Hyeonsang Cho 18b803fad9

fix(sandbox): scope BoxLite grep globs to the search root (#5419) ...

* fix(sandbox): scope BoxLite grep globs to the search root

BoxliteBox.grep omits grep --include for busybox portability and applies
the glob in Python, but it kept only the glob's last path segment and
matched it against each file's basename. A scoped pattern therefore lost
its directory part: grep(glob="src/*.js") returned every .js file in the
tree, including vendor/ and nested src/ subdirectories that glob() with
the same pattern excludes.

The glob now goes through path_matches against the path relative to the
search root, with the file's basename when the root is a single file --
the same scope glob() uses and the one Tenki, E2B, OpenSandbox, AIO and
LocalSandbox already enforce. Like those providers, an empty glob is now
passed to path_matches instead of being treated as no filter.

* docs(changelog): reference #5419 in the BoxLite grep glob scope entry

2026-09-14 12:26:12 +08:00

..

extension-api

feat(extensions): let an out-of-tree extension observe what the agent did (#4863)

2026-08-23 09:57:12 +08:00

harness

fix(sandbox): scope BoxLite grep globs to the search root (#5419)

2026-09-14 12:26:12 +08:00