overthinkos/sway-browser-vnc
ov-selkies/skills/sway-browser-vnc/SKILL.md
Minimal Sway desktop with VNC remote access and Chrome browser. Use when working with VNC desktop containers or testing the sway-desktop-vnc composition.
testing
Updated May 6, 2026
$ install --global
skillsauthnpx skillsauth add overthinkos/overthink-plugins sway-browser-vncInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 6, 2026, 7:00 AM130.9s1 file scanned
SKILL.md
- name:
- sway-browser-vnc
- description:
- |
sway-browser-vnc
Minimal Sway desktop with VNC (wayvnc on port 5900) and Chrome (CDP on port 9222).
Image Properties
| Property | Value | |----------|-------| | Base | fedora | | Layers | agent-forwarding, sway-desktop-vnc, dbus, ov | | Ports | 5900, 9222, 9224 |
Quick Start
ov image build sway-browser-vnc
ov start sway-browser-vnc
ov status sway-browser-vnc # Shows all probes: supervisord, cdp, dbus, ov, sway, vnc, wl
ov eval vnc status sway-browser-vnc
ov eval wl screenshot sway-browser-vnc screenshot.png
D-Bus and Notification Support
This image includes dbus and ov layers, enabling:
ov eval dbus notify— native Go D-Bus notifications via in-container ov binaryov eval dbus list/call/introspect— full D-Bus interactionov cmd— single command execution with desktop notification on completionov tmux cmd— tmux command sending with notificationov status— supervisord, dbus, and ov probes
ov eval dbus notify sway-browser-vnc "Build Complete" "Image built successfully"
ov cmd sway-browser-vnc "make test" # Notifies on completion
ov eval dbus list sway-browser-vnc # List all D-Bus services
The notification daemon (swaync) is included via the sway-desktop metalayer.
Overlays
Fullscreen overlays for recording (via wl-overlay, included in sway-desktop):
ov eval wl overlay show sway-browser-vnc --type text --text "INTRO" --name title
ov eval wl overlay show sway-browser-vnc --type lower-third --text "Speaker" --subtitle "Role" --name lt
ov eval wl overlay show sway-browser-vnc --type countdown --seconds 3 --name cd
ov eval wl overlay show sway-browser-vnc --type highlight --region "430,290,510,50" --name hl
ov eval wl overlay show sway-browser-vnc --type fade --color black --name outro
ov eval wl overlay hide sway-browser-vnc --all
All overlay types render with true RGBA compositor transparency. See /ov-advanced:wl-overlay for the full recording workflow.
Recording
Desktop video recording via wf-recorder (included in sway-desktop):
ov eval record start sway-browser-vnc -n demo --mode desktop
# ... interact ...
ov eval record stop sway-browser-vnc -n demo -o demo.mp4
Use as Selkies Remote Desktop Client
sway-browser-vnc can act as a test client for selkies-desktop, simulating how a real user would connect via browser:
# Both containers must be running on the ov bridge network
ov start sway-browser-vnc
ov start selkies-desktop
# Open selkies URL in sway-browser-vnc's Chrome
ov eval cdp open sway-browser-vnc "https://ov-selkies-desktop:3000"
# Interact with the remote desktop:
# Mouse: CDP Input.dispatchMouseEvent on the Selkies tab (with ~0.82x coordinate scaling)
# Keyboard: ov eval vnc type sway-browser-vnc "text" (passthrough via SPA's overlayInput)
# Screenshots: ov eval vnc screenshot sway-browser-vnc (shows full client desktop with stream)
# ov eval cdp screenshot sway-browser-vnc $TAB (shows only the stream content)
Key limitations when using as a client:
- Super key consumed by sway (can't trigger remote labwc keybinds like Super+e)
- Ctrl+T/W consumed by local Chrome (open/close tabs locally, not remotely)
- Clipboard permission dialog appears on first connection — dismiss with
ov eval vnc key Returnor CDPBrowser.grantPermissions
See /ov-selkies:selkies-desktop for detailed SPA interaction documentation.
Test Coverage
Latest ov eval live sway-browser-vnc run: 84 passed, 0 failed, 1 skipped
(chrome-devtools-mcp-port references ${HOST_PORT:9224} which isn't
mapped here — correct skip behavior).
Covers all 19 transitive layers: wayvnc (VNC), sway (compositor),
chrome-sway, xdg-portal, waybar, swaync, pavucontrol, thunar,
xfce4-terminal, pipewire, wl-screenshot-grim, wl-overlay, wf-recorder,
desktop-fonts, fastfetch, asciinema, tmux, dbus, ov. Deploy-scope: VNC
port 5900 reachable, Chrome CDP on port 9250→9222 with /json/version
200. Image-scope: sway + wayvnc both RUNNING under supervisord.
Related Skills
/ov-selkies:sway-desktop-vnc,/ov-selkies:sway,/ov-selkies:wayvnc,/ov-selkies:chrome-sway,/ov-selkies:xdg-portal,/ov-foundation:dbus,/ov-foundation:ov,/ov-foundation:agent-forwarding/ov-build:eval— declarative testing framework (parent router forov eval cdp|wl|dbus|vnc|mcp)/ov-advanced:vnc— VNC automation on this image/ov-advanced:cdp— Chrome automation (CDP on host port 9250)/ov-advanced:wl— Wayland input/windows/clipboard (sway subgroup for compositor control)/ov-advanced:dbus— D-Bus notifications via in-containerovbinary/ov-build:mcp— the image inherits 2 deploy-scopemcp:checks from thechrome-devtools-mcplayer (ping + list-tools assertingnavigate_page/take_screenshot).ov eval live sway-browser-vnc --filter mcpruns them; note the port-publishing gotcha — if yourdeploy.ymlhas an explicitports:override that predateschrome-devtools-mcp, port 9224 may not be published. See/ov-build:mcpfor the fix.
Related Images
selkies-desktop— browser-accessible remote desktop (can be accessed from sway-browser-vnc's Chrome)
Related
/ov-build:image— image family umbrella (image:entries inoverthink.yml, build/validate/inspect/list)/ov-build:build—build.ymlvocabulary (distros, builders, init-systems)
Related Skills
overthinkos/plugin
tools
VerifiedTrustedCommunity
Use when authoring or modifying a charly PLUGIN — a candy with a `plugin:` block that contributes Providers (verbs/kinds/deploy-targets/steps/builders/commands), its own CUE schema, builtin (compiled-in) or external (out-of-tree git repo). Covers the unified Provider model, the per-plugin CUE-schema contract (single source → Go params for dev + schema-over-Describe RPC for runtime), the SDK, and the loader.
SKILL.mdUpdated Jun 22, 2026
overthinkos/cue
tools
VerifiedTrustedCommunity
The CUE data-validation / configuration CLI (cue), pinned to v0.16.1. Use when working with the cue candy, installing the cue binary into a box or onto a target:local dev host, or running the offline schema-vendoring pipeline that feeds charly's egress validation.
SKILL.mdUpdated Jun 16, 2026
overthinkos/egress
tools
VerifiedTrustedCommunity
CUE EGRESS validation — validating (and, where it adds value, generating) the config files charly WRITES to a system BEFORE the bytes hit disk. MUST be invoked before working on charly/egress.go, the vendored schemas under candy/plugin-egress/egress-schemas/vendor/, the ValidateEgress / registerVendoredEgressKind path, the offline `task cue:vendor` pipeline, or adding an egress schema for any written artifact (cloud-init, k8s manifests, traefik routes, runtime config, install ledger, systemd/quadlet units, ssh_config, libvirt XML).
SKILL.mdUpdated Jun 16, 2026
overthinkos/check-k8s
tools
VerifiedTrustedCommunity
Kubernetes cluster-probe declarative check verb — the `kube:` check verb (nodes, pods, ingress, storage class, addon health, apply/delete, and arbitrary resource GETs) served out-of-process by the candy/plugin-kube plugin (vendored client-go; no external kubectl required).
SKILL.mdUpdated Jun 14, 2026