pastilhasandClaude Opus 5 7040536f1f merge sidecar-app-store: per-user Claude ...

A member's agent turn now runs as their own Linux account, with their own claude
install, their own ~/.claude credential, their own transcripts and sessions that
record whose they are. Verified end to end on the production host: uid 1001,
nine environment variables, zero ANTHROPIC_*, zero POSTGRES_URL, zero
JWT_SECRET.

The two owner-only refusals that held chat closed to members — the wholesale
isSuperAdmin middleware in api/chat/chat.ts and the socket's 403 in server.tsx —
are gone, removed together once the turn ran under runAs.

Also carries a live credential fix that predates this work: mcp-host.json held
the owner's 30-day JWT at 0644 inside a 755 directory on a host where every role
has a shell. Now 0600 plus an explicit chmod, since writeFileSync's mode is
ignored on an existing file.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

2026-08-12 01:58:14 +00:00

docs

spec deprovisionOsAccount, from a real teardown rather than from reading the code

2026-08-11 23:26:23 +00:00

public

desktop: load noVNC as one bundle instead of 42 modules

2026-08-01 20:52:50 +00:00

scripts

pipe the installer into bash, and stop inventing a root-owned .local

2026-08-11 23:46:59 +00:00

seed/templates

move tasks to marketplace, sync native tasks on bootstrap

2026-03-10 13:57:40 +00:00

src

a chat with no chosen directory runs in the caller's own home

2026-08-12 01:54:19 +00:00

.env.example

move the wallet's chain source out of env and into the ui

2026-08-03 22:59:00 +00:00

.gitignore

app store: publish a sidecar's assets to public/plugins/<id>/

2026-08-10 18:20:46 +00:00

.prettierignore

vendor hls.js and play transcodes over hls

2026-08-04 18:52:15 +00:00

.prettierrc

first

2026-02-16 19:34:35 +00:00

AGENTS.md

retire the single-user claim from the docs it outlived

2026-08-07 21:58:44 +00:00

bun-env.d.ts

restore the code editor screen, drop the dead theme picker, unshadow AppRegistry

2026-07-25 23:30:20 +01:00

bun.lock

add photos, an immich-backed library behind its own sidecar

2026-08-03 00:18:33 +00:00

bunfig.toml

freeze installs: bun resolves from the lockfile or fails

2026-08-04 17:58:07 +00:00

CLAUDE.md

close the comms channel, keep what was still open

2026-08-12 01:58:00 +00:00

components.json

first

2026-02-16 19:34:35 +00:00

CONVENTIONS.md

docs: the convention docs were describing a different codebase

2026-07-31 16:42:47 +00:00

ecosystem.config.cjs

gitea: the app — repos, code, issues, pulls, notifications

2026-08-06 17:10:36 +00:00

ecosystem.light.config.cjs

gitea leaves the baseline and becomes an app-store install

2026-08-11 18:17:47 +00:00

ecosystem.mac.light.config.cjs

gitea leaves the baseline and becomes an app-store install

2026-08-11 18:17:47 +00:00

ecosystem.profile.cjs

mac: name the laptop build a profile, and derive it like the others

2026-08-04 12:47:27 +00:00

events_not_in_statistics.txt

first

2026-02-16 19:34:35 +00:00

example.csv

App Preview

2026-02-22 03:35:26 +00:00

launcher_config.json

first

2026-02-16 19:34:35 +00:00

MUSIC_API.md

docs: bring the live docs back in line with the code

2026-07-31 16:11:29 +00:00

opencode.json

drop inherited architecture docs that no longer match the code

2026-07-22 20:25:44 +01:00

package.json

add photos, an immich-backed library behind its own sidecar

2026-08-03 00:18:33 +00:00

playwright.config.ts

first

2026-02-16 19:34:35 +00:00

SYSTEM_MONITOR_API.md

retire the single-user claim from the docs it outlived

2026-08-07 21:58:44 +00:00

test-setup.ts

test useDashboardState, and fix the revert it proved was inverted

2026-08-07 14:22:26 +00:00

TODO.md

close the comms channel, keep what was still open

2026-08-12 01:58:00 +00:00

tsconfig.json

tool registry, claude tool awareness, and model selector fix

2026-03-07 11:55:38 +00:00

S

Description

No description provided

42 MiB

Languages

TypeScript 90.9%

Shell 4.7%

JavaScript 4.1%

CSS 0.2%

HTML 0.1%