Commit graph

7 commits

Author SHA1 Message Date
c47cd44251 Add .prettierrc + reformat all active markdown to match
Codifies the markdown format Sam applied in bd94b87 / 30cf590 as a
project rule rather than per-file judgment. Prettier 3 defaults with
proseWrap=preserve (no prose reflow), printWidth=80, embedded code
formatting off so we don't touch fenced shell/JSON blocks.

.prettierignore scopes Prettier to active docs:
  - excludes tmp/, cache/, node_modules/, build artifacts
  - excludes CHANGELOG.md + RELEASE-NOTES-*.md (hand-formatted, rigid)
  - excludes .archive/ and .opencode/ (historical / tooling internal)
  - excludes bundled bootstrap.html

Reformatted 16 active .md files: padded markdown tables, blank line
before lists (CommonMark-strict), `*emph*` -> `_emph_`. No content
changes — diffs are all whitespace/alignment/emphasis style.

Verified: `npx prettier@3 --check '**/*.md'` reports all clean.

Build: not run — docs + tooling config only.
Tests: pass — prettier --check is green; git diff confirms no content
deletions, only formatting.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-20 11:16:42 +02:00
ba390f43d9 Implement Firefox and disk extras package split
Replace Chromium with Firefox in the live/operator package closure and XFCE launchers, move the deferred desktop bundle into pkg-list-disk-install-extras.txt, and keep that extras list in pkg_list_all() without installing it onto the live rootfs.

No image build run; another agent will build and hardware-test.

---

Build: pass — sh -n build.sh

Tests: pass — git diff --check; package-list smoke confirms live excludes chromium/deferred extras
2026-05-18 11:58:11 +02:00
bdfa65b975 Clean up warden0 bridge documentation 2026-05-12 18:24:51 +02:00
b6fac29d55 Fix bridge naming to warden0 and correct setup token wording (Sam & Claude)
- shell-pf.sh: BRIDGE is now always warden0 (matches jail-config.ts and AGENTS.md)
- CompletePage.qml: token text now says will be generated after first boot
- NETWORKING.md: updated to reflect warden0 fix
2026-05-12 18:18:12 +02:00
9dfb8e66a5 Add implementation review to live GUI proposal; escalate bridge naming bug (Sam & Claude) 2026-05-12 18:02:16 +02:00
3b46b5ee71 Narrow installer contract to identity-only and fix cross-repo alignment (Sam & Claude)
ISO-LIVE-GUI-SETUP-PROPOSAL:
- Remove LLM keys and Telegram from install-time field collection
- Add explicit 'not collected at install time' section with rationale
- Narrow clawdie-handoff.sealed scope (no provider keys or Telegram)
- Add QML alignment note about removing ANTHROPIC_API_KEY serialization

setup-import.sh:
- Replace hard-require loop for OPENROUTER/TELEGRAM with identity-only
  validation (ASSISTANT_NAME, AGENT_DOMAIN, TZ)
- Add ZAI_API_KEY, ZAI_API_BASE, OPENAI_API_KEY, ANTHROPIC_API_KEY,
  CLAUDE_CODE_OAUTH_TOKEN to allowed parse keys
- Add provider detection defaults for z.ai, OpenAI, Anthropic with
  z.ai as the new default (matches Clawdie-AI shell-env.sh)

NETWORKING.md:
- Add architecture note: browser jail replaces cage/wayvnc for autonomous
  execution; operator refresh moves to host-side xpra
- Add alignment note: bridge naming must converge to warden0 per
  Clawdie-AI AGENTS.md

README.md:
- Add architecture note on glasspane section with forward reference to
  browser jail and operator browser architecture docs
2026-05-12 08:36:14 +02:00
43ca785efe feat: port PF module with glasspane VNC (Sam & Claude)
- Add shell-pf.sh module for PF firewall setup
- Add NETWORKING.md with glasspane documentation
- Update MODULE-MANIFEST.md for 8 modules
- Update integration-test.sh for 8 modules
- Update firstboot.sh to source and call PF module

PF features:
  - Block-all default
  - SSH brute-force protection
  - Jail NAT (192.168.0.0/16 supernet)
  - Glasspane VNC (port 5900 via Tailscale only)
  - pf_reload rc.d service for cold boot race
2026-04-06 06:48:25 +02:00