claudebox

toph/claudebox

Fork 0

Commit graph

72dfde91a8

feat!: thin layer over Claude /sandbox + nftables CIDR block main Christopher Mühl 2026-05-11 12:19:40 +02:00
fbca134511

docs: add scope/limits section, GUARANTEES and THREAT-MODEL Christopher Mühl 2026-05-11 09:21:47 +02:00
61f9ea78b0 docs(quick-260505-le7): Add harness config file support to claudebox Christopher Mühl 2026-05-05 15:34:33 +00:00
fbbb35577e feat(260505-le7): add config file globals, CLI flags, load_config_file, HARNESS_BIN resolution Christopher Mühl 2026-05-05 15:31:11 +00:00
9651ce759d docs(quick-260504-bw4): Add SSH support to claudebox Christopher Mühl 2026-05-04 08:41:52 +00:00
b2aeb2fd12 docs(260504-bw4): document SSH support in README Christopher Mühl 2026-05-04 08:39:57 +00:00
e9154fd691 feat(260504-bw4): make SANDBOX.md conditional on SSH activation Christopher Mühl 2026-05-04 08:39:30 +00:00
41ebf10458 feat(260504-bw4): add --with-ssh and --ssh-key flags to claudebox Christopher Mühl 2026-05-04 08:38:45 +00:00
29996a2d40

fix: resolve SSL cert symlinks before entering sandbox Christopher Mühl 2026-04-28 18:25:07 +02:00
aff389b9d4

feat: env files and fix NixOS SSL cert passthrough Christopher Mühl 2026-04-28 18:11:56 +02:00
c97006e18e feat: per-project instance isolation (phase 05) Christopher Mühl 2026-04-16 10:07:14 +00:00
648f89459f docs: update README for phase 05 architecture Christopher Mühl 2026-04-16 10:06:52 +00:00
dc3674c2fc docs(phase-05): add security threat verification Christopher Mühl 2026-04-16 10:05:38 +00:00
4af459c4a8 test(05): complete UAT - 8 passed, 0 issues Christopher Mühl 2026-04-16 10:04:27 +00:00
7d9c30d52f docs(05-02): complete GC flag plan — --gc flag, gc_instances, integration test Christopher Mühl 2026-04-13 10:03:10 +00:00
ce2bd0fcd7 test(05-02): add GC integration test covering stale removal, valid preservation, empty-dir safety Christopher Mühl 2026-04-13 10:02:31 +00:00
3f1959344f feat(05-02): add --gc flag and gc_instances function Christopher Mühl 2026-04-13 10:01:24 +00:00
4751161e0f chore: merge executor worktree (phase 05-01) Christopher Mühl 2026-04-13 09:58:14 +00:00
071ccc92ac docs(05-01): create execution summary Christopher Mühl 2026-04-13 09:57:38 +00:00
4baf576810 fix: add /bin/sh symlink to sandbox so hooks can exec sh Christopher Mühl 2026-04-13 09:55:40 +00:00
6eb3b464f5 feat(05-01): register INST-01 through INST-04 requirements Christopher Mühl 2026-04-13 09:01:22 +00:00
c5e8cca867 feat(05-01): rewrite mount architecture with per-project instance isolation Christopher Mühl 2026-04-13 09:00:53 +00:00
8e5063a29d fix(05): revise plans based on checker feedback Christopher Mühl 2026-04-13 08:52:28 +00:00
dd064aa858 docs(05): create phase plan — mount rewrite + per-project isolation + GC Christopher Mühl 2026-04-13 08:47:04 +00:00
a040aaa58a docs(05): research phase domain — per-project instance isolation Christopher Mühl 2026-04-13 08:41:04 +00:00
597cb0588b docs(state): record phase 5 context session Christopher Mühl 2026-04-10 16:23:27 +00:00
af9f1848eb docs(05): capture phase context (assumptions mode) Christopher Mühl 2026-04-10 16:23:13 +00:00
ee70f08909 fix(planning): restore v2.0 state after executor regression in 6465da8 Christopher Mühl 2026-04-10 12:44:41 +00:00
d106d1be5c fix: replace tilde with \$HOME in printf label (SC2088) Christopher Mühl 2026-04-10 12:26:35 +00:00
f40959c74f docs(phase-04): complete phase execution — credential passthrough + audit redesign Christopher Mühl 2026-04-10 09:33:55 +00:00
aa3c57a417 docs(04): add phase verification — all must-haves passed Christopher Mühl 2026-04-10 09:33:46 +00:00
de4549c3f2 fix(04): revert credentials to read-write mount per plan D-02; add AUTH-01/AUTH-02 to requirements Christopher Mühl 2026-04-10 09:32:14 +00:00
390812625d docs(04): add code review fix report Christopher Mühl 2026-04-10 09:28:11 +00:00
0922b752a5 fix(04): WR-02 add stride-3 guard and safe arithmetic in dry-run ENV_ARGS loop Christopher Mühl 2026-04-10 09:27:39 +00:00
adb9dd117d fix(04): CR-01 CR-02 WR-01 fix credential path and use read-only bind mount Christopher Mühl 2026-04-10 09:27:18 +00:00
112f604856 docs(04): add code review report Christopher Mühl 2026-04-10 09:25:49 +00:00
20fbd3f7d3 docs(04-01): complete credential mount and audit redesign plan Christopher Mühl 2026-04-10 09:22:02 +00:00
def8e67126 feat(04-01): rewrite print_audit to unified env list with Mounts and Network sections Christopher Mühl 2026-04-10 09:21:15 +00:00
6465da8583 feat(04-01): add credential file mount for OAuth passthrough Christopher Mühl 2026-04-10 09:20:18 +00:00
40e40e3f30 docs(04): create phase 4 plan — credential mount and audit redesign Christopher Mühl 2026-04-10 09:11:05 +00:00
41bd51ed42 docs(04): capture phase context and discussion log Christopher Mühl 2026-04-10 09:06:17 +00:00
4852696b95 docs: create milestone v2.0 roadmap (4 phases) Christopher Mühl 2026-04-10 08:56:58 +00:00
7d4bf28c07 docs: define milestone v2.0 requirements Christopher Mühl 2026-04-10 08:52:20 +00:00
b2ece43a03 docs: complete v2.0 project research Christopher Mühl 2026-04-10 08:45:25 +00:00
3dfcb40e31 docs: start milestone v2.0 Network Isolation & Profiles Christopher Mühl 2026-04-10 08:30:13 +00:00
ee686a36eb chore: complete v1.0 MVP milestone v1.0 Christopher Mühl 2026-04-10 08:05:53 +00:00
778216ead9

docs(quick-260410-d4u): on non-nixos hosts, bwrap fails because /etc/static does not exist Christopher Mühl 2026-04-10 09:29:58 +02:00
97c10f8fd4

fix(260410-d4u): conditionally mount /etc/static only on NixOS Christopher Mühl 2026-04-10 09:29:11 +02:00
1ccaf20eb4

docs: fix remote URL and add flake usage to README Christopher Mühl 2026-04-09 22:04:41 +02:00
7430e9d64c

docs: add README Christopher Mühl 2026-04-09 22:03:20 +02:00
e4d47b997b

docs: plant seed — mount real ~/.claude instead of separate ~/.claudebox Christopher Mühl 2026-04-09 21:52:27 +02:00
e43d33602d

fix: symlink ~/.claude to ~/.claudebox instead of renaming mount Christopher Mühl 2026-04-09 21:44:54 +02:00
d4cfa7a537

docs(phase-03): evolve PROJECT.md after phase completion Christopher Mühl 2026-04-09 21:24:47 +02:00
f5b77428a5

docs(phase-03): complete phase execution Christopher Mühl 2026-04-09 21:24:22 +02:00
9a7fba2219

docs(03): add code review report Christopher Mühl 2026-04-09 21:21:53 +02:00
a36956236a

chore: merge executor worktree (worktree-agent-a9a8ae0c) Christopher Mühl 2026-04-09 21:19:46 +02:00
7864f5d00d

docs(03-01): complete sandbox-aware prompting plan Christopher Mühl 2026-04-09 21:19:28 +02:00
27d9db44a0

feat(03-01): add SANDBOX.md generation and CLAUDE.md import check Christopher Mühl 2026-04-09 21:18:10 +02:00
2f737d1f3a

docs(03): create phase plan Christopher Mühl 2026-04-09 21:13:18 +02:00
351dcc5c8b

docs(03): research sandbox-aware prompting Christopher Mühl 2026-04-09 21:05:52 +02:00
2ee1588408

docs(state): record phase 3 context session Christopher Mühl 2026-04-09 20:59:46 +02:00
8e900862f9

docs(03): capture phase context Christopher Mühl 2026-04-09 20:59:38 +02:00
a15d4b11d8

docs: plant seed — Go rewrite of claudebox.sh Christopher Mühl 2026-04-09 17:47:08 +02:00
8555fd5c83

docs: plant seed — eBPF network session logging Christopher Mühl 2026-04-09 17:44:44 +02:00
88dda3a777

docs(02): mark phase complete Christopher Mühl 2026-04-09 17:43:28 +02:00
c83129953f

test(02): persist human verification items as UAT Christopher Mühl 2026-04-09 17:28:18 +02:00
caabd59ae2

docs(02): add code review report Christopher Mühl 2026-04-09 17:25:30 +02:00
64cb190b5d

docs(02-02): complete env audit display plan Christopher Mühl 2026-04-09 17:22:39 +02:00
b035f82cc7

feat(02-02): add confirmation prompt with TTY detection Christopher Mühl 2026-04-09 17:21:37 +02:00
1c986d22b8

feat(02-02): add env audit display with masking and grouped sections Christopher Mühl 2026-04-09 17:20:58 +02:00
a0f42f89d5

docs(02-01): complete flag parsing and CLI modes plan Christopher Mühl 2026-04-09 17:12:23 +02:00
7001303436

feat(02-01): add --check mode for prerequisite verification Christopher Mühl 2026-04-09 17:11:21 +02:00
1eddd9336d

feat(02-01): add --dry-run mode that prints full bwrap command and exits Christopher Mühl 2026-04-09 17:10:15 +02:00
72ba48d004

feat(02-01): refactor flag parsing to while/shift with CLAUDE_ARGS accumulator Christopher Mühl 2026-04-09 17:09:56 +02:00
daf47bd094

docs(02): record planning completion in state Christopher Mühl 2026-04-09 16:56:37 +02:00
0a4dba4c3c

docs(02): create phase plan Christopher Mühl 2026-04-09 16:34:14 +02:00
28798102d0

docs(02): research phase domain Christopher Mühl 2026-04-09 15:39:57 +02:00
0f4e26e8ae

docs(state): record phase 2 context session Christopher Mühl 2026-04-09 15:34:01 +02:00
bab3d8bc6d

docs(02): capture phase context Christopher Mühl 2026-04-09 15:33:52 +02:00
f19fd74bc3

docs: mark phase 1 complete Christopher Mühl 2026-04-09 15:00:14 +02:00
613d015cc1

fix: SHELL path, PATH isolation, --shell flag, nix-claude-code input Christopher Mühl 2026-04-09 14:59:43 +02:00
dd6742abef

docs: plant seed — agent-agnostic sandbox support Christopher Mühl 2026-04-09 13:03:55 +02:00
e385f414ca

docs(01-02): complete build verification plan Christopher Mühl 2026-04-09 11:15:53 +02:00
9296453be3

fix(01-02): resolve claude and env paths through symlinks Christopher Mühl 2026-04-09 11:14:50 +02:00
14642eb32e

docs(01-01): complete nix flake and sandbox script plan Christopher Mühl 2026-04-09 11:13:09 +02:00
26bdf368b5

chore(01-01): add flake.lock with pinned nixpkgs and nix-index-database Christopher Mühl 2026-04-09 11:11:55 +02:00
51dba047f3

feat(01-01): add claudebox.sh with bwrap sandbox, env allowlist, and secret hiding Christopher Mühl 2026-04-09 11:11:44 +02:00
0ed2d33117

feat(01-01): add flake.nix with writeShellApplication and all runtimeInputs Christopher Mühl 2026-04-09 11:11:11 +02:00
7b1220bdf1

docs(01): resolve open research questions Christopher Mühl 2026-04-09 11:05:02 +02:00
71790d714b

docs(01): create phase plan Christopher Mühl 2026-04-09 11:02:11 +02:00
da29430168

docs(phase-1): research minimal viable sandbox Christopher Mühl 2026-04-09 10:55:45 +02:00
6015593272

docs(state): record phase 1 context session Christopher Mühl 2026-04-09 10:46:48 +02:00
527ed51e6a

docs(01): capture phase context Christopher Mühl 2026-04-09 10:46:40 +02:00
bbb8299591

docs: create roadmap (3 phases) Christopher Mühl 2026-04-09 10:32:35 +02:00
018382fc3b

docs: define v1 requirements Christopher Mühl 2026-04-09 10:13:30 +02:00
a6f8ea95d3

docs: complete project research Christopher Mühl 2026-04-09 10:05:35 +02:00
e711ed1548

chore: add project config Christopher Mühl 2026-04-09 09:57:13 +02:00
454be67d57

docs: initialize project Christopher Mühl 2026-04-09 09:52:14 +02:00