All pull requests

Pull requests

• feat(macos): allow configurable IOKit registry entry and user client classes

  #641·swaraj792725 opened Oct 1, 2026·

  ·
  1

• Upgrade to MXC 0.9.0

  #640·shschaefer opened Oct 1, 2026·

  ·

• linux: a command starts once both relays listen

  #639·ronleizrowice-ant opened Oct 1, 2026Collaborator·

  ·
  1

• linux: a wrap that starts over keeps what it has walked, and ends

  #638·ronleizrowice-ant opened Oct 1, 2026Collaborator·

  ·

• Release v0.0.79

  #637·ronleizrowice-ant opened Oct 1, 2026Collaborator·

  ·

• fix(cli): propagate child signal termination status and exit code

  #635·swaraj792725 opened Sep 30, 2026·

  ·
  1

• fix(sandbox): allow seccompConfig in checkDependencies and checkDependenciesAsync

  #634·swaraj792725 opened Sep 30, 2026·

  ·
  1

• checkDependencies: accept a seccompConfig, like ripgrepConfig

  #633·jayzuccarelli opened Sep 30, 2026·

  ·
  1

• cli: read the version through a static import, so a compiled binary starts

  #630·TurtIeSocks opened Sep 29, 2026·

  ·

• fix(sandbox): quote UNIX-CONNECT socket paths and probe socat listener readiness

  #625·swaraj792725 opened Sep 29, 2026·

  ·
  1

• Draft, not for merging: every ready fix merged together

  #624·ronleizrowice-ant opened Sep 29, 2026Collaborator·

  ·

• Read a path entry as the path it spells, where that exists

  #622·ronleizrowice-ant opened Sep 28, 2026Collaborator·

  ·

• Let a caller mark a path entry literal: { path, literal: true }

  #621·ronleizrowice-ant opened Sep 28, 2026Collaborator·

  ·

• Glob walk: an anchor option, a directory taken as the name it is

  #620·ronleizrowice-ant opened Sep 28, 2026Collaborator·

  ·

• macos: re-emit a literal read deny that a glob allow reaches into

  #619·v0ropaev opened Sep 28, 2026·

  ·

• linux: with no seccomp helper, have bubblewrap disable user namespaces

  #617·ronleizrowice-ant opened Sep 28, 2026Collaborator·

  ·

• linux: keep the mount point manifests where the user id says, first under /var/tmp

  #615·ronleizrowice-ant opened Sep 27, 2026Collaborator·

  ·

• fix(sandbox): omit /tmp/claude convenience write paths when covered by denyRead

  #613·swaraj792725 opened Sep 27, 2026·

  ·
  1

• fix(proxy): flush client socket before closing when upstream closes cleanly

  #612·swaraj792725 opened Sep 27, 2026·

  ·
  1

• fix(cli): propagate POSIX signal exit status (128 + signum) when sandboxed process is killed by signal

  #610·swaraj792725 opened Sep 27, 2026·

  ·
  1

• proxy: forward pipelined TLS-terminated requests in the order the client sent them

  #609·iamhuman-cheolheelee opened Sep 26, 2026·

  ·

• linux: the read-deny glob walk has a budget

  #607·ronleizrowice-ant opened Sep 25, 2026Collaborator·

  ·

• fix(macos): allow the com.apple.netsrc kernel control under network restriction

  #604·v0ropaev opened Sep 24, 2026·

  ·
  1

• cli: --violations writes each recorded violation to a file

  #601·carlostapiacl opened Sep 23, 2026·

  ·
  1

• fix(macos): canonicalize system symlink roots

  #600·sylvesterkaczmarek opened Sep 23, 2026·

  ·
  1