5 Commits

Author	SHA1	Message	Date
Peter Steinberger	ea2c6a63c9	refactor(scripts): adopt shared scaffolding (#118514) ... * refactor(scripts): adopt shared scaffolding * fix(scripts): satisfy strict tooling checks * fix(scripts): preserve scaffolding contracts	2026-08-03 04:40:30 -07:00
Vincent Koc	99252306b7	test(sandbox): prove protected binds with Podman	2026-08-01 10:43:08 +08:00
陈杨俊0668000971	5c8cc947b7	fix(ci): format sandbox E2E script with oxfmt	2026-07-20 23:17:31 +08:00
陈杨俊0668000971	8248b8504a	fix(sandbox): add warning logs for filtered binds, convert e2e to argv-based spawn, remove stale demo script ... - docker.ts/browser.ts: log.warn when user binds are skipped due to protected skill mount conflicts, so maintainers can see the decision - e2e-sandbox-bind-conflict.mjs: replace execSync shell-string with spawnSync argv-based sudo docker calls - demo-sandbox-bind-filter.mjs: removed (stale, referenced non-existent filterReadOnlyWorkspaceSkillMountsByBinds; e2e script covers proof) Co-Authored-By: Claude <noreply@anthropic.com>	2026-07-03 16:17:49 +08:00
陈杨俊0668000971	03d48c3b76	fix(sandbox): skip user binds that conflict with protected skill overlay container paths ... - skip read-only skill mounts when user binds target the same container path - normalize trailing slashes in fs-bridge container path comparisons - add workspace-mounts filter and tests - add e2e Docker verification and demo scripts for bind-conflict Co-Authored-By: Claude <noreply@anthropic.com>	2026-07-01 15:05:28 +08:00