chore(hygiene): remove internal network topology from tracked files

troed commented

2026-08-26 11:45:41 +02:00

Owner

Follow-up to the public-repo security audit: tracked files carried real internal network details (LAN IP, hostnames, username, home paths, SSH port). This removes them; real values stay in gitignored local files and the deploy environment, mirroring the policy already used in starfleet/roster.

Changes:

AGENTS.md: added a Public repo hygiene section (no internal hostnames/IPs/usernames/home paths/credentials in tracked files; pre-push scan command). Sanitized the deploy/fj sections that documented the live server's address, user, repo path, and SSH commands.
deploy.sh: SERVER_HOST, SERVER_USER, SERVER_REPO_DIR are now required env vars (were hardcoded LAN defaults); setup comments use placeholders.
client.sh.example / server.sh.example / mcp.json.example: placeholder hosts (<server-host>, <llm-host>, <home-assistant-host>).
README.md + src/computer/client/__init__.py: example IPs replaced with placeholders.

Deploy note: run deploys with SERVER_HOST=... SERVER_USER=... SERVER_REPO_DIR=... ./deploy.sh (export them in your shell or a gitignored env file).

Verification: bash -n deploy.sh OK; edited Python module compiles; hygiene scan (git grep -nIEi ...) clean over tracked tree.

Follow-up to the public-repo security audit: tracked files carried real internal network details (LAN IP, hostnames, username, home paths, SSH port). This removes them; real values stay in gitignored local files and the deploy environment, mirroring the policy already used in starfleet/roster. Changes: - `AGENTS.md`: added a **Public repo hygiene** section (no internal hostnames/IPs/usernames/home paths/credentials in tracked files; pre-push scan command). Sanitized the deploy/fj sections that documented the live server's address, user, repo path, and SSH commands. - `deploy.sh`: `SERVER_HOST`, `SERVER_USER`, `SERVER_REPO_DIR` are now **required env vars** (were hardcoded LAN defaults); setup comments use placeholders. - `client.sh.example` / `server.sh.example` / `mcp.json.example`: placeholder hosts (`<server-host>`, `<llm-host>`, `<home-assistant-host>`). - `README.md` + `src/computer/client/__init__.py`: example IPs replaced with placeholders. Deploy note: run deploys with `SERVER_HOST=... SERVER_USER=... SERVER_REPO_DIR=... ./deploy.sh` (export them in your shell or a gitignored env file). Verification: `bash -n deploy.sh` OK; edited Python module compiles; hygiene scan (`git grep -nIEi ...`) clean over tracked tree.

troed added 2 commits

2026-08-26 11:45:41 +02:00

test(conformance): push session.created hello post-upgrade like real server 83e0d4ba76

chore(hygiene): remove internal network topology from tracked files

CI / Sanity check (ubuntu-latest) (pull_request) Failing after 2m22s

Details

31a8268d9a

troed added 1 commit

2026-08-26 11:48:08 +02:00

docs(hygiene): document required SERVER_* env vars in deploy.sh header

CI / Sanity check (ubuntu-latest) (pull_request) Failing after 3m14s

Details

25bb2eff33

troed added 2 commits

2026-08-26 12:03:12 +02:00

style: apply ruff format to files breaking the CI format gate 734c0e541b

fix(conformance): decode-and-skip session hello in fake-server smoke test

CI / Sanity check (ubuntu-latest) (pull_request) Successful in 4m9s

Details

4a57d445b3

The fake server pushes session.created before any client frame (mirrors the
real server, commit 83e0d4b). The smoke test predates that behavior and
expected the pushed event first; CI never caught it because the ruff-format
gate was failing earlier in the job.

troed merged commit 4e7daea732 into devel

2026-08-26 12:10:49 +02:00

troed deleted branch hygiene/public-repo-sanitization

2026-08-26 12:10:49 +02:00

troed referenced this pull request from a commit

2026-08-26 12:10:50 +02:00

chore(hygiene): remove internal network topology from tracked files (#4)

Rows
Columns

chore(hygiene): remove internal network topology from tracked files #4