Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
31 commits
Select commit Hold shift + click to select a range
99ed5d9
feat(policy): add tool sandbox command policy model
lukehinds Jun 8, 2026
cad50a3
feat(tool-sandbox): add supervised command runtime
lukehinds Jun 8, 2026
a4034d4
feat(proxy): add tool sandbox credential endpoint policies
lukehinds Jun 8, 2026
8d8e074
feat(why): diagnose tool sandbox command policies
lukehinds Jun 8, 2026
9157396
fix(pty): treat visible output as startup interactivity
lukehinds Jun 8, 2026
8f3c840
test(pack): verify installed profile enforcement
lukehinds Jun 8, 2026
feb19e6
docs(tool-sandbox): add ETI guide and demos
lukehinds Jun 8, 2026
28f61b0
chore(profiles): remove obsolete QA credential fixtures
lukehinds Jun 8, 2026
2185842
refactor(exec-strategy): consolidate startup timeout logic
lukehinds Jun 8, 2026
afddf07
refactor(tool-sandbox): use zeroizing for secret values
lukehinds Jun 8, 2026
dd7408b
chore(eti): remove tool-sandbox , demo and develop files
lukehinds Jun 8, 2026
54ecd16
refactor(cli): streamline internal logic and code structure
lukehinds Jun 8, 2026
e789f3f
test(tool-sandbox): use direct path comparisons in linux tests
lukehinds Jun 8, 2026
0388874
add advanced policy controls and approval workflows
lukehinds Jun 10, 2026
02dcbca
feat(credential-capture): add supervisor-side cli command capture
lukehinds Jun 10, 2026
09bc612
refactor(tool-sandbox): rename ephemeral tool invocation to tool sandbox
lukehinds Jun 13, 2026
51f91ca
feat(tool-sandbox): runtime-delegated open_urls for brokered commands
panga Jun 15, 2026
68ef949
Add doc additions and dangerous commands docs
lukehinds Jun 16, 2026
795296d
refactor(builtin-profiles): remove linux-tool-sandbox-git-ssh profile
lukehinds Jun 16, 2026
c95efd3
refactor(tool-sandbox): align writable executable checks to sandbox c…
lukehinds Jun 17, 2026
258c079
docs(tool-sandbox): remove stale witness guide links
lukehinds Jun 17, 2026
3dc1470
feat(tool-sandbox): allow proxy environment variables
lukehinds Jun 17, 2026
bb26d68
fix(macos-sandbox): allow python framework app bundle access
lukehinds Jun 17, 2026
51020d7
fix(rebase): reconcile fixtures with merged main+tool-sandbox field set
lukehinds Jun 19, 2026
f13d08a
fix(tool-sandbox): memoize ELF dependency resolution on Linux
lukehinds Jun 19, 2026
d812299
fix(network): activate custom credentials explicitly
lukehinds Jun 19, 2026
c6fb8ef
perf(linux-sandbox): optimize elf resolution cache management
lukehinds Jun 19, 2026
b802966
feat(cli): add dynamic path expansion and scoped nonces
lukehinds Jun 20, 2026
4ba77a4
docs(tool-sandbox): describe dynamic git path tokens
lukehinds Jun 20, 2026
2844d84
refactor(capture): improve credential capture error details
lukehinds Jun 22, 2026
2a23572
fix(linux-tests): update tool sandbox test state
lukehinds Jun 22, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
134 changes: 134 additions & 0 deletions Cargo.lock

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 2 additions & 0 deletions crates/nono-cli/Cargo.toml
Original file line number Diff line number Diff line change
Expand Up @@ -82,6 +82,7 @@ tracing.workspace = true
tracing-subscriber = { version = "0.3", features = ["env-filter"] }
url.workspace = true
globset = "0.4"
regex = "1"
urlencoding = "2"
tempfile.workspace = true
vt100 = "0.16.2"
Expand Down Expand Up @@ -110,6 +111,7 @@ serde.workspace = true
[dev-dependencies]
jsonschema = "0.46"
proptest = "1"
criterion = { version = "0.5", default-features = false, features = ["cargo_bench_support"] }

[lints]
workspace = true
Loading