4 Commits

Author	SHA1	Message	Date
Vincent Koc	99252306b7	test(sandbox): prove protected binds with Podman	2026-08-01 10:43:08 +08:00
陈杨俊0668000971	5c8cc947b7	fix(ci): format sandbox E2E script with oxfmt	2026-07-20 23:17:31 +08:00
陈杨俊0668000971	8248b8504a	fix(sandbox): add warning logs for filtered binds, convert e2e to argv-based spawn, remove stale demo script ... - docker.ts/browser.ts: log.warn when user binds are skipped due to protected skill mount conflicts, so maintainers can see the decision - e2e-sandbox-bind-conflict.mjs: replace execSync shell-string with spawnSync argv-based sudo docker calls - demo-sandbox-bind-filter.mjs: removed (stale, referenced non-existent filterReadOnlyWorkspaceSkillMountsByBinds; e2e script covers proof) Co-Authored-By: Claude <noreply@anthropic.com>	2026-07-03 16:17:49 +08:00
陈杨俊0668000971	03d48c3b76	fix(sandbox): skip user binds that conflict with protected skill overlay container paths ... - skip read-only skill mounts when user binds target the same container path - normalize trailing slashes in fs-bridge container path comparisons - add workspace-mounts filter and tests - add e2e Docker verification and demo scripts for bind-conflict Co-Authored-By: Claude <noreply@anthropic.com>	2026-07-01 15:05:28 +08:00