feat: add --sandbox=container mode to vault run#99

Open

dangtony98 wants to merge 7 commits intomainfrom

feat/sandbox-container-mode

Commits on Apr 21, 2026

feat: add --sandbox=container mode to vault run

dangtony98
and
claude
committed
fix(sandbox): resolve host.docker.internal via getent ahostsv4

dangtony98
and
claude
committed
fix(sandbox): grant SETUID/SETGID caps + silence gosec/errcheck

dangtony98
and
claude
committed
fix(sandbox): bind forwarder on 0.0.0.0 on macOS Docker Desktop

dangtony98
and
claude
committed
fix(sandbox): fork docker instead of exec so the forwarder survives

dangtony98
and
claude
committed
fix(sandbox): return container exit status instead of os.Exit

dangtony98
and
claude
committed
fix(sandbox): address PR review — 3 security + 1 UX fix

dangtony98
and
claude
committed