Peter Steinberger 46eba86b45 fix: harden workspace boundary path resolution

2026-02-26 13:19:59 +01:00

..

bind-spec.test.ts

refactor(sandbox): share bind parsing and host-path policy checks

2026-02-24 15:04:47 +00:00

bind-spec.ts

refactor(sandbox): share bind parsing and host-path policy checks

2026-02-24 15:04:47 +00:00

browser-bridges.ts

fix(browser): authenticate sandbox browser bridge server

2026-02-14 12:54:16 +01:00

browser.create.test.ts

test(agents): use lightweight clears in sandbox browser create setup

2026-02-22 08:01:16 +00:00

browser.novnc-url.test.ts

fix(sandbox): use one-time noVNC observer tokens

2026-02-21 13:56:58 +01:00

browser.ts

feat(sandbox): block container namespace joins by default

2026-02-24 23:20:34 +00:00

config-hash.test.ts

fix(security): harden sandbox browser network defaults

2026-02-21 14:02:53 +01:00

config-hash.ts

fix(security): harden sandbox browser network defaults

2026-02-21 14:02:53 +01:00

config.ts

refactor(sandbox): centralize dangerous docker override key handling

2026-02-25 02:12:15 +00:00

constants.ts

fix(security): harden sandbox browser network defaults

2026-02-21 14:02:53 +01:00

context.ts

fix(sandbox): fallback docker user to workspace owner uid/gid

2026-02-22 23:33:15 +01:00

context.user-fallback.test.ts

fix(sandbox): fallback docker user to workspace owner uid/gid

2026-02-22 23:33:15 +01:00

docker.config-hash-recreate.test.ts

fix(sandbox): harden fs bridge path checks and bind mount policy

2026-02-24 02:21:43 +00:00

docker.ts

feat(sandbox): block container namespace joins by default

2026-02-24 23:20:34 +00:00

fs-bridge.test.ts

fix(security): block workspace hardlink alias escapes

2026-02-26 03:42:54 +01:00

fs-bridge.ts

refactor: unify boundary-safe reads for bootstrap and includes

2026-02-26 12:42:14 +01:00

fs-paths.test.ts

fix(sandbox): honor explicit bind mounts over workspace defaults

2026-02-22 20:37:22 +01:00

fs-paths.ts

refactor(sandbox): share container-path utils and tighten fs bridge tests

2026-02-25 01:59:53 +00:00

hash.ts

refactor(sandbox): centralize sha256 helpers

2026-02-16 04:33:47 +01:00

host-paths.test.ts

refactor(sandbox): share bind parsing and host-path policy checks

2026-02-24 15:04:47 +00:00

host-paths.ts

fix: harden workspace boundary path resolution

2026-02-26 13:19:59 +01:00

manage.ts

fix(sandbox): allow registry entries without agent scope

2026-02-15 11:50:16 -05:00

network-mode.ts

refactor(sandbox): centralize network mode policy helpers

2026-02-24 23:26:46 +00:00

novnc-auth.ts

fix(sandbox): use one-time noVNC observer tokens

2026-02-21 13:56:58 +01:00

path-utils.ts

refactor(sandbox): share container-path utils and tighten fs bridge tests

2026-02-25 01:59:53 +00:00

prune.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

registry.test.ts

perf(test): trim sandbox registry cleanup churn

2026-02-18 16:28:00 +00:00

registry.ts

fix(sandbox): serialize registry mutations and lock usage

2026-02-18 04:55:40 +01:00

runtime-status.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

sanitize-env-vars.test.ts

feat(security): add sandbox env sanitization helpers + tests

2026-02-18 02:18:02 +01:00

sanitize-env-vars.ts

Agents: sanitize skill env overrides

2026-02-20 12:38:54 -06:00

shared.ts

revert(sandbox): revert SHA-1 slug restoration

2026-02-16 22:03:41 -05:00

test-fixtures.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

tool-policy.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

types.docker.ts

refactor(agents): dedupe config and truncation guards

2026-02-22 17:54:51 +00:00

types.ts

fix(security): harden sandbox browser network defaults

2026-02-21 14:02:53 +01:00

validate-sandbox-security.test.ts

feat(sandbox): block container namespace joins by default

2026-02-24 23:20:34 +00:00

validate-sandbox-security.ts

refactor(sandbox): centralize network mode policy helpers

2026-02-24 23:26:46 +00:00

workspace.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00