Repository navigation

fix(sandbox): protect daemon token file - #685

Open

PierrunoYT wants to merge 34 commits into

Twigpine:mainfrom

PierrunoYT:agent/protect-daemon-token-file

Commits on Aug 21, 2026
- fix(sandbox): protect daemon token file
  PierrunoYT
  committed
  fd1efaa
- fix(sandbox): close daemon token review gaps
  
  ampagent
  and
  PierrunoYT
  committed
  8b1c617
- fix(sandbox): reject linkable macOS daemon tokens
  PierrunoYT
  committed
  cdfacd7
- fix(sandbox): close the Linux mandatory-token validate/build gap
  PierrunoYT
  committed
  03c6ab5
- fix(sandbox): fail closed on mandatory symlinks
  PierrunoYT
  committed
  5d69f15
- fix(sandbox): close the Linux token hard-link alias path
  
  PierrunoYT
  and
  factory-droid[bot]
  committed
  2243918
- fix(sandbox): gate path args on exact bytes and close the engine-less listing
  
  PierrunoYT
  and
  claude
  committed
  74ea6af
- fix(sandbox): complete daemon token boundary
  
  ampagent
  and
  PierrunoYT
  committed
  bbce40c
- test(sandbox): scope Seatbelt token denial to macOS
  
  PierrunoYT
  and
  ampagent
  committed
  af7a3cc
- fix(sandbox): reject pre-existing macOS token aliases and pin the case-fold test
  PierrunoYT
  committed
  01538a8
Commits on Aug 22, 2026
- fix(sandbox): preserve daemon token identity
  PierrunoYT
  committed
  b9b6de8
Commits on Aug 23, 2026
- fix(sandbox): address CodeRabbit review findings
  
  PierrunoYT
  and
  claude
  committed
  476d706
- fix(sandbox): answer an uncreated write root from its parent filesystem
  
  PierrunoYT
  and
  claude
  committed
  df7d1df
- fix(sandbox): mandate credential protection independent of the sandbox engine
  
  PierrunoYT
  and
  claude
  committed
  6e716f0
Commits on Aug 24, 2026
- fix(sandbox): close protected token file races
  PierrunoYT
  committed
  6150070
Commits on Aug 25, 2026
- Merge branch 'main' into agent/protect-daemon-token-file
  
  PierrunoYT
  and
  claude
  committed
  52e53a8
- fix(tools): bind grep's credential decision to the opened file
  
  PierrunoYT
  and
  claude
  committed
  d2e41d6
Commits on Aug 26, 2026
- Merge remote-tracking branch 'upstream/main' into pr-685
  PierrunoYT
  committed
  0f0bb00
Commits on Aug 27, 2026
- fix(tools): apply a patch to the exact path its authorization saw
  
  PierrunoYT
  and
  claude
  committed
  278c9a7
Commits on Sep 2, 2026
- fix(sandbox): align patch authorization with execution
  
  PierrunoYT
  and
  ampagent
  committed
  71e9517
Commits on Sep 7, 2026
- Merge remote-tracking branch 'upstream/main' into agent/protect-daemon-token-file
  PierrunoYT
  committed
  549f520
- fix(sandbox): close daemon token review gaps
  
  PierrunoYT
  and
  ampagent
  committed
  682e23f
Commits on Sep 12, 2026
- Merge upstream main and preserve project-aware formatting.
  
  PierrunoYT
  and
  devin-ai-integration[bot]
  committed
  aa652bd
- test(sandbox): use the error-aware bwrap planner
  
  PierrunoYT
  and
  devin-ai-integration[bot]
  committed
  9e05cf0
- fix(tools): correct Kotlin and Dart stdin formatter contracts
  
  ampagent
  and
  PierrunoYT
  committed
  373596b
- test(tools): canonicalize stdin formatter fixture paths
  
  ampagent
  and
  PierrunoYT
  committed
  c410fdc
- fix(cli): join local daemon serve before remote startup returns
  
  ampagent
  and
  PierrunoYT
  committed
  8c01bb9
Commits on Sep 13, 2026
- fix: close daemon token lifecycle and checkpoint review gaps
  PierrunoYT
  committed
  d519cd3
Commits on Sep 19, 2026
- merge: integrate upstream main without weakening credential handles
  
  ampagent
  and
  PierrunoYT
  committed
  56bb149
- fix: bind LSP and image credential checks to consumed handles
  
  ampagent
  and
  PierrunoYT
  committed
  6954e2f
- test: make credential handle regressions portable
  
  ampagent
  and
  PierrunoYT
  committed
  62d97ea
Commits on Sep 25, 2026
- fix(tools): keep written bytes on silent formatter and bound shimmed runs
  
  PierrunoYT
  and
  claude
  committed
  31fe0e4
- test(tools): wait for foreground server readiness
  
  ampagent
  and
  PierrunoYT
  committed
  90c043b
Commits on Sep 28, 2026
- test(tools): probe protected read parent-root fallback
  
  ampagent
  and
  PierrunoYT
  committed
  35757a9

Commits

Commits on Aug 21, 2026

Commits on Aug 22, 2026

Commits on Aug 23, 2026

Commits on Aug 24, 2026

Commits on Aug 25, 2026

Commits on Aug 26, 2026

Commits on Aug 27, 2026

Commits on Sep 2, 2026

Commits on Sep 7, 2026

Commits on Sep 12, 2026

Commits on Sep 13, 2026

Commits on Sep 19, 2026

Commits on Sep 25, 2026

Commits on Sep 28, 2026