kyle 93539dbead brokerd: start pipe threads safely and collect output within a grace period ...

Implemented-By: OpenCode session (model recorded in docs/implementer-log.md)

2026-09-23 16:07:15 -07:00

..

fixtures

M3b review fixes by the design model: curl --globoff, podman --pull=never

2026-09-23 15:25:51 -07:00

support

brokerd: the Podman runtime

2026-09-23 08:51:44 -07:00

admin.rs

Handle approvals, refusals and grant checks on admin.sock

2026-09-20 13:54:01 -07:00

approvals.rs

Add the table of pending approvals

2026-09-19 16:48:09 -07:00

args.rs

Seal the fetch target: one value holds the URL and its host

2026-09-22 23:03:49 -07:00

audit_edges.rs

brokerd: recover a torn line in place, real dates only, bounded ttl, EMFILE

2026-09-22 21:48:24 -07:00

audit_startup.rs

Add the audit writer with its startup check

2026-09-19 16:32:37 -07:00

audit.rs

Add the audit writer with its startup check

2026-09-19 16:32:37 -07:00

broker_pending.rs

Handle a tool request from decision to answer

2026-09-20 12:59:42 -07:00

broker_sequence.rs

Handle a tool request from decision to answer

2026-09-20 12:59:42 -07:00

broker.rs

Handle a tool request from decision to answer

2026-09-20 12:59:42 -07:00

config_runner.rs

brokerd: the [runner] section

2026-09-23 01:07:21 -07:00

config.rs

Add brokerd's configuration

2026-09-19 02:24:15 -07:00

container_egress.rs

brokerd: start and remove the egress proxy for http_fetch

2026-09-23 09:22:24 -07:00

container_grace.rs

brokerd: start pipe threads safely and collect output within a grace period

2026-09-23 16:07:15 -07:00

container.rs

brokerd: the Podman runtime

2026-09-23 08:51:44 -07:00

grants_mount.rs

Refuse grant paths that cannot be mounted

2026-09-22 23:06:09 -07:00

grants.rs

Load grant files, failing closed on any invalid file

2026-09-19 02:50:26 -07:00

ledger_answer.rs

Add the ledger: the audit writer and session state behind one lock

2026-09-20 03:30:37 -07:00

ledger.rs

Add the ledger: the audit writer and session state behind one lock

2026-09-20 03:30:37 -07:00

podman_args.rs

brokerd: the podman argument lists

2026-09-23 01:13:25 -07:00

policy_matching.rs

Decide tool calls against grants, taint and time

2026-09-19 03:05:01 -07:00

policy_property.rs

Decide tool calls against grants, taint and time

2026-09-19 03:05:01 -07:00

policy_redecide.rs

Decide tool calls against grants, taint and time

2026-09-19 03:05:01 -07:00

policy.rs

Decide tool calls against grants, taint and time

2026-09-19 03:05:01 -07:00

runner.rs

Replace the runner stub with the Runtime seam and RunSpec

2026-09-19 16:43:56 -07:00

serve_accept_break.rs

Test --accept-break on a real break through the brokerd binary

2026-09-22 21:52:54 -07:00

serve_pointers.rs

brokerd: recover a torn line in place, real dates only, bounded ttl, EMFILE

2026-09-22 21:48:24 -07:00

serve_runner.rs

brokerd serve: run tools in containers when [runner] is set

2026-09-23 09:35:46 -07:00

serve.rs

Add brokerd serve: startup, both sockets, and the expiry thread

2026-09-20 17:24:57 -07:00

state.rs

Keep each session's taint and untrusted flag in a file

2026-09-19 03:08:46 -07:00