@erichll/pi-sandbox 0.17.1 → 0.18.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +13 -0
- package/package.json +3 -3
- package/src/policy.ts +0 -7
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,18 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## 0.18.1 - 2026-09-17
|
|
4
|
+
|
|
5
|
+
- Trim redundant paths from default `denyWrite` policy (`settings.json`,
|
|
6
|
+
agent `settings.json`, `permissions.json`, `sandbox.json`, and legacy
|
|
7
|
+
`pi-sandbox.json`), reducing unnecessary mount point stubs created by bubblewrap
|
|
8
|
+
while preserving protection for `.pi/pi-auto-review.json` and agent extensions.
|
|
9
|
+
|
|
10
|
+
## 0.18.0 - 2026-09-11
|
|
11
|
+
|
|
12
|
+
- Depend on the coordinated `@erichll/pi-auto-review 0.18.0` release.
|
|
13
|
+
- Pin the development `pi-subagents` baseline to `^0.67.0`. The runtime peer
|
|
14
|
+
remains `>=0.66.0`; protected native mode still fail-closes below 0.66.0.
|
|
15
|
+
|
|
3
16
|
## 0.17.1 - 2026-09-06
|
|
4
17
|
|
|
5
18
|
- Move the `pi-subagents` compatibility floor to 0.66.0 for protected native
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@erichll/pi-sandbox",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.18.1",
|
|
4
4
|
"description": "Linux (bubblewrap) and macOS (Seatbelt) process sandbox for Pi backed by Anthropic's @anthropic-ai/sandbox-runtime. Fail-closed static filesystem policy plus per-connection network approval from pi-auto-review; sandboxes main-agent Bash and built-in subagent process trees.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"license": "Apache-2.0",
|
|
@@ -51,7 +51,7 @@
|
|
|
51
51
|
},
|
|
52
52
|
"dependencies": {
|
|
53
53
|
"@anthropic-ai/sandbox-runtime": "0.0.75",
|
|
54
|
-
"@erichll/pi-auto-review": "0.
|
|
54
|
+
"@erichll/pi-auto-review": "^0.18.0",
|
|
55
55
|
"jiti": "2.7.0"
|
|
56
56
|
},
|
|
57
57
|
"peerDependencies": {
|
|
@@ -68,7 +68,7 @@
|
|
|
68
68
|
"@earendil-works/pi-coding-agent": "^0.85.0",
|
|
69
69
|
"@earendil-works/pi-server": "^0.85.0",
|
|
70
70
|
"@types/node": "^26.2.0",
|
|
71
|
-
"pi-subagents": "
|
|
71
|
+
"pi-subagents": "^0.67.0",
|
|
72
72
|
"typescript": "^6.0.3"
|
|
73
73
|
}
|
|
74
74
|
}
|
package/src/policy.ts
CHANGED
|
@@ -247,14 +247,7 @@ export function createDefaultPolicy(
|
|
|
247
247
|
],
|
|
248
248
|
allowWrite: [workspace, "/dev/null"],
|
|
249
249
|
denyWrite: [
|
|
250
|
-
join(workspace, ".pi", "settings.json"),
|
|
251
|
-
join(workspace, ".pi", "sandbox.json"),
|
|
252
250
|
join(workspace, ".pi", "pi-auto-review.json"),
|
|
253
|
-
join(home, ".pi", "agent", "settings.json"),
|
|
254
|
-
join(home, ".pi", "agent", "permissions.json"),
|
|
255
|
-
join(home, ".pi", "agent", "sandbox.json"),
|
|
256
|
-
// Legacy config path kept write-protected during migration.
|
|
257
|
-
join(home, ".pi", "agent", "pi-sandbox.json"),
|
|
258
251
|
join(home, ".pi", "agent", "logs"),
|
|
259
252
|
// Prevent the sandbox from installing or rewriting trusted extensions
|
|
260
253
|
// (includes ~/.pi/agent/extensions/pi-sandbox/config.json).
|