@erichll/pi-sandbox 0.11.0 → 0.12.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +15 -0
- package/package.json +2 -2
- package/src/runner.ts +9 -1
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,20 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## 0.12.0 - 2026-08-27
|
|
4
|
+
|
|
5
|
+
- Align the package version with `@erichll/pi-auto-review` `0.12.0` and update
|
|
6
|
+
the exact dependency to inherit the private permission-policy audit and its
|
|
7
|
+
shutdown idempotence fix. No pi-sandbox runtime, filesystem/network policy,
|
|
8
|
+
grant, or public API changes.
|
|
9
|
+
|
|
10
|
+
## 0.11.1 - 2026-08-25
|
|
11
|
+
|
|
12
|
+
- Keep Sandbox Runtime's `CLAUDE_CODE_TMPDIR` aligned with each command's
|
|
13
|
+
private `pi-sandbox-tmp-*` directory. This prevents Sandbox Runtime from
|
|
14
|
+
overriding `TMPDIR` with its missing `/tmp/claude` fallback, notably fixing
|
|
15
|
+
`TMPDIR`-dependent tools on macOS.
|
|
16
|
+
- Align the exact `@erichll/pi-auto-review` dependency with `0.11.1`.
|
|
17
|
+
|
|
3
18
|
## 0.11.0 - 2026-08-24
|
|
4
19
|
|
|
5
20
|
- **Tag unmatched network domains.** When a domain does not match any static
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@erichll/pi-sandbox",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.12.0",
|
|
4
4
|
"description": "Linux (bubblewrap) and macOS (Seatbelt) process sandbox for Pi backed by Anthropic's @anthropic-ai/sandbox-runtime. Fail-closed static filesystem policy plus per-connection network approval from pi-auto-review; sandboxes main-agent Bash and built-in subagent process trees.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"license": "Apache-2.0",
|
|
@@ -51,7 +51,7 @@
|
|
|
51
51
|
},
|
|
52
52
|
"dependencies": {
|
|
53
53
|
"@anthropic-ai/sandbox-runtime": "0.0.73",
|
|
54
|
-
"@erichll/pi-auto-review": "0.
|
|
54
|
+
"@erichll/pi-auto-review": "0.12.0"
|
|
55
55
|
},
|
|
56
56
|
"peerDependencies": {
|
|
57
57
|
"@earendil-works/pi-coding-agent": "^0.84.1",
|
package/src/runner.ts
CHANGED
|
@@ -92,6 +92,10 @@ const BROKER_MODULE = fileURLToPath(
|
|
|
92
92
|
* external worker launcher, which creates the same per-worker temp dir.
|
|
93
93
|
*/
|
|
94
94
|
const SANDBOX_TMPDIR_ENV = "PI_SANDBOX_TMPDIR";
|
|
95
|
+
// Sandbox Runtime injects TMPDIR into its wrapped command from this variable.
|
|
96
|
+
// Keep it aligned with SANDBOX_TMPDIR_ENV so that injection does not replace
|
|
97
|
+
// the private command temp directory with its /tmp/claude fallback.
|
|
98
|
+
const SANDBOX_RUNTIME_TMPDIR_ENV = "CLAUDE_CODE_TMPDIR";
|
|
95
99
|
const COMMAND_TMPDIR_PREFIX = "pi-sandbox-tmp-";
|
|
96
100
|
|
|
97
101
|
/**
|
|
@@ -196,7 +200,11 @@ export async function runSandboxedCommand(
|
|
|
196
200
|
: createCommandTempDir();
|
|
197
201
|
if (tempDir) {
|
|
198
202
|
policy = withWritableTempDir(policy, tempDir);
|
|
199
|
-
brokerEnv = {
|
|
203
|
+
brokerEnv = {
|
|
204
|
+
...brokerEnv,
|
|
205
|
+
[SANDBOX_TMPDIR_ENV]: tempDir,
|
|
206
|
+
[SANDBOX_RUNTIME_TMPDIR_ENV]: tempDir,
|
|
207
|
+
};
|
|
200
208
|
}
|
|
201
209
|
const broker = spawnBroker(options, brokerEnv);
|
|
202
210
|
let timeoutHandle: NodeJS.Timeout | undefined;
|