XIDER / TARPED

OWNER-AUTHORIZED · WINDOWS + macOS

One command path.
Owner stays in control.

XIDER is source code for managing devices you own or are explicitly authorized to manage. A Telegram bot checks access, routes a signed MQTT command, and the selected endpoint agent returns its result.

Source version 4.3.0 · a source number is not proof of an installed or published package.

01 / COMMAND ROUTEDOCUMENTED FLOW
  1. 01OwnerTelegram account · access checkedYOU
  2. 02TG-BOT-SERVERRoles, grants, command routingBOT
  3. 03MQTT brokerTLS transport · signed messagesTLS
  4. 04Endpoint agentSelected device performs the commandWINDOWSmacOS

Submission is not proof of completion. The agent must return a result.

02 endpoint paths06 interface voices01 owner-defined access boundary

THE SYSTEM, IN PARTS

A small control plane.
Clear jobs for each piece.

Each component has a named responsibility; interface wording does not change access rights or command behavior.

  1. 01

    TG-BOT-SERVER

    Telegram interface, role checks, device controls, and release catalog.

    CONTROL
  2. 02

    XGENT-WDS + XGENT-MCS

    Windows and macOS agents that receive an authorized command and report a result.

    ENDPOINTS
  3. 03

    Guard Keeper

    Reports supervisor state and can recover its agent according to local configuration. It cannot wake an offline or powered-off computer.

    SUPERVISOR
  4. 04

    X-DOCK · X-LEDGER

    Signed agent-update flow and a catalog of GitHub releases. Selected versions require owner confirmation and signature checks.

    RELEASES
  5. 05

    X-LEX

    Six interface voices: X-TECH, X-PERSON, X-PIKMI, X-TARPED, X-CORE, and X-ADAM. Wording only; permissions stay the same.

    INTERFACE

TRUST IS A DESIGN CONSTRAINT

Useful control.
Honest limits.

Designed for the owner’s devices or devices they are explicitly authorized to manage. Not a way around operating-system consent.

A / ACCESS

Rights are explicit

The protected owner is defined by configuration. Other accounts can be users, guests, or blocked; user access is scoped by device and action grants.

MQTT uses TLS and HMAC-signed messages. Payload encryption depends on ENCRYPT_PAYLOAD and is not assumed active in every local setup.

B / REALITY

Status is not certainty

An online indicator means a recent heartbeat, not guaranteed availability. IP-based location is approximate, not GPS.

Camera, microphone, screen capture, and other protected capabilities need an authorized command and applicable OS permission. Sending a command alone proves nothing about physical completion.

SOURCE SNAPSHOT4.3.0

What has—and has not—been verified.

IN THIS REPOSITORY

Source code, release history, and offline test fixtures.

NOT CLAIMED HERE

Live Telegram, MQTT, production VPS, or physical Mac/Windows acceptance.

NEXT EVIDENCE

Check the release notes and acceptance checklist for version-specific results.

Browse release evidence