Go to file
Krzysztof kuhy Rudnicki 00bb6706fd
Some checks are pending
dependency freshness / dependencies on newest stable (push) Waiting to run
file length / file-length (push) Waiting to run
md-naming / markdown naming convention (push) Waiting to run
palette drift / palette (push) Waiting to run
shared gate tests / gate unit tests (push) Waiting to run
vmbox: vm lightdm and vm shim — the host's login topology and fake hardware
The golden image logs in with agetty+startx and has no RGB controllers,
no NVIDIA card and no sound card, so the night-lockdown scripts — which
mask/stop lightdm.service and getty@.service and shell out to openrgb,
nvidia-smi and amixer — had nothing real to act on in a sandbox and
were being "verified" on the host instead.

- `vm lightdm <name>`: installs lightdm + lightdm-gtk-greeter into the
  live overlay (pacman -Syu, not -S: the overlay's package database is
  the image's and mirrors have rotated those versions out), configures
  autologin -> i3 exactly like the host, turns tty1 back into a plain
  getty, reboots the guest and proves lightdm.service is active with an
  Xorg it owns. Never rebuilds the base: `vm build --force` re-seals a
  new checksum while every existing sandbox still backs onto the old
  file's name, which is silent qcow2 corruption.
- `vm shim <name> <tool> [exit[:N]|hang|sleep:S]`: a fake tool ahead of
  the real one on PATH, every call logged with an epoch to
  /var/log/vmbox-shim/<tool>.log so the host can assert what ran and in
  what order. `hang` is the openrgb 1.0-2 that never returned on
  2026-09-12 and defeated the curfew.
- The DISPLAY/XAUTHORITY resolver `vm run` sources becomes its own file,
  guest/vmbox-x11.sh, installed by the image build and re-installed by
  the lightdm switch; it now tests readability, not existence, and tries
  ~/.Xauthority before the startx serverauth glob, because lightdm's
  Xorg -auth file is root-only.
- README: the worked example uses MIDNIGHT_SHUTDOWN_CONFIRM=y (the
  installer refuses to run unattended now; `echo y |` no longer works),
  and the "i2c RGB stays on the host" line is gone.
- bats: four host-side tests for shim.sh (exit, exit:N, hang, refusals).

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_015mLnUeoJ3mUwGRTowTUH6d
2026-09-13 10:51:10 +02:00
.github/workflows file_length: repo-local .file-length-exempt list, fail-closed, package tested to 100% 2026-09-12 18:53:19 +02:00
aur-publish Re-point paths for the ~ reorganisation (home-tidy) 2026-09-11 18:45:55 +02:00
crdt_sync_dart Bump node, ruff, types-requests and dart test to latest stable 2026-09-12 17:42:29 +02:00
crdt_sync_flutter Move the Dart packages to very_good_analysis 11 2026-09-12 17:44:34 +02:00
crdt-sync crdt-sync: pylint --fail-under=10, scoped to source, on pylint 4.0.8 2026-09-12 19:06:30 +02:00
dep_freshness dep_freshness: upstream: allowlist predicate for forks; Google API clients judged inside their generation 2026-09-12 20:32:34 +02:00
design_system Move the Dart packages to very_good_analysis 11 2026-09-12 17:44:34 +02:00
dopamine-ux Re-point paths for the ~ reorganisation (home-tidy) 2026-09-11 19:07:23 +02:00
file_length file_length: match repo exemptions without PurePath.full_match (3.13-only) 2026-09-12 19:04:36 +02:00
firebase firebase: make the rules template impossible to deploy verbatim 2026-08-22 19:10:10 +02:00
freedays freedays: pylint --fail-under=10, scoped to source, on pylint 4.0.8 2026-09-12 19:32:20 +02:00
gatelock gatelock 0.8.2: wait_for_x_server waits for as long as it takes 2026-09-13 10:19:52 +02:00
github_device_auth Move the Dart packages to very_good_analysis 11 2026-09-12 17:44:34 +02:00
guard-lib Split the two shell scripts and the gate's own config 2026-08-22 14:59:27 +02:00
home_paths Gate home-relative paths against the ~ layout 2026-09-12 17:10:20 +02:00
md_naming Match dated backups by shape, not by hardcoded name 2026-09-12 17:12:02 +02:00
music_theory music_theory: pylint --fail-under=10, scoped to source, on pylint 4.0.8 2026-09-12 19:08:23 +02:00
prompts Re-point paths for the ~ reorganisation (home-tidy) 2026-09-11 18:45:55 +02:00
scripts Gate home-relative paths against the ~ layout 2026-09-12 17:10:20 +02:00
sync_settings_ui Move the Dart packages to very_good_analysis 11 2026-09-12 17:44:34 +02:00
ts_core ts_core + web_ui: @types/node 26.5.1 2026-09-13 10:30:49 +02:00
unified-design-system Repair the two CI signals gatelock 0.8.x broke, and drop its finished pylint TODO 2026-09-12 20:13:53 +02:00
vmbox vmbox: vm lightdm and vm shim — the host's login topology and fake hardware 2026-09-13 10:51:10 +02:00
web_ui ts_core + web_ui: @types/node 26.5.1 2026-09-13 10:30:49 +02:00
.gitignore Ignore Firebase CLI debug logs 2026-08-22 16:17:39 +02:00
.pre-commit-config.yaml Gate home-relative paths against the ~ layout 2026-09-12 17:10:20 +02:00
dependency-freshness.allowlist.yaml allowlist: typescript hold now names typescript-eslint 8.70.0 2026-09-11 13:48:01 +02:00
LICENSE Root scaffold: README, LICENSE, per-subdirectory CI for utils monorepo 2026-07-10 13:02:20 +02:00
README.md music_theory: music theory from first principles, as code you can hear 2026-09-11 18:29:13 +02:00
TODO-pylint-fail-under-10.md Add a session prompt to raise pylint --fail-under from 8.0 to 10 fleet-wide 2026-09-12 18:37:33 +02:00

utils

Shared libraries used across kuhyx's other projects. Each subdirectory is a formerly-standalone repo, folded in here with full commit history preserved (see each subdirectory's own git log for its pre-merge history).

crdt_sync_dart/

Dart/Flutter CRDT sync library (pub package name: crdt_sync, not published to pub.dev — consumed via a git dependency). Mirrors crdt-sync (below) module-for-module and test-for-test. Consumed by diet_guard's app, screen-locker's workout_app, wake_alarm's phone_app, and todo (whose notes are stored in the v0.2.0 LogStore).

Consume via:

dependencies:
  crdt_sync:
    git:
      url: https://github.com/kuhyx/utils
      ref: crdt_sync_dart-v0.10.0
      path: crdt_sync_dart

sync_settings_ui/

Shared Flutter "Sync settings" screen (pub package name: sync_settings_ui, not published to pub.dev). Firebase sync (primary) plus an optional local backup slot — no GitHub mirror UI. Pure UI + a FirebaseSyncController service layer over injected closures (keystore/Google-plugin access stays in each consuming app, exactly as before this package existed). Consumed by todo, diet_guard_app, workout_app, wake_alarm/phone_app, and home_inventory's dedicated "Sync settings" route.

Consume via:

dependencies:
  sync_settings_ui:
    git:
      url: https://github.com/kuhyx/utils
      ref: sync_settings_ui-v0.1.0
      path: sync_settings_ui

crdt-sync/

Python CRDT sync library (package: crdt_sync, not published to PyPI). Same design as crdt_sync_dart (HLC clocks, per-field LWW, sticky-delete tombstones). Consumed by diet-guard and screen-locker.

Consume via:

crdt-sync @ git+https://github.com/kuhyx/utils@crdt-sync-v0.2.0#subdirectory=crdt-sync

guard-lib/

Bash tamper-resistance primitives (guardctl: chattr + bind-mount + systemd watcher + pacman hooks). Not a package — installed by running guard-lib/install.sh as root, which copies files onto the system (/usr/local/bin, /usr/local/lib/guard-lib, systemd units, pacman hooks). Consumed by steam-backlog-enforcer (expects a guard-lib/install.sh sibling clone) and referenced by screen-locker.

gatelock/

Python lock-window + HMAC log-integrity backend (package: gatelock, not published to PyPI). Consumed via pip by screen-locker, diet-guard, and wake-alarm:

gatelock @ git+https://github.com/kuhyx/utils@gatelock-v0.1.0#subdirectory=gatelock

music_theory/

Music theory from first principles as typed Python (package: music_theory, not published to PyPI): pitch, tuning, scales, chords, progressions, a numpy synth and a Recipe → WAV composer with a degrade transform. Follows Luke Haas's "Music Theory for Programmers" section by section; python -m music_theory demo all --out DIR renders one WAV per section. Consumed by roadside-assistance for its three world-state music beds.

Consume via:

music_theory @ git+https://github.com/kuhyx/utils@music-theory-v0.1.0#subdirectory=music_theory

unified-design-system/

Not a package — the frozen design tokens (colors, spacing, type, radius, shadow policy) and per-stack (Flutter/web/Tkinter) implementation patterns that keep every one of kuhy's repos visually identical, plus annotated component references (components.html, button.html). Read unified-design-system/README.md and DOCS-tokens.md before touching any theme/CSS/style file in any repo. The unified-design-system Claude Code skill is a thin pointer here, not a duplicate.