pastilhasandClaude Opus 4.6 9578110e8b shared bwrap sandbox, skip for super admin, extend to pi and terminals ...

- extract buildSandboxPrefix/buildRunuserSuffix into shared sandbox.ts
- super admin bypasses bwrap for full host access (claude, pi, terminal)
- member pi processes now use bwrap instead of sudo -u
- member terminals now use bwrap instead of sudo -u
- mount /run for systemd-resolved DNS inside sandbox
- pass role through claude spawn params and channel types

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-08 00:06:44 +00:00

..

templates

fix(pi): add snap node compatibility diagnostics and documentation

2026-03-04 01:45:36 +00:00

pty-sidecar.mjs

shared bwrap sandbox, skip for super admin, extend to pi and terminals

2026-03-08 00:06:44 +00:00

websocket.ts

shared bwrap sandbox, skip for super admin, extend to pi and terminals

2026-03-08 00:06:44 +00:00