 Emily Hedlund
|
451edb3ea6
|
fix(sandbox): centralize async git worktree resolution and enforce read-only security (#25040)
|
2026-04-09 22:04:16 +00:00 |
|
|
Emily Hedlund
|
af3638640c
|
fix(core): resolve windows symlink bypass and stabilize sandbox integration tests (#24834)
|
2026-04-08 22:00:50 +00:00 |
|
|
Gal Zahavi
|
65024d4538
|
fix(core): ensure global temp directory is always in sandbox allowed paths (#24638)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
|
2026-04-04 00:23:27 +00:00 |
|
|
Gal Zahavi
|
13ccc16457
|
fix(core): enhance sandbox usability and fix build error (#24460)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
|
2026-04-01 23:51:06 +00:00 |
|
|
Emily Hedlund
|
6a8a0d4faa
|
feat(core): populate sandbox forbidden paths with project ignore file contents (#24038)
|
2026-04-01 16:27:55 +00:00 |
|
|
David Pierce
|
94f9480a3a
|
fix(core): resolve Plan Mode deadlock during plan file creation due to sandbox restrictions (#24047)
|
2026-03-31 22:06:50 +00:00 |
|
|
Emily Hedlund
|
65ee6171e7
|
fix(core): batch macOS seatbelt rules into a profile file to prevent ARG_MAX errors (#24255)
|
2026-03-31 17:35:13 +00:00 |
|
|
Emily Hedlund
|
535667baf6
|
feat(core): add forbiddenPaths to GlobalSandboxOptions and refactor createSandboxManager (#23936)
|
2026-03-27 16:57:26 +00:00 |
|
|
Tommaso Sciortino
|
8868b34c75
|
refactor(core): delegate sandbox denial parsing to SandboxManager (#23928)
|
2026-03-26 22:10:15 +00:00 |
|
|
David Pierce
|
30397816da
|
feat(sandbox): implement secret visibility lockdown for env files (#23712)
Co-authored-by: Tommaso Sciortino <sciortino@gmail.com>
|
2026-03-26 20:35:21 +00:00 |
|
|
Gal Zahavi
|
30e0ab102a
|
feat(sandbox): dynamic Linux sandbox expansion and worktree support (#23692)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
|
2026-03-26 01:58:45 +00:00 |
|
|
Tommaso Sciortino
|
1b052df52f
|
feat(core): implement Windows sandbox dynamic expansion Phase 1 and 2.1 (#23691)
|
2026-03-25 17:54:45 +00:00 |
|
|
Emily Hedlund
|
578d656de9
|
feat(sandbox): implement forbiddenPaths for OS-specific sandbox managers (#23282)
Co-authored-by: Gal Zahavi <38544478+galz10@users.noreply.github.com>
|
2026-03-25 01:23:51 +00:00 |
|
|
Gal Zahavi
|
36e6445dba
|
feat(sandbox): dynamic macOS sandbox expansion and worktree support (#23301)
|
2026-03-24 04:48:13 +00:00 |
|
|
David Pierce
|
37c8de3c06
|
Implementation of sandbox "Write-Protected" Governance Files (#23139)
Co-authored-by: Abhi <43648792+abhipatel12@users.noreply.github.com>
|
2026-03-24 04:04:17 +00:00 |
|
|
Emily Hedlund
|
cdf077da56
|
feat(core): refactor SandboxManager to a stateless architecture and introduce explicit Deny interface (#23141)
|
2026-03-23 15:43:58 +00:00 |
|
|
matt korwel
|
c9a336976b
|
feat(core): implement native Windows sandboxing (#21807)
|
2026-03-19 22:25:22 +00:00 |
|
|
Emily Hedlund
|
f6e21f50fd
|
feat(core): implement strict macOS sandboxing using Seatbelt allowlist (#22832)
|
2026-03-18 20:07:54 +00:00 |
|
|
David Pierce
|
8f22ffd2b1
|
Linux sandbox bubblewrap (#22680)
|
2026-03-16 21:34:48 +00:00 |
|
|
Gal Zahavi
|
fa024133e6
|
feat(core): integrate SandboxManager to sandbox all process-spawning tools (#22231)
|
2026-03-13 21:11:51 +00:00 |
|
|
Gal Zahavi
|
e3b3b71c14
|
feat(core): implement SandboxManager interface and config schema (#21774)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
|
2026-03-11 21:42:50 +00:00 |
|