Gabi Simons c9b97a0332 feat(agent-runner): capability-driven disallow list + per-instance hook blocklist ...

container.json's resolved harnessCapabilities map threads RunnerConfig →
ProviderOptions → ClaudeProvider. The fixed disallow set gains DesignSync
(desktop tool, nothing to sync with headless; 9.3KB/turn schema);
buildDisallowedTools adds Workflow unless workflow=on — defense-in-depth
behind the host-reconciled disableWorkflows settings key, fail-closed on
absent/garbage state. preToolUseHook becomes a factory so the hook blocks
the same per-instance list. Unknown resolved keys warn at construction;
agent-teams is known-but-host-managed so it never warns. Scheduling
instructions gain the harness-task-list vs schedule_task naming note.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-12 11:39:01 +03:00

..

agent-runner

feat(agent-runner): capability-driven disallow list + per-instance hook blocklist

2026-07-12 11:39:01 +03:00

skills

feat!: move slack-formatting container skill to the channels branch

2026-07-10 22:45:23 +03:00

.dockerignore

fix: remaining npm→pnpm gaps + dockerignore for pnpm symlinks

2026-04-17 09:53:00 +03:00

build.sh

feat(setup): per-checkout service name and docker image tag

2026-04-23 10:10:09 +03:00

CLAUDE.md

docs(claude-md): drop host-facing header comment from shared base

2026-04-22 17:47:30 +03:00

cli-tools.json

chore(container): bump claude-code, agent SDK to latest

2026-06-30 22:27:46 +03:00

cli-tools.test.ts

feat(container): data-drive global CLI installs from cli-tools.json

2026-06-14 12:07:14 +03:00

Dockerfile

feat(container): data-drive global CLI installs from cli-tools.json

2026-06-14 12:07:14 +03:00

entrypoint.sh

feat(v2): migrate container runtime to Bun, improve image build surface

2026-04-17 11:38:01 +03:00

install-cli-tools.sh

feat(container): data-drive global CLI installs from cli-tools.json

2026-06-14 12:07:14 +03:00