ridgeline 0.2.21 → 0.2.23
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -27,7 +27,6 @@ exports.greywallProvider = {
|
|
|
27
27
|
}
|
|
28
28
|
},
|
|
29
29
|
buildArgs(repoRoot, networkAllowlist) {
|
|
30
|
-
const args = ["--auto-profile"];
|
|
31
30
|
const settings = {
|
|
32
31
|
filesystem: {
|
|
33
32
|
allowWrite: [repoRoot, "/tmp"],
|
|
@@ -38,8 +37,7 @@ exports.greywallProvider = {
|
|
|
38
37
|
}
|
|
39
38
|
const settingsPath = (0, node_path_1.join)((0, node_os_1.tmpdir)(), `ridgeline-greywall-${process.pid}.json`);
|
|
40
39
|
(0, node_fs_1.writeFileSync)(settingsPath, JSON.stringify(settings));
|
|
41
|
-
|
|
42
|
-
return args;
|
|
40
|
+
return ["--auto-profile", "--no-credential-protection", "--settings", settingsPath, "--"];
|
|
43
41
|
},
|
|
44
42
|
};
|
|
45
43
|
//# sourceMappingURL=sandbox.greywall.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"sandbox.greywall.js","sourceRoot":"","sources":["../../../src/engine/claude/sandbox.greywall.ts"],"names":[],"mappings":";;;AAAA,2DAA6C;AAC7C,qCAAuC;AACvC,yCAAgC;AAChC,qCAAgC;AAGnB,QAAA,gBAAgB,GAAoB;IAC/C,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,UAAU;IACnB,UAAU;QACR,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,6BAAQ,EAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;YACjG,IAAI,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzC,OAAO,IAAI,CAAA;YACb,CAAC;YACD,OAAO,yDAAyD,CAAA;QAClE,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,kFAAkF;YAClF,MAAM,MAAM,GAAI,GAA4C,CAAC,MAAM,IAAI,EAAE;kBACrE,CAAE,GAA4C,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;YAChE,IAAI,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzC,OAAO,IAAI,CAAA;YACb,CAAC;YACD,OAAO,yDAAyD,CAAA;QAClE,CAAC;IACH,CAAC;IACD,SAAS,CAAC,QAAgB,EAAE,gBAA0B;QACpD,MAAM,
|
|
1
|
+
{"version":3,"file":"sandbox.greywall.js","sourceRoot":"","sources":["../../../src/engine/claude/sandbox.greywall.ts"],"names":[],"mappings":";;;AAAA,2DAA6C;AAC7C,qCAAuC;AACvC,yCAAgC;AAChC,qCAAgC;AAGnB,QAAA,gBAAgB,GAAoB;IAC/C,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,UAAU;IACnB,UAAU;QACR,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,6BAAQ,EAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;YACjG,IAAI,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzC,OAAO,IAAI,CAAA;YACb,CAAC;YACD,OAAO,yDAAyD,CAAA;QAClE,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,kFAAkF;YAClF,MAAM,MAAM,GAAI,GAA4C,CAAC,MAAM,IAAI,EAAE;kBACrE,CAAE,GAA4C,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;YAChE,IAAI,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzC,OAAO,IAAI,CAAA;YACb,CAAC;YACD,OAAO,yDAAyD,CAAA;QAClE,CAAC;IACH,CAAC;IACD,SAAS,CAAC,QAAgB,EAAE,gBAA0B;QACpD,MAAM,QAAQ,GAA4B;YACxC,UAAU,EAAE;gBACV,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;aAC/B;SACF,CAAA;QAED,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,OAAO,GAAG,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAA;QACpD,CAAC;QAED,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,sBAAsB,OAAO,CAAC,GAAG,OAAO,CAAC,CAAA;QAC7E,IAAA,uBAAa,EAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAA;QAErD,OAAO,CAAC,gBAAgB,EAAE,4BAA4B,EAAE,YAAY,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;IAC3F,CAAC;CACF,CAAA"}
|
package/dist/store/settings.d.ts
CHANGED
package/dist/store/settings.js
CHANGED
|
@@ -33,10 +33,17 @@ var __importStar = (this && this.__importStar) || (function () {
|
|
|
33
33
|
};
|
|
34
34
|
})();
|
|
35
35
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
36
|
-
exports.resolveNetworkAllowlist = exports.loadSettings = exports.DEFAULT_NETWORK_ALLOWLIST = void 0;
|
|
36
|
+
exports.resolveNetworkAllowlist = exports.loadSettings = exports.DEFAULT_NETWORK_ALLOWLIST = exports.CLAUDE_REQUIRED_DOMAINS = void 0;
|
|
37
37
|
const fs = __importStar(require("node:fs"));
|
|
38
38
|
const path = __importStar(require("node:path"));
|
|
39
|
+
/** Domains Claude needs for authentication and API access — always allowlisted. */
|
|
40
|
+
exports.CLAUDE_REQUIRED_DOMAINS = [
|
|
41
|
+
"api.anthropic.com",
|
|
42
|
+
"downloads.claude.ai",
|
|
43
|
+
"http-intake.logs.us5.datadoghq.com",
|
|
44
|
+
];
|
|
39
45
|
exports.DEFAULT_NETWORK_ALLOWLIST = [
|
|
46
|
+
...exports.CLAUDE_REQUIRED_DOMAINS,
|
|
40
47
|
"registry.npmjs.org",
|
|
41
48
|
"pypi.org",
|
|
42
49
|
"files.pythonhosted.org",
|
|
@@ -61,10 +68,12 @@ const loadSettings = (ridgelineDir) => {
|
|
|
61
68
|
exports.loadSettings = loadSettings;
|
|
62
69
|
const resolveNetworkAllowlist = (ridgelineDir) => {
|
|
63
70
|
const settings = (0, exports.loadSettings)(ridgelineDir);
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
|
|
71
|
+
const base = (settings.network?.allowlist && settings.network.allowlist.length > 0)
|
|
72
|
+
? settings.network.allowlist
|
|
73
|
+
: [...exports.DEFAULT_NETWORK_ALLOWLIST];
|
|
74
|
+
// Always include Claude's required domains even if the user overrides the list
|
|
75
|
+
const merged = new Set([...exports.CLAUDE_REQUIRED_DOMAINS, ...base]);
|
|
76
|
+
return [...merged];
|
|
68
77
|
};
|
|
69
78
|
exports.resolveNetworkAllowlist = resolveNetworkAllowlist;
|
|
70
79
|
//# sourceMappingURL=settings.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../src/store/settings.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4CAA6B;AAC7B,gDAAiC;
|
|
1
|
+
{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../src/store/settings.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4CAA6B;AAC7B,gDAAiC;AAEjC,mFAAmF;AACtE,QAAA,uBAAuB,GAAa;IAC/C,mBAAmB;IACnB,qBAAqB;IACrB,oCAAoC;CACrC,CAAA;AAEY,QAAA,yBAAyB,GAAa;IACjD,GAAG,+BAAuB;IAC1B,oBAAoB;IACpB,UAAU;IACV,wBAAwB;IACxB,WAAW;IACX,kBAAkB;IAClB,cAAc;IACd,kBAAkB;IAClB,YAAY;IACZ,YAAY;IACZ,eAAe;CAChB,CAAA;AAQM,MAAM,YAAY,GAAG,CAAC,YAAoB,EAAqB,EAAE;IACtE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;IAC7D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;QAClD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAA;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC,CAAA;AARY,QAAA,YAAY,gBAQxB;AAEM,MAAM,uBAAuB,GAAG,CAAC,YAAoB,EAAY,EAAE;IACxE,MAAM,QAAQ,GAAG,IAAA,oBAAY,EAAC,YAAY,CAAC,CAAA;IAC3C,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QACjF,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS;QAC5B,CAAC,CAAC,CAAC,GAAG,iCAAyB,CAAC,CAAA;IAClC,+EAA+E;IAC/E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,+BAAuB,EAAE,GAAG,IAAI,CAAC,CAAC,CAAA;IAC7D,OAAO,CAAC,GAAG,MAAM,CAAC,CAAA;AACpB,CAAC,CAAA;AARY,QAAA,uBAAuB,2BAQnC"}
|