ridgeline 0.2.10 → 0.2.11

package/dist/agents/core/hooks/network-guard.md

@@ -9,6 +9,7 @@ rsync (with remote paths), python -m http.server, node -e with http/https
 modules, telnet, ftp.
 
 Allow these exceptions:
+
 - npm install, npm ci, npm update
 - npx (any arguments)
 - pip install, pip3 install

package/dist/engine/claude/sandbox.greywall.js

@@ -1,19 +1,21 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.greywallProvider = void 0;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const node_os_1 = require("node:os");
 exports.greywallProvider = {
     name: "greywall",
     command: "greywall",
-    buildArgs(repoRoot, networkAllowlist) {
-        const args = [
-            "--allow-dir", repoRoot,
-            "--allow-dir", "/tmp",
-        ];
-        for (const domain of networkAllowlist) {
-            args.push("--allow-network", domain);
-        }
-        args.push("--");
-        return args;
+    buildArgs(repoRoot, _networkAllowlist) {
+        const settings = {
+            filesystem: {
+                allowWrite: [repoRoot, "/tmp"],
+            },
+        };
+        const settingsPath = (0, node_path_1.join)((0, node_os_1.tmpdir)(), `ridgeline-greywall-${process.pid}.json`);
+        (0, node_fs_1.writeFileSync)(settingsPath, JSON.stringify(settings));
+        return ["--settings", settingsPath, "--"];
     },
 };
 //# sourceMappingURL=sandbox.greywall.js.map

package/dist/engine/claude/sandbox.greywall.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox.greywall.js","sourceRoot":"","sources":["../../../src/engine/claude/sandbox.greywall.ts"],"names":[],"mappings":";;;AAEa,QAAA,gBAAgB,GAAoB;IAC/C,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,UAAU;IACnB,SAAS,CAAC,QAAgB,EAAE,gBAA0B;QACpD,MAAM,IAAI,GAAa;YACrB,aAAa,EAAE,QAAQ;YACvB,aAAa,EAAE,MAAM;SACtB,CAAA;QACD,KAAK,MAAM,MAAM,IAAI,gBAAgB,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAA;QACtC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACf,OAAO,IAAI,CAAA;IACb,CAAC;CACF,CAAA"}
+{"version":3,"file":"sandbox.greywall.js","sourceRoot":"","sources":["../../../src/engine/claude/sandbox.greywall.ts"],"names":[],"mappings":";;;AAAA,qCAAuC;AACvC,yCAAgC;AAChC,qCAAgC;AAGnB,QAAA,gBAAgB,GAAoB;IAC/C,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,UAAU;IACnB,SAAS,CAAC,QAAgB,EAAE,iBAA2B;QACrD,MAAM,QAAQ,GAAG;YACf,UAAU,EAAE;gBACV,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;aAC/B;SACF,CAAA;QAED,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,sBAAsB,OAAO,CAAC,GAAG,OAAO,CAAC,CAAA;QAC7E,IAAA,uBAAa,EAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAA;QAErD,OAAO,CAAC,YAAY,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;IAC3C,CAAC;CACF,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ridgeline",
-  "version": "0.2.10",
+  "version": "0.2.11",
   "description": "Build harness for long-horizon software execution",
   "license": "MIT",
   "bin": {