mweinbach / agent-coworker

publicmweinbach/agent-coworker

Overview Code History Branches Pull requests Issues Insights

main

Home Overview Code PRs Issues

fix: tighten sandbox approval safeguards

4 months ago

dd17b41

Authored

mweinbach6/6/2026, 8:34:11 PM

Co-authored-by: Cursor <cursoragent@cursor.com>

23 files changed

apps/desktop/src/app/store.helpers/threadEventReducer/jsonRpcWorkspace.ts+7−2
apps/desktop/src/lib/composerAttachments.ts+7−5
apps/desktop/test/composer-attachments.test.ts+70−0
apps/desktop/test/jsonrpc-workspace-migration.test.ts+71−0
config/defaults.json+1−1
docs/websocket-protocol.md+5−4
src/platform/sandbox/bwrap.ts+17−28
src/platform/sandbox/denied.ts+15−0
src/platform/sandbox/index.ts+10−6
src/platform/sandbox/policy.ts+13−37
src/platform/sandbox/seatbelt.ts+4−3
src/runtime/codexAppServer/config.ts+2−2
src/server/session/InteractionManager.ts+10−8
src/tools/bash.ts+81−48
src/tools/index.ts+11−9
src/utils/approval.ts+48−0
test/config/config.loadConfig.test.ts+4−4
test/platform/sandbox.test.ts+90−16
test/runtime.codex-app-server.test.ts+33−33
test/server/interactionManager.approval.test.ts+13−11
test/session/agentSession.lifecycle.test.ts+8−8
test/tools/tools.bash.test.ts+113−10
test/tools/tools.createTools.test.ts+14−0