v0.3.6

Changelog

New Features

• 1ab2de3 feat(cli): --allow-path / --allow-read-path for per-session filesystem grants (#100)

Bug fixes

• 6a95565 fix(cli): keep --allow rules working under --proxy-user (#96) (#97)

v0.3.5

Changelog

Bug fixes

• 32daa9f fix(macos): honor -f/--forward port forwarding (#99)

v0.3.4

Changelog

New Features

• efde7de feat(watch): --watch observability mode and greywatch alias (#94)
• 2868d61 feat: macos per session tmpdir (#90)

Bug fixes

• ffb2515 fix(brew): expose greywatch alias in PATH via cask binary target (#95)
• dba3c33 fix: allow terminal ioctls under landlock (#92)

v0.3.3

Changelog

New Features

• 57cf0cd feat(cli): --proxy-user to inject a caller-chosen SOCKS5 username (#87)

v0.3.2

Changelog

New Features

• 4984233 feat(prompt): show profile network rules in first-run prompt (#82)

Documentation updates

• fdd9f1d docs: sync from docusaurus site (#78)

Other work

• eba81a9 Session-scoped network rules from profiles (#80)

v0.3.1

Changelog

New Features

• 9973ee1 feat: set SSL_CERT_FILE when greyproxy TLS interception is active (#73)

Bug fixes

• b0cec48 fix: add macOS stub, docs, and Merge() for allowAudio (#72) (#75)
• 64ca048 fix: expose PulseAudio and PipeWire sockets for audio output in Linux sandbox (#72)

v0.3.0

Changelog

New Features

• 1906877 feat: add credential substitution for sandboxed environments (#63)
• 09c7588 feat: add ph badge (#68)
• aedbfef feat: add profiles edit command (#64)
• ff9836a feat: beta release channel (#38)
• 3da5e8a feat: forward host localhost ports into Linux sandbox (#42) (#43)

Bug fixes

• 2010aaf fix: add pre-commit hook and full lint in CI to catch missed linting (#69)
• 55a5b75 fix: allow CoreAudio Mach IPC services in macOS Seatbelt profile (#51)
• b976e86 fix: bind-mount greyproxy CA cert and set NODE_EXTRA_CA_CERTS in sandbox (#50)
• d38a8db fix: isolate /run with tmpfs and recreate /var/run symlinks in sandbox (#54)
• 9b7bfd8 fix: profiles show falls back to built-in registry (#61)
• 91cf626 fix: resolve /etc/resolv.conf symlink on separate mounts (#35)
• bb07901 fix: separate Desktop and CLI profiles to prevent case-insensitive FS collisions (#44)

Documentation updates

• 1b49b65 docs: add mise install instructions (#60)
• a53f730 docs: update readme to point to docs page (#47)

v0.2.8

Changelog

New Features

• bb4f688 feat: inject keyring credentials for gh/glab profiles via secret-tool (#34)
• 35a8efa feat: readme seo optimization (#30)

Bug fixes

• a8bcc60 fix: block D-Bus session bus to prevent sandbox escape via GVFS (#33)

v0.2.7

Changelog

Bug fixes

• 76c07b0 fix: allow TLS certificate verification in macOS sandbox (#29)

v0.2.6

Changelog

Bug fixes

• 9615dfa fix: forward signals and drop --new-session for TUI support (#15)
• a9aecf3 fix: use file-read-data instead of file-read* in macOS Seatbelt deny rules (#20)

Other work

• 99ae165 chore: add logo (#16)