pastilhasandClaude Opus 4.8 3fc7bcb32f always run pi as the service user, drop the sudo -u branch ...

- the sandbox already drops privileges to the OS user (id -un), so pi-bridge was
  the only code path that switched to a per-user unix account
- the four accounts it targeted (andrepadez, john-wick, fedra, miguelbenoliel)
  are vestigial: created by scripts/provision-existing-users.sh, with no home
  dirs, no files, no processes. the only live account is pastilhas@officer.dev,
  which maps to the service user, so isServiceUser was always true and the
  sudo -u branch could never fire
- add TODO.md tracking the leftover username plumbing, the useradd script, known
  bugs (task-executor relative cwd, bootstrap pi EEXIST), and the ufw 9010 rule

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-15 21:57:49 +00:00

docs

dockerization plan

2026-03-07 08:22:46 +00:00

public

serve static assets from local public/ instead of static.officer.dev, simplify gmail history 404/410 handling

2026-05-30 17:07:55 +00:00

scripts

replace gmail resync with Gmail REST API, remove mbsync dependency

2026-03-12 07:24:44 +00:00

seed/templates

move tasks to marketplace, sync native tasks on bootstrap

2026-03-10 13:57:40 +00:00

src

always run pi as the service user, drop the sudo -u branch

2026-07-15 21:57:49 +00:00

.env.example

Discord

2026-02-27 08:27:43 +00:00

.gitignore

claude-code streaming chat, desktop remote viewer, new-automation route, tiktok task v4, misc fixes

2026-03-02 20:00:45 +00:00

.prettierignore

first

2026-02-16 19:34:35 +00:00

.prettierrc

first

2026-02-16 19:34:35 +00:00

AGENTS.md

pi sills

2026-02-23 22:52:27 +00:00

AUTOMATION_CONTEXT.md

tools and skills, etc in the containers

2026-02-24 01:24:28 +00:00

bun-env.d.ts

first

2026-02-16 19:34:35 +00:00

bun.lock

mcp tool server for claude code — native tool execution via stdio protocol

2026-03-07 13:21:50 +00:00

bunfig.toml

first

2026-02-16 19:34:35 +00:00

CHAT_WITH_PI_FLOW.md

default model

2026-02-22 16:49:30 +00:00

CLAUDE.md

first

2026-02-16 19:34:35 +00:00

components.json

first

2026-02-16 19:34:35 +00:00

CONVENTIONS.md

first

2026-02-16 19:34:35 +00:00

ecosystem.config.cjs

vnc sidecar: per-user desktop sessions via sidecar architecture

2026-03-06 10:49:53 +00:00

event-handler-instances.md

first

2026-02-16 19:34:35 +00:00

events_not_in_statistics.txt

first

2026-02-16 19:34:35 +00:00

example.csv

App Preview

2026-02-22 03:35:26 +00:00

HOOKS.md

default model

2026-02-22 16:49:30 +00:00

launcher_config.json

first

2026-02-16 19:34:35 +00:00

MARKETING_WEBSITE.md

Resources tuneup

2026-02-20 12:35:47 +00:00

OFFICERDEV_BACKEND.md

default model

2026-02-22 16:49:30 +00:00

OFFICERDEV_FRONTEND.md

default model

2026-02-22 16:49:30 +00:00

opencode.json

first

2026-02-16 19:34:35 +00:00

package.json

mcp tool server for claude code — native tool execution via stdio protocol

2026-03-07 13:21:50 +00:00

PHONE_APP.md

Resources tuneup

2026-02-20 12:35:47 +00:00

playwright.config.ts

first

2026-02-16 19:34:35 +00:00

SECURITY_AUDIT.md

thinking

2026-02-25 16:04:11 +00:00

SECURITY_FIXES.md

Critical Securities (5) fixes

2026-02-25 19:44:38 +00:00

SETUP_ANALYSIS.md

fix: refactor setup scripts for system-wide Node.js (no nvm)

2026-03-04 02:09:47 +00:00

SETUP_GUIDE.md

refactor: make Node.js installation automatic in setup.sh

2026-03-04 02:13:49 +00:00

test-setup.ts

first

2026-02-16 19:34:35 +00:00

TODO.md

always run pi as the service user, drop the sudo -u branch

2026-07-15 21:57:49 +00:00

tsconfig.json

tool registry, claude tool awareness, and model selector fix

2026-03-07 11:55:38 +00:00

S

Description

No description provided

42 MiB

Languages

TypeScript 90.9%

Shell 4.7%

JavaScript 4.1%

CSS 0.2%

HTML 0.1%