mirror of
https://github.com/DeusData/codebase-memory-mcp.git
synced 2026-11-10 09:13:53 +08:00
Two failure classes stay invisible to the container legs: kernel-real Windows ACL/token/owner semantics (Wine only compile-checks) and the GitHub-runner macOS environment (a developer Mac differs in temp ancestry, ACLs, and policies - runner-only failures never reproduce locally). Add real-VM legs for both, strictly opt-in: run.sh detects the tooling and the named VM and prints setup guidance with a distinct exit code when absent - explicitly requested legs are never silently skipped. windows-vm: UTM + CrystalFetch (both free), driven over ssh; the in-VM bootstrap (vm/windows-bootstrap.ps1) installs the CLANG64 toolchain, enables sshd, and mirrors the runner's NoDefaultAdminOwner=0 policy so freshly created objects are owned by BUILTIN\Administrators - the exact class the daemon's owner gates must survive. mac-vm: Cirrus Labs' runner-equivalent image via tart (free OSS), booted headless, worktree synced over key-based ssh, scripts/test.sh executed in the runner-class environment. vm/README.md documents both setups end to end. Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>