newOS4 - the browser terminal that runs WebX11 user spaces https://newos.webx11.duckdns.org/newos4/atom?h=main 2026-11-05T21:32:04+00:00 2026-11-05T21:32:04+00:00 WebX11 SysOp darkmotox11@gmail.com 2026-11-05T21:32:04+00:00 urn:sha1:3bb89a967645902bb695aedbaea0103def2b3b16 Done before anyone has a token or a branch, because renaming later breaks every contributor. The hook compares the middle path segment to REMOTE_USER, so a token can only write under its own namespace; deletion and cleanup become a prefix operation instead of a guess. Verified 4/4: own namespace accepted, neighbour's namespace refused naming the authenticated user, missing owner segment refused with the correct form, main refused. Test branch and token removed afterwards; queue back to 0. 2026-11-05T21:26:25+00:00 WebX11 SysOp darkmotox11@gmail.com 2026-11-05T21:26:25+00:00 urn:sha1:2efbcea4785402134c4db09d3febda0e82aab71e Users push to push.newos.webx11.duckdns.org with a per-user token; the read-only host is untouched. http.receivepack is unset so git only allows receive-pack when REMOTE_USER is present, which only that vhost sets. A pre-receive hook (installed by the publisher every run) allows refs/heads/contrib/* only and refuses banned paths, credential-shaped blobs, >200 files or >2MB, logging user+ref+decision. moderate-contrib.py triages every 10 min: deletes hard violations, stamps the rest ready-docs/review/stale into a queue rendered at /admin/git-contrib.html. A human still decides what merges. Verified end to end: contrib push accepted, main refused, credential file refused, accepted ref visible on the read-only host; guard extended (push host 401, hook present+executable, receivepack unset) and proven RED by removing the hook. 2026-11-05T21:16:10+00:00 WebX11 SysOp darkmotox11@gmail.com 2026-11-05T21:16:10+00:00 urn:sha1:4f279d975c8aa55f44934a2ab6af67ebd3f7d454 2026-11-05T21:14:52+00:00 WebX11 SysOp darkmotox11@gmail.com 2026-11-05T21:14:52+00:00 urn:sha1:aa94c87ee811c5e12d956b80c528ce362ce58eea Install is npm (node>=22.19). Ollama wiring is two files under ~/.pi/agent: models.json (baseUrl http://localhost:11434/v1, api openai-completions, model list) and settings.json (defaultProvider/defaultModel). Documents the trap that a pulled model must also be declared — undeclared gives 'Model not found', which reads like a connection failure. Both paths verified on this host: declared coder:latest -> 'LOCAL OK', undeclared llama3.2:latest -> error. The two /about/ links pointed at the host root, where nothing exists; the repo page is /newos4/about/. 2026-11-05T21:00:12+00:00 WebX11 SysOp darkmotox11@gmail.com 2026-11-05T21:00:12+00:00 urn:sha1:4fdff92d6e2ba89d40283d01e93c4889f45788be Four recipes on the usage page: one-shot @file analysis, --mode json + jq for scripts, a read-only --tools allowlist for tree inspection, and a cron-able digest. Every flag shown was exercised on this host first; the retired-default model gotcha (HTTP 410 'was retired') is documented because it wasted a run. Adds the untrusted-input warning: pi auto-loads AGENTS.md/skills from the working directory, so a public clone must run with --no-approve and no write tools. 2026-11-05T19:55:25+00:00 WebX11 SysOp darkmotox11@gmail.com 2026-11-05T19:55:25+00:00 urn:sha1:3cc43867059b3ff7b581ffe2205f7d5dc410a3f6 2026-11-05T19:54:29+00:00 WebX11 SysOp darkmotox11@gmail.com 2026-11-05T19:54:29+00:00 urn:sha1:3c0fe68f9e41c249c91c7688571b2347f7f9281a Two measured overflows, both structural: a grid item defaults to min-width:auto so one long command stretched the column to 521 px, and the troubleshooting table had no fixed layout so a column of long code strings pushed the page 75 px wide. minmax(0,1fr) + min-width:0 + table-layout:fixed + overflow-wrap:anywhere. verify-mobile: 4/4 viewports OK. 2026-11-05T19:53:08+00:00 WebX11 SysOp darkmotox11@gmail.com 2026-11-05T19:53:08+00:00 urn:sha1:49c6fe2c1bcd12ca06d81a1f340c484d1aca5982 2026-11-05T19:53:01+00:00 WebX11 SysOp darkmotox11@gmail.com 2026-11-05T19:53:01+00:00 urn:sha1:1d5d502ebbe6c7f98e24853516037ef67610fd1f 310 files / 182 commits were already wrong at publish time (184). A count that changes on every publish is a rot vector; the page now says what the tree is and lets the reader run the commands. 2026-11-05T19:52:26+00:00 WebX11 SysOp darkmotox11@gmail.com 2026-11-05T19:52:26+00:00 urn:sha1:1758396d8c1bd9b916b9aeef5fc2f34fe4500606 Served at https://newos.webx11.duckdns.org/usage.html from docs/usage.html in this repo, so the page, the mirror and the README share one source. Covers the four failure modes that actually bite: CRLF on Windows (core.autocrlf), missing CA bundles, cloning into /sdcard from Termux (FUSE has no POSIX permissions), and the read-only 403 on push.