release: clide v1–v3 — security hardening, Codex support, observability docs#49

Merged

itscooleric merged 13 commits intomainfrom

Mar 8, 2026

Commits on Mar 6, 2026

fix: ttyd auth default-on, gh credential helper, Dockerfile HEALTHCHECK (#33)

itscooleric
and
claude
authored
fix: gosu privilege drop for firewall + compose hardening (#34)

itscooleric
and
claude
authored

Commits on Mar 7, 2026

Merge pull request #39 from itscooleric/main
itscooleric
authored
Add Codex CLI (OpenAI) support (#35)

authored
docs: architecture diagram, threat model, runbook, compatibility matrix (#37)

itscooleric
and
claude
authored
fix: change clide UID from 1000 to 1001 to avoid conflict with Ubuntu 24.04 built-in ubuntu user

itscooleric
and
claude
committed
fix: remove redundant mkdir/chown for /home/clide in entrypoint

itscooleric
and
claude
committed
fix: run claude config node script as clide user via gosu

itscooleric
and
claude
committed
fix: add SETUID and SETGID capabilities required by gosu

itscooleric
and
claude
committed
fix: add missing GitHub hosts to firewall allowlist

itscooleric
and
claude
committed
feat: add egress reject audit logging (LOG before REJECT in firewall.sh)
Copilot
authored

Commits on Mar 8, 2026