Aari 317577e285

fix: enforce custom agent skill allowlists in sandboxes (#5077) ...

* fix: enforce agent skill allowlists in sandboxes

* fix: guard E2B skill projection resets

* fix: preserve agent skill isolation across delegation

* fix: close sandbox skill isolation bypasses

* fix(sandbox): close skill isolation review gaps

* fix(sandbox): harden skill isolation lifecycle

2026-08-31 14:35:08 +08:00

..

local

fix: enforce custom agent skill allowlists in sandboxes (#5077)

2026-08-31 14:35:08 +08:00

__init__.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

acquire_serialization.py

feat(sandbox): share sandbox identity derivation and acquire serialization (#4741) (#5089)

2026-08-30 10:30:34 +08:00

AGENTS.md

fix: enforce custom agent skill allowlists in sandboxes (#5077)

2026-08-31 14:35:08 +08:00

env_policy.py

fix(sandbox): scrub abbreviated *_PASS vars and Postgres PGPASSFILE from skill env (#4026)

2026-07-10 14:05:47 +08:00

exceptions.py

feat(authz): enforce sandbox:execute authorization at sandbox acquisition (#4063 Phase 3) (#4911)

2026-08-24 16:32:06 +08:00

file_operation_lock.py

fix(sandbox): prevent memory leak in file operation locks using WeakValueDictionary (#2096)

2026-04-10 22:55:53 +08:00

identity.py

feat(sandbox): share sandbox identity derivation and acquire serialization (#4741) (#5089)

2026-08-30 10:30:34 +08:00

middleware.py

fix: enforce custom agent skill allowlists in sandboxes (#5077)

2026-08-31 14:35:08 +08:00

overwrite.py

fix(sandbox): unwrap Overwrite-wrapped state in ensure_sandbox_initialized (#4429)

2026-07-29 07:04:26 +08:00

path_patterns.py

refactor(sandbox): give the host→virtual output-mask regex a single owner (#4108)

2026-07-13 18:34:41 +08:00

sandbox_provider.py

fix: enforce custom agent skill allowlists in sandboxes (#5077)

2026-08-31 14:35:08 +08:00

sandbox.py

fix(sandbox): push read_file ranges into sandbox reads (#3824)

2026-07-30 07:53:10 +08:00

search.py

fix(sandbox): allow grep to search a single file (#4512)

2026-07-28 07:49:13 +08:00

security.py

fix(sandbox): improve sandbox security and preserve multimodal content (#2114)

2026-04-11 16:52:10 +08:00

tools.py

fix(authz): recheck policy before sandbox reuse (#5006)

2026-08-30 15:29:51 +08:00