From d5ef4ef76e1254e8f6efac152eb55a9640e6158a Mon Sep 17 00:00:00 2001
From: archipelago <archipelago@localhost>
Date: Wed, 5 Aug 2026 22:16:13 -0400
Subject: [PATCH] chore(catalog): sign catalog with session_passthrough +
 indeedhub-redis caps

Carries the two manifest-side halves of the .125 fix batch: the four
companion UIs (lnd-ui, bitcoin-ui, electrs-ui, fips-ui) declare
session_passthrough on their gated ports so the gate forwards the node
session their nginx proxies to the daemon, and indeedhub-redis gains
CHOWN+DAC_OVERRIDE so its entrypoint can traverse its own data dir.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 releases/app-catalog.json | 18 ++++++++++++------
 1 file changed, 12 insertions(+), 6 deletions(-)

diff --git a/releases/app-catalog.json b/releases/app-catalog.json
index 44279454..364dfa3d 100644
--- a/releases/app-catalog.json
+++ b/releases/app-catalog.json
@@ -717,7 +717,8 @@
               "bind": "127.0.0.1",
               "container": 8334,
               "host": 8334,
-              "protocol": "tcp"
+              "protocol": "tcp",
+              "session_passthrough": true
             }
           ],
           "resources": {
@@ -1175,7 +1176,8 @@
               "bind": "127.0.0.1",
               "container": 50002,
               "host": 50002,
-              "protocol": "tcp"
+              "protocol": "tcp",
+              "session_passthrough": true
             }
           ],
           "resources": {
@@ -1732,7 +1734,8 @@
               "bind": "127.0.0.1",
               "container": 8336,
               "host": 8336,
-              "protocol": "tcp"
+              "protocol": "tcp",
+              "session_passthrough": true
             }
           ],
           "resources": {
@@ -2722,6 +2725,8 @@
           },
           "security": {
             "capabilities": [
+              "CHOWN",
+              "DAC_OVERRIDE",
               "SETGID",
               "SETUID"
             ],
@@ -3120,7 +3125,8 @@
               "bind": "127.0.0.1",
               "container": 18083,
               "host": 18083,
-              "protocol": "tcp"
+              "protocol": "tcp",
+              "session_passthrough": true
             }
           ],
           "resources": {
@@ -4891,7 +4897,7 @@
     }
   },
   "schema": 1,
-  "signature": "a8502a3664500e6f22e47d2f29456cde208c0cf117767083be8ec6c238f73e546ae33ccea0c100573cfd9a474614da03903d5be6b7cae72bb3c5439d2b510104",
+  "signature": "a9a0bf60aa6c47ae970a6c7c3e19e9390ee7af157f425c2e38b1bbb194f0315b73ddf16bc46244b36390454787a1ddecc559be806098fdf569d3315f388b9006",
   "signed_by": "did:key:z6Mkfu5LT8d4DjETtrkATvHh9Dvcbnr7zBCUwfau8Sw7DLWT",
-  "updated": "2026-08-05"
+  "updated": "2026-08-06"
 }