v0.0.80

What's Changed

• fix: emit write re-binds after allowRead re-binds under denyRead tmpfs by @sorakiu in #29

New Contributors

• @sorakiu made their first contribution in #29

Full Changelog: v0.0.79...v0.0.80

v0.0.79

What's Changed

• feat(macos): add opt-in cross-sandbox process signals by @carderne in #31

Full Changelog: v0.0.78...v0.0.79

v0.0.78

What's Changed

• Remove built-in mandatory file write denies by @carderne in #30

Full Changelog: v0.0.77...v0.0.78

v0.0.77

What's Changed

• feat: support termux on android by @spurreiter in #26
• fix: disable Nagle on sandbox proxy TCP sockets by @carderne in #27
• fix: use npm trusted publishing for releases by @carderne in #28

New Contributors

• @spurreiter made their first contribution in #26

Full Changelog: v0.0.76...v0.0.77

v0.0.76

What's Changed

• fix: thread denyMandatoryCwdFiles through wrapWithSandbox() by @milkias17 in #25

New Contributors

• @milkias17 made their first contribution in #25

Full Changelog: v0.0.75...v0.0.76

v0.0.75

What's Changed

• feat: diagnose unprivileged-container proc mount failure by @carderne in #24

Full Changelog: v0.0.74...v0.0.75

v0.0.74

What's Changed

• feat: add filesystem.denyMandatoryCwdFiles opt-out by @ShrekBytes in #21

New Contributors

• @ShrekBytes made their first contribution in #21

Full Changelog: v0.0.73...v0.0.74

v0.0.73

What's Changed

• fix: create a dedicated /tmp/agents directory before sandboxing by @carderne in #23

Full Changelog: v0.0.72...v0.0.73

v0.0.72

Add createSandboxManager() for independent macOS/Linux sessions. Each manager owns its permissions, proxies, and cleanup; the existing singleton remains available. Preserve synchronous process-exit cleanup and prevent one manager from removing another command’s Linux deny mounts.

#20

v0.0.71

What's Changed

• fix: reject sandbox commands when the network proxy is unavailable by @carderne in #19

Full Changelog: v0.0.70...v0.0.71