Evan 7cbcbbc642 fix(sandbox): same fix for browser.ts - make /workspace bind mount read-only when workspaceAccess is not rw ...

The identical buggy logic from docker.ts also exists in browser.ts.
Applying the same fix here.

2026-03-02 22:58:09 +00:00

..

acp

test(perf): reduce heavy fixture and guardrail overhead

2026-03-02 21:07:52 +00:00

agents

fix(sandbox): same fix for browser.ts - make /workspace bind mount read-only when workspaceAccess is not rw

2026-03-02 22:58:09 +00:00

auto-reply

fix(followup): pass currentChannelId to queued message agent runs

2026-03-02 22:53:04 +00:00

browser

test: micro-optimize heavy gateway/browser/telegram suites

2026-03-02 22:29:04 +00:00

canvas-host

refactor(agents): centralize tool display definitions

2026-03-02 12:13:45 +00:00

channels

fix(signal): fall back to toolContext.currentMessageId for reactions

2026-03-02 22:53:04 +00:00

cli

refactor(browser): dedupe browser and cli command wiring

2026-03-02 21:31:36 +00:00

commands

fix(core): resolve post-rebase type errors

2026-03-02 21:39:43 +00:00

compat

…

config

feat(hooks): add message:transcribed and message:preprocessed internal hooks

2026-03-02 22:34:43 +00:00

cron

refactor: modularize slack/config/cron/daemon internals

2026-03-02 22:30:21 +00:00

daemon

fix(daemon): handle versioned node@XX Homebrew formulas in Cellar resolution

2026-03-02 22:37:09 +00:00

discord

fix: harden discord audio preflight mention detection (#32136) (thanks @jnMetaCode)

2026-03-02 22:45:41 +00:00

docs

…

gateway

gateway: cover default message-channel fallback

2026-03-02 22:51:32 +00:00

hooks

refactor: unify message hook mapping and async dispatch

2026-03-02 22:51:28 +00:00

i18n

fix(ci): resolve i18n typing and generated-policy drift

2026-03-02 04:29:18 +00:00

imessage

refactor: harden plugin install flow and main DM route pinning

2026-03-02 21:22:38 +00:00

infra

refactor: unify message hook mapping and async dispatch

2026-03-02 22:51:28 +00:00

line

refactor: harden plugin install flow and main DM route pinning

2026-03-02 21:22:38 +00:00

link-understanding

…

logging

fix: resolve rebase conflict markers

2026-03-02 19:57:33 +00:00

markdown

refactor: split telegram delivery and unify media/frontmatter/i18n pipelines

2026-03-02 04:14:06 +00:00

media

refactor(net): unify proxy env checks and guarded fetch modes

2026-03-02 16:24:26 +00:00

media-understanding

fix: support parakeet-mlx output-dir transcript parsing (#9177) (thanks @mac-110)

2026-03-02 22:22:17 +00:00

memory

perf(config): skip redundant schema and session-store work

2026-03-02 20:19:10 +00:00

node-host

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

pairing

fix(webchat): suppress NO_REPLY token in chat transcript rendering (#32183)

2026-03-02 16:39:08 -06:00

plugin-sdk

refactor(core): dedupe infra, media, pairing, and plugin helpers

2026-03-02 21:32:11 +00:00

plugins

fix(hooks): consolidate after_tool_call context + single-fire behavior (#32201)

2026-03-02 14:33:37 -08:00

process

refactor: dedupe cli config cron and install flows

2026-03-02 19:57:33 +00:00

providers

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

routing

perf: cache allowlist and account-id normalization

2026-03-02 21:58:35 +00:00

scripts

…

secrets

fix: align exec no-output timeout defaults (#32235) (thanks @bmendonca3)

2026-03-02 22:47:03 +00:00

security

test: stabilize bun cache invalidation fixtures

2026-03-02 22:09:36 +00:00

sessions

test(integration): dedupe messaging, secrets, and plugin test suites

2026-03-02 07:13:11 +00:00

shared

refactor: dedupe cli config cron and install flows

2026-03-02 19:57:33 +00:00

signal

refactor: harden plugin install flow and main DM route pinning

2026-03-02 21:22:38 +00:00

slack

refactor: modularize slack/config/cron/daemon internals

2026-03-02 22:30:21 +00:00

telegram

test: micro-optimize heavy gateway/browser/telegram suites

2026-03-02 22:29:04 +00:00

terminal

refactor: dedupe channel and gateway surfaces

2026-03-02 19:57:33 +00:00

test-helpers

…

test-utils

test(perf): reduce heavy fixture and guardrail overhead

2026-03-02 21:07:52 +00:00

tts

refactor: dedupe channel and gateway surfaces

2026-03-02 19:57:33 +00:00

tui

fix(tui): honor explicit gateway auth for url overrides

2026-03-02 19:48:02 +00:00

types

…

utils

fix(agents): add forward-compat fallback for google-gemini-cli gemini-3.1-pro/flash-preview (#26570)

2026-02-26 18:39:13 -05:00

web

refactor: split inbound and reload pipelines into staged modules

2026-03-02 21:55:01 +00:00

whatsapp

WhatsApp: enforce allowFrom for explicit outbound sends (#20921)

2026-02-22 18:13:23 -05:00

wizard

fix(security): harden sms.send dangerous-node defaults

2026-03-02 16:06:52 +00:00

channel-web.ts

…

docker-image-digests.test.ts

…

docker-setup.e2e.test.ts

feat(docker): add opt-in sandbox support for Docker deployments (#29974)

2026-03-01 23:06:10 -08:00

dockerfile.test.ts

fix(docker): harden /app/extensions permissions to 755 (#30191)

2026-03-01 15:45:21 -08:00

entry.ts

CLI: add root --help fast path and lazy channel option resolution (#30975)

2026-03-01 14:23:46 -08:00

extensionAPI.ts

…

globals.ts

…

index.ts

…

logger.test.ts

…

logger.ts

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

logging.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

…

utils.ts

…

version.test.ts

refactor: centralize delivery/path/media/version lifecycle

2026-03-02 04:04:36 +00:00

version.ts

refactor: centralize delivery/path/media/version lifecycle

2026-03-02 04:04:36 +00:00