Willem Jiang 4731605d99 fix(sandbox): add group/other read permissions to uploaded files for Docker sandbox (#3127) ...

When using AIO sandbox with LocalContainerBackend, uploaded files are
  created with 0o600 (owner-only) permissions by the gateway process
  running as root. The sandbox process inside the Docker container runs
  as a non-root user and cannot read these bind-mounted files, causing
  a "Permission denied" error on read_file.

  Add `needs_upload_permission_adjustment` attribute to SandboxProvider
  (default True) to indicate that uploaded files need chmod adjustment.
  LocalSandboxProvider opts out (same user). A new `_make_file_sandbox_readable`
  function adds S_IRGRP | S_IROTH bits after files are written, changing
  permissions from 0o600 to 0o644 so the sandbox can read the uploads.

  fixes #3127

2026-05-21 17:51:56 +08:00

..

deerflow

fix(sandbox): add group/other read permissions to uploaded files for Docker sandbox (#3127)

2026-05-21 17:51:56 +08:00

pyproject.toml

fix: resolve merge conflict in pnpm-lock.yaml and clean up better-auth dependencies

2026-04-26 12:31:52 +08:00