Directories
¶
| Path | Synopsis |
|---|---|
|
Package broker carries command execution across the sandbox boundary.
|
Package broker carries command execution across the sandbox boundary. |
|
Package claude builds and runs the sandboxed `claude` command: it parses the launcher's arguments, constructs the `nono wrap … claude …` invocation (including the hook settings injected in hook mode), and executes it.
|
Package claude builds and runs the sandboxed `claude` command: it parses the launcher's arguments, constructs the `nono wrap … claude …` invocation (including the hook settings injected in hook mode), and executes it. |
|
Package envflag loads environment variables from --env references and applies them to the current process.
|
Package envflag loads environment variables from --env references and applies them to the current process. |
|
Package policysnapshot used to persist the sandbox policy to a per-session JSON file so hook-mode `agent-sandbox exec` could route from a frozen copy the agent could not edit.
|
Package policysnapshot used to persist the sandbox policy to a per-session JSON file so hook-mode `agent-sandbox exec` could route from a frozen copy the agent could not edit. |
|
Package safe holds shared helpers for the "safe" command wrappers.
|
Package safe holds shared helpers for the "safe" command wrappers. |
|
dockercompose
Package dockercompose validates and runs docker compose invocations safely.
|
Package dockercompose validates and runs docker compose invocations safely. |
|
git
Package git implements the "safe git" wrapper: it parses a git argv and reports known-dangerous invocations so the command layer can refuse them.
|
Package git implements the "safe git" wrapper: it parses a git argv and reports known-dangerous invocations so the command layer can refuse them. |
|
Package shellquote quotes strings as single shell tokens.
|
Package shellquote quotes strings as single shell tokens. |
Click to show internal directories.
Click to hide internal directories.