mirror of
https://github.com/hanzoai/dev.git
synced 2026-10-17 15:34:54 +00:00
zeekayandHanzo Dev
6cbbea2d03
Our history is just-every's with author emails rewritten, so the graphs are
disjoint and git finds no merge base. Supplied one by hand: d1f1f51a41, the
just-every commit matching our Oct-2025 fork point (22 files apart). 9618
upstream commits, 7004 files, +1.81M/-159k, 37 conflicts.
Resolution:
- Upstream code where our side was the Oct-2025 prototype of a feature they
have since reimplemented 3-5x larger (agent_runs, browser_sessions,
history_cell/{agent,browser}, the vt100 harness and its snapshots).
- Upstream's config.rs module split (builder/defaults/sources/validation)
kept; zen5-coder and the provider-follows-model rule re-applied on top.
- Ours where the file IS the identity: README, package.json, postinstall,
release notes pipeline, integration-zed.
- Hybrid where upstream improved a file we had branded: updates.rs (their
release-repo migration, our hanzoai/dev), release.yml (their fail-fast npm
auth check, our package name), chatwidget.rs (their turn handling, our
HANZO_USER_KEY hint), exec human output (their 237 lines, our banner).
Superseded and dropped deliberately: our resume_command_name() coder-alias
hack — upstream's derive_resume_command_name() reads the invocation basename
generically, which yields "dev" for us.
LLM.md now records the real topology and the sync point; AGENTS.md and
CLAUDE.md are symlinks to it again. Single parent on purpose: adopting
jecode/main as a second parent would re-import 13,742 commits carrying the
upstream author emails a prior rewrite deliberately removed.
Version 0.2.188 -> 0.2.189.
Co-authored-by: Hanzo Dev <[email protected]>
37 lines
1.1 KiB
Bash
37 lines
1.1 KiB
Bash
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
if [ "${CODEX_ENABLE_FIREWALL:-1}" != "1" ]; then
|
|
echo "[devcontainer] Firewall mode: permissive (CODEX_ENABLE_FIREWALL=${CODEX_ENABLE_FIREWALL:-unset})."
|
|
exit 0
|
|
fi
|
|
|
|
echo "[devcontainer] Firewall mode: strict"
|
|
|
|
domains_raw="${OPENAI_ALLOWED_DOMAINS:-api.openai.com}"
|
|
mapfile -t domains < <(printf '%s\n' "$domains_raw" | tr ', ' '\n\n' | sed '/^$/d' | sort -u)
|
|
|
|
if [ "${#domains[@]}" -eq 0 ]; then
|
|
echo "[devcontainer] No allowed domains configured."
|
|
exit 1
|
|
fi
|
|
|
|
tmp_file="$(mktemp)"
|
|
for domain in "${domains[@]}"; do
|
|
if [[ ! "$domain" =~ ^[a-zA-Z0-9][a-zA-Z0-9.-]*\.[a-zA-Z]{2,}$ ]]; then
|
|
echo "[devcontainer] Invalid domain in OPENAI_ALLOWED_DOMAINS: $domain"
|
|
rm -f "$tmp_file"
|
|
exit 1
|
|
fi
|
|
printf '%s\n' "$domain" >> "$tmp_file"
|
|
done
|
|
|
|
sudo install -d -m 0755 /etc/codex
|
|
sudo cp "$tmp_file" /etc/codex/allowed_domains.txt
|
|
sudo chown root:root /etc/codex/allowed_domains.txt
|
|
sudo chmod 0444 /etc/codex/allowed_domains.txt
|
|
rm -f "$tmp_file"
|
|
|
|
echo "[devcontainer] Applying firewall policy for domains: ${domains[*]}"
|
|
sudo --preserve-env=CODEX_INCLUDE_GITHUB_META_RANGES /usr/local/bin/init-firewall.sh
|