wire OpenTelemetry across all binaries with no-op default and per-host collector config#31

Draft

meAmitPatil wants to merge 70 commits into

amit/remove-auto-pause-resumefrom

amit/telemetry-otel

Commits on Apr 10, 2026

feat: ed25519 signed token package for short-lived edge proxy access
meAmitPatil
committed
feat: terminal-token endpoint mints short-lived signed tokens for ws upgrade
meAmitPatil
committed
feat: edge proxy token verifier, nonce dedupe, and terminal host parser
meAmitPatil
committed
feat: websocket bridge from edge proxy to boxd pty
meAmitPatil
committed
docs: add terminal-token endpoint to openapi spec
meAmitPatil
committed
test: integration tests for terminal ws bridge with fake boxd
meAmitPatil
committed
chore: terminal keypair distribution for edge proxy deploys
meAmitPatil
committed
fix: address review feedback for web terminal
meAmitPatil
committed
ci: plumb terminal_allowed_origins and require_terminal vars to deploy-vmd
meAmitPatil
committed
fix: switch to ssl proxy lb and add http-to-https redirect listener
meAmitPatil
committed
proxy: extract shared sandbox authz, add ScopeFiles and /files bridge scaffold
meAmitPatil
committed
api: add /sandboxes/:id/file-token mint, share preamble with terminal-token
meAmitPatil
committed
remove legacy file upload/download via controlplane+VMD; edge proxy is now sole path
meAmitPatil
committed
tests: cover /sandboxes/:id/file-token and edge-proxy /files bridge; fix X-Forwarded-For stripping
meAmitPatil
committed
docs: openapi for /file-token, remove legacy /files/{path} routes
meAmitPatil
committed
proxy: drop stray comment reference
meAmitPatil
committed
proxy: unify terminal + files under reserved 'boxd-' host label
meAmitPatil
committed
proxy: delegate /health on sandbox hosts to boxd-label lockdown
meAmitPatil
committed
proxy: reject '..' segments in /files ?path= at the edge
meAmitPatil
committed
boxd: remove artificial 512MB upload cap, return clean 507 on ENOSPC
meAmitPatil
committed
auth: replace Ed25519 signed tokens with per-sandbox HMAC access tokens
meAmitPatil
committed
api: return access_token on create, resume, and get sandbox responses
meAmitPatil
committed
proxy: remove ?token= query carrier, fix stale comments from code review
meAmitPatil
committed
proxy: fix files-only deploy, LRU cache eviction, graceful redirect shutdown; boxd: clean up partial files on any upload failure
meAmitPatil
committed
api: remove legacy /instances endpoints and ip_address from all responses
meAmitPatil
committed
api: VMD reports actual resources in CreateVMResponse, single ActivateSandbox DB call
meAmitPatil
committed
api: use placeholder 1 instead of 0 for initial sandbox resources (DB CHECK constraint)
meAmitPatil
committed
test: update integration test to expect actual VM memory (1024 MiB)
meAmitPatil
committed
api: ResumeInstance returns actual resources; proxy: enforce connection limits on boxd paths
meAmitPatil
committed
feat: support environment variables at sandbox creation
meAmitPatil
committed
api: validate env_vars size limits
meAmitPatil
committed
phase 0: add host table, make sandbox.host_id NOT NULL
meAmitPatil
committed
phase 1: add HostRegistry + Scheduler, route all VMD calls through host_id
meAmitPatil
committed
extract VMDClient to vmdclient package, fix type safety and legacy host fallback
meAmitPatil
committed
phase 2: add systemd units, BoltDB state store, and systemctl wrapper
meAmitPatil
committed
phase 2: wire systemd mode, BoltDB persistence, and startup reattach into VM manager
meAmitPatil
committed
phase 2: fix PauseVM, ResumeVM, RestoreVMSnapshot for systemd mode; improve reattach with orphan detection
meAmitPatil
committed

Commits on Apr 11, 2026

Commits on Apr 12, 2026

Commits on Apr 13, 2026

Commits on Apr 14, 2026

Commits on Apr 15, 2026

wire OpenTelemetry across all binaries with no-op default and per-host collector config
meAmitPatil
committed