fix(installer): allow scoped Claude paths and leave unreadable cwd (#1816, Vikunja 614). Untested

scripts/case1-hostcheck.sh

@@ -114,7 +114,7 @@ item5() {
     local so st
     so="$(dpkg-statoverride --list "$BWRAP" 2>/dev/null)"
     st="$(stat -c '%U %G %a' "$ROOT$BWRAP" 2>/dev/null)"
-    [[ "$so" =~ ^root[[:blank:]]+mosaic[[:blank:]]+0*750[[:blank:]]+"$BWRAP"$ ]] || { fail "5 the statoverride on $BWRAP reads '$so', not 'root mosaic 0750'"; return; }
+    [[ "$so" =~ ^root\ mosaic\ 0?750\ "$BWRAP"$ ]] || { fail "5 the statoverride on $BWRAP reads '$so', not 'root mosaic 0750'"; return; }
     [ "$st" = "root mosaic 750" ] || { fail "5 $BWRAP is '$st', not 'root mosaic 750'"; return; }
     pass "5 $BWRAP is root mosaic 0750, by the statoverride and by stat"
 }

scripts/case2-unit.sh

@@ -59,7 +59,7 @@ WEBUI_UNIT=mosaic-webui.service
 usage() { echo 'usage: case2-unit.sh --user NAME --home DIR --business ID --copy ID --node PATH [--profile factory|library] [--pm] [--claude PATH] -- SERVE FLAGS' >&2; exit 4; }
 die() { echo "case2-unit: $*" >&2; exit 1; }
 # A value the unit carries as itself: no space, %, $, quote, backslash, & or |.
-plain() { case "$1" in *[!A-Za-z0-9/._+-]*) return 1 ;; esac; }
+plain() { case "$1" in *[!A-Za-z0-9/._+@-]*) return 1 ;; esac; }
 abs_plain() {
     case "$1" in /*) ;; *) die "$2 must be an absolute path: $1" ;; esac
     plain "$1" || die "$2 contains a character the unit cannot carry: $1"

scripts/stack-copy.sh

@@ -59,6 +59,9 @@ copy_commit() {
 # The copy of commit $2 from repository $1. CLEAN names a bundle's temporary repository, which the
 # trap removes with the temporary copy.
 copy_tree() {
+ # Paths are absolute here (including a bundle resolved by copy_bundle). The caller
+ # may have dropped uid from a directory this user cannot read; find must start elsewhere.
+ cd / || die 'cannot change to /; no copy written'
  local full="$2" target tmp
  target="$COPIES/$full"
  [ ! -L "$target" ] || die "refusing: copy target is a symlink: $target"