Default Branch

0ec4796767 · Merge pull request #318 from anthropic-experimental/elhajj/credential-mask-env · Updated 2026-06-23 10:43:25 +08:00

Branches

217d1af893 · Merge macOS realpath test fix from credential-mask-files · Updated 2026-06-24 03:02:24 +08:00

14
26

8c24fbd22c · Fix macOS test: compare realPath against realpathSync(TOKEN_FILE) · Updated 2026-06-24 03:01:53 +08:00

14
14

b597ed8cd7 · feat(proxy): record filterRequest denials in SandboxViolationStore · Updated 2026-06-24 02:30:56 +08:00

0
2

885b4b39a3 · test(windows): C7 binds ephemeral with retry-if-in-range · Updated 2026-06-24 01:56:33 +08:00

0
5

1640f71f45 · feat(linux): passive seccomp USER_NOTIF observer for sandbox violations · Updated 2026-06-23 10:19:43 +08:00

12
1

d17cdce826 · Exclude vendor source dirs from published package · Updated 2026-06-23 09:32:50 +08:00

12
3

0880cd90b8 · Merge branch 'main' into release/v0.0.57 · Updated 2026-06-23 07:33:29 +08:00

13
0
Included

97f72402c8 · fix(windows): reject absolute pwsh/cmd paths; make parseWindowsBinShell platform-independent · Updated 2026-06-23 07:10:23 +08:00

16
0
Included

fb6dfcffe4 · fix(macos): keep egress allowlist enforced when allowLocalBinding is set · Updated 2026-06-19 04:44:26 +08:00

24
1

26ff8a9b78 · Release v0.0.56 · Updated 2026-06-19 04:28:07 +08:00

23
0
Included

bdf588b103 · Release v0.0.55 · Updated 2026-06-16 03:47:53 +08:00

40
0
Included

a0130dfd28 · Pre-send Basic proxy auth for git and parse-compare the auth header · Updated 2026-06-16 02:40:17 +08:00

48
0
Included

faf360222b · Re-emit denyRead paths nested under allowRead on macOS · Updated 2026-06-16 02:22:21 +08:00

50
0
Included

5ee384ff2d · Re-apply denyRead file masks after a denyWrite ancestor bind · Updated 2026-06-16 01:27:59 +08:00

50
0
Included

e4f95d2d33 · test: per-test budget above curl's --max-time in request-filter suite · Updated 2026-06-13 04:55:07 +08:00

50
0
Included

d7db638bea · Preserve explicitly-empty allowlist in getNetworkRestrictionConfig · Updated 2026-06-13 04:27:48 +08:00

54
0
Included

ddf1224a8a · fix: denyWrite bind re-exposes a denyRead tmpfs over the same dir · Updated 2026-06-13 04:27:32 +08:00

54
0
Included

3d1f92cc1b · Preserve explicitly-empty allowlist in getNetworkRestrictionConfig · Updated 2026-06-11 15:03:31 +08:00

55
1

4c391ef821 · rename profile temp file prefix sbx- to srt- · Updated 2026-06-06 07:04:45 +08:00

55
3

148f396d86 · Bump version to 0.0.54 · Updated 2026-06-05 03:38:17 +08:00

59
2