codex-app-server

414 Commits 3 Branches 0 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
host	445376743d	feat: CHV 审核修复 P2（范围恢复为全做） P2-1：preflight reuse/CPU/内存校验块小提取为 _preflight_config_checks（纯移动，深耦合处如实停）。 P2-2：build_vm_command 降级为私有 _build_vm_command； Docker goal 内联解析顶部加正典分叉说明 + 同步检查清单。 P2-3：gaps grep 文本断言改成真实 Worker._run_attempt 行为断言。P2-4：README/build.sh 口径对齐（章节顺序、 BUILDINFO 名字列表、Node.js 不装写实）。P2-5：stop_vm 删除失败记审计。P2-6：CPU/内存校验统一进 preflight。测试：原 84 + 新增 33 = 117 项，mock，无真 VM。	2026-10-31 02:01:03 +00:00
host	9771ed9e8c	feat: CHV 审核修复（P0+P1，堆叠于 #230） P0：seed 磁盘 CIDATA ISO 挂进 VmConfig 第二块只读盘； restore provisioned 下复用钉死 known_hosts、缺失 fail-fast 绝不 keyscan；preflight 拦截 CHV_DISK_MODE=reuse（显式实验二次确认 + 审计放行）；SSH 目标选客机 IP 方案（显式 host > net 静态 ip > 显式转发宣称回环，三者皆无 fail-fast）。 P1：网关 extra_env 经 SSH env 前缀注入、worker 守卫收窄到 Local/CHV；取消/清理/看门狗接 CHV 通用路径；WarmPool acquire 内 resume；容量门持久化计数；磁盘配额总量+余量与已存在磁盘校验重拷；API 按 Content-Length 验完整性；快照 file:// 验落盘再 shutdown；execute 死端口归类 vm_not_running。 P2 全部排除未做（用户范围收窄令，留待以后一轨）。测试：原 84 + 新增 29 = 113 项，mock，无真 VM。	2026-10-31 01:54:13 +00:00
host	22b83f118a	feat: CHV gap fill — worker breakpoint wiring, pool reconcile, per-VM host keys, egress validation, guest build script Stack: #216 -> #221 -> this. Worker breakpoint branch now calls any executor providing goal_resume_breakpoint_task (Local keeps its original path, gateway tasks still loud-fail); WarmPool reconcile_orphans is called on CHV worker startup and close with audit-on-failure; per-VM SSH host keys are provisioned before VMM start via cloud-init NoCloud seed (keyscan kept only as weak fallback, CHV_HOST_KEY_MODE=provisioned\|keyscan); CHV_NET_JSON is validated in preflight and explicit direct egress is audited; chv-guest/build.sh is now real steps with --dry-run and fails fast without /dev/kvm. Tests: new test_chv_gaps.py (18), cloud full 1514 OK (skipped=4). No real VM verification: no KVM host.	2026-10-31 01:30:52 +00:00

Author

SHA1

Message

Date

host

445376743d

feat: CHV 审核修复 P2（范围恢复为全做）

P2-1：preflight reuse/CPU/内存校验块小提取为
_preflight_config_checks（纯移动，深耦合处如实停）。
P2-2：build_vm_command 降级为私有 _build_vm_command；
Docker goal 内联解析顶部加正典分叉说明 + 同步检查清单。
P2-3：gaps grep 文本断言改成真实 Worker._run_attempt
行为断言。P2-4：README/build.sh 口径对齐（章节顺序、
BUILDINFO 名字列表、Node.js 不装写实）。P2-5：stop_vm
删除失败记审计。P2-6：CPU/内存校验统一进 preflight。
测试：原 84 + 新增 33 = 117 项，mock，无真 VM。

2026-10-31 02:01:03 +00:00

host

9771ed9e8c

feat: CHV 审核修复（P0+P1，堆叠于 #230）

P0：seed 磁盘 CIDATA ISO 挂进 VmConfig 第二块只读盘；
restore provisioned 下复用钉死 known_hosts、缺失 fail-fast
绝不 keyscan；preflight 拦截 CHV_DISK_MODE=reuse（显式
实验二次确认 + 审计放行）；SSH 目标选客机 IP 方案（显式
host > net 静态 ip > 显式转发宣称回环，三者皆无 fail-fast）。
P1：网关 extra_env 经 SSH env 前缀注入、worker 守卫收窄到
Local/CHV；取消/清理/看门狗接 CHV 通用路径；WarmPool
acquire 内 resume；容量门持久化计数；磁盘配额总量+余量
与已存在磁盘校验重拷；API 按 Content-Length 验完整性；
快照 file:// 验落盘再 shutdown；execute 死端口归类
vm_not_running。
P2 全部排除未做（用户范围收窄令，留待以后一轨）。
测试：原 84 + 新增 29 = 113 项，mock，无真 VM。

2026-10-31 01:54:13 +00:00

host

22b83f118a

feat: CHV gap fill — worker breakpoint wiring, pool reconcile, per-VM host keys, egress validation, guest build script

Stack: #216 -> #221 -> this. Worker breakpoint branch now calls any
executor providing goal_resume_breakpoint_task (Local keeps its
original path, gateway tasks still loud-fail); WarmPool
reconcile_orphans is called on CHV worker startup and close with
audit-on-failure; per-VM SSH host keys are provisioned before VMM
start via cloud-init NoCloud seed (keyscan kept only as weak
fallback, CHV_HOST_KEY_MODE=provisioned|keyscan); CHV_NET_JSON is
validated in preflight and explicit direct egress is audited;
chv-guest/build.sh is now real steps with --dry-run and fails fast
without /dev/kvm. Tests: new test_chv_gaps.py (18), cloud full
1514 OK (skipped=4). No real VM verification: no KVM host.

2026-10-31 01:30:52 +00:00