Commit Graph

30 Commits

Author SHA1 Message Date
952cebf2e9 feat: snapshot/restore checkpoints (SAND-WP-0007)
Add workspace checkpoint API with SnapshotStore, extension hooks on
compose-ssh and saas-stub, manager orchestration, CLI/HTTP surface,
profile.compose-checkpoint, and docs/tests.
2026-06-24 07:57:40 +02:00
2760ef2373 Sync State Hub workstream IDs for SAND-WP-0006 2026-06-24 07:52:45 +02:00
1415e17230 Implement SAND-WP-0006: SaaS payments, routing, and ext.saas-stub
Add credits store, metering on create/destroy, extension routing resolver,
metered SaaS stub extension, burst/saas profiles, credits CLI, docs, and tests.
2026-06-24 07:52:20 +02:00
eee336149e Sync State Hub workstream IDs for SAND-WP-0005 2026-06-24 01:47:50 +02:00
cec0fc6348 Implement SAND-WP-0005: extension SDK and ext.vm-packer
Add SandboxExtension base class, extension SDK docs, vm-packer attach mode
for build-machines VMs, profile.vm-haskell-build, SSH port support, tests,
and migration docs.
2026-06-24 01:47:07 +02:00
c8126672ee chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-06-23:
  - update .custodian-brief.md for sand-boxer
2026-06-23 21:44:27 +02:00
1594bceec1 Finish SAND-WP-0004: mark e2e-framework migration arc complete
Update migration-gaps, SCOPE, and workplan status after the-custodian
make e2e shim delegates to validate run.
2026-06-23 21:43:53 +02:00
d6afe0e27b Sync State Hub workstream IDs for SAND-WP-0003 and SAND-WP-0004
fix-consistency writeback: state_hub_workstream_id and task IDs.
2026-06-23 21:41:24 +02:00
9757ce0c7d chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-06-23:
  - update .custodian-brief.md for sand-boxer
2026-06-23 21:41:14 +02:00
6473fa78d7 Update SCOPE, gap analysis, and propose SAND-WP-0004
Refresh SCOPE.md for v0 operational state after WP-0002/0003/0008.
Add history/ INTENT↔SCOPE assessment and ready workplan for the-custodian
e2e shim to close the e2e-framework migration arc.
2026-06-23 21:40:43 +02:00
e7d31b7f55 Finish SAND-WP-0003: wise-validator extraction workplan
Add workplan, update migration-gaps delivered table, and extend sand-boxer
e2e.yml with health check for validate run self-smoke.
2026-06-23 21:37:08 +02:00
9054d33e46 Clarify INTENT.md: sand-boxer self-sufficiency and sibling boundaries
Document that sand-boxer is self-sustained without wise-validator, that
validation is an optional downstream consumer, and update near-term outcomes
to reflect completed SAND-WP-0002 work.
2026-06-23 21:23:39 +02:00
45029ec66f chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-06-23:
  - update .custodian-brief.md for sand-boxer
2026-06-23 19:54:02 +02:00
c0a9261cdc Implement SAND-WP-0008: host telemetry and self-canary
Add profile.sandbox-canary, HostSnapshot/inventory/stale schemas, SSH
collectors, before/after provision deltas, telemetry export to State Hub
and local JSON, default `sandboxer create` self-deploy, inspect/reap-stale
CLI, runbook, and CoulombCore verification (26 tests pass).
2026-06-23 19:53:51 +02:00
582c1dd3c6 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-06-23:
  - update .custodian-brief.md for sand-boxer
2026-06-23 16:52:40 +02:00
8e0465865a Finish SAND-WP-0002: remote smoke, podman-compose, HTTP stub
- T10 smoke passed on CoulombCore (sand-boxer self-deploy, sandbox 4e542c51)
- Add e2e smoke compose, scripts/smoke-compose-e2e.sh, make smoke-remote
- Support SANDBOXER_COMPOSE_CMD for podman-compose hosts
- FastAPI v0 stub at sandboxer.api.app; migration gaps doc
- Mark workplan finished (all 10 tasks done)
2026-06-23 16:52:29 +02:00
380034c911 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-06-23:
  - update .custodian-brief.md for sand-boxer
2026-06-23 14:25:23 +02:00
20e25726d7 Add SAND-WP-0008: host telemetry and self-canary introspection
Workplan for default sand-boxer self-deploy, before/after host metrics,
stale sandbox inventory, and telemetry export for centralized analysis.
2026-06-23 14:25:05 +02:00
939c4e1aff Fix SSH auth: respect ~/.ssh/config instead of defaulting to root
CoulombCore (92.205.130.254) authenticates as tegwick via id_ops in
ssh config, not root. Omit SANDBOXER_SSH_USER to let OpenSSH apply config;
set SANDBOXER_SSH_USER only to override.
2026-06-23 14:16:16 +02:00
8a39eaba34 Add make install for global sandboxer CLI
Document uv tool install path and uv run fallback so sandboxer is
available outside the project venv after make install.
2026-06-23 13:55:38 +02:00
06cc6f9466 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-06-22:
  - update .custodian-brief.md for sand-boxer
2026-06-22 23:27:50 +02:00
d6d3155792 Implement SAND-WP-0002 meta-framework foundation (T01–T09)
Add meta-framework spec, pydantic schemas, profile/extension YAML, extension
registry, ext.compose-ssh backend, SandboxManager with State Hub events, CLI
commands, integration docs, capability registry entry, and compose-e2e runbook.
Nine unit tests pass. T10 remote smoke test remains for operator.
2026-06-22 23:27:31 +02:00
b0a57cf9d3 Complete SAND-WP-0001: bootstrap Python dev workflow
Scaffold sandboxer package (src layout, typer CLI stub, pytest, ruff),
Makefile targets, and document install/test/lint/build commands in
AGENTS.md and stack-and-commands.md. Mark bootstrap workplan finished.
2026-06-22 23:25:42 +02:00
1ec00d52b8 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-06-22:
  - update .custodian-brief.md for sand-boxer
2026-06-22 23:24:06 +02:00
d12ff9a7f4 chore: write State Hub workstream and task IDs from fix-consistency
Sync workplan frontmatter with hub DB after SAND-WP-0001 and SAND-WP-0002
registration.
2026-06-22 21:32:58 +02:00
cdc0e505a9 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-06-22:
  - update .custodian-brief.md for sand-boxer
2026-06-22 21:32:44 +02:00
f33cff5363 docs: charter meta-framework vision, research, and SAND-WP-0002
Rewrite INTENT.md as the sand-boxer meta-framework charter (OpenRouter-style
sandbox API, extensions, payments, Coulomb sibling boundaries). Add research
under research/, update SCOPE.md, bootstrap workplans SAND-WP-0001/0002, and
State Hub integration files from the bootstrap pass.
2026-06-22 21:32:32 +02:00
e248f669a3 docs: add initial INTENT.md for sand-boxer
Charter the repo as Custodian execution isolation: sandbox profiles,
dedicated hosts (sandboxer01), and migration path from the-custodian
e2e-framework and build-machines patterns.
2026-06-21 23:04:34 +02:00
dc76d8742e Update README.md 2026-06-21 21:00:33 +00:00
Coulomb Social
7d8f6cae3c Initial commit 2026-06-21 21:00:12 +00:00