6 Commits

Include renames

Author	SHA1	Message	Date
archipelago	3ed75c328d	style: rustfmt the signed-catalog serving	2026-08-31 17:09:16 -04:00
archipelago	5b658cec67	feat(app-catalog): serve the signed catalog from the node first	2026-08-31 16:15:13 -04:00
archipelagoandClaude Opus 5	c788dff42d	style: apply cargo fmt so the release gate can run ... The release gate's first real stage is `cargo fmt --check`, and it had 44 diffs across 15 files — enough to abort `create-release.sh` at step 0 before it touched a version number. Some of that drift is mine from the last two days, some predates it in files I never opened (bootstrap.rs, ghost_reaper.rs, openwrt/router.rs), and one is the regenerated fips/app_ports.rs. No behaviour change — rustfmt only. Gate now: 8 of 9 green. The remaining red is cargo-test-weekly exiting 124, which is the 25-minute `timeout` expiring during a cold CARGO_INCREMENTAL=0 rebuild on a loaded node — the tests never started. Not a test failure. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-08-19 12:38:41 -04:00
archipelagoandClaude Fable 5	3a3077529b	feat(kiosk): companion remote drives app iframes via trusted CDP input ... Companion tap/scroll/type now works INSIDE cross-origin app iframes and kiosk tabs. The web relay synthesizes untrusted DOM events in the top document, which can never cross an origin boundary — so apps served through the appgate were dead to the remote. The kiosk Chromium now exposes a loopback-only CDP port (default origin check intact, no --remote-allow-origins) and a backend bridge (api/handler/cdp.rs) dispatches validated companion input as Input.dispatchKeyEvent / dispatchMouseEvent / mouseWheel — trusted events that hit-test through any frame, move real focus, and insert text like a physical device. - Session keeper self-heals across kiosk Chromium restarts; inert on nodes without a kiosk unit (falls back to the existing relay path). - The kiosk relay subscriber self-tags (?kiosk=1) and the backend mutes its key/click/scroll messages while the bridge is live, so input never applies twice; cursor moves still flow for the on-screen cursor. - While companion input is active the native OS pointer is hidden (cursor:none, auto-restores 30s after the last event) so the dead physical-mouse cursor doesn't sit next to the virtual one. - docs/tv-input-iframe-apps.md scope note updated: gamepad keys stay on uinput; CDP is for companion pointer/typing only. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-08-16 05:28:53 -04:00
archipelagoandClaude Fable 5	e3bd340725	feat(aiui): Routstr as an explicit, session-gated AI provider path ... The D-04 Routstr leg was fallback-only — never user-selectable, and its Nostr discovery parses a docs-shaped event content ({endpoints, models, pricing}) that live kind-38421 announcements don't actually carry ({name, about}), so it could never match a real provider. This adds the explicit path AIUI's model picker needs: /aiui/api/routstr/models passes through the live aggregator catalog (the instance routstr.com's own frontend queries; the canonical api.routstr.com 404s), and /aiui/api/routstr/chat/completions makes one paid, non-streaming, OpenAI-shaped call — session-gated, egress-screened (S3), refused without an armed operator budget (D-05), paid via auto_pay_token, change and refused-request tokens redeemed back into the wallet so a failed attempt nets zero (verified live: quoted=1 reclaimed=1 net=0). nginx template gains the location in both server blocks (T-13-15). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-08-14 13:41:07 -04:00
Archipelago	b67e1527a2	Archipelago — open-source initial import	2026-08-12 10:55:50 +00:00