@clipboard-health/clearance 1.0.2 → 1.0.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +11 -4
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -1,6 +1,12 @@
|
|
|
1
|
-
|
|
1
|
+
<h1 align="center">clearance</h1>
|
|
2
|
+
<p align="center">
|
|
3
|
+
<img alt="Clearance logo." height="250px" src="../../static/clearance.svg">
|
|
4
|
+
</p>
|
|
2
5
|
|
|
3
|
-
HTTP/HTTPS
|
|
6
|
+
A local HTTP/HTTPS forward proxy that gates network egress against a
|
|
7
|
+
hostname allowlist. Built for deny-by-default sandboxes — coding agents,
|
|
8
|
+
CI workers, isolated build steps — where you want one choke point the
|
|
9
|
+
sandbox can permit, with every other route to the network closed.
|
|
4
10
|
|
|
5
11
|
The proxy ships with **zero compiled-in opinions** about which hosts to allow.
|
|
6
12
|
Bring your own list — either inline via env or by pointing at one or more
|
|
@@ -100,8 +106,9 @@ kill "$(cat "${XDG_CACHE_HOME:-$HOME/.cache}/clearance/clearance.pid")"
|
|
|
100
106
|
|
|
101
107
|
## Safehouse integration (macOS)
|
|
102
108
|
|
|
103
|
-
Safehouse uses macOS sandbox profiles, so
|
|
104
|
-
only. Safehouse allows network access by
|
|
109
|
+
[Safehouse](https://agent-safehouse.dev/) uses macOS sandbox profiles, so
|
|
110
|
+
this section is for macOS hosts only. Safehouse allows network access by
|
|
111
|
+
default for agent compatibility.
|
|
105
112
|
To force a wrapped agent through this proxy, run the proxy outside
|
|
106
113
|
Safehouse, then append a Safehouse profile that denies direct remote
|
|
107
114
|
egress while leaving `localhost` open for `http://127.0.0.1:19999`.
|
package/package.json
CHANGED