Issue 297 guard dev server verdict - #303
Merged
Merged
Conversation
classify_bash_with_policy returned only the first denial, so a command both layers would block (e.g. npm run dev redirected outside the sandbox) reported just the containment problem, and its actionable scratch hint sent the agent to fix something that could never unblock the command. classify_bash_denials now collects every applicable layer, and the arbiter renders one verdict that names each blocking reason. Single-layer denials keep their exact historic message; the two npm-install byte-pins (empty marker policy trips both the package-install containment and the command policy) move to the combined wording.
The packaged profile allowed install, CI, test, build, lint, and typecheck, but not npm run dev — and framework/nextjs only activates on a next dependency, so a plain Vite + React project (the pinned Weeknight fixture) had no packaged way to start its own dev server during a guarded run. dev and start are generic lifecycle script names, not Next.js-specific, so they move into the language profile for npm, pnpm, Yarn, and Bun.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Closes #297