Chromium GOST
Chromium с поддержкой ГОСТ-криптографии для работы с электронной подписью и TLS по российским стандартам
Изолированный доступ к назначенным приложениям, централизованное управление и контроль эксплуатации.
Пользователи, группы и роли
Сессии, версии и журналы
MFA, RADIUS, LDAP, OAuth и OIDC
Доступ, управление приложениями и эксплуатационный контроль
Каждый пользователь получает доступ только к назначенному набору приложений.
Пользователи, группы, роли и внешняя аутентификация.
Ограниченные ресурсы и выделенное хранилище для приложений.
Подготовленные пакеты, текущие версии и режимы обновления.
Перезапуск, остановка и удаление пользовательских сессий.
Сессии, логи и графики в административной панели.
Применение
Браузеры и другие прикладные программы доступны пользователям через назначенный набор приложений.
Поддерживаемые типы приложений
Примеры поставляемых приложений
Chromium с поддержкой ГОСТ-криптографии для работы с электронной подписью и TLS по российским стандартам
Браузер от Яндекса с интеграцией сервисов экосистемы
Пользователь имеет доступ только к своему набору приложений.
Управление
Администратор управляет пользователями, версиями и сессиями, а пользователи запускают назначенные приложения через портал.
Пользователь запускает назначенное приложение через портал.
Администратор управляет приложениями, сессиями, журналами и показателями.
Пользователи, группы и роли управляются в панели идентификации.
Пользователи, сессии, приложения и основные показатели.
Подготовленные пакеты, версии и режимы обновления.
Перезапуск, остановка и удаление.
Интерфейсы
Управление приложениями, графики метрик и установка системы.



Интеграции
Подключение к системам аутентификации, контроль файлов и доступ к устройствам.
MFA, RADIUS, LDAP, OAuth и OIDC.
Загрузки и скачивания проверяются через центральный DLP-шлюз.
Доступ к микрофону, камере и USB-устройствам назначается для приложения.
mTLS между компонентами системы.
Сценарий выбирается с учётом существующей платформы и требований к изоляции
Ядро системы устанавливается в уже созданный кластер Kubernetes.
Платформа и ядро устанавливаются комплектом через CLI или веб-установщик.
Работа в закрытом контуре на инфраструктуре организации.
Полное развёртывание в среде без доступа к интернету.
isolarium
Fix invalid public url for demo instance
isolarium
Apply CRDs before core installation
isolarium
Increase logs agent memory limit
isolarium
Replace replica counters with application statuses
isolarium
Add justfile target for demo deployment
isolarium
Sync cli installer with web features
isolarium
Bump device agent version
isolarium
Delay device capture until use
isolarium
Preserve existing application PVCs
isolarium
Add system tray controls
isolarium
Fix application lifecycle and resource updates
isolarium
Bump release versions for microphone loopback fix
isolarium
Add application resource settings
isolarium
Bump isolarium-idp version
isolarium-idp
Bump package version
isolarium-idp
Skip disabled TOTP stages in flows
isolarium-idp
Configure TOTP from admin panel
isolarium-idp
Highlight active CRUD navigation items
isolarium
Prevent microphone loopback in browser sessions
isolarium
Add web UI to device agent
isolarium
Keep microphone wiring out of the application controller
isolarium
Keep browser microphone traffic on the pod loopback
isolarium
Publish the camera and microphone bridge changes
isolarium
Prefer live camera frames over stale backlog
isolarium
Keep microphone audio binary and close to live
isolarium
Keep browser media messaging on supported engines
isolarium
Update IDP branding defaults
isolarium
Make local DLP inspection binary-safe
isolarium
Disable dlp checks by default
isolarium
Add scripts for interactive presentation
isolarium
Add justfile target for local customer bundle testing
isolarium
Update TSDB version
isolarium
Persist remote installation assets
isolarium
Do not download k3s files if they are already in local filesystem
isolarium
Separate admin connection and license errors
isolarium
Update TSDB and IDP image versions
isolarium-idp
Bump package version
isolarium-idp
Complete UI localization
isolarium-idp
Improve admin styles
isolarium
Restore real microphone capture in browser sessions
isolarium
Share camera YUYV conversion as a library and add a hardware probe
isolarium
Specify versions of local tools in README.md
isolarium
Actualize README and isolarium-docs to match current project state
isolarium
Switch device agent camera capture to native YUYV and convert to I420
isolarium
Bump missing app controller version
isolarium
Publish Chromium-GOST as release 0.24.0
isolarium
Make application launch resilient to idle shutdown
isolarium
Improve web client launch loader
isolarium
Enable browser camera capture
isolarium
use rust-native implementations for audio and video capture in device agent
isolarium
Improve device agent callback page
isolarium
Improve web installer startup and configuration UX
isolarium
Give app pods guaranteed resources and worker-node scheduling
isolarium
Configure application shared memory
isolarium
Add notes about AVX2 and add more new features
isolarium
Prevent overlapping browser deployments
isolarium
Upgrade chromium-gost version
isolarium-streaming
Separate input and output channels
isolarium
Reduce logs agent watcher overhead
isolarium
Make the server-latency improvements deployable
isolarium
Make the verified keyboard-layout release deployable
isolarium
Configure zero-trust identity propagation
isolarium-idp
Validate signed identity in forward auth
isolarium-streaming
Keep remote keyboard layouts aligned with the host
isolarium
Bump isolarium-proxy version to 0.36.0
isolarium-proxy
Harden external auth header handling
isolarium
Upgrade isolarium-proxy to 0.35.0
isolarium-proxy
Prevent route changes from restarting proxy
isolarium
Select the first uploaded application version
isolarium
Add true local deployment scripts to justfile
isolarium
Reuse ready platform registry workloads
isolarium
Fix invalid httproute redirect status code in k8s app controller
isolarium
Implement generic application activation redirects
isolarium-proxy
Implement generic application activation redirects
isolarium
Propagate signed forward-auth identity headers
isolarium-idp
Emit signed forward-auth identity JWT
isolarium
Use modern tailwindcss installation pattern
isolarium
Migrate frontend tooling to Bun
isolarium
Ship Chromium GOST on streaming 0.5.0
isolarium-streaming
Publish the context-menu fix as the next streaming minor release
isolarium
Bump IDP version to 0.38.0
isolarium-idp
Bump package version
isolarium-idp
Make admin UI responsive
isolarium-streaming
Keep right-click menus inside the remote browser
isolarium
Send the Isolarium shortcut to its web portal
isolarium-idp
Fix branding color apply
isolarium
Make web clients responsive
isolarium
Add favicons for all web clients
isolarium
Restore HTTPS trust for proxied browser sessions
isolarium
Add extra tools to nix flake
isolarium
Add license page in admin web client
isolarium
Make TSDB stateful and add startup diagnostics
isolarium
Include license in installer
isolarium
Add license signing for customer bundle scripts
isolarium
Configure proxy health probes
isolarium
Expand admin dashboard metrics
isolarium
Improve healthchecks and upgrade isolarium-proxy
isolarium-proxy
Add generic mTLS health checks
isolarium
Implement signed license enforcement
isolarium
Wait for k3d cluster creation in justfile
isolarium
Rename airgap bootstrap utility
isolarium
Fix registry proxy restart race
isolarium
Sync web installer styles with common color theme
isolarium
Improve web clients styles
isolarium
Add .env to global .gitignore
isolarium
Align admin branding with web client
isolarium
Move registry ownership to installer
isolarium
Tune chart health probes
isolarium
Support per-worker SSH settings
isolarium
Persist web installer settings
isolarium
Route sidecar images through platform registry
isolarium
Improve installer README
isolarium
Compact installer and add options to override settings
isolarium
Expose gateway through LoadBalancer by default
isolarium
Upgrade isolarium-idp to 0.37.0
isolarium-idp
Resolve tenant from trusted host candidates
isolarium
Upgrade isolarium-idp to 0.36.0
isolarium-idp
Fix tenant resolution for embedded forward auth
isolarium
Fix a lot of bugs in k3s web installer
isolarium
Build portable customer installer binaries
isolarium
Wait for Kubernetes master registration in isolarium-installer-k3s
isolarium
Embed SSH transport in k3s installer
isolarium
Sync installation docs with latest changes
isolarium
Keep SSH installer sessions alive
isolarium
Improve installer transfer diagnostics
isolarium
Add installer progress logging and cancellation
isolarium
Initialize isolarium docs
isolarium
Add safe note about dev keys in bundle preparation
isolarium
Fix invalid escape in justfile
isolarium
Use Compose manifest for core image packaging
isolarium
Separate Helm deployment from isolariumctl
isolarium
Clarify just targets
isolarium
Simplify bootstrap image loading
isolarium
Bootstrap registry through temporary NodePort
isolarium
Add customer bundle target
isolarium
Delegate core installation to isolariumctl
isolarium
Implement complete zarf-less installation
isolarium
Simplify local commands using justfile
isolarium
Replace zarf with isolariumctl
isolarium
Update browser images and DLP sidecar
isolarium
Fix invalid dlp sidecar creation
isolarium
Distribute public CA bundles to workloads
isolarium
Update IDP image and startup command
isolarium-idp
Bump package version
isolarium-idp
Split single-node roles into supervised commands
isolarium
Fix app feature inheritance
isolarium
Support warpgate-based SSH deployments in k3s installer
isolarium
Bump proxy and idler versions
isolarium-proxy
Track WebSocket activity correctly
isolarium
Serve OAuth callback styles separately in device agent
isolarium
Fix invalid oauth callback in device agent
isolarium
Configure device broker image credentials
isolarium
Fix invalid tls handing in oauth client for device agent
isolarium
Fix invalid header handing from mtls sidecar for idp
isolarium
Fix forwarded host handling in IDP
isolarium-idp
Fix forwarded host handling in IDP
isolarium
Provide stable IDP secret encryption key
isolarium
Implement inline browser DLP agent
isolarium
Bump core packages versions
isolarium
Extend browser k8s resources in app controller
isolarium-proxy
Upgrade package version
isolarium-proxy
Preserve WWW-Authenticate from external auth
isolarium-idp
Upgrade package version
isolarium-idp
Harden bearer forward auth handling
isolarium
Implement device agent and broker integration
isolarium
Remove legacy implementation
isolarium
Upgrade isolarium-idp to 0.31.0
isolarium-idp
Upgrade package version
isolarium-idp
Implement Post Redirect Get for admin mutations
isolarium-idp
Improve admin design
isolarium-idp
Upgrade package version
isolarium-idp
Add tenant-scoped user creation for delegated admins
isolarium-idp
Implement delegated tenant administrators
isolarium-idp
Upgrade package version
isolarium-idp
Implement tenant switcher
isolarium-idp
Upgrade package version
isolarium-idp
Implement complete tenant support
isolarium
Add core bundle installer scripts
isolarium
Add WSL2 Docker Desktop workaround to k3s install script
isolarium
Add local installation mode to k3s installer
isolarium-idp
Upgrade package version
isolarium-idp
Harden IDP authorization and session security
isolarium-idp
Implement complete OIDC provider
isolarium
Add USB and microphone integration
isolarium
Upgrade isolarium-idp and use new blueprint format
isolarium
Add DLP integration
isolarium-idp
Bump package version
isolarium-idp
Replace RustPython with rhai
isolarium
Remove ffmpeg and add NV12 & MJPG camera
isolarium
Fix device poc
isolarium
Fix device-broker
isolarium
Fix device brocker entrypoint
isolarium
Fix dockerfile in chromium gost extended
isolarium
Fix device broker entrypoint
isolarium
Restore v4l2 camera capture with logging and add Linux test guide
isolarium
Fix camera forwarding via regular Y4M file and YV12 colors; resolve agent idle timeout
isolarium
Add new device implementation
isolarium
Use the published IDP compatibility image in the core bundle
isolarium
Add device emplementation and chromium extension
isolarium-idp
Publish the backend-neutral IDP compatibility release
isolarium-idp
Keep IDP database selection backend agnostic
isolarium
Replace chrono with jiff in trial components
isolarium
Update k8s from chrono to jiff
isolarium
Simplify new installer README
isolarium
Add installer note in README
isolarium
Add first version of isololarium-installer
isolarium
Switch isolarium-k8s-app-controller from chrono to jiff and bump to 0.31.0
isolarium
Bump isolarium-idler to 0.13.0 and fix jiff duration method
isolarium
Bump isolarium-idler to 0.13.0 and fix jiff duration method
isolarium
Add README note about platform layer
isolarium
Create new isolarium-platform layer
isolarium
Change from chrono to jiff library
isolarium
Update main endpoints and open url-adress in README
isolarium
Add k3d config and simplify local cluster preparation
isolarium
Update host parameter in README
isolarium
Add charts section in admin panel
isolarium
Use explicit registry in dockerfiles and remove start comment
isolarium
Add rsyslog export support
isolarium
Add admin web client logout and bump component versions
isolarium
Bump isolarium-idp version to 0.24.0
isolarium-idp
Compact admin sidebar layout
isolarium-idp
Add logout and API documentation links to admin sidebar
isolarium-idp
Replace proxy provider flow inputs with dropdowns in admin UI
isolarium
Use zot registry instead of distribution
isolarium
Rename isolarium-app-controller to isolarium-k8s-app-controller
isolarium
Move web client static out of public dir
isolarium
Fix invalid static assets names
isolarium
Move user management from admin to idp
isolarium
Improve image upload progress in admin web client
isolarium
Rework app version management
isolarium
Change version of zarf package in README.md
isolarium
Extend README with general project description
isolarium
Fix bugs in logs agent
isolarium
Fix invalid log collector
isolarium-proxy
Fix dns re-resolving
isolarium
Add mtls for missing components
isolarium-proxy
Add full l4 with tls support
isolarium-proxy
Convert HTTPRoute watcher to Controller and add external auth diagnostics
isolarium-proxy
Handle https external auth properly in gateway api
isolarium
Ship the Chromium launcher from the app images and bump browser apps to 0.8.0
isolarium-streaming
Move the Chromium launcher to the browser app images
isolarium-proxy
Fix Transfer-Encoding header issues
isolarium-proxy
Bump package version to 0.25.0
isolarium-proxy
Scope HTTP route matching to the receiving listener
isolarium
Update browser images to isolarium-streaming 0.3.1 and bump chromium-gost to 0.7.3
isolarium-streaming
Bump version to 0.4.0
isolarium-streaming
Restart the streamed app automatically when it exits
isolarium-proxy
Add mtls for external auth
isolarium-proxy
Disable gateway api support by default
isolarium-proxy
Add Gateway backend mTLS detection by Service https port
isolarium
Add isolarium-k8s-ca and mTLS sidecar injection in chart
isolarium-proxy
Add mTLS support to isolarium-proxy
isolarium
Move severity text parsing to logs-api, keep agent severity parsing JSON-only
isolarium
Parse log severity from message body and handle unknown levels
isolarium
Improve admin logs viewer and set service.name from pod labels in logs-agent
isolarium
Read hot segment records in logs-store query engine and bump logs-store to 0.5.0
isolarium
Fix logs-agent to rescan for new K8s log files
isolarium
Add logs viewer page in admin web client
isolarium
Bump isolarium-proxy version to 0.19.0
isolarium-proxy
Bump package version to 0.19.0
isolarium-proxy
Set correct x-forwarded-proto for external auth on HTTPS listeners
isolarium
Remove redundant version files from all apps
isolarium
Upgrade isolarium-streaming for all apps
isolarium-streaming
chore: bump version to 0.3.0
isolarium-streaming
chore: add docs/ to .gitignore
isolarium-streaming
chore: remove docs/ from repo
isolarium-streaming
docs: add files.rs and files-panel.ts to project structure tree
isolarium-streaming
chore: forward ISOLARIUM_FILE_* env vars through compose.yaml
isolarium-streaming
feat(files): pass ISOLARIUM_FILE_* env through entrypoint, document feature
isolarium-streaming
feat(web): init files panel from /config.js flags; make client.ts typecheck clean
isolarium-streaming
feat(web): slide-out files panel (list/download/upload/delete)
isolarium-streaming
fix(web): work under a path prefix - relative URLs for scripts, assets, WS and files API
isolarium-streaming
feat: make clipboard sync optional via ISOLARIUM_CLIPBOARD env
isolarium-streaming
feat(files): register /api/files routes, expose flags via /config.js
isolarium-streaming
feat(files): list/download/upload/delete endpoints with traversal protection
isolarium-streaming
feat(files): shared-dir config, name sanitization, collision-safe naming
isolarium-streaming
docs: file transfer implementation plan (reviewed, approved)
isolarium
Add useful notes to global README.md
isolarium
Upgrade isolarium-proxy to 0.18.0 in every component
isolarium-proxy
Sync logging configuration with all isolarium ecosystem
isolarium
Simplify local cert management by using new isolarium-proxy version
isolarium-proxy
Add self signed cert generation for gateway api
isolarium
Upgrade isolarium-proxy to 0.17.0 in every component
isolarium
Fix case when idler drops user app right after start
isolarium
Add extra flags for universal zarf deploy command
isolarium-streaming
docs: file transfer feature design (brainstormed spec)
isolarium
Add README for every component
isolarium
Add proper readiness and liveness probes for apps in app controller
isolarium
Return missing Cargo.lock for isolarium-api
isolarium
Fix invalid subroute path handlings
isolarium-proxy
Fix invalid rewrite handling
isolarium
Improve isolarium-web-client user experience
isolarium
Use custom isolarium-nfs-provisioner image
isolarium
Bump isolarium-idp version to 0.23.0
isolarium-idp
Fix invalid pagination urls
isolarium
Add missing namespace creation command
isolarium
Add nix flake
isolarium
isolarium-apps: back to port 3000 on the isolarium-streaming 0.2.0 base
isolarium-streaming
feat!: serve on port 3000 - match the isolarium platform app port
isolarium-streaming
fix(ci): vendor vp9-encoder through the runner - buildkitd cannot reach forgejo
isolarium-streaming
chore(build): TEMP network diagnostics for forgejo reachability from CI buildkitd
isolarium-streaming
chore(build): log which vp9-encoder auth path the build takes
isolarium-streaming
fix(ci): fetch vp9-encoder over HTTPS with a token - SSH port 222 unreachable from buildkitd
isolarium
isolarium-apps: trim narrative Dockerfile headers
isolarium-streaming
fix(build): track web/package-lock.json - CI checkout needs it for npm ci
isolarium-streaming
fix(ci): store the deploy key secret base64-encoded - immune to newline mangling
isolarium-streaming
fix(ci): robust ssh-agent step - tolerate secrets stripped of trailing newline
isolarium
isolarium-apps: switch chromium-gost and yandex-browser to the isolarium-streaming base
isolarium-streaming
feat(release): publish one reusable image; move browser images out
isolarium-streaming
refactor: rename project noRDP -> isolarium-streaming
isolarium
Bump isolarium-logs components to 0.3.0
isolarium
Spawn exporter task so admin server can start
isolarium
Bump isolarium-logs components to 0.2.0
isolarium
Make logs-agent exporter connect lazily to tolerate store startup delay
isolarium
Remove store dev-dependency from logs-agent to fix Docker build
isolarium
Merge branch 'feature/isolarium-logs' into master
isolarium
Fix critical review findings for isolarium-logs
isolarium-streaming
feat(docker): per-browser images + rename vp9r crate -> vp9-encoder
isolarium
Add isolarium-logs images to Zarf package and build script
isolarium
Add Helm templates for isolarium-logs-agent, store and api
isolarium
Add Helm values and helpers for isolarium-logs components
isolarium
Implement query fan-out endpoint for isolarium-logs-api
isolarium
Add isolarium-logs-api crate scaffolding and config
isolarium
Add integration test for isolarium-logs-agent
isolarium
Implement enrichment, batching, routing, WAL and exporter for isolarium-logs-agent
isolarium
Implement Kubernetes metadata enrichment for isolarium-logs-agent
isolarium
Implement CRI parser and file tailing sources for isolarium-logs-agent
isolarium
Add isolarium-logs-agent crate scaffolding, config and admin server
isolarium
Add query engine and admin query endpoint to isolarium-logs-store
vp9-encoder
refactor: rename crate vp9r -> vp9-encoder - match repository name
isolarium
Implement OTLP gRPC ingest server for isolarium-logs-store
isolarium
Add fjall-based segment index to isolarium-logs-store
isolarium
Implement segment writer and reader for isolarium-logs-store
isolarium
Add isolarium-logs-store crate scaffolding, config and admin server
isolarium
Fix invalid static paths in legacy browser-ui implementation
isolarium
Add timezone to browser-ui env variables
isolarium
Extend .gitignore
isolarium
Add bundle preparation scripts
isolarium
Bump config-reloader version
isolarium
Bump config-reloader version
isolarium
Improve logging in all components
isolarium
Fix idle app checking
isolarium-streaming
deps: bump vp9r - the 18->70 fps optimization series
vp9-encoder
docs(test): byte-identity probe is a kept dev tool - honest header
vp9-encoder
build: release opt-level z -> 3 - measure what production runs
vp9-encoder
feat(rc): extreme-overshoot re-encode - one 951 kB frame no longer buys seconds of max-q noise
isolarium
Bump isolarium-tsdb and isolarium-tsdb-collector versions to 0.6.0
vp9-encoder
feat(keyframe): realtime fast path - 2250 ms -> 175 ms at 1080p
vp9-encoder
feat(gmv): SAD-verified scroll estimate + temporal seed - unflap the lock
vp9-encoder
perf: reuse per-frame buffers - kill ~20MB/frame of alloc+zero+clone
vp9-encoder
perf: row-slice pixel paths replace per-pixel bounds-checked accessors
vp9-encoder
probe(perf): band-outcome/gmv counters + prof_stream y4m harness
isolarium
Improve logging for isolarium-idler
isolarium
Vendor gateway api resources and simplify zarf package installation
isolarium
Move isolarium-core readme to root
isolarium
Remove isolarium-embedded-nfs-server
isolarium
Optimize trial checker image size
isolarium-proxy
Fix invalid tls handling
isolarium-proxy
Bump package version
isolarium-proxy
Run cargo fmt through all files
isolarium-proxy
Use remote buildkit for CI/CD
isolarium-proxy
Fix invalid case for all gateway api schemas
isolarium
Add https support
isolarium
Remove redundant text from isolarium-admin-web-client
isolarium
Move legacy implementation to separated directory
isolarium
Fix new image upload
isolarium
Allow to delete apps from admin
isolarium
Implement proper image registry usage
isolarium
Improve app-controller reconcile loop
isolarium-streaming
tune(rc): CBR target 8 -> 20 Mbit/s
isolarium-streaming
deps: bump vp9r - three edge-geometry conformance fixes (1080p bottom-SB corruption: UmvEdges sign, frame border, entropy-context edge clipping)
vp9-encoder
fix(conformance): three edge-geometry bugs behind the 1080p field corruption
isolarium
Remove hardcoded image list from web client
isolarium
Fix large image upload
isolarium
Split isolarium-ui to multiple components
isolarium
Split isolarium-admin-ui to multiple components
isolarium-streaming
feat(diag): stream dump on decoder error + info logs by default + fast recovery
isolarium-streaming
fix(ws): control-plane priority in select; add per-stage telemetry
isolarium-streaming
fix(latency): hard pacing - ack on decoded+drawn, watchdog instead of 1s bypass
isolarium-streaming
fix(encoder): disable scene-cut keyframes - scrolling froze the stream
vp9-encoder
fix(test): clippy manual_range_contains in streaming CBR test
vp9-encoder
docs(ratectrl): scene-cut is unusable for screen content - document + mirror in test
isolarium-streaming
docs: update AGENTS.md to VP9-over-WebSocket architecture, add CLAUDE.md
isolarium-streaming
fix(latency): end-to-end flow control via ack credits; tame keyframe storms
vp9-encoder
fix(realtime): tighten force_skip locality to factor 1 - phantom menu lines
isolarium-streaming
deps: bump vp9r - force_skip locality gate (cursor debris / invisible cursor on flat white fixed encoder-side)
vp9-encoder
fix(realtime): force_skip requires locality - no 8x8 tile above 4x ft
isolarium-streaming
docker: drop syntax directive so build needs no Docker Hub frontend
isolarium-streaming
fix(video): force software VP9 decode - hardware decoder diverges
vp9-encoder
test(conformance): gate the production streaming config (CBR+twopass+threads)
isolarium-streaming
fix(latency): drop stale frames at capture, bound decoder queue on client
isolarium-streaming
deps: fetch vp9r from forgejo git repo over SSH instead of local path
isolarium-streaming
feat(encoder): replace shiguredo_libvpx with vp9r (pure Rust), 60fps target
vp9-encoder
chore: point Cargo.toml repository at the real forgejo repo (was a placeholder)
vp9-encoder
chore: drop research notes, refresh AGENTS.md, replace U+00D7 with ASCII x
vp9-encoder
refactor: drop dead code surfaced by the project-wide audit
vp9-encoder
chore: refresh flake.nix and CLAUDE.md to the current pure-Rust state
vp9-encoder
chore: untrack ROADMAP.md (local working doc)
vp9-encoder
chore: drop rustfmt.toml (both settings were defaults for our cargo-fmt workflow)
vp9-encoder
chore: pure-Rust tree - drop C tools, CI, machine/session-local files
vp9-encoder
chore: untrack docs/superpowers (local working docs, not for the repo)
vp9-encoder
docs: README - overview, quickstart, realtime/WebCodecs usage, correctness gates
vp9-encoder
feat(api): Vp9Encoder::request_keyframe - on-demand keyframe
vp9-encoder
docs: on-demand keyframe (request_keyframe) design spec
vp9-encoder
test(loopfilter): odd-height chroma last-row conformance gate (review open Q)
vp9-encoder
refactor(encoder): allocation-lean inter hot loops; drop dead predict params
vp9-encoder
refactor(loopfilter): split the 2220-line module into kernels/masks/apply/pick
isolarium
Implement new app image upload
vp9-encoder
test(golden): pin fdct16x16/fdct32x32 and the range coder to libvpx 1.16.0 bytes
vp9-encoder
refactor(encoder): split the two-pass encoder out of frame_enc.rs
isolarium
Add missing image save command to isolarium-apps README
isolarium
Improve isolarium-admin-ui UI blocks structure
vp9-encoder
refactor(inter): single source of truth for the inter residual path + RT SAD band
vp9-encoder
fix(api,transform,encoder): review round — API usability, invariant guards, cleanup
vp9-encoder
fix(me,mc): unify ME clamp composition; compute UMV clamp bounds in i32
vp9-encoder
fix(simd): bounds-validate pub dispatchers before unsafe kernels (review HIGH)
vp9-encoder
perf(simd): SIMD the motion-estimation SAD (sad_at_mv) — byte-identical
vp9-encoder
perf(parallel): parallelize the global-MV grid search (byte-identical)
vp9-encoder
perf(algo): skip inverse transform in inter_candidate_rd for zero-coeff blocks
vp9-encoder
perf(algo): realtime fast inter-mode search — SAD-preselect top-2, full-RD winner
vp9-encoder
perf(algo): dedup per-candidate RD by MV in choose_inter_block (byte-identical)
vp9-encoder
perf(algo): early-bail estimate_global_mv when consensus is impossible (byte-identical)
vp9-encoder
perf(algo): aggressive skip band (force_skip_band) — scroll@60fps, ~half bitrate
vp9-encoder
perf(algo): skip inverse transform for zero-coeff blocks + direct-copy integer MC
vp9-encoder
merge: Phase 9 — decouple decision/emission (opt-in two-pass Realtime encoder)
vp9-encoder
fix(phase9): wrapping_sub for NEWMV diff (review MINOR) + record APPROVE
vp9-encoder
feat(phase9): opt-in RdoSpeed.decouple flag routes Realtime P-frames to two-pass
vp9-encoder
test(phase9): bitrate delta two-pass vs fused — neutral (0.999-1.000x)
vp9-encoder
spike(phase9): tiles×workers emit + final scaling verdict
vp9-encoder
spike(phase9): scaling probe + memcpy merge; single-tile two-pass is emit/overhead-bound
vp9-encoder
spike(phase9): thread the two-pass decision pass over SB rows
vp9-encoder
spike(phase9): serial two-pass Realtime encoder (recon==vpxdec proven)
vp9-encoder
refactor(inter): split encode_inter_block into decide + emit (byte-identical)
vp9-encoder
spike(phase9): feature-gated emit-fraction probe + Amdahl measurement
vp9-encoder
docs(plan): Phase 9 — decouple decision/emission to break the 4-tile cap (spike-first)
vp9-encoder
merge: Phase 8 — max-perf increment (motion-aware fast-path + cheaper ME)
vp9-encoder
perf(encoder): derive MAX_GMV_PX from FRAME_BORDER + bounds debug_assert (review MEDIUM)
vp9-encoder
perf(encoder): motion-aware realtime fast-path — dominant-MV (scroll) detection
vp9-encoder
test(perf): realistic scroll probe reveals priority-scenario gap
vp9-encoder
perf(encoder): cheaper Realtime ME — skip sub-pel refine + intra trial (Phase 8)
vp9-encoder
test(perf): Phase 8 spike — tile-scaling + LF split for cap-bound cases
vp9-encoder
merge: Phase 7b — realtime heuristic partition + SIMD vertical LF (crosses ~60 fps)
vp9-encoder
perf(encoder): merge realtime static-skip + heuristic into one SAD (review MINOR-1/3)
vp9-encoder
perf(simd): debug_assert bounds preconditions on vertical LF kernels (review MEDIUM-1)
vp9-encoder
perf(simd): AVX2 vertical loop filter (byte-identical to scalar)
vp9-encoder
test(perf): realtime floor-isolation probe (LF on/off, tile counts)
vp9-encoder
perf(encoder): SIMD the realtime static-skip SAD scan (raw-slice sad_dispatch)
vp9-encoder
perf(encoder): realtime heuristic partition for non-static SBs (Phase 7b)
vp9-encoder
merge: Phase 7 — real-time performance (screen-content fast-path)
vp9-encoder
test/docs(phase7): extend realtime vpxdec gate (large + odd dims) + doc/comment fixes (final review)
vp9-encoder
test(perf): realtime quality/bitrate-delta probe (Quality vs Realtime PSNR+bytes)
vp9-encoder
perf(encoder): productionize realtime fast-path (per-pixel threshold, n>=32, realtime() API)
vp9-encoder
perf(encoder): realtime screen-content static-SB skip fast-path (Stage B)
isolarium-idp
Attempt to optimize image build speed using remote buildkit daemon
vp9-encoder
perf(simd): compile-time assert N==4*L on vload/vstore/transpose_sq (review MEDIUM)
vp9-encoder
perf(simd): AVX2 fdct/idct 16x16 + 32x32 (byte-identical to scalar)
vp9-encoder
test(perf): measure total SIMD wall-time contribution (force_scalar toggle)
vp9-encoder
perf(transform): allocation-free iht_into/fht_into + stack scratch in hot RDO path
vp9-encoder
perf(phase7): zero-dep + fat LTO + 1080p bench (static+moving) & profiling baseline
vp9-encoder
docs(plan): Phase 7 — real-time performance (1080p@60 best-effort)
vp9-encoder
test: ignored 1080p throughput probe (release) — real-time perf measurement
vp9-encoder
merge: Phase 6b — production hardening & API finalization
vp9-encoder
docs: warning-free rustdoc + WebCodecs integration guide
vp9-encoder
test(api): guard determinism fuzz against vacuous empty-output pass (T3 review MEDIUM)
vp9-encoder
test(api): deterministic fuzzing + long-run/resolution-change soak
vp9-encoder
test(api): cover all reconfigure() dim bounds + InvalidStride Display (T2 review LOW)
vp9-encoder
feat(api): public reconfigure() + dedicated InvalidStride error
vp9-encoder
fix(frame): extend_borders_at fills alignment gap + full border for odd dims (T1 review)
vp9-encoder
feat(api): bit-exact arbitrary/odd dimensions + MIN_DIMENSION (Phase 6b Task 1)
isolarium
Bump isolarium-assets version
isolarium
Fix assets handling in isolarium-assets
isolarium-proxy
Bump package version
isolarium-proxy
Run cargo fmt through all files
isolarium-proxy
Return 404 instead of 502 when static file not found
isolarium
Bump isolarium-idp version
vp9-encoder
docs(plan): Phase 6b — production hardening & API finalization
vp9-encoder
merge: Phase 6a — production Vp9Encoder streaming API
vp9-encoder
fix(api): enforce MAX_DIMENSION cap on encode() path (final review IMPORTANT)
vp9-encoder
test/fix(api): vpxdec-validate post-reinit keyframe (M1) + overflow-safe check_plane (L3) — T4/T5 review
vp9-encoder
fix(api): allow too_many_arguments on planar encode() (per-task clippy gate)
vp9-encoder
docs: update ROADMAP + AGENTS for Phase 6a completion
vp9-encoder
docs(api): expose stable Vp9Encoder surface, hide internals, add quickstart doctest
vp9-encoder
feat(api): streaming Vp9Encoder with planar input + resolution auto-keyframe
isolarium-idp
fix(db): configure WAL and busy_timeout consistently for SQLite pools
vp9-encoder
refactor(encoder): extract SeqDriver/SeqParams stepper (encode_video byte-identical)
vp9-encoder
fix(api): RateControlConfig/RateControlMode derive Copy (T2 review IMPORTANT) + doc fixes
vp9-encoder
feat(api): EncoderConfig + RateControlMode with validation
vp9-encoder
docs(api): correct libvpx source refs for VP9 level table (T1 review MINOR)
vp9-encoder
feat(api): EncodeError, Packet, and VP9 level codec-string
vp9-encoder
docs(plan): Phase 6a — production Vp9Encoder streaming API
vp9-encoder
merge: Phase 5b — VP9 tile columns + threaded encode + conservative RDO heuristics
vp9-encoder
test(encoder): Phase 5b exit gate — tiles+threads+heuristics conformance + determinism + fuzz + bench
vp9-encoder
perf(encoder): stack ME-cache in choose_inter_block (no per-block heap alloc) — T3 review MEDIUM
vp9-encoder
feat(encoder): conservative deterministic RDO speed heuristics (ref-dedup + skip fast path)
vp9-encoder
feat(encoder): parallel tile encode via std::thread::scope (deterministic, threaded==serial)
vp9-encoder
feat(encoder): VP9 tile columns (serial, bit-exact recon==vpxdec)
vp9-encoder
docs(plan): Phase 5b — tile columns + threading (std::thread::scope) + conservative RDO heuristics
vp9-encoder
Merge Phase 5a: AVX2 SIMD hot kernels (SAD/DCT/quant/MC/loopfilter) — bit-exact to scalar, identical bitstream
vp9-encoder
test(simd): Phase 5a exit gate — identical bitstream + visibility/defensive sweep
vp9-encoder
feat(simd): AVX2 loop-filter kernels (bit-exact where tractable)
vp9-encoder
feat(simd): AVX2 quantize + 8-tap MC convolve (bit-exact)
vp9-encoder
feat(simd): AVX2 forward/inverse DCT (bit-exact, dispatched)
vp9-encoder
fix(simd): move sad_dispatch to mod.rs (non-x86_64 compiles, scalar fallback); bench uses safe dispatch — T1 review HIGH+should-fix
vp9-encoder
refactor(simd): confine SAD dispatch unsafe to src/simd/ (safe call sites) — pattern for T2-T5
vp9-encoder
feat(simd): AVX2 SAD + runtime dispatch infrastructure
vp9-encoder
docs(plan): Phase 5a — AVX2 SIMD hot kernels (bit-exact to scalar)
vp9-encoder
Merge Phase 4b: CBR+VBV rate control + scene-change GOP (genuine bitrate tracking, never-drop, bit-exact)
vp9-encoder
test(ratectrl): lock two-sided bitrate tracking in strict gate (final review F-1)
vp9-encoder
feat(ratectrl): Phase 4b exit gate — strict bitrate + load-spike + fuzz; controller tuning
vp9-encoder
feat(ratectrl): scene-change detection + key-on-demand GOP
vp9-encoder
feat(ratectrl): per-frame CBR QP control loop in encode_video
vp9-encoder
fix(ratectrl): correct last_q midpoint init (u8 overflow when min_q+max_q>255) — T1 review MEDIUM
vp9-encoder
feat(ratectrl): VBV buffer model + bits<->q controller core
vp9-encoder
docs(plan): Phase 4b — CBR+VBV rate control + scene-change GOP
vp9-encoder
Merge Phase 4a: in-loop deblocking loop filter (bit-exact, on-by-default, filtered frame as reference)
vp9-encoder
feat(loopfilter): enable LF by default (FromQ) + Phase 4a exit gate (T5)
vp9-encoder
feat(loopfilter): auto-search filter_level (q-derived) + LfPick policy
vp9-encoder
feat(loopfilter): enable LF in inter pipeline; filtered frame as reference (bit-exact)
vp9-encoder
harden(loopfilter): debug_assert chroma-tx block-max invariant (T2 review MEDIUM)
vp9-encoder
feat(loopfilter): per-frame mask+apply+header; keyframe LF bit-exact
vp9-encoder
feat(loopfilter): deblock kernels + threshold tables + level derivation
vp9-encoder
docs(plan): Phase 4a — in-loop deblocking loop filter (bit-exact)
vp9-encoder
Merge Phase 3b: motion estimation + inter RDO + temporal MV + GOP (bit-exact, scroll beats all-keyframe)
vp9-encoder
feat(encoder): GOP driver (encode_video, keyint) + Phase 3b scroll exit gate
vp9-encoder
feat(encoder): full inter RDO (mode + inter/intra + ref + partition)
vp9-encoder
feat(encoder): sub-pixel ME refinement (1/2,1/4-pel via 8-tap MC)
vp9-encoder
style: move scroll-test comment above let to satisfy rustfmt
vp9-encoder
style: tidy mangled comment in vpxdec_me scroll test
vp9-encoder
style: rustfmt Phase 3b T2 (me.rs, frame_enc.rs, tests)
vp9-encoder
feat(me): integer diamond-search ME — Task T2 Phase 3b
vp9-encoder
feat(encoder): temporal MV prediction (use_prev_frame_mvs) — chained-P bit-exact
vp9-encoder
docs(plan): Phase 3b — motion estimation + inter RDO + temporal MV + GOP
vp9-encoder
Merge Phase 3a: inter coding infrastructure — bit-exact P-frames (headers, ref mgmt, 8-tap MC, MV coding, inter modes; forced-MV validated, no ME)
vp9-encoder
docs(mc,header): note i16 clamp-bound resolution limit + allow_hp precondition (final review)
vp9-encoder
test(encoder): hard-assert chained ZEROMV gate (remove dead fallback branch)
vp9-encoder
test(encoder): Phase 3a exit gate — inter infrastructure recon==vpxdec
vp9-encoder
test(encoder): non-zero/sub-pel MV + mixed inter/intra P-frames (recon==vpxdec)
vp9-encoder
feat(encoder): inter block syntax + find_mv_refs + ZEROMV P-frame (recon==vpxdec)
vp9-encoder
feat(mc): 8-tap sub-pixel motion compensation (EIGHTTAP convolve + MV clamp)
vp9-encoder
feat(encoder): inter frame headers + ref-frame signaling + RefPool
vp9-encoder
docs(plan): Phase 3a — inter coding infrastructure (forced-MV, bit-exact, no ME)
vp9-encoder
Merge Phase 2c: Lagrangian RDO mode + partition decision (bit-exact recon==vpxdec)
vp9-encoder
test(encoder): Phase 2c gate — RDO quality + fuzz recon==vpxdec
vp9-encoder
feat(encoder): RDO recursive partition decision (NONE vs SPLIT) with trial-encode rollback
vp9-encoder
feat(encoder): RDO intra mode decision (D + lambda*R) replacing SAD
vp9-encoder
feat(encoder): RD cost infrastructure (prob_cost, cost_tree, rdmult, rd_cost, sse)
vp9-encoder
docs(plan): Phase 2c — Lagrangian RDO (mode + partition decision)
vp9-encoder
Merge Phase 2b: all 10 keyframe intra modes + hybrid ADST transform + SAD mode selection (bit-exact recon==vpxdec)
vp9-encoder
docs(encoder): refresh stale predict/config comments to reflect all-10-modes + SAD selection (final review F1)
vp9-encoder
test(encoder): Phase 2b gate — fuzz intra-mode selection + 1080p-shaped + vpxdec guard
vp9-encoder
feat(encoder): intra mode context + SAD mode selection + KF mode coding (recon==vpxdec)
vp9-encoder
feat(encoder): 6 directional intra predictors (D45/D135/D117/D153/D207/D63), recon==vpxdec
vp9-encoder
feat(transform): hybrid ADST (fht/iht 4/8/16) + row/col scan + get_tx_type; V/H/TM now bit-exact
vp9-encoder
docs(plan): Phase 2b Task 2b — hybrid ADST transform subsystem (plan gap from Task 2a)
vp9-encoder
feat(encoder): V/H/TM intra predictors + forced-mode test hook
vp9-encoder
refactor(encoder): n×n prediction buffer pipeline (DC parity, bit-exact)
vp9-encoder
docs(plan): Phase 2b — all 10 intra modes + selection + KF mode coding
vp9-encoder
Merge Phase 2a: recursive partitioning + size-generic block encoding + 8-aligned edge DC prediction (bit-exact recon==vpxdec for arbitrary sizes)
vp9-encoder
test(encoder): Phase 2a gate — fuzz arbitrary sizes + 1080p-shaped frame, recon==vpxdec
vp9-encoder
test: remove scratch zz_dump debugging harness (Task 3 review M3)
vp9-encoder
fix(encoder): edge replication clamps to 8-aligned buffer dims (Task 3 complete)
vp9-encoder
feat(encoder): recursive partition + edge-replication DC prediction (Task 3, partial)
vp9-encoder
refactor(encoder): size-generic encode_block; keyframe SB uses it (64x64 regression green)
vp9-encoder
style: rustfmt partition debug_assert
vp9-encoder
test(partition): add update() coverage + debug_asserts for no-panic contract
vp9-encoder
feat(encoder): partition primitives (context, subsize, edge logic, write_partition)
vp9-encoder
docs: Phase 2a implementation plan (recursive partition + arbitrary sizes)
vp9-encoder
merge: Phase 1 — minimal correct keyframe encoder
vp9-encoder
fix(header): write_tile_info MI unit is 8px (div_ceil(8)); refresh crate doc
vp9-encoder
refactor: move vpxdec test harness out of library into tests/common
vp9-encoder
test(encoder): Task 8 — edge-SB sizing fix + stability fuzz
vp9-encoder
docs(encoder): update keyframe module doc for 32x32 chroma + DC prediction
vp9-encoder
fix(encoder): chroma uses one TX_32X32 per plane for 64x64 (not 4x16x16)
vp9-encoder
feat(encoder): interleaved encode+reconstruct with per-block DC prediction
vp9-encoder
fix(quantize): TX_32X32 log_scale (decoder dequant >>1); DC dequant verified -8190 vs true -8191
vp9-encoder
fix(encoder): correct pareto + neighbor-context off-by-one in tokenizer; multi-coeff frame decodes in vpxdec
vp9-encoder
feat(encoder): coefficient tokenization + entropy context; single non-skip block decodes in vpxdec
vp9-encoder
feat(encoder): keyframe compressed header + skip-only encode; MILESTONE A (uniform frame decodes in vpxdec)
vp9-encoder
feat(encoder): syntax enums + keyframe uncompressed header writer
vp9-encoder
docs(tables): honest provenance for custom coef tree + fix skip-probs source file
vp9-encoder
feat(tables): keyframe mode/coef/aux probability + tree tables (verified vs libvpx)
vp9-encoder
fix(test-support): unique temp filenames for parallel vpxdec calls
vp9-encoder
feat(container): IVF writer + vpxdec test harness
vp9-encoder
docs: Phase 1 implementation plan (minimal correct keyframe)
isolarium
Bump isolarium-idp version
vp9-encoder
merge: Phase 0 — foundation & verified primitives (clean rebuild)
vp9-encoder
fix(phase0): close final-review data-dependent panics (q u8, slice asserts, border guard), gate BoolReader to test, set MSRV 1.82
isolarium
Add docker login command in isolarium core readme file
vp9-encoder
fix(transform): match libvpx fdct/idct scaling exactly
vp9-encoder
feat(transform): forward/inverse DCT and quantize/dequantize with roundtrip tests
vp9-encoder
test(tables): add cospi spot-check + rounding test (close spec gap)
vp9-encoder
feat(tables): cospi constants, quant lookup, default scan orders
vp9-encoder
fix(bitio): bool coder carry-panic, bitstream-exact finish, dedup norm
vp9-encoder
feat(bitio): VP9 BoolWriter + verification BoolReader with roundtrip tests
vp9-encoder
fix(bitio): make put_bits total for n>32 (no shift-overflow panic)
vp9-encoder
feat(bitio): MSB-first BitWriter for uncompressed header
vp9-encoder
feat(frame): YUV420 Frame/Plane model with replicated borders
vp9-encoder
chore: refresh CLAUDE.md/AGENTS.md for clean rebuild; untrack runtime scratch
vp9-encoder
chore: clean crate skeleton with module layout and CI
vp9-encoder
chore: snapshot prototype before clean rebuild
vp9-encoder
docs: Task 1 also removes throwaway tests/examples for a clean gate
vp9-encoder
docs: fix Phase 0 quantize test (deterministic eob)
vp9-encoder
docs: Phase 0 implementation plan (foundation & primitives)
vp9-encoder
docs: pin target hardware, 8 Mbps cap, remote-desktop quality bar
vp9-encoder
docs: production-ready VP9 encoder design spec
isolarium
fix(rusty-auth-gateway): use relative paths for branding assets
isolarium
Bump config-reloader version
isolarium
feat(assets): use isolarium-proxy for static assets
isolarium-idp
fix(blueprints): update tenant branding on existing tenant and hash-based re-apply
isolarium
Bump tsdb and collector versions
isolarium
Remove embedded nfs server, disable nfs-provisioner by default, move from kind to k3d
isolarium
Add isolariu-metrics-agent
isolarium
add assets
isolarium-streaming
cleanup: strip debug leftovers from client + container
isolarium-streaming
backend: axum 0.8 + xkbcommon 0.9, drop debug instrumentation
isolarium-streaming
docker: self-contained multi-stage build, slim runtime
isolarium
Bump version for isolarium-tsdb and collector
isolarium
Simplify idler
isolarium-streaming
Reapply "wayland(ui): hide local browser cursor over the canvas"
isolarium-streaming
Revert "wayland(ui): hide local browser cursor over the canvas"
isolarium-streaming
wayland(ui): hide local browser cursor over the canvas
isolarium-streaming
wayland(audio): minimal pulse default.pa + propagate PULSE_SERVER
isolarium-streaming
wayland(wire): swap main.rs to wayland backend, drop X11
isolarium-streaming
wayland(clipboard): WaylandClipboardManager via wlr-data-control
isolarium-streaming
wayland(input): virtual-keyboard + virtual-pointer via sway
isolarium-streaming
wayland(capture): implement zwlr_screencopy_v1 in WaylandHandler
isolarium-streaming
wayland(skeleton): add wayland-client deps + WaylandHandler stub
isolarium-streaming
wayland(infra): replace Xorg with cage + ozone-platform=wayland
isolarium-streaming
fix(vp9): robust packetization + 30fps target + MIT-SHM enabled
isolarium-streaming
feat: switch H.264->VP9, fix libvpx lookahead lag, target 60fps
isolarium
feat(blueprints): add IDP proxy provider, tenant branding, and russian stage names
isolarium-idp
glassmorphism panel fallback without background image
isolarium-idp
run cargo fmt and fix comment language
isolarium-idp
feat(admin,blueprints): add request path to policy tester and improve blueprint updates
isolarium
Use new auth-aware routing feature from isolarium-proxy
isolarium-proxy
Implement auth-aware route matching
isolarium
Add build scripts for isolarium-apps
isolarium
Rename pingora-proxy to isolarium-proxy
isolarium
Fix invalid app resource creation
isolarium-idp
restyle(auth): unify login/logout page layout and branding colors
isolarium-idp
fix(auth): preserve next redirect after logout and sign-in
isolarium-idp
allow changing user on password stage
isolarium-proxy
Rename project to isolarium-proxy
isolarium-idp
fix(admin): correct help text for policy and property mapping forms
isolarium
Bump isolarium-idp version
isolarium-idp
feat(admin): add help guide cards to all admin list pages
isolarium-idp
Bump package version
isolarium-idp
Fill missing fields in admin for all edit forms
isolarium-idp
Increase logo size in branding section
isolarium-idp
Fix invalid path handings in policies
isolarium-idp
Add embedded outpost
isolarium-idp
Fix invalid forward auth usage in admin
isolarium
fix(admin-ui): resolve trailing slash 404, force image pull, add tests & translate comments
isolarium
Add isolarium-apps MVP, return network policies and app proxy
isolarium-idp
align proxy/forward auth with authentik architecture
isolarium
Bump isolarium-core package versions
isolarium
Fix redundant restarts for isolarium-idp
isolarium
Add isolarium-admin-ui MVP
isolarium
Add embedded nfs server
isolarium
Filter apps in idler to exclude non-apps
isolarium
Fix invalid header in isolarium-ui
isolarium
Add missing rbac ingress permissions for gateway
isolarium
Implement improved app controller with crds
vp9-encoder
phase 1/2: context probs + intra prediction (DC/V/H/TM) + directional stubs
vp9-encoder
phase 1: core primitives - BitWriter, BoolCoder, Frame/Plane abstractions
isolarium-idp
admin base-path redirects, blueprint IDs, and test coverag
isolarium-idp
fix admin redirects base path, preserve blueprint IDs
vp9-encoder
init: project skeleton with nix flake, cargo, git
isolarium-streaming
chore: demote per-frame capture log from info to debug
isolarium-streaming
feat: add FPS counter gated by NORDP_SHOW_FPS env var
isolarium-streaming
fix(docker): reliable PulseAudio startup and graceful audio fallback
isolarium-streaming
Add clipboard and audio
isolarium-streaming
Improve quality
isolarium
Add isolarium-tsdb-collector to isolarium-core
isolarium
Upgrade pingora-proxy version in isolarium-core
isolarium-proxy
Cleanup, fix tests, improve logging
isolarium-idp
evaluate application policies for proxy providers
isolarium
Remove redundant manifests
isolarium
Add missing httproute rbac for isolarium-app-controller
isolarium
Add instruction for isolarium-core local deployment
isolarium
Add local kind config add node affinity to all components of isolarium-core
isolarium
Upgrade tsdb version in isolarium-core
isolarium
Add nfs-subdir-external-provisioner to isolarium-core
isolarium
Fix invalid response handing in isolarium-idler
isolarium
Handle logout in isolarium-ui correctly
isolarium
Upgrade packages in isolarium-core
isolarium-idp
Rework base path handings
isolarium-idp
Finish invalid session handing
isolarium-idp
Handle conflicts on session id
isolarium-idp
Implement invalidation flow
isolarium
Handle new idp endpoint in isolarium-ui
isolarium
Add blueprint for admin creation in isolarium-core
isolarium
Apply fixes for isolarium-idp in isolarium-core
isolarium-idp
Allow to customize base path
isolarium-idp
Fix invalid client ip handing in rate limiting
isolarium-idp
Add missing admin locale keys
isolarium-idp
Add trusted cirds to bypass rate limits
isolarium-idp
Remove redundant docs dir
isolarium
Add trial checker to isolarium core
isolarium-idp
Remove redundant dependency from glibc in dockerfile
isolarium
Add experimental isolarium-core
isolarium-idp
Attempt to fix invalid cache usage in CI/CD
isolarium-proxy
Attempt to fix invalid cache usage in CI/CD
isolarium-idp
Apply blueprints on start
isolarium-idp
Use glibc version of tailwincss in dockerfile
isolarium-idp
Add pagination and search in admin
isolarium-idp
Add helper blocks to all json fields
isolarium-idp
Add selects instead of simple char fields to admin
isolarium-idp
Implement complete flow auth endpoints
isolarium-idp
Improve localization
isolarium-idp
Use correct cursor pointer for all buttons
isolarium-idp
Sync styles for all templates
isolarium-idp
Refactor crud endpoints
isolarium-idp
Add full rbac implementation
isolarium-idp
Implement radius source
isolarium-idp
Make email field optional
isolarium-idp
Add more entities for blueprints
isolarium-proxy
Fix bug with httproute priority and trailing slashes
isolarium-idp
Build tailwindcss bundle locally and embed it into binary
isolarium-idp
Embed locales inside binary and remove extra copies in dockerfile
isolarium-proxy
Fix invalid gateway api resoirce versions in all files
isolarium-idp
Implement authentik-like policy engine
isolarium-proxy
Bump package version
isolarium-proxy
Fix invalid redirect in kubernetes external auth
isolarium-idp
Rewrite policy engine from json to rustpython
isolarium-idp
Remove all allow dead code definitions
isolarium-idp
Implement full policy system
isolarium-proxy
Run cargo fmt through all files
isolarium-proxy
Fix invalid httproute resource version and add extra logging
isolarium-proxy
Improve support for redirects in external auth filter
isolarium-idp
Actualize readme and .env.example
isolarium-idp
Implement better blueprint support
isolarium
Improve double-browser check
isolarium-proxy
Improve dockerization
isolarium-proxy
Upgrade package version
isolarium-proxy
Finish implementation for external auth gep
isolarium-proxy
Fix invalid process spawning
isolarium-proxy
Return missing lock file and add dockerignore
isolarium-proxy
Add CI/CD pipeline
isolarium-proxy
Add metrics for ws connections and common requests
isolarium
back browsers versions and remove excess files
isolarium
comeback RESTARTAPP=true and update versions
isolarium-idp
Upgrade rust toolchain in nix flake and dockerfile
isolarium-idp
security: fix CORS, add IP rate limiting, rotate session IDs on login, fix flow engine race
isolarium-idp
Run cargo fmt through all files
isolarium-idp
Improve attribute testing in admin UI
isolarium-idp
Improve error visualizing in UI
isolarium-idp
fix(admin): show database errors on create/update/delete instead of silent redirects across all admin handlers
isolarium-idp
fix(admin/applications): show database error on create instead of silent redirect
isolarium-idp
fix(logging): log 5xx as ERROR and 4xx as WARN instead of INFO for all requests
isolarium-idp
fix(types): add #[serde(transparent)] to Id<T> to fix axum Path extraction
isolarium-idp
refactor(auth/oidc/federation): apply ResultExt to csrf, middleware, social handlers, and OIDC token/userinfo
isolarium-idp
refactor(api): clean up remaining INTERNAL_SERVER_ERROR patterns in launcher, outpost, totp
isolarium-idp
refactor(api/rest): convert remaining inline map_err patterns to ResultExt
isolarium-idp
refactor(api/rest): comprehensive ResultExt conversion across all 18 REST handler files
isolarium-idp
refactor(api/auth): apply ResultExt::map_internal_err to remaining auth handlers
isolarium-idp
refactor(error-handling): replace remaining anyhow::bail! with thiserror enums in blueprints and outpost
isolarium-idp
refactor(api/admin): apply ResultExt::map_internal_err to ldap/oauth/outpost/radius providers
isolarium-idp
refactor(api/rest): bulk apply ResultExt::map_internal_err across all REST handlers
isolarium-idp
refactor(api): introduce ResultExt::map_internal_err and apply to totp, password_reset, ldap_sources
isolarium-idp
refactor(session): extract set_session_user helper to deduplicate session insert logic
isolarium-idp
refactor(api): simplify Result→Option error handling with map_err+ok_or in totp, config, password_reset
isolarium-idp
refactor(outpost): replace expect with ? in HTTP client build
isolarium-idp
refactor(api/flows): add Id<Execution> marker and fix incorrect Id<Flow> on execution paths
isolarium-idp
refactor(admin/proxy_providers): use Into<String> instead of as_str().to_string()
isolarium-idp
refactor(api/sessions): add Id<Session> newtype and fix incorrect Id<Flow> usage in REST sessions
isolarium-idp
refactor(error-handling): apply thiserror to social providers, outpost/tenant repos, and LDAP sync
isolarium-idp
refactor(property_mapping): replace anyhow::Error::msg(format!...) with structured thiserror enum
isolarium-idp
fix(admin): add missing .as_str() on Id<T> for LDAP/RADIUS/proxy providers
isolarium-idp
refactor(api/admin): apply Id<T> newtypes to all admin path parameters
isolarium-idp
refactor(api/rest): apply Id<T> newtypes to all remaining path parameters
isolarium-idp
refactor(ldap_source): apply thiserror for LdapSourceError
isolarium-idp
refactor(api): apply Id<T> and Slug newtypes to path parameters
isolarium-idp
refactor(api/users): apply Id<User> newtype to path parameters
isolarium-idp
refactor(all): apply rust idioms aggressively
isolarium-idp
Refactor using common rust patterns
isolarium-idp
Improve localization
isolarium-idp
Fix invalid user creation form
isolarium-idp
Add better dockerization
isolarium-idp
Improve creation of first sqlite db file
isolarium-proxy
Implement external auth
isolarium-idp
Implement forward auth and session revokation
isolarium-idp
Migrate to seaorm and add postgresql support
isolarium-proxy
Add fallback feature
isolarium
update versions to latest
isolarium-idp
Add better branding customization and improve error visualizing
isolarium-idp
Implement csrf protection
isolarium-idp
Harden all little issues in codebase
isolarium-idp
Run cargo fmt through all files
isolarium-idp
Remove default credentials hint
isolarium-idp
Improve branding configuration
isolarium-idp
Run cargo fmt through all files
isolarium-idp
Add localization
isolarium-idp
Add custom launch url for apps
isolarium-idp
Improve launcher page
isolarium-idp
Load .env from current dir
isolarium-idp
Run cargo fmt through all files
isolarium-idp
Add swagger UI
isolarium-idp
Run cargo fmt through all files
isolarium-idp
Implement additional ldap source features
isolarium-idp
Improve attribute passing in proxy outpost
isolarium-idp
Add possibility to test mappings
isolarium-idp
Run cargo fmt through all files
isolarium-idp
Improve error handing in UI
isolarium-idp
Run cargo fmt through all files
isolarium-idp
Remove redundant methods
isolarium-idp
Fix bug with user group assignment
isolarium-idp
Implement user attributes mappings
isolarium
Fix bug with double spawning browsers
isolarium-idp
Cleanup
isolarium-idp
Add LDAP source sync
isolarium-idp
Do not use js for flows
isolarium-idp
Add email verification
isolarium-idp
Implement proper outposts
isolarium-idp
Better implementation for flow/stage bindings
isolarium-idp
Change configuration from toml to env
isolarium-idp
Fix branding configuration
isolarium-idp
Fix invalid warning about proxy outpost
isolarium-idp
Fix invalid endpoints in UI
isolarium-idp
Add proper log in/log out
isolarium-idp
Outposts, providers implementation and so on
isolarium-idp
Run cargo fmt through all files
isolarium-idp
Continue implementation
isolarium-idp
Implement edits and deletes for all entities
isolarium-idp
Add rustpython for attribute mapping
isolarium-proxy
Cleanup unused code
isolarium-idp
Implement better admin panel
isolarium-idp
First implementation
isolarium
And one more attempt to fix browser profile issue
isolarium-streaming
Switch from Google Chrome to Chromium
isolarium-streaming
docs: add AGENTS.md in English for AI agents
isolarium-streaming
feat: remove hardcoded RDP credentials
isolarium-proxy
Add extended gateway api support
isolarium-proxy
Simplify config reload
isolarium-proxy
Implement ClusterIP implementation for gateway api controller
isolarium-proxy
Include k8s feature by default
isolarium-streaming
feat: QOI codec + XSync + full-frame fallback for screen capture
isolarium-streaming
perf: tile-based diff for X11 screen capture
isolarium-streaming
refactor: encapsulate X11 SHM unsafe code in ShmSegment
isolarium-streaming
style: apply cargo fmt and fix clippy warning
isolarium-streaming
refactor: split monolithic main.rs into modules
isolarium-streaming
refactor: rename start.sh to docker-entrypoint.sh
isolarium-streaming
chore: cleanup build artifacts and vendor dependency
isolarium-streaming
chore: cleanup repository artifacts
isolarium-streaming
refactor: drop our tile diff, let IronRDP do all the diff/encode work
isolarium-streaming
fix: drop x11rb allow-unsafe-code feature so libxcb1-dev isn't needed
isolarium-streaming
refactor: replace localhost TCP loopback with in-memory duplex pipe
isolarium-streaming
chore: remove unused dependencies, ports, env vars, and audio plumbing
isolarium-streaming
perf: emit one bounding-box BitmapUpdate per frame instead of per-row strips
isolarium
One more attempt to fix browser profile issue
isolarium-streaming
perf: parallelize tile diff with rayon, merge horizontal strips, TILE=128
isolarium-streaming
build: rebuild WASM bundle with QOI codec support
isolarium-streaming
perf: use MIT-SHM, BgrX32, and bounded channel in display capture
isolarium-streaming
Revert "refactor: replace IronRDP+RDP with JPEG-over-WebSocket video streaming"
isolarium-proxy
Init project
isolarium-streaming
refactor: replace IronRDP+RDP with JPEG-over-WebSocket video streaming
isolarium
Bump image versions in browser-ui
isolarium
Attempt to fix profile crash errors
isolarium
Exclude every namespace from service mesh
isolarium
Enable keepalive again for rusty-auth-gateway to fix websocket connections
isolarium
Fix invalid case for browser routing
isolarium-streaming
feat: web client, keyboard fix, tile dirty detection, input latency fix
isolarium
Fix invalid resources in collect-debug-archive.sh script
isolarium-streaming
refactor: replace FreeRDP with ironrdp-server + WebSocket proxy
isolarium
Improve debug archive collection and include it in bundle
isolarium
Implement trial-checker component
isolarium
Add collect-debug-archive script
isolarium-streaming
refactor: remove X11 capture, use only IronRDP backend
isolarium-streaming
docs: update README with current architecture and performance
isolarium-streaming
fix: audio capture and playback
isolarium-streaming
fix: add MouseWheel handling in X11 capture
isolarium-streaming
feat: restore 1920x1080 resolution, optimize with libjpeg-turbo-rs, fix clipboard channel, add WebSocket debug logging
isolarium-streaming
Optimize FPS to ~40 and fix keyboard input
isolarium-streaming
Add X11 audio capture with PulseAudio
isolarium-streaming
Add X11 clipboard integration with arboard
isolarium-streaming
Update flake.nix for X11 development
isolarium-streaming
Update README with X11 direct capture architecture
isolarium-streaming
Add XDamage fallback and optimize capture
isolarium-streaming
Force continuous frame capture for testing
isolarium-streaming
Add X11 direct capture backend
isolarium-streaming
feat: upgrade FreeRDP from 2.11.7 to 3.10.3 via bookworm-backports
isolarium-streaming
perf: move JPEG encoding to spawn_blocking to prevent blocking async runtime
isolarium-streaming
perf: add JPEG compression for frames, reduce FRAME_INTERVAL to 16ms, use createImageBitmap for hardware-accelerated decode
isolarium-streaming
security: isolate Chrome from /home/nordp, move profile to /tmp, disable FileSystemAccessAPI
isolarium-streaming
feat: add FPS counter, fix keyboard scancode mapping (e.code instead of keyCode)
isolarium-streaming
feat: working noRDP with FreeRDP shadow, Xorg dummy, input, frames streaming
isolarium-streaming
feat: replace xrdp with FreeRDP shadow server
isolarium-streaming
WIP: xrdp auto-start X session and region-based frame updates
isolarium-streaming
Add comprehensive README with setup instructions
isolarium-streaming
Add clipboard and audio support
isolarium-streaming
Fix IronRDP xrdp connection: TLS upgrade, slow-path updates, git dependencies
isolarium-streaming
Add xrdp, xorgxrdp, openbox to dev container for IronRDP testing
isolarium
Bump version for rusty-auth-gateway
isolarium-streaming
Add IronRDP async client integration with configurable RDP connection
isolarium-streaming
Update Rust to 1.95, fix Docker build with cache mounts, add test frame generator
isolarium-streaming
Initial noRDP implementation with Axum, WebSocket, and IronRDP
isolarium
Move config reloader to separated repo
isolarium-streaming
Initial flake and direnv setup
isolarium
Remove CI/CD pipelines
isolarium
Build docker images locally
isolarium
Add missing env variables for browser-ui resource creating
isolarium
Patch resources instead of ignoring in browser-ui
isolarium
Add useful commands to readme
isolarium
Bump browser-ui and browsers packages versions
isolarium
fix-profilebugs-for-browsers
isolarium
Rework config reloader
isolarium
Bump version for config reloader
isolarium
Fix BadRequest by using Patch::Merge instead of Apply in config reloader
isolarium
Bump version for config reloader
isolarium
Fix 404 on restart by using namespaced API for patch in config reloader
isolarium
Bump version for config reloader
isolarium
Handle 404 on restart as skipped, not error in config reloader
isolarium
Reduce config_changed log level to debug in config reloader
isolarium
Decrease replicas for config reloader
isolarium
Use vanilla deployment for browser-ui
isolarium
Remove explicit Knative support and filter managed resources for config reloader
isolarium
Fix invalid image ref for config-reloader
isolarium
Add CI/CD for config reloader
isolarium
Fix invalid registry in config-reloader zarf.yaml
isolarium
Fix bug with missing crds
isolarium
Refactor after code review
isolarium
Refactor browser-ui with new functionality
isolarium
Bump version for rusty-auth-gateway component
isolarium
Add note about nfs-common package in user installation guide
isolarium
Remove old pipelines
isolarium
Fix bad quality for video stream
isolarium
Fix invalid namespace for browser-ui reference grant
isolarium
Add note about minimum browser timeout
isolarium
Remove authentik, oauth2-proxy and radius-oidc-provider
isolarium
Remove kro and create resources manually
isolarium
Move grafana auth from authentik to rusty-auth-proxy
isolarium
Bump version of all browser images in zarf.yaml
isolarium
Implement kubernetes config reloader
isolarium
Switch SeaweedFS to NFS
isolarium
Remove redundant seaweedfs address for browser-ui
isolarium
Improve logging for browser-ui
isolarium
Upgrade and use new rusty-auth-gateway features
isolarium
Add CI/CD docker build caching
isolarium
Use background from browser-ui for rusty-auth-gateway
isolarium
Rewrite browser-ui to rust
isolarium
Add rusty-auth-gateway component
isolarium
Allow to delete pvc for browsers automatically
isolarium
Tune seaweedfs for better garbage collection
isolarium
Bump package and image versions
isolarium
Fix close-or-fold bug for browsers
isolarium
Fix invalid browser timeout and allow to configure it
isolarium
Bump package and image versions
isolarium
Use cookie per request for oauth2-proxy to fix 403 errors
isolarium
Allow to customize browser start url
isolarium
Change registry for knative queue
isolarium
Improve user installation guide
isolarium
Reduce quality to lower network usage
isolarium
Restart browser if it is closed
isolarium
Extend readme with useful notes
isolarium
Return possibility to login to authentik admin
isolarium
Temporaly disable ssl verify for oauth2-proxy
isolarium
Return browser proxy feature
isolarium
Fix invalid packages path in deploy-components script
isolarium
Remove knative resources requests
isolarium
Fix invalid deploy-components.sh packages path
isolarium
Fix typo in user installation guide
isolarium
Fix invalid logout
isolarium
Browser UI visual improvements
isolarium
Bump radius-oidc-provider package version
isolarium
Bump authentik package version
isolarium
Change authentik branding
isolarium
Rebrand radius-oidc-provider
isolarium
Login static resources over airgap environment
isolarium
Improve user installation guide
isolarium
Fix invalid scripts path in prepare-bundle.sh
isolarium
Move radius secret to manually edited variables
isolarium
Allow to configure browser resources
isolarium
Improve prepare-bundle.sh script
isolarium
Fix invalid capabilities for browsers
isolarium
Tune selkies settings for better performance
isolarium
Use radius oidc as default authentication flow
isolarium
Implement airgap installation
isolarium
Prepare CI/CD pipeline for building all images
isolarium
Wait for infrastructure installation before applying apps kustomization
isolarium
Wait for seaweedfs before creating authentik bucket
isolarium
Upgrade k3s to 1.35.3
isolarium
Move helmfile init command to start
isolarium
Fix victoria metrics first installation failure
isolarium
Disable discovery for oauth2-proxy
isolarium
Fix knarive warning in all kservices
isolarium
Bump image versions
isolarium
Handle any username in any case
isolarium
Mount host ssl certs for authentik
isolarium
Disable redundant selkies functions
isolarium
Fix invalid internal browser routing based on username
isolarium
Fix invalid nginx config
isolarium
Change way to load images to local registry
isolarium
Bump browser-ui version
isolarium
Add browser images for chromium gost and yandex browser
isolarium
Describe every value that should be changed in installation
isolarium
Bump browser-ui version
isolarium
Add victoria logs
isolarium
Use more strict internal routing based on username
isolarium
Implement radius oidc provider
isolarium
Add trial screen
isolarium
Configure browser-ui domain from configmap
isolarium
Fix knative local registry resolution
isolarium
Extend readme
isolarium
Remove dependency from team-73 registry
isolarium
Remove lldap
isolarium
Configure proxy using secret
isolarium
Fix grafana invalid oauth handing
isolarium
Add distributed architecture topology
isolarium
Add reverse proxy info to readme
isolarium
Disallow scaling to zero for browser-ui
isolarium
Connect authentik to seaweedfs
isolarium
Add LICENSE
isolarium
Add trial block and loader to waiting page
isolarium
Allow unverified email in oauth2-proxy and describe changing admin password in authentik
isolarium
README improvements, disabled proxy by default, disabled firefox in UI
isolarium
Replace dex with authentik
isolarium
Add proxy server support
isolarium
Fix browser waiting
isolarium
Configure knative revision retention
isolarium
Allow to switch domain name for browser-ui
isolarium
Replace kasmvnc to selkies
isolarium
Fix invalid domain and extend readme
isolarium
Change all domains
isolarium
Make grafana private and add correct browser readiness waiting
isolarium
Fix invalid browser routing
isolarium
Beautiful file storage
isolarium
Tiny restructure
isolarium
Istio instead of nginx and knative instead of vanilla service for browser-ui
isolarium
Replace browser-router with istio internal gateway
isolarium
A lot of fixes and improved browser ui
isolarium
Add manifests for browser ui and restructure
isolarium
Fill browser ui
isolarium
Knative
isolarium
Change istio peer authentication policy
isolarium
Refactor file structure
isolarium
Keda, istio and grafana under subpath
isolarium
Second version
isolarium
Init
Оставьте заявку и мы свяжемся с вами для обсуждения вашего проекта
Мы получили вашу заявку и свяжемся с вами в ближайшее время.