Self-host Dormouse: service-based remote Host and review hardening - #416

Merged

nedtwigg merged 60 commits into

mainfrom

Aug 20, 2026

Commits on Aug 18, 2026

Add SELF_HOST.md: run the coordinating server on your own tailnet

nedtwigg
and
claude
committed
a7fe522
Add DORMOUSE_BIND_HOST so the selfhost install can bind loopback only

nedtwigg
and
claude
committed
27d2fb3
Make VS Code a first-class remote Host

nedtwigg
and
claude
committed
b824e48
Cleanup pass on the VS Code remote Host

nedtwigg
and
claude
committed
2bbcb0b
Address review: keep host-store caches coherent across webviews

nedtwigg
and
claude
committed
fd5b638
Address second review: buffer in-flight writes, unblock first paint

nedtwigg
and
claude
committed
682c821
Arbitrate the Host role across VS Code windows

nedtwigg
and
claude
committed
09f31cb
Let the remote Host reach terminals in sibling webviews

nedtwigg
and
claude
committed
03d0474
Reach terminals in other VS Code windows over a broker socket

nedtwigg
and
claude
committed
65f7678
Give vscode-ext a test runner, and cover the socket and lease I/O

nedtwigg
and
claude
committed
5f3ad07
Cleanup pass on the lease and peer layers

nedtwigg
and
claude
committed
c742e0c
Collapse the peer RPC into one generic seam

nedtwigg
and
claude
committed
23a7bb3
Resolve a surface to a handle instead of branching on where it lives

nedtwigg
and
claude
committed
f25125d
Two seams for the peer layer: one generic RPC, one surface handle (#407)
nedtwigg
authored
5da185e
Initialize non-holder peer clients
nedtwigg
committed
76feed0
Refresh Host storage before lease handoff
nedtwigg
committed
9d446a3
Invalidate remote directories on peer changes
nedtwigg
committed
1266f97
Forward peer PTY exit events
nedtwigg
committed
72f5186
Reference-count peer PTY subscriptions
nedtwigg
committed
1045523
Cancel stale remote surface resolutions
nedtwigg
committed
3d4a5f7
Defer VS Code Host lease until enrollment
nedtwigg
committed
00c9fd6
Reject peer listen failures
nedtwigg
committed
a174f0d
Handle asynchronous lease watcher errors
nedtwigg
committed
559dacf
Unwind peer streams on router disposal
nedtwigg
committed
29c39db
Fix three races the cloud review found
nedtwigg
committed
d884623
Simplify the peer-link and attach staleness guards

nedtwigg
and
claude
committed
427f017
Restore TMPDIR properly when the flip-back test is done

nedtwigg
and
claude
committed
d85026d
Merge remote-tracking branch 'origin/main' into tailnet-deploy
nedtwigg
committed
24a5007
Merge branch 'vscode-remote-host' into tailnet-deploy
nedtwigg
committed
f94b588

Commits on Aug 19, 2026

Extract the surface-provider seam from the remote-api session

nedtwigg
and
claude
committed
bbfcfb8
Move the standalone remote Host into the sidecar

nedtwigg
and
claude
committed
9735b5e
Move the VS Code remote Host into the extension host

nedtwigg
and
claude
committed
a6c2ac4
Serve every window's terminals through the broker

nedtwigg
and
claude
committed
5e1679f
Consolidate the two Host installations onto shared seams

nedtwigg
and
claude
committed
28dccc2
Bring the remote specs onto the service architecture

nedtwigg
and
claude
committed
39ce162
Document the dev-loop allowlist override

nedtwigg
and
claude
committed
c0c4642
Fix fifteen verified findings from the adversarial review

nedtwigg
and
claude
committed
c28dc58
Merge remote-tracking branch 'origin/main' into tailnet-deploy
nedtwigg
committed
f8f278b
Centralize VS Code peer stream routing
nedtwigg
committed
c19d2ca
Serialize VS Code remote host state writes
nedtwigg
committed
3fe2abb
Reject remote host HTTP redirects
nedtwigg
committed
ee54233
Correct self-host Host and state guidance
nedtwigg
committed
52566d3
Contain remote surface provider failures
nedtwigg
committed
322777c
Prevent remote Host resurrection after disposal
nedtwigg
committed
915527d
Fence peer replies to their broker socket
nedtwigg
committed
c411556
Correct self-host backup state guidance
nedtwigg
committed
2a46b8e
Reject malformed peer handshake frames
nedtwigg
committed
8fff4e5
Publish remote host state after durable write
nedtwigg
committed
d95d675
Keep remote host state directory private
nedtwigg
committed
57e73a6
Fail closed on malformed Host authorization
nedtwigg
committed
7f04238
Harden scripted Tailscale CLI detection
nedtwigg
committed
c89364d
Finish the quality pass and pin the review's residual edges

nedtwigg
and
claude
committed
567faa2
Fix the final review's findings across store, link, and surface

nedtwigg
and
claude
committed
75a6210
Bind pairing approval to the displayed request
nedtwigg
committed
c9073a0
Reject unusable remote connect sources
nedtwigg
committed
ec8d587
Preserve PTY exits during surface attachment
nedtwigg
committed
1af6e6a
Bind surface handles to their selected peer
nedtwigg
committed
99787fb
Distinguish recycled peer socket inodes
nedtwigg
committed
2bd97f0

Commits on Aug 20, 2026

fix marketing copy (accidental escaping)

nedtwigg
and
dormouse-bot
authored
927b41d
Address the full review: forget failed keychain reads, dedup the directory

nedtwigg
and
claude
committed
5ce9dce