weichen 4badecbf57 Add the EXT-16 exec backend interface: direct status quo and bwrap sandbox ...

Why: Q2 ruled exec tools stay disabled for now but code execution must
return later; the recovery path treats model-generated code as
untrusted. This abstracts the interpreter launch point in
exec_interpreter.go into an ExecBackend port (direct = byte-identical
status quo; sandbox = bwrap isolation) so downstream products can
re-enable execution behind isolation without further base surgery.

Evidence: go build/vet clean; go test ./... 32/32 packages green;
sandbox escape negatives all blocked locally (bwrap 0.11.1): home
secret unreadable (tmpfs /home), sibling session unreadable
(session-only bind), network blocked (--unshare-net), 400-process
spawn storm capped by ulimit -u 256 (fork: retry), 60s sleep killed at
3s timeout, orphans die with the namespace; session-dir write visible
on host; direct backend regression (exit=7 / exit=timeout texts)
unchanged.

Impact: run_shell/run_python route through the backend; workflow
ScriptCommand and the squad kernel ExecConfig stay direct (follow-up
scope); config key execBackend + env AGENT_SYSTEM_EXEC_BACKEND + CLI
--exec-backend; extension.Options.ExecBackend (SurfaceVersion
2.6.0-experimental); DisableExecTools remains the top-priority
fail-closed switch.

Refs: proposal 2026-10-09-ext-g1-b1-b3-exec-backend.md section 4
(EXT-16, G2-8 prototype); Backend #110 (DisableExecTools).

2026-10-09 17:01:32 +00:00

..

ask.go

Gate tools by session mode and show confirmation details

2026-10-03 17:01:46 +00:00

codeorch_tool.go

Run tool scripts through the shared host and keep orchestration off

2026-10-03 18:04:25 +00:00

exec_backend_test.go

Add the EXT-16 exec backend interface: direct status quo and bwrap sandbox

2026-10-09 17:01:32 +00:00

exec_backend.go

Add the EXT-16 exec backend interface: direct status quo and bwrap sandbox

2026-10-09 17:01:32 +00:00

exec_interpreter_test.go

Keep tracked-change and hyperlink text in DOCX and add an exec hard switch

2026-10-09 10:36:02 +00:00

exec_interpreter.go

Add the EXT-16 exec backend interface: direct status quo and bwrap sandbox

2026-10-09 17:01:32 +00:00

exec.go

Keep tracked-change and hyperlink text in DOCX and add an exec hard switch

2026-10-09 10:36:02 +00:00

fs_checkpoint_test.go

Take the checkpoint closure: retention on rewind, HTTP tests, eligibility pin (N3 WP3)

2026-10-07 15:59:14 +00:00

fs_test.go

Reject pseudo-binary Office writes and index extracted text

2026-10-01 04:12:12 +00:00

fs.go

Rewind tracked files and fall back before the first token

2026-10-03 17:31:56 +00:00

http_test.go

Add url-preview endpoint and gated sandboxed fs tool family

2026-09-30 17:16:07 +00:00

http.go

Implement the backend: store/bus/runmgr core

2026-09-29 17:53:24 +00:00

peers_test.go

Add url-preview endpoint and gated sandboxed fs tool family

2026-09-30 17:16:07 +00:00

peers.go

Add layered cross-session reading with gated peer tools

2026-09-30 15:13:36 +00:00

quality_review_test.go

Add cross-task content methods, visuals, and scoring

2026-10-01 09:06:36 +00:00

quality_review.go

Add cross-task content methods, visuals, and scoring

2026-10-01 09:06:36 +00:00

registry.go

Gate tools by session mode and show confirmation details

2026-10-03 17:01:46 +00:00

search_test.go

Wire Tavily web search through the prompt-backed tool face

2026-09-30 11:00:11 +00:00

search.go

Wire Tavily web search through the prompt-backed tool face

2026-09-30 11:00:11 +00:00