v0.0.50

What's Changed

• fix(sandbox): deny file-write-create on protected ancestors in Seatbelt profile by @OctavianGuzu in #226
• Invoke sandbox-exec by absolute path by @ant-kurt in #233
• Add bwrapPath and socatPath config overrides for Linux sandbox by @ant-kurt in #232
• chore: bump version to 0.0.50 by @OctavianGuzu in #235
• test(integration): swap allowedDomains via updateConfig instead of reset+initialize by @dylan-conway in #242
• test(integration): use async spawn so the in-process proxy can respond; bump bun to 1.3.13 by @dylan-conway in #243
• fix(sandbox): read CLAUDE_CODE_TMPDIR for TMPDIR (in addition to CLAUDE_TMPDIR) by @dylan-conway in #240
• fix(cli): shell-quote positional args instead of join(" ") by @dylan-conway in #239
• fix(sandbox): only require ripgrep on Linux in checkDependencies() by @dylan-conway in #241
• fix(cli): make --debug flag set SRT_DEBUG (was setting DEBUG) by @dylan-conway in #238
• fix(sandbox): set CLOUDSDK_PROXY_TYPE=http (was invalid "https") by @dylan-conway in #237
• docs(README): fix typo in section concerning security limitations by @xty in #167

New Contributors

• @OctavianGuzu made their first contribution in #226
• @ant-kurt made their first contribution in #233
• @xty made their first contribution in #167

Full Changelog: v0.0.49...v0.0.50