agent-sandbox/

Package broker carries command execution across the sandbox boundary.

Package claude builds and runs the sandboxed `claude` command: it parses the launcher's arguments, constructs the `nono wrap … claude …` invocation (including the hook settings injected in hook mode), and executes it.

Package envflag loads environment variables from --env references and applies them to the current process.

Package policysnapshot used to persist the sandbox policy to a per-session JSON file so hook-mode `agent-sandbox exec` could route from a frozen copy the agent could not edit.

Package safe holds shared helpers for the "safe" command wrappers.

Package dockercompose validates and runs docker compose invocations safely.

Package git implements the "safe git" wrapper: it parses a git argv and reports known-dangerous invocations so the command layer can refuse them.

Package shellquote quotes strings as single shell tokens.