feat(hosts): remote computers over SSH, placement, privacy tiers and accounts

[BIackFIame]

Goal

Run terminals and agents on your own servers over SSH, choose a server automatically, and keep data-handling rules and several accounts per provider consistent across computers.

Behavior

• Remote hosts use the system OpenSSH client in BatchMode, so CanvasTTY never stores passwords. They cover connectivity checks, remote terminals, CLI discovery in one SSH round trip, light load and memory metrics, and mapping local project folders to server folders.
• Placement: hard filters (reachability, provider rules, workspace mapping, capacity) run before ranking by sessions, load per core and free memory. A probe checks whether each provider's API answers from that server, so providers blocked in a region are not placed there.
• spawn_agent can request a host, so subagents may run remotely.
• Privacy tiers D0–D3 are enforced at spawn time, with host confidentiality ceilings and repository path policies.
• Accounts: several accounts per provider with subscription tiers, each bound to its own computer.
• Security fixes: lease supersession, an authentication hang, and SSH option injection through host fields (hosts starting with - or containing whitespace are rejected).

Verification

• npm run typecheck passed. Full suite: 907/907; Even G2 companion tests (npm run test:even): 47/47.
• Live, on the final state of this series: three fresh Ubuntu servers over SSH. A remote terminal opened in the mapped folder, and Claude launched on a server. Placement skipped an unreachable server and chose the least-loaded one. A server in a region where Anthropic, OpenAI and xAI APIs are blocked was correctly excluded for those providers.

Series

Each part is one commit on top of the previous one. Please merge them in order. Until #64 is merged, GitHub also shows the earlier parts here; review only the top commit 590d79f (Commits tab → last commit).

Part	PR	Scope	Lines
1	#63	Providers: Cursor, MiniMax Code, Devin, Antigravity	+579/−90
2	#64	API keys, API profiles, agent delegation (MCP)	+4275/−63
3	#65	Remote servers, placement, privacy tiers, accounts	+6620/−40
4	#66	Isolation: capsules, worktrees, containers	+5508/−839
5	#67	ACP, connection settings, remote containers	+6827/−563
6	#68	Project context and learning	+6148/−370
7	#69	Routing, reasoning effort, server preparation, sign-in	+3122/−467
8	#70	Open issues and safe fixes from open PRs	+306/−58

Compatibility with open upstream PRs

integration/stack-with-open-prs is this whole stack with #54–#62 merged on top and every conflict resolved. On that branch both TypeScript checks, 1492/1492 tests, npm run test:even (47/47) and electron-vite build pass.

• fix(even-g2): isolate transport keys per paired device #54, fix(even-g2): align local-network Settings card layout #56, fix(canvas): honor region bounds when snapping resize #57, fix(canvas): let sticky note editors scroll their own text #59, fix(plugins): prevent stale version writes during updates #60 merge cleanly.
• fix(settings): keep rejected writes out of live settings #58: conflicts in SettingsStore.ts. Keep this stack's store: it already serializes every write and publishes a value only after the disk write succeeds. fix(settings): keep rejected writes out of live settings #58's new tests pass against it unchanged.
• fix(window): restore state events after macOS Dock reopen #61: mechanical. registerIpc returns the window observer; keep both sides. This stack's IPC tests stub both window-state helpers, so they pass in either merge order.
• fix(even-g2): require explicit grant for answer capture #55:
  • TerminalManager.ts: keep this stack's launch structure. The answer-capture grant must also reach the prepared and measured-grid first start, because every real agent launch goes through that path.
  • hook-helper.mjs: keep this stack's 512 KiB input read and safe cut, and gate the answer on fix(even-g2): require explicit grant for answer capture #55's grant.
  • Fix and tests: 64ef294 (grant through prepared starts, feat(updates): add GitHub release updates across platforms #62 follow-ups) and c2dd726 (hook test under the grant).
• feat(updates): add GitHub release updates across platforms #62: whichever of this stack and feat(updates): add GitHub release updates across platforms #62 lands second needs the same commit:
  • The restore step in shutdownForUpdate must clear shuttingDown. Otherwise no session can start after a failed update; feat(updates): add GitHub release updates across platforms #62's own test fails without this.
  • Restore only live sessions, using the orphan-subagent rule.
  • Refuse to install while a server is being prepared or a capsule test runs.
  • Open About through SettingsLocation.

I will rebase this stack onto whichever of these lands first.

🤖 Generated with Claude Code

[BIackFIame]

Заменено: функции вынесены в плагины canvastty-plugin-* (environments, assistant, accounts, context, acp), точки расширения ядра — в #81–#88. Подробно — в комментарии в #67: #67 (comment)