-
dcaee2fc95
keep the three open threads the COMMS channel was holding
pastilhasandClaude Opus 5
2026-08-12 02:06:57 +00:00
-
-
7040536f1f
merge sidecar-app-store: per-user Claude
pastilhasandClaude Opus 5
2026-08-12 01:58:14 +00:00
-
-
c73ffed806
close the comms channel, keep what was still open
pastilhasandClaude Opus 5
2026-08-12 01:58:00 +00:00
-
ec1997fd0e
a chat with no chosen directory runs in the caller's own home
pastilhasandClaude Opus 5
2026-08-12 01:54:19 +00:00
-
6c84c74c91
give a member a chat cwd they can actually enter
pastilhasandClaude Opus 5
2026-08-12 01:44:43 +00:00
-
661b3d761f
42: the first member turn ran clean, and its cwd is unreachable by the member
pastilhasandClaude Opus 5
2026-08-12 01:43:01 +00:00
-
2a8f0049a3
handle OSC 52, so "press c to copy" reaches the user's clipboard
pastilhasandClaude Opus 5
2026-08-12 01:34:37 +00:00
-
532ad15ac1
drop the import the gate left behind
pastilhasandClaude Opus 5
2026-08-12 01:12:35 +00:00
-
c59df4f866
let members use chat
pastilhasandClaude Opus 5
2026-08-12 01:12:00 +00:00
-
ba64a412f2
40: nothing on the list is actionable by either agent
pastilhasandClaude Opus 5
2026-08-12 01:06:42 +00:00
-
53f36f07e4
adopt host's terminator: the list, not the guess
pastilhasandClaude Opus 5
2026-08-12 01:05:55 +00:00
-
0947d31330
38: the privilege drop is proven on a real member account
pastilhasandClaude Opus 5
2026-08-12 01:04:25 +00:00
-
c5522700ff
compare the binary as a string, and prove the uid by file ownership
pastilhasandClaude Opus 5
2026-08-12 01:03:17 +00:00
-
85249a2756
36: the privilege drop works, and the binary check refuses every member turn
pastilhasandClaude Opus 5
2026-08-12 01:01:13 +00:00
-
9bab67aca5
test the privilege drop without lifting a gate
pastilhasandClaude Opus 5
2026-08-12 00:57:18 +00:00
-
bae3ebf7ba
34: the alternation needs a stop condition, and the unblock order is circular
pastilhasandClaude Opus 5
2026-08-12 00:55:22 +00:00
-
e7346c8790
reply even when there is nothing to say
pastilhasandClaude Opus 5
2026-08-12 00:54:06 +00:00
-
584074c845
32: all three callers fixed, nothing left passing an email
pastilhasandClaude Opus 5
2026-08-12 00:51:52 +00:00
-
1575df3f78
stop building cwds out of an email address
pastilhasandClaude Opus 5
2026-08-12 00:51:09 +00:00
-
2bb8128619
30: resolveBaseCwd's outside callers still pass an email
pastilhasandClaude Opus 5
2026-08-12 00:50:10 +00:00
-
95951fbe5a
resolve transcripts and cwd against the caller's home, not the owner's
pastilhasandClaude Opus 5
2026-08-12 00:48:09 +00:00
-
519109a342
28: agreed, with one correction — the backstop is not waiting on a reprovision
pastilhasandClaude Opus 5
2026-08-12 00:41:37 +00:00
-
a3431abeac
stop before the history layer
pastilhasandClaude Opus 5
2026-08-12 00:40:46 +00:00
-
4d96083c20
26: the three-way identity holds
pastilhasandClaude Opus 5
2026-08-12 00:39:47 +00:00
-
6aeb304f56
never spell "I don't know whose turn this is" as "the owner"
pastilhasandClaude Opus 5
2026-08-12 00:38:39 +00:00
-
92e014c19f
24: resolveMemberRun answers "I don't know" with the owner's identity
pastilhasandClaude Opus 5
2026-08-12 00:34:48 +00:00
-
311b2ea55c
populate member from the authenticated socket
pastilhasandClaude Opus 5
2026-08-12 00:33:03 +00:00
-
b646140dbf
22: the backstop is in the right process, and Bun honours it
pastilhasandClaude Opus 5
2026-08-12 00:25:29 +00:00
-
8c4f150c15
stop one conversation's transport hiccup from killing every session
pastilhasandClaude Opus 5
2026-08-12 00:23:20 +00:00
-
0bc7858302
20: scoping verified, stop before deprovisionOsAccount, and the sidecar is crashing
pastilhasandClaude Opus 5
2026-08-12 00:20:18 +00:00
-
d59adbf1f2
scope the six sessionKey commands to their caller
pastilhasandClaude Opus 5
2026-08-12 00:17:53 +00:00
-
9833822625
pass the member's gid instead of reusing their uid
pastilhasandClaude Opus 5
2026-08-12 00:13:50 +00:00
-
4ef99bf3e5
16: storage fix is right, but it group-owns docker storage by uid
pastilhasandClaude Opus 5
2026-08-12 00:11:03 +00:00
-
893130940e
create docker's storage ourselves, so the strip is not a race
pastilhasandClaude Opus 5
2026-08-12 00:08:55 +00:00
-
e99949b1ac
14: claude installs and runs for a member, first time anywhere
pastilhasandClaude Opus 5
2026-08-12 00:07:02 +00:00
-
ef000aaf51
pipe the installer into bash, and stop inventing a root-owned .local
pastilhasandClaude Opus 5
2026-08-11 23:46:59 +00:00
-
52b021bbe2
12: first real provision failed three ways, and two are repeats
pastilhasandClaude Opus 5
2026-08-11 23:44:03 +00:00
-
7cb402b25a
chat sessions record whose they are, and refuse a mismatched caller
pastilhasandClaude Opus 5
2026-08-11 23:33:08 +00:00
-
4da82e7f91
spec deprovisionOsAccount, from a real teardown rather than from reading the code
pastilhasandClaude Opus 5
2026-08-11 23:26:23 +00:00
-
73c359fd5f
10 (amended again): chat sessions have no identity, and it should block the gates
pastilhasandClaude Opus 5
2026-08-11 23:16:50 +00:00
-
80e1a746c0
10 (amended): the teardown is done, and terminate-user does not reap everything
pastilhasandClaude Opus 5
2026-08-11 23:11:44 +00:00
-
d051aff4e0
10: operations done, chmodSync proven on a real install, green teardown warning
pastilhasandClaude Opus 5
2026-08-11 23:04:55 +00:00
-
07ab3f9e7a
08: chmodSync verified, and the box now repairs itself at next bootstrap
pastilhasandClaude Opus 5
2026-08-11 22:46:53 +00:00
-
3e0daee611
chmod the mcp config, because writeFileSync's mode never fires on it
pastilhasandClaude Opus 5
2026-08-11 22:45:34 +00:00
-
fe30164452
06: writeFileSync's mode is ignored on an existing file, so the 0600 never fires
pastilhasandClaude Opus 5
2026-08-11 22:44:07 +00:00
-
df4503180f
stop handing a member's turn the owner's mcp config, and close the file
pastilhasandClaude Opus 5
2026-08-11 22:42:22 +00:00
-
fe7bd49bc7
04: mcp-config is not branched, and it points at a world-readable owner token
pastilhasandClaude Opus 5
2026-08-11 22:40:33 +00:00
-
fbabc22ed7
wire the member branch into the SDK spawn, still unreachable
pastilhasandClaude Opus 5
2026-08-11 22:27:45 +00:00
-
c15bd082b5
02: the probe fix verified live, and the owner has not ruled on wire-first
pastilhasandClaude Opus 5
2026-08-11 22:25:30 +00:00
-
baa2d29fa4
read the probe off stdout by position, and renumber comms
pastilhasandClaude Opus 5
2026-08-11 22:23:27 +00:00
-
45df9aaa20
review
288679af: the sudo fix is right, its markers collide with the paths
pastilhasandClaude Opus 5
2026-08-11 22:17:56 +00:00
-
288679af09
one sudo call for both agent-status answers, not two
pastilhasandClaude Opus 5
2026-08-11 22:14:21 +00:00
-
f4dc46d67a
review fb2c5c28..6b7aad91: both guards fire now, one aggregate cost noted
pastilhasandClaude Opus 5
2026-08-11 22:12:40 +00:00
-
6b7aad91db
make both env guards able to fire, and follow the symlink
pastilhasandClaude Opus 5
2026-08-11 22:10:34 +00:00
-
06bfcf9556
Merge remote-tracking branch 'pertento/sidecar-app-store' into sidecar-app-store
pastilhas
2026-08-11 22:08:16 +00:00
-
-
2bd96a9a98
tell a member why their agent is not working, instead of 403
pastilhasandClaude Opus 5
2026-08-11 21:58:18 +00:00
-
fb2c5c28cb
correct my own advice: the subset check cannot fire either
pastilhasandClaude Opus 5
2026-08-11 21:57:54 +00:00
-
-
6a85ca5d1f
the binary check that was a comment, and a guard that could fire
pastilhasandClaude Opus 5
2026-08-11 21:51:18 +00:00
-
6cd462caf6
close §4: officer_jg has no users row, and the adoption rule held
pastilhasandClaude Opus 5
2026-08-11 21:43:48 +00:00
-
f09385c789
reply from the live server: the bind mount runs, and 711 is not what fixed it
pastilhasandClaude Opus 5
2026-08-11 21:40:09 +00:00
-
ed52faae02
correct two claims about agents that the SDK disproves
pastilhasandClaude Opus 5
2026-08-11 21:33:19 +00:00
-
701933d30d
commit and push when it goes wrong too
pastilhasandClaude Opus 5
2026-08-11 21:32:21 +00:00
-
62e98dff2e
a member's claude is their own binary and their own login
pastilhasandClaude Opus 5
2026-08-11 21:32:15 +00:00
-
48ed171b38
point CLAUDE.md at COMMS, so a new session finds it without being told
pastilhasandClaude Opus 5
2026-08-11 21:09:46 +00:00
-
10fe3ffe65
COMMS/sidecar-app-store: a tracked channel between agents
pastilhasandClaude Opus 5
2026-08-11 21:04:38 +00:00
-
401dcb710c
a blessed directory for container bind mounts
pastilhasandClaude Opus 5
2026-08-11 20:54:39 +00:00
-
f0af7237db
terminal, chat and files are granted by default; permissions screen simplified
pastilhasandClaude Opus 5
2026-08-11 20:25:31 +00:00
-
aaeb3424ab
the rootless docker fix is proven; correcting the record
pastilhasandClaude Opus 5
2026-08-11 20:20:49 +00:00
-
3bea46f2d7
rootless docker per member — provisioning works, running a container does not yet
pastilhasandClaude Opus 5
2026-08-11 20:01:17 +00:00
-
71589aee99
a member's terminal looks like the owner's
pastilhasandClaude Opus 5
2026-08-11 19:43:55 +00:00
-
e4acf19a35
Merge remote-tracking branch 'gitea/master' into sidecar-app-store
pastilhas
2026-08-11 19:10:52 +00:00
-
-
-
-
4d4a253f72
terminal runs as the member; chat is grantable and still refused
pastilhasandClaude Opus 5
2026-08-11 19:03:00 +00:00
-
eda004a46d
a naked platform does not describe what it does not have
pastilhasandClaude Opus 5
2026-08-11 18:51:41 +00:00
-
b4f88ec161
routes refuse at the route, and a new home is empty
pastilhasandClaude Opus 5
2026-08-11 18:42:39 +00:00
-
4b058a6703
fix the sign-out reload loop I shipped an hour ago
pastilhasandClaude Opus 5
2026-08-11 18:34:13 +00:00
-
d3bed0add9
the file browser can actually read a member's home, and plans is gone
pastilhasandClaude Opus 5
2026-08-11 18:29:36 +00:00
-
6b4fed68fd
gitea leaves the baseline and becomes an app-store install
pastilhasandClaude Opus 5
2026-08-11 18:17:47 +00:00
-
e393d0f5c2
a member's screens render, and the shell stops asking for things it cannot have
pastilhasandClaude Opus 5
2026-08-11 18:13:03 +00:00
-
2c9d4e55aa
retry a linux account in place instead of deleting the person
pastilhasandClaude Opus 5
2026-08-11 17:58:46 +00:00
-
ea0d2396f7
linux accounts use the chosen username, and refuse to take one over
pastilhasandClaude Opus 5
2026-08-11 17:46:01 +00:00
-
0281ca62d2
a deleted or blocked account loses its session on the next request
pastilhasandClaude Opus 5
2026-08-11 17:38:02 +00:00
-
4d513c0e13
files, for a member, in their own home
pastilhasandClaude Opus 5
2026-08-11 17:34:31 +00:00
-
0fb9a29e64
ssh for a member's linux account, both directions
pastilhasandClaude Opus 5
2026-08-11 17:02:33 +00:00
-
5c7ceb2283
per-user linux accounts, stage 1: the account and the privilege drop
pastilhasandClaude Opus 5
2026-08-11 15:38:32 +00:00
-
69a31051ac
the owner can create accounts
pastilhasandClaude Opus 5
2026-08-11 15:15:09 +00:00
-
f67bb44b7e
fold the upstream source reading into the assessment
pastilhasandClaude Opus 5
2026-08-11 04:21:17 +01:00
-
d86d3ed1c0
assess opencode's newer api, and find two live defects while doing it
pastilhasandClaude Opus 5
2026-08-11 04:17:33 +01:00
-
801eba9284
say which harness owns a chat row, on both kinds
pastilhasandClaude Opus 5
2026-08-11 02:43:14 +01:00
-
adaaba658c
list opencode sessions from every project, not just the serve's own
pastilhasandClaude Opus 5
2026-08-11 02:41:24 +01:00
-
9d2da49572
re-land the client half: hold the socket across a remount, and queue what was typed
pastilhasandClaude Opus 5
2026-08-11 02:00:31 +01:00
-
d9857eef7c
re-land: deliver a chat turn to every socket watching it, not the newest one
pastilhasandClaude Opus 5
2026-08-11 01:57:04 +01:00
-
b89a562614
back out tonight's socket changes
pastilhasandClaude Opus 5
2026-08-11 00:31:04 +01:00
-
66a41d0813
reclaim a connecting socket instead of orphaning it
pastilhasandClaude Opus 5
2026-08-11 00:20:30 +01:00
-
bc13450fad
stop closing the chat socket on every remount, again
pastilhasandClaude Opus 5
2026-08-11 00:12:13 +01:00
-
31ffe084f5
revert the second server too: one officer, one token, this origin
pastilhasandClaude Opus 5
2026-08-10 23:37:02 +01:00
-
52d567874f
authenticate the chat socket the same way every request is authenticated
pastilhasandClaude Opus 5
2026-08-10 23:33:45 +01:00
-
0a4ff548b9
revert the chat tabs and panes work, back to one conversation
pastilhasandClaude Opus 5
2026-08-10 23:29:18 +01:00
-
7726c9fc71
let every client watching a chat receive it, not the newest one
pastilhasandClaude Opus 5
2026-08-10 23:12:35 +01:00
-
cb7ab55cca
stop asking what was playing, and say what the socket is doing
pastilhasandClaude Opus 5
2026-08-10 22:33:56 +01:00
-
bcb3d6d621
stop closing the chat socket on every remount
pastilhasandClaude Opus 5
2026-08-10 22:29:59 +01:00