11 Commits

Include renames

Author	SHA1	Message	Date
archipelago	fba3273c67	Add durable buyer-bound Lightning recovery and explicit native retry ... Preserve original invoice preimages, private snapshots and exposure provenance; serialize rail admission and retire native-only failures before explicit replacement. Qualify 55 focused UI tests and vue-tsc. Expanded 17 engine cases and combined backend acceptance remain pending; six earlier engine cases passed in isolation. No live payment or publication.	2026-10-07 00:32:39 -04:00
archipelago	ed96df0ac3	Draft explicit rental readiness and start with verified chunk delivery	2026-10-07 00:23:43 -04:00
archipelago	49703d7e88	Integrate recoverable native purchases, registered rentals and explicit payment consent	2026-10-06 22:44:06 -04:00
archipelago	b52214f7a0	Qualify durable purchase and media primitives and preserve app launch paths	2026-10-06 20:50:44 -04:00
archipelago	a9edcd6b3e	Verify scoped peer identity proofs before restricted content access	2026-10-06 06:07:55 -04:00
archipelago	e54f83df8f	Add signed node-scoped demo catalogs and retained app media sessions	2026-10-06 00:53:34 -04:00
archipelago	3ed75c328d	style: rustfmt the signed-catalog serving	2026-08-31 17:09:16 -04:00
archipelago	5b658cec67	feat(app-catalog): serve the signed catalog from the node first	2026-08-31 16:15:13 -04:00
archipelagoandClaude Fable 5	3a3077529b	feat(kiosk): companion remote drives app iframes via trusted CDP input ... Companion tap/scroll/type now works INSIDE cross-origin app iframes and kiosk tabs. The web relay synthesizes untrusted DOM events in the top document, which can never cross an origin boundary — so apps served through the appgate were dead to the remote. The kiosk Chromium now exposes a loopback-only CDP port (default origin check intact, no --remote-allow-origins) and a backend bridge (api/handler/cdp.rs) dispatches validated companion input as Input.dispatchKeyEvent / dispatchMouseEvent / mouseWheel — trusted events that hit-test through any frame, move real focus, and insert text like a physical device. - Session keeper self-heals across kiosk Chromium restarts; inert on nodes without a kiosk unit (falls back to the existing relay path). - The kiosk relay subscriber self-tags (?kiosk=1) and the backend mutes its key/click/scroll messages while the bridge is live, so input never applies twice; cursor moves still flow for the on-screen cursor. - While companion input is active the native OS pointer is hidden (cursor:none, auto-restores 30s after the last event) so the dead physical-mouse cursor doesn't sit next to the virtual one. - docs/tv-input-iframe-apps.md scope note updated: gamepad keys stay on uinput; CDP is for companion pointer/typing only. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-08-16 05:28:53 -04:00
archipelagoandClaude Fable 5	e3bd340725	feat(aiui): Routstr as an explicit, session-gated AI provider path ... The D-04 Routstr leg was fallback-only — never user-selectable, and its Nostr discovery parses a docs-shaped event content ({endpoints, models, pricing}) that live kind-38421 announcements don't actually carry ({name, about}), so it could never match a real provider. This adds the explicit path AIUI's model picker needs: /aiui/api/routstr/models passes through the live aggregator catalog (the instance routstr.com's own frontend queries; the canonical api.routstr.com 404s), and /aiui/api/routstr/chat/completions makes one paid, non-streaming, OpenAI-shaped call — session-gated, egress-screened (S3), refused without an armed operator budget (D-05), paid via auto_pay_token, change and refused-request tokens redeemed back into the wallet so a failed attempt nets zero (verified live: quoted=1 reclaimed=1 net=0). nginx template gains the location in both server blocks (T-13-15). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-08-14 13:41:07 -04:00
Archipelago	b67e1527a2	Archipelago — open-source initial import	2026-08-12 10:55:50 +00:00