Repository navigation

feat: the terminal on the bridge, end to end - #142

Merged

deymosh merged 50 commits into

masterfrom

feat/terminal-protocol

Oct 17, 2026

Merged

feat: the terminal on the bridge, end to end#142
deymosh merged 50 commits into
masterfrom
feat/terminal-protocol

Commits on Oct 16, 2026
- docs: the terminal on the bridge, designed for security and auditing
  
  deymosh
  and
  claude
  committed
  835af63
- feat(protocol): the terminal wire — messages, capability, device id
  
  deymosh
  and
  claude
  committed
  f9b92c1
- docs: describe the terminal protocol
  
  deymosh
  and
  claude
  committed
  3172109
- fix(protocol): terminal-input-from names the first seq to resend, and any reinstall is a new device
  
  deymosh
  and
  claude
  committed
  b6d2cf3
- docs: the terminal design's message table matches the wire
  
  deymosh
  and
  claude
  committed
  d68de34
- feat(bridge-core): a device id and a name per client, and where its command came from
  
  deymosh
  and
  claude
  committed
  f43abf0
- feat(bridge-core): route terminals — the gates, the writer, seq, and the audit
  
  deymosh
  and
  claude
  committed
  88e9596
- feat(bridge-core): read a phone's keystrokes without spending a command's dedup slot
  
  deymosh
  and
  claude
  committed
  0f85fd8
- fix(bridge-core): a device's terminal seq never starts over, and held input is capped
  
  deymosh
  and
  claude
  committed
  9b708a5
- fix(bridge-core): a heartbeat names only the receiving identity's own terminals
  
  deymosh
  and
  claude
  committed
  b4a7acb
- build: the lockfile records base64 as a bridge-core dependency
  
  deymosh
  and
  claude
  committed
  9795edc
- build(bridge-runtime): portable-pty for real terminals, and the nix it reads termios from
  
  deymosh
  and
  claude
  committed
  7de3563
- feat(bridge): run terminals in real ptys, with a ring of their output and a recording
  
  deymosh
  and
  claude
  committed
  41c161c
- perf(bridge): keep a terminal's writes, recording and output off the bridge's thread
  
  deymosh
  and
  claude
  committed
  cc54de5
- feat(bridge-core): make the terminal audit record serializable
  
  deymosh
  and
  claude
  committed
  5868d10
- feat(bridge-runtime): terminal config, device allowlist, audit log and CLI
  
  deymosh
  and
  claude
  committed
  055dde8
- feat(bridge-runtime): wire the allowlist reload and the audit into the runtime
  
  deymosh
  and
  claude
  committed
  b19bd40
- docs(bridge): the terminal section
  
  deymosh
  and
  claude
  committed
  038ca5a
- perf(bridge): no allowlist check on a bridge with terminals off, and the configured command runs
  
  deymosh
  and
  claude
  committed
  ed431c5
- feat(bridge-runtime): the terminal's transport — live kind, a low-priority lane, relay pacing
  
  deymosh
  and
  claude
  committed
  1999f14
- docs: the terminal's two lanes, the relay pacing, and live input on the direct link
  
  deymosh
  and
  claude
  committed
  64dc2bb
- test(bridge-runtime): a phone opens a terminal and types through the bridge
  
  deymosh
  and
  claude
  committed
  c9a6962
- perf(bridge): a direct link sends one terminal frame per turn, after the phone's own frames
  
  deymosh
  and
  claude
  committed
  82e2061
- test(bridge-runtime): the echo-off test waits for the shell's output, not its echo of the command
  
  deymosh
  and
  claude
  committed
  9a07df2
- feat(client-core): terminal state, input batching, seq and output offsets
  
  deymosh
  and
  claude
  committed
  14ec922
- feat(client-runtime): route terminal messages, pace input, stream output
  
  deymosh
  and
  claude
  committed
  21bd794
- feat(client-ffi): the terminal intents, view and output event
  
  deymosh
  and
  claude
  committed
  c509965
- docs(client): the terminal section
  
  deymosh
  and
  claude
  committed
  f350b88
- feat(android): the terminal's screens around the emulator
  
  deymosh
  and
  claude
  committed
  6848034
- fix(bridge-runtime): the terminal allowlist's file work stays off the runtime thread, and cannot lose a write
  
  deymosh
  and
  claude
  committed
  6856f75
- fix(bridge-runtime): open a terminal's recording off the runtime thread
  
  deymosh
  and
  claude
  committed
  3e8321a
- fix(bridge-runtime): audit verify prints the head hash, the chain's blind spot made checkable
  
  deymosh
  and
  claude
  committed
  466370e
- fix(bridge-runtime): the terminal config comment matches what the code does
  
  deymosh
  and
  claude
  committed
  7ce5670
- feat(client-runtime): send the phone's device name on every session-key grant
  
  deymosh
  and
  claude
  committed
  a2673ed
- feat(client-ffi): take the device label on the core constructor
  
  deymosh
  and
  claude
  committed
  4637f26
- feat(android): name this phone on the session-key grant
  
  deymosh
  and
  claude
  committed
  c5af51c
- build(android): vendor Termux's terminal emulator and view at v0.118.3
  
  deymosh
  and
  claude
  committed
  acd1f2a
- feat(android): a terminal session the remote shell drives
  
  deymosh
  and
  claude
  committed
  89b1df3
- fix(android): hold terminal output that arrives before the view is sized
  
  deymosh
  and
  claude
  committed
  ce9ce9e
Commits on Oct 17, 2026
- feat(protocol): mark a terminal replay answer so a clamped one is taken
  
  deymosh
  and
  claude
  committed
  dde1e20
- fix(client-core): an attach or a gap older than the ring no longer replays forever
  
  deymosh
  and
  claude
  committed
  d5c5269
- build: the compose file passes CODEDECK_TERMINAL through to the bridge
  
  deymosh
  and
  claude
  committed
  8f0b6b4
- feat(android): open, watch and type into a machine's terminal
  
  deymosh
  and
  claude
  committed
  aca3424
- docs: the phone's terminal screen and the clamped replay answer
  
  deymosh
  and
  claude
  committed
  897e11c
- fix(client-core): the predicted echo is empty on the alternate screen
  
  deymosh
  and
  claude
  committed
  b22fa7a
- fix(client-runtime): a key held back for the next batch redraws the app
  
  deymosh
  and
  claude
  committed
  c672c03
- fix(bridge): with no $SHELL a terminal runs the account's login shell
  
  deymosh
  and
  claude
  committed
  5829190
- fix(android): the predicted echo stays until the shell echoes the keys
  
  deymosh
  and
  claude
  committed
  4de490b
- fix(bridge): a service account's nologin shell does not replace /bin/sh
  
  deymosh
  and
  claude
  committed
  4694c31
- fix(android): the predicted echo never draws a password, nor loses keys
  
  deymosh
  and
  claude
  committed
  53457ac

Commits

Commits on Oct 16, 2026

Commits on Oct 17, 2026