d9148cd180
- Rename container-runtime.ts → jail-ops.ts, container-runner.ts → jail-runner.ts - Rename all types: ContainerInput→JailInput, ContainerOutput→JailOutput, VolumeMount→JailMount - Rename all functions: runContainerAgent→runJailAgent, stopContainer→stopJail, ensureContainerRuntimeRunning→ensureJailRunning, cleanupOrphans→cleanupStaleJails - Rename config constants: CONTAINER_TIMEOUT→JAIL_TIMEOUT, CONTAINER_MAX_OUTPUT_SIZE→JAIL_MAX_OUTPUT_SIZE, MAX_CONCURRENT_CONTAINERS→MAX_CONCURRENT_JAILS - Remove Docker/Apple Container runtime detection, CONTAINER_IMAGE, CONTAINER_RUNTIME_BIN - Add jail-ops.ts: pure FreeBSD jail runtime (nullfs mounts, jexec, jls cleanup) - Add jail-runner.ts: agent runner using jexec instead of docker run - Add FreeBSD jail implementation docs and JAIL-CLEANUP-MODEL - Add AGENT.md, AGENTS.md, groups/*/AGENT.md for Clawdie context - Add mount-allowlist.example.json Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
25 lines
475 B
JSON
25 lines
475 B
JSON
{
|
|
"allowedRoots": [
|
|
{
|
|
"path": "~/projects",
|
|
"allowReadWrite": true,
|
|
"description": "Development projects"
|
|
},
|
|
{
|
|
"path": "~/repos",
|
|
"allowReadWrite": true,
|
|
"description": "Git repositories"
|
|
},
|
|
{
|
|
"path": "~/Documents/work",
|
|
"allowReadWrite": false,
|
|
"description": "Work documents (read-only)"
|
|
}
|
|
],
|
|
"blockedPatterns": [
|
|
"password",
|
|
"secret",
|
|
"token"
|
|
],
|
|
"nonMainReadOnly": true
|
|
}
|