[operations] Port Hackmode, libvirt, packet/container tools, auth-source, and system integrations #2

New issue

Open

opened 2026-09-16 04:13:22 +00:00 by nsaspy · 0 comments

nsaspy commented

2026-09-16 04:13:22 +00:00

Owner

Parent: #1

RAGE contract

Consume only this issue on rage/<issue>-<slug>. Initialize the run log with the canonical RAGE helper and preserve the immutable full start SHA. Load the canonical rage and adadr skills from lost-rob0t/skills before architecture or implementation. Blocked by the control-plane decision in #2.

Queue blockers: #14

Analyze

Cover Hackmode profiles, project checklists, libvirt.el, podman.el, pcap-mode, cheat-sh, app launch, alerts/notifications, auth-source, ActivityWatch integration, and security-sensitive helpers.
Enumerate exact external commands and privileges from Home Manager.

Gate

Recon/packet/VM/container actions must show scope and target; privileged actions require explicit confirmation.
Credentials and tokens remain in approved secret stores.

Execute

Implement narrowly scoped Lem commands and adapters with structured arguments, capability checks, cancellation, and audit-friendly results.
Keep optional integrations lazy.

Evaluate

Test denied permissions, missing daemon, invalid target, timeout, partial output, cancellation, and concurrent jobs with fakes or disposable resources.

Recurse

Any ambiguous or overly broad action returns to ADADR before code.

Acceptance

Operational tools are discoverable and gated.
No command widens scope silently.
Missing integrations do not affect editor startup.

Durable evidence

Update the relevant facts in .prolog/kb/lem_migration.pl and .prolog/kb/issues.pl in the same change.
Record focused red/green evidence, the full local gate, packaging checks, and exact-head CI status.
Keep failed iterations and architecture contradictions visible.

Stop conditions

Target/scope is unresolved.
A privileged operation lacks confirmation.
Secrets or raw sensitive captures would enter Git/logs.

Parent: #1 ## RAGE contract Consume only this issue on `rage/<issue>-<slug>`. Initialize the run log with the canonical RAGE helper and preserve the immutable full start SHA. Load the canonical `rage` and `adadr` skills from `lost-rob0t/skills` before architecture or implementation. Blocked by the control-plane decision in #2. Queue blockers: #14 ## Analyze - Cover Hackmode profiles, project checklists, libvirt.el, podman.el, pcap-mode, cheat-sh, app launch, alerts/notifications, auth-source, ActivityWatch integration, and security-sensitive helpers. - Enumerate exact external commands and privileges from Home Manager. ## Gate - Recon/packet/VM/container actions must show scope and target; privileged actions require explicit confirmation. - Credentials and tokens remain in approved secret stores. ## Execute - Implement narrowly scoped Lem commands and adapters with structured arguments, capability checks, cancellation, and audit-friendly results. - Keep optional integrations lazy. ## Evaluate - Test denied permissions, missing daemon, invalid target, timeout, partial output, cancellation, and concurrent jobs with fakes or disposable resources. ## Recurse - Any ambiguous or overly broad action returns to ADADR before code. ## Acceptance - [ ] Operational tools are discoverable and gated. - [ ] No command widens scope silently. - [ ] Missing integrations do not affect editor startup. ## Durable evidence - Update the relevant facts in `.prolog/kb/lem_migration.pl` and `.prolog/kb/issues.pl` in the same change. - Record focused red/green evidence, the full local gate, packaging checks, and exact-head CI status. - Keep failed iterations and architecture contradictions visible. ## Stop conditions - Target/scope is unresolved. - A privileged operation lacks confirmation. - Secrets or raw sensitive captures would enter Git/logs.

nsaspy referenced this issue

2026-09-16 04:13:22 +00:00

[web] Port RSS, browser editing, webpaste, PDF, media, and desktop-open workflows #3

nsaspy referenced this issue

2026-09-16 04:13:22 +00:00

[snippets] Port every Yasnippet family and Skeletor/project template #4

nsaspy referenced this issue

2026-09-16 04:13:22 +00:00

[custom] Port StarIntel research dashboards, approvals, TODO sync, capture, and activity tools #5

nsaspy referenced this issue

2026-09-16 04:13:22 +00:00

[ai] Port gptel, MCP, Temple, tools, and flashcard workflows #6