v0.1.60

Changelog

Bug fixes

• c52f511: fix: preserve readable linux submounts in non-defaultDenyRead mode (#180) (@jy-tan)
• 09fdb24: fix: split Linux-only lint paths behind build tags (#181) (@jy-tan)

Documentation updates

• 67c6897: docs: update README.md with repo move notice (#179) (@jy-tan)

Other work

• af7895d: chore: update opencode hooks (@jy-tan)

v0.1.59

Changelog

New Features

• 4837892: feat: add upstream proxy support for grey-zone traffic inspection (#165) (@tharwan)
• 5bfc2ab: feat: handle Ctrl-Z / fg transparently for wrapped commands (#174) (@voidexpr)

Other work

• ebc4f91: Update .gitignore (@jy-tan)
• 7da8743: chore: update Go module paths (#177) (@jy-tan)
• 53f973e: chore: update repository references (#178) (@jy-tan)

v0.1.58

Changelog

Bug fixes

• d576a2c: fix: allow macOS DNS configuration lookup (#170) (@jy-tan)

v0.1.57

Changelog

Bug fixes

• b1f8ec9: fix: enforce requirement for fence CLI binary in runtimeExecPolicy (@jy-tan)

Documentation updates

• c6d0f78: docs: update hooks doc (@jy-tan)

v0.1.56

Changelog

New Features

• 0a707a0: feat: add Windsurf hook support (#163) (@jy-tan)

Bug fixes

• 918977b: fix: require explicit settings files and preserve child flags (#164) (@jy-tan)

v0.1.55

Changelog

Bug fixes

• fa8bad5: fix: bind -p reverse bridge on 127.0.0.1 by default (#154) (@jy-tan)
• e86e450: fix: probe Linux seccomp capabilities before use (#158) (@jy-tan)

v0.1.54

Changelog

New Features

• 6e308bc: feat: add hook for Hermes Agent (#149) (@jy-tan)

Bug fixes

• d738225: fix: don't put bwrap in its own pgrp in argv runner (#153) (@jy-tan)

v0.1.53

Changelog

Bug fixes

• 13f777d: fix: prevent argv-mode runner deadlock on sandbox shutdown (#151) (@jy-tan)
• 39acbd1: refactor: unify SIGINT/SIGTERM forwarders and add SIGHUP handling (#152) (@jy-tan)

Other work

• 7adabf6: chore: update dependabot (@jy-tan)

v0.1.52

Changelog

New Features

• 48463de: feat: add OpenCode plugin hook integration (#145) (@jy-tan)

Other work

• 552dc6d: Add deepwiki badge to README.md (@jy-tan)
• 679ff71: Update docs to call out child-process enforcement (@jy-tan)
• b187926: golangci-lint v2 (#144) (@dtomasi)

v0.1.51

Changelog

Bug fixes

• 2bc292f: fix: make strict sandbox survive docker-compose services (#139) (@jy-tan)

Other work

• 3bfe9f6: Update README.md (@jy-tan)
• 7cfc40f: perf: update benchmarks (#138) (@jy-tan)