Tags: bindsch/scode

scode v0.3.4

scode v0.3.3

scode v0.3.2

scode v0.3.1

scode v0.3.0

feat: scode v0.2.0 — JSON audit logs, process-exec blocking, JS test …

…suite

fix: scode v0.1.1 — 10 bug fixes with regression tests

Shell tokenizer / preload (lib/no-sandbox.js):
- Detect combined shell flags (-ce, -ec, -xec) in Chromium --no-sandbox injection
- Handle FOO="bar baz" / FOO='bar baz' assignments with embedded spaces
- Prevent double --no-sandbox injection in env/wrapper patchers

Sandbox policy (scode):
- CLI --block now prevents command-binary auto-allow bypass
- --block on project subdirs works when project is under a blocked parent
- Audit log parser handles paths containing colons
- Audit strips trailing slashes from allowed metadata
- Config parser supports YAML '' single-quote escaping

Documentation (README.md):
- Preload scope lists all patched child_process APIs
- Scrub pattern count corrected to 30

380 tests pass (17 new regression tests). shellcheck clean.

feat: scode v0.1.0 — safe sandbox wrapper for AI coding harnesses