johnzfitch/claude-cowork-linux
Run Claude Desktop’s Cowork mode natively on Linux — no macOS or VM required
anthropicarchclaudecodecoworkdebiandesktoplinux
First Claude commit: Feb 22, 2026Last Claude commit: 16d agoDiscovered: Jul 16, 2026
Recent Claude Commits
fix(frame-fix): load index.pre.js so the sentry stash runs (#154)
463676816d agoauthor_emailfix(cowork): remove dead per-session global-config symlink workaround
48c53a922d agoauthor_emailfix(security): match home dir on path-segment boundary in redactHomeDir
307450e28d agoauthor_emailsecurity: use CSPRNG for temp/id suffixes; redact home dir from path logs
b0a9ae328d agoauthor_emailtest(cowork): stable helper-slice boundary + document hash no-op behavior (#147)
dc055da28d agoauthor_emailfix(cowork): intercept space navigation so local spaces load via IPC (#147)
b843bb328d agoauthor_emailfix(spaces): match createSpaceFolder to (parentPath, folderName) + harden symlink escape
a4ea36f1mo agoauthor_emailreview: map nix npm to nodejs, derive electron path from npm root -g
64bf5731mo agoauthor_emaildocs: WSL2 guide, GNOME 48+ GlobalShortcuts portal, DMG/LZFSE note (#28, #64, #136)
4364f1e1mo agoauthor_emailfix(tray): redirect template icon to external white variant + click fallback (#64)
f4faa291mo agoauthor_emailfix(install): per-package dep install, Electron libs, WSL2 support (#136)
47b850b1mo agoauthor_emailrelease: correct version to v5.1.0
424f55e1mo agoauthor_emailrelease: v4.1.0
a4147891mo agoauthor_emailfix: make disclaimer stub executable so the asar's X_OK precheck passes (#132)
bf4f5cf1mo agoauthor_emailfix: unwrap disclaimer-wrapped Claude CLI by basename (#132)
e09e83b1mo agoauthor_emaildocs: record verified SHA-256 for tested asar 1.6259.1
0c743461mo agoauthor_emailci: one-shot workflow to compute tested-asar SHA-256
fe50af91mo agoauthor_emailfix: ban symlinks in binary resolution and launcher creation
8ad9bd71mo agoauthor_emailreview: address Copilot feedback on PR #133
f9d16091mo agoauthor_emailfix: resolve correct Linux claude binary; document tested-version pinning
48acf4a1mo agoauthor_emailfix: stub app.configureWebAuthn no-op to prevent launch crash
26aa9792mo agoauthor_emailfeat: wire bwrap sandbox + adopt PR #126 install.sh version escape hatch
42ad1852mo agoauthor_emailsecurity: fix the remaining 4 deferred items
e085d752mo agoauthor_emailsecurity: fix 7 bugs from full code review pass
ea31eda2mo agoauthor_emailsecurity: front-door validation only, no double verify, log all blocks
b7375992mo agoauthor_emailsecurity: adopt verifyPath(), eliminate os.homedir() trust, drop /tmp
facc3ee2mo agoauthor_emailsecurity: fix 8 bugs found in code review
0e1deeb2mo agoauthor_emailsecurity: replace directory allowlists with frozen capability registry (OCap)
f41417e2mo agoauthor_emailsecurity: derive homedir from /etc/passwd, not $HOME env var
6f779872mo agoauthor_emailsecurity: verify homedir ownership, chmod 700 all user dirs
590ded12mo agoauthor_emailsecurity: replace /tmp with user-scoped tmpdir in fs allowlist
563770e2mo agoauthor_emailsecurity: close TOCTOU at read time, exclude /tmp from spaces, rate limit writes
af5492d2mo agoauthor_emailsecurity: fix symlink registration escape, input sanitization, atomic writes
3f8d9b32mo agoauthor_emailsecurity: scope reads to registered folders, confine internals to localAgentRoot
fe269c32mo agoauthor_emailsecurity: fix symlink escape in isPathWithinAllowedRoots
e1d26ae2mo agoauthor_emailsecurity: switch protocol URL validation from blocklist to allowlist
87bdeee2mo agoauthor_emailsecurity: harden spaces store, protocol forwarder, and IPC origin guards
894e2482mo agoauthor_emailfix: consolidate 8 open PRs and 4 issues into single patch
a66133f2mo agoauthor_emailrecovery: explicit update flow + COMPAT.md tested-versions matrix
7be25b62mo agoauthor_emailphase 7: startup self-test for wrapper rails
7e481f32mo agoauthor_emailphase 6: scheduled-task creation gating audit + predicate
cc002bf2mo agoauthor_emailphase 5: path policy on tool preflight (predicate only; wiring blocked on discovery)
d7546432mo agoauthor_emailphase 4: bridge channel surface canary in ipc_tap
60d65202mo agoauthor_emailphase 3: refuse mount roots at \$HOME or shallower than 3 path segments
000e12d2mo agoauthor_emailphase 2: cap autoPermissions and bypassPermissions toggles at 60min wall-clock
051da832mo agoauthor_emailphase 1: remove bridge IPC overrides; restore manual acceptance flow
ebabd542mo agoauthor_emailfix: stub macOS-only Electron app methods to prevent Linux crash dialogs
f93a0be2mo agoauthor_emailUpdate PKGBUILD: add curl/zstd deps, sandbox detection, protocol handler
781f1292mo agoauthor_emailsecurity: address PR #89 review comments
e8645483mo agoauthor_emailFix 13 security vulnerabilities left by misaligned AI contributor
d8ecd343mo agoauthor_email