal/instancefs/instancefs_other.go +32 −0
  • internal/layout/journal.go +339 −0
  • internal/layout/journal_linux.go +16 −0
  • internal/layout/journal_linux_test.go +46 −0
  • internal/layout/journal_other.go +13 −0
  • internal/layout/journal_test.go +344 −0
  • internal/layout/links_linux.go +20 −0
  • internal/layout/links_other.go +9 −0
  • internal/layout/pass.go +1212 −0
  • internal/layout/pass_linux_test.go +1768 −0
  • internal/layout/plan.go +194 −0
  • internal/layout/plan_test.go +160 −0
  • internal/layout/preflight.go +449 −0
  • internal/layout/preflight_test.go +561 −0
  • internal/layout/rawdir_test.go +109 −0
  • internal/ops/litestream.go +23 −4
  • internal/ops/ops.go +1 −1
  • internal/ops/ops_test.go +81 −1
  • internal/provision/provision.go +28 −0
  • internal/provision/provision_test.go +33 −0
  • internal/provision/reconcile.go +30 −9
  • internal/provision/reconcile_test.go +150 −0
  • internal/registry/registry.go +35 −0
  • internal/registry/registry_test.go +32 −0
  • internal/release/layoutintent.go +172 −0
  • internal/release/layoutintent_test.go +98 −0
  • internal/status/contract_test.go +25 −1
  • internal/status/snapshot.go +45 −1
  • internal/status/snapshot_test.go +51 −0
  • status_instances.go +117 −0
  • status_instances_test.go +112 −0
AGENTS.md

Loading diff…

README.md

Loading diff…

apimode.go

Loading diff…

cli.go

Loading diff…

cli_test.go

Loading diff…

cmd/console/main.go

Loading diff…

deploy.go

Loading diff…

docs/site/cli.md

Loading diff…

docs/superpowers/plans/2026-09-25-isolated-exec-4-layout-amendments.md

Loading diff…

docs/superpowers/specs/2026-09-11-isolated-exec-design.md

Loading diff…

domains_cli.go

Loading diff…

internal/activator/maintenance.go

Loading diff…

internal/activator/maintenance_test.go

Loading diff…

internal/appconfig/syncexec.go

Loading diff…

internal/appconfig/syncexec_test.go

Loading diff…

internal/cgroup/cgroup.go

Loading diff…

internal/console/apidomains.go

Loading diff…

internal/console/apistatuslayout.go

Loading diff…

internal/console/apistatuslayout_test.go

Loading diff…

internal/console/appdomains.go

Loading diff…

internal/console/appsettings.go

Loading diff…

internal/console/authcli.go

Loading diff…

internal/console/domainattach.go

Loading diff…

internal/console/domainpolicy.go

Loading diff…

internal/console/domainproof_test.go

Loading diff…

internal/console/domainstate.go

Loading diff…

internal/console/domainstate_test.go

Loading diff…

internal/console/instancepage.go

Loading diff…

internal/console/instancepage_test.go

Loading diff…

internal/console/server.go

Loading diff…

internal/console/store.go

Loading diff…

internal/console/svcroutes_test.go

Loading diff…

internal/console/templates/app_instance.html

Loading diff…

internal/console/view.go

Loading diff…

internal/domains/aliases.go

Loading diff…

internal/domains/claims.go

Loading diff…

internal/domains/claims_proof_test.go

Loading diff…

internal/edge/fleetapi_e2e_test.go

Loading diff…

internal/edge/storedoor.go

Loading diff…

internal/edge/storedoor_test.go

Loading diff…

internal/edge/wildcard.go

Loading diff…

internal/edge/wildcard_parents_test.go

Loading diff…

internal/edge/wildcard_test.go

Loading diff…

internal/host/agent.go

Loading diff…

internal/host/agent_isolated_test.go

Loading diff…

internal/host/agent_layout_test.go

Loading diff…

internal/host/layoutleg.go

Loading diff…

internal/host/movespass.go

Loading diff…

internal/host/movespass_test.go

Loading diff…

internal/host/systemapply.go

Loading diff…

internal/host/systemapply_test.go

Loading diff…

internal/host/units/carlos-app@.service

Loading diff…

internal/host/units/carlos-edge.service

Loading diff…

internal/host/units/carlos-instance-probe.service

Loading diff…

internal/host/units/carlos-instance-seed@.service

Loading diff…

internal/host/units/carlos-instance-sidecar@.service

Loading diff…

internal/host/units/carlos-instance@.service

Loading diff…

internal/host/units_hardening_test.go

Loading diff…

internal/host/units_isolation_test.go

Loading diff…

internal/instancectl/hardening.go

Loading diff…

internal/instancectl/hardening_test.go

Loading diff…

internal/instancectl/peer_linux.go

Loading diff…

internal/instancectl/peer_other.go

Loading diff…

internal/instancectl/server.go

Loading diff…

internal/instancectl/server_test.go

Loading diff…

internal/instanceexec/exec.go

Loading diff…

internal/instanceexec/probe.go

Loading diff…

internal/instanceexec/probe_hardening.go

Loading diff…

internal/instanceexec/probe_hardening_test.go

Loading diff…

internal/instanceexec/probe_linux.go

Loading diff…

internal/instanceexec/probe_test.go

Loading diff…

internal/instanceexec/scope_linux.go

Loading diff…

internal/instanceexec/scope_other.go

Loading diff…

internal/instancefs/dirs_linux.go

Loading diff…

internal/instancefs/dirs_linux_test.go

Loading diff…

internal/instancefs/instancefs.go

Loading diff…

internal/instancefs/instancefs_linux.go

Loading diff…

internal/instancefs/instancefs_linux_test.go

Loading diff…

internal/instancefs/instancefs_other.go

Loading diff…

internal/layout/journal.go

Loading diff…

internal/layout/journal_linux.go

Loading diff…

internal/layout/journal_linux_test.go

Loading diff…

internal/layout/journal_other.go

Loading diff…

internal/layout/journal_test.go

Loading diff…

internal/layout/links_linux.go

Loading diff…

internal/layout/links_other.go

Loading diff…

internal/layout/pass.go

Loading diff…

internal/layout/pass_linux_test.go

Loading diff…

internal/layout/plan.go

Loading diff…

internal/layout/plan_test.go

Loading diff…

internal/layout/preflight.go

Loading diff…

internal/layout/preflight_test.go

Loading diff…

internal/layout/rawdir_test.go

Loading diff…

internal/ops/litestream.go

Loading diff…

internal/ops/ops.go

Loading diff…

internal/ops/ops_test.go

Loading diff…

internal/provision/provision.go

Loading diff…

internal/provision/provision_test.go

Loading diff…

internal/provision/reconcile.go

Loading diff…

internal/provision/reconcile_test.go

Loading diff…

internal/registry/registry.go

Loading diff…

internal/registry/registry_test.go

Loading diff…

internal/release/layoutintent.go

Loading diff…

internal/release/layoutintent_test.go

Loading diff…

internal/status/contract_test.go

Loading diff…

internal/status/snapshot.go

Loading diff…

internal/status/snapshot_test.go

Loading diff…

status_instances.go

Loading diff…

status_instances_test.go

Loading diff…