3391e5ea86
## Summary - expand proxy env injection to cover common tool env vars (`HTTP_PROXY`/`HTTPS_PROXY`/`ALL_PROXY`/`NO_PROXY` families + tool-specific variants) - harden macOS Seatbelt network policy generation to route through inferred loopback proxy endpoints and fail closed when proxy env is malformed - thread proxy-aware Linux sandbox flags and add minimal bwrap netns isolation hook for restricted non-proxy runs - add/refresh tests for proxy env wiring, Seatbelt policy generation, and Linux sandbox argument wiring |
||
|---|---|---|
| .. | ||
| bwrap.rs | ||
| landlock.rs | ||
| lib.rs | ||
| linux_run_main.rs | ||
| main.rs | ||
| vendored_bwrap.rs | ||