Repository navigation

Remote backend: firewall check in server config, log redaction, model-review fixes - #453

Merged

charliek merged 73 commits into

mainfrom

feature/remote-hardening

Nov 14, 2026

Merged

Remote backend: firewall check in server config, log redaction, model-review fixes#453
charliek merged 73 commits into
mainfrom
feature/remote-hardening

Commits on Nov 14, 2026
- feat(remote): firewall source ranges come from the config or a named variable
  
  charliek
  and
  claude
  committed
  ba873f4
- feat(redact): add a leaf package that hides URL credentials in log text
  
  charliek
  and
  claude
  committed
  93f6906
- fix(agent): redact URL credentials from the exec log line
  
  charliek
  and
  claude
  committed
  ef90e7f
- fix(server): redact URL credentials from logged and audited commands
  
  charliek
  and
  claude
  committed
  a422b3e
- feat(remote): the provider seam reads the firewall, and may patch one rule's sources
  
  charliek
  and
  claude
  committed
  f97cc7e
- fix(vmutil): a stop ends a notify handshake the guest never reads
  
  charliek
  and
  claude
  committed
  1beac20
- fix(vmutil): bound what the server keeps of a guest's output
  
  charliek
  and
  claude
  committed
  d48742e
- feat(remote): check the cloud firewall before creating or starting a VM
  
  charliek
  and
  claude
  committed
  61e4cb2
- fix(remote): a job leaves a queued action to the job that replaced it
  
  charliek
  and
  claude
  committed
  b6c2ce5
- fix(remote): never mutate an instance of another label schema
  
  charliek
  and
  claude
  committed
  10194ab
- fix(remote): a restart never resumes a create the cloud calls finished
  
  charliek
  and
  claude
  committed
  0f1cc70
- feat(remote): gce-setup.sh prints the firewall-auto roles only when asked
  
  charliek
  and
  claude
  committed
  a3d91cf
- fix(remote): state writes flush their directory
  
  charliek
  and
  claude
  committed
  fcfef30
- fix(remote): an egress selection of ["off"] is not a request for a profile
  
  charliek
  and
  claude
  committed
  a56c409
- fix(api): the SSE create follows only the shed it created
  
  charliek
  and
  claude
  committed
  f1f956f
- fix(remote): a delete whose destroy failed is not reported as done
  
  charliek
  and
  claude
  committed
  699cf54
- docs(remote): the firewall check, its three modes and the auto roles
  
  charliek
  and
  claude
  committed
  15039a9
- test(remote): live read-only runs of the firewall reads and the static check
  
  charliek
  and
  claude
  committed
  ea95461
- Merge branch 'remote/review-models' into feature/remote-hardening
  
  charliek
  and
  claude
  committed
  3d5b5c3
- Merge branch 'remote/agent-log-redact' into feature/remote-hardening
  
  charliek
  and
  claude
  committed
  b074994
- Merge branch 'remote/firewall' into feature/remote-hardening
  
  charliek
  and
  claude
  committed
  d490a2e
- fix(vmutil): redact URL credentials from a provisioning hook's output
  
  charliek
  and
  claude
  committed
  a234111
- fix(remote): an echo URL's userinfo never reaches the log or a refusal
  
  charliek
  and
  claude
  committed
  883da58
- fix(remote): gce-setup.sh makes no key when the key file exists
  
  charliek
  and
  claude
  committed
  87da3b2
- docs(remote): say that the isolated profile does not filter outbound traffic
  
  charliek
  and
  claude
  committed
  a20e544
- fix(remote): one echo service has one vote in auto mode's agreement
  
  charliek
  and
  claude
  committed
  baced12
- fix(redact): a shell-escaped apostrophe does not end a URL's userinfo
  
  charliek
  and
  claude
  committed
  f8a8830
- fix(redact): the stream writer never passes on a token it cannot redact
  
  charliek
  and
  claude
  committed
  c1dff54
- fix(vmutil): a hook's quoted last output is cut from the redacted stream
  
  charliek
  and
  claude
  committed
  72bb285
- fix(remote): a job asks the firewall check again before an insert or a start
  
  charliek
  and
  claude
  committed
  d411d52
- fix(remote): refuse a network or subnet in another project
  
  charliek
  and
  claude
  committed
  f0f2641
- fix(remote): a static source range in private space needs acknowledge_any
  
  charliek
  and
  claude
  committed
  846426e
- docs(changelog): the firewall check's stricter config and the firewall reason
  
  charliek
  and
  claude
  committed
  9b3a490
- test(sshd): group the redact import with the module's own
  
  charliek
  and
  claude
  committed
  c85d894
- fix(remote): the limit refusal says "server limit reached" once
  
  charliek
  and
  claude
  committed
  5a2ff94
- feat(dev): the remote dev server's firewall mode comes from the env file
  
  charliek
  and
  claude
  committed
  2209830
- docs(remote): what the third live run saw of the firewall modes and fault paths
  
  charliek
  and
  claude
  committed
  0f76aad
- fix(remote): a firewall failure is logged once while it stays the same
  
  charliek
  and
  claude
  committed
  1450fb8
- fix(vmutil): a clone keeps none of the guest's output in memory
  
  charliek
  and
  claude
  committed
  4545f4a
- fix(config): an unknown key under remote: stops the load
  
  charliek
  and
  claude
  committed
  06cf0d3
- fix(remote): a create whose record was lost is destroyed after 15 minutes
  
  charliek
  and
  claude
  committed
  29ee5a6
- fix(redact): a byte a URL may not hold does not end its userinfo
  
  charliek
  and
  claude
  committed
  eec6fe3
- fix(remote): auto mode believes only an address a static range could name
  
  charliek
  and
  claude
  committed
  e793da5
- fix(api): a streamed create refused by the firewall check ends with its 503
  
  charliek
  and
  claude
  committed
  4bc3a00
- fix(config): a repo URL's credentials stay out of the layout refusal
  
  charliek
  and
  claude
  committed
  879a8cb
- fix(api): a service client's firewall refusal names no address or rule
  
  charliek
  and
  claude
  committed
  de2286d
- fix(sshlink): a guest that keeps opening channels cannot fill the log
  
  charliek
  and
  claude
  committed
  5ffa8e9
- fix(remote): every shed VM is made with OS Login off
  
  charliek
  and
  claude
  committed
  1b31bab
- style(config): an unknown-key example the spell check accepts
  
  charliek
  and
  claude
  committed
  5794a7d
- docs(changelog): the third review's config, clean-up and redaction changes
  
  charliek
  and
  claude
  committed
  bb9b6ff
- docs(remote): GET /api/images lists nothing on a remote server
  
  charliek
  and
  claude
  committed
  970c404
- fix(config): a repo URL that does not parse is refused without its text
  
  charliek
  and
  claude
  committed
  c50c9e4
- docs(changelog): the repo URL refusal that repeats none of the URL
  
  charliek
  and
  claude
  committed
  6e2cb4d
- fix(redact): the URL after a redacted one is redacted too
  
  charliek
  and
  claude
  committed
  4c3199a
- fix(redact): the stream writer holds 128 KiB at most, whatever one Write brings
  
  charliek
  and
  claude
  committed
  21d63e4
- fix(redact): a stream that ends inside a URL passes on none of its userinfo
  
  charliek
  and
  claude
  committed
  f5811f6
- test(remote): the fake copies the port lists inside a firewall rule
  
  charliek
  and
  claude
  committed
  35bab59
- test(remote): a bound wait does not follow a replacement by the same owner
  
  charliek
  and
  claude
  committed
  b2126df
- fix(remote): removing a state file that is already gone still flushes the directory
  
  charliek
  and
  claude
  committed
  f103360
- fix(remote): a delete that was refused never happens later
  
  charliek
  and
  claude
  committed
  aa1a318
- fix(remote): the firewall gate's 10 s include the wait for a check in progress
  
  charliek
  and
  claude
  committed
  34fc448
- fix(remote): a resumed create that cannot read its instance destroys nothing
  
  charliek
  and
  claude
  committed
  b760508
- fix(remote): a resumed create checks the label schema before it touches the guest
  
  charliek
  and
  claude
  committed
  e645306
- fix(remote): a start that cannot read its instance does not stop a running VM
  
  charliek
  and
  claude
  committed
  338a229
- docs(changelog): the CodeRabbit review's fixes, and the cloud_unreadable reason
  
  charliek
  and
  claude
  committed
  4fa2402
- fix(remote): a kept create or start drops cloud_unreadable once the cloud answers
  
  charliek
  and
  claude
  committed
  a782c92
- docs(remote): a start that finds another version's labels is not kept
  
  charliek
  and
  claude
  committed
  917bd3b
- fix(remote): a start that finds another version's labels is kept, not failed
  
  charliek
  and
  claude
  committed
  2ca5241
- fix(remote): a create whose labels change before its ready label is kept
  
  charliek
  and
  claude
  committed
  275a4d1
- fix(remote): a wait does not call a delete finished when its markers cannot be read
  
  charliek
  and
  claude
  committed
  54a88e3
- test(remote): the store's write outcomes and the kept create's actions as t.Run cases
  
  charliek
  and
  claude
  committed
  88eb2dd
- docs(remote): what a delete does while a VM carries another version's labels
  
  charliek
  and
  claude
  committed
  e5752ec
- fix(remote): a wait does not call a delete finished when its marker file cannot be read
  
  charliek
  and
  claude
  committed
  6e7b3b3

Commits

Commits on Nov 14, 2026