From c0a679d989445c8dbc6bd58e27450ab10d320ad3 Mon Sep 17 00:00:00 2001 From: Gerardo Betancourt Date: Wed, 28 Oct 2026 12:07:03 -0400 Subject: [PATCH] Align website and shared guide with three signed Linux channels --- OFFICIAL-RELEASES.md | 2 +- docs/COMMAND-REFERENCE.md | 8 +- source/docs/COMMAND-GUIDE.json | 50 +++---- source/docs/COMMAND-REFERENCE.md | 8 +- source/docs/DEBIAN-TUTORIAL.md | 8 +- source/docs/framebridge.1 | 8 +- .../framebridge_expanded/guide_data.py | 13 +- source/packaging/generate_command_docs.py | 2 +- website/.gitignore | 2 + website/README.md | 48 ++++++- website/build_site.py | 84 +++-------- website/qa_site.py | 32 +++-- website/release.example.json | 76 +++++++--- website/release_catalog.py | 132 ++++++++++++++++++ website/src/site.css | 2 + website/test_release_catalog.py | 73 ++++++++++ 16 files changed, 397 insertions(+), 151 deletions(-) create mode 100644 website/release_catalog.py create mode 100644 website/test_release_catalog.py diff --git a/OFFICIAL-RELEASES.md b/OFFICIAL-RELEASES.md index b6d6f53..b0ea130 100644 --- a/OFFICIAL-RELEASES.md +++ b/OFFICIAL-RELEASES.md @@ -4,7 +4,7 @@ FrameBridge is free software under the applicable licenses. Everyone retains the ## What official means -An official FrameBridge release is built from an identified source revision accepted by the project maintainers. It has a version, source archive, installer, checksums and release signatures. The Debian APT repository publishes signed repository metadata. Official distribution starts at https://betancourt.one/framebridge/. Each release record identifies its signed installer, corresponding-source archive and verification material. A source mirror, when marked published in that record, is available read-only at https://betancourt.one/framebridge/git/framebridge.git. Source branch and tag identities are bound to the signed source archive by the release record; this policy requires release artifact signatures, not an individually signed Git tag. +An official FrameBridge release is built from an identified source revision accepted by the project maintainers. It has a version, source archive, installer, checksums and release signatures. The Debian APT repository publishes signed repository metadata. Official distribution starts at https://framebridge.betancourt.one/. The existing GERANAS Gitea repository is https://framebridge.betancourt.one/git/gerardo/framebridge. Each release record identifies the exact source revision, corresponding-source archive, three distribution package profiles, checksums and signatures. The signed APT repository uses independent trixie, noble and mint22 suites for the tested Debian 13, Ubuntu 24.04 and Linux Mint 22.x amd64 profiles. Release artifact signatures identify official downloads; individually signed Git tags are not required by this policy. Maintainers control write access, reviewed branches, release tags and signing operations. Public visitors and agents do not receive release-signing or direct protected-branch write access. External contributors propose changes through review. diff --git a/docs/COMMAND-REFERENCE.md b/docs/COMMAND-REFERENCE.md index f972d5a..b7b26a6 100644 --- a/docs/COMMAND-REFERENCE.md +++ b/docs/COMMAND-REFERENCE.md @@ -1,6 +1,6 @@ # FrameBridge — command guide -Version: 0.3.2+private.20261028.2 | Guide schema: 1 +Version: 0.3.3 | Guide schema: 1 This reference is generated from the shared CLI/MCP guide. Use the matching installed version. @@ -23,7 +23,7 @@ This reference is generated from the shared CLI/MCP guide. Use the matching inst ### One interface for people and agents -FrameBridge provides tools and a shared command-line interface for human operators and authorized agents. fb is the short name for framebridge; both run the same program. The tools run on your Linux computers. The ChatGPT model remains hosted. Read this guide for the installed version before operating; confirm the receiver, target and available capabilities. Use the installed CLI and tools for normal work. Edit software only when the owner explicitly requests development, using a separate source clone and reviewable changes rather than rewriting the installed program. +FrameBridge provides network administration tools and a shared command-line interface for a home Linux network with one human administrator and authorized agents. Desktop access is an auxiliary tool. fb is the short name for framebridge; both run the same program. The tools run on your Linux computers. The ChatGPT model remains hosted. Read this guide for the installed version before operating; confirm the receiver, target and available capabilities. Use the installed CLI and tools for normal work. Edit software only when the owner explicitly requests development, using a separate source clone and reviewable changes rather than rewriting the installed program. ~~~sh fb help @@ -33,10 +33,10 @@ fb --json status ### Install and connect -Install the .deb built for your exact Debian 13, Ubuntu 24.04/26.04, Linux Mint 22.x or LMDE 7 amd64 profile. These compatibility candidates still require installation and lifecycle validation on each target. Select the artifact from the matching profile folder and keep the distribution system Python. Normal first connection does not require a separate setup, doctor or start sequence. Run connect in a normal interactive terminal; advanced setup is optional for central/node roles and public settings. +Install the package built for your exact Debian 13, Ubuntu 24.04 or Linux Mint 22.x amd64 profile. These are the three release profiles; other distributions and architectures are outside this release. Keep the distribution system Python: 3.13 on Debian 13, 3.12 on Ubuntu 24.04 and Mint 22.x. Use the matching signed APT suite: trixie, noble or mint22. Normal first connection does not require a separate setup, doctor or start sequence. Run connect in a normal interactive terminal; advanced setup is optional for central/node roles and public settings. ~~~sh -sudo apt install ./framebridge-expanded_0.3.2+private.20261028.2_amd64.deb +sudo apt install ./framebridge-expanded_0.3.3_amd64.deb fb connect ~~~ diff --git a/source/docs/COMMAND-GUIDE.json b/source/docs/COMMAND-GUIDE.json index 38be413..178c94f 100644 --- a/source/docs/COMMAND-GUIDE.json +++ b/source/docs/COMMAND-GUIDE.json @@ -1,19 +1,19 @@ { "product": "FrameBridge", - "version": "0.3.2+private.20261028.2", + "version": "0.3.3", "guide_schema": 1, "topics": { "start": { "ok": true, "product": "FrameBridge", - "version": "0.3.2+private.20261028.2", + "version": "0.3.3", "guide_schema": 1, "topic": "start", "title": "Start with FrameBridge", "sections": [ { "heading": "One interface for people and agents", - "body": "FrameBridge provides tools and a shared command-line interface for human operators and authorized agents. fb is the short name for framebridge; both run the same program. The tools run on your Linux computers. The ChatGPT model remains hosted. Read this guide for the installed version before operating; confirm the receiver, target and available capabilities. Use the installed CLI and tools for normal work. Edit software only when the owner explicitly requests development, using a separate source clone and reviewable changes rather than rewriting the installed program.", + "body": "FrameBridge provides network administration tools and a shared command-line interface for a home Linux network with one human administrator and authorized agents. Desktop access is an auxiliary tool. fb is the short name for framebridge; both run the same program. The tools run on your Linux computers. The ChatGPT model remains hosted. Read this guide for the installed version before operating; confirm the receiver, target and available capabilities. Use the installed CLI and tools for normal work. Edit software only when the owner explicitly requests development, using a separate source clone and reviewable changes rather than rewriting the installed program.", "commands": [ "fb help", "fb status", @@ -22,9 +22,9 @@ }, { "heading": "Install and connect", - "body": "Install the .deb built for your exact Debian 13, Ubuntu 24.04/26.04, Linux Mint 22.x or LMDE 7 amd64 profile. These compatibility candidates still require installation and lifecycle validation on each target. Select the artifact from the matching profile folder and keep the distribution system Python. Normal first connection does not require a separate setup, doctor or start sequence. Run connect in a normal interactive terminal; advanced setup is optional for central/node roles and public settings.", + "body": "Install the package built for your exact Debian 13, Ubuntu 24.04 or Linux Mint 22.x amd64 profile. These are the three release profiles; other distributions and architectures are outside this release. Keep the distribution system Python: 3.13 on Debian 13, 3.12 on Ubuntu 24.04 and Mint 22.x. Use the matching signed APT suite: trixie, noble or mint22. Normal first connection does not require a separate setup, doctor or start sequence. Run connect in a normal interactive terminal; advanced setup is optional for central/node roles and public settings.", "commands": [ - "sudo apt install ./framebridge-expanded_0.3.2+private.20261028.2_amd64.deb", + "sudo apt install ./framebridge-expanded_0.3.3_amd64.deb", "fb connect" ] }, @@ -64,12 +64,12 @@ ], "read_only": true, "capabilities_verified": false, - "guide_sha256": "606e18e34e2b71a8a17ea3e05823a03b49b7a73d3b7a68dfaa725df9a754f16b" + "guide_sha256": "23abd7eec3efb77ca160c97fec9b8bacc7040419946e75584ed563a509577a57" }, "commands": { "ok": true, "product": "FrameBridge", - "version": "0.3.2+private.20261028.2", + "version": "0.3.3", "guide_schema": 1, "topic": "commands", "title": "Command reference", @@ -136,12 +136,12 @@ ], "read_only": true, "capabilities_verified": false, - "guide_sha256": "b765ac3fd5e90518f60f93969c86b4d5f04946cb8604b61a1e462833a7957172" + "guide_sha256": "432ab37e7249793cbe72e42d27582d70c2d2c1394ac1f5418b5d3e211e6a7c06" }, "connection": { "ok": true, "product": "FrameBridge", - "version": "0.3.2+private.20261028.2", + "version": "0.3.3", "guide_schema": 1, "topic": "connection", "title": "Connect and disconnect ChatGPT", @@ -190,12 +190,12 @@ ], "read_only": true, "capabilities_verified": false, - "guide_sha256": "eb8ec2e6d26617b76ccd3d6972233b7fab74072275275c8981d09166bef0d12c" + "guide_sha256": "c41d5c436a7039cfacd9cde4933e24c9f7d6235d43e2e9f4fe106f1a4c631764" }, "lifecycle": { "ok": true, "product": "FrameBridge", - "version": "0.3.2+private.20261028.2", + "version": "0.3.3", "guide_schema": 1, "topic": "lifecycle", "title": "Services, connection intent and boot policy", @@ -256,12 +256,12 @@ ], "read_only": true, "capabilities_verified": false, - "guide_sha256": "eb36c2d78bcda926b896a94385892ce3d479e56dce8a808ad55adfa601472f33" + "guide_sha256": "084358c9d1d41e0639b49d01c7e40b613127e3ead77e156cc2624850c7ebdb16" }, "nodes": { "ok": true, "product": "FrameBridge", - "version": "0.3.2+private.20261028.2", + "version": "0.3.3", "guide_schema": 1, "topic": "nodes", "title": "Central and node operation", @@ -310,12 +310,12 @@ ], "read_only": true, "capabilities_verified": false, - "guide_sha256": "fc9d260c0f0b4e4f84087297396044058d7ec2b8821391dae5187eb58683cad7" + "guide_sha256": "ec2adb6ba2cb36e3747bcb4975a6b777ad88d4fe2b9b1cfb1a2f6ec1e8dab43a" }, "terminals": { "ok": true, "product": "FrameBridge", - "version": "0.3.2+private.20261028.2", + "version": "0.3.3", "guide_schema": 1, "topic": "terminals", "title": "Persistent Bash terminals", @@ -376,12 +376,12 @@ ], "read_only": true, "capabilities_verified": false, - "guide_sha256": "162f069fbdb4584639be386163239530c1b9b883972ab212f5bccd47f6639e82" + "guide_sha256": "0aba231493d9ecae071ecdf5197440e0714393364948079fc4d163ff70cc67e3" }, "screens": { "ok": true, "product": "FrameBridge", - "version": "0.3.2+private.20261028.2", + "version": "0.3.3", "guide_schema": 1, "topic": "screens", "title": "Authentic screen observation and input", @@ -431,12 +431,12 @@ ], "read_only": true, "capabilities_verified": false, - "guide_sha256": "1734ee9890fe63d60fe008879c75804fa0c755c0396153a4be2e8228fd790316" + "guide_sha256": "eeaf9cfed9e7a84d59a727c4388b0869b02a6ed870647e87b333d318a3584c9a" }, "diagnostics": { "ok": true, "product": "FrameBridge", - "version": "0.3.2+private.20261028.2", + "version": "0.3.3", "guide_schema": 1, "topic": "diagnostics", "title": "Status and diagnosis", @@ -481,12 +481,12 @@ ], "read_only": true, "capabilities_verified": false, - "guide_sha256": "2899db14de0686a2dc50a2b22edf35d97d7d53e162300194fe57c126dde395dc" + "guide_sha256": "77a65897aacfeaa2b06dd184ac78d366d28980847b0cbdd1429c889e0e2898a6" }, "security": { "ok": true, "product": "FrameBridge", - "version": "0.3.2+private.20261028.2", + "version": "0.3.3", "guide_schema": 1, "topic": "security", "title": "Authorization, distribution and safe operation", @@ -521,12 +521,12 @@ ], "read_only": true, "capabilities_verified": false, - "guide_sha256": "addecd0420c18951683f32bdc05a9ab7d00a1b2150ecd6087bd99b784196696f" + "guide_sha256": "f257fcbbdec39395a15655b0a5123fb385ce7eaba2a256de07a5da65eab3ec8e" }, "compatibility": { "ok": true, "product": "FrameBridge", - "version": "0.3.2+private.20261028.2", + "version": "0.3.3", "guide_schema": 1, "topic": "compatibility", "title": "Compatibility with earlier commands", @@ -569,8 +569,8 @@ ], "read_only": true, "capabilities_verified": false, - "guide_sha256": "0dcbf347bfba8b0cff176d5c96bcf1a95f2c83fc6398559d54ac3b4c83d74b0a" + "guide_sha256": "9056f77b27f326bebfdbb54dd10b748d6315797b07afe1aee29f42d6210dae36" } }, - "guide_sha256": "1f259d089526e7e38f1732afbc4ceae2af62ec36c8630452fd8f4ef4ccb90069" + "guide_sha256": "5dc6ed2744e53d7d2ce1f471e2ab94d50f9c52f83ae85abe495bacad34b1b96c" } diff --git a/source/docs/COMMAND-REFERENCE.md b/source/docs/COMMAND-REFERENCE.md index f972d5a..b7b26a6 100644 --- a/source/docs/COMMAND-REFERENCE.md +++ b/source/docs/COMMAND-REFERENCE.md @@ -1,6 +1,6 @@ # FrameBridge — command guide -Version: 0.3.2+private.20261028.2 | Guide schema: 1 +Version: 0.3.3 | Guide schema: 1 This reference is generated from the shared CLI/MCP guide. Use the matching installed version. @@ -23,7 +23,7 @@ This reference is generated from the shared CLI/MCP guide. Use the matching inst ### One interface for people and agents -FrameBridge provides tools and a shared command-line interface for human operators and authorized agents. fb is the short name for framebridge; both run the same program. The tools run on your Linux computers. The ChatGPT model remains hosted. Read this guide for the installed version before operating; confirm the receiver, target and available capabilities. Use the installed CLI and tools for normal work. Edit software only when the owner explicitly requests development, using a separate source clone and reviewable changes rather than rewriting the installed program. +FrameBridge provides network administration tools and a shared command-line interface for a home Linux network with one human administrator and authorized agents. Desktop access is an auxiliary tool. fb is the short name for framebridge; both run the same program. The tools run on your Linux computers. The ChatGPT model remains hosted. Read this guide for the installed version before operating; confirm the receiver, target and available capabilities. Use the installed CLI and tools for normal work. Edit software only when the owner explicitly requests development, using a separate source clone and reviewable changes rather than rewriting the installed program. ~~~sh fb help @@ -33,10 +33,10 @@ fb --json status ### Install and connect -Install the .deb built for your exact Debian 13, Ubuntu 24.04/26.04, Linux Mint 22.x or LMDE 7 amd64 profile. These compatibility candidates still require installation and lifecycle validation on each target. Select the artifact from the matching profile folder and keep the distribution system Python. Normal first connection does not require a separate setup, doctor or start sequence. Run connect in a normal interactive terminal; advanced setup is optional for central/node roles and public settings. +Install the package built for your exact Debian 13, Ubuntu 24.04 or Linux Mint 22.x amd64 profile. These are the three release profiles; other distributions and architectures are outside this release. Keep the distribution system Python: 3.13 on Debian 13, 3.12 on Ubuntu 24.04 and Mint 22.x. Use the matching signed APT suite: trixie, noble or mint22. Normal first connection does not require a separate setup, doctor or start sequence. Run connect in a normal interactive terminal; advanced setup is optional for central/node roles and public settings. ~~~sh -sudo apt install ./framebridge-expanded_0.3.2+private.20261028.2_amd64.deb +sudo apt install ./framebridge-expanded_0.3.3_amd64.deb fb connect ~~~ diff --git a/source/docs/DEBIAN-TUTORIAL.md b/source/docs/DEBIAN-TUTORIAL.md index dc0a004..f6c0f9d 100644 --- a/source/docs/DEBIAN-TUTORIAL.md +++ b/source/docs/DEBIAN-TUTORIAL.md @@ -1,6 +1,6 @@ # FrameBridge — Debian, Ubuntu and Linux Mint installation and first use -Version: 0.3.2+private.20261028.2 | Guide schema: 1 +Version: 0.3.3 | Guide schema: 1 This reference is generated from the shared CLI/MCP guide. Use the matching installed version. @@ -23,7 +23,7 @@ This reference is generated from the shared CLI/MCP guide. Use the matching inst ### One interface for people and agents -FrameBridge provides tools and a shared command-line interface for human operators and authorized agents. fb is the short name for framebridge; both run the same program. The tools run on your Linux computers. The ChatGPT model remains hosted. Read this guide for the installed version before operating; confirm the receiver, target and available capabilities. Use the installed CLI and tools for normal work. Edit software only when the owner explicitly requests development, using a separate source clone and reviewable changes rather than rewriting the installed program. +FrameBridge provides network administration tools and a shared command-line interface for a home Linux network with one human administrator and authorized agents. Desktop access is an auxiliary tool. fb is the short name for framebridge; both run the same program. The tools run on your Linux computers. The ChatGPT model remains hosted. Read this guide for the installed version before operating; confirm the receiver, target and available capabilities. Use the installed CLI and tools for normal work. Edit software only when the owner explicitly requests development, using a separate source clone and reviewable changes rather than rewriting the installed program. ~~~sh fb help @@ -33,10 +33,10 @@ fb --json status ### Install and connect -Install the .deb built for your exact Debian 13, Ubuntu 24.04/26.04, Linux Mint 22.x or LMDE 7 amd64 profile. These compatibility candidates still require installation and lifecycle validation on each target. Select the artifact from the matching profile folder and keep the distribution system Python. Normal first connection does not require a separate setup, doctor or start sequence. Run connect in a normal interactive terminal; advanced setup is optional for central/node roles and public settings. +Install the package built for your exact Debian 13, Ubuntu 24.04 or Linux Mint 22.x amd64 profile. These are the three release profiles; other distributions and architectures are outside this release. Keep the distribution system Python: 3.13 on Debian 13, 3.12 on Ubuntu 24.04 and Mint 22.x. Use the matching signed APT suite: trixie, noble or mint22. Normal first connection does not require a separate setup, doctor or start sequence. Run connect in a normal interactive terminal; advanced setup is optional for central/node roles and public settings. ~~~sh -sudo apt install ./framebridge-expanded_0.3.2+private.20261028.2_amd64.deb +sudo apt install ./framebridge-expanded_0.3.3_amd64.deb fb connect ~~~ diff --git a/source/docs/framebridge.1 b/source/docs/framebridge.1 index 5684490..0b50fca 100644 --- a/source/docs/framebridge.1 +++ b/source/docs/framebridge.1 @@ -1,4 +1,4 @@ -.TH FRAMEBRIDGE 1 "2026-10-27" "FrameBridge 0.3.2+private.20261028.2" "User Commands" +.TH FRAMEBRIDGE 1 "2026-10-28" "FrameBridge 0.3.3" "User Commands" .SH NAME framebridge, fb \- use local Linux tools and enrolled nodes with ChatGPT .SH SYNOPSIS @@ -10,7 +10,7 @@ The names fb and framebridge execute the same program. The tools run on the selected Linux computers; the ChatGPT model remains hosted. .SH START WITH FRAMEBRIDGE .SS One interface for people and agents -FrameBridge provides tools and a shared command\-line interface for human operators and authorized agents. fb is the short name for framebridge; both run the same program. The tools run on your Linux computers. The ChatGPT model remains hosted. Read this guide for the installed version before operating; confirm the receiver, target and available capabilities. Use the installed CLI and tools for normal work. Edit software only when the owner explicitly requests development, using a separate source clone and reviewable changes rather than rewriting the installed program. +FrameBridge provides network administration tools and a shared command\-line interface for a home Linux network with one human administrator and authorized agents. Desktop access is an auxiliary tool. fb is the short name for framebridge; both run the same program. The tools run on your Linux computers. The ChatGPT model remains hosted. Read this guide for the installed version before operating; confirm the receiver, target and available capabilities. Use the installed CLI and tools for normal work. Edit software only when the owner explicitly requests development, using a separate source clone and reviewable changes rather than rewriting the installed program. .PP .nf fb help @@ -18,10 +18,10 @@ fb status fb \-\-json status .fi .SS Install and connect -Install the .deb built for your exact Debian 13, Ubuntu 24.04/26.04, Linux Mint 22.x or LMDE 7 amd64 profile. These compatibility candidates still require installation and lifecycle validation on each target. Select the artifact from the matching profile folder and keep the distribution system Python. Normal first connection does not require a separate setup, doctor or start sequence. Run connect in a normal interactive terminal; advanced setup is optional for central/node roles and public settings. +Install the package built for your exact Debian 13, Ubuntu 24.04 or Linux Mint 22.x amd64 profile. These are the three release profiles; other distributions and architectures are outside this release. Keep the distribution system Python: 3.13 on Debian 13, 3.12 on Ubuntu 24.04 and Mint 22.x. Use the matching signed APT suite: trixie, noble or mint22. Normal first connection does not require a separate setup, doctor or start sequence. Run connect in a normal interactive terminal; advanced setup is optional for central/node roles and public settings. .PP .nf -sudo apt install ./framebridge\-expanded_0.3.2+private.20261028.2_amd64.deb +sudo apt install ./framebridge\-expanded_0.3.3_amd64.deb fb connect .fi .SS Updating and removal diff --git a/source/expanded/framebridge_expanded/guide_data.py b/source/expanded/framebridge_expanded/guide_data.py index 0bf198e..55eb0f4 100644 --- a/source/expanded/framebridge_expanded/guide_data.py +++ b/source/expanded/framebridge_expanded/guide_data.py @@ -4,19 +4,10 @@ from . import __version__ GUIDE = {'start': {'title': 'Start with FrameBridge', 'sections': [{'heading': 'One interface for people and agents', - 'body': 'FrameBridge provides tools and a shared command-line interface ' - 'for human operators and authorized agents. fb is the short name ' - 'for framebridge; both run the same program. The tools run on ' - 'your Linux computers. The ChatGPT model remains hosted. Read ' - 'this guide for the installed version before operating; confirm ' - 'the receiver, target and available capabilities. Use the ' - 'installed CLI and tools for normal work. Edit software only when ' - 'the owner explicitly requests development, using a separate ' - 'source clone and reviewable changes rather than rewriting the ' - 'installed program.', + 'body': 'FrameBridge provides network administration tools and a shared command-line interface for a home Linux network with one human administrator and authorized agents. Desktop access is an auxiliary tool. fb is the short name for framebridge; both run the same program. The tools run on your Linux computers. The ChatGPT model remains hosted. Read this guide for the installed version before operating; confirm the receiver, target and available capabilities. Use the installed CLI and tools for normal work. Edit software only when the owner explicitly requests development, using a separate source clone and reviewable changes rather than rewriting the installed program.', 'commands': ['fb help', 'fb status', 'fb --json status']}, {'heading': 'Install and connect', - 'body': 'Install the .deb built for your exact Debian 13, Ubuntu 24.04/26.04, Linux Mint 22.x or LMDE 7 amd64 profile. These compatibility candidates still require installation and lifecycle validation on each target. Select the artifact from the matching profile folder and keep the distribution system Python. Normal first connection does not require a separate setup, doctor or start sequence. Run connect in a normal interactive terminal; advanced setup is optional for central/node roles and public settings.', + 'body': 'Install the package built for your exact Debian 13, Ubuntu 24.04 or Linux Mint 22.x amd64 profile. These are the three release profiles; other distributions and architectures are outside this release. Keep the distribution system Python: 3.13 on Debian 13, 3.12 on Ubuntu 24.04 and Mint 22.x. Use the matching signed APT suite: trixie, noble or mint22. Normal first connection does not require a separate setup, doctor or start sequence. Run connect in a normal interactive terminal; advanced setup is optional for central/node roles and public settings.', 'commands': ["sudo apt install ./framebridge-expanded_" + __version__ + "_amd64.deb", 'fb connect']}, {'heading': 'Updating and removal', 'body': 'Install an official update through the normal package manager when that update has been published. Normal removal stops package-owned managed processes and can retain the user profile and encrypted connection material; it is not a credential-forgetting operation. On systemd 255, package removal also revokes the administrative boot-credential grant. After reinstalling, run fb connect interactively to provision that grant again; retained files alone do not restore startup. Use the explicit credentials forget action first when that is your intended outcome. Do not assume purge erases user-profile data. An explicit downgrade also revokes administrative helper grants before the older package files replace the helper. Helper-backed profiles require a new interactive connect with a compatible package before managed startup can be restored.', diff --git a/source/packaging/generate_command_docs.py b/source/packaging/generate_command_docs.py index b95ef5b..83ca95e 100644 --- a/source/packaging/generate_command_docs.py +++ b/source/packaging/generate_command_docs.py @@ -26,7 +26,7 @@ def markdown(data, title): def roff(text): return text.replace('\\','\\e').replace('-','\\-') def man(data): - lines=['.TH FRAMEBRIDGE 1 "2026-10-27" "FrameBridge '+__version__+'" "User Commands"', + lines=['.TH FRAMEBRIDGE 1 "2026-10-28" "FrameBridge '+__version__+'" "User Commands"', '.SH NAME','framebridge, fb \\- use local Linux tools and enrolled nodes with ChatGPT', '.SH SYNOPSIS','.B framebridge', '[\\-\\-json] [\\-\\-state\\-dir DIRECTORY] COMMAND [ARGUMENTS]', diff --git a/website/.gitignore b/website/.gitignore index 4b5163e..70b5f7a 100644 --- a/website/.gitignore +++ b/website/.gitignore @@ -2,3 +2,5 @@ dist/ qa/ release.json __pycache__/ +assets/framebridge-preview-0.3.1-original-r4.mp4 +assets/framebridge-preview-0.3.1-original-r4.jpg diff --git a/website/README.md b/website/README.md index 5eb2800..35ef5bd 100644 --- a/website/README.md +++ b/website/README.md @@ -1,3 +1,49 @@ # FrameBridge website source -The website implementation follows the project GPL-3.0-only license. Project video is delivered separately. Copy release.example.json to release.json, add the supplied conceptual preview to assets/framebridge-preview.mp4, then run python3 -I -S build_site.py and python3 -I -S qa_site.py. The generator reads ../source/docs/COMMAND-GUIDE.json in this source layout. Production signing metadata must be supplied by a maintainer; never fabricate fingerprints or signatures. +The original visual design and renderer are retained. The main workflow is +administration of a home Linux network by one human administrator. Compatible +desktop access is an auxiliary tool. + +The canonical source repository is the existing GERANAS Gitea project +https://framebridge.betancourt.one/git/gerardo/framebridge. CLOUD provides the +existing HTTPS reverse proxy; GERANAS serves the website, downloads and APT +repository. Do not substitute a static Git mirror or another hosting backend. + +Copy release.example.json to release.json, then fill it from the exact verified +release inventory. Its three profiles are Debian 13 amd64/Python 3.13 (trixie), +Ubuntu 24.04 amd64/Python 3.12 (noble), and Linux Mint 22.x amd64/Python 3.12 +(mint22). A preparing catalog offers no new download or installation commands. +Use ready only after verifying all DEBs, corresponding source, dependency +source archives, signatures, checksums and the official public fingerprint. +Metadata describes release artifacts; it is not itself evidence that a public +hostname is operational. + +Project media is delivered separately. Copy the approved original R4 MP4 and +JPEG into assets under their original filenames. The renderer verifies these +identities before a ready build: + +- framebridge-preview-0.3.1-original-r4.mp4: + b2a8b0b302063edbe05d84fb6dadb7f303a6f0f1b6d79dc151287df4671adc5b +- framebridge-preview-0.3.1-original-r4.jpg: + 2e867d4b6a22f81ecbefa293a88799b9e3c93f02aa7d1090c7f0a0dbfe44dc9f + +The approved animation and original music remain unchanged. The video is +identified as a 0.3.1 conceptual demonstration; it does not claim to be a live +recording of the current release. + +Run: + + python3 -I -S build_site.py + python3 -I -S qa_site.py + python3 -I -S test_release_catalog.py + +The generator reads ../source/docs/COMMAND-GUIDE.json and requires its version +to match the release. QA checks local links/assets, loopback HTTP, the guarded +ready renderer with a disposable synthetic inventory, and syntax of all three +APT setup blocks. The test fixtures never sign, publish or install anything. +Perform final HTTPS, Gitea clone and isolated APT verification through the +actual public domain before reporting publication complete. + +The website follows the project's GPL-3.0-only license. Third-party materials +retain their own licenses and notices. Support is voluntary; the contact and +PayPal account supplied by the project owner is gerardobh1128@gmail.com. diff --git a/website/build_site.py b/website/build_site.py index 88d9b3e..06a0538 100644 --- a/website/build_site.py +++ b/website/build_site.py @@ -1,25 +1,25 @@ #!/usr/bin/python3 """Build the self-hosted FrameBridge website with the Python standard library.""" from pathlib import Path -import html,json,re,shutil,sys +import html,json,re,shutil,sys,runpy,hashlib BASE=Path(__file__).resolve().parent ROOT=BASE.parent DIST=BASE/'dist' META=json.loads((BASE/'release.json').read_text()) -META.setdefault('git_url','/git/framebridge/framebridge') -META.setdefault('git_clone_url','https://framebridge.betancourt.one/git/framebridge/framebridge.git') +META.setdefault('git_url','/git/gerardo/framebridge') +META.setdefault('git_clone_url','https://framebridge.betancourt.one/git/gerardo/framebridge.git') E=lambda value:html.escape(str(value),quote=True) READY=META.get('state')=='ready' -if READY: - assert re.fullmatch(r'[a-fA-F0-9]{64}',META.get('sha256','')),'Ready release requires the exact package SHA-256.' - assert re.fullmatch(r'[a-fA-F0-9]{40}|[a-fA-F0-9]{64}',META.get('signing_fingerprint','')),'Ready release requires a public signing fingerprint.' - assert META.get('source_archive_url') and META.get('package_signature_url') and META.get('size_bytes'),'Ready release requires source, signature and size metadata.' - deps=META.get('dependency_sources',[]) - assert len(deps)>=2 and all(item.get('url','').startswith('/downloads/') and re.fullmatch(r'[a-fA-F0-9]{64}',item.get('sha256','')) and item.get('size_bytes') for item in deps),'Ready release requires all dependency-source archives and their exact checksums.' -for name in ['git_url','package_url','package_signature_url','checksums_url','checksums_signature_url','source_archive_url','signing_key_url']: - value=META.get(name,'') - assert not value or value.startswith('/') or value.startswith('https://framebridge.betancourt.one/'),'Only project-owned HTTPS or root-relative artifact URLs are allowed.' +CAT=runpy.run_path(str(BASE/'release_catalog.py')) +CAT['validate'](META,READY) +VIDEO=CAT['VIDEO'];POSTER=CAT['POSTER'] +for name,expected in [(VIDEO,CAT['VIDEO_SHA256']),(POSTER,CAT['POSTER_SHA256'])]: + asset=BASE/'assets'/name + if asset.exists(): + assert hashlib.sha256(asset.read_bytes()).hexdigest()==expected,'Approved original media changed.' + elif READY: + raise ValueError('Approved original media is required before publication.') for path in ['assets','docs','download','blog/2026-10-26-opening-framebridge','community','support']: (DIST/path).mkdir(parents=True,exist_ok=True) for p in (BASE/'src').iterdir(): @@ -48,59 +48,15 @@ def code(text): return '
'+E(text)+'
' release_label='Official release' if READY else 'Release preparation' -home='''
Linux systems · Your ChatGPT account

Your computers.
A working conversation.

Bring commands, persistent terminals and a compatible desktop into your conversation with ChatGPT. Work on Linux systems you control, through one bridge.

Get FrameBridge Watch the concept

GNU GPLv3 · Debian 13 · Manual connection to your own account

FRAMEBRIDGE / EXAMPLE WORKFLOW

$fb connect

Connect your own account through the guided terminal flow.

$fb status

See tools, connection and startup state in one place.

$fb console

Return to your work view: Bash and FBTERM activity.

Illustrative commands. This is not a screen capture.

Local executionPersistent terminalsGraphical + text toolsCentral + nodes
-

01 / A conversation takes shape

From a blinking cursor
to a connected workflow.

A conceptual look at independent tasks, consoles and connected computers. The software runs your tools on your systems; the ChatGPT model remains hosted.

Conceptual animation — not a screen recording.Original RC7 concept preview. Features and commands are documented for the current release below.

-

02 / The bridge

Start with one machine.
Extend when you need to.

A standalone computer can provide local tools. A central installation can also connect approved nodes.

Where work happens
Your ChatGPT accountFrameBridgeYour Linux systems

No phone pairing is required. Initial account consent and credentials stay in the normal browser or hidden terminal prompts.

  1. 01

    Install and connect

    Install the Debian package, then use the guided text interface to connect your own account. Advanced role setup is optional for ordinary standalone use.

  2. 02

    Choose the right tool

    Use FBEXEC for commands, persistent terminals for ongoing shell work, and graphical CUA when a compatible desktop is available.

  3. 03

    Keep the context

    Return to a live terminal session without rebuilding its shell state between calls. Running processes do not survive an operating-system reboot.

  4. 04

    Add approved nodes

    Use the central instance for ChatGPT transport and select enrolled nodes explicitly. Nodes do not need a second ChatGPT tunnel.

-

03 / A practical toolset

Execution

Run authorized shell tasks on the selected machine and inspect their recorded results.

FBEXEC

Terminals

Keep a real Bash session across calls. Inspect text, send input and return to ongoing work.

FBTERM / fb tty

Desktop and text

Discover compatible graphical CUA automatically. Use text-terminal tools when a graphical desktop is unavailable.

CUA / CUA-TTY

People and agents

The same command-line interface serves human operators and authorized ChatGPT agents, with discoverable usage guidance.

fb / framebridge

Independent FBEXEC tasks have been used together in the laboratory when their objectives and changes did not overlap. This is observed practice, not an isolation guarantee. Use one controller at a time for each shared graphical desktop.

+home='''
Home Linux networks · One administrator

Your Linux network.
One place to administer it.

Administer your own home Linux network through ChatGPT: inspect equipment, diagnose connections, manage services and run commands across enrolled computers. One administrator, one bridge.

Get FrameBridge Watch the concept

GPL-3.0-only · Debian 13 · Ubuntu 24.04 · Linux Mint 22.x · amd64

FRAMEBRIDGE / EXAMPLE WORKFLOW

$fb connect

Connect your own account through the guided terminal flow.

$fb status

See tools, connection and startup state in one place.

$fb console

Return to your work view: Bash and FBTERM activity.

Illustrative commands. This is not a screen capture.

Local executionPersistent terminalsNetwork administrationCentral + nodes
+

01 / A conversation takes shape

From a blinking cursor
to a connected workflow.

A conceptual look at independent tasks, consoles and connected computers. The software runs your tools on your systems; the ChatGPT model remains hosted.

Conceptual animation — not a screen recording.Approved 0.3.1 concept preview with its original music. Current release packages and commands are documented separately.

+

02 / The bridge

Start with one machine.
Extend when you need to.

A standalone computer can provide local tools. A central installation can also connect approved nodes.

Where work happens
Your ChatGPT accountFrameBridgeYour Linux systems

No phone pairing is required. Initial account consent and credentials stay in the normal browser or hidden terminal prompts.

  1. 01

    Install and connect

    Install the package for your distribution, then use the guided text interface to connect your own account. Advanced role setup is optional for ordinary standalone use.

  2. 02

    Choose the right tool

    Use FBEXEC for commands, persistent terminals for ongoing shell work, and graphical CUA when a compatible desktop is available.

  3. 03

    Keep the context

    Return to a live terminal session without rebuilding its shell state between calls. Running processes do not survive an operating-system reboot.

  4. 04

    Add approved nodes

    Use the central instance for ChatGPT transport and select enrolled nodes explicitly. Nodes do not need a second ChatGPT tunnel.

+

03 / A practical toolset

Execution

Run authorized shell tasks on the selected machine and inspect their recorded results.

FBEXEC

Terminals

Keep a real Bash session across calls. Inspect text, send input and return to ongoing work.

FBTERM / fb tty

Desktop and text

Use compatible graphical and text access as auxiliary tools for your own equipment. Commands, diagnostics and network administration remain the main workflow.

CUA / CUA-TTY

People and agents

The same command-line interface serves human operators and authorized ChatGPT agents, with discoverable usage guidance.

fb / framebridge

Independent FBEXEC tasks have been used together in the laboratory when their objectives and changes did not overlap. This is observed practice, not an isolation guarantee. Use one controller at a time for each shared graphical desktop.

04 / Start working

Free software.
Verifiable releases.

Read the code, adapt it and contribute. Official downloads are identified by their published checksums and release signatures.

Download & verifyRead the guide
  • Version'''+E(META['version'])+'''
  • Platform'''+E(META['distribution'])+'''
  • LicenseGNU GPLv3 only
  • Channel'''+E(release_label)+'''

05 / Built in the open

A small project.
An open invitation.

Good tools improve through use, careful fixes and clear documentation. Report a reproducible issue, improve the guide or propose a change in Git.

How to contribute
''' -(DIST/'index.html').write_text(page('Your computers. A working conversation.',home)) +(DIST/'index.html').write_text(page('Administer your home Linux network',home)) -notice='' if READY else '
Release preparation. Download and installation commands will appear here once the package, corresponding source and signing information have been finalized. No placeholder checksum or key should be trusted.
' -facts='
Package
'+E(META['package_filename'])+'
Version
'+E(META['version'])+'
Platform
'+E(META['distribution'])+' · '+E(META['architecture'])+'
License
GNU GPLv3 only, with separate third-party notices
' -if READY:facts+='
Package SHA-256
'+E(META['sha256'])+'
Signing-key fingerprint
'+E(META['signing_fingerprint'])+'
' -facts+='
' -manual='' -apt='' -if READY: - def absolute(value): - return value if value.startswith('https://') else META['site_url']+value - manual_commands='''sudo apt install ca-certificates curl gnupg -( - set -eu - verify_dir="$(mktemp -d)" - trap 'rm -rf "$verify_dir"' EXIT - curl -fsSL "'''+absolute(META['signing_key_url'])+'''" -o "$verify_dir/project.asc" - expected="'''+META['signing_fingerprint'].upper()+'''" - actual="$(gpg --show-keys --with-colons "$verify_dir/project.asc" 2>/dev/null | awk -F: '$1=="fpr" {print $10; exit}')" - test "$actual" = "$expected" || { printf '%s\\n' "Signing-key fingerprint mismatch."; exit 1; } - gpg --batch --dearmor --output "$verify_dir/project.gpg" "$verify_dir/project.asc" - curl -fsSL "'''+absolute(META['package_url'])+'''" -o "$verify_dir/'''+META['package_filename']+'''" - curl -fsSL "'''+absolute(META['package_signature_url'])+'''" -o "$verify_dir/package.asc" - printf '%s %s\\n' "'''+META['sha256']+'''" "$verify_dir/'''+META['package_filename']+'''" | sha256sum --check - gpgv --keyring "$verify_dir/project.gpg" "$verify_dir/package.asc" "$verify_dir/'''+META['package_filename']+'''" - sudo apt install "$verify_dir/'''+META['package_filename']+'''" -)''' - manual='
Download .debCorresponding source

Package signature · SHA256SUMS · Signed checksums

Download, verify and install

This complete terminal flow checks the expected signing-key fingerprint, package checksum and detached signature before asking APT to install the package and resolve its dependencies.

'+code(manual_commands) - source_items=''.join('
  • '+E(item['label'])+'
    '+E(item['filename'])+'
    SHA-256: '+E(item['sha256'])+'
    • ' for item in META['dependency_sources']) - manual+='

    Complete source materials

    The matching FrameBridge source archive above and the following dependency-source materials are distributed together for this release. Preserve their license notices when redistributing.

    ' - apt_commands='''sudo apt install ca-certificates curl gnupg -( - set -eu - key_file="$(mktemp)" - trap 'rm -f "$key_file"' EXIT - curl -fsSL "'''+absolute(META['signing_key_url'])+'''" -o "$key_file" - expected="'''+META['signing_fingerprint'].upper()+'''" - actual="$(gpg --show-keys --with-colons "$key_file" 2>/dev/null | awk -F: '$1=="fpr" {print $10; exit}')" - test "$actual" = "$expected" || { printf '%s\\n' "Signing-key fingerprint mismatch."; exit 1; } - sudo install -d -m 0755 /etc/apt/keyrings - sudo install -m 0644 "$key_file" /etc/apt/keyrings/framebridge.asc - printf '%s\\n' "deb [signed-by=/etc/apt/keyrings/framebridge.asc] '''+META['apt_base']+''' trixie main" | sudo tee /etc/apt/sources.list.d/framebridge.list >/dev/null - sudo apt update - sudo apt install '''+META['package_name']+''' -)''' - apt='

    Install from the signed APT repository

    This project repository distributes FrameBridge; it is not a mirror of the full Debian archive. The signing key below is scoped to this repository with Signed-By.

    '+code(apt_commands)+'

    The fingerprint pins the key expected by this release page. Obtain it through this HTTPS site or another trusted project channel. Do not bypass APT signature errors.

    ' -download='

    Download / Verify / Install

    Get FrameBridge.

    Official packages and corresponding source, with a clear chain from the release page to the file you install.

    '+notice+manual+apt+'

    After installation

    Run the normal connection flow in a terminal on the computer you are connecting:

    '+code('fb connect\nfb status')+'

    Use your own account. Complete browser consent normally and enter credentials only at the hidden terminal prompts. Keep secrets out of chats, issue reports and copied command arguments.

    For diagnosis, use fb doctor. See the versioned command guide for advanced roles and operation details.

    ' +download=CAT['download'](META) (DIST/'download/index.html').write_text(page('Download and verify',download,'download')) community='''

    Community / Contribution

    Make the bridge better.

    Useful bug reports, small patches and clear explanations are a good place to begin.

    Start with the existing behavior

    Read the versioned guide, check the installed version and look for an existing issue. A reproducible report should name the command, expected result, actual result and relevant environment.

    Remove credentials and personal data from logs before sharing them. Never include passwords, access keys, private keys, tokens or cookies.

    Propose a focused change

    Use an issue to explain the problem or a pull request to propose a patch. Include the reason for the change and proportionate validation. Keep unrelated edits separate so they can be reviewed.

    '''+('

    Clone the project

    '+code('git clone '+META['git_clone_url']) if META.get('git_clone_url') else '')+'''

    Open the project in Git

    Official releases and free forks

    Maintainers review which changes become official FrameBridge releases. Published release checksums and signatures identify those artifacts.

    GNU GPLv3 also allows private modifications and independently distributed forks, subject to its terms. Contributing changes upstream is welcome; it is not a condition for exercising those rights. Modified builds should be clearly marked and must not be presented as official project releases.

    Read the GNU GPLv3 license. Third-party components retain their existing notices and licenses.

    Using an agent to contribute

    The command interface and MCP guide are designed for both people and authorized agents. Normal operation uses installed commands and tools. Editing or rebuilding the application is a development task that should follow the owner’s instructions.

    Project credits

    Programming: ChatGPT
    Original concept and project coordination: Gerardo Betancourt

    FrameBridge is an independent project. The credit describes how the project was developed and does not imply endorsement by OpenAI.

    ''' @@ -108,7 +64,7 @@ community='''

    Development journal / 26 October 2026

    Opening FrameBridge.

    A shared interface for people and agents, and a small invitation to improve it together.

    FrameBridge began with a practical goal: use a conversation with ChatGPT to do useful work on Linux computers we control. Commands, persistent terminals and a compatible desktop should fit into the same working context.

    Make the interface easier to understand

    The current development work brings everyday commands into a shorter vocabulary, keeps status observation separate from diagnosis, and explains the effects of connection and startup controls. The long command framebridge and its short alias fb use the same interface.

    The agent also needs a reliable starting point. A versioned guide and a brief MCP invitation are intended to help it discover how the installed software works, which computer receives an operation and what a command will change.

    Keep the evidence honest

    The preview video is a conceptual animation, not a recording of a live session. Real demonstrations and captures must remain distinguishable from illustrations. Independent tasks have been used together in the laboratory, but that experience does not establish automatic isolation or exclusive desktop control.

    Open source, with identifiable releases

    The project is being prepared for GNU GPLv3 distribution. Sources and package artifacts should be published together, with signatures and checksums identifying official releases. Community members remain free to adapt and redistribute the software under the license.

    The first contribution can be small: a clearer explanation, a reproducible issue or a focused fix. Review gives those changes a path into a later official version.

    Read the contribution guide →

    ''' (DIST/'blog/2026-10-26-opening-framebridge/index.html').write_text(page('Opening FrameBridge',post,'blog')) -support='''

    Support FrameBridge

    Help keep the bridge working.

    Voluntary support can help sustain a free software project: its hosting, maintenance, documentation and development.

    What support can help with

    • Hosting and distribution: keeping the source code, documentation and release files available.
    • Maintenance: investigating reported problems and keeping the software usable.
    • Documentation: improving clear instructions for people and agents.
    • Development: building and reviewing focused improvements.

    Funding channel

    Funding details will be published here when a channel is available.

    Contributions are voluntary. FrameBridge remains free software under GNU GPLv3 only, whether or not you provide financial support.

    Support without a payment

    A useful bug report, a clearer explanation or a carefully scoped patch can be valuable contributions. You can also help by sharing honest demonstrations that distinguish real recordings from conceptual illustrations.

    Read the contribution guide →

    Review stays independent

    Financial support does not grant control over official releases, bypass code review or security checks, or imply a project endorsement. Official changes follow the same review and release process.

    Explore the source code →

    ''' +support='''

    Support FrameBridge

    Help keep the bridge working.

    Voluntary support can help sustain a free software project: its hosting, maintenance, documentation and development.

    What support can help with

    • Hosting and distribution: keeping the source code, documentation and release files available.
    • Maintenance: investigating reported problems and keeping the software usable.
    • Documentation: improving clear instructions for people and agents.
    • Development: building and reviewing focused improvements.

    Voluntary support and contact

    Support through PayPal

    Project contact and PayPal account: gerardobh1128@gmail.com.

    Contributions are voluntary. FrameBridge remains free software under GNU GPLv3 only, whether or not you provide financial support.

    Support without a payment

    A useful bug report, a clearer explanation or a carefully scoped patch can be valuable contributions. You can also help by sharing honest demonstrations that distinguish real recordings from conceptual illustrations.

    Read the contribution guide →

    Review stays independent

    Financial support does not grant control over official releases, bypass code review or security checks, or imply a project endorsement. Official changes follow the same review and release process.

    Explore the source code →

    ''' (DIST/'support/index.html').write_text(page('Support FrameBridge',support,'support')) blog='''

    Development journal

    Notes from the bridge.

    Design decisions, release work and what we learn while using FrameBridge.

    Opening FrameBridge: a shared interface for people and agents.Read the development note →
    ''' @@ -157,4 +113,4 @@ hub+='' (DIST/'docs/index.html').write_text(page('Command guide','
    '+docs_nav('index')+hub+'
    ','docs',True)) (DIST/'404.html').write_text(page('Page not found','

    404 / Page not found

    This path ends here.

    Return to FrameBridge or open the command guide.

    ')) (DIST/'robots.txt').write_text('User-agent: *\n'+('Allow: /\n' if READY else 'Disallow: /\n')) -print(json.dumps({'web_root':str(DIST),'release_state':META['state'],'pages':len(list(DIST.rglob('*.html'))),'guide_topics':len(guides),'video_present':(DIST/'assets/framebridge-preview.mp4').is_file(),'ready_metadata_validated':READY},indent=2)) +print(json.dumps({'web_root':str(DIST),'release_state':META['state'],'pages':len(list(DIST.rglob('*.html'))),'guide_topics':len(guides),'video_present':(DIST/'assets'/VIDEO).is_file(),'ready_metadata_validated':READY},indent=2)) diff --git a/website/qa_site.py b/website/qa_site.py index 4e2b2dc..1c31c0a 100644 --- a/website/qa_site.py +++ b/website/qa_site.py @@ -51,7 +51,7 @@ def main(): if not u.path.startswith('/'):failures.append('Non-root relative URL '+value);continue target=resolve(u.path) if not target.exists(): - if u.path=='/assets/framebridge-preview.mp4':pending.append('Preview video asset pending') + if u.path=='/assets/framebridge-preview-0.3.1-original-r4.mp4':pending.append('Preview video asset pending') else:failures.append('Missing local target '+value+' referenced by '+str(p.relative_to(DIST))) elif u.path in q.assets:http_paths.add(u.path) if u.fragment and target.is_file() and target.suffix=='.html': @@ -78,33 +78,43 @@ def main(): with tempfile.TemporaryDirectory(prefix='framebridge-web-qa-') as td: temp=Path(td);web=temp/'web';web.mkdir() shutil.copyfile(BASE/'build_site.py',web/'build_site.py') + shutil.copyfile(BASE/'release_catalog.py',web/'release_catalog.py') shutil.copytree(BASE/'src',web/'src') (web/'assets').mkdir() for p in (BASE/'assets').iterdir(): - if p.is_file() and p.suffix!='.mp4':shutil.copyfile(p,web/'assets'/p.name) - fixture=dict(meta,state='ready',sha256='a'*64,signing_fingerprint='A'*40,size_bytes=1,source_archive_url='/downloads/SYNTHETIC-SOURCE.tar.gz') + if p.is_file():shutil.copyfile(p,web/'assets'/p.name) + fixture=json.loads(json.dumps(meta));fixture.update(state='ready',signing_fingerprint='2B1F01BC806C0B33CB6CEDDE52859CEBC91B8808',checksums_url='/downloads/TEST-SHA256SUMS',checksums_signature_url='/downloads/TEST-SHA256SUMS.asc') + fixture['source']=dict(filename='TEST-SOURCE.tar.gz',url='/downloads/TEST-SOURCE.tar.gz',signature_url='/downloads/TEST-SOURCE.tar.gz.asc',sha256='a'*64,size_bytes=1) + for i,profile in enumerate(fixture['profiles']): + filename='TEST-profile-'+str(i)+'.deb' + profile.update(filename=filename,url='/downloads/'+filename,signature_url='/downloads/'+filename+'.asc',sha256='a'*64,size_bytes=1) + for dependency in fixture['dependency_sources']: + dependency.setdefault('signature_url',dependency['url']+'.asc') (web/'release.json').write_text(json.dumps(fixture)) result=subprocess.run(['/usr/bin/python3','-I','-S',str(web/'build_site.py')],capture_output=True,text=True,timeout=10) if result.returncode:failures.append('Synthetic-ready rendering failed: '+result.stderr[-600:]) else: q=Inspect();q.feed((web/'dist/download/index.html').read_text()) blocks=[x for x in q.code if '\n' in x] - if len(blocks)!=3:failures.append('Expected manual verification, APT setup and after-install command blocks') for text in blocks: result=subprocess.run(['/bin/bash','-n'],input=text,text=True,capture_output=True,timeout=3) if result.returncode:failures.append('Rendered install block shell syntax: '+result.stderr.strip()) - manual=next((x for x in blocks if 'gpgv --keyring' in x),'') - if not manual or 'sha256sum --check' not in manual or 'expected="' not in manual:failures.append('Manual flow missing required verification') - apt=next((x for x in blocks if 'sources.list.d' in x),'') - if 'signed-by=' not in apt or 'apt-key' in apt:failures.append('APT trust not scoped with Signed-By') - status={'host':'GERAMEG','website_source':str(BASE),'web_root':str(DIST),'language':'English','buildless':True,'html_pages_checked':len(pages),'loopback_http_paths_checked':http_count,'static_failures':failures,'pending_assets':sorted(set(pending)),'infra_routes_expected':sorted(infra),'external_links':sorted(external),'no_external_runtime_dependencies':True,'copy_controls_progressive':True,'ready_branch_rendered_with_synthetic_fixture':True,'install_blocks_syntax_checked_not_executed':True,'release_state':meta.get('state'),'package_sha256_present':bool(meta.get('sha256')),'signing_fingerprint_present':bool(meta.get('signing_fingerprint')),'video_present':(DIST/'assets/framebridge-preview.mp4').is_file(),'visual_browser_QA_performed':False,'visual_browser_QA_limit':'No browser or user desktop was operated by this subtask. Root may inspect the staged site via the authorized GERAMEG surface.','production_network_or_services_changed':False,'site_ready_for_private_staging':not failures,'public_release_ready':not failures and not pending and meta.get('state')=='ready','homepage_sha256':hashlib.sha256((DIST/'index.html').read_bytes()).hexdigest()} + apt_blocks=[x for x in blocks if 'sources.list.d/framebridge.sources' in x] + if len(apt_blocks)!=3:failures.append('Expected three independent APT profile setup blocks') + for apt in apt_blocks: + if 'Signed-By:' not in apt or 'primary_count' not in apt or 'apt-key' in apt: + failures.append('APT key trust must be pinned and scoped with Signed-By') + for suite in ['trixie','noble','mint22']: + if not any('Suites: '+suite in block for block in apt_blocks): + failures.append('Missing APT suite '+suite) + status={'host':'GERAMEG','website_source':str(BASE),'web_root':str(DIST),'language':'English','buildless':True,'html_pages_checked':len(pages),'loopback_http_paths_checked':http_count,'static_failures':failures,'pending_assets':sorted(set(pending)),'infra_routes_expected':sorted(infra),'external_links':sorted(external),'no_external_runtime_dependencies':True,'copy_controls_progressive':True,'ready_branch_rendered_with_synthetic_fixture':True,'install_blocks_syntax_checked_not_executed':True,'release_state':meta.get('state'),'package_sha256_present':all(p.get('sha256') for p in meta.get('profiles',[])),'signing_fingerprint_present':bool(meta.get('signing_fingerprint')),'video_present':(DIST/'assets/framebridge-preview-0.3.1-original-r4.mp4').is_file(),'visual_browser_QA_performed':False,'visual_browser_QA_limit':'No browser or user desktop was operated by this subtask. Root may inspect the staged site via the authorized GERAMEG surface.','production_network_or_services_changed':False,'site_ready_for_private_staging':not failures,'public_release_ready':not failures and not pending and meta.get('state')=='ready','homepage_sha256':hashlib.sha256((DIST/'index.html').read_bytes()).hexdigest()} visual=BASE/'qa/VISUAL-REVIEW.json' if visual.exists(): status['visual_browser_QA_performed']=True status['visual_browser_QA_limit']=json.loads(visual.read_text())['limitations'] status['visual_browser_QA_report']=str(visual) - status.update(support_page='/support/',support_funding_channel_configured=bool(meta.get('support_payment_url')),support_payment_form_present=' 0, "Exact artifact size required") + require(re.fullmatch("[A-Za-z0-9][A-Za-z0-9._+~-]*", spec.get("filename", "")), "Safe artifact filename required") + project_url(spec.get("url", ""), "/downloads/") + project_url(spec.get("signature_url", ""), "/downloads/") + +def validate(meta, ready): + require(re.fullmatch(r"[0-9]+\.[0-9]+\.[0-9]+", meta.get("version", "")), "Release version must be numeric") + require(meta.get("state") in ("preparing", "ready"), "Unknown release state") + require(meta.get("site_url") == "https://framebridge.betancourt.one", "Canonical site origin required") + require(meta.get("package_name") == "framebridge-original-expanded", "Unexpected binary package") + require(meta.get("git_url") == "/git/gerardo/framebridge", "Use existing canonical Gitea repository") + require(meta.get("git_clone_url") == "https://framebridge.betancourt.one/git/gerardo/framebridge.git", + "Use existing canonical Gitea clone URL") + expected = {x[0]: x[1:] for x in PROFILES} + profiles = meta.get("profiles", []) + require(isinstance(profiles, list) and len(profiles) == 3, "Exactly three profiles required") + require(len({p.get("profile_id") for p in profiles}) == 3, "Duplicate profile") + for profile in profiles: + identity = profile.get("profile_id") + require(identity in expected, "Unexpected profile") + suite, label, python = expected[identity] + require((profile.get("suite"), profile.get("label"), profile.get("python"), + profile.get("architecture")) == (suite, label, python, "amd64"), + "Profile identity does not match its tested distribution") + if ready: + asset(profile) + if ready: + require(meta.get("signing_fingerprint") == FINGERPRINT, "Unexpected official signing fingerprint") + asset(meta.get("source")) + deps = meta.get("dependency_sources", []) + require(isinstance(deps, list) and len(deps) >= 2, "Dependency corresponding-source metadata required") + for dependency in deps: + asset(dependency) + for key, prefix in (("signing_key_url", "/debian/"), ("checksums_url", "/downloads/"), + ("checksums_signature_url", "/downloads/")): + project_url(meta.get(key, ""), prefix) + +def code(text): + return '
    ' + E(text) + '
    ' + +def apt_commands(meta, profile): + require(meta.get("state") == "ready", "Do not offer installation commands for an unsigned preparation") + validate(meta, True) + key_url = meta["site_url"] + meta["signing_key_url"] if meta["signing_key_url"].startswith("/") else meta["signing_key_url"] + return """sudo apt install ca-certificates curl gnupg +( + set -eu + key_file="$(mktemp)" + trap 'rm -f "$key_file"' EXIT + curl -fsSL '""" + key_url + """' -o "$key_file" + key_info="$(gpg --batch --show-keys --with-colons "$key_file" 2>/dev/null)" + actual="$(printf '%s\\n' "$key_info" | awk -F: '$1=="fpr" {print $10; exit}')" + primary_count="$(printf '%s\\n' "$key_info" | awk -F: '$1=="pub" {n++} END {print n+0}')" + test "$primary_count" -eq 1 + test "$actual" = '""" + FINGERPRINT + """' + sudo install -d -m 0755 /etc/apt/keyrings + sudo install -m 0644 "$key_file" /etc/apt/keyrings/framebridge-archive-keyring.asc + printf '%s\\n' \\ + 'Types: deb' \\ + 'URIs: https://framebridge.betancourt.one/debian/' \\ + 'Suites: """ + profile["suite"] + """' \\ + 'Components: main' \\ + 'Architectures: amd64' \\ + 'Signed-By: /etc/apt/keyrings/framebridge-archive-keyring.asc' \\ + | sudo tee /etc/apt/sources.list.d/framebridge.sources >/dev/null + sudo apt update + sudo apt install framebridge-original-expanded +)""" + +def download(meta): + ready = meta["state"] == "ready" + body = '

    Download / Verify / Install

    Choose your Linux package.

    One network administration tool. Three distribution profiles. Updates through signed APT repositories.

    ' + body += '

    FrameBridge helps one administrator manage their own home Linux network: inventory, services, storage, diagnostics, commands and persistent terminals. Desktop access is an auxiliary tool.

    ' + body += '

    Match the target computer

    ' + code("cat /etc/os-release\ndpkg --print-architecture\npython3 --version") + body += '

    The supported profiles below use amd64 and the distribution system Python. Select one matching suite for each computer.

    ' + if not ready: + body += '
    Release preparation. Version ' + E(meta["version"]) + ' is being prepared. Download links and installation commands appear after the exact artifacts and signatures are verified.
    ' + body += '
    ' + for profile in meta["profiles"]: + body += '

    amd64 · Python ' + E(profile["python"]) + '

    ' + E(profile["label"]) + '

    APT suite: ' + E(profile["suite"]) + '

    ' + if ready: + body += '

    SHA-256: ' + E(profile["sha256"]) + '

    ' + E(profile["filename"]) + ' · ' + format(profile["size_bytes"], ",") + ' bytes

    Download .debPackage signature
    Install the signed APT channel' + code(apt_commands(meta, profile)) + '
    ' + else: + body += '

    Version ' + E(meta["version"]) + ' · package and signature pending.

    ' + body += '
    ' + body += '
    ' + if ready: + body += '

    Release verification and source

    Expected signing-key fingerprint:

    ' + FINGERPRINT + '

    SHA256SUMS · Checksum signature · Public key

    Corresponding FrameBridge source · Source signature

    SHA-256: ' + E(meta["source"]["sha256"]) + '

    Third-party components retain their original licenses and notices. Unchanged dependency archives retain their historical filenames.

    Normal updates

    ' + code("sudo apt update\napt-cache policy framebridge-original-expanded\nsudo apt install --only-upgrade framebridge-original-expanded\nfb status") + body += '

    APT verifies the repository signature and package hashes. Keep the selected distribution suite and its scoped Signed-By key.

    ' + body += '

    Connect and work

    After installation, connect from the normal terminal on that computer:

    ' + code("fb connect\nfb status\nfb console") + '

    One central installation can connect enrolled Linux nodes. Nodes use the central connection. Enter passwords and connection keys only in the normal local prompts.

    Read the shared command guide · Browse the canonical source repository

    ' + return body diff --git a/website/src/site.css b/website/src/site.css index ce8b51a..138170c 100644 --- a/website/src/site.css +++ b/website/src/site.css @@ -7,3 +7,5 @@ .docs{color-scheme:light;--bg:#f3f3ec;--panel:#e9ede5;--ink:#1c3024;--muted:#526357;--line:#cbd5c8;--accent:#795118;--mint:#3c7153}.docs .site-header{background:#19251e;color:#f3f3ec;border-color:#33443b}.docs .brand .prompt,.docs .cursor{color:#eac27b}.docs .site-header nav a{color:#c3cfc3}.docs .site-header nav a[aria-current=page]{color:#fff}.docs .nav-download{border-color:#566b5b}.docs-layout{display:grid;grid-template-columns:230px minmax(0,1fr);gap:65px;padding:50px 0 85px}.docs-nav{border-right:1px solid var(--line);padding-right:28px;font-size:13px}.docs-nav p{font:11px var(--mono);text-transform:uppercase;letter-spacing:.08em;color:var(--muted)}.docs-nav ul{list-style:none;padding:0;margin:15px 0 28px}.docs-nav a{display:block;text-decoration:none;padding:7px 0;color:var(--muted)}.docs-nav a[aria-current=page]{color:var(--ink);font-weight:650}.docs article{max-width:780px}.docs h1{font-size:46px;max-width:none}.docs .prose p,.docs .prose li{color:var(--muted)}.docs .codebox{background:#e7ece3}.docs .copy-button{background:#f3f3ec}.docs .section-label{margin-bottom:15px}.docs .site-footer{background:#e9ede5}.docs .credits strong{color:#1c3024}.topic-links{display:grid;grid-template-columns:1fr 1fr;gap:0 35px;margin:30px 0}.topic-link{display:block;padding:18px 0;border-top:1px solid var(--line);text-decoration:none}.topic-link strong{display:block;margin-bottom:6px}.topic-link span{font-size:13px;color:var(--muted)} @keyframes blink{50%{opacity:0}}@media(max-width:1000px){.hero{gap:45px}.header-inner{min-height:90px}nav{gap:17px}.brand{font-size:21px}.feature-row{grid-template-columns:170px 1fr 1fr;gap:25px}.release-panel{gap:35px}.architecture-line{font-size:12px;gap:10px}.docs-layout{grid-template-columns:190px minmax(0,1fr);gap:35px}} @media(max-width:760px){.wrap{width:calc(100% - 40px)}body{font-size:16px}.header-inner{align-items:flex-start;flex-direction:column;gap:14px;padding:21px 0 17px}.brand{font-size:22px}nav{gap:14px;width:100%;font-size:12px;overflow-x:auto;padding:3px 0 7px}.nav-download{padding:5px 10px}.hero{display:block;padding:50px 0 48px}.hero h1{font-size:57px;max-width:11ch}.hero .lead{font-size:18px}.terminal{margin:45px 8px 0 0;box-shadow:8px 9px 0 #1b2821}.terminal-caption{text-align:left}.terminal-body{padding:25px}.strip{flex-wrap:wrap;gap:12px 20px;font-size:10px;padding:20px 0}.section{padding:50px 0}.section-head,.workflow,.community,.download-grid{display:block}.section-head{margin-bottom:25px}.section-head p{padding:0}.video-caption{display:block}.video-caption span{display:block;margin-top:5px}.workflow-list{margin-top:30px}.architecture{padding:25px}.architecture-line{flex-direction:column;align-items:flex-start;gap:10px}.architecture-line .arrow{transform:rotate(90deg);margin-left:6px}.feature-row{grid-template-columns:1fr;gap:12px;padding:24px 0}.feature-row code{font-size:11px}.release-panel{display:block;padding:28px}.release-panel h2{font-size:34px}.release-facts{margin-top:30px}.community>div+div{margin-top:35px}.footer-main,.footer-bottom{display:block}.footer-links{margin:25px 0}.footer-bottom p+p{margin-top:12px}.page-header{padding:40px 0 25px}.page-header h1{font-size:43px}.page-content{padding:30px 0 55px}.download-grid aside{margin-top:40px}.docs-layout{display:block;padding:30px 0 55px}.docs-nav{border-right:0;border-bottom:1px solid var(--line);padding:0 0 16px;margin-bottom:30px}.docs-nav ul{display:flex;flex-wrap:wrap;gap:3px 20px;margin:10px 0}.docs-nav a{padding:3px 0}.docs h1{font-size:37px}.topic-links{grid-template-columns:1fr}.codebox{padding:20px 16px}pre{font-size:12px}.codebox pre{padding-right:0;padding-top:20px}}@media(prefers-reduced-motion:reduce){html{scroll-behavior:auto}.cursor{animation:none}} + +.profiles{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:24px;margin:40px 0}.profile-card{min-width:0;border:1px solid var(--line,#31433b);padding:24px}.profile-card h2{font-size:1.6rem}.profile-card .actions{gap:10px}.profile-card details{margin-top:24px}.profile-card pre{font-size:.75rem;overflow:auto}@media(max-width:1000px){.profiles{grid-template-columns:1fr}.profile-card{padding:20px}} diff --git a/website/test_release_catalog.py b/website/test_release_catalog.py new file mode 100644 index 0000000..ff182b1 --- /dev/null +++ b/website/test_release_catalog.py @@ -0,0 +1,73 @@ +#!/usr/bin/python3 +"""Catalog guards and rendered shell syntax; no signing or installation.""" +import copy +import json +from pathlib import Path +import runpy +import subprocess +import unittest + +BASE = Path(__file__).resolve().parent +catalog = runpy.run_path(str(BASE / "release_catalog.py")) + +class CatalogTests(unittest.TestCase): + def setUp(self): + self.meta = json.loads((BASE / "release.example.json").read_text()) + + def ready(self): + meta = copy.deepcopy(self.meta) + meta.update(state="ready", signing_fingerprint=catalog["FINGERPRINT"], + checksums_url="/downloads/TEST-SHA256SUMS", + checksums_signature_url="/downloads/TEST-SHA256SUMS.asc") + meta["source"] = dict(filename="TEST-source.tar.gz", url="/downloads/TEST-source.tar.gz", + signature_url="/downloads/TEST-source.tar.gz.asc", sha256="a"*64, size_bytes=1) + for index, profile in enumerate(meta["profiles"]): + name = "TEST-profile-" + str(index) + ".deb" + profile.update(filename=name, url="/downloads/"+name, + signature_url="/downloads/"+name+".asc", sha256="a"*64, size_bytes=1) + return meta + + def test_preparation_has_no_install_or_download_claim(self): + catalog["validate"](self.meta, False) + text = catalog["download"](self.meta) + self.assertIn("Release preparation", text) + self.assertNotIn("sudo apt install", text) + self.assertNotIn("Download .deb", text) + + def test_three_profile_shell_commands_are_valid_and_key_scoped(self): + meta = self.ready() + catalog["validate"](meta, True) + for profile in meta["profiles"]: + commands = catalog["apt_commands"](meta, profile) + result = subprocess.run(["bash", "-n"], input=commands, text=True, capture_output=True) + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("Suites: " + profile["suite"], commands) + self.assertIn("Signed-By:", commands) + self.assertIn("primary_count", commands) + self.assertNotIn("trusted=yes", commands) + self.assertNotIn("apt-key", commands) + + def test_wrong_distribution_metadata_is_rejected(self): + self.meta["profiles"][1]["label"] = "Ubuntu 26.04" + with self.assertRaisesRegex(ValueError, "Profile identity"): + catalog["validate"](self.meta, False) + + def test_duplicate_profiles_are_rejected(self): + self.meta["profiles"][1] = self.meta["profiles"][0] + with self.assertRaisesRegex(ValueError, "Duplicate profile"): + catalog["validate"](self.meta, False) + + def test_extra_shell_characters_in_key_url_are_rejected(self): + meta = self.ready() + meta["signing_key_url"] = "/debian/key';echo-malicious" + with self.assertRaises(ValueError): + catalog["validate"](meta, True) + + def test_missing_artifact_checksum_is_rejected(self): + meta = self.ready() + meta["profiles"][2]["sha256"] = "" + with self.assertRaisesRegex(ValueError, "SHA-256"): + catalog["validate"](meta, True) + +if __name__ == "__main__": + unittest.main(verbosity=2)