Complete Linux desktops, engine recovery, and agent sandboxes for 0.4.6 - #83

Merged

Augani merged 339 commits into

mainfrom

codex/virtual-workspace-foundation

Aug 29, 2026

This pull request is big! We're only showing the most recent 250 commits

Commits on Aug 21, 2026

feat(vm): show file transfer progress
Augani
committed
38596d7
feat(vm): add Dory Tools repair action
Augani
committed
d4c4a2f
fix(vm): clean daemon-owned transfer staging
Augani
committed
9a269c9
feat(vm): expose active transfer recovery
Augani
committed
05ff6ed
feat(vm): recover active transfers in app
Augani
committed
1fde99c
feat(guest): define cross-platform tools packages
Augani
committed
d6949ec
test(vm): repair runtime planning fixture
Augani
committed
e24215a
feat(vm): support disconnected VZ networking
Augani
committed
4d98ade
feat(vm): support disconnected raw-hv networking
Augani
committed
d4893ed
feat(vm): expose typed network modes
Augani
committed
1d736f9
fix(vm): retain disconnected network devices
Augani
committed
4a5e87f
fix(cli): stop importing host credentials into machines
Augani
committed
a479573
feat(vm): define typed sandbox policy
Augani
committed
18d8647
test(vm): align planning fixtures with launch contracts
Augani
committed
1838a73
feat(vm): persist typed sandbox policy
Augani
committed
287508c
feat(vm): report diagnostic overrides safely
Augani
committed
04cde6d
feat(release): verify signed catalog metadata
Augani
committed
63229c7
feat(release): bind exact app SBOM
Augani
committed
9fcf693
feat(release): add clean DMG install gate
Augani
committed
a1cf9d9
feat(components): import signed local candidates
Augani
committed
4f1d3ff
fix(release): qualify signed Venus desktops
Augani
committed
834fd2f
feat(release): qualify VM resource reconfiguration
Augani
committed
2abf87c
feat(release): qualify sandbox isolation
Augani
committed
4a32bd5
feat(release): qualify SSH agent forwarding
Augani
committed
950cc65
feat(release): qualify bind advisory locks
Augani
committed
38aaffd
feat(release): qualify non-native builds
Augani
committed
4ee9a82
feat(release): qualify external APFS binds
Augani
committed
4895a34
feat(release): qualify host network recovery
Augani
committed
6dccf7d
feat(release): qualify P0 candidate smoke
Augani
committed
f4bbd04
feat(release): qualify engine readiness
Augani
committed
41980f1
fix(release): use exact offline readiness fixtures
Augani
committed
6537c32
feat(release): qualify exact live candidate
Augani
committed
1813d32
feat(release): verify exact Sparkle update
Augani
committed
8413a01
feat(release): qualify live engine migration
Augani
committed
9ab62d2
feat(release): qualify Dev Containers compatibility
Augani
committed
7ecca90
feat(release): qualify Act compatibility
Augani
committed
f245e6c
feat(release): qualify Testcontainers and Ryuk
Augani
committed
137985a
feat(release): qualify LocalStack compatibility
Augani
committed
625bfa6
feat(release): qualify Tilt Compose compatibility
Augani
committed
938b7f8
feat(release): qualify exact Supabase stack
Augani
committed
0dbb714
feat(release): qualify Kubernetes tooling
Augani
committed
ef14deb
feat(release): qualify default platform selection
Augani
committed
56cea14
feat(release): qualify bind file coherence
Augani
committed
9c3e627
feat(release): qualify prune safety
Augani
committed
4f0fed4
feat(release): qualify data drive volume identity
Augani
committed
74cd7c2
feat(release): qualify data disk growth
Augani
committed
46470fd
feat(release): qualify ECR push retry
Augani
committed
7187623
feat(release): qualify private registry auth
Augani
committed
075f8c6
feat(release): qualify offline bundled boot
Augani
committed
acf2f26
feat(release): qualify competitor runtime regressions
Augani
committed
cb49de1
feat(release): qualify managed data drive
Augani
committed
c2c7f80
feat(release): qualify native IPv6
Augani
committed
f42ae85
feat(release): qualify non-native exec conformance
Augani
committed
c164663
feat(release): qualify non-native Nix GC
Augani
committed
1aa9dae
feat(release): qualify non-native Arch pacman
Augani
committed
fa3ed8c
feat(release): qualify non-native mmdebstrap
Augani
committed
a63ad4a
feat(release): qualify gvproxy QEMU switch
Augani
committed
abed93d
feat(release): qualify long-lived networking
Augani
committed
3d77caa
feat(release): qualify endurance reliability
Augani
committed
66e16c2
feat(release): qualify exact signed candidate
Augani
committed
3103504
feat(release): verify durable qualification
Augani
committed
bcec41a
test(ci): track hosted test log parser
Augani
committed
8c61874
test(security): track product safety contracts
Augani
committed
a82fd20
test(release): track payload policy regressions
Augani
committed
87f89bb
test(release): track installer verification contracts
Augani
committed
7be8e40
test(readiness): track offline resource contracts
Augani
committed
6a6b220
feat(release): track transactional upgrade contract
Augani
committed
1f690d6
test(storage): track data-drive lifecycle contracts
Augani
committed
f87cb12
feat(release): verify physical sleep evidence
Augani
committed
3b4a667
test(compat): track protocol consumer contracts
Augani
committed
7e293b3
test(benchmark): track offline campaign contracts
Augani
committed
9638549
test(release): track clean source authority
Augani
committed
40bf7b7
feat(release): harden nested Sparkle signing
Augani
committed
840254b
test(hostshare): track offline integration harness
Augani
committed
44528f3
test(diagnostics): track doctor regression suite
Augani
committed
0ce1a09
feat(release): verify Sparkle install evidence
Augani
committed
1d595e8
feat(release): validate published outputs
Augani
committed
9ed72cd
test(release): track Homebrew install gate
Augani
committed
62117a0
test(release): track performance qualification
Augani
committed
94dc312
test(network): track source-preserving LAN gate
Augani
committed
b18b1c6
test(release): track Sparkle install gate
Augani
committed
42acb13
test(network): track VZ IPv6 gate
Augani
committed
8e99268
feat(release): track packaging utilities
Augani
committed
cc8f449
feat(release): track release orchestrator
Augani
committed
ba6e5d3
test(ci): track app test umbrella
Augani
committed
7c99c89
test(release): track interrupted upgrade gate
Augani
committed
e45c4a9
test(release): align desktop rollback contract
Augani
committed
d55734d
fix(release): harden workflow trust checks
Augani
committed
d2c0790
test(vm): qualify Zed on native Venus
Augani
committed
a4e6d22
fix(vm): replan restored workspaces
Augani
committed
bd5a1db
test(vm): gate exact snapshot recovery
Augani
committed
92dbd14
test(vm): prove graceful guest shutdown
Augani
committed
140dab3
test(vm): qualify dynamic Retina resize
Augani
committed
fe45f49
test(vm): qualify bidirectional clipboard
Augani
committed
05c8120
test(vm): qualify keyboard and pointer input
Augani
committed
34ff7d4
feat(vm): render guest cursor shape
Augani
committed
06f0f52
feat(vm): qualify full-screen display
Augani
committed
7445d00
test(vm): qualify guest cursor shape
Augani
committed
77e8b39
fix(vm): release input on focus loss
Augani
committed
4d20498
feat(vm): bind resolved display geometry
Augani
committed
07e85e2
fix(vm): recover host audio device changes
Augani
committed
ece44bc
fix(vm): bound host audio queues
Augani
committed
648a99e
fix(vm): fail denied microphone capture
Augani
committed
cf4156b
fix(vm): latch microphone permission denial
Augani
committed
53eb556
feat(vm): bind display scale contract
Augani
committed
81c4b6c
feat(vm): apply resolved guest UI scale
Augani
committed
3bc2463
fix(vm): bind host share roots before launch
Augani
committed
60e4716
feat(vm): persist host share authorization
Augani
committed
c0d4c62
fix(vm): require authorization for new shares
Augani
committed
27adb11
fix(vm): preserve stable share tags
Augani
committed
a79728d
fix(diagnostics): omit private machine paths
Augani
committed
2194cdd
fix(app): reject malformed share status
Augani
committed
6c61a33
feat(agent): add bounded guest file reads
Augani
committed
3de141c
feat(core): stage verified guest file pulls
Augani
committed
117aeeb
feat(core): bridge guest file pulls to Swift
Augani
committed
816e3da
feat(agent): expose guest file pulls to daemon
Augani
committed
5789bad
fix(agent): bound guest file read authority
Augani
committed
e21253a
feat(vm): stage bounded guest file exports
Augani
committed
a1c360c
feat(xpc): expose guest file exports
Augani
committed
1c555c4
feat(app): decode guest file exports
Augani
committed
84336d9
feat(app): materialize guest file exports
Augani
committed
ddf8117
feat(transfer): recover completed guest exports
Augani
committed
c10cd7a
feat(app): receive files from machines
Augani
committed
fa5d625
feat(vm): surface guest integration health
Augani
committed
5b4656e
feat(vm): add host-only networking
Augani
committed
9de2afb
feat(vm): bind stable network identity
Augani
committed
f88df20
feat(vm): add durable VZ suspend and restore
Augani
committed
3cfd2e9
fix(sync): keep manifest walk clippy-clean
Augani
committed
de074d9
feat(vm): preflight portable machine imports
Augani
committed
c67860d
feat(vm): publish durable machine event cursors
Augani
committed
04b3780
feat(vm): persist structured machine failures
Augani
committed
94bedad
feat(vm): add durable machine flight recorder
Augani
committed
13b831f
feat(vm): expose secure serial console
Augani
committed
bdc0031
feat(vm): propagate launch operation identity
Augani
committed
28b985c
feat(vm): round-trip start operation identity
Augani
committed
8ea3e39
feat(vm): bind runtime lifecycle operation IDs
Augani
committed
386cd89
feat(vm): acknowledge lifecycle operations end to end
Augani
committed
426a3b7

Commits on Aug 22, 2026

feat(components): propagate component operation identity
Augani
committed
d98c6aa
feat(vm): expose helper device telemetry
Augani
committed
901a4c6
feat(vm): publish device telemetry
Augani
committed
12b9c58
feat(vm): sample device health events
Augani
committed
1243d35
feat(vm): measure storage flush health
Augani
committed
e2ed49b
feat(vm): publish audio drop health
Augani
committed
89db292
feat(vm): report share invalidation health
Augani
committed
7706a80
feat(vm): measure display presentation health
Augani
committed
ea2a537
feat(vm): classify gpu fence health
Augani
committed
8af1a13
feat(vm): report renderer device loss
Augani
committed
754405a
feat(vm): add guest usb vhci control
Augani
committed
db26ad4
feat(vm): scope usb control per machine
Augani
committed
7c7c8c1
feat(vm): route usb control through daemon
Augani
committed
4e06dee
feat(vm): authorize removable usb in resolved plans
Augani
committed
95ca4ae
feat(vm): expose resolved usb control
Augani
committed
58ccaed
feat(app): add resolved usb consent controls
Augani
committed
71b4c16
feat(app): discover host usb through daemon
Augani
committed
0937d17
feat(vm): add typed audio policy
Augani
committed
44567bd
feat(app): add virtual machine audio controls
Augani
committed
7b99dea
feat(vm): bind directional clipboard policy
Augani
committed
028a883
feat(vm): make snapshot clones copy-on-write
Augani
committed
a05822e
fix(vm): bound capability comparison stack usage
Augani
committed
052f3fb
feat(vm): add explicit port-forward intent
Augani
committed
66d304a
feat(vm): bind port forwards into resolved launches
Augani
committed
9396d28
feat(vm): install resolved port forwards in helpers
Augani
committed
4bc0e64
feat(vm): reconcile resolved port forwards
Augani
committed
9504f9f
feat(vm): expose resolved port forwarding controls
Augani
committed
be4a639
feat(vm): admit host port bindings durably
Augani
committed
9c08c32
feat(vm): report host port admission conflicts
Augani
committed
0254975
feat(vm): report resolved port health
Augani
committed
901918a
feat(vm): record port forward recovery events
Augani
committed
86a4e3e
feat(vm): diagnose port forward recovery
Augani
committed
d963a23
feat(vm): replace VZ shares at runtime
Augani
committed
b54743c
feat(network): react to VPN route changes
Augani
committed
8643093
feat(vm): preflight snapshot export storage
Augani
committed
5c01407
feat(vm): preflight snapshot import storage
Augani
committed
ce054e4
feat(vm): admit snapshot fallback storage
Augani
committed
970f999
feat(vm): qualify Intel Linux translation
Augani
committed
8f3337a
feat(vm): attach Intel translation runtime
Augani
committed
ea2cbea
feat(guest): configure Intel application translation
Augani
committed
e7140f2
feat(vm): expose Intel translation setting
Augani
committed
6b06aef
feat(vm): configure Intel Linux applications
Augani
committed
7b3596d
fix(vm): require exact resolved launch arguments
Augani
committed
e310cc5
fix(vm): honor resolved clock sync policy
Augani
committed
80f214b
fix(vm): honor resolved shutdown policy
Augani
committed
e6cb432
feat(vm): enforce directional file transfers
Augani
committed
3cfbb85
fix(vm): bound large artifact verification memory
Augani
committed
49593e2
fix(vm): serialize in-process resource admission
Augani
committed
c4ce27a
test(linux): gate real incompatible installer media
Augani
committed
79e15d0
feat(linux): add exact multi-display runtime
Augani
committed
b176188
fix(linux): extract ARM64 zboot kernels
Augani
committed
924ef70
feat(linux): assign guest desktop to Mac display
Augani
committed
ca89e53
fix(linux): restore accelerated desktop app launches
Augani
committed
c9c28da

Commits on Aug 26, 2026

Complete accelerated Linux desktop runtime
Augani
committed
9eade80
Fix cross-architecture runtime and componentized release
Augani
committed
cd15395
Fix Dory engine startup runtime isolation
Augani
committed
59a4ae1
Secure engine runtime directory creation
Augani
committed
6287b08
Fix daemon attach readiness and VM state diagnostics
Augani
committed
38f8b17
Recognize optional components bundled with Dory
Augani
committed
9d1bfe5
Resume interrupted first launch data drive setup
Augani
committed
905cc27
Wait through signed daemon first launch
Augani
committed
e5999c8
Keep new desktops compatible before catalog activation
Augani
committed
99e4a2d
Keep machine runtime sockets within Darwin limits
Augani
committed
5428909
Fallback unresolved desktop launches safely
Augani
committed
8e1a576
Give resource grids room to breathe
Augani
committed
84418ca
Accept EFI machines without guest tools
Augani
committed
84be2b7
Serialize VM readiness and preserve scroll direction
Augani
committed
050de52

Commits on Aug 27, 2026

Fix published ports and high-memory engine starts
Augani
committed
7c4d899
Build persistent agent sandbox workflows
Augani
committed
e78aba7
Normalize VZ desktop scrolling exactly once
Augani
committed
24dc52b
Make desktop audio select real host devices
Augani
committed
c648041
Expose fail-closed desktop GPU controls
Augani
committed
a19da6b
Preserve precise VZ trackpad gestures
Augani
committed
a0771b2
Harden engine filesystem and datapath startup
Augani
committed
7e36a0c
Keep Docker plugins and machine recipes reliable
Augani
committed
560c134
Require signed VM performance qualification
Augani
committed
95928fa
Make Dory repair and sandbox sessions dependable
Augani
committed
a65cce1
Bind VM catalogs to signed physical evidence
Augani
committed
afccd5c
Give desktop runtimes a distinct Dory identity
Augani
committed
10d0250
Seal development runner XPCs before embedding
Augani
committed
483b284
Stop false gvproxy engine restart loops
Augani
committed
c7a08d7
Keep filesystem worker descriptor authority usable
Augani
committed
13e3a97
Update USB security contract for implemented RPC
Augani
committed
a681a3a
Allow explicit VM qualification bootstrap
Augani
committed
8be2120
Declare qualification bootstrap build metadata
Augani
committed
9427465
Launch candidate desktops through verified RawHV authority
Augani
committed
2e7ee9b
Select VirtIO sound on MMIO desktop guests
Augani
committed
174f83b

Commits on Aug 28, 2026

Complete native desktop camera and audio support
Augani
committed
19098de
Fix desktop audio pacing and managed kernel refresh
Augani
committed
fbb20ac
Fix desktop bootstrap status and device readiness
Augani
committed
139b236
Complete Linux runtime and VM reliability
Augani
committed
9a9069b
Point Dory project to usedory.dev
Augani
committed
d704737
Bind Docker storage to exact launch authority
Augani
committed
f53f5f4
Support BusyBox disk identity checks
Augani
committed
d5a9d4b
Make engine recovery startup exact
Augani
committed
4d89f15
Align README with usedory.dev
Augani
committed
d3c1175
Update yanked ChaCha dependency
Augani
committed
bd3382c
Test agent-core recipe shell separation
Augani
committed
4b103f2
Update security contracts for typed USB control
Augani
committed
65a49a4
Prepare Dory 0.4.6 release metadata
Augani
committed
357b234
Merge remote-tracking branch 'origin/main' into codex/release-main-merge
Augani
committed
d7bcedd
Fix protobuf setup before Rust bridge builds
Augani
committed
1e3565a
Complete renderer production qualification probes
Augani
committed
aa6f9ce
Add physical amd64 sandbox release gate
Augani
committed
05c7aa3
Harden transactional component releases
Augani
committed
4420eaf
Fix deployment target fixture for runner bundle
Augani
committed
cdd47b9
Restore installed data drive management
Augani
committed
eae2062
Track required benchmark and hostshare harnesses
Augani
committed
89b6b68

Commits on Aug 29, 2026