@catalyst-cloud/cli 0.16.3 → 0.16.6

package/vendor/self-host/compose.yaml

@@ -60,6 +60,8 @@ services:
       # The host journal and outbox. Never authoritative: deleting it costs undelivered evidence and
       # never blocks a start (docs/design/disposable-host-contracts.md, "The host journal").
       - supervisor-state:/var/lib/catalyst/supervisor
+      # Atomic host-native samples; the VM cannot measure the Mac backing Docker.raw.
+      - ${CATALYST_HOST_DISK_SAMPLE_DIR:-./host-disk}:/var/lib/catalyst/host-disk:ro
       # The per-host credential and the tenant's runner org key (CATALYST_ORG_KEY_FILE), on their own
       # volume so the delete-the-state-directory test (removing supervisor-state) never costs an
       # enrollment. The supervisor replaces the credential by rename, so the directory stays writable.
@@ -68,9 +70,9 @@ services:
       # engine resolves a bind source on the HOST. A path that exists only inside this container
       # mounts an empty directory into the phase.
       - ${CATALYST_SLOTS_DIR:-/srv/catalyst/slots}:${CATALYST_SLOTS_DIR:-/srv/catalyst/slots}
-      # Thoughts stay as today (CTC-3493): a tenant's thoughts checkout and its pool lock directory
-      # are SHARED and read-write across that tenant's session containers, and every thoughts sync
-      # runs under thoughts.lock. The supervisor keeps one subdirectory per tenant under each root,
+      # Shared tenant thoughts and pool locks. Native Linux sessions use a read-write checkout.
+      # Darwin custody sessions expose a read-only model alias and a protected root publisher alias.
+      # Every thoughts sync runs under thoughts.lock. The supervisor keeps one subdirectory per tenant under each root,
       # so two projects on one engine never share a checkout or a lock. Same path on both sides for
       # the same reason as the slots: the supervisor binds these into session containers, and the
       # engine resolves bind sources on the host. Never mounted into a setup container.
@@ -94,13 +96,29 @@ services:
       CATALYST_HOST_CREDENTIAL_FILE: ${CATALYST_HOST_CREDENTIAL_FILE:-/var/lib/catalyst/host-credential/credential}
       CATALYST_DISK_BUDGET_GIB: ${CATALYST_DISK_BUDGET_GIB:-60}
       CATALYST_WORKSPACE_STORAGE: ${CATALYST_WORKSPACE_STORAGE:-}
+      CATALYST_WORKSPACE_RETENTION_HOURS: ${CATALYST_WORKSPACE_RETENTION_HOURS:-2}
+      CATALYST_HOST_FREE_FLOOR_GIB: ${CATALYST_HOST_FREE_FLOOR_GIB:-25}
+      CATALYST_HOST_DISK_SAMPLE_FILE: ${CATALYST_HOST_DISK_SAMPLE_FILE:-}
       CATALYST_THOUGHTS_DIR: ${CATALYST_THOUGHTS_DIR:-/srv/catalyst/thoughts}
+      CATALYST_THOUGHTS_CUSTODY_AUTHORITY: ${CATALYST_THOUGHTS_CUSTODY_AUTHORITY:-}
       CATALYST_POOL_LOCK_DIR: ${CATALYST_POOL_LOCK_DIR:-/srv/catalyst/locks}
       CATALYST_ORG_KEY_FILE: ${CATALYST_ORG_KEY_FILE:-/var/lib/catalyst/host-credential/org-key}
+      # `attempt`: sessions use their grant's own credential and the host holds no org key (CTC-4921).
+      # Unset keeps an existing install on the org key until it opts in.
+      CATALYST_SESSION_CREDENTIAL: ${CATALYST_SESSION_CREDENTIAL:-org-key}
       # Every setup and session container joins this network. It must exist before the supervisor
       # takes work: missing or not isolated is not-ready, never the default bridge.
       CATALYST_SESSION_NETWORK: ${CATALYST_SESSION_NETWORK:-catalyst-session-v1}
       CATALYST_SESSION_EGRESS_ATTESTATION: ${CATALYST_SESSION_EGRESS_ATTESTATION:-/var/lib/catalyst/session-egress/attestation.json}
+      # CTC-4265: the deadline for each primary workspace clone, in integer milliseconds. Empty is
+      # 180000; outside 1000-600000 the supervisor refuses to start. It forwards the value into each
+      # session container.
+      CATALYST_GIT_CLONE_TIMEOUT_MS: ${CATALYST_GIT_CLONE_TIMEOUT_MS:-}
+      # CTC-4265: the root of operator-prepared bare Git references. Empty means no reference and a
+      # direct clone every time. This file mounts nothing for it: setting it also needs the opt-in
+      # override, `docker compose -f compose.yaml -f compose.git-reference.yaml up -d`, which mounts
+      # the root read-only at the same path. Without the override every launch logs a cache miss.
+      CATALYST_GIT_REFERENCE_DIR: ${CATALYST_GIT_REFERENCE_DIR:-}
     # SIGTERM re-adopts on the next start instead of stopping phases, so the supervisor needs only
     # long enough to flush its journal.
     stop_grace_period: 30s

package/vendor/self-host/darwin-thoughts-custody/manifest.json

@@ -0,0 +1,18 @@
+{
+  "version": 1,
+  "generator": "bun",
+  "inputs": {
+    "packages/host-isolation/src/darwin-thoughts-producer.ts": "038fb63d8121fb1665ec31869f45604aedd96dd7d9b15a415d578fea9a0ad507",
+    "packages/protocol/src/darwin-thoughts-custody.ts": "3515efc22b0a3cfb512ff1acaf649c6eafb978b894c724fabb01c325aea51075",
+    "packages/host-isolation/src/darwin-thoughts-custody.ts": "5d65d59d71205e2ce5551e99b4ad33364d53cbdd29993cf2f164fc214b83baf8",
+    "deploy/self-host/darwin-thoughts-custody/producer-entry.ts": "27c8ff591c8dc4d1a4c65dd154157df5191ead1fb0af673bfd7099d5226d37bc",
+    "deploy/self-host/darwin-thoughts-custody/verifier-entry.ts": "80bc1e72943e43bc33d76ba205bd79751f58ca34d622e35f7e50e3b661f65464",
+    "deploy/self-host/darwin-thoughts-custody/generate.ts": "bfe1bef175fa8243be0558e1ddee6ddbcfbd622922e3a5df850e8621f18e7b26",
+    "deploy/self-host/darwin-thoughts-custody/watchdog.mjs": "6b5c7204aacd296c85a216d4f1b3adbe2084024fe37200ec1d24dfc2dec2e12d",
+    "deploy/self-host/darwin-thoughts-custody/watchdog-deadline.mjs": "a642e6d8968f56f635056d3b258e5c4ad186c638a273c26b4528e85b7d2a6346",
+    "deploy/self-host/darwin-thoughts-custody/service.plist.in": "66e9a2c175d2500b1f7130e7c04a5ed07f22bc7425661777f514fa3f2a816496"
+  },
+  "artifactSha256": "0e0f1bbdac23813e8ee57b6eb4ae3dfd24c3f1c51ebe0c3d119a1448734ea05e",
+  "verifierSha256": "2d8c9b5c35e38a25a45098b7606a216109557fb0466113098f503e9d6c8f6b4c",
+  "verifierDeclarationsSha256": "624428ced2eb18b045b761b49e20b7f52c0fc6c3132689571103ece7b4a1083f"
+}