f40959c74f
docs(phase-04): complete phase execution — credential passthrough + audit redesign
2026-04-10 09:33:55 +00:00
aa3c57a417
docs(04): add phase verification — all must-haves passed
2026-04-10 09:33:46 +00:00
de4549c3f2
fix(04): revert credentials to read-write mount per plan D-02; add AUTH-01/AUTH-02 to requirements
2026-04-10 09:32:14 +00:00
390812625d
docs(04): add code review fix report
2026-04-10 09:28:11 +00:00
0922b752a5
fix(04): WR-02 add stride-3 guard and safe arithmetic in dry-run ENV_ARGS loop
2026-04-10 09:27:39 +00:00
adb9dd117d
fix(04): CR-01 CR-02 WR-01 fix credential path and use read-only bind mount
2026-04-10 09:27:18 +00:00
112f604856
docs(04): add code review report
2026-04-10 09:25:49 +00:00
20fbd3f7d3
docs(04-01): complete credential mount and audit redesign plan
...
- Add 04-01-SUMMARY.md with task details, decisions, deviations, threat flags
2026-04-10 09:22:02 +00:00
def8e67126
feat(04-01): rewrite print_audit to unified env list with Mounts and Network sections
...
- Replace three-section audit with single unified list using [~]/[>]/[+] prefixes
- [~] green = sandbox-generated, [>] yellow = host allowlisted, [+] cyan = extra
- Prefixes are readable without color (accessibility requirement)
- PATH retains multiline indented display
- Add Mounts section: CWD, ~/.claude, and conditional credentials bind
- Add Network section: 'full (host network)' as Phase 6 placeholder
- All output to stderr, mask_value called for all env var values
2026-04-10 09:21:15 +00:00
6465da8583
feat(04-01): add credential file mount for OAuth passthrough
...
- Add CREDS_FILE/CREDS_MOUNT detection after mkdir ~/.claudebox
- Conditional --bind in exec bwrap via BWRAP_ARGS array
- Mirror conditional bind in --dry-run display block
- Read-write mount (not ro-bind) for OAuth token refresh
- Silent skip when credentials file absent (no error/warning)
- Refactor exec bwrap to BWRAP_ARGS array for conditional mount support
2026-04-10 09:20:18 +00:00
40e40e3f30
docs(04): create phase 4 plan — credential mount and audit redesign
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-10 09:11:05 +00:00
41bd51ed42
docs(04): capture phase context and discussion log
2026-04-10 09:06:17 +00:00
4852696b95
docs: create milestone v2.0 roadmap (4 phases)
2026-04-10 08:56:58 +00:00
7d4bf28c07
docs: define milestone v2.0 requirements
2026-04-10 08:52:20 +00:00
b2ece43a03
docs: complete v2.0 project research
2026-04-10 08:45:25 +00:00
3dfcb40e31
docs: start milestone v2.0 Network Isolation & Profiles
2026-04-10 08:30:13 +00:00
ee686a36eb
chore: complete v1.0 MVP milestone
...
Archive milestone artifacts, evolve PROJECT.md, reorganize ROADMAP.md,
write retrospective. Requirements archived to milestones/v1.0-REQUIREMENTS.md.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-10 08:05:53 +00:00
778216ead9
docs(quick-260410-d4u): on non-nixos hosts, bwrap fails because /etc/static does not exist
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-10 09:46:51 +02:00
97c10f8fd4
fix(260410-d4u): conditionally mount /etc/static only on NixOS
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-10 09:29:11 +02:00
1ccaf20eb4
docs: fix remote URL and add flake usage to README
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-09 22:04:41 +02:00
7430e9d64c
docs: add README
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-09 22:03:20 +02:00
e4d47b997b
docs: plant seed — mount real ~/.claude instead of separate ~/.claudebox
2026-04-09 21:52:27 +02:00
e43d33602d
fix: symlink ~/.claude to ~/.claudebox instead of renaming mount
...
Both paths now resolve inside the sandbox, so hook paths
and settings referencing ~/.claude work without fixups.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-09 21:44:54 +02:00
d4cfa7a537
docs(phase-03): evolve PROJECT.md after phase completion
2026-04-09 21:24:47 +02:00
f5b77428a5
docs(phase-03): complete phase execution
2026-04-09 21:24:22 +02:00
9a7fba2219
docs(03): add code review report
2026-04-09 21:21:53 +02:00
a36956236a
chore: merge executor worktree (worktree-agent-a9a8ae0c)
2026-04-09 21:19:46 +02:00
7864f5d00d
docs(03-01): complete sandbox-aware prompting plan
2026-04-09 21:19:28 +02:00
27d9db44a0
feat(03-01): add SANDBOX.md generation and CLAUDE.md import check
2026-04-09 21:18:10 +02:00
2f737d1f3a
docs(03): create phase plan
2026-04-09 21:13:18 +02:00
351dcc5c8b
docs(03): research sandbox-aware prompting
2026-04-09 21:05:52 +02:00
2ee1588408
docs(state): record phase 3 context session
2026-04-09 20:59:46 +02:00
8e900862f9
docs(03): capture phase context
2026-04-09 20:59:38 +02:00
a15d4b11d8
docs: plant seed — Go rewrite of claudebox.sh
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-09 17:47:08 +02:00
8555fd5c83
docs: plant seed — eBPF network session logging
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-09 17:44:44 +02:00
88dda3a777
docs(02): mark phase complete
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-09 17:43:28 +02:00
c83129953f
test(02): persist human verification items as UAT
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-09 17:28:18 +02:00
caabd59ae2
docs(02): add code review report
2026-04-09 17:25:30 +02:00
64cb190b5d
docs(02-02): complete env audit display plan
2026-04-09 17:22:39 +02:00
b035f82cc7
feat(02-02): add confirmation prompt with TTY detection
2026-04-09 17:21:37 +02:00
1c986d22b8
feat(02-02): add env audit display with masking and grouped sections
2026-04-09 17:20:58 +02:00
a0f42f89d5
docs(02-01): complete flag parsing and CLI modes plan
2026-04-09 17:13:18 +02:00
7001303436
feat(02-01): add --check mode for prerequisite verification
2026-04-09 17:13:18 +02:00
1eddd9336d
feat(02-01): add --dry-run mode that prints full bwrap command and exits
2026-04-09 17:13:17 +02:00
72ba48d004
feat(02-01): refactor flag parsing to while/shift with CLAUDE_ARGS accumulator
2026-04-09 17:13:17 +02:00
daf47bd094
docs(02): record planning completion in state
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-09 16:56:37 +02:00
0a4dba4c3c
docs(02): create phase plan
2026-04-09 16:34:14 +02:00
28798102d0
docs(02): research phase domain
2026-04-09 15:39:57 +02:00
0f4e26e8ae
docs(state): record phase 2 context session
2026-04-09 15:34:01 +02:00
bab3d8bc6d
docs(02): capture phase context
2026-04-09 15:33:52 +02:00
