Aari
|
0f7d8709d3
|
feat(sandbox): add controlled egress with approvals (#5152)
* feat(sandbox): add controlled egress approvals
* Apply batched suggestions from code review
* fix(sandbox): harden restricted network policy
* fix(sandbox): harden denied egress handling
* fix(sandbox): isolate network proxy sidecar
* chore: retry sandbox image smoke
* fix(sandbox): close remaining network policy gaps
* fix(sandbox): harden relay token rejection
* fix(sandbox): fence incompatible policy replacement
* fix(sandbox): replace containers across network modes
* fix(sandbox): close remaining lifecycle gaps
---------
Co-authored-by: Willem Jiang <willem.jiang@gmail.com>
|
2026-09-04 23:46:57 +08:00 |
|
March-77
|
2e5c8da257
|
fix(sandbox): bypass proxies for local AIO traffic (#4444)
* fix(sandbox): bypass proxies for local AIO traffic
* fix(sandbox): classify public IPv6 proxy targets
|
2026-07-27 07:47:39 +08:00 |
|
AochenShen99
|
8b697245eb
|
fix(sandbox): avoid blocking sandbox readiness polling (#2822)
* fix(sandbox): offload async sandbox acquisition
Run blocking sandbox provider acquisition through the async provider hook so eager sandbox setup does not stall the event loop.
* fix(sandbox): add async readiness polling
Introduce an async sandbox readiness poller using httpx and asyncio.sleep while preserving the existing synchronous API.
* test(sandbox): cover async readiness polling
Lock in non-blocking readiness behavior so the async helper does not regress to requests.get or time.sleep.
* fix(sandbox): allow anonymous backend creation
* fix(sandbox): use async readiness in provider acquisition
* fix(sandbox): use async acquisition for lazy tools
* test(sandbox): cover anonymous remote creation
* fix(sandbox): clamp async readiness timeout budget
* fix(sandbox): offload async lock file handling
* fix(sandbox): delegate async middleware fallthrough
* docs(sandbox): document async acquisition path
* fix(sandbox): offload async sandbox release
* docs(sandbox): mention async release hook
* fix(sandbox): address async lock review
Reduce duplicate sync/async sandbox acquisition state handling and move async thread-lock waits onto a dedicated executor with cancellation-safe cleanup.
* chore: retrigger ci
Retrigger GitHub Actions after upstream main fixed the stale PR merge lint failure.
* test(sandbox): sync backend unit fixtures
---------
Co-authored-by: Willem Jiang <willem.jiang@gmail.com>
|
2026-05-21 14:44:34 +08:00 |
|