Jannik/PaperClipAI
1
0 Fork 0
mirror of https://github.com/paperclipai/paperclip.git synced 2026-10-29 04:25:52 +01:00
Code Issues Packages Projects Releases Wiki Activity
3,684 Commits 1,333 Branches 2,136 Tags
26bc68becd0ef17a080efe240b346dc8c9ec4f96
Commit Graph
4 Commits
Author SHA1 Message Date
DottaandClaude Fable 5 78b5ac1ce5 fix(tailscale-https-broker): version floor + install docs (PAP-17079) 
Replace the pinned Tailscale minor allowlist with a numeric minimum-version
comparison (floor 1.80) so current releases like 1.102.2 pass --doctor while
1.78 and malformed output are still rejected; add boundary + malformed unit
coverage. Correct broker lifecycle commands to the installed unit name
paperclip-tailscale-https-broker and document copying the built package to
/opt/paperclip/packages/tailscale-https-broker to match ExecStart and doctor.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-08-16 19:26:07 +00:00
DottaandPaperclip 1696e17c67 feat(runtime): secure Tailscale exposure reservations (PAP-17051) 
Add the bounded reserve/expose/remove broker handshake, paired-port contracts, hostname discovery, deployable systemd unit, and focused authorization/lifecycle tests.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
 2026-08-16 19:24:27 +00:00
DottaandClaude Opus 4.8 3d6f739255 docs(tailscale-https-broker): host install, preflight, upgrade, rollback (PAP-17051) 
One-time install steps for the dedicated Tailscale-operator broker account and
socket group, the read-only `--doctor` preflight, upgrade/recovery/quarantine
behavior, and uninstall/rollback/opt-out that removes only broker-owned
listeners and never resets Serve or touches the primary :443 route. Covers plan
layer 5 docs and the host steps handed to the downstream QA canary (PAP-17052).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-08-16 19:24:27 +00:00
DottaandClaude Opus 4.8 ec7adcaf3d feat(runtime-exposure): least-privilege Tailscale HTTPS broker + shared contract (PAP-17051) 
Foundation for opt-in `tailscale_https` exposure of managed branch runtimes,
implementing the PAP-17049 plan under the PAP-17050 threat-model verdict.

Broker (packages/tailscale-https-broker): root/dedicated-account host broker
exposing only idempotent list/expose/remove over a Unix socket. Implements the
six required verdict controls: SO_PEERCRED + UID/GID allowlist + unguessable
broker-issued lease handles (req #1); dedicated port allowlist + /proc listener
ownership/loopback proof before mutation (req #2); per-mutation transaction
(strict-parse serve JSON -> verify absence/exact-lease -> verify :443 -> one
fixed per-port op -> reread -> require only-intended-changed + :443 identical
-> atomic root-owned registry commit, quarantine-on-ambiguity) (req #3);
execve/shell=false argv built only from canonical integers + fixed tokens,
pinned CLI schema (req #4); versioned length-bounded strict-JSON protocol
(req #5); bounded append-only audit events (req #6). Deny-by-default for
Funnel/cert/Services/reset/set-config/path-handlers/:443/reserved ports.

Shared contract (packages/shared): single source of truth for exposure config,
lifecycle state (pending/ready/failed/cleanup_pending/removed), listener
ownership, and status, with strict zod validators and deterministic
app/HMR port-pair + URL derivation so DB/server/UI/runtime cannot drift.

Tests: broker 57/57, shared runtime-exposure 13/13, both typecheck clean.
Server/DB/UI lifecycle integration + docs land in follow-on commits.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-08-16 19:23:17 +00:00