pastilhasandClaude Opus 4.8 754fac42bb stop reading the owner's vnc password in the main process ...

The password lives in the owner's ~/.vnc, and the sidecar is the process that
writes it — together with the rfbauth file x11vnc actually authenticates
against. Officer read the plaintext half directly and answered with it before
ever asking the sidecar, which is both a secret the proxy has no business
opening and a way to hand out a password that no longer matches: if `passwd`
went missing while `password` survived, officer kept serving the old plaintext
and the desktop refused every login. `vnc:ensure-password` reconciles the pair,
so ask it every time and delete the reader.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-30 05:09:13 +00:00

docs

docs: add the working-on-officer guide

2026-07-26 04:19:46 +01:00

public

soulseek: shared slskd types, helpers, and card primitives

2026-07-29 21:27:07 +00:00

scripts

soulseek: render cached shares as a tree, not a path list

2026-07-30 01:05:22 +00:00

seed/templates

move tasks to marketplace, sync native tasks on bootstrap

2026-03-10 13:57:40 +00:00

src

stop reading the owner's vnc password in the main process

2026-07-30 05:09:13 +00:00

.env.example

fail closed when PUBLIC_BUILD_ENV is unset

2026-07-25 23:30:20 +01:00

.gitignore

generate index.html's absolute URLs from PUBLIC_URL

2026-07-26 01:49:17 +01:00

.prettierignore

first

2026-02-16 19:34:35 +00:00

.prettierrc

first

2026-02-16 19:34:35 +00:00

AGENTS.md

replace the stale AGENTS.md with a pointer to CLAUDE.md

2026-07-26 04:25:10 +01:00

bun-env.d.ts

restore the code editor screen, drop the dead theme picker, unshadow AppRegistry

2026-07-25 23:30:20 +01:00

bun.lock

mcp tool server for claude code — native tool execution via stdio protocol

2026-03-07 13:21:50 +00:00

bunfig.toml

first

2026-02-16 19:34:35 +00:00

CLAUDE.md

document that bun format touches every dirty file

2026-07-30 02:41:43 +00:00

components.json

first

2026-02-16 19:34:35 +00:00

CONVENTIONS.md

first

2026-02-16 19:34:35 +00:00

ecosystem.config.cjs

slskd: scaffold reverse-proxy sidecar

2026-07-29 15:49:09 +00:00

event-handler-instances.md

first

2026-02-16 19:34:35 +00:00

events_not_in_statistics.txt

first

2026-02-16 19:34:35 +00:00

example.csv

App Preview

2026-02-22 03:35:26 +00:00

HOOKS.md

default model

2026-02-22 16:49:30 +00:00

launcher_config.json

first

2026-02-16 19:34:35 +00:00

MARKETING_WEBSITE.md

Resources tuneup

2026-02-20 12:35:47 +00:00

MUSIC_API.md

music indexer: index track lyrics (.lrc/.txt sidecars + embedded)

2026-07-27 14:51:58 +00:00

OFFICERDEV_BACKEND.md

default model

2026-02-22 16:49:30 +00:00

OFFICERDEV_FRONTEND.md

default model

2026-02-22 16:49:30 +00:00

opencode.json

drop inherited architecture docs that no longer match the code

2026-07-22 20:25:44 +01:00

package.json

generate index.html's absolute URLs from PUBLIC_URL

2026-07-26 01:49:17 +01:00

PHONE_APP.md

Resources tuneup

2026-02-20 12:35:47 +00:00

playwright.config.ts

first

2026-02-16 19:34:35 +00:00

SECURITY_AUDIT.md

thinking

2026-02-25 16:04:11 +00:00

SECURITY_FIXES.md

Critical Securities (5) fixes

2026-02-25 19:44:38 +00:00

SETUP_ANALYSIS.md

fix: refactor setup scripts for system-wide Node.js (no nvm)

2026-03-04 02:09:47 +00:00

SETUP_GUIDE.md

refactor: make Node.js installation automatic in setup.sh

2026-03-04 02:13:49 +00:00

SYSTEM_MONITOR_API.md

docs: SYSTEM_MONITOR_API.md contract for the app + drop dead Pm2Logs.tsx

2026-07-27 11:03:10 +00:00

test-setup.ts

first

2026-02-16 19:34:35 +00:00

TODO.md

provisioning: drop multi-user remnants, provision the super admin on bootstrap

2026-07-25 15:32:53 +00:00

tsconfig.json

tool registry, claude tool awareness, and model selector fix

2026-03-07 11:55:38 +00:00

S

Description

No description provided

42 MiB

Languages

TypeScript 90.9%

Shell 4.7%

JavaScript 4.1%

CSS 0.2%

HTML 0.1%