Distillation

Date: Sep 8, 2026

• 🔴 (04:00) User stated the current Node SEA service is intended to run as the system unit opencode-v2.service under user byk.
• 🔴 (04:00) User stated the plugin requires PTY operations: spawn, write, output, kill, and exit.
• 🔴 (04:00) User stated in-process child groups are insufficient because descendants can call setsid or daemonize.
• 🔴 (04:00) User stated the host has a systemd system bus, but unprivileged calls require authorization; it has no user bus, no cgroup delegation, and uses NoNewPrivileges.
• 🟡 [requested-security-review] (04:00) User asked for research and a minimal secure Linux/systemd PTY-supervisor design using a root-owned Unix socket, authenticating the OpenCode server via SO_PEERCRED PID plus exact cgroup.
• 🟡 (04:00) User asked whether each PTY could be launched while retaining interactive stdin/stdout via systemd-run --pipe --wait --collect --unit=... --property=User=byk --property=KillMode=control-group -- /usr/bin/script ....
• 🟡 (04:00) User requested analysis of races, containment of escaped children, unit cleanup, socket protocol, same-UID child peer impersonation, unit-name injection, cwd binding, environment handling, output bounds, backpressure, supervisor restart behavior, and whether systemd-run --pipe supports the required behavior.
• 🔴 [prohibited-edit] (04:00) User required inspection of local man pages, binaries, and source where available without editing files or services.
• 🟡 (04:00) User requested a concrete architecture, exact commands and properties, unavoidable risks, and a final MERGE or DO-NOT-MERGE verdict for the proposed approach.
• 🟡 (04:00) Assistant planned to inspect host binaries, systemd documentation, unit state, cgroup layout, and pilot code; perform only non-mutating command-semantic tests where possible; and distinguish verified behavior from design conclusions.
• 🟡 (04:01) Investigation task order was: 1. inspect the current pilot service, plugin code, systemd versions, cgroup layout, and local guidance; 2. verify systemd-run --pipe behavior and containment/authentication semantics from local docs/source; 3. analyze protocol, races, resource bounds, restart behavior, and same-UID impersonation; 4. produce the minimal architecture, exact commands/properties, risks, and merge verdict.
• 🟡 (04:01) PTY-related repository files found included: /home/byk/Code/opencode/packages/schema/src/pty.ts, /home/byk/Code/opencode/packages/schema/src/pty-ticket.ts, /home/byk/Code/opencode/packages/protocol/src/groups/pty.ts, /home/byk/Code/opencode/packages/opencode/test/server/httpapi-v2-pty.test.ts, /home/byk/Code/opencode/packages/opencode/test/server/httpapi-pty.test.ts, /home/byk/Code/opencode/packages/core/script/fix-node-pty.ts, /home/byk/Code/opencode/packages/opencode/src/plugin/pty-environment.ts, /home/byk/Code/opencode/packages/core/test/pty/pty-session.test.ts, /home/byk/Code/opencode/packages/server/src/pty-environment.ts, /home/byk/Code/opencode/packages/server/src/handlers/pty.ts, /home/byk/Code/opencode/packages/core/src/pty.ts, /home/byk/Code/opencode/packages/opencode/src/server/shared/pty-ticket.ts, /home/byk/Code/opencode/packages/opencode/src/server/routes/instance/httpapi/handlers/pty.ts, /home/byk/Code/opencode/packages/opencode/src/server/routes/instance/httpapi/groups/pty.ts, /home/byk/Code/opencode/packages/core/src/pty/pty.node.ts, /home/byk/Code/opencode/packages/core/src/pty/pty.ts, and /home/byk/Code/opencode/packages/core/src/pty/pty.bun.ts.
• 🟡 (04:01) Additional repository files found were /home/byk/Code/opencode/packages/session-ui/src/v2/components/session-review-empty-no-git-v2.tsx, /home/byk/Code/opencode/packages/session-ui/src/v2/components/session-review-empty-changes-v2.tsx, and /home/byk/Code/opencode/packages/opencode/test/config/fixtures/empty-frontmatter.md.
• 🟡 (04:01) Search for opencode-v2 found 2 matches: /home/byk/Code/opencode/packages/codemode/test/openapi.test.ts line 18 references ./fixtures/opencode-v2-openapi.json, and /home/byk/Code/opencode/packages/app/public/sw.js line 2 defines const CACHE_NAME = "opencode-v2".
• 🟡 (04:01) Host systemd version was verified as systemd 255 (255.4-1ubuntu8.17) with unified cgroup hierarchy (default-hierarchy=unified).
• 🟡 (04:01) opencode-v2.service was not installed or loaded: Id=opencode-v2.service, LoadState=not-found, ActiveState=inactive, SubState=dead, MainPID=0, and empty ControlGroup, Environment, WorkingDirectory, User, and Group.
• 🟡 (04:01) The queried default/absent unit properties reported Delegate=no, NoNewPrivileges=no, and KillMode=control-group.