CyberCoveLLC/Triple-C

feature/docker-install-helper #3

Merged

jknapp merged 5 commits from feature/docker-install-helper into main

2026-05-01 20:01:58 +00:00

Author	SHA1	Message	Date
shadow-testandClaude Opus 4.7	5974347913	Add per-project sandbox mode and Bedrock service-tier Build App / compute-version (pull_request) Successful in 2s Details Build App / build-macos (pull_request) Successful in 2m31s Details Build App / build-windows (pull_request) Successful in 8m1s Details Build Container / build-container (pull_request) Successful in 8m11s Details Build App / build-linux (pull_request) Failing after 1m53s Details Build App / create-tag (pull_request) Has been skipped Details Build App / sync-to-github (pull_request) Has been skipped Details Sandbox mode: new per-project toggle that turns on Claude Code's bash sandbox inside the container. Adds `bubblewrap` and `socat` to the Dockerfile (the two Linux deps required by the sandbox), and emits a managed `sandbox` block into `~/.claude/settings.json` via the existing CLAUDE_CODE_SETTINGS_JSON entrypoint merge: - `enabled` mirrors the Triple-C toggle and is always emitted, so the entrypoint's recursive jq merge clears any prior on-state from the persisted named volume — Triple-C is authoritative. - `enableWeakerNestedSandbox: true` because we run inside Docker without privileged user namespaces. - `allowUnsandboxedCommands: false` to disable the `dangerouslyDisableSandbox` escape hatch — opting into the sandbox shouldn't come with a runtime bypass. When sandbox is on, a SANDBOX_INSTRUCTIONS section is appended to CLAUDE_INSTRUCTIONS so Claude can guide users through allowing extra paths/domains, excluding `docker `/`watchman ` from the sandbox, and the rule that `sandbox.enabled` is owned by Triple-C. The Claude-Code settings fingerprint includes sandbox state (only when on, to avoid spuriously flagging existing containers for recreation on upgrade). Bedrock service tier: new optional field on the per-project Bedrock config. When set, exported as ANTHROPIC_BEDROCK_SERVICE_TIER (added in Claude Code 2.1.122) and included in the Bedrock fingerprint. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-01 12:58:54 -07:00
shadow-testandClaude Opus 4.7	805f815876	Regenerate Tauri ACL schemas after dialog plugin update Picks up the deprecation notes on dialog `ask`/`confirm` permissions (now aliased to `allow-message`/`deny-message` and slated for removal in Tauri v3). No behavior change — generated artifacts only. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-01 11:57:22 -07:00
shadow-testandClaude Opus 4.7	5360f22b65	Make preview build workflow manual-only Trigger is workflow_dispatch exclusively so builds happen only when explicitly requested from the Actions UI, not on every branch push. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-04-24 10:22:11 -07:00
shadow-testandClaude Opus 4.7	0316234329	Add preview build workflow for non-main branches Build App (Preview) / compute-version (push) Successful in 2s Details Build App (Preview) / build-macos (push) Failing after 2m28s Details Build App (Preview) / build-windows (push) Failing after 4m29s Details Build App (Preview) / build-linux (push) Failing after 8m4s Details Mirrors build-app.yml's three-platform matrix (Linux/macOS/Windows) but uploads the bundles as workflow artifacts instead of creating Gitea releases or syncing to GitHub, so feature branches can be smoke-tested without cluttering the release streams. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-04-24 10:21:17 -07:00
shadow-testandClaude Opus 4.7	ee68cc820c	Add Docker install helper for first-run setup When Docker isn't detected on startup, surface a dialog offering a one-click install (pkexec + get.docker.com on Linux, brew cask on macOS, winget on Windows) with a graceful fallback to manual steps and a link to official documentation. Install output streams back to the UI via a tauri event. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-04-24 10:18:46 -07:00