Metadata-Version: 2.4
Name: trusted-agent
Version: 0.6.2
Summary: Run Claude Code inside a podman container, wrapped by gVisor.
Requires-Python: >=3.10
Description-Content-Type: text/markdown

Run claude code in a [gVisor](https://gvisor.dev/) sandbox, inside a container.

You need to have podman installed and ready, and be signed-in in claude-code on the host.

```bash
uvx trusted-agent claude --dangerously-skip-permissions "Do something"
```


# Changelog

All notable changes to this project are documented in this file. The format is
based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this
project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

## [0.6.2]

### Added
- Render the changelog on the PyPI project page alongside the README, via the
  `hatch-fancy-pypi-readme` build hook.

## [0.6.1]

### Added
- Mirror the host's `~/.claude/plugins/` into the sandbox at container start so
  installed plugins are available without manual reinstall. Carries over
  `enabledPlugins` and `extraKnownMarketplaces` from the host's
  `~/.claude/settings.json` into the projected user settings.

## [0.5.0]

### Added
- Bind-mount the git common dir for linked worktrees so git commands resolve
  inside the sandbox.
- Rust toolchain (stable, with clippy and rustfmt) and the Android SDK
  (cmdline-tools, platform-tools, API 34, build-tools 34.0.0) in the image.

## [0.3.0]

### Added
- Install `uv` / `uvx` in the sandbox image.
- README with basic usage.

## [0.2.0]

### Added
- First working version: run Claude Code inside a podman + gVisor sandbox with
  a projected `~/.claude.json`, projected credentials, and a `/workspace`
  bind-mount.
