KarpelesLab / bnpm / 26193907419

Builds Branch Commit Type Ran Committer Via Coverage
26193907419 master Fix CIDR containment in network allow list, add claude-hardened profile The IP allow list parsed CIDR entries with ParsePrefix but stored only pfx.Addr() in the same map as bare addresses, so "10.0.0.0/8" matched only 10.0.0.0 and nothing else in... push MagicalTux github
11.5
23980447911 master Create LICENSE push web-flow github
9.36
23976678702 master Add sandbox profiles for AI coding agents Profiles for Claude Code, OpenAI Codex, and Gemini CLI. Each agent has two profiles: full network (API + git + npm + supporting services) and API-only (restricted to just the model endpoint). Select the r... push MagicalTux github
9.36
23953563363 master Switch from TAP (L2) to TUN (L3) with slirp v0.1.3 slirp v0.1.3 is fully L3 — Writer callback receives/sends raw IP packets, no Ethernet framing. This lets us use a TUN device instead of TAP, eliminating all ARP handling and Ethernet frame constr... push MagicalTux github
9.36
23952296653 master Upgrade slirp to v0.1.2 BuildTCPPacket was made internal; build RST packets inline using the exported checksum functions. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> push MagicalTux github
8.79
23943041271 master Upgrade slirp to v0.1.1 Fixes TCP FIN half-close handling and out-of-order packet drops that caused ECONNRESET under heavy concurrent load. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> push MagicalTux github
8.91
23935431370 master Fix Ctrl-C not working in filtered network mode PID 1 in a PID namespace has special signal semantics: the kernel silently drops signals from outside the namespace unless PID 1 has installed a handler. Since we were using unix.Exec() to replace t... push MagicalTux github
8.91
23935307634 master Remove max_memory feature entirely RLIMIT_AS limits virtual address space, not physical RAM, making it incompatible with V8/Node which reserves huge virtual regions. Proper physical memory limits require cgroup v2 delegation which is not availabl... push MagicalTux github
9.07
23935244488 master Remove default max_memory from all profiles RLIMIT_AS limits virtual address space, not physical RAM. V8 reserves enormous virtual regions (CodeRange, heap) that never map to real memory, making any RLIMIT_AS cap incompatible with Node-based tool... push MagicalTux github
10.89
23935229272 master Raise default max_memory to 16G for all profiles RLIMIT_AS limits virtual address space, not RSS. Node/V8 reserves large virtual regions upfront (heap, JIT pages) that far exceed actual memory use. 4G was causing OOM in pnpm install. Co-Authored... push MagicalTux github
10.89
23935204590 master Bind-mount ld.so.cache and ld.so.conf into sandbox The dynamic linker needs these to find libraries in non-standard paths (e.g. /usr/lib/gcc/.../libstdc++.so.6). Without the cache, dynamically linked binaries like node fail to start. Co-Authored... push MagicalTux github
10.89
23935080162 master Add ~/.npm-global as optional bind mount for npm/yarn/pnpm profiles Fixes pnpm (and other globally-installed npm tools) not being found in the sandbox when installed via npm global prefix. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@an... push MagicalTux github
11.01
23934912799 master allow go 1.25.3 push MagicalTux github
11.01
23934903933 master Fix ~25s delay on exit in filtered network mode Set the TAP fd to non-blocking before wrapping in os.NewFile so Go's runtime poller manages it. This lets Close() properly unblock a concurrent Read(), instead of the read syscall blocking until the... push MagicalTux github
11.01
23934735571 master Add CI workflow, tests, and Coveralls badge GitHub Actions CI with Go 1.25 and 1.26 matrix. Unit tests cover config loading, profile matching, domain filtering, size parsing, and environment building. Coverage uploaded to Coveralls from the Go 1.... push MagicalTux github
11.04