fix(sandbox): protect daemon token file - #685

Open

PierrunoYT wants to merge 34 commits into

Twigpine:mainfrom

PierrunoYT:agent/protect-daemon-token-file

Commits on Aug 21, 2026

fix(sandbox): protect daemon token file
PierrunoYT
committed
fd1efaa
fix(sandbox): close daemon token review gaps

ampagent
and
PierrunoYT
committed
8b1c617
fix(sandbox): reject linkable macOS daemon tokens
PierrunoYT
committed
cdfacd7
fix(sandbox): close the Linux mandatory-token validate/build gap
PierrunoYT
committed
03c6ab5
fix(sandbox): fail closed on mandatory symlinks
PierrunoYT
committed
5d69f15
fix(sandbox): close the Linux token hard-link alias path

PierrunoYT
and
factory-droid[bot]
committed
2243918
fix(sandbox): gate path args on exact bytes and close the engine-less listing

PierrunoYT
and
claude
committed
74ea6af
fix(sandbox): complete daemon token boundary

ampagent
and
PierrunoYT
committed
bbce40c
test(sandbox): scope Seatbelt token denial to macOS

PierrunoYT
and
ampagent
committed
af7a3cc
fix(sandbox): reject pre-existing macOS token aliases and pin the case-fold test
PierrunoYT
committed
01538a8

Commits on Aug 22, 2026

fix(sandbox): preserve daemon token identity
PierrunoYT
committed
b9b6de8

Commits on Aug 23, 2026

fix(sandbox): address CodeRabbit review findings

PierrunoYT
and
claude
committed
476d706
fix(sandbox): answer an uncreated write root from its parent filesystem

PierrunoYT
and
claude
committed
df7d1df
fix(sandbox): mandate credential protection independent of the sandbox engine

PierrunoYT
and
claude
committed
6e716f0

Commits on Aug 24, 2026

fix(sandbox): close protected token file races
PierrunoYT
committed
6150070

Commits on Aug 25, 2026

Merge branch 'main' into agent/protect-daemon-token-file

PierrunoYT
and
claude
committed
52e53a8
fix(tools): bind grep's credential decision to the opened file

PierrunoYT
and
claude
committed
d2e41d6

Commits on Aug 26, 2026

Merge remote-tracking branch 'upstream/main' into pr-685
PierrunoYT
committed
0f0bb00

Commits on Aug 27, 2026

fix(tools): apply a patch to the exact path its authorization saw

PierrunoYT
and
claude
committed
278c9a7

Commits on Sep 2, 2026

fix(sandbox): align patch authorization with execution

PierrunoYT
and
ampagent
committed
71e9517

Commits on Sep 7, 2026

Merge remote-tracking branch 'upstream/main' into agent/protect-daemon-token-file
PierrunoYT
committed
549f520
fix(sandbox): close daemon token review gaps

PierrunoYT
and
ampagent
committed
682e23f

Commits on Sep 12, 2026

Merge upstream main and preserve project-aware formatting.

PierrunoYT
and
devin-ai-integration[bot]
committed
aa652bd
test(sandbox): use the error-aware bwrap planner

PierrunoYT
and
devin-ai-integration[bot]
committed
9e05cf0
fix(tools): correct Kotlin and Dart stdin formatter contracts

ampagent
and
PierrunoYT
committed
373596b
test(tools): canonicalize stdin formatter fixture paths

ampagent
and
PierrunoYT
committed
c410fdc
fix(cli): join local daemon serve before remote startup returns

ampagent
and
PierrunoYT
committed
8c01bb9

Commits on Sep 13, 2026

fix: close daemon token lifecycle and checkpoint review gaps
PierrunoYT
committed
d519cd3

Commits on Sep 19, 2026

merge: integrate upstream main without weakening credential handles

ampagent
and
PierrunoYT
committed
56bb149
fix: bind LSP and image credential checks to consumed handles

ampagent
and
PierrunoYT
committed
6954e2f
test: make credential handle regressions portable

ampagent
and
PierrunoYT
committed
62d97ea

Commits on Sep 25, 2026

fix(tools): keep written bytes on silent formatter and bound shimmed runs

PierrunoYT
and
claude
committed
31fe0e4
test(tools): wait for foreground server readiness

ampagent
and
PierrunoYT
committed
90c043b

Commits on Sep 28, 2026

test(tools): probe protected read parent-root fallback

ampagent
and
PierrunoYT
committed
35757a9