Repository navigation

review: whole-repo round after #177 (fixes, simplifications, docs, cut-list) - #179

Merged

CMGS merged 40 commits into

mainfrom

review/whole-repo-0915

Sep 14, 2026

Commits on Sep 14, 2026

wire: scan past a tag's siblings without recursing
CMGS
committed
10cc649
mcp: keep exec output when the call fails, cap it, and reject a negative ttl
CMGS
committed
3eac2a9
sdk/go: release the relay when a watch ends on its own
CMGS
committed
0a485c2
sdk/python: enforce the exec cutoff inside the guest
CMGS
committed
0652d6e
config: keep an explicit warm 0 under warm_max; refuse a wildcard advertise_addr on a mesh
CMGS
committed
3b42d68
server: stop a preview forward after one hop, keep encoded slashes, end WriteTo cleanly
CMGS
committed
a7a1b55
review: take the pool-key digest off the warm claim path; small simplifications
CMGS
committed
a4aa227
silkd: bound the find read on the handle, fail a session without entropy, latch a present lane verdict
CMGS
committed
965297f
review: silkd and boot-init simplifications
CMGS
committed
a6d0faf
review: comment register and budget sweep; adapter method order
CMGS
committed
05b0bda
pool: refuse capture verbs on an archived claim; keep rollbacks and egress doors off a released claim
CMGS
committed
0bc4ded
egress: keep the upstream connection for a closing guest; keep a clamped leaf cached
CMGS
committed
87ffe99
server: serve a held claim under a stale owner name; omit an unspecified owner address
CMGS
committed
098804d
mcp: bound read_file to a regular file under the exec cap
CMGS
committed
0cd543c
sdk/go: release the relay when a pty exits
CMGS
committed
017c97b
sdk/python: a wall-clock timeout on run and exec
CMGS
committed
c209a6d
silkd: bound the replace read through one handle
CMGS
committed
bd83542
review: simplify-lens follow-ups in silkd and boot-init
CMGS
committed
5ae1fd0
docs: align the pages with the code
CMGS
committed
5f0f600
sdk/go: stream a file into a writer; keep reading after a failed stdin close
CMGS
committed
64b578c
mcp: bound read_file by the bytes it reads
CMGS
committed
dc453a8
review: gofumpt the mcp tools table inside its var block
CMGS
committed
7f3bdab
pool: check for an archived claim under the transition lock
CMGS
committed
7659b82
sdk/langchain: refuse the command when the claim used the whole call budget
CMGS
committed
d66e083
silkd: read only a regular file
CMGS
committed
f8f7d64
mcp: refuse a non-regular file before streaming it
CMGS
committed
235d7e4
pool: read the VM name for the fork and checkpoint usage events under the transition lock
CMGS
committed
7d2b509
review: lint follow-ups
CMGS
committed
2a90c24
silkd: check the file kind on the opened descriptor
CMGS
committed
3cc28e7
egress: track both halves of a tunnel so Close ends it
CMGS
committed
120c83a
pool: drop the consumed snapshot when a release beats the wake to the finish
CMGS
committed
3fa209d
pool: evict a template's record lock with the record
CMGS
committed
e8bcac7
docs: align the remaining pages with the code
CMGS
committed
1f275a0
docs: tighten four sentences from the last review round
CMGS
committed
5a82908
pool: take the release re-check off the claim path
CMGS
committed
e85823c
review: drop the no-op Fetch release and the dead pty exit guard
CMGS
committed
4b8db0b
pool: write the archive delete marker outside the manager mutex
CMGS
committed
e6fc001
docs: a bare egress rule admits the SOCKS5 door
CMGS
committed
ef9a3f6
sdk/python: enforce run deadline through upgrade and send
CMGS
committed
b34ec98
sdk/python: wrap the exec send call
CMGS
committed
1616e17