rayhpeng 7ce9333200 feat(isolation): wire user_id through all Paths and memory callsites ...

Pass user_id=get_effective_user_id() at every callsite that invokes
Paths methods or memory functions, enabling per-user filesystem isolation
throughout the harness and app layers.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-12 15:16:23 +08:00

..

local

feat(sandbox): add read-only support for local sandbox path mappings (#1808)

2026-04-03 19:46:22 +08:00

__init__.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

exceptions.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

file_operation_lock.py

fix(sandbox): prevent memory leak in file operation locks using WeakValueDictionary (#2096)

2026-04-10 22:55:53 +08:00

middleware.py

fix: add null checks for runtime.context and tighten langgraph constraint (#1326)

2026-03-25 21:01:10 +08:00

sandbox_provider.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

sandbox.py

feat(sandbox): add built-in grep and glob tools (#1784)

2026-04-03 16:03:06 +08:00

search.py

feat(sandbox): add built-in grep and glob tools (#1784)

2026-04-03 16:03:06 +08:00

security.py

[Security] Address critical host-shell escape in LocalSandboxProvider (#1547)

2026-03-29 21:03:58 +08:00

tools.py

feat(isolation): wire user_id through all Paths and memory callsites

2026-04-12 15:16:23 +08:00