538605ff44
[codex] Extract filesystem safety primitives ( #77918 )
...
* refactor: extract filesystem safety primitives
* refactor: use fs-safe for file access helpers
* refactor: reuse fs-safe for media reads
* refactor: use fs-safe for image reads
* refactor: reuse fs-safe in qqbot media opener
* refactor: reuse fs-safe for local media checks
* refactor: consume cleaner fs-safe api
* refactor: align fs-safe json option names
* fix: preserve fs-safe migration contracts
* refactor: use fs-safe primitive subpaths
* refactor: use grouped fs-safe subpaths
* refactor: align fs-safe api usage
* refactor: adapt private state store api
* chore: refresh proof gate
* refactor: follow fs-safe json api split
* refactor: follow reduced fs-safe surface
* build: default fs-safe python helper off
* fix: preserve fs-safe plugin sdk aliases
* refactor: consolidate fs-safe usage
* refactor: unify fs-safe store usage
* refactor: trim fs-safe temp workspace usage
* refactor: hide low-level fs-safe primitives
* build: use published fs-safe package
* fix: preserve outbound recovery durability after rebase
* chore: refresh pr checks
2026-05-06 02:15:17 +01:00
f0000ab72d
refactor(plugin-sdk): split infra runtime barrel
2026-04-27 20:50:35 +01:00
95119017c8
fix(openshell): pin sandbox file reads ( #69798 )
...
* fix(openshell): pin sandbox file reads against parent symlink swaps
* docs(changelog): note openshell sandbox read pinning (#69798 )
* fix(openshell): containment-check against literal root and self-contain file-identity helper
* test(openshell): spy on fsPromises.open for swap races, skip dev=0 test on win32
* fix(openshell): single-syscall fallback identity check + tighten sameFileIdentity types
* fix(openshell): re-fstat pinned handle after identity check for defense-in-depth
* fix(openshell): lstat leaf on platforms without O_NOFOLLOW to close windows symlink gap
* fix(openshell): expose test seam for O_NOFOLLOW availability instead of patching native constants
2026-04-22 16:44:25 -06:00
b0734664f8
style: format touched code
2026-04-22 04:24:45 +01:00
7be82d4fd1
fix(openshell): pin host writes to sandbox root ( #69797 )
...
* fix(openshell): pin host writes to sandbox root
* fix(openshell): use plugin sdk infra runtime
* fix(openshell): reject symlink write targets
* chore(changelog): note openshell sandbox write fix
2026-04-21 15:18:28 -06:00
ce32697250
fix(openshell): split fs bridge backend types
2026-04-09 09:17:29 +01:00
7d6af7e154
fix(agents): split sandbox backend handle types
2026-04-09 08:52:14 +01:00
af62a2c2e4
style: fix extension lint violations
2026-04-06 14:53:55 +01:00
e774fe1286
refactor: share browser and sandbox helpers
2026-03-26 18:43:57 +00:00
6f6468027a
refactor: dedupe test and runtime seams
2026-03-24 23:33:30 +00:00
9fc6c1929a
Plugin SDK: split setup and sandbox subpaths
2026-03-16 12:06:32 +00:00
ae7f18e503
feat: add remote openshell sandbox mode
2026-03-15 20:28:19 -07:00
d8b927ee6a
feat: add openshell sandbox backend
2026-03-15 20:03:22 -07:00
Peter Steinberger