spud 8f08df9b48

fix(sandbox): fence ambiguous AIO session creation ownership (#5711) ...

* fix(sandbox): quarantine ambiguous shell session creation

* fix(sandbox): quarantine ambiguous bash session creation

* fix(sandbox): recycle sandboxes with ambiguous session creates

* fix(sandbox): keep quarantined release teardown non-raising

* docs(sandbox): keep guidance within instruction budget

---------

Co-authored-by: Willem Jiang <willem.jiang@gmail.com>

2026-09-22 20:48:22 +08:00

..

local

fix(sandbox): force UTF-8 console for PowerShell so CJK output is not garbled (#5440)

2026-09-15 07:31:03 +08:00

__init__.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

acquire_serialization.py

feat(sandbox): share sandbox identity derivation and acquire serialization (#4741) (#5089)

2026-08-30 10:30:34 +08:00

AGENTS.md

fix(sandbox): fence ambiguous AIO session creation ownership (#5711)

2026-09-22 20:48:22 +08:00

env_policy.py

fix(sandbox): scrub SSH_AUTH_SOCK from the sandbox subprocess env (#5145)

2026-09-02 19:05:50 +08:00

exceptions.py

feat(authz): enforce sandbox:execute authorization at sandbox acquisition (#4063 Phase 3) (#4911)

2026-08-24 16:32:06 +08:00

file_operation_lock.py

fix(sandbox): prevent memory leak in file operation locks using WeakValueDictionary (#2096)

2026-04-10 22:55:53 +08:00

identity.py

feat(sandbox): share sandbox identity derivation and acquire serialization (#4741) (#5089)

2026-08-30 10:30:34 +08:00

lease.py

fix(sandbox): drain previous release during async rebind (#5498)

2026-09-17 22:33:18 +08:00

middleware.py

fix(agent): align unattended prompt with tool policy (#4919)

2026-09-20 18:57:49 +08:00

overwrite.py

fix(sandbox): unwrap Overwrite-wrapped state in ensure_sandbox_initialized (#4429)

2026-07-29 07:04:26 +08:00

path_patterns.py

fix(sandbox): mask every host path in a colon-joined list (#5418)

2026-09-14 14:05:21 +08:00

remote_list_dir.py

fix(sandbox): prune ignored entries before the listing limit (#5676)

2026-09-22 10:56:49 +08:00

remote_search.py

fix(sandbox): wrap implicit-session probe commands in a subshell to prevent wedged shell (#1433 family) (#5546)

2026-09-20 19:07:48 +08:00

sandbox_provider.py

fix(sandbox): drain skill sync before cancellation (#5350)

2026-09-12 10:54:39 +08:00

sandbox.py

fix(sandbox): report an exactly-full AIO glob result as complete (#5449)

2026-09-16 16:00:23 +08:00

search.py

fix(sandbox): allow grep to search a single file (#4512)

2026-07-28 07:49:13 +08:00

security.py

fix(sandbox): improve sandbox security and preserve multimodal content (#2114)

2026-04-11 16:52:10 +08:00

tools.py

fix(sandbox): cut read_file output at a line boundary and name the next start_line (#5474)

2026-09-16 23:57:38 +08:00