limiteinductive 0f000c70c9 fix: codex birth review — shell injection, root prevention, dream user ...

Critical fixes:
- Quoted heredoc prevents shell injection in CLAUDE.md generation
- Block reserved system usernames (root, daemon, bin, etc.)
- Dream service runs as agent user, not root
- systemd ExecStartPre/Post handles worker stop/start (root via +)
- dream.rs no longer calls systemctl directly

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-29 23:21:02 +02:00

..

colony

birth script + POST /api/users endpoint

2026-03-29 23:11:08 +02:00

colony-agent

fix: codex birth review — shell injection, root prevention, dream user

2026-03-29 23:21:02 +02:00

colony-cli

fix: codex review — scope ack to user, deduplicate inbox entries

2026-03-29 22:51:48 +02:00

colony-types

Colony CLI: inbox + ack commands

2026-03-29 22:44:21 +02:00