Emily Hedlund
|
607baa1909
|
fix(sandbox): centralize async git worktree resolution and enforce read-only security (#25040)
|
2026-04-09 22:04:16 +00:00 |
|
Emily Hedlund
|
c4854ee1ca
|
refactor(core): use centralized path resolution for Linux sandbox (#24985)
|
2026-04-09 15:28:58 +00:00 |
|
Emily Hedlund
|
3632f04fc1
|
fix(core): resolve windows symlink bypass and stabilize sandbox integration tests (#24834)
|
2026-04-08 22:00:50 +00:00 |
|
David Pierce
|
79b8536b5f
|
Improve sandbox error matching and caching (#24550)
|
2026-04-07 21:08:18 +00:00 |
|
Gal Zahavi
|
288f8c0e19
|
fix(core): ensure global temp directory is always in sandbox allowed paths (#24638)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
|
2026-04-04 00:23:27 +00:00 |
|
Emily Hedlund
|
23e67f855d
|
test: fix Windows CI execution and resolve exposed platform failures (#24476)
|
2026-04-03 15:50:29 +00:00 |
|
Gal Zahavi
|
493494f72e
|
fix(core): enhance sandbox usability and fix build error (#24460)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
|
2026-04-01 23:51:06 +00:00 |
|
Emily Hedlund
|
680ac0ee4f
|
fix(core): refactor linux sandbox to fix ARG_MAX crashes (#24286)
|
2026-04-01 20:17:10 +00:00 |
|
Emily Hedlund
|
5606c0458b
|
feat(core): populate sandbox forbidden paths with project ignore file contents (#24038)
|
2026-04-01 16:27:55 +00:00 |
|
David Pierce
|
718659fef4
|
fix(core): resolve Plan Mode deadlock during plan file creation due to sandbox restrictions (#24047)
|
2026-03-31 22:06:50 +00:00 |
|
Gal Zahavi
|
81f9bf8fef
|
fix(core): implement __read and __write commands in sandbox managers (#24283)
|
2026-03-31 19:39:51 +00:00 |
|
Gal Zahavi
|
edee271596
|
fix(sandbox): implement Windows Mandatory Integrity Control for GeminiSandbox (#24057)
|
2026-03-28 00:14:35 +00:00 |
|
Emily Hedlund
|
5b64f0675c
|
feat(core): add forbiddenPaths to GlobalSandboxOptions and refactor createSandboxManager (#23936)
|
2026-03-27 16:57:26 +00:00 |
|
Tommaso Sciortino
|
93b30e4f57
|
refactor(core): delegate sandbox denial parsing to SandboxManager (#23928)
|
2026-03-26 22:10:15 +00:00 |
|
David Pierce
|
1c79d3f737
|
feat(sandbox): implement secret visibility lockdown for env files (#23712)
Co-authored-by: Tommaso Sciortino <sciortino@gmail.com>
|
2026-03-26 20:35:21 +00:00 |
|
Gal Zahavi
|
59a6c51ce3
|
feat(sandbox): dynamic Linux sandbox expansion and worktree support (#23692)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
|
2026-03-26 01:58:45 +00:00 |
|
Tommaso Sciortino
|
bd6b1f4468
|
feat(core): implement Windows sandbox dynamic expansion Phase 1 and 2.1 (#23691)
|
2026-03-25 17:54:45 +00:00 |
|
Emily Hedlund
|
08eb6c2835
|
refactor(core): standardize OS-specific sandbox tests and extract linux helper methods (#23715)
|
2026-03-25 02:37:32 +00:00 |
|
Emily Hedlund
|
9ee334df83
|
feat(sandbox): implement forbiddenPaths for OS-specific sandbox managers (#23282)
Co-authored-by: Gal Zahavi <38544478+galz10@users.noreply.github.com>
|
2026-03-25 01:23:51 +00:00 |
|
David Pierce
|
7fdf708e1a
|
Implementation of sandbox "Write-Protected" Governance Files (#23139)
Co-authored-by: Abhi <43648792+abhipatel12@users.noreply.github.com>
|
2026-03-24 04:04:17 +00:00 |
|
Emily Hedlund
|
60ffee3a05
|
feat(core): refactor SandboxManager to a stateless architecture and introduce explicit Deny interface (#23141)
|
2026-03-23 15:43:58 +00:00 |
|
David Pierce
|
d5c2831927
|
Linux sandbox seccomp (#22815)
Co-authored-by: Gal Zahavi <38544478+galz10@users.noreply.github.com>
|
2026-03-17 20:29:13 +00:00 |
|
David Pierce
|
c4a3596ef3
|
Linux sandbox bubblewrap (#22680)
|
2026-03-16 21:34:48 +00:00 |
|