ridgeline 0.2.22 → 0.2.23
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -2,6 +2,9 @@
|
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
3
|
exports.greywallProvider = void 0;
|
|
4
4
|
const node_child_process_1 = require("node:child_process");
|
|
5
|
+
const node_fs_1 = require("node:fs");
|
|
6
|
+
const node_path_1 = require("node:path");
|
|
7
|
+
const node_os_1 = require("node:os");
|
|
5
8
|
exports.greywallProvider = {
|
|
6
9
|
name: "greywall",
|
|
7
10
|
command: "greywall",
|
|
@@ -23,8 +26,18 @@ exports.greywallProvider = {
|
|
|
23
26
|
return "greyproxy is not running. Start it with: greywall setup";
|
|
24
27
|
}
|
|
25
28
|
},
|
|
26
|
-
buildArgs(
|
|
27
|
-
|
|
29
|
+
buildArgs(repoRoot, networkAllowlist) {
|
|
30
|
+
const settings = {
|
|
31
|
+
filesystem: {
|
|
32
|
+
allowWrite: [repoRoot, "/tmp"],
|
|
33
|
+
},
|
|
34
|
+
};
|
|
35
|
+
if (networkAllowlist.length > 0) {
|
|
36
|
+
settings.network = { allowlist: networkAllowlist };
|
|
37
|
+
}
|
|
38
|
+
const settingsPath = (0, node_path_1.join)((0, node_os_1.tmpdir)(), `ridgeline-greywall-${process.pid}.json`);
|
|
39
|
+
(0, node_fs_1.writeFileSync)(settingsPath, JSON.stringify(settings));
|
|
40
|
+
return ["--auto-profile", "--no-credential-protection", "--settings", settingsPath, "--"];
|
|
28
41
|
},
|
|
29
42
|
};
|
|
30
43
|
//# sourceMappingURL=sandbox.greywall.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"sandbox.greywall.js","sourceRoot":"","sources":["../../../src/engine/claude/sandbox.greywall.ts"],"names":[],"mappings":";;;AAAA,2DAA6C;
|
|
1
|
+
{"version":3,"file":"sandbox.greywall.js","sourceRoot":"","sources":["../../../src/engine/claude/sandbox.greywall.ts"],"names":[],"mappings":";;;AAAA,2DAA6C;AAC7C,qCAAuC;AACvC,yCAAgC;AAChC,qCAAgC;AAGnB,QAAA,gBAAgB,GAAoB;IAC/C,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,UAAU;IACnB,UAAU;QACR,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,6BAAQ,EAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;YACjG,IAAI,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzC,OAAO,IAAI,CAAA;YACb,CAAC;YACD,OAAO,yDAAyD,CAAA;QAClE,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,kFAAkF;YAClF,MAAM,MAAM,GAAI,GAA4C,CAAC,MAAM,IAAI,EAAE;kBACrE,CAAE,GAA4C,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;YAChE,IAAI,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzC,OAAO,IAAI,CAAA;YACb,CAAC;YACD,OAAO,yDAAyD,CAAA;QAClE,CAAC;IACH,CAAC;IACD,SAAS,CAAC,QAAgB,EAAE,gBAA0B;QACpD,MAAM,QAAQ,GAA4B;YACxC,UAAU,EAAE;gBACV,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;aAC/B;SACF,CAAA;QAED,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,OAAO,GAAG,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAA;QACpD,CAAC;QAED,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,sBAAsB,OAAO,CAAC,GAAG,OAAO,CAAC,CAAA;QAC7E,IAAA,uBAAa,EAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAA;QAErD,OAAO,CAAC,gBAAgB,EAAE,4BAA4B,EAAE,YAAY,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;IAC3F,CAAC;CACF,CAAA"}
|
package/dist/store/settings.d.ts
CHANGED
package/dist/store/settings.js
CHANGED
|
@@ -33,10 +33,17 @@ var __importStar = (this && this.__importStar) || (function () {
|
|
|
33
33
|
};
|
|
34
34
|
})();
|
|
35
35
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
36
|
-
exports.resolveNetworkAllowlist = exports.loadSettings = exports.DEFAULT_NETWORK_ALLOWLIST = void 0;
|
|
36
|
+
exports.resolveNetworkAllowlist = exports.loadSettings = exports.DEFAULT_NETWORK_ALLOWLIST = exports.CLAUDE_REQUIRED_DOMAINS = void 0;
|
|
37
37
|
const fs = __importStar(require("node:fs"));
|
|
38
38
|
const path = __importStar(require("node:path"));
|
|
39
|
+
/** Domains Claude needs for authentication and API access — always allowlisted. */
|
|
40
|
+
exports.CLAUDE_REQUIRED_DOMAINS = [
|
|
41
|
+
"api.anthropic.com",
|
|
42
|
+
"downloads.claude.ai",
|
|
43
|
+
"http-intake.logs.us5.datadoghq.com",
|
|
44
|
+
];
|
|
39
45
|
exports.DEFAULT_NETWORK_ALLOWLIST = [
|
|
46
|
+
...exports.CLAUDE_REQUIRED_DOMAINS,
|
|
40
47
|
"registry.npmjs.org",
|
|
41
48
|
"pypi.org",
|
|
42
49
|
"files.pythonhosted.org",
|
|
@@ -61,10 +68,12 @@ const loadSettings = (ridgelineDir) => {
|
|
|
61
68
|
exports.loadSettings = loadSettings;
|
|
62
69
|
const resolveNetworkAllowlist = (ridgelineDir) => {
|
|
63
70
|
const settings = (0, exports.loadSettings)(ridgelineDir);
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
|
|
71
|
+
const base = (settings.network?.allowlist && settings.network.allowlist.length > 0)
|
|
72
|
+
? settings.network.allowlist
|
|
73
|
+
: [...exports.DEFAULT_NETWORK_ALLOWLIST];
|
|
74
|
+
// Always include Claude's required domains even if the user overrides the list
|
|
75
|
+
const merged = new Set([...exports.CLAUDE_REQUIRED_DOMAINS, ...base]);
|
|
76
|
+
return [...merged];
|
|
68
77
|
};
|
|
69
78
|
exports.resolveNetworkAllowlist = resolveNetworkAllowlist;
|
|
70
79
|
//# sourceMappingURL=settings.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../src/store/settings.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4CAA6B;AAC7B,gDAAiC;
|
|
1
|
+
{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../src/store/settings.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4CAA6B;AAC7B,gDAAiC;AAEjC,mFAAmF;AACtE,QAAA,uBAAuB,GAAa;IAC/C,mBAAmB;IACnB,qBAAqB;IACrB,oCAAoC;CACrC,CAAA;AAEY,QAAA,yBAAyB,GAAa;IACjD,GAAG,+BAAuB;IAC1B,oBAAoB;IACpB,UAAU;IACV,wBAAwB;IACxB,WAAW;IACX,kBAAkB;IAClB,cAAc;IACd,kBAAkB;IAClB,YAAY;IACZ,YAAY;IACZ,eAAe;CAChB,CAAA;AAQM,MAAM,YAAY,GAAG,CAAC,YAAoB,EAAqB,EAAE;IACtE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;IAC7D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;QAClD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAA;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC,CAAA;AARY,QAAA,YAAY,gBAQxB;AAEM,MAAM,uBAAuB,GAAG,CAAC,YAAoB,EAAY,EAAE;IACxE,MAAM,QAAQ,GAAG,IAAA,oBAAY,EAAC,YAAY,CAAC,CAAA;IAC3C,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QACjF,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS;QAC5B,CAAC,CAAC,CAAC,GAAG,iCAAyB,CAAC,CAAA;IAClC,+EAA+E;IAC/E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,+BAAuB,EAAE,GAAG,IAAI,CAAC,CAAC,CAAA;IAC7D,OAAO,CAAC,GAAG,MAAM,CAAC,CAAA;AACpB,CAAC,CAAA;AARY,QAAA,uBAAuB,2BAQnC"}
|