Agustin Rivera ff607adc69 fix(sandbox): block home credential binds (#59157) ...

* fix(sandbox): block home credential binds
* fix(sandbox): harden blocked credential bind checks

2026-04-03 16:06:22 -07:00

..

backend.test.ts

…

backend.ts

…

bind-spec.test.ts

…

bind-spec.ts

…

browser-bridges.ts

refactor: split browser sdk imports for sandbox and audit

2026-04-03 16:39:47 +01:00

browser.create.test.ts

test: trim sandbox and transcript partial mocks

2026-04-03 20:14:39 +01:00

browser.novnc-url.test.ts

…

browser.ts

fix: remove unused sandbox browser type import

2026-04-03 16:39:47 +01:00

config-hash.test.ts

style: format sandbox and helper files

2026-03-31 18:44:39 +01:00

config-hash.ts

fix(sandbox): relabel managed workspace mounts for SELinux (#58025)

2026-03-31 00:30:34 -04:00

config.ts

fix(types): align callers with removed legacy config aliases

2026-04-04 01:50:44 +09:00

constants.ts

…

context.ts

agents: preserve remote skill sync eligibility

2026-04-03 14:19:43 -04:00

context.user-fallback.test.ts

…

docker-backend.test.ts

test: trim agents importActual mocks

2026-04-03 20:00:35 +01:00

docker-backend.ts

fix(sandbox): use browser image for browser runtime matching (#58759)

2026-04-01 17:44:52 +09:00

docker.config-hash-recreate.test.ts

test: trim core partial mocks

2026-04-03 19:28:19 +01:00

docker.execDockerRaw.enoent.test.ts

…

docker.ts

fix(sandbox): relabel managed workspace mounts for SELinux (#58025)

2026-03-31 00:30:34 -04:00

docker.windows.test.ts

…

fs-bridge-mutation-helper.test.ts

fix(sandbox): resolve pinned fs helper python without PATH (#58573)

2026-03-31 21:10:17 -04:00

fs-bridge-mutation-helper.ts

fix(sandbox): resolve pinned fs helper python without PATH (#58573)

2026-03-31 21:10:17 -04:00

fs-bridge-mutation-python-source.ts

…

fs-bridge-path-safety.runtime.ts

test: trim fs bridge partial mocks

2026-04-03 21:24:00 +01:00

fs-bridge-path-safety.ts

test: trim fs bridge partial mocks

2026-04-03 21:24:00 +01:00

fs-bridge-rename-targets.ts

refactor: share browser and sandbox helpers

2026-03-26 18:43:57 +00:00

fs-bridge-shell-command-plans.ts

…

fs-bridge.anchored-ops.test.ts

test: trim fs bridge partial mocks

2026-04-03 21:24:00 +01:00

fs-bridge.boundary.test.ts

…

fs-bridge.e2e-docker.test.ts

…

fs-bridge.shell.test.ts

test: trim fs bridge partial mocks

2026-04-03 21:24:00 +01:00

fs-bridge.test-helpers.ts

test: trim fs bridge partial mocks

2026-04-03 21:24:00 +01:00

fs-bridge.ts

…

fs-paths.test.ts

…

fs-paths.ts

…

hash.ts

…

host-paths.test.ts

…

host-paths.ts

…

manage.test.ts

test: trim sandbox and transcript partial mocks

2026-04-03 20:14:39 +01:00

manage.ts

refactor: split browser sdk imports for sandbox and audit

2026-04-03 16:39:47 +01:00

network-mode.ts

…

novnc-auth.ts

…

path-utils.ts

…

prune.ts

refactor: split browser sdk imports for sandbox and audit

2026-04-03 16:39:47 +01:00

registry.test.ts

…

registry.ts

refactor: migrate more boundary parsing to zod

2026-03-27 05:07:50 +00:00

remote-fs-bridge.test.ts

fix(sandbox): pin remote fs bridge reads (#58016)

2026-03-31 09:55:51 +09:00

remote-fs-bridge.ts

fix(sandbox): pin remote fs bridge reads (#58016)

2026-03-31 09:55:51 +09:00

runtime-status.ts

refactor(sandbox): remove tool policy facade (#54684)

2026-03-25 23:03:24 +02:00

sanitize-env-vars.test.ts

Sandbox: sanitize SSH subprocess env (#57848)

2026-03-30 20:05:57 +01:00

sanitize-env-vars.ts

Sandbox: sanitize SSH subprocess env (#57848)

2026-03-30 20:05:57 +01:00

shared.ts

…

ssh-backend.test.ts

test: trim sandbox and pi runner partial mocks

2026-04-03 20:02:57 +01:00

ssh-backend.ts

Sandbox: sanitize SSH subprocess env (#57848)

2026-03-30 20:05:57 +01:00

ssh.spawn-env.test.ts

test: trim more agent partial mocks

2026-04-03 20:15:55 +01:00

ssh.test.ts

fix(agents): reject escaping symlinks in ssh sandbox uploads (#58220)

2026-03-31 19:56:45 +09:00

ssh.ts

fix(agents): reject escaping symlinks in ssh sandbox uploads (#58220)

2026-03-31 19:56:45 +09:00

test-args.ts

…

test-fixtures.ts

…

tool-policy.test.ts

refactor(sandbox): remove tool policy facade (#54684)

2026-03-25 23:03:24 +02:00

tool-policy.ts

refactor(sandbox): remove tool policy facade (#54684)

2026-03-25 23:03:24 +02:00

types.docker.ts

…

types.ts

…

validate-sandbox-security.test.ts

fix(sandbox): block home credential binds (#59157)

2026-04-03 16:06:22 -07:00

validate-sandbox-security.ts

fix(sandbox): block home credential binds (#59157)

2026-04-03 16:06:22 -07:00

workspace-mounts.test.ts

style: format sandbox and helper files

2026-03-31 18:44:39 +01:00

workspace-mounts.ts

fix(sandbox): relabel managed workspace mounts for SELinux (#58025)

2026-03-31 00:30:34 -04:00

workspace.test.ts

…

workspace.ts

…