feat(byo): Claude Code listeners work in their folder on invite-only pods, with --allow write and web (TASK-294) by lilyshen0722 · Pull Request #2746 · Team-Commonly/commonly

feat(cli): sandbox.trust 'workspace' joins the schema, refused everywhere but claude (TASK-294)

committed

ee40bc8

feat(cli): read-only git as the workspace seat's one git tool, argv-validated (TASK-294)

committed

3ddbf1e

feat(cli): a first-run claude seat in private pods reads the dir it started in (TASK-294)

committed

82c04fe

feat(cli): a workspace seat re-reads its pods before every turn (TASK-294)

committed

887704b

fix(cli): bind a workspace seat's session to where its turn runs (TASK-294)

committed

a6ba3b8

feat(cli): the claude adapter confines a workspace seat (TASK-294)

committed

8cf20fb

feat(cli): a workspace seat reads its repo's history through a read-only git tool (TASK-294)

committed

5e8589b

test(cli): pin that a workspace seat is not taught the row-working habits (TASK-294)

committed

64c2353

feat(cli): a workspace seat's write and web grants widen its jail and tool policy (TASK-294)

committed

69e471d

fix(cli): hold .env files out of a confined seat's reach at any depth (TASK-294)

committed

b15a64b

feat(cli): run --allow sets a first-run workspace seat's grants (TASK-294)

committed

60569be

fix(cli): off macOS a first-run seat keeps the public default (TASK-294)

committed

0a66fff

docs(byo): what a Claude Code listener can reach, and --allow (TASK-294)

committed

09f71a6

feat(frontend): the Connect page says what a Claude Code listener can reach (TASK-294)

committed

bc893b2

fix(cli): read-only git refuses blame -S, which reads a caller-named file (TASK-294)

committed

0dc292b

fix(frontend): the Connect page no longer says write keeps a listener to its folder (TASK-294)

committed

f69653e

fix(cli): workspace trust needs an invite-only pod, not only an unlisted one (TASK-294)

committed

59d2d90

fix(cli): read-only git keeps committed .env files out of reach (TASK-294)

committed

4b55499

fix(cli): workspace git runs no gpg or textconv; .env dirs and .git stay out of reach (TASK-294)

committed

a190a3c

fix(cli): a turn that runs public gets no memory and no memory tools (TASK-294)

committed

9bf2758

docs(byo): the folder needs macOS, and git can't refuse a .env asked for by object id (TASK-294)

committed

0ecbe86

fix(cli): read-only git refuses --follow, which the .env excludes always break (TASK-294)

committed

117aa10

fix(cli): read-only git holds a submodule to the same rules (TASK-294)

committed

213d5aa

fix(byo): the Connect page says the folder default needs macOS (TASK-294)

committed

e05b9d4

fix(cli): read-only git never contacts a remote, even in a partial clone (TASK-294)

committed

cebf403

docs(byo): anyone in the pods can ask a listener what its folder holds (TASK-294)

committed

3ce8e85

fix(cli): read-only git refuses --full-diff, which shows .env past the excludes (TASK-294)

committed

b28e35e

test(cli): test git inherits no GIT_* from the shell (TASK-294)

committed

488c64a

fix(frontend): the Connect page states every condition for folder access (TASK-294)

committed

97f5393

docs(byo): the scratch-folder cases include a pod listed in Community (TASK-294)

committed

a0c3720

Navigation Menu

Repository navigation

feat(byo): Claude Code listeners work in their folder on invite-only pods, with --allow write and web (TASK-294) - #2746

feat(byo): Claude Code listeners work in their folder on invite-only pods, with --allow write and web (TASK-294)#2746
lilyshen0722 merged 33 commits into
mainfrom
wren/task-294-byo-workspace-trust

Commits on Oct 25, 2026

feat(cli): sandbox.trust 'workspace' joins the schema, refused everywhere but claude (TASK-294)

feat(cli): read-only git as the workspace seat's one git tool, argv-validated (TASK-294)

feat(cli): a first-run claude seat in private pods reads the dir it started in (TASK-294)

feat(cli): a workspace seat re-reads its pods before every turn (TASK-294)

fix(cli): bind a workspace seat's session to where its turn runs (TASK-294)

feat(cli): the claude adapter confines a workspace seat (TASK-294)

feat(cli): a workspace seat reads its repo's history through a read-only git tool (TASK-294)

test(cli): pin that a workspace seat is not taught the row-working habits (TASK-294)

feat(cli): a workspace seat's write and web grants widen its jail and tool policy (TASK-294)

fix(cli): hold .env files out of a confined seat's reach at any depth (TASK-294)

feat(cli): run --allow sets a first-run workspace seat's grants (TASK-294)

fix(cli): off macOS a first-run seat keeps the public default (TASK-294)

docs(byo): what a Claude Code listener can reach, and --allow (TASK-294)

feat(frontend): the Connect page says what a Claude Code listener can reach (TASK-294)

fix(cli): read-only git refuses blame -S, which reads a caller-named file (TASK-294)

fix(frontend): the Connect page no longer says write keeps a listener to its folder (TASK-294)

fix(cli): workspace trust needs an invite-only pod, not only an unlisted one (TASK-294)

fix(cli): read-only git keeps committed .env files out of reach (TASK-294)

fix(cli): workspace git runs no gpg or textconv; .env dirs and .git stay out of reach (TASK-294)

fix(cli): a turn that runs public gets no memory and no memory tools (TASK-294)

docs(byo): the folder needs macOS, and git can't refuse a .env asked for by object id (TASK-294)

fix(cli): read-only git refuses --follow, which the .env excludes always break (TASK-294)

fix(cli): read-only git holds a submodule to the same rules (TASK-294)

fix(byo): the Connect page says the folder default needs macOS (TASK-294)

fix(cli): read-only git never contacts a remote, even in a partial clone (TASK-294)

docs(byo): anyone in the pods can ask a listener what its folder holds (TASK-294)

fix(cli): read-only git refuses --full-diff, which shows .env past the excludes (TASK-294)

test(cli): test git inherits no GIT_* from the shell (TASK-294)

fix(frontend): the Connect page states every condition for folder access (TASK-294)

docs(byo): the scratch-folder cases include a pod listed in Community (TASK-294)

Commits on Oct 26, 2026

fix(cli): read-only git takes -L only where git is sure to read it as a line range (TASK-294)

test(byo): a Linux Claude Code setup shows no folder guidance (TASK-294)

fix(connect): the zh-CN folder-access line follows the zh-CN glossary (TASK-294)