Morph MORPH
SIGN IN SIGN UP
dhruvhead / sandbox-runtime UNCLAIMED
0 0 0 TypeScript

ACTIVITY

Commits Reviews
week month year
COMMITS
20
in the last week
CONTRIBUTORS
4
active
STARS
0
total
FORKS
0
total
TOP CONTRIBUTORS
D
Danny Cochran
17 commits
R
ronleizrowice-ant
1 commit
S
Shawn M Moore
1 commit
S
shawnm-anthropic
1 commit
RECENT COMMITS
R
A `/` write root (Linux) or read root (macOS) no longer switches off the denies beneath it (#533)
ronleizrowice-ant
46c06d8
D
Merge pull request #528 from anthropics/release/v0.0.76
Danny Cochran
c392e6c
S
Release v0.0.76
Shawn M Moore
dfb9589
S
Merge pull request #522 from anthropics/dcochran/resolved-ip-guard
shawnm-anthropic
422c404
D
refactor(network): order the refusal reason deterministically; small cleanups
Danny Cochran
d7c4495
D
fix(network): normalize a zoned IPv6 domain entry, and deny two more IPv6 metadata endpoints
Danny Cochran
4e364cb
D
fix(proxy): pin the TLS-terminate upstream cert check to the tunnel target
Danny Cochran
37b4366
D
fix(network): decode only the well-known NAT64 prefix, never the local-use /48
Danny Cochran
3f162df
D
fix(network): a carried IPv4 form only adds denials, never earns an allow-list carve-out
Danny Cochran
d7bcdbb
D
fix(network): decode the local-use NAT64 prefix only in its /96 layout; doc precision
Danny Cochran
44575d5
D
fix(proxy): spell an IPv4-mapped IPv6 destination as its IPv4 address before any list check
Danny Cochran
86b9912
D
chore(proxy): dialDirect takes its lookup argument explicitly
Danny Cochran
d9a52f0
D
fix(network): a resolved-address refusal names the class of address, not the address
Danny Cochran
92feb85
D
fix(network): deny the cloud metadata / platform endpoints that live outside link-local
Danny Cochran
6c3afa4
D
fix(network): a deny-listed IP literal is refused by name too, ahead of any allow-list carve-out
Danny Cochran
aa0c257
D
fix(network): judge NAT64 / 6to4 / IPv4-compatible answers by the IPv4 address they carry
Danny Cochran
12191b0
D
fix(network): store address rules in one canonical form — IPv4-mapped entries as IPv4, zone ids dropped
Danny Cochran
b592800
D
chore(proxy): one upstream-failure handler per request leg; refresh a test comment
Danny Cochran
2b8c021
D
refactor(proxy): one helper owns how a direct request leg addresses its upstream
Danny Cochran
73a5805
D
test(credentials): use `.localhost` names for the second loopback host
Danny Cochran
0bc5c94