Repository navigation

feat(agent): sandboxed launches for managed programs (Windows, preview) - #203

Open

LutzLange wants to merge 19 commits into

agentdesktop-dev:mainfrom

LutzLange:containment/submission-20261020

Open

feat(agent): sandboxed launches for managed programs (Windows, preview)#203
LutzLange wants to merge 19 commits into
agentdesktop-dev:mainfrom
LutzLange:containment/submission-20261020

Commits on Oct 30, 2026
- launch Claude Code in a Windows AppContainer from the user-mode daemon
  
  LutzLange
  and
  claude
  committed
  394cccb
- launch: stop a sandboxed session the daemon has lost track of
  
  LutzLange
  and
  claude
  committed
  6cda08e
- llm-proxy: per-session pairing and the /sandbox route
  
  LutzLange
  and
  claude
  committed
  4adae62
- launch: report changes to a sandboxed session's executable configuration
  
  LutzLange
  and
  claude
  committed
  2f07799
- claude-code: managed-settings containment locks and posture
  
  LutzLange
  and
  claude
  committed
  ed920bc
- launch: run sandboxed sessions through the relay; no credential in the box
  
  LutzLange
  and
  claude
  committed
  129cf03
- launch: build requests from a neutral plan through an engine
  
  LutzLange
  and
  claude
  committed
  a945817
- llm-proxy: git over the relay behind an allowlist; egress denied by default
  
  LutzLange
  and
  claude
  committed
  8869d81
- ssh: agent broker and git over ssh
  
  LutzLange
  and
  claude
  committed
  aec5866
- tests: spec-derived tests for program profiles (preconditions, refusals)
  LutzLange
  committed
  ca5d788
- launch: OpenCode and Copilot CLI program profiles
  
  LutzLange
  and
  claude
  committed
  6c08cc9
- launch: managed packaging and wrap-mode transparency
  
  LutzLange
  and
  claude
  committed
  170dfaf
- launch: same-terminal console hosting and a windowless daemon
  
  LutzLange
  and
  claude
  committed
  3bf52ad
- launch: fix the console-attach helper's job race and lost Ctrl+C handler
  
  LutzLange
  and
  claude
  committed
  c67d1c4
- launch: drop leftover intercept glue from test initializers after the main rebase
  
  LutzLange
  and
  claude
  committed
  4e20feb
- launch: pin and integrity-cover .git/config.worktree (Copilot review)
  
  LutzLange
  and
  claude
  committed
  75b6f09
- scripts: normalize the Git Bash launcher to LF when packaging (Copilot review)
  
  LutzLange
  and
  claude
  committed
  154f229
- launch: mark attach start with a file, not a reserved exit code (Copilot review)
  
  LutzLange
  and
  claude
  committed
  1ed97d3
- docs: describe same-terminal hosting and the windowed fallback (Copilot review)
  
  LutzLange
  and
  claude
  committed
  c50fbe2

Commits

Commits on Oct 30, 2026