feat: add readonly mode with bash safety and spawn child filtering#7

Open

ofriw wants to merge 51 commits into

mainfrom

Commits on May 31, 2026

Add resolve-real-path utility and IDE config poisoning prevention
ofriw
committed
Add OS-level sandboxing for readonly bash on macOS (sandbox-exec) and Linux (bwrap)
ofriw
committed
Rewrite bash classifier with shell-aware pipeline, git allowlist, and temp-dir path checking
ofriw
committed
Refine config validator with case-insensitive key matching and MCP command validation
ofriw
committed
Add watchdog throttling and merge readonly nudges into context hook
ofriw
committed
Add readonly bash and config-validated write/edit tools to child spawn sessions
ofriw
committed
Update tests for new bash classifier, config validator, readonly children, and watchdog throttling
ofriw
committed

Commits on Jun 2, 2026

Commits on Jun 3, 2026

Commits on Jun 4, 2026

Remove process.stderr.write calls that corrupt TUI rendering
ofriw
committed

Commits on Jun 5, 2026