Regolith

Files

Claude 6a94aec5da Secure IPC with per-group namespaces to prevent privilege escalation

Each container now gets its own IPC directory (/data/ipc/{groupFolder}/)
instead of a shared global directory. Identity is determined by which
directory a request came from, not by self-reported data in IPC files.

Authorization enforced:
- send_message: only to chatJids belonging to the source group
- schedule_task: only for the source group (main can target any)
- pause/resume/cancel_task: only for tasks owned by source group

https://claude.ai/code/session_018nmxNEbtgJH7cKDyBSQGAw

2026-02-01 17:44:25 +00:00

config.ts

Remove redundant comments throughout codebase

2026-02-01 16:00:44 +02:00

container-runner.ts

Secure IPC with per-group namespaces to prevent privilege escalation

2026-02-01 17:44:25 +00:00

db.ts

Fix task deletion FK constraint error

2026-02-01 17:31:32 +02:00

index.ts

Secure IPC with per-group namespaces to prevent privilege escalation