c5e8cca867
feat(05-01): rewrite mount architecture with per-project instance isolation
...
- Replace --bind ~/.claudebox + --symlink with direct --bind ~/.claude ~/.claude
- Add compute_canonical_root() function using git rev-parse --git-common-dir
- Add per-project INSTANCE_DIR via sha256sum[:16] of canonical git root
- Overlay projects/ with per-project hash dir for isolated conversation history
- Overlay history.jsonl and SANDBOX.md as file-level bind mounts
- Update credential mount target from ~/.claudebox to ~/.claude
- Add CLAUDE_JSON_FILE (~/.claude.json) detection and conditional bind mount
- Remove stale CLAUDE.md injection logic (D-06: user's real CLAUDE.md used)
- Update dry-run block and print_audit to reflect new mount layout
- Update SANDBOX.md heredoc to remove ~/.claudebox reference
2026-04-13 09:00:53 +00:00
8e5063a29d
fix(05): revise plans based on checker feedback
2026-04-13 08:52:28 +00:00
dd064aa858
docs(05): create phase plan — mount rewrite + per-project isolation + GC
2026-04-13 08:47:04 +00:00
a040aaa58a
docs(05): research phase domain — per-project instance isolation
2026-04-13 08:41:04 +00:00
597cb0588b
docs(state): record phase 5 context session
2026-04-10 16:23:27 +00:00
af9f1848eb
docs(05): capture phase context (assumptions mode)
2026-04-10 16:23:13 +00:00
ee70f08909
fix(planning): restore v2.0 state after executor regression in 6465da8
...
Commit 6465da8 (phase 04-01 executor) was made from a stale worktree
predating v1.0 completion (ee686a3 ), accidentally reverting:
- ROADMAP.md from v2.0 (phases 4-7) back to pre-v1.0 structure
- STATE.md from milestone v2.0/active back to v1.0/executing
- Deleted .planning/milestones/ (v1.0 archive files)
This commit restores the correct state:
- ROADMAP.md: v2.0 structure with v1.0 archived + phase 04 marked complete
- STATE.md: milestone v2.0, phase 04 complete (1/4 phases, 25%)
- milestones/: v1.0-ROADMAP.md + v1.0-REQUIREMENTS.md restored
- MILESTONES.md + RETROSPECTIVE.md: restored from v1.0 completion
- phases/01-03/: staged deletions of v1.0 phase artifacts (cleaned up)
- v1.0-MILESTONE-AUDIT.md: audit report documenting the corruption
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-10 12:44:41 +00:00
f40959c74f
docs(phase-04): complete phase execution — credential passthrough + audit redesign
2026-04-10 09:33:55 +00:00
aa3c57a417
docs(04): add phase verification — all must-haves passed
2026-04-10 09:33:46 +00:00
de4549c3f2
fix(04): revert credentials to read-write mount per plan D-02; add AUTH-01/AUTH-02 to requirements
2026-04-10 09:32:14 +00:00
390812625d
docs(04): add code review fix report
2026-04-10 09:28:11 +00:00
112f604856
docs(04): add code review report
2026-04-10 09:25:49 +00:00
20fbd3f7d3
docs(04-01): complete credential mount and audit redesign plan
...
- Add 04-01-SUMMARY.md with task details, decisions, deviations, threat flags
2026-04-10 09:22:02 +00:00
6465da8583
feat(04-01): add credential file mount for OAuth passthrough
...
- Add CREDS_FILE/CREDS_MOUNT detection after mkdir ~/.claudebox
- Conditional --bind in exec bwrap via BWRAP_ARGS array
- Mirror conditional bind in --dry-run display block
- Read-write mount (not ro-bind) for OAuth token refresh
- Silent skip when credentials file absent (no error/warning)
- Refactor exec bwrap to BWRAP_ARGS array for conditional mount support
2026-04-10 09:20:18 +00:00
40e40e3f30
docs(04): create phase 4 plan — credential mount and audit redesign
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-10 09:11:05 +00:00
41bd51ed42
docs(04): capture phase context and discussion log
2026-04-10 09:06:17 +00:00
4852696b95
docs: create milestone v2.0 roadmap (4 phases)
2026-04-10 08:56:58 +00:00
7d4bf28c07
docs: define milestone v2.0 requirements
2026-04-10 08:52:20 +00:00
b2ece43a03
docs: complete v2.0 project research
2026-04-10 08:45:25 +00:00
3dfcb40e31
docs: start milestone v2.0 Network Isolation & Profiles
2026-04-10 08:30:13 +00:00
ee686a36eb
chore: complete v1.0 MVP milestone
...
Archive milestone artifacts, evolve PROJECT.md, reorganize ROADMAP.md,
write retrospective. Requirements archived to milestones/v1.0-REQUIREMENTS.md.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-10 08:05:53 +00:00
778216ead9
docs(quick-260410-d4u): on non-nixos hosts, bwrap fails because /etc/static does not exist
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-10 09:46:51 +02:00
e4d47b997b
docs: plant seed — mount real ~/.claude instead of separate ~/.claudebox
2026-04-09 21:52:27 +02:00
d4cfa7a537
docs(phase-03): evolve PROJECT.md after phase completion
2026-04-09 21:24:47 +02:00
f5b77428a5
docs(phase-03): complete phase execution
2026-04-09 21:24:22 +02:00
9a7fba2219
docs(03): add code review report
2026-04-09 21:21:53 +02:00
7864f5d00d
docs(03-01): complete sandbox-aware prompting plan
2026-04-09 21:19:28 +02:00
2f737d1f3a
docs(03): create phase plan
2026-04-09 21:13:18 +02:00
351dcc5c8b
docs(03): research sandbox-aware prompting
2026-04-09 21:05:52 +02:00
2ee1588408
docs(state): record phase 3 context session
2026-04-09 20:59:46 +02:00
8e900862f9
docs(03): capture phase context
2026-04-09 20:59:38 +02:00
a15d4b11d8
docs: plant seed — Go rewrite of claudebox.sh
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-09 17:47:08 +02:00
8555fd5c83
docs: plant seed — eBPF network session logging
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-09 17:44:44 +02:00
88dda3a777
docs(02): mark phase complete
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-09 17:43:28 +02:00
c83129953f
test(02): persist human verification items as UAT
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-09 17:28:18 +02:00
caabd59ae2
docs(02): add code review report
2026-04-09 17:25:30 +02:00
64cb190b5d
docs(02-02): complete env audit display plan
2026-04-09 17:22:39 +02:00
a0f42f89d5
docs(02-01): complete flag parsing and CLI modes plan
2026-04-09 17:13:18 +02:00
daf47bd094
docs(02): record planning completion in state
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-09 16:56:37 +02:00
0a4dba4c3c
docs(02): create phase plan
2026-04-09 16:34:14 +02:00
28798102d0
docs(02): research phase domain
2026-04-09 15:39:57 +02:00
0f4e26e8ae
docs(state): record phase 2 context session
2026-04-09 15:34:01 +02:00
bab3d8bc6d
docs(02): capture phase context
2026-04-09 15:33:52 +02:00
f19fd74bc3
docs: mark phase 1 complete
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-09 15:00:14 +02:00
dd6742abef
docs: plant seed — agent-agnostic sandbox support
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-09 13:03:55 +02:00
e385f414ca
docs(01-02): complete build verification plan
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-09 11:15:53 +02:00
14642eb32e
docs(01-01): complete nix flake and sandbox script plan
2026-04-09 11:13:09 +02:00
7b1220bdf1
docs(01): resolve open research questions
2026-04-09 11:05:02 +02:00
71790d714b
docs(01): create phase plan
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-09 11:02:11 +02:00
da29430168
docs(phase-1): research minimal viable sandbox
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-09 10:55:45 +02:00