Willem Jiang 34e3f5c9d4 feat(sandbox): harden local file access and mask host paths ...

- enforce local sandbox file tools to only accept /mnt/user-data paths
- add path traversal checks against thread workspace/uploads/outputs roots
- preserve requested virtual paths in tool error messages (no host path leaks)
- mask local absolute paths in bash output back to virtual sandbox paths
- update bash tool guidance to prefer thread-local venv + python -m pip
- add regression tests for path mapping, masking, and access restrictions

Fixes #968

2026-03-05 22:07:45 +08:00

..

conftest.py

feat(subagents): make subagent timeout configurable via config.yaml (#897)

2026-02-25 08:39:29 +08:00

test_client_live.py

feat(agent):Supports custom agent and chat experience with refactoring (#957)

2026-03-03 21:32:01 +08:00

test_client.py

feat: add reasoning_effort configuration support for Doubao/GPT-5 models (#947)

2026-03-02 20:49:41 +08:00

test_custom_agent.py

feat(agent):Supports custom agent and chat experience with refactoring (#957)

2026-03-03 21:32:01 +08:00

test_docker_sandbox_mode_detection.py

feat(subagents): make subagent timeout configurable via config.yaml (#897)

2026-02-25 08:39:29 +08:00

test_lead_agent_model_resolution.py

feat(agent):Supports custom agent and chat experience with refactoring (#957)

2026-03-03 21:32:01 +08:00

test_mcp_client_config.py

test(backend): add core logic unit tests for task/title/mcp (#936)

2026-03-01 12:36:09 +08:00

test_mcp_oauth.py

feat(mcp): add OAuth support for HTTP/SSE MCP servers (#908)

2026-03-01 22:38:58 +08:00

test_memory_upload_filtering.py

fix(memory): prevent file upload events from persisting in long-term memory (#971)

2026-03-05 11:14:34 +08:00

test_provisioner_kubeconfig.py

feat(subagents): make subagent timeout configurable via config.yaml (#897)

2026-02-25 08:39:29 +08:00

test_readability.py

fix(backend): Fix readability extraction crash when Node parser fails (#937)

2026-03-01 22:24:02 +08:00

test_reflection_resolvers.py

fix(models): handle google provider import errors and add dependency (#952)

2026-03-03 14:56:54 +08:00

test_sandbox_tools_security.py

feat(sandbox): harden local file access and mask host paths

2026-03-05 22:07:45 +08:00

test_skills_loader.py

feat(skills): support recursive nested skill loading (#950)

2026-03-02 21:02:03 +08:00

test_subagent_timeout_config.py

feat(subagents): make subagent timeout configurable via config.yaml (#897)

2026-02-25 08:39:29 +08:00

test_task_tool_core_logic.py

test(backend): add core logic unit tests for task/title/mcp (#936)

2026-03-01 12:36:09 +08:00

test_title_generation.py

feat: add AIO sandbox provider and auto title generation (#1)

2026-01-14 23:29:18 +08:00

test_title_middleware_core_logic.py

test(backend): add core logic unit tests for task/title/mcp (#936)

2026-03-01 12:36:09 +08:00

test_uploads_middleware_core_logic.py

fix(chat): handle empty uploaded files case and improve artifact selection logic (#979)

2026-03-05 17:45:25 +08:00

test_uploads_router.py

fix(uploads): persist thread uploads canonically and fail fast on upload errors (#943)

2026-03-01 15:35:30 +08:00