kayg/infraternal
Watch
1
0
Fork
You've already forked infraternal
 0
Code Issues 356 Pull requests Projects Releases Packages Wiki Activity Actions

S1: foundations + SSH plugin #9

New issue
Open
opened 2026-10-05 15:32:05 +00:00 by kayg · 1 comment
kayg commented 2026-10-05 15:32:05 +00:00
Owner
Copy link

S1: the foundations and the SSH plugin. Decisions 7–29, 34, 36, 37, 39–41. The owner asked for the work to start on 2026-10-05. More grilling happens on the way (#5).

Approach: lean, with tracer bullets. First, one thin path from start to end: browser → server → embedded infraternal agent → local PTY. Then widen it. Each step is tested hands-on (by the owner or Claude) on the preview server.

Phase A (now), in parallel:

  • #10 contracts: wire framing, plugin and action definition, shim interface, bootstrap (Claude)
  • #11 Rust workspace, crates, static musl builds and scripts/verify for Rust
  • #12 spike: leg-A transport (WebTransport and WebSocket, Rust server, Safari) and wire format benchmark against protobuf
  • #13 spike: terminal renderer, ghostty-web against xterm.js, on a real iPhone

Phase B: tracer bullet (embedded agent, shim, PTY, browser terminal over the real protocol, no auth yet behind a dev flag)
Phase C: auth (passkeys, PRF, recovery), inventory (manual, ssh config, NetBird), remote agents (QUIC), bootstrap over SSH, the SSH plugin, mobile key bar, resume

S1: the foundations and the SSH plugin. Decisions 7–29, 34, 36, 37, 39–41. The owner asked for the work to start on 2026-10-05. More grilling happens on the way (#5). Approach: lean, with tracer bullets. First, one thin path from start to end: browser → server → embedded infraternal agent → local PTY. Then widen it. Each step is tested hands-on (by the owner or Claude) on the preview server. Phase A (now), in parallel: - [ ] #10 contracts: wire framing, plugin and action definition, shim interface, bootstrap (Claude) - [ ] #11 Rust workspace, crates, static musl builds and `scripts/verify` for Rust - [ ] #12 spike: leg-A transport (WebTransport and WebSocket, Rust server, Safari) and wire format benchmark against protobuf - [ ] #13 spike: terminal renderer, ghostty-web against xterm.js, on a real iPhone Phase B: tracer bullet (embedded agent, shim, PTY, browser terminal over the real protocol, no auth yet behind a dev flag) Phase C: auth (passkeys, PRF, recovery), inventory (manual, ssh config, NetBird), remote agents (QUIC), bootstrap over SSH, the SSH plugin, mobile key bar, resume
kayg commented 2026-10-06 11:43:21 +00:00
Author
Owner
Copy link

What remains for S1 to be complete (status on 2026-10-06). The owner asked for this list. VNC/RDP comes next after S1 (DECISIONS 92).

Done (on dev)

  • Rust workspace, static musl builds, gates and CI (#11)
  • Contract drafts: wire, plugin/action, shim, bootstrap (#10). The owner still needs to read them.
  • Auth library: setup token, passkeys with PRF, recovery key, sessions, device keys (#17)
  • Session shim: PTY, VT snapshots, exactly-once resume (#16)
  • Wire codec in Rust and TS (#15): fix round in progress (split-header bug)

Backend still to build

  • Server core: HTTP + WebSocket endpoint, sessions per user, routing, event bus, SQLite, server install (self-installing systemd unit)
  • Action framework: plugin-api, generated HTTP, CLI and MCP adapters, audit, permissions (contracts/plugin.md)
  • Agent core: embedded agent (agent --fd 3), leg B (QUIC with TCP fallback, internal CA, mTLS), lockstep upgrade with A/B slots
  • Shim ↔ agent ↔ server ↔ browser end to end: resume, credit flow control, catch-up by snapshot
  • SSH plugin: agent-native PTY and agentless SSH (in a shim on the embedded agent), auth (passkey-sealed keys, NetBird or Tailscale identity, relayed login URLs), host key TOFU
  • Bootstrap: probe, propose, install, enroll, canary, rootful or rootless, promotion
  • Inventory: manual, ~/.ssh/config, NetBird and Tailscale/Headscale APIs, live sync, tags
  • Search: fan-out scrollback search, central command-history index, binary detection (#18, DECISIONS 89–91)
  • Shell integration (OSC 133): command blocks, notify when done, history

Web app (the real one, built from the mockup decisions)

  • SvelteKit shell: terminal-first, floating sidebar tree, search capsule and palette, tabs and splits
  • Terminal: ghostty-web, wire codec, resume, touch scrolling, mobile key bar (variant a), pinch for text size, fonts, themes, mesh backgrounds, iOS safe areas
  • Setup wizard (network → hosts → agents) and passkey and recovery screens
  • Command blocks, mission control, host glance, history search (V11, each with its own design and perf grill)
  • Notifications: web push for the PWA, ntfy and gotify
  • Restore tabs after a reboot; multi-device sessions (tmux-style size)
  • Predictive local echo (mosh-style)

Quality and ship

  • End-to-end performance gate measured from the UI: keystroke → paint < 5 ms of overhead p99, reconnect < 300 ms, first paint < 1 s, 60 fps under flood, agent idle RSS < 15 MB
  • Perf VM and runner (#4)
  • Deploy to infraternal.kayg.org on monitor01 (A record, Traefik route, NetBird ACL for 7443)
  • Security review across lanes, fuzzing kept green, docs

Open decisions

  • Images in the terminal (ghostty-web 0.4 has none; see the owner thread)
  • Visual grill pieces: wizard, command blocks, mission control, host glance
What remains for S1 to be complete (status on 2026-10-06). The owner asked for this list. VNC/RDP comes next after S1 (DECISIONS 92). **Done (on `dev`)** - [x] Rust workspace, static musl builds, gates and CI (#11) - [x] Contract drafts: wire, plugin/action, shim, bootstrap (#10). The owner still needs to read them. - [x] Auth library: setup token, passkeys with PRF, recovery key, sessions, device keys (#17) - [x] Session shim: PTY, VT snapshots, exactly-once resume (#16) - [ ] Wire codec in Rust and TS (#15): fix round in progress (split-header bug) **Backend still to build** - [ ] Server core: HTTP + WebSocket endpoint, sessions per user, routing, event bus, SQLite, `server install` (self-installing systemd unit) - [ ] Action framework: plugin-api, generated HTTP, CLI and MCP adapters, audit, permissions (contracts/plugin.md) - [ ] Agent core: embedded agent (`agent --fd 3`), leg B (QUIC with TCP fallback, internal CA, mTLS), lockstep upgrade with A/B slots - [ ] Shim ↔ agent ↔ server ↔ browser end to end: resume, credit flow control, catch-up by snapshot - [ ] SSH plugin: agent-native PTY and agentless SSH (in a shim on the embedded agent), auth (passkey-sealed keys, NetBird or Tailscale identity, relayed login URLs), host key TOFU - [ ] Bootstrap: probe, propose, install, enroll, canary, rootful or rootless, promotion - [ ] Inventory: manual, ~/.ssh/config, NetBird and Tailscale/Headscale APIs, live sync, tags - [ ] Search: fan-out scrollback search, central command-history index, binary detection (#18, DECISIONS 89–91) - [ ] Shell integration (OSC 133): command blocks, notify when done, history **Web app (the real one, built from the mockup decisions)** - [ ] SvelteKit shell: terminal-first, floating sidebar tree, search capsule and palette, tabs and splits - [ ] Terminal: ghostty-web, wire codec, resume, touch scrolling, mobile key bar (variant a), pinch for text size, fonts, themes, mesh backgrounds, iOS safe areas - [ ] Setup wizard (network → hosts → agents) and passkey and recovery screens - [ ] Command blocks, mission control, host glance, history search (V11, each with its own design and perf grill) - [ ] Notifications: web push for the PWA, ntfy and gotify - [ ] Restore tabs after a reboot; multi-device sessions (tmux-style size) - [ ] Predictive local echo (mosh-style) **Quality and ship** - [ ] End-to-end performance gate measured from the UI: keystroke → paint < 5 ms of overhead p99, reconnect < 300 ms, first paint < 1 s, 60 fps under flood, agent idle RSS < 15 MB - [ ] Perf VM and runner (#4) - [ ] Deploy to infraternal.kayg.org on monitor01 (A record, Traefik route, NetBird ACL for 7443) - [ ] Security review across lanes, fuzzing kept green, docs **Open decisions** - [ ] Images in the terminal (ghostty-web 0.4 has none; see the owner thread) - [ ] Visual grill pieces: wizard, command blocks, mission control, host glance
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
j470b-server-mesh-rejoin
mesh-compat-382
j444b-d381-key-wins-flood
j461b-macos-utun-reader-thread
j475b-remove-host-motion
fix-reconnect-new-link
j481-d380
dev
j479-mesh-soak
fix/j476-host-facts
j475-motion-pill-split
j470-mac-node-join
root-upgrade-d376
j474-review-merge
latency-targets-120hz
nightly-suite-shards
gotatun-pin-j469
macos-utun-reader-thread
fix-flood-echo-stall
wip/j416
motion-fast-ease-out
mesh-addhost-j259
takeover-close-terminals-d368
kbd-instant-followups
fix-trust-key-double-click
nightly-suite-partial-report
appwin-icons-j207
rusqlite-slice1
swipe-content-first-d374
mesh-mtu-381
addhost-instant-open
glass-contrast-d365-mock
glass-contrast-d365
signout-followups-442
fix-startup-toast-red
research-gotatun-matrix-j317
themes-sync-j304
fix-load-flakes
fix-nix-zig-patch
fix-compute01-browser-baseline
ratchet-size-baseline-419
predict-auto-d130
revoke-coverage-d367
nightly-suite-queue-timeout
nightly-browser-suite
fix-rustsec-2026-0459
fonts-ioskeley-obel
log-retention-d375
fix-kbd-no-anim-427
fix-dev-red-specs-2
takeover-proof-305-j205
wip/j410-server-pump
ui-consistency-d372
fix-osc52-clipboard
libghostty-vt-1.0
forget-retired-host-d369
j404-merge-426
fix-setup-lock-race
fix-touch-select-426
revoke-access-report-ui
fix-predictive-echo-specs
fix-selinux-agent-exec
wip/j395-checkpoint2
wip/j395
j391-review-scratch
ui-consistency-j195-deferred-rebased
fix-rustc-paths-421
decisions-wording-341
fix-install-suite-red
fix-dev-rtt-specs
fix-pending-removal-align
fix-privileged-skip
fix-install-suite-404
review-j368
mesh-dns-j254
revoke-access-report-d356b
revoke-privilege-round5
fix-removal-confirm
review-j360
gotatun-rotation-367
deps-refresh-340
review-j354
review-J351
review-j350
addhost-takeover-d359
revoke-report-items-347
revoke-end-sessions-d362
review-j348
size-mesh-ssh-346
size-trim-337
revoke-access-diff-d356
j259-pre-rebase-b06c5a6
j305-ended-at-start-spec
addhost-sudo-consent
fix-layout-real-specs-411
fix-shell-open-411
fix-console-hosts-373
fix-shell-exit
fuzz-host-name-353
fix-host-details-410
macos-filter-j197
research-gotatun-tricks
revoke-p3-j216l
stale-state-pill
revoke-followups-j216k
revoke-progress-j216e
backup/macos01-20261106/lume/j197
backup/macos01-20261106/lume/appwin-icons-j207-stash0
backup/macos01-20261106/claude/stash-0
backup/macos01-20261106/claude/stash-1
backup/macos01-20261106/claude/J80-macos-s1
backup/macos01-20261106/claude/J80
backup/macos01-20261106/claude/J80-slice1-20261102
backup/macos01-20261106/claude/J16b-appwin-on-dev
backup/macos01-20261106/claude/appwin-launch-idle-146
backup/macos01-20261106/claude/J80-s1-run
wip/j259
trust-285-p3c
runtime-lock-j216f
mesh-ssh-p3-j175
tun-proof-p3b
trust-285-p3
terminal-polish-j271
tun-proof-p3
ssh-install-flakes-j216i
fuzz-fixes-j264
trust-285-a
trust-285-b
restart-oversized-fixture-j198
backup/macos01-20261106/lume/appwin-icons-j207
restart-bound-j216h
up-preflight-p3-j198
backup/macos01-20261106/lume/j251
up-preflight-j198
wip/up-preflight-j198-j245-p2
wip/up-preflight-j198-j245-p1
agent-fsync-offloop-j196
wip/up-preflight-j198-j245
settings-offscreen-j231
wip/up-preflight-j198-j226-inspection
wip/j103f
themes-j206
wip/up-preflight-j198-j226
flakes-j216c
backup/macos01-20261106/claude/j197
flakes-j216b
backup/macos01-20261106/claude/j197-red
wip/up-preflight-j198-review
flakes-j216
backup/macos01-20261106/claude/appwin-icons-j207
engineering-j208b
appwin-mock-j209
toast-stack-j165
engineering-j208
decisions-d351
decisions-d350
decisions-d349
appearance-presets-mock-j129
decisions-d348
docs-audit-spec
doc-coverage-baseline-raise
decisions-d347
decisions-d346b
decisions-d346
j88h-profile
ui-consistency-j195-deferred
ui-consistency-j195
engineering-practices-j194
preferred-login-ui-j166
signin-pools-263-j174
macos-node-265-s1
decisions-d345
decisions-d344
proxy-cgroup-j164
verify-quick-fuzz-329
proxy-start-io-j168
timing-flakes-j163
up-263-s1
mcp-events-j147
verify-quick-fuzz-j158
proxy-p3-j159
agent-resource-j157-detect
wip/j103d-final
remote-cancel-hang-j155
proxy-traefik-281-j62d
j149-verify-quick
proxy-traefik-281-j62b
j150-drop-unnamed
wip/j79d-red-r4
wip/j103d-d332
rootless-toast-j142
wip/j103d-head
wip/j103d
j125c-mcp
macos-build-j136
backup/macos01-20261106/claude/j136
wip/j79d-red-cli
wip/j79d-red-server
j121-link-liveness
j118c-tracer-failures
wip/j79c-head
release-desktop-j131
j124c-signed-macos
wip/j79c-red-p3
wip/j79c-red-p23
wip/j79c-red-p22
merge-j128-check
perf-deferred-j128
sidebar-toggle-260
j127-shortcut-changed-dot
j125-mcp
j118-tracer-failures
j126-account-summary
settings-sections-mock-j92
j120-pinch-lock
sidebar-292
backup/macos01-20261106/claude/j120
taste-2026-11-03
row-actions-242-215
backup/macos01-20261106/claude/stash-0-untracked
backup/macos01-20261106/claude/J80-265-s1-run
backup/macos01-20261106/claude/J80-macos-s1-20261102
j112-canvas-commands
ui-no-overshoot-scroll
fix-recovery-restart
backup/macos01-20261106/claude/stash-1-untracked
taste-2026-11-02
size-baseline-ratchet
machine-cards-structure-j108
j109-boot-copy-mockups
fix-dev-red
wip/up-263-s1
j95b-settings-rows
proxy-traefik-281
j95-option-rows
docs-human-j91
docs-keys-palette
fix-flood-1013-270-j38d
mesh-ssh-s1
mesh-ssh-s0
addhost-d291-tunnel
test-stability-load
mesh-relay-220
repro-296
shim-thp-off-24
mesh-pins-258-v2
mesh-dns
signin-d311-merged
docs-pages
ui-size-283
fix-ui-batch-specs
wip/j12b-edge-update
gate-on-arm
fix-rename-sync-293
trust-285-j60b
fix-focus-ring-clip
integ-ui-1101
edge-update-v2
signin-d311
taste-2026-11-01
layout-per-tab-250
ui-approved-splitopt-224
ui-approved-splitopt-224-on-dev
icon-text-centre-282
ui-approved-189-212-216
research-reverse-proxy
transfer-budget-320
review-mesh-pins-258-r2
sidebar-pill-259
review-mesh-relay-220
wip/j12-edge-update-v2
nix-package
status-crash-loop-237
fix-dev-test-failures
fix-fixture-socket-path
wip/mesh-relay-220-pre-dev-advance-rebase
fix-canvas-side-clip
research-head-to-head
frosted-real-256
review-mesh-pins-258
wip/mesh-relay-220-pre-final-rebase
review-layout-per-tab-250-r2
broad-suite-triage
nix-devshell
review-status-crash-loop-237-r3
wip/nix-devshell-pre-p3
taste-frosted-real
wip/code-serve-demo-2026-10-30
wip/code-serve-glass-2026-10-30
wip/code-serve-clusters-2026-10-30
wip/code-merge-release94-dev-2026-10-30
wip/rproxy-delta-scratch-2026-10-30
wip/stale-note-257-staged-2026-10-30
wip/d241-size-staged-2026-10-30
review-broad-suite-207
wip/mesh-pins-258-pre-split
wip/mesh-relay-220-pre-rebase
mesh-measure-220
plan-211-update
review-edge-autoupdate-r3
perf24-reconnect
review-stale-note-r2
release-prod-live
d241-shell-marker
review-mesh-pins-server-258
review-revocation-r3
review-setup-token-r2
review-sync-journal-r3
wip/review-mesh-pins-258-prune-review-1995fee46
frosted-scroll-256
sync-journal-r3
revocation-per-account-wip
review-tokio-asyncfd-0386
review-sync-p3s
wip/stash-8by64-stash0-2026-10-30
mesh-drag-r2
setup-token-data-wip
release-9-4
auth-busy-1013
mesh-view-overlap
sync-p3s
review-auth-busy-wake
review-readd-r8-wip
mesh-drag-bounds
audit-auth-93
app-windows-stream-start
review-authority-cap-r3
app-windows-r7-measure
readd-minimal-r6
readd-minimal-r5
app-windows-r7-soak
readd-minimal-r4
app-windows-r7
app-windows-r6
readd-minimal-r3
readd-minimal-r2
readd-minimal
merge-release8-dev
review-busy-page-liveness-r2
review-busy-page-liveness
mesh-view-trim
review-authority-read-retry-r2
review-remove-uninstall-r2
release-retry-reattach
release-retry
review-remove-uninstall
review-authority-read-retry
app-windows-ship
mesh-autoswitch-p2
mesh-ssh
mesh-relay
mesh-macos-node
screen-and-control
session-labels
review-real-logins-r5
review-real-logins-r4
review-real-logins-r3
shim-memory-r2
review-real-logins-r2
shim-memory
shadow-addhost-instant
shadow-real-logins
shadow-same-session-flood
shadow-prod-perf-fix
hosts-from-server
app-windows-real
app-windows-transport
release-prod-6w
mesh-policy-verify
quiet-close-toast
dev-merge-r4
review-mesh-agent-transport
review-app-windows-transport
settings-roundtrip
review-release-pipeline-r4
mesh-agent-transport
ended-strip-fix
review-audit-ca-update-d244
settings-rows
phone-width
signout-clear
fix-restart-tests
dev-merge-rp
signer-hardening
review-audit-ca-update
terminal-fidelity
review-audit-ca-update-wip
mesh-integrate
review-mesh-agent-transport-515d3712
review-mesh-dataplane-feec1988
mesh-dataplane
signout
research-canvas-node
wip/review-renderer-cost
wip/review-terminal-fidelity
padlock-glyph
review-release-pipeline-2e95b689
phone-polish
sidebar-polish
inbox-generic
review-mesh-dataplane-378d4055
prod-batch
ui-inbox
ui-ca-unlock
ui-machine-sections
review-mesh-dataplane-a5f744fb
tls-session-prod
session-bounds-prod
fix-dead-session
session-bounds
tls-session
palette-polish
shortcuts-d222
research-appmeta
phone-gutter
ui-centre-button
wip/ui-centre-button
wip/tls-session
review-addhost-breakit
ui-platform
renderer-cost
remote-agents
mesh-api
ssh-bootstrap
prod-hotfix2
prod-fixes
review-remote-agents
review-mesh-dataplane
session-life
research-browser
review-mesh-api
research-capture
review-mesh-api-round3
review-mesh-api-round1
gate-stability
review-gate-stability
review-relay-direct
review-mesh-api-findings
proto-sessions
font-picker
proto-addhost
proto-windows
mesh-core
latency-gate
research-bsd
research-discovery
keytray-mods
mock-core
ui-tweaks
fix-motion-sel
fix-motion
integrate2
fix-robust
t-web
t-server
vt-ghostty
fix-snap-echo
t-web-auth
review-vt2
t-agent
lane-protocol
lane-shim
lane-auth
s1-base
s1-contracts
s1-workspace
No results found.
Labels
Clear labels   
launch-qa
Findings from launch QA.

No labels
launch-qa
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
kayg/infraternal#9
No description provided.