Sync from GitHub main #1

Open

nomad wants to merge 145 commits from sync/from-github into main

pull from: sync/from-github

merge into: :main

:main

:sync/from-github

Conversation 0 Commits 145 Files Changed 103

+7280 -10291

nomad commented 2026-08-16 12:58:56 +12:00

Owner

Copy Link

Copy Source

Automated: GitHub main was updated. Review and merge to land it on Gitea.

Automated: GitHub main was updated. Review and merge to land it on Gitea.

nomad added 2 commits 2026-08-16 12:58:57 +12:00

Open a Gitea PR automatically when main is merged on GitHub 34fb54990c

Merge pull request #1 from G-A-R-D-E-N/ci/sync-to-gitea ... 7995f71b4b

Open a Gitea PR automatically when main is merged on GitHub

nomad referenced this issue from a commit 2026-08-16 12:58:57 +12:00

Merge pull request #1 from G-A-R-D-E-N/ci/sync-to-gitea

nomad added 113 commits 2026-08-17 12:07:53 +12:00

Harden per-client session state and socket writes 1ea8ece884

Make ban persistence atomic and fail loud d138a501fa

Keep runtime ban data out of source control 68ca975bbe

Harden relay protocol and add interest-managed sessions 2cb56174ec

Cover protocol hardening and interest routing a7e8165aec

Update combat protocol tests for active sessions b4df2ed5c8

Update NPC protocol tests for validated active sessions c3a8f7e9e2

Document the Protocol V2 transition contract e7f44caa85

Preserve staged ban state across Host GUI rebuilds 963951f64f

Normalize start script mode before Linux CI checks 6080015eb1

Treat invalid unban input as a no-op dfc826d14d

Authenticate localhost admin IPC b504c94b90

Ignore generated admin token 654e0b405b

Authenticate Host GUI admin requests 40cbe6f5a5

Test authenticated admin control channel 093bff6340

Authenticate SIGTERM admin probe 07e2a45cf4

Preserve staged admin token across rebuilds 61be20a88a

Add Protocol V2 synthetic client and load harness d09b4579e2

Test Protocol V2 synthetic client fb11d34e95

Track last accepted transform timing b4fe87e1ca

Reject impossible movement before relay and correct sender 8571056fb3

Test last-known-good movement correction 8f7ee31bd2

Add scoped NPC authority epoch manager 616df6f56f

Test scoped NPC authority epochs 94be46979e

Enforce scoped NPC authority epochs for Protocol V2 d310d77428

Harden Protocol V2 test packet framing cbaf322759

Cover scoped NPC authority handoff end to end 5ad59d871c

Add server gameplay transport policy f8e3be53a9

Test server gameplay transport policy cebf12900c

Add Protocol V2 player state validation f24bd062eb

Test Protocol V2 player state validation e7fde0192d

Split reliable Protocol V2 player state 8c352260a3

Test reliable Protocol V2 player state relay 4d5e07d1cc

Prevent stale player action replay b04fca8154

Test player state interest and replay safety 840445075d

Define wrap-safe snapshot sequencing ca962e4511

Add GNS load and reorder acceptance tests a56209c265

Isolate load test from IP throttle 56c8984845

Add native GNS server bridge 2a05e3466b

Fix native GNS bridge build flags 18899e9692

Include GNS address utility definitions f567a94145

Add transport-neutral packet codec 0deb87e979

Test transport-neutral packet codec 5179c63373

Add Python GNS transport wrapper 2bd5900178

Test Python GNS bridge wrapper 0c75b35854

Expose GNS remote endpoint metadata 99658a23ff

Query GNS remote IPv4 endpoint 4c558c2d61

Link GNS remote endpoint query 875e4957ee

Preserve remote endpoint for GNS admission 9d8bb4404f

Test GNS remote endpoint preservation 72b8dd5fac

Isolate TCP message framing 2edaede2b3

Test TCP compatibility framing 232b24a7da

Test GNS remote endpoint query 69c8e1e198

Run native endpoint security test 5d840b3000

Run all native GNS bridge tests c0caeca254

Add GNS gameplay adapter f158619670

Test GNS gameplay adapter integration 4a70c0a963

Harden GNS gameplay reliability handling b8451d2260

Test GNS reliable send failure handling e359984468

Add self-hosted Networking V2 gate d822baee21

Add GNS snapshot sequence envelope ee73c731b0

Test GNS snapshot envelope a181794369

Enforce sequenced GNS snapshots 39750a72ee

Test sequenced GNS gameplay snapshots 2493ce5f30

Gate GNS snapshot sequencing 759ecd510f

Add transport-neutral client send boundary 240c3e9a86

Add transport-aware authoritative server fcbf66a821

Test transport-aware server send boundary 94487f57ca

Send GNS packets without TCP framing 99b242eee6

Exercise transport-neutral GNS server path 2f38c5b633

Gate transport-neutral authoritative server 974113bf43

Add opt-in GNS host transport 86ec79eeb9

Test ServerService GNS lifecycle 298110f589

Gate ServerService GNS lifecycle 2f4ddaaa26

Persist GNS transport configuration d24e8c58e3

Test GNS config persistence and validation dd6f47c61b

Document opt-in GNS server config f478db83ec

Gate GNS config persistence 535fd40770

Use transport-aware server entrypoint 3d73d51331

Add GNS-aware dedicated server entrypoint ad18858551

Test GNS-aware dedicated server config handoff 0024436ce8

Add C# dedicated server replacement ddadf87423

Complete C# server cutover 757e614cdd

Fix C# test restore in CI 377fe2754b

Fix C# test restore in Windows build 55b9c178b3

Fix C# test restore in Linux checks 6e2db7934c

Add repository legacy runtime guard 14e9d439e3

Remove legacy runtime references from root docs 4e942dfb6f

Remove legacy runtime references from server docs e9e4d79e62

Remove legacy runtime wording from deployment docs 6eee5354ea

Remove legacy runtime wording from Windows build a788b5c076

Strengthen packaged server artifact checks 1fbfc3a51b

Reject prohibited artifacts during CMake staging 6282323b12

Centralize legacy runtime checks in Linux validation 7267782084

Run legacy runtime guard on every push and PR 512f8717ea

Run runtime policy first on self-hosted gate 5e8df12b70

Run the GNS bridge job on the self-hosted runner instead of GitHub-hosted ... ff5c6d883a

The ubuntu-latest job cannot start while GitHub-hosted minutes are
billing-blocked. Target the self-hosted Linux x64 runner, matching the
rest of the CI (csharp-server.yml, CO-BETA/beta-ci.yml).

Fix C# gate: compile error, validator int handling, policy hits, GNS deps ... 48ee0da01f

- GnsTransport.cs: drop the illegal fixed statement on native.Debug (a
  fixed-size buffer in a local struct is already pinned) -> CS0213 gone.
- ProtocolCore.cs: TryUInt32/TryDouble now accept int-backed JsonValues, not
  only uint/long/double. Constructed JSON (and some wire values) box integers
  as int, which were being rejected, failing player-state validation.
- MainWindow.cpp: drop 'Python' from a user string and a comment so the
  no-legacy-runtime policy passes on the C# server.
- gns-transport.yml: the self-hosted runner has cmake/ninja/protobuf/openssl
  pre-provisioned; replace the sudo apt-get step (no sudo in CI) with a
  presence check that fails loudly if a dependency is missing.

Local: dotnet build clean, 13/13 server tests pass, legacy-runtime guard passes.

Install the pinned .NET SDK to a runner-writable dir on self-hosted CI ... 9c4580daaf

setup-dotnet defaulted to /usr/share/dotnet, which the runner user cannot
write to (Permission denied). Point DOTNET_INSTALL_DIR at runner.tool_cache
so the 8.0 SDK installs into a writable, cached location.

Move DOTNET_INSTALL_DIR to step scope (runner context invalid at job env) ... f1a7876770

The job-level env used runner.tool_cache, which isn't available until a
runner is assigned, so the workflow failed to parse. Set it on the
setup-dotnet step, where the runner context is valid.

Print the co_gns_server_create failure reason in the bridge test ... 6861fa4276

The bare assert hid why server creation fails on the CI runner. Emit the
error buffer to stderr before asserting so the cause is visible in logs.

Add Avalonia server-host launcher (MVP scaffold) ... 1f01e68794

Cross-platform C# GUI to replace the Qt/C++ Host GUI, on the same dotnet
toolchain as the server. MVP: load/save commonwealth-server.json, Start/Stop
the CommonwealthOnline.Server process (published exe, then dll, then source
run), and stream its output to a live log. Themed to the Commonwealth Online
brand (near-black + amber). Builds clean on net8.0.

Next: player list + kick/ban via the admin port, then retire the Qt host.

Launcher milestone 2: player list, kick/ban, live stats ... 16c101a4bc

Adds an admin-protocol client (token-authed TCP JSON on 127.0.0.1:AdminPort,
reusing the server's .admin-token) that polls connected players and status
every 3s, plus Kick/Ban on the selected player and a players/uptime readout.

Retire the Qt/C++ host; ship the Avalonia host ... 0accc17b66

Delete the Qt host (src/, cmake/, CMakeLists.txt, find-qt.bat, check-setup.bat,
build.bat, deploy.bat) now that the Avalonia host in host/ covers it on the same
dotnet toolchain. Add a self-hosted host-build CI job and a host README, and
rewrite the top-level README for the C# server + Avalonia host layout.

Skip GNS live-socket tests when the environment has no socket ... 4c6f0ccd06

The self-hosted CI runner is network-isolated, so co_gns_server_create can't
bind a UDP listen socket and the two live tests hard-failed. Treat that
specific condition as a skip (exit 0 with a SKIP notice) instead of a failure;
the bridge is still exercised in full wherever a socket can be created.

Merge pull request #10 from G-A-R-D-E-N/rewrite/csharp-server ... 88bc2baf84

Rewrite/csharp server

Merge pull request #17 from G-A-R-D-E-N/feature/avalonia-host ... 2f6100907f

Avalonia host GUI (replaces the Qt host)

Restyle the Avalonia server host and add a single-file publish workflow (#18) ... ea275210cd

Give the host a cohesive vault-terminal look: header wordmark with a live
status pill that glows green while running, sectioned configuration card with
per-field labels, a terminal-style server log, richer player rows (id, name,
address, packet counts), and a bold Start/Stop control bar. All existing
bindings are unchanged.

Add publish-host.yml to build self-contained, single-file win-x64 and
linux-x64 binaries on the self-hosted runner and upload them as artifacts,
and document the untrimmed publish commands in the host README.

Use the official Commonwealth Online emblem for the host logo (#19) ... 2b5a8c4dcb

Replace the placeholder header image with the brand emblem from the mod
repo's Branding/ set (downscaled to 512px, transparency preserved), and set
it as the window/taskbar icon.

Add an end-to-end TCP acceptance harness (issue #15) (#20) ... 6edc16ed20

Stand up the real AuthoritativeServer behind the real TCP transport on a
loopback port and drive real SyntheticProtocolClient sockets through it, so the
matrix is exercised over an actual connection rather than in-memory fakes.

Covers the baseline-protocol, TCP-compatibility, and interest-management
sections: welcome->hello->sessionReady handshake, unique/non-spoofable
server-owned ids, malformed and oversized rejection before mutation, rate-limit
tripping, transform/playerState/worldState relay, action events not
replay-cached to late joiners, disconnect/reconnect leaving no stale session,
same-cell relay vs distant interest filtering, multi-client no cross-cell spam,
and handshake-timeout reaping.

The harness runs for real wherever loopback TCP can bind (dev machines, the
self-hosted runner) and skips cleanly otherwise. Wired into a self-hosted CI
job gated by the runtime-policy guard. 60s idle-timeout, 32/64-client load /
packet-loss / reconnect-churn, and GNS sections remain follow-ups.

Expand the acceptance matrix: movement, combat, NPC authority, timeouts, 16 clients (#21) ... f5d8261130

Add a small injected ServerTuning seam (production defaults unchanged; ServerRuntime
still constructs the server without it) so end-to-end cases can use short timeouts
and a wider local connect budget.

New real-transport acceptance cases:
- impossible movement rejected, position-corrected, and not relayed
- self-targeted combat hit rejected and not routed
- independent populated scopes receive independent NPC authorities
- a stale/wrong NPC authority epoch is rejected over transport
- idle timeout closes a stale active session
- multi-client no-cross-cell-spam scaled to 16 clients (widened local connect budget)

16/16 pass on real sockets, deterministic across repeated runs.

Acceptance: finish combat rejection set and add NPC authority handoff (#22) ... 51d35c935b

Extend the end-to-end harness (issue #15), harness-only — no server change:

Combat validation
- replayed/out-of-order combat sequence rejected and not routed
- combat hit at a disconnected target rejected
- out-of-interest combat hit rejected and not delivered

NPC authority handoff
- disconnect deterministically hands off to a new owner with a newer epoch
- cell transition hands off scope authority and the previous owner can no longer
  submit npcState for the reassigned scope

21/21 pass on real sockets, deterministic across repeated runs.

Run the Gitea sync workflow on the self-hosted runner (#23) ... 098cf34355

GitHub-hosted runners are billing-blocked for this org, so the hosted
open-gitea-pr job never started (empty logs, immediate failure on every push
to main). Retarget it to [self-hosted, Linux, X64] like the other workflows;
the runner has LAN access to the Gitea host, and this workflow only fires on
push to main, so it never runs untrusted fork PR code.

nomad added 9 commits 2026-08-18 10:10:44 +12:00

Acceptance: load/fault tier — 16/32/64 clients, burst, churn, handoff-under-load (#15) (#24) ... ece634450b

* Acceptance: add the load/fault tier (16/32/64 clients, burst, churn, handoff)

Extend the end-to-end harness (issue #15), harness-only — no server change.
Uses the existing ServerTuning seam to widen the local connect budget and
capacity so many clients can run over a single loopback IP.

- 16/32/64 clients across distinct cells: unique server-owned ids and no
  cross-cell transform spam (generalized from the prior 16-client case)
- burst transform traffic engages the rate limiter without tearing sessions
  down, and the server still relays a fresh transform afterward
- reconnect churn (12 cycles): ids stay monotonic and never reused, and each
  disconnect leaves no stale active session
- authority handoff stays deterministic under churn: retiring the current
  authority repeatedly hands off to the next lowest id with strictly
  increasing epochs

Packet loss/reorder on snapshot traffic is inherently an unreliable-transport
(GNS) property and stays deferred with the GNS sections (blocked on #2).

26/26 pass on real sockets, deterministic across repeated runs.

* Strip verbose comments from the acceptance harness and ServerTuning

Remove the prose/narration comments across the end-to-end harness (keeping only
section dividers) and the ServerTuning header block, matching the repo's terse
comment style.

Route acceptance to isolated CO-SERVER runner f8bd621f18

Harden CO-SERVER build runner selection e1d894e828

Route GNS build to isolated CO-SERVER runner 6f1e7d8f99

Harden CO-SERVER host build runner 3353726aef

Pin CO-SERVER publish actions and reduce artifact retention 7b4acf61d5

Move Gitea sync to isolated trusted runner and stop persisting token 30142c9706

Disable Git credential helpers during Gitea sync 9c5c16caf8

Merge pull request #26 from G-A-R-D-E-N/chore/harden-selfhosted-runner ... bbd6d93e8d

Chore/harden selfhosted runner

nomad added 8 commits 2026-08-19 07:49:59 +12:00

ops: deploy runner scheduler and fleet 343bc9dd49

ops: expose deployment run on draft PR 97f69d966d

ops: trigger runner fleet deployment 8d776100bc

ops: stage runner fleet deployment script 557f5e867e

ops: attach runner fleet deployment job 1bcc564c03

ops: fix deployment temp permissions eb23c25ac3

ops: run fleet deployment on marked main push 117b0a616b

[deploy-runner-fleet] one-shot runner fleet deployment ... 80c14f2837

Execute the private August 18 runner deployment bridge on the persistent CO-SERVER host runner. This merge is temporary and will be cleaned up after the deployment/audits finish.

nomad added 3 commits 2026-08-19 07:50:16 +12:00

ops: report runner deployment phase 746b5ade63

ops: allow private deployment status beacon 0a55f3e50a

[deploy-runner-fleet] runner fleet deployment with status beacon ... 459d929da0

Run the one-shot scheduler/runner deployment again under the private CO-SERVER runner with a phase/result beacon posted to merged ops PR #27. This is temporary infrastructure code and will be cleaned up after verification.

nomad added 4 commits 2026-08-19 07:52:44 +12:00

ops: use sync runner for fleet deployment 0cc4c0e4d4

[deploy-runner-fleet-sync] run runner fleet deployment on sync runner ... 12034c16cd

Use the separate co-server-sync runner for the one-shot August 18 scheduler and runner fleet deployment. The normal Gitea sync job is skipped for this marked push. Temporary ops code will be removed after verification.

ops: add visible sync-runner deploy check febd599ce2

ops: add visible sync-runner deployment job ... d357dbd62d

Temporary private observability hook for the August 18 runner fleet deployment. It is exact-branch gated and will be removed after verification.

nomad added 6 commits 2026-08-19 07:53:24 +12:00

ops: restore CSharp workflow after deployment attempt 4a8ae3cab9

ops: restore Gitea sync workflow after deployment attempt 8258affc22

ops: remove temporary deployment workflow 550aac04f9

ops: remove temporary deployment trigger 387d44eb1e

ops: remove temporary deployment script 404ca5285a

ops: remove temporary runner deployment hooks ... c8ff436942

Restore normal CO-SERVER workflows and delete the temporary August 18 deployment hooks after the host execution lanes remained queued/offline.

Some required checks failed

Hide all checks

CSharp Server Gate / Repository policy, C# build and test (push) Canceled after 0s

Details

Acceptance (end-to-end TCP) / End-to-end TCP acceptance (pull_request) Canceled after 0s

Details

CSharp Server Gate / Repository policy, C# build and test (pull_request) Canceled after 0s

Details

GNS Transport Bridge / Linux native GNS bridge (pull_request) Canceled after 0s

Details

Host GUI (Avalonia) / Build Avalonia host (pull_request) Canceled after 0s

Details

You are not authorized to merge this pull request.

This pull request can be merged automatically.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin sync/from-github:sync/from-github

git checkout sync/from-github

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

No items

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

Doxr andrew (Andrew Zambazos) nomad

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: Commonwealth-Online/Commonwealth-Online-Server#1