[DO NOT MERGE] macos support + VNC XFCE - #1233

Open

dywongcloud wants to merge 348 commits into

microsoft:mainfrom

dywongcloud:main

This pull request is big! We're only showing the most recent 250 commits

Commits on Jul 17, 2026

Cherry pick "Use canonical address for cleanup" (#1035)

Sangho Lee (sangho2)
and
Sangho Lee
authored
17f5b42
Cherry pick "Harden LVBS/HEKI module/kexec validation against TOCTOU and confused deputy" (#1036)

Sangho Lee (sangho2)
and
Sangho Lee
authored
159feec
Bump bitflags to 2.13.1 in ulitebox (#1038)
Weiteng Chen (CvvT)
authored
2fd502f
Cherry pick "Enable concurrent mappings of shared normal-world/VTL0 physical pages" (#1039)

Sangho Lee (sangho2)
and
Sangho Lee
authored
c493927

Commits on Jul 18, 2026

Simplify broker principal rights (#1041)
Weidong Cui (wdcui)
authored
759546a
Unify broker readiness representation (#1042)

Weidong Cui (wdcui)
and
Copilot
authored
585cbe7
Handle broker connection loss (#1043)

Weidong Cui (wdcui)
and
Copilot
authored
1b76b09
Fix pipe edge-case semantics (#1044)

Weidong Cui (wdcui)
and
Copilot
authored
2d1d82a
Model connected ConDrv stream objects (#1046)

Weiteng Chen (CvvT)
and
Copilot
authored
3107ce8
Add broker-backed pipes (#1045)

Weidong Cui (wdcui)
and
Copilot
authored
7bbd902

Commits on Jul 19, 2026

Add broker shared-memory primitives (#1049)
Weidong Cui (wdcui)
authored
a9530c3

Commits on Jul 21, 2026

Commits on Jul 22, 2026

Tag broker control requests (#1060)

Weidong Cui (wdcui)
and
Copilot
authored
d9e06cc
fix(net): accept advisory socket options (IP_TOS, SO_RCVBUF, SO_SNDBUF) (cherry-pick of #1054) (#1062)

Will Portnoy (willportnoy)
and
Copilot
authored
6b186e3
Implement Windows WNF state lifecycle syscalls (#1063)

Weiteng Chen (CvvT)
and
Copilot
authored
77b7b11
Multiplex broker control calls (#1061)
Weidong Cui (wdcui)
authored
b5cf957
Add broker shared-buffer slots (#1065)

Weidong Cui (wdcui)
and
Copilot
authored
b0ca9f6
Cherry pick "Hoist VSM/HEKI types and errors into `litebox_common_lvbs`" (#1069)

Sangho Lee (sangho2)
and
Sangho Lee
authored
106e625

Commits on Jul 23, 2026

Commits on Jul 24, 2026

Move broker control traffic to shared-memory rings (#1080)

Weidong Cui (wdcui)
and
Copilot
authored
ce7ecce
Implement NtContinue context restoration (#1082)

Weiteng Chen (CvvT)
and
Copilot
authored
d69a4af
Add a shared-memory broker notification ring (#1081)

Weidong Cui (wdcui)
and
Copilot
authored
3fd0b0d
Move broker notifications to shared memory (#1083)

Weidong Cui (wdcui)
and
Copilot
authored
daa95c3
Implement synchronous NtWriteFile support (#1086)

Weiteng Chen (CvvT)
and
Copilot
authored
bcc8628

Commits on Jul 25, 2026

Publish broker readiness notifications (#1085)

Weidong Cui (wdcui)
and
Copilot
authored
f3a40f7

Commits on Jul 27, 2026

Split generic and Linux broker transports (#1092)

Weidong Cui (wdcui)
and
Copilot
authored
3f38fc8
Define broker socket contracts (#1094)

Weidong Cui (wdcui)
and
Copilot
authored
c48965b
Drop broker objects outside reference locks (#1095)

Weidong Cui (wdcui)
and
Copilot
authored
ec13694
Bound broker resource budgets per session
dywongcloud
committed
014f354
Pin the quota invariants review found unguarded
dywongcloud
committed
c0e2459
Merge branch 'main' into dywongcloud/bound-broker-resource-budgets-per-session
dywongcloud
authored
d8f8f30
Merge pull request #7 from dywongcloud/dywongcloud/bound-broker-resource-budgets-per-session
dywongcloud
authored
118f42e

Commits on Jul 30, 2026

Add secure Next.js/TypeScript BD operating system dashboard
Claude (claude)
committed
ebf77ad

Commits on Jul 31, 2026

Commits on Aug 7, 2026

Add a macOS/Apple Silicon platform and port the Linux shim to AArch64
Claude (claude)
committed
1239662

Commits on Aug 8, 2026

Fix a Mach VM reservation leak and add CoW file mapping to the macOS platform
Claude (claude)
committed
f236655
Fix macOS timer firing to actually wake the blocked guest thread
Claude (claude)
committed
1d123c0
Document the per-thread signal-attribution gap for macOS
Claude (claude)
committed
7841fe1
Fix MAP_JIT+MAP_FIXED on macOS, invalidate icache after code writes, close a write() DoS, and make exception-table lookup Miri-testable
Claude (claude)
committed
80e5ddb
Fix invalid YAML in the miri job, add a real-hardware Darwin ABI conformance check, and document the jit_write_protect gap
Claude (claude)
committed
a29f21e
Replace several reachable panics in litebox_shim_linux with graceful errno returns
Claude (claude)
committed
3fe3cf5
Add a roadmap doc for known gaps found across this session's macOS work
Claude (claude)
committed
585152c
Fix darwin_abi_probe.c field names against the real macOS SDK, verified on real Apple Silicon hardware
dylanwongtencent
committed
ebab72c
Resolve the TPIDR_EL0 anchor question with a real-hardware measurement
dylanwongtencent
committed
7649c22
Make executable pages actually attainable on macOS: MAP_JIT migration, per-thread write bracketing, CoW-exec rejection
Claude (claude)
committed
6de88a1
Implement Host::MacOs in litebox_syscall_rewriter, anchored on TPIDRRO_EL0
dylanwongtencent
committed
b6cb941
Stop Host::MacOs from being selected for real work: its guest-slot addressing corrupts live libpthread state
dylanwongtencent
committed
8a7f51c
Sharpen guest-entry scope: the platform's own context-switch bookkeeping needs a per-thread primitive too, not just the rewriter's gates
dylanwongtencent
committed
6fa5c51
Complete Host::MacOs: address the guest thread pointer at a reserved pthread TSD slot
Claude (claude)
committed
50ef3db
Bring guest.rs's module docs in line with the now-implemented Host::MacOs
Claude (claude)
committed
f1357ed
Find and hardware-verify the actual way to implement macOS guest entry: Darwin's ucontext.h API, not hand-rolled register-restore asm
dylanwongtencent
committed
e7cd2ce
Add the guest TPIDR TSD-slot reservation, and find the fixed slot number (256) is wrong on real hardware
dylanwongtencent
committed
c0316cd
Implement AArch64 guest entry for macOS: a working, hardware-tested context switch
dylanwongtencent
committed
ffe8db9
Make MacOsUserland constructable: soften the guest-TP TSD-slot mismatch from panic to warning
dylanwongtencent
committed
3b9071a
Harden guest-entry with a register-fidelity test across capture and resume
dylanwongtencent
committed
d949738
Infrastructure for load-time macOS guest-TP offset indirection

dylanwongtencent
and
Claude (claude)
committed
12f5a34
Initialize guest-TP trampoline slot in prologue

dylanwongtencent
and
Claude (claude)
committed
c2bca5e
Update roadmap: document macOS guest-TP load-time offset indirection progress

dylanwongtencent
and
Claude (claude)
committed
6607a7e
Read the macOS guest-TP offset at load time instead of baking it in
lanmower (lanmower)
committed
27bcbae
Publish the macOS guest-TP offset from the loader, and fix the suite on macOS
lanmower (lanmower)
committed
dc33354
Carry the guest's FP/SIMD state across the macOS guest-entry switch
lanmower (lanmower)
committed
58cc9aa
Stop trapping on CTR_EL0, and make the shim's tests run on macOS
lanmower (lanmower)
committed
a2a7820

Commits on Aug 9, 2026

Commits on Aug 10, 2026

Fill pt_regs::syscallno, and run real Linux programs on macOS
lanmower (lanmower)
committed
205c12c
Accept AT_SYMLINK_NOFOLLOW in newfstatat, so a shell runs
lanmower (lanmower)
committed
bedfdf2
Implement getgroups, so busybox id reports instead of failing
lanmower (lanmower)
committed
ec53387
Report the task's own gid from getgroups, and record why fault routing is not a small change
lanmower (lanmower)
committed
083c44b
Route macOS guest-TP virtualization through the reserved TSD slot
dylanwongtencent
committed
654871a
Implement setuid/setgid, treat a guest's own pid/tid as self in prlimit/get_robust_list, and allow macOS host-mode packaging of static binaries
dylanwongtencent
committed
02dbafe
Untrack the Workflow tool's isolated worktree directories, and ignore them going forward
dylanwongtencent
committed
3610968
Fix broken CI (no_std allow-list gap + fmt), enforce guest sigaltstack, fix timer-test flakiness at its real cause, unblock the macOS mapping-collision test, and add a real MappingError::Io variant
dylanwongtencent
committed
6c685cb
Untrack the 2 remaining stale worktree gitlink index entries
dylanwongtencent
committed
e682b50
Implement real utimensat timestamp persistence, and add automated broker unauthenticated-access + malformed-message gates
dylanwongtencent
committed
1eff03d
Make PENDING_SIGNALS per-thread instead of process-wide
dylanwongtencent
committed
a6ab55a
Implement IPv6 sockaddr copy, SO_BROADCAST-disable, non-TCP SO_KEEPALIVE, and pipe2(O_DIRECT) as an accepted no-op
dylanwongtencent
committed
36297f4
Poll nested epoll fds under a global lock, so concurrent adds can't race a cycle into existence
dylanwongtencent
committed
f19c64a
Route guest hardware faults to EnterShim::exception on macOS, closing the disclosure risk
dylanwongtencent
committed
73e5071
Harden get_unmmaped_area's top-down search against reserved pages above TASK_ADDR_MAX
dylanwongtencent
committed
17a5b14
Populate the delivered signal frame's FP/SIMD state and add a sigreturn trampoline for handlers without SA_RESTORER (macOS aarch64)
dylanwongtencent
committed
116eb5c
Provide a minimal /proc filesystem, so real-guest df/free/ps work instead of failing outright
dylanwongtencent
committed
e936c6a
Make Darwin mmap-hint placement authoritative, so guest memory stays inside TASK_ADDR_MAX under concurrent launches
dylanwongtencent
committed
1e9b4c2
Reserve a Unix-socket address atomically at bind(), closing the bound-but-not-listening collision gap
dylanwongtencent
committed
bde299e
Add a permanent trace-gated register-on-fault log, and definitively refute the TPIDR_EL0 hypothesis for the remaining concurrent-launch SIGSEGV
dylanwongtencent
committed
dcf18d4
Route SIGUSR2 to EnterShim::interrupt on macOS aarch64, and honor allocate_jit_pages's suggested address hint
dylanwongtencent
committed
fdfa5a4
Reattempt and correctly decline per-thread guest-entry context-switch bookkeeping, with a hardware-disproven candidate design
dylanwongtencent
committed
ae5c55e
Add a regression test proving litebox's UDP socket bookkeeping stays bounded per guest fd, not per remote destination
dylanwongtencent
committed
983e116
Implement real interactive terminal support: non-blocking stdin, real termios raw mode, job control, and serialized concurrent stdio writes
dylanwongtencent
committed
641e008
Implement chmod/fchmod/fchmodat, utimensat/futimens, and flock(2), previously ENOSYS despite the fs layer already fully supporting the first two
dylanwongtencent
committed
656f53a
Implement sched_getparam/setparam/getscheduler/setscheduler, and add the missing clock_gettime clock IDs V8 aborts the process for
dylanwongtencent
committed
e2bc38c
Poll under a real ppoll lost-wakeup race test, close leaked fds on process exit, and implement FUTEX_REQUEUE
dylanwongtencent
committed
80afa90
Stop layered filesystem copy-up from crashing the guest on base-image files
dylanwongtencent
committed
80c7e04
Fix a real tar EOF-block bug and populate AT_HWCAP for real hardware, toward booting Node.js/Bun on macOS-userland
dylanwongtencent
committed
0fccb50

Commits on Aug 11, 2026

Resolve versioned .so symlinks when packaging, and add a real Seatbelt sandbox on macOS
dylanwongtencent
committed
95d489e
Lift the single-guest-thread limit on macOS, make the fault handler async-signal-safe, and root-cause the x18 bug
dylanwongtencent
committed
8c355f6
Deliver SIGILL to the guest instead of killing the runner
dylanwongtencent
committed
4974338
Add an npx package that boots a LiteBox guest on any supported host
dylanwongtencent
committed
e01c2c0
SPIKE (do not merge): fork attempt - spike/fork-host-fork
dylanwongtencent
committed
2cc0020
Implement guest fork(2) with delayed address-space handoff, so pipes and external commands work
dylanwongtencent
committed
691fd87
Stop refusing guest MAP_SHARED anonymous mappings on macOS
dylanwongtencent
committed
c4b0261
Populate wait4's rusage from real per-thread CPU time, and add an AWK-loop benchmark suite with profiler-based root-cause writeup

dylanwongtencent
and
Claude (claude)
committed
b7282b6
Add a transport-agnostic PointToPointTransport for a future vsock-style SNP boot channel, and scope the rest of that migration

dylanwongtencent
and
Claude (claude)
committed
8fd711b
Add Landlock filesystem-path scoping to the Linux runner, closing the seccomp filter's path-blindness gap

dylanwongtencent
and
Claude (claude)
committed
5347acc
Fix pre-existing cargo fmt drift in litebox/src/fs/tests.rs, unblocking CI's Build and Test job

dylanwongtencent
and
Claude (claude)
committed
55bb03a
Fix remaining pre-existing cargo fmt drift in litebox_platform_macos_userland, fully unblocking CI's fmt gate

dylanwongtencent
and
Claude (claude)
committed
f99e6d5
Fix clippy::pedantic duration_suboptimal_units lint in the rusage regression test

dylanwongtencent
and
Claude (claude)
committed
f9a7e21
Fix pre-existing E0793 (unaligned reference to packed struct field) blocking 3 CI jobs

dylanwongtencent
and
Claude (claude)
committed
6d45e06
Allow CLOCK_THREAD_CPUTIME_ID/CLOCK_PROCESS_CPUTIME_ID through the Linux seccomp filter, and fix docs/benchmarks/run.sh's copyright header

dylanwongtencent
and
Claude (claude)
committed
f9fae3e
Fix cargo fmt on the previous commit's seccomp rule

dylanwongtencent
and
Claude (claude)
committed
2c03150
Un-wire Landlock from the runner startup path: it broke a real broker/rewriter integration test in CI

dylanwongtencent
and
Claude (claude)
committed
c74f2f4
Fill AT_RANDOM with real CSPRNG bytes instead of a hardcoded constant

dylanwongtencent
and
Claude (claude)
committed
942dc8a
Fix a real memory-ordering bug in FutexManager::wake/requeue, and add FUTEX_CMP_REQUEUE

dylanwongtencent
and
Claude (claude)
committed
7f1bb81
Implement handle_futex_death (was a todo!() panic), wire up FUTEX_CMP_REQUEUE dispatch, and implement setpgid/getpgid

dylanwongtencent
and
Claude (claude)
committed
675f5e9
Fix two real bugs in the Windows guest-exception handler: FS_BASE livelock, and garbage thread_ctx on genuine exceptions

dylanwongtencent
and
Claude (claude)
committed
237eb6e
Fix TIOCGWINSZ hardcoded 20x20 causing spurious echo-wrap in interactive shells

dylanwongtencent
and
Claude (claude)
committed
8c15fc2
Fix fcntl(F_SETFL) unimplemented!() panic on regular files, and create standard FHS directories at startup

dylanwongtencent
and
Claude (claude)
committed
4ffac2a
Fix a broken rustdoc intra-doc link from the rusage fix

dylanwongtencent
and
Claude (claude)
committed
df06fc3
Implement dirfd-relative path resolution for openat/newfstatat/faccessat

dylanwongtencent
and
Claude (claude)
committed
868229b

Commits on Aug 13, 2026

Broaden force_signal_with_info's signal assert to match what exception_signal can actually decode
dylanwongtencent
committed
f4c1484
Fix redundant-explicit-link and private-item rustdoc lints blocking the macOS CI doc-build job
dylanwongtencent
committed
12bddb4

Commits on Aug 14, 2026

Integrate the -ffixed-x18 musl fix into the real packaging pipeline; fix a real guest-X16 ABI gap; add --host to the syscall rewriter CLI
dylanwongtencent
committed
697e927
Document why the guest-resume vehicle-register approach is a dead end, not a fix
dylanwongtencent
committed
b45c112
Close a real host/guest address-space collision window; add a decisive x17-survives-SVC regression pin
dylanwongtencent
committed
8a65efa

Commits on Aug 15, 2026

Fix the Node.js boot crash: publish the runtime TP-slot offset on the mmap path, not just the loader path
dylanwongtencent
committed
ba60bb4
Node.js executes real JavaScript on macOS: local eventfd fallback, Linux hint semantics for mmap, syscall-result tracing
dylanwongtencent
committed
3c727e5
Node child_process works on macOS: multithreaded fork gate, coalescing-safe exec release, per-arch epoll_event layout
dylanwongtencent
committed
f061dba
Stock Node runs full JIT JavaScript on macOS without --jitless: MAP_JIT W^X fault-toggling + CTR_EL0 emulation

dylanwongtencent
and
Claude (claude)
committed
661ecea
Support EPOLL_CTL_MOD instead of returning EINVAL, so libuv stops aborting

dylanwongtencent
and
Claude (claude)
committed
6a958de
Give the macOS guest a working 127.0.0.0/8 loopback so in-process TCP connects

dylanwongtencent
and
Claude (claude)
committed
714fd7b
Add symbolic-link storage to the in-memory fs, behind the FileSystem trait

dylanwongtencent
and
Claude (claude)
committed
85045d2
Wire symlink/symlinkat and follow trailing links, so require() resolves symlinks

dylanwongtencent
and
Claude (claude)
committed
c115726
Dereference a trailing symlink in access(2) and chdir(2)

dylanwongtencent
and
Claude (claude)
committed
b5e4183
Drop a needless Ok(..?) wrapper in do_readlink

dylanwongtencent
and
Claude (claude)
committed
96e5571
Follow stat(2) symlinks with the leaf resolver, fixing relative targets

dylanwongtencent
and
Claude (claude)
committed
7f128db
Parse and resolve symbolic links packaged in the read-only tar layer

dylanwongtencent
and
Claude (claude)
committed
b213813
Degrade an unsatisfiable mremap grow to ENOMEM instead of EFAULT

dylanwongtencent
and
Claude (claude)
committed
9228811
Follow symlinks in intermediate path components, not just the trailing one

dylanwongtencent
and
Claude (claude)
committed
947f492
Provide /proc/stat and /proc/cpuinfo, so os.cpus() stops returning []

dylanwongtencent
and
Claude (claude)
committed
70c33a0
Lay out argv/environ in Linux kernel order, so libuv can size process.title

dylanwongtencent
and
Claude (claude)
committed
86243d3

Commits on Aug 16, 2026

Implement getrusage, so process.cpuUsage()/resourceUsage() stop throwing ENOSYS

dylanwongtencent
and
Claude (claude)
committed
0b53c63
Resolve /proc/self and add /proc/<pid>/statm, so process.memoryUsage() works

dylanwongtencent
and
Claude (claude)
committed
1d2966a
Implement rename/renameat/renameat2, so fs.renameSync stops returning ENOSYS

dylanwongtencent
and
Claude (claude)
committed
f37c4cb
Wire chown/lchown/fchownat, so ownership-preserving copies stop hitting ENOSYS

dylanwongtencent
and
Claude (claude)
committed
a56c175

Commits on Aug 17, 2026

Wire fchown via a new fd_chown, completing the chown family

dylanwongtencent
and
Claude (claude)
committed
dbc767a
Add an AF_NETLINK route socket, so os.networkInterfaces() works

dylanwongtencent
and
Claude (claude)
committed
876e41c

Commits on Aug 19, 2026

fix(network): make optional addresses self-contained
dylanwongtencent
committed
4815891

Commits on Aug 20, 2026

feat(terminal): honor TCSETSW/TCSETSF, add per-guest IP override, npm 0.1.1
dylanwongtencent
committed
4a62d24
fix(ci): clear clippy 1.98 lints, fmt drift, and vendored-crate no_std check

dylanwongtencent
and
Claude (claude)
committed
3666348
fix(ci): clear remaining clippy pedantic errors on macOS and rewriter

dylanwongtencent
and
Claude (claude)
committed
de65eb0

Commits on Aug 21, 2026

shim_linux: restore /proc/self/fd/{0,1,2} stat and readlink
dylanwongtencent
committed
5c58889
shim_linux: report Linux-compatible uname sysname
dylanwongtencent
committed
1b206eb
shim_windows: fix CI clippy lints from toolchain 1.98
dylanwongtencent
committed
b854f87
fix(ci): green the cross-platform test suite

dylanwongtencent
and
Claude (claude)
committed
de0d9a8
fix(ci): unmask shim_windows unused imports, absorb alarm lateness

dylanwongtencent
and
Claude (claude)
committed
481e70a
fix: getrusage/wait4 guest-stack overrun, doc gate, pipe-hang probes

dylanwongtencent
and
Claude (claude)
committed
d061995
runner: disambiguate guest signal death from exit-code aliasing

dylanwongtencent
and
Claude (claude)
committed
96bf0ba
test(broker): probe the failing zero-length EBADF checks with actuals

dylanwongtencent
and
Claude (claude)
committed
c1950b3
fix(shim): dispatch zero-length writes so fd checks run first

dylanwongtencent
and
Claude (claude)
committed
11552e8
test(broker): name the sub-test and phase around the guest SIGSEGV

dylanwongtencent
and
Claude (claude)
committed
562c334

Commits on Aug 22, 2026

test(broker): print from the io thread's first instruction

dylanwongtencent
and
Claude (claude)
committed
110cb6e
shim: log guest hardware exceptions; harness: surface runner errors

dylanwongtencent
and
Claude (claude)
committed
fa53176
shim: include rsp in the guest fault-location log; debug-level harness

dylanwongtencent
and
Claude (claude)
committed
9d040a5
test(broker): print both threads' exact stack ranges

dylanwongtencent
and
Claude (claude)
committed
511f755
test(broker): trace-level shim logging for the SIGSEGV round

dylanwongtencent
and
Claude (claude)
committed
d2d6a80
test(broker): fix self-inflicted arm_alarm recursion

dylanwongtencent
and
Claude (claude)
committed
b94c953
test: drop the diagnostic trace filter that starved the curl guest

dylanwongtencent
and
Claude (claude)
committed
57278c2
docs: de-link intra-doc references that only resolve on one cfg view

dylanwongtencent
and
Claude (claude)
committed
758e95b
fix(mm): harden unmap boundary handling
dylanwongtencent
committed
907e017
diag(mm): expose rejected cross-ceiling unmaps
dylanwongtencent
committed
0a36e19
fix(ci): isolate transient guest staging from cache
dylanwongtencent
committed
7850797

Commits on Aug 23, 2026

test(ci): live-witness Windows deallocation across free holes
dylanwongtencent
committed
bcfd349
fix(ci): resolve Windows probe rlib paths via cargo artifact JSON
dylanwongtencent
committed
33a6791
fix(ci): unify Windows probe cargo package selection for feature parity
dylanwongtencent
committed
e0959e2
fix(ci): replace fragile Windows probe rustc invocation with a cargo example
dylanwongtencent
committed
54d2ba4
fix(ci): gate the Windows deallocation example behind cfg(windows)
dylanwongtencent
committed
90cfb73
fix: add required copyright header to the Windows deallocation example
dylanwongtencent
committed
3f5d39b

Commits on Aug 24, 2026

diag(ci): trace real host file opens for the Landlock re-enablement investigation
dylanwongtencent
committed
4457d90
diag(ci): isolate Landlock probe opens to the spawned runner process by PID
dylanwongtencent
committed
e60f32c
diag(ci): anchor Landlock probe PID match to the executable path, not any argument
dylanwongtencent
committed
38064e7
fix(landlock): re-enable filesystem ruleset in litebox_runner_linux_userland startup
dylanwongtencent
committed
4f68241
chore(ci): remove the superseded Landlock strace diagnostic
dylanwongtencent
committed
ccae0b7

Commits on Aug 25, 2026

feat(fbdev): emulate /dev/fb0 with full fbdev ioctl contract
dylanwongtencent
committed
16c5821
fix(fbdev): cargo fmt + resolve rustdoc broken-link/bare-URL warnings
dylanwongtencent
committed
5abdf00
feat(rfb): runner-side VNC server presenting the guest /dev/fb0 framebuffer
dylanwongtencent
committed
b976417
fix(ci): add litebox_rfb to the no_std check's std-allowed crate list
dylanwongtencent
committed
6717d8c
feat(evdev): /dev/input/event* emulation wired to VNC input
dylanwongtencent
committed
5251e6a
fix(test): retry reserve-alignment host-fidelity probe on stale address
dylanwongtencent
committed
7618316
feat(packager): package a locally-built rootfs tar via --oci-rootfs-tar

dylanwongtencent
and
Claude (claude)
committed
04ec654
feat(fb): coherent MAP_SHARED guest mmap of /dev/fb0

dylanwongtencent
and
Claude (claude)
committed
9f7c474
fix(doc): update stale intra-doc link after clear_guest_mapping rename

dylanwongtencent
and
Claude (claude)
committed
69c69f4
feat(shim): answer VT console ioctls as a single permanently-active VT

dylanwongtencent
and
Claude (claude)
committed
b0b732f
fix(lint): merge identical VT ioctl match arms

dylanwongtencent
and
Claude (claude)
committed
d54ec61
fix(shim): honor a null sigset inside pselect6's sigsetpack

dylanwongtencent
and
Claude (claude)
committed
2555187
feat(vnc): bridge RFB keyboard into guest stdin

dylanwongtencent
and
Claude (claude)
committed
3f7d8ae
fix(doc): restore run()'s doc block and document new_with_options panics

dylanwongtencent
and
Claude (claude)
committed
e44b806
feat(net): guest web access without root via an in-stack HTTP proxy

dylanwongtencent
and
Claude (claude)
committed
624f0ce
fix(doc): qualify the Framebuffer intra-doc link in do_mmap_framebuffer

dylanwongtencent
and
Claude (claude)
committed
0cd30ba
fix(build): cover DeviceKind::Mice in the EV_KEY capability bitmap

dylanwongtencent
and
Claude (claude)
committed
8926859
feat(input): /dev/input/mice -- mousedev-exact PS/2 mouse emulation

dylanwongtencent
and
Claude (claude)
committed
ea96257
fix(doc): drop private-field intra-doc link in DeviceKind::Mice

dylanwongtencent
and
Claude (claude)
committed
323da2a
feat(vnc-web): browser-based viewer for the guest framebuffer

dylanwongtencent
and
Claude (claude)
committed
5abd0c8
fix(lint): use as_chunks for constant-size chunking in web.rs

dylanwongtencent
and
Claude (claude)
committed
1c91da3
feat(shim): the syscall surface an X11 desktop stack needs

dylanwongtencent
and
Claude (claude)
committed
323d133
fix(channel): replace ringbuf caching halves with one shared locked deque

dylanwongtencent
and
Claude (claude)
committed
a9c705b
fix(boilerplate): put the license header first in viewer.html

dylanwongtencent
and
Claude (claude)
committed
719a5be
fix(fs): let --guest-root own what the guest creates

dylanwongtencent
and
Claude (claude)
committed
fa33995
fix(test): pre-warm the guest allocator before the reserve-alignment probe

dylanwongtencent
and
Claude (claude)
committed
fb8cf1b
fix(runner): name the port and likely cause in viewer bind errors

dylanwongtencent
and
Claude (claude)
committed
6e10214
feat(packager): script to rebuild the desktop package closure with -ffixed-x18

dylanwongtencent
and
Claude (claude)
committed
ae07970
fix(packager): make desktop x18 rebuilds dependency-safe

dylanwongtencent
and
Claude (claude)
committed
b3b3963
feat(packager): add reproducible XFCE browser desktop image

dylanwongtencent
and
Claude (claude)
committed
49a0862
fix(packager): keep x18 reserved in GCC outputs

dylanwongtencent
and
Claude (claude)
committed
a859dcf

Commits on Aug 28, 2026

Delete tencent-bd-dashboard directory
dywongcloud
authored
055b582
fix(runner): propagate CString NUL errors and name infallible /tmp setup

dylanwongtencent
and
Claude (claude)
committed
4d8bcd2
fix(vnc-web): bound stalled pre-upgrade clients to a 5s read timeout

dylanwongtencent
and
Claude (claude)
committed
fe91fff
fix(packager): supply build-aux/ for Alpine's split gettext-runtime tarball

dylanwongtencent
and
Claude (claude)
committed
85eb360
fix(packager): scope the x18 residual gate to what the image ships

dylanwongtencent
and
Claude (claude)
committed
a223669
fix(packager): scope x18 gate to the live smoke-test closure, add simdutf

dylanwongtencent
and
Claude (claude)
committed
52253fd
fix(packager): x18-reserve the rest of the live smoke-test closure

dylanwongtencent
and
Claude (claude)
committed
6a0dd83
fix(packager): scan the packaged tar for x18 residual, not the pre-package image

dylanwongtencent
and
Claude (claude)
committed
e9b6400
fix(packager): persist the gmp/util-linux LTO patches into the rebuild script

dylanwongtencent
and
Claude (claude)
committed
791ce3e
fix(fs): propagate unsupported open() flags instead of panicking

dylanwongtencent
and
Claude (claude)
committed
c9c5be7
fix(signals): implement tkill/tgkill delivery to sibling threads

dylanwongtencent
and
Claude (claude)
committed
d7a6857
xfce
dylanwongtencent
committed
f0b6d7b
xfce fixed
dylanwongtencent
committed
7c20fe3

Commits on Aug 30, 2026

fix(shim/net/xfce): DNS resolution, ping raw sockets, ifconfig struct size, xfce panel freeze

dylanwongtencent
and
Claude (claude)
committed
ea06455
fix(xfce): serialize Thunar and xterm launch to avoid X client startup race

dylanwongtencent
and
Claude (claude)
committed
f027100

Commits on Aug 31, 2026

test(macos-userland): add live X16 sentinel probe, refuting the roadmap's X16-corruption hypothesis

dylanwongtencent
and
Claude (claude)
committed
78062e8
feat(xfce): add a standing watchdog for the intermittent panel/taskbar freeze

dylanwongtencent
and
Claude (claude)
committed
b5dfc2a
diag(xfce): add heartbeat proving xfce4-panel, not Xorg/xfwm4, is the freeze culprit

dylanwongtencent
and
Claude (claude)
committed
88d7a15

Commits on Sep 2, 2026

hvuf
dylanwongtencent
committed
970152d

Commits on Sep 8, 2026

feat(hvf): full-JIT W^X toggle, cross-process memory guards, mmap-hint fix; land uncommitted HVF backend

dylanwongtencent
and
Claude (claude)
committed
4a17030
Merge remote-tracking branch 'origin/main'
dylanwongtencent
committed
612bbab
feat(hvf): LITEBOX_HVF_LANES diagnostic knob; in-repo live guest witnesses for the W^X toggle

dylanwongtencent
and
Claude (claude)
committed
1977343
fix(shim): refuse mremap on another live process's range -- root cause of the concurrent-process SIGSEGV

dylanwongtencent
and
Claude (claude)
committed
30f1198