Решение для закрытых контуров

Изолированный запуск приложений в закрытом контуре

Изолированный доступ к назначенным приложениям, централизованное управление и контроль эксплуатации.

Разграничение доступа

Пользователи, группы и роли

Контроль приложений

Сессии, версии и журналы

Интеграции

MFA, RADIUS, LDAP, OAuth и OIDC

Возможности для организации

Доступ, управление приложениями и эксплуатационный контроль

Изоляция приложений

Каждый пользователь получает доступ только к назначенному набору приложений.

Разграничение доступа

Пользователи, группы, роли и внешняя аутентификация.

Ресурсы и хранилище

Ограниченные ресурсы и выделенное хранилище для приложений.

Управление версиями

Подготовленные пакеты, текущие версии и режимы обновления.

Контроль сессий

Перезапуск, остановка и удаление пользовательских сессий.

Журналы и показатели

Сессии, логи и графики в административной панели.

Применение

Изолированный доступ к прикладным программам

Браузеры и другие прикладные программы доступны пользователям через назначенный набор приложений.

Поддерживаемые типы приложений

Браузеры
Android-оболочки
Игры
Полноценные рабочие столы

Примеры поставляемых приложений

Chromium GOST

Chromium с поддержкой ГОСТ-криптографии для работы с электронной подписью и TLS по российским стандартам

Yandex Browser

Браузер от Яндекса с интеграцией сервисов экосистемы

Назначенный набор приложений

Пользователь имеет доступ только к своему набору приложений.

Управление

Централизованное управление приложениями и доступом

Администратор управляет пользователями, версиями и сессиями, а пользователи запускают назначенные приложения через портал.

Портал пользователей

Пользователь запускает назначенное приложение через портал.

Административная панель

Администратор управляет приложениями, сессиями, журналами и показателями.

Управление доступом

Пользователи, группы и роли управляются в панели идентификации.

Состояние системы

Пользователи, сессии, приложения и основные показатели.

Каталог приложений

Подготовленные пакеты, версии и режимы обновления.

Сессии

Перезапуск, остановка и удаление.

Интерфейсы

Административная панель и графический установщик

Управление приложениями, графики метрик и установка системы.

Административная панель Isolarium: приложения
Управление приложениями
Административная панель Isolarium: графики метрик
Графики метрик
Графический установщик Isolarium
Графический установщик

Интеграции

Интеграции и протоколы

Подключение к системам аутентификации, контроль файлов и доступ к устройствам.

Аутентификация

MFA, RADIUS, LDAP, OAuth и OIDC.

Контроль файлов

Загрузки и скачивания проверяются через центральный DLP-шлюз.

Доступ к устройствам

Доступ к микрофону, камере и USB-устройствам назначается для приложения.

Защита взаимодействия

mTLS между компонентами системы.

Варианты внедрения

Сценарий выбирается с учётом существующей платформы и требований к изоляции

Существующий Kubernetes

Ядро системы устанавливается в уже созданный кластер Kubernetes.

  • Установка через Helm
  • Внутреннее хранилище образов
  • Подписанный пакет

k3s

Платформа и ядро устанавливаются комплектом через CLI или веб-установщик.

  • Установка платформы и ядра
  • Проверка окружения
  • Веб-установщик

On-premise

Работа в закрытом контуре на инфраструктуре организации.

  • TLS
  • Выделенное хранилище
  • Панель администратора

Air-gap

Полное развёртывание в среде без доступа к интернету.

  • Установочный пакет
  • Проверка целостности
  • Локальное хранилище образов

Changelog

август 2026 г.

isolarium

Fix invalid public url for demo instance

isolarium

Apply CRDs before core installation

isolarium

Increase logs agent memory limit

isolarium

Replace replica counters with application statuses

isolarium

Add justfile target for demo deployment

isolarium

Sync cli installer with web features

isolarium

Bump device agent version

isolarium

Delay device capture until use

isolarium

Preserve existing application PVCs

isolarium

Add system tray controls

isolarium

Fix application lifecycle and resource updates

isolarium

Bump release versions for microphone loopback fix

isolarium

Add application resource settings

isolarium

Bump isolarium-idp version

isolarium-idp

Bump package version

isolarium-idp

Skip disabled TOTP stages in flows

isolarium-idp

Configure TOTP from admin panel

isolarium-idp

Highlight active CRUD navigation items

isolarium

Prevent microphone loopback in browser sessions

isolarium

Add web UI to device agent

isolarium

Keep microphone wiring out of the application controller

isolarium

Keep browser microphone traffic on the pod loopback

июль 2026 г.

isolarium

Publish the camera and microphone bridge changes

isolarium

Prefer live camera frames over stale backlog

isolarium

Keep microphone audio binary and close to live

isolarium

Keep browser media messaging on supported engines

isolarium

Update IDP branding defaults

isolarium

Make local DLP inspection binary-safe

isolarium

Disable dlp checks by default

isolarium

Add scripts for interactive presentation

isolarium

Add justfile target for local customer bundle testing

isolarium

Update TSDB version

isolarium

Persist remote installation assets

isolarium

Do not download k3s files if they are already in local filesystem

isolarium

Separate admin connection and license errors

isolarium

Update TSDB and IDP image versions

isolarium-idp

Bump package version

isolarium-idp

Complete UI localization

isolarium-idp

Improve admin styles

isolarium

Restore real microphone capture in browser sessions

isolarium

Share camera YUYV conversion as a library and add a hardware probe

isolarium

Specify versions of local tools in README.md

isolarium

Actualize README and isolarium-docs to match current project state

isolarium

Switch device agent camera capture to native YUYV and convert to I420

isolarium

Bump missing app controller version

isolarium

Publish Chromium-GOST as release 0.24.0

isolarium

Make application launch resilient to idle shutdown

isolarium

Improve web client launch loader

isolarium

Enable browser camera capture

isolarium

use rust-native implementations for audio and video capture in device agent

isolarium

Improve device agent callback page

isolarium

Improve web installer startup and configuration UX

isolarium

Give app pods guaranteed resources and worker-node scheduling

isolarium

Configure application shared memory

isolarium

Add notes about AVX2 and add more new features

isolarium

Prevent overlapping browser deployments

isolarium

Upgrade chromium-gost version

isolarium-streaming

Separate input and output channels

isolarium

Reduce logs agent watcher overhead

isolarium

Make the server-latency improvements deployable

isolarium

Make the verified keyboard-layout release deployable

isolarium

Configure zero-trust identity propagation

isolarium-idp

Validate signed identity in forward auth

isolarium-streaming

Keep remote keyboard layouts aligned with the host

isolarium

Bump isolarium-proxy version to 0.36.0

isolarium-proxy

Harden external auth header handling

isolarium

Upgrade isolarium-proxy to 0.35.0

isolarium-proxy

Prevent route changes from restarting proxy

isolarium

Select the first uploaded application version

isolarium

Add true local deployment scripts to justfile

isolarium

Reuse ready platform registry workloads

isolarium

Fix invalid httproute redirect status code in k8s app controller

isolarium

Implement generic application activation redirects

isolarium-proxy

Implement generic application activation redirects

isolarium

Propagate signed forward-auth identity headers

isolarium-idp

Emit signed forward-auth identity JWT

isolarium

Use modern tailwindcss installation pattern

isolarium

Migrate frontend tooling to Bun

isolarium

Ship Chromium GOST on streaming 0.5.0

isolarium-streaming

Publish the context-menu fix as the next streaming minor release

isolarium

Bump IDP version to 0.38.0

isolarium-idp

Bump package version

isolarium-idp

Make admin UI responsive

isolarium-streaming

Keep right-click menus inside the remote browser

isolarium

Send the Isolarium shortcut to its web portal

isolarium-idp

Fix branding color apply

isolarium

Make web clients responsive

isolarium

Add favicons for all web clients

isolarium

Restore HTTPS trust for proxied browser sessions

isolarium

Add extra tools to nix flake

isolarium

Add license page in admin web client

isolarium

Make TSDB stateful and add startup diagnostics

isolarium

Include license in installer

isolarium

Add license signing for customer bundle scripts

isolarium

Configure proxy health probes

isolarium

Expand admin dashboard metrics

isolarium

Improve healthchecks and upgrade isolarium-proxy

isolarium-proxy

Add generic mTLS health checks

isolarium

Implement signed license enforcement

isolarium

Wait for k3d cluster creation in justfile

isolarium

Rename airgap bootstrap utility

isolarium

Fix registry proxy restart race

isolarium

Sync web installer styles with common color theme

isolarium

Improve web clients styles

isolarium

Add .env to global .gitignore

isolarium

Align admin branding with web client

isolarium

Move registry ownership to installer

isolarium

Tune chart health probes

isolarium

Support per-worker SSH settings

isolarium

Persist web installer settings

isolarium

Route sidecar images through platform registry

isolarium

Improve installer README

isolarium

Compact installer and add options to override settings

isolarium

Expose gateway through LoadBalancer by default

isolarium

Upgrade isolarium-idp to 0.37.0

isolarium-idp

Resolve tenant from trusted host candidates

isolarium

Upgrade isolarium-idp to 0.36.0

isolarium-idp

Fix tenant resolution for embedded forward auth

isolarium

Fix a lot of bugs in k3s web installer

isolarium

Build portable customer installer binaries

isolarium

Wait for Kubernetes master registration in isolarium-installer-k3s

isolarium

Embed SSH transport in k3s installer

isolarium

Sync installation docs with latest changes

isolarium

Keep SSH installer sessions alive

isolarium

Improve installer transfer diagnostics

isolarium

Add installer progress logging and cancellation

isolarium

Initialize isolarium docs

isolarium

Add safe note about dev keys in bundle preparation

isolarium

Fix invalid escape in justfile

isolarium

Use Compose manifest for core image packaging

isolarium

Separate Helm deployment from isolariumctl

isolarium

Clarify just targets

isolarium

Simplify bootstrap image loading

isolarium

Bootstrap registry through temporary NodePort

isolarium

Add customer bundle target

isolarium

Delegate core installation to isolariumctl

isolarium

Implement complete zarf-less installation

isolarium

Simplify local commands using justfile

isolarium

Replace zarf with isolariumctl

isolarium

Update browser images and DLP sidecar

isolarium

Fix invalid dlp sidecar creation

isolarium

Distribute public CA bundles to workloads

isolarium

Update IDP image and startup command

isolarium-idp

Bump package version

isolarium-idp

Split single-node roles into supervised commands

isolarium

Fix app feature inheritance

isolarium

Support warpgate-based SSH deployments in k3s installer

isolarium

Bump proxy and idler versions

isolarium-proxy

Track WebSocket activity correctly

isolarium

Serve OAuth callback styles separately in device agent

isolarium

Fix invalid oauth callback in device agent

isolarium

Configure device broker image credentials

isolarium

Fix invalid tls handing in oauth client for device agent

isolarium

Fix invalid header handing from mtls sidecar for idp

isolarium

Fix forwarded host handling in IDP

isolarium-idp

Fix forwarded host handling in IDP

isolarium

Provide stable IDP secret encryption key

isolarium

Implement inline browser DLP agent

isolarium

Bump core packages versions

isolarium

Extend browser k8s resources in app controller

isolarium-proxy

Upgrade package version

isolarium-proxy

Preserve WWW-Authenticate from external auth

isolarium-idp

Upgrade package version

isolarium-idp

Harden bearer forward auth handling

isolarium

Implement device agent and broker integration

isolarium

Remove legacy implementation

isolarium

Upgrade isolarium-idp to 0.31.0

isolarium-idp

Upgrade package version

isolarium-idp

Implement Post Redirect Get for admin mutations

isolarium-idp

Improve admin design

isolarium-idp

Upgrade package version

isolarium-idp

Add tenant-scoped user creation for delegated admins

isolarium-idp

Implement delegated tenant administrators

isolarium-idp

Upgrade package version

isolarium-idp

Implement tenant switcher

isolarium-idp

Upgrade package version

isolarium-idp

Implement complete tenant support

isolarium

Add core bundle installer scripts

isolarium

Add WSL2 Docker Desktop workaround to k3s install script

isolarium

Add local installation mode to k3s installer

isolarium-idp

Upgrade package version

isolarium-idp

Harden IDP authorization and session security

isolarium-idp

Implement complete OIDC provider

isolarium

Add USB and microphone integration

isolarium

Upgrade isolarium-idp and use new blueprint format

isolarium

Add DLP integration

isolarium-idp

Bump package version

isolarium-idp

Replace RustPython with rhai

isolarium

Remove ffmpeg and add NV12 & MJPG camera

isolarium

Fix device poc

isolarium

Fix device-broker

isolarium

Fix device brocker entrypoint

isolarium

Fix dockerfile in chromium gost extended

isolarium

Fix device broker entrypoint

isolarium

Restore v4l2 camera capture with logging and add Linux test guide

isolarium

Fix camera forwarding via regular Y4M file and YV12 colors; resolve agent idle timeout

isolarium

Add new device implementation

isolarium

Use the published IDP compatibility image in the core bundle

isolarium

Add device emplementation and chromium extension

isolarium-idp

Publish the backend-neutral IDP compatibility release

isolarium-idp

Keep IDP database selection backend agnostic

isolarium

Replace chrono with jiff in trial components

isolarium

Update k8s from chrono to jiff

isolarium

Simplify new installer README

isolarium

Add installer note in README

isolarium

Add first version of isololarium-installer

isolarium

Switch isolarium-k8s-app-controller from chrono to jiff and bump to 0.31.0

isolarium

Bump isolarium-idler to 0.13.0 and fix jiff duration method

isolarium

Bump isolarium-idler to 0.13.0 and fix jiff duration method

isolarium

Add README note about platform layer

isolarium

Create new isolarium-platform layer

isolarium

Change from chrono to jiff library

isolarium

Update main endpoints and open url-adress in README

isolarium

Add k3d config and simplify local cluster preparation

isolarium

Update host parameter in README

isolarium

Add charts section in admin panel

июнь 2026 г.

isolarium

Use explicit registry in dockerfiles and remove start comment

isolarium

Add rsyslog export support

isolarium

Add admin web client logout and bump component versions

isolarium

Bump isolarium-idp version to 0.24.0

isolarium-idp

Compact admin sidebar layout

isolarium-idp

Add logout and API documentation links to admin sidebar

isolarium-idp

Replace proxy provider flow inputs with dropdowns in admin UI

isolarium

Use zot registry instead of distribution

isolarium

Rename isolarium-app-controller to isolarium-k8s-app-controller

isolarium

Move web client static out of public dir

isolarium

Fix invalid static assets names

isolarium

Move user management from admin to idp

isolarium

Improve image upload progress in admin web client

isolarium

Rework app version management

isolarium

Change version of zarf package in README.md

isolarium

Extend README with general project description

isolarium

Fix bugs in logs agent

isolarium

Fix invalid log collector

isolarium-proxy

Fix dns re-resolving

isolarium

Add mtls for missing components

isolarium-proxy

Add full l4 with tls support

isolarium-proxy

Convert HTTPRoute watcher to Controller and add external auth diagnostics

isolarium-proxy

Handle https external auth properly in gateway api

isolarium

Ship the Chromium launcher from the app images and bump browser apps to 0.8.0

isolarium-streaming

Move the Chromium launcher to the browser app images

isolarium-proxy

Fix Transfer-Encoding header issues

isolarium-proxy

Bump package version to 0.25.0

isolarium-proxy

Scope HTTP route matching to the receiving listener

isolarium

Update browser images to isolarium-streaming 0.3.1 and bump chromium-gost to 0.7.3

isolarium-streaming

Bump version to 0.4.0

isolarium-streaming

Restart the streamed app automatically when it exits

isolarium-proxy

Add mtls for external auth

isolarium-proxy

Disable gateway api support by default

isolarium-proxy

Add Gateway backend mTLS detection by Service https port

isolarium

Add isolarium-k8s-ca and mTLS sidecar injection in chart

isolarium-proxy

Add mTLS support to isolarium-proxy

isolarium

Move severity text parsing to logs-api, keep agent severity parsing JSON-only

isolarium

Parse log severity from message body and handle unknown levels

isolarium

Improve admin logs viewer and set service.name from pod labels in logs-agent

isolarium

Read hot segment records in logs-store query engine and bump logs-store to 0.5.0

isolarium

Fix logs-agent to rescan for new K8s log files

isolarium

Add logs viewer page in admin web client

isolarium

Bump isolarium-proxy version to 0.19.0

isolarium-proxy

Bump package version to 0.19.0

isolarium-proxy

Set correct x-forwarded-proto for external auth on HTTPS listeners

isolarium

Remove redundant version files from all apps

isolarium

Upgrade isolarium-streaming for all apps

isolarium-streaming

chore: bump version to 0.3.0

isolarium-streaming

chore: add docs/ to .gitignore

isolarium-streaming

chore: remove docs/ from repo

isolarium-streaming

docs: add files.rs and files-panel.ts to project structure tree

isolarium-streaming

chore: forward ISOLARIUM_FILE_* env vars through compose.yaml

isolarium-streaming

feat(files): pass ISOLARIUM_FILE_* env through entrypoint, document feature

isolarium-streaming

feat(web): init files panel from /config.js flags; make client.ts typecheck clean

isolarium-streaming

feat(web): slide-out files panel (list/download/upload/delete)

isolarium-streaming

fix(web): work under a path prefix - relative URLs for scripts, assets, WS and files API

isolarium-streaming

feat: make clipboard sync optional via ISOLARIUM_CLIPBOARD env

isolarium-streaming

feat(files): register /api/files routes, expose flags via /config.js

isolarium-streaming

feat(files): list/download/upload/delete endpoints with traversal protection

isolarium-streaming

feat(files): shared-dir config, name sanitization, collision-safe naming

isolarium-streaming

docs: file transfer implementation plan (reviewed, approved)

isolarium

Add useful notes to global README.md

isolarium

Upgrade isolarium-proxy to 0.18.0 in every component

isolarium-proxy

Sync logging configuration with all isolarium ecosystem

isolarium

Simplify local cert management by using new isolarium-proxy version

isolarium-proxy

Add self signed cert generation for gateway api

isolarium

Upgrade isolarium-proxy to 0.17.0 in every component

isolarium

Fix case when idler drops user app right after start

isolarium

Add extra flags for universal zarf deploy command

isolarium-streaming

docs: file transfer feature design (brainstormed spec)

isolarium

Add README for every component

isolarium

Add proper readiness and liveness probes for apps in app controller

isolarium

Return missing Cargo.lock for isolarium-api

isolarium

Fix invalid subroute path handlings

isolarium-proxy

Fix invalid rewrite handling

isolarium

Improve isolarium-web-client user experience

isolarium

Use custom isolarium-nfs-provisioner image

isolarium

Bump isolarium-idp version to 0.23.0

isolarium-idp

Fix invalid pagination urls

isolarium

Add missing namespace creation command

isolarium

Add nix flake

isolarium

isolarium-apps: back to port 3000 on the isolarium-streaming 0.2.0 base

isolarium-streaming

feat!: serve on port 3000 - match the isolarium platform app port

isolarium-streaming

fix(ci): vendor vp9-encoder through the runner - buildkitd cannot reach forgejo

isolarium-streaming

chore(build): TEMP network diagnostics for forgejo reachability from CI buildkitd

isolarium-streaming

chore(build): log which vp9-encoder auth path the build takes

isolarium-streaming

fix(ci): fetch vp9-encoder over HTTPS with a token - SSH port 222 unreachable from buildkitd

isolarium

isolarium-apps: trim narrative Dockerfile headers

isolarium-streaming

fix(build): track web/package-lock.json - CI checkout needs it for npm ci

isolarium-streaming

fix(ci): store the deploy key secret base64-encoded - immune to newline mangling

isolarium-streaming

fix(ci): robust ssh-agent step - tolerate secrets stripped of trailing newline

isolarium

isolarium-apps: switch chromium-gost and yandex-browser to the isolarium-streaming base

isolarium-streaming

feat(release): publish one reusable image; move browser images out

isolarium-streaming

refactor: rename project noRDP -> isolarium-streaming

isolarium

Bump isolarium-logs components to 0.3.0

isolarium

Spawn exporter task so admin server can start

isolarium

Bump isolarium-logs components to 0.2.0

isolarium

Make logs-agent exporter connect lazily to tolerate store startup delay

isolarium

Remove store dev-dependency from logs-agent to fix Docker build

isolarium

Merge branch 'feature/isolarium-logs' into master

isolarium

Fix critical review findings for isolarium-logs

isolarium-streaming

feat(docker): per-browser images + rename vp9r crate -> vp9-encoder

isolarium

Add isolarium-logs images to Zarf package and build script

isolarium

Add Helm templates for isolarium-logs-agent, store and api

isolarium

Add Helm values and helpers for isolarium-logs components

isolarium

Implement query fan-out endpoint for isolarium-logs-api

isolarium

Add isolarium-logs-api crate scaffolding and config

isolarium

Add integration test for isolarium-logs-agent

isolarium

Implement enrichment, batching, routing, WAL and exporter for isolarium-logs-agent

isolarium

Implement Kubernetes metadata enrichment for isolarium-logs-agent

isolarium

Implement CRI parser and file tailing sources for isolarium-logs-agent

isolarium

Add isolarium-logs-agent crate scaffolding, config and admin server

isolarium

Add query engine and admin query endpoint to isolarium-logs-store

vp9-encoder

refactor: rename crate vp9r -> vp9-encoder - match repository name

isolarium

Implement OTLP gRPC ingest server for isolarium-logs-store

isolarium

Add fjall-based segment index to isolarium-logs-store

isolarium

Implement segment writer and reader for isolarium-logs-store

isolarium

Add isolarium-logs-store crate scaffolding, config and admin server

isolarium

Fix invalid static paths in legacy browser-ui implementation

isolarium

Add timezone to browser-ui env variables

isolarium

Extend .gitignore

isolarium

Add bundle preparation scripts

isolarium

Bump config-reloader version

isolarium

Bump config-reloader version

isolarium

Improve logging in all components

isolarium

Fix idle app checking

isolarium-streaming

deps: bump vp9r - the 18->70 fps optimization series

vp9-encoder

docs(test): byte-identity probe is a kept dev tool - honest header

vp9-encoder

build: release opt-level z -> 3 - measure what production runs

vp9-encoder

feat(rc): extreme-overshoot re-encode - one 951 kB frame no longer buys seconds of max-q noise

isolarium

Bump isolarium-tsdb and isolarium-tsdb-collector versions to 0.6.0

vp9-encoder

feat(keyframe): realtime fast path - 2250 ms -> 175 ms at 1080p

vp9-encoder

feat(gmv): SAD-verified scroll estimate + temporal seed - unflap the lock

vp9-encoder

perf: reuse per-frame buffers - kill ~20MB/frame of alloc+zero+clone

vp9-encoder

perf: row-slice pixel paths replace per-pixel bounds-checked accessors

vp9-encoder

probe(perf): band-outcome/gmv counters + prof_stream y4m harness

isolarium

Improve logging for isolarium-idler

isolarium

Vendor gateway api resources and simplify zarf package installation

isolarium

Move isolarium-core readme to root

isolarium

Remove isolarium-embedded-nfs-server

isolarium

Optimize trial checker image size

isolarium-proxy

Fix invalid tls handling

isolarium-proxy

Bump package version

isolarium-proxy

Run cargo fmt through all files

isolarium-proxy

Use remote buildkit for CI/CD

isolarium-proxy

Fix invalid case for all gateway api schemas

isolarium

Add https support

isolarium

Remove redundant text from isolarium-admin-web-client

isolarium

Move legacy implementation to separated directory

isolarium

Fix new image upload

isolarium

Allow to delete apps from admin

isolarium

Implement proper image registry usage

isolarium

Improve app-controller reconcile loop

isolarium-streaming

tune(rc): CBR target 8 -> 20 Mbit/s

isolarium-streaming

deps: bump vp9r - three edge-geometry conformance fixes (1080p bottom-SB corruption: UmvEdges sign, frame border, entropy-context edge clipping)

vp9-encoder

fix(conformance): three edge-geometry bugs behind the 1080p field corruption

isolarium

Remove hardcoded image list from web client

isolarium

Fix large image upload

isolarium

Split isolarium-ui to multiple components

isolarium

Split isolarium-admin-ui to multiple components

isolarium-streaming

feat(diag): stream dump on decoder error + info logs by default + fast recovery

isolarium-streaming

fix(ws): control-plane priority in select; add per-stage telemetry

isolarium-streaming

fix(latency): hard pacing - ack on decoded+drawn, watchdog instead of 1s bypass

isolarium-streaming

fix(encoder): disable scene-cut keyframes - scrolling froze the stream

vp9-encoder

fix(test): clippy manual_range_contains in streaming CBR test

vp9-encoder

docs(ratectrl): scene-cut is unusable for screen content - document + mirror in test

isolarium-streaming

docs: update AGENTS.md to VP9-over-WebSocket architecture, add CLAUDE.md

isolarium-streaming

fix(latency): end-to-end flow control via ack credits; tame keyframe storms

vp9-encoder

fix(realtime): tighten force_skip locality to factor 1 - phantom menu lines

isolarium-streaming

deps: bump vp9r - force_skip locality gate (cursor debris / invisible cursor on flat white fixed encoder-side)

vp9-encoder

fix(realtime): force_skip requires locality - no 8x8 tile above 4x ft

isolarium-streaming

docker: drop syntax directive so build needs no Docker Hub frontend

isolarium-streaming

fix(video): force software VP9 decode - hardware decoder diverges

vp9-encoder

test(conformance): gate the production streaming config (CBR+twopass+threads)

isolarium-streaming

fix(latency): drop stale frames at capture, bound decoder queue on client

isolarium-streaming

deps: fetch vp9r from forgejo git repo over SSH instead of local path

isolarium-streaming

feat(encoder): replace shiguredo_libvpx with vp9r (pure Rust), 60fps target

vp9-encoder

chore: point Cargo.toml repository at the real forgejo repo (was a placeholder)

vp9-encoder

chore: drop research notes, refresh AGENTS.md, replace U+00D7 with ASCII x

vp9-encoder

refactor: drop dead code surfaced by the project-wide audit

vp9-encoder

chore: refresh flake.nix and CLAUDE.md to the current pure-Rust state

vp9-encoder

chore: untrack ROADMAP.md (local working doc)

vp9-encoder

chore: drop rustfmt.toml (both settings were defaults for our cargo-fmt workflow)

vp9-encoder

chore: pure-Rust tree - drop C tools, CI, machine/session-local files

vp9-encoder

chore: untrack docs/superpowers (local working docs, not for the repo)

vp9-encoder

docs: README - overview, quickstart, realtime/WebCodecs usage, correctness gates

vp9-encoder

feat(api): Vp9Encoder::request_keyframe - on-demand keyframe

vp9-encoder

docs: on-demand keyframe (request_keyframe) design spec

vp9-encoder

test(loopfilter): odd-height chroma last-row conformance gate (review open Q)

vp9-encoder

refactor(encoder): allocation-lean inter hot loops; drop dead predict params

vp9-encoder

refactor(loopfilter): split the 2220-line module into kernels/masks/apply/pick

isolarium

Implement new app image upload

vp9-encoder

test(golden): pin fdct16x16/fdct32x32 and the range coder to libvpx 1.16.0 bytes

vp9-encoder

refactor(encoder): split the two-pass encoder out of frame_enc.rs

isolarium

Add missing image save command to isolarium-apps README

isolarium

Improve isolarium-admin-ui UI blocks structure

vp9-encoder

refactor(inter): single source of truth for the inter residual path + RT SAD band

vp9-encoder

fix(api,transform,encoder): review round — API usability, invariant guards, cleanup

vp9-encoder

fix(me,mc): unify ME clamp composition; compute UMV clamp bounds in i32

vp9-encoder

fix(simd): bounds-validate pub dispatchers before unsafe kernels (review HIGH)

vp9-encoder

perf(simd): SIMD the motion-estimation SAD (sad_at_mv) — byte-identical

vp9-encoder

perf(parallel): parallelize the global-MV grid search (byte-identical)

vp9-encoder

perf(algo): skip inverse transform in inter_candidate_rd for zero-coeff blocks

vp9-encoder

perf(algo): realtime fast inter-mode search — SAD-preselect top-2, full-RD winner

vp9-encoder

perf(algo): dedup per-candidate RD by MV in choose_inter_block (byte-identical)

vp9-encoder

perf(algo): early-bail estimate_global_mv when consensus is impossible (byte-identical)

vp9-encoder

perf(algo): aggressive skip band (force_skip_band) — scroll@60fps, ~half bitrate

vp9-encoder

perf(algo): skip inverse transform for zero-coeff blocks + direct-copy integer MC

vp9-encoder

merge: Phase 9 — decouple decision/emission (opt-in two-pass Realtime encoder)

vp9-encoder

fix(phase9): wrapping_sub for NEWMV diff (review MINOR) + record APPROVE

vp9-encoder

feat(phase9): opt-in RdoSpeed.decouple flag routes Realtime P-frames to two-pass

vp9-encoder

test(phase9): bitrate delta two-pass vs fused — neutral (0.999-1.000x)

vp9-encoder

spike(phase9): tiles×workers emit + final scaling verdict

vp9-encoder

spike(phase9): scaling probe + memcpy merge; single-tile two-pass is emit/overhead-bound

vp9-encoder

spike(phase9): thread the two-pass decision pass over SB rows

vp9-encoder

spike(phase9): serial two-pass Realtime encoder (recon==vpxdec proven)

vp9-encoder

refactor(inter): split encode_inter_block into decide + emit (byte-identical)

vp9-encoder

spike(phase9): feature-gated emit-fraction probe + Amdahl measurement

vp9-encoder

docs(plan): Phase 9 — decouple decision/emission to break the 4-tile cap (spike-first)

vp9-encoder

merge: Phase 8 — max-perf increment (motion-aware fast-path + cheaper ME)

vp9-encoder

perf(encoder): derive MAX_GMV_PX from FRAME_BORDER + bounds debug_assert (review MEDIUM)

vp9-encoder

perf(encoder): motion-aware realtime fast-path — dominant-MV (scroll) detection

vp9-encoder

test(perf): realistic scroll probe reveals priority-scenario gap

vp9-encoder

perf(encoder): cheaper Realtime ME — skip sub-pel refine + intra trial (Phase 8)

vp9-encoder

test(perf): Phase 8 spike — tile-scaling + LF split for cap-bound cases

vp9-encoder

merge: Phase 7b — realtime heuristic partition + SIMD vertical LF (crosses ~60 fps)

vp9-encoder

perf(encoder): merge realtime static-skip + heuristic into one SAD (review MINOR-1/3)

vp9-encoder

perf(simd): debug_assert bounds preconditions on vertical LF kernels (review MEDIUM-1)

vp9-encoder

perf(simd): AVX2 vertical loop filter (byte-identical to scalar)

vp9-encoder

test(perf): realtime floor-isolation probe (LF on/off, tile counts)

vp9-encoder

perf(encoder): SIMD the realtime static-skip SAD scan (raw-slice sad_dispatch)

vp9-encoder

perf(encoder): realtime heuristic partition for non-static SBs (Phase 7b)

май 2026 г.

vp9-encoder

merge: Phase 7 — real-time performance (screen-content fast-path)

vp9-encoder

test/docs(phase7): extend realtime vpxdec gate (large + odd dims) + doc/comment fixes (final review)

vp9-encoder

test(perf): realtime quality/bitrate-delta probe (Quality vs Realtime PSNR+bytes)

vp9-encoder

perf(encoder): productionize realtime fast-path (per-pixel threshold, n>=32, realtime() API)

vp9-encoder

perf(encoder): realtime screen-content static-SB skip fast-path (Stage B)

isolarium-idp

Attempt to optimize image build speed using remote buildkit daemon

vp9-encoder

perf(simd): compile-time assert N==4*L on vload/vstore/transpose_sq (review MEDIUM)

vp9-encoder

perf(simd): AVX2 fdct/idct 16x16 + 32x32 (byte-identical to scalar)

vp9-encoder

test(perf): measure total SIMD wall-time contribution (force_scalar toggle)

vp9-encoder

perf(transform): allocation-free iht_into/fht_into + stack scratch in hot RDO path

vp9-encoder

perf(phase7): zero-dep + fat LTO + 1080p bench (static+moving) & profiling baseline

vp9-encoder

docs(plan): Phase 7 — real-time performance (1080p@60 best-effort)

vp9-encoder

test: ignored 1080p throughput probe (release) — real-time perf measurement

vp9-encoder

merge: Phase 6b — production hardening & API finalization

vp9-encoder

docs: warning-free rustdoc + WebCodecs integration guide

vp9-encoder

test(api): guard determinism fuzz against vacuous empty-output pass (T3 review MEDIUM)

vp9-encoder

test(api): deterministic fuzzing + long-run/resolution-change soak

vp9-encoder

test(api): cover all reconfigure() dim bounds + InvalidStride Display (T2 review LOW)

vp9-encoder

feat(api): public reconfigure() + dedicated InvalidStride error

vp9-encoder

fix(frame): extend_borders_at fills alignment gap + full border for odd dims (T1 review)

vp9-encoder

feat(api): bit-exact arbitrary/odd dimensions + MIN_DIMENSION (Phase 6b Task 1)

isolarium

Bump isolarium-assets version

isolarium

Fix assets handling in isolarium-assets

isolarium-proxy

Bump package version

isolarium-proxy

Run cargo fmt through all files

isolarium-proxy

Return 404 instead of 502 when static file not found

isolarium

Bump isolarium-idp version

vp9-encoder

docs(plan): Phase 6b — production hardening & API finalization

vp9-encoder

merge: Phase 6a — production Vp9Encoder streaming API

vp9-encoder

fix(api): enforce MAX_DIMENSION cap on encode() path (final review IMPORTANT)

vp9-encoder

test/fix(api): vpxdec-validate post-reinit keyframe (M1) + overflow-safe check_plane (L3) — T4/T5 review

vp9-encoder

fix(api): allow too_many_arguments on planar encode() (per-task clippy gate)

vp9-encoder

docs: update ROADMAP + AGENTS for Phase 6a completion

vp9-encoder

docs(api): expose stable Vp9Encoder surface, hide internals, add quickstart doctest

vp9-encoder

feat(api): streaming Vp9Encoder with planar input + resolution auto-keyframe

isolarium-idp

fix(db): configure WAL and busy_timeout consistently for SQLite pools

vp9-encoder

refactor(encoder): extract SeqDriver/SeqParams stepper (encode_video byte-identical)

vp9-encoder

fix(api): RateControlConfig/RateControlMode derive Copy (T2 review IMPORTANT) + doc fixes

vp9-encoder

feat(api): EncoderConfig + RateControlMode with validation

vp9-encoder

docs(api): correct libvpx source refs for VP9 level table (T1 review MINOR)

vp9-encoder

feat(api): EncodeError, Packet, and VP9 level codec-string

vp9-encoder

docs(plan): Phase 6a — production Vp9Encoder streaming API

vp9-encoder

merge: Phase 5b — VP9 tile columns + threaded encode + conservative RDO heuristics

vp9-encoder

test(encoder): Phase 5b exit gate — tiles+threads+heuristics conformance + determinism + fuzz + bench

vp9-encoder

perf(encoder): stack ME-cache in choose_inter_block (no per-block heap alloc) — T3 review MEDIUM

vp9-encoder

feat(encoder): conservative deterministic RDO speed heuristics (ref-dedup + skip fast path)

vp9-encoder

feat(encoder): parallel tile encode via std::thread::scope (deterministic, threaded==serial)

vp9-encoder

feat(encoder): VP9 tile columns (serial, bit-exact recon==vpxdec)

vp9-encoder

docs(plan): Phase 5b — tile columns + threading (std::thread::scope) + conservative RDO heuristics

vp9-encoder

Merge Phase 5a: AVX2 SIMD hot kernels (SAD/DCT/quant/MC/loopfilter) — bit-exact to scalar, identical bitstream

vp9-encoder

test(simd): Phase 5a exit gate — identical bitstream + visibility/defensive sweep

vp9-encoder

feat(simd): AVX2 loop-filter kernels (bit-exact where tractable)

vp9-encoder

feat(simd): AVX2 quantize + 8-tap MC convolve (bit-exact)

vp9-encoder

feat(simd): AVX2 forward/inverse DCT (bit-exact, dispatched)

vp9-encoder

fix(simd): move sad_dispatch to mod.rs (non-x86_64 compiles, scalar fallback); bench uses safe dispatch — T1 review HIGH+should-fix

vp9-encoder

refactor(simd): confine SAD dispatch unsafe to src/simd/ (safe call sites) — pattern for T2-T5

vp9-encoder

feat(simd): AVX2 SAD + runtime dispatch infrastructure

vp9-encoder

docs(plan): Phase 5a — AVX2 SIMD hot kernels (bit-exact to scalar)

vp9-encoder

Merge Phase 4b: CBR+VBV rate control + scene-change GOP (genuine bitrate tracking, never-drop, bit-exact)

vp9-encoder

test(ratectrl): lock two-sided bitrate tracking in strict gate (final review F-1)

vp9-encoder

feat(ratectrl): Phase 4b exit gate — strict bitrate + load-spike + fuzz; controller tuning

vp9-encoder

feat(ratectrl): scene-change detection + key-on-demand GOP

vp9-encoder

feat(ratectrl): per-frame CBR QP control loop in encode_video

vp9-encoder

fix(ratectrl): correct last_q midpoint init (u8 overflow when min_q+max_q>255) — T1 review MEDIUM

vp9-encoder

feat(ratectrl): VBV buffer model + bits<->q controller core

vp9-encoder

docs(plan): Phase 4b — CBR+VBV rate control + scene-change GOP

vp9-encoder

Merge Phase 4a: in-loop deblocking loop filter (bit-exact, on-by-default, filtered frame as reference)

vp9-encoder

feat(loopfilter): enable LF by default (FromQ) + Phase 4a exit gate (T5)

vp9-encoder

feat(loopfilter): auto-search filter_level (q-derived) + LfPick policy

vp9-encoder

feat(loopfilter): enable LF in inter pipeline; filtered frame as reference (bit-exact)

vp9-encoder

harden(loopfilter): debug_assert chroma-tx block-max invariant (T2 review MEDIUM)

vp9-encoder

feat(loopfilter): per-frame mask+apply+header; keyframe LF bit-exact

vp9-encoder

feat(loopfilter): deblock kernels + threshold tables + level derivation

vp9-encoder

docs(plan): Phase 4a — in-loop deblocking loop filter (bit-exact)

vp9-encoder

Merge Phase 3b: motion estimation + inter RDO + temporal MV + GOP (bit-exact, scroll beats all-keyframe)

vp9-encoder

feat(encoder): GOP driver (encode_video, keyint) + Phase 3b scroll exit gate

vp9-encoder

feat(encoder): full inter RDO (mode + inter/intra + ref + partition)

vp9-encoder

feat(encoder): sub-pixel ME refinement (1/2,1/4-pel via 8-tap MC)

vp9-encoder

style: move scroll-test comment above let to satisfy rustfmt

vp9-encoder

style: tidy mangled comment in vpxdec_me scroll test

vp9-encoder

style: rustfmt Phase 3b T2 (me.rs, frame_enc.rs, tests)

vp9-encoder

feat(me): integer diamond-search ME — Task T2 Phase 3b

vp9-encoder

feat(encoder): temporal MV prediction (use_prev_frame_mvs) — chained-P bit-exact

vp9-encoder

docs(plan): Phase 3b — motion estimation + inter RDO + temporal MV + GOP

vp9-encoder

Merge Phase 3a: inter coding infrastructure — bit-exact P-frames (headers, ref mgmt, 8-tap MC, MV coding, inter modes; forced-MV validated, no ME)

vp9-encoder

docs(mc,header): note i16 clamp-bound resolution limit + allow_hp precondition (final review)

vp9-encoder

test(encoder): hard-assert chained ZEROMV gate (remove dead fallback branch)

vp9-encoder

test(encoder): Phase 3a exit gate — inter infrastructure recon==vpxdec

vp9-encoder

test(encoder): non-zero/sub-pel MV + mixed inter/intra P-frames (recon==vpxdec)

vp9-encoder

feat(encoder): inter block syntax + find_mv_refs + ZEROMV P-frame (recon==vpxdec)

vp9-encoder

feat(mc): 8-tap sub-pixel motion compensation (EIGHTTAP convolve + MV clamp)

vp9-encoder

feat(encoder): inter frame headers + ref-frame signaling + RefPool

vp9-encoder

docs(plan): Phase 3a — inter coding infrastructure (forced-MV, bit-exact, no ME)

vp9-encoder

Merge Phase 2c: Lagrangian RDO mode + partition decision (bit-exact recon==vpxdec)

vp9-encoder

test(encoder): Phase 2c gate — RDO quality + fuzz recon==vpxdec

vp9-encoder

feat(encoder): RDO recursive partition decision (NONE vs SPLIT) with trial-encode rollback

vp9-encoder

feat(encoder): RDO intra mode decision (D + lambda*R) replacing SAD

vp9-encoder

feat(encoder): RD cost infrastructure (prob_cost, cost_tree, rdmult, rd_cost, sse)

vp9-encoder

docs(plan): Phase 2c — Lagrangian RDO (mode + partition decision)

vp9-encoder

Merge Phase 2b: all 10 keyframe intra modes + hybrid ADST transform + SAD mode selection (bit-exact recon==vpxdec)

vp9-encoder

docs(encoder): refresh stale predict/config comments to reflect all-10-modes + SAD selection (final review F1)

vp9-encoder

test(encoder): Phase 2b gate — fuzz intra-mode selection + 1080p-shaped + vpxdec guard

vp9-encoder

feat(encoder): intra mode context + SAD mode selection + KF mode coding (recon==vpxdec)

vp9-encoder

feat(encoder): 6 directional intra predictors (D45/D135/D117/D153/D207/D63), recon==vpxdec

vp9-encoder

feat(transform): hybrid ADST (fht/iht 4/8/16) + row/col scan + get_tx_type; V/H/TM now bit-exact

vp9-encoder

docs(plan): Phase 2b Task 2b — hybrid ADST transform subsystem (plan gap from Task 2a)

vp9-encoder

feat(encoder): V/H/TM intra predictors + forced-mode test hook

vp9-encoder

refactor(encoder): n×n prediction buffer pipeline (DC parity, bit-exact)

vp9-encoder

docs(plan): Phase 2b — all 10 intra modes + selection + KF mode coding

vp9-encoder

Merge Phase 2a: recursive partitioning + size-generic block encoding + 8-aligned edge DC prediction (bit-exact recon==vpxdec for arbitrary sizes)

vp9-encoder

test(encoder): Phase 2a gate — fuzz arbitrary sizes + 1080p-shaped frame, recon==vpxdec

vp9-encoder

test: remove scratch zz_dump debugging harness (Task 3 review M3)

vp9-encoder

fix(encoder): edge replication clamps to 8-aligned buffer dims (Task 3 complete)

vp9-encoder

feat(encoder): recursive partition + edge-replication DC prediction (Task 3, partial)

vp9-encoder

refactor(encoder): size-generic encode_block; keyframe SB uses it (64x64 regression green)

vp9-encoder

style: rustfmt partition debug_assert

vp9-encoder

test(partition): add update() coverage + debug_asserts for no-panic contract

vp9-encoder

feat(encoder): partition primitives (context, subsize, edge logic, write_partition)

vp9-encoder

docs: Phase 2a implementation plan (recursive partition + arbitrary sizes)

vp9-encoder

merge: Phase 1 — minimal correct keyframe encoder

vp9-encoder

fix(header): write_tile_info MI unit is 8px (div_ceil(8)); refresh crate doc

vp9-encoder

refactor: move vpxdec test harness out of library into tests/common

vp9-encoder

test(encoder): Task 8 — edge-SB sizing fix + stability fuzz

vp9-encoder

docs(encoder): update keyframe module doc for 32x32 chroma + DC prediction

vp9-encoder

fix(encoder): chroma uses one TX_32X32 per plane for 64x64 (not 4x16x16)

vp9-encoder

feat(encoder): interleaved encode+reconstruct with per-block DC prediction

vp9-encoder

fix(quantize): TX_32X32 log_scale (decoder dequant >>1); DC dequant verified -8190 vs true -8191

vp9-encoder

fix(encoder): correct pareto + neighbor-context off-by-one in tokenizer; multi-coeff frame decodes in vpxdec

vp9-encoder

feat(encoder): coefficient tokenization + entropy context; single non-skip block decodes in vpxdec

vp9-encoder

feat(encoder): keyframe compressed header + skip-only encode; MILESTONE A (uniform frame decodes in vpxdec)

vp9-encoder

feat(encoder): syntax enums + keyframe uncompressed header writer

vp9-encoder

docs(tables): honest provenance for custom coef tree + fix skip-probs source file

vp9-encoder

feat(tables): keyframe mode/coef/aux probability + tree tables (verified vs libvpx)

vp9-encoder

fix(test-support): unique temp filenames for parallel vpxdec calls

vp9-encoder

feat(container): IVF writer + vpxdec test harness

vp9-encoder

docs: Phase 1 implementation plan (minimal correct keyframe)

isolarium

Bump isolarium-idp version

vp9-encoder

merge: Phase 0 — foundation & verified primitives (clean rebuild)

vp9-encoder

fix(phase0): close final-review data-dependent panics (q u8, slice asserts, border guard), gate BoolReader to test, set MSRV 1.82

isolarium

Add docker login command in isolarium core readme file

vp9-encoder

fix(transform): match libvpx fdct/idct scaling exactly

vp9-encoder

feat(transform): forward/inverse DCT and quantize/dequantize with roundtrip tests

vp9-encoder

test(tables): add cospi spot-check + rounding test (close spec gap)

vp9-encoder

feat(tables): cospi constants, quant lookup, default scan orders

vp9-encoder

fix(bitio): bool coder carry-panic, bitstream-exact finish, dedup norm

vp9-encoder

feat(bitio): VP9 BoolWriter + verification BoolReader with roundtrip tests

vp9-encoder

fix(bitio): make put_bits total for n>32 (no shift-overflow panic)

vp9-encoder

feat(bitio): MSB-first BitWriter for uncompressed header

vp9-encoder

feat(frame): YUV420 Frame/Plane model with replicated borders

vp9-encoder

chore: refresh CLAUDE.md/AGENTS.md for clean rebuild; untrack runtime scratch

vp9-encoder

chore: clean crate skeleton with module layout and CI

vp9-encoder

chore: snapshot prototype before clean rebuild

vp9-encoder

docs: Task 1 also removes throwaway tests/examples for a clean gate

vp9-encoder

docs: fix Phase 0 quantize test (deterministic eob)

vp9-encoder

docs: Phase 0 implementation plan (foundation & primitives)

vp9-encoder

docs: pin target hardware, 8 Mbps cap, remote-desktop quality bar

vp9-encoder

docs: production-ready VP9 encoder design spec

isolarium

fix(rusty-auth-gateway): use relative paths for branding assets

isolarium

Bump config-reloader version

isolarium

feat(assets): use isolarium-proxy for static assets

isolarium-idp

fix(blueprints): update tenant branding on existing tenant and hash-based re-apply

isolarium

Bump tsdb and collector versions

isolarium

Remove embedded nfs server, disable nfs-provisioner by default, move from kind to k3d

isolarium

Add isolariu-metrics-agent

isolarium

add assets

isolarium-streaming

cleanup: strip debug leftovers from client + container

isolarium-streaming

backend: axum 0.8 + xkbcommon 0.9, drop debug instrumentation

isolarium-streaming

docker: self-contained multi-stage build, slim runtime

isolarium

Bump version for isolarium-tsdb and collector

isolarium

Simplify idler

isolarium-streaming

Reapply "wayland(ui): hide local browser cursor over the canvas"

isolarium-streaming

Revert "wayland(ui): hide local browser cursor over the canvas"

isolarium-streaming

wayland(ui): hide local browser cursor over the canvas

isolarium-streaming

wayland(audio): minimal pulse default.pa + propagate PULSE_SERVER

isolarium-streaming

wayland(wire): swap main.rs to wayland backend, drop X11

isolarium-streaming

wayland(clipboard): WaylandClipboardManager via wlr-data-control

isolarium-streaming

wayland(input): virtual-keyboard + virtual-pointer via sway

isolarium-streaming

wayland(capture): implement zwlr_screencopy_v1 in WaylandHandler

isolarium-streaming

wayland(skeleton): add wayland-client deps + WaylandHandler stub

isolarium-streaming

wayland(infra): replace Xorg with cage + ozone-platform=wayland

isolarium-streaming

fix(vp9): robust packetization + 30fps target + MIT-SHM enabled

isolarium-streaming

feat: switch H.264->VP9, fix libvpx lookahead lag, target 60fps

isolarium

feat(blueprints): add IDP proxy provider, tenant branding, and russian stage names

isolarium-idp

glassmorphism panel fallback without background image

isolarium-idp

run cargo fmt and fix comment language

isolarium-idp

feat(admin,blueprints): add request path to policy tester and improve blueprint updates

isolarium

Use new auth-aware routing feature from isolarium-proxy

isolarium-proxy

Implement auth-aware route matching

isolarium

Add build scripts for isolarium-apps

isolarium

Rename pingora-proxy to isolarium-proxy

isolarium

Fix invalid app resource creation

isolarium-idp

restyle(auth): unify login/logout page layout and branding colors

isolarium-idp

fix(auth): preserve next redirect after logout and sign-in

isolarium-idp

allow changing user on password stage

isolarium-proxy

Rename project to isolarium-proxy

isolarium-idp

fix(admin): correct help text for policy and property mapping forms

isolarium

Bump isolarium-idp version

апрель 2026 г.

isolarium-idp

feat(admin): add help guide cards to all admin list pages

isolarium-idp

Bump package version

isolarium-idp

Fill missing fields in admin for all edit forms

isolarium-idp

Increase logo size in branding section

isolarium-idp

Fix invalid path handings in policies

isolarium-idp

Add embedded outpost

isolarium-idp

Fix invalid forward auth usage in admin

isolarium

fix(admin-ui): resolve trailing slash 404, force image pull, add tests & translate comments

isolarium

Add isolarium-apps MVP, return network policies and app proxy

isolarium-idp

align proxy/forward auth with authentik architecture

isolarium

Bump isolarium-core package versions

isolarium

Fix redundant restarts for isolarium-idp

isolarium

Add isolarium-admin-ui MVP

isolarium

Add embedded nfs server

isolarium

Filter apps in idler to exclude non-apps

isolarium

Fix invalid header in isolarium-ui

isolarium

Add missing rbac ingress permissions for gateway

isolarium

Implement improved app controller with crds

vp9-encoder

phase 1/2: context probs + intra prediction (DC/V/H/TM) + directional stubs

vp9-encoder

phase 1: core primitives - BitWriter, BoolCoder, Frame/Plane abstractions

isolarium-idp

admin base-path redirects, blueprint IDs, and test coverag

isolarium-idp

fix admin redirects base path, preserve blueprint IDs

vp9-encoder

init: project skeleton with nix flake, cargo, git

isolarium-streaming

chore: demote per-frame capture log from info to debug

isolarium-streaming

feat: add FPS counter gated by NORDP_SHOW_FPS env var

isolarium-streaming

fix(docker): reliable PulseAudio startup and graceful audio fallback

isolarium-streaming

Add clipboard and audio

isolarium-streaming

Improve quality

isolarium

Add isolarium-tsdb-collector to isolarium-core

isolarium

Upgrade pingora-proxy version in isolarium-core

isolarium-proxy

Cleanup, fix tests, improve logging

isolarium-idp

evaluate application policies for proxy providers

isolarium

Remove redundant manifests

isolarium

Add missing httproute rbac for isolarium-app-controller

isolarium

Add instruction for isolarium-core local deployment

isolarium

Add local kind config add node affinity to all components of isolarium-core

isolarium

Upgrade tsdb version in isolarium-core

isolarium

Add nfs-subdir-external-provisioner to isolarium-core

isolarium

Fix invalid response handing in isolarium-idler

isolarium

Handle logout in isolarium-ui correctly

isolarium

Upgrade packages in isolarium-core

isolarium-idp

Rework base path handings

isolarium-idp

Finish invalid session handing

isolarium-idp

Handle conflicts on session id

isolarium-idp

Implement invalidation flow

isolarium

Handle new idp endpoint in isolarium-ui

isolarium

Add blueprint for admin creation in isolarium-core

isolarium

Apply fixes for isolarium-idp in isolarium-core

isolarium-idp

Allow to customize base path

isolarium-idp

Fix invalid client ip handing in rate limiting

isolarium-idp

Add missing admin locale keys

isolarium-idp

Add trusted cirds to bypass rate limits

isolarium-idp

Remove redundant docs dir

isolarium

Add trial checker to isolarium core

isolarium-idp

Remove redundant dependency from glibc in dockerfile

isolarium

Add experimental isolarium-core

isolarium-idp

Attempt to fix invalid cache usage in CI/CD

isolarium-proxy

Attempt to fix invalid cache usage in CI/CD

isolarium-idp

Apply blueprints on start

isolarium-idp

Use glibc version of tailwincss in dockerfile

isolarium-idp

Add pagination and search in admin

isolarium-idp

Add helper blocks to all json fields

isolarium-idp

Add selects instead of simple char fields to admin

isolarium-idp

Implement complete flow auth endpoints

isolarium-idp

Improve localization

isolarium-idp

Use correct cursor pointer for all buttons

isolarium-idp

Sync styles for all templates

isolarium-idp

Refactor crud endpoints

isolarium-idp

Add full rbac implementation

isolarium-idp

Implement radius source

isolarium-idp

Make email field optional

isolarium-idp

Add more entities for blueprints

isolarium-proxy

Fix bug with httproute priority and trailing slashes

isolarium-idp

Build tailwindcss bundle locally and embed it into binary

isolarium-idp

Embed locales inside binary and remove extra copies in dockerfile

isolarium-proxy

Fix invalid gateway api resoirce versions in all files

isolarium-idp

Implement authentik-like policy engine

isolarium-proxy

Bump package version

isolarium-proxy

Fix invalid redirect in kubernetes external auth

isolarium-idp

Rewrite policy engine from json to rustpython

isolarium-idp

Remove all allow dead code definitions

isolarium-idp

Implement full policy system

isolarium-proxy

Run cargo fmt through all files

isolarium-proxy

Fix invalid httproute resource version and add extra logging

isolarium-proxy

Improve support for redirects in external auth filter

isolarium-idp

Actualize readme and .env.example

isolarium-idp

Implement better blueprint support

isolarium

Improve double-browser check

isolarium-proxy

Improve dockerization

isolarium-proxy

Upgrade package version

isolarium-proxy

Finish implementation for external auth gep

isolarium-proxy

Fix invalid process spawning

isolarium-proxy

Return missing lock file and add dockerignore

isolarium-proxy

Add CI/CD pipeline

isolarium-proxy

Add metrics for ws connections and common requests

isolarium

back browsers versions and remove excess files

isolarium

comeback RESTARTAPP=true and update versions

isolarium-idp

Upgrade rust toolchain in nix flake and dockerfile

isolarium-idp

security: fix CORS, add IP rate limiting, rotate session IDs on login, fix flow engine race

isolarium-idp

Run cargo fmt through all files

isolarium-idp

Improve attribute testing in admin UI

isolarium-idp

Improve error visualizing in UI

isolarium-idp

fix(admin): show database errors on create/update/delete instead of silent redirects across all admin handlers

isolarium-idp

fix(admin/applications): show database error on create instead of silent redirect

isolarium-idp

fix(logging): log 5xx as ERROR and 4xx as WARN instead of INFO for all requests

isolarium-idp

fix(types): add #[serde(transparent)] to Id<T> to fix axum Path extraction

isolarium-idp

refactor(auth/oidc/federation): apply ResultExt to csrf, middleware, social handlers, and OIDC token/userinfo

isolarium-idp

refactor(api): clean up remaining INTERNAL_SERVER_ERROR patterns in launcher, outpost, totp

isolarium-idp

refactor(api/rest): convert remaining inline map_err patterns to ResultExt

isolarium-idp

refactor(api/rest): comprehensive ResultExt conversion across all 18 REST handler files

isolarium-idp

refactor(api/auth): apply ResultExt::map_internal_err to remaining auth handlers

isolarium-idp

refactor(error-handling): replace remaining anyhow::bail! with thiserror enums in blueprints and outpost

isolarium-idp

refactor(api/admin): apply ResultExt::map_internal_err to ldap/oauth/outpost/radius providers

isolarium-idp

refactor(api/rest): bulk apply ResultExt::map_internal_err across all REST handlers

isolarium-idp

refactor(api): introduce ResultExt::map_internal_err and apply to totp, password_reset, ldap_sources

isolarium-idp

refactor(session): extract set_session_user helper to deduplicate session insert logic

isolarium-idp

refactor(api): simplify Result→Option error handling with map_err+ok_or in totp, config, password_reset

isolarium-idp

refactor(outpost): replace expect with ? in HTTP client build

isolarium-idp

refactor(api/flows): add Id<Execution> marker and fix incorrect Id<Flow> on execution paths

isolarium-idp

refactor(admin/proxy_providers): use Into<String> instead of as_str().to_string()

isolarium-idp

refactor(api/sessions): add Id<Session> newtype and fix incorrect Id<Flow> usage in REST sessions

isolarium-idp

refactor(error-handling): apply thiserror to social providers, outpost/tenant repos, and LDAP sync

isolarium-idp

refactor(property_mapping): replace anyhow::Error::msg(format!...) with structured thiserror enum

isolarium-idp

fix(admin): add missing .as_str() on Id<T> for LDAP/RADIUS/proxy providers

isolarium-idp

refactor(api/admin): apply Id<T> newtypes to all admin path parameters

isolarium-idp

refactor(api/rest): apply Id<T> newtypes to all remaining path parameters

isolarium-idp

refactor(ldap_source): apply thiserror for LdapSourceError

isolarium-idp

refactor(api): apply Id<T> and Slug newtypes to path parameters

isolarium-idp

refactor(api/users): apply Id<User> newtype to path parameters

isolarium-idp

refactor(all): apply rust idioms aggressively

isolarium-idp

Refactor using common rust patterns

isolarium-idp

Improve localization

isolarium-idp

Fix invalid user creation form

isolarium-idp

Add better dockerization

isolarium-idp

Improve creation of first sqlite db file

isolarium-proxy

Implement external auth

isolarium-idp

Implement forward auth and session revokation

isolarium-idp

Migrate to seaorm and add postgresql support

isolarium-proxy

Add fallback feature

isolarium

update versions to latest

isolarium-idp

Add better branding customization and improve error visualizing

isolarium-idp

Implement csrf protection

isolarium-idp

Harden all little issues in codebase

isolarium-idp

Run cargo fmt through all files

isolarium-idp

Remove default credentials hint

isolarium-idp

Improve branding configuration

isolarium-idp

Run cargo fmt through all files

isolarium-idp

Add localization

isolarium-idp

Add custom launch url for apps

isolarium-idp

Improve launcher page

isolarium-idp

Load .env from current dir

isolarium-idp

Run cargo fmt through all files

isolarium-idp

Add swagger UI

isolarium-idp

Run cargo fmt through all files

isolarium-idp

Implement additional ldap source features

isolarium-idp

Improve attribute passing in proxy outpost

isolarium-idp

Add possibility to test mappings

isolarium-idp

Run cargo fmt through all files

isolarium-idp

Improve error handing in UI

isolarium-idp

Run cargo fmt through all files

isolarium-idp

Remove redundant methods

isolarium-idp

Fix bug with user group assignment

isolarium-idp

Implement user attributes mappings

isolarium

Fix bug with double spawning browsers

isolarium-idp

Cleanup

isolarium-idp

Add LDAP source sync

isolarium-idp

Do not use js for flows

isolarium-idp

Add email verification

isolarium-idp

Implement proper outposts

isolarium-idp

Better implementation for flow/stage bindings

isolarium-idp

Change configuration from toml to env

isolarium-idp

Fix branding configuration

isolarium-idp

Fix invalid warning about proxy outpost

isolarium-idp

Fix invalid endpoints in UI

isolarium-idp

Add proper log in/log out

isolarium-idp

Outposts, providers implementation and so on

isolarium-idp

Run cargo fmt through all files

isolarium-idp

Continue implementation

isolarium-idp

Implement edits and deletes for all entities

isolarium-idp

Add rustpython for attribute mapping

isolarium-proxy

Cleanup unused code

isolarium-idp

Implement better admin panel

isolarium-idp

First implementation

isolarium

And one more attempt to fix browser profile issue

isolarium-streaming

Switch from Google Chrome to Chromium

isolarium-streaming

docs: add AGENTS.md in English for AI agents

isolarium-streaming

feat: remove hardcoded RDP credentials

isolarium-proxy

Add extended gateway api support

isolarium-proxy

Simplify config reload

isolarium-proxy

Implement ClusterIP implementation for gateway api controller

isolarium-proxy

Include k8s feature by default

isolarium-streaming

feat: QOI codec + XSync + full-frame fallback for screen capture

isolarium-streaming

perf: tile-based diff for X11 screen capture

isolarium-streaming

refactor: encapsulate X11 SHM unsafe code in ShmSegment

isolarium-streaming

style: apply cargo fmt and fix clippy warning

isolarium-streaming

refactor: split monolithic main.rs into modules

isolarium-streaming

refactor: rename start.sh to docker-entrypoint.sh

isolarium-streaming

chore: cleanup build artifacts and vendor dependency

isolarium-streaming

chore: cleanup repository artifacts

isolarium-streaming

refactor: drop our tile diff, let IronRDP do all the diff/encode work

isolarium-streaming

fix: drop x11rb allow-unsafe-code feature so libxcb1-dev isn't needed

isolarium-streaming

refactor: replace localhost TCP loopback with in-memory duplex pipe

isolarium-streaming

chore: remove unused dependencies, ports, env vars, and audio plumbing

isolarium-streaming

perf: emit one bounding-box BitmapUpdate per frame instead of per-row strips

isolarium

One more attempt to fix browser profile issue

isolarium-streaming

perf: parallelize tile diff with rayon, merge horizontal strips, TILE=128

isolarium-streaming

build: rebuild WASM bundle with QOI codec support

isolarium-streaming

perf: use MIT-SHM, BgrX32, and bounded channel in display capture

isolarium-streaming

Revert "refactor: replace IronRDP+RDP with JPEG-over-WebSocket video streaming"

isolarium-proxy

Init project

isolarium-streaming

refactor: replace IronRDP+RDP with JPEG-over-WebSocket video streaming

isolarium

Bump image versions in browser-ui

isolarium

Attempt to fix profile crash errors

isolarium

Exclude every namespace from service mesh

isolarium

Enable keepalive again for rusty-auth-gateway to fix websocket connections

isolarium

Fix invalid case for browser routing

isolarium-streaming

feat: web client, keyboard fix, tile dirty detection, input latency fix

isolarium

Fix invalid resources in collect-debug-archive.sh script

isolarium-streaming

refactor: replace FreeRDP with ironrdp-server + WebSocket proxy

isolarium

Improve debug archive collection and include it in bundle

isolarium

Implement trial-checker component

isolarium

Add collect-debug-archive script

isolarium-streaming

refactor: remove X11 capture, use only IronRDP backend

isolarium-streaming

docs: update README with current architecture and performance

isolarium-streaming

fix: audio capture and playback

isolarium-streaming

fix: add MouseWheel handling in X11 capture

isolarium-streaming

feat: restore 1920x1080 resolution, optimize with libjpeg-turbo-rs, fix clipboard channel, add WebSocket debug logging

isolarium-streaming

Optimize FPS to ~40 and fix keyboard input

isolarium-streaming

Add X11 audio capture with PulseAudio

isolarium-streaming

Add X11 clipboard integration with arboard

isolarium-streaming

Update flake.nix for X11 development

isolarium-streaming

Update README with X11 direct capture architecture

isolarium-streaming

Add XDamage fallback and optimize capture

isolarium-streaming

Force continuous frame capture for testing

isolarium-streaming

Add X11 direct capture backend

isolarium-streaming

feat: upgrade FreeRDP from 2.11.7 to 3.10.3 via bookworm-backports

isolarium-streaming

perf: move JPEG encoding to spawn_blocking to prevent blocking async runtime

isolarium-streaming

perf: add JPEG compression for frames, reduce FRAME_INTERVAL to 16ms, use createImageBitmap for hardware-accelerated decode

isolarium-streaming

security: isolate Chrome from /home/nordp, move profile to /tmp, disable FileSystemAccessAPI

isolarium-streaming

feat: add FPS counter, fix keyboard scancode mapping (e.code instead of keyCode)

isolarium-streaming

feat: working noRDP with FreeRDP shadow, Xorg dummy, input, frames streaming

isolarium-streaming

feat: replace xrdp with FreeRDP shadow server

isolarium-streaming

WIP: xrdp auto-start X session and region-based frame updates

isolarium-streaming

Add comprehensive README with setup instructions

isolarium-streaming

Add clipboard and audio support

isolarium-streaming

Fix IronRDP xrdp connection: TLS upgrade, slow-path updates, git dependencies

isolarium-streaming

Add xrdp, xorgxrdp, openbox to dev container for IronRDP testing

isolarium

Bump version for rusty-auth-gateway

isolarium-streaming

Add IronRDP async client integration with configurable RDP connection

isolarium-streaming

Update Rust to 1.95, fix Docker build with cache mounts, add test frame generator

isolarium-streaming

Initial noRDP implementation with Axum, WebSocket, and IronRDP

isolarium

Move config reloader to separated repo

isolarium-streaming

Initial flake and direnv setup

isolarium

Remove CI/CD pipelines

isolarium

Build docker images locally

isolarium

Add missing env variables for browser-ui resource creating

isolarium

Patch resources instead of ignoring in browser-ui

isolarium

Add useful commands to readme

isolarium

Bump browser-ui and browsers packages versions

isolarium

fix-profilebugs-for-browsers

isolarium

Rework config reloader

isolarium

Bump version for config reloader

isolarium

Fix BadRequest by using Patch::Merge instead of Apply in config reloader

isolarium

Bump version for config reloader

isolarium

Fix 404 on restart by using namespaced API for patch in config reloader

isolarium

Bump version for config reloader

isolarium

Handle 404 on restart as skipped, not error in config reloader

isolarium

Reduce config_changed log level to debug in config reloader

isolarium

Decrease replicas for config reloader

isolarium

Use vanilla deployment for browser-ui

isolarium

Remove explicit Knative support and filter managed resources for config reloader

isolarium

Fix invalid image ref for config-reloader

isolarium

Add CI/CD for config reloader

isolarium

Fix invalid registry in config-reloader zarf.yaml

isolarium

Fix bug with missing crds

isolarium

Refactor after code review

isolarium

Refactor browser-ui with new functionality

isolarium

Bump version for rusty-auth-gateway component

isolarium

Add note about nfs-common package in user installation guide

isolarium

Remove old pipelines

isolarium

Fix bad quality for video stream

isolarium

Fix invalid namespace for browser-ui reference grant

isolarium

Add note about minimum browser timeout

isolarium

Remove authentik, oauth2-proxy and radius-oidc-provider

isolarium

Remove kro and create resources manually

isolarium

Move grafana auth from authentik to rusty-auth-proxy

isolarium

Bump version of all browser images in zarf.yaml

isolarium

Implement kubernetes config reloader

isolarium

Switch SeaweedFS to NFS

isolarium

Remove redundant seaweedfs address for browser-ui

isolarium

Improve logging for browser-ui

isolarium

Upgrade and use new rusty-auth-gateway features

март 2026 г.

isolarium

Add CI/CD docker build caching

isolarium

Use background from browser-ui for rusty-auth-gateway

isolarium

Rewrite browser-ui to rust

isolarium

Add rusty-auth-gateway component

isolarium

Allow to delete pvc for browsers automatically

isolarium

Tune seaweedfs for better garbage collection

isolarium

Bump package and image versions

isolarium

Fix close-or-fold bug for browsers

isolarium

Fix invalid browser timeout and allow to configure it

isolarium

Bump package and image versions

isolarium

Use cookie per request for oauth2-proxy to fix 403 errors

isolarium

Allow to customize browser start url

isolarium

Change registry for knative queue

isolarium

Improve user installation guide

isolarium

Reduce quality to lower network usage

isolarium

Restart browser if it is closed

isolarium

Extend readme with useful notes

isolarium

Return possibility to login to authentik admin

isolarium

Temporaly disable ssl verify for oauth2-proxy

isolarium

Return browser proxy feature

isolarium

Fix invalid packages path in deploy-components script

isolarium

Remove knative resources requests

isolarium

Fix invalid deploy-components.sh packages path

isolarium

Fix typo in user installation guide

isolarium

Fix invalid logout

isolarium

Browser UI visual improvements

isolarium

Bump radius-oidc-provider package version

isolarium

Bump authentik package version

isolarium

Change authentik branding

isolarium

Rebrand radius-oidc-provider

isolarium

Login static resources over airgap environment

isolarium

Improve user installation guide

isolarium

Fix invalid scripts path in prepare-bundle.sh

isolarium

Move radius secret to manually edited variables

isolarium

Allow to configure browser resources

isolarium

Improve prepare-bundle.sh script

isolarium

Fix invalid capabilities for browsers

isolarium

Tune selkies settings for better performance

isolarium

Use radius oidc as default authentication flow

isolarium

Implement airgap installation

isolarium

Prepare CI/CD pipeline for building all images

isolarium

Wait for infrastructure installation before applying apps kustomization

isolarium

Wait for seaweedfs before creating authentik bucket

isolarium

Upgrade k3s to 1.35.3

isolarium

Move helmfile init command to start

isolarium

Fix victoria metrics first installation failure

isolarium

Disable discovery for oauth2-proxy

isolarium

Fix knarive warning in all kservices

isolarium

Bump image versions

isolarium

Handle any username in any case

isolarium

Mount host ssl certs for authentik

isolarium

Disable redundant selkies functions

isolarium

Fix invalid internal browser routing based on username

isolarium

Fix invalid nginx config

isolarium

Change way to load images to local registry

isolarium

Bump browser-ui version

isolarium

Add browser images for chromium gost and yandex browser

isolarium

Describe every value that should be changed in installation

isolarium

Bump browser-ui version

isolarium

Add victoria logs

isolarium

Use more strict internal routing based on username

isolarium

Implement radius oidc provider

isolarium

Add trial screen

isolarium

Configure browser-ui domain from configmap

isolarium

Fix knative local registry resolution

isolarium

Extend readme

isolarium

Remove dependency from team-73 registry

isolarium

Remove lldap

isolarium

Configure proxy using secret

isolarium

Fix grafana invalid oauth handing

isolarium

Add distributed architecture topology

isolarium

Add reverse proxy info to readme

isolarium

Disallow scaling to zero for browser-ui

isolarium

Connect authentik to seaweedfs

isolarium

Add LICENSE

isolarium

Add trial block and loader to waiting page

isolarium

Allow unverified email in oauth2-proxy and describe changing admin password in authentik

isolarium

README improvements, disabled proxy by default, disabled firefox in UI

isolarium

Replace dex with authentik

isolarium

Add proxy server support

isolarium

Fix browser waiting

isolarium

Configure knative revision retention

isolarium

Allow to switch domain name for browser-ui

isolarium

Replace kasmvnc to selkies

isolarium

Fix invalid domain and extend readme

isolarium

Change all domains

декабрь 2025 г.

isolarium

Make grafana private and add correct browser readiness waiting

ноябрь 2025 г.

isolarium

Fix invalid browser routing

isolarium

Beautiful file storage

isolarium

Tiny restructure

isolarium

Istio instead of nginx and knative instead of vanilla service for browser-ui

isolarium

Replace browser-router with istio internal gateway

isolarium

A lot of fixes and improved browser ui

isolarium

Add manifests for browser ui and restructure

isolarium

Fill browser ui

isolarium

Knative

isolarium

Change istio peer authentication policy

isolarium

Refactor file structure

isolarium

Keda, istio and grafana under subpath

isolarium

Second version

сентябрь 2025 г.

isolarium

Init

Свяжитесь с нами

Оставьте заявку и мы свяжемся с вами для обсуждения вашего проекта