weichenandCursor b85a1e1ca3 Add immutable layered Python environments for the sandbox. ...

Why: The sandbox hides the host home directory and has no network, so pip install --user cannot supply python-docx, and the service PATH resolved python3 to a linuxbrew path that does not exist inside the sandbox.
Evidence: SELF go test of execenv, tools, store, app, server, runmgr, config, and cmd/agent-system on this worktree. CI has not run.
Impact: Sessions inherit a read-only base layer. Extra packages are requested through python_env, auto-approved only from the allowlist, and mounted per conversation. Schema 35 adds the request and binding tables.
Refs: .task/feature-layered-python-env.md
Co-authored-by: Cursor <cursoragent@cursor.com>

2026-10-15 13:52:48 +00:00

..

account_guard_test.go

Guard active runs with current account state

2026-10-14 03:20:41 +00:00

admission_test.go

Add shared execution budgets and the action-authz matrix (U3 slice 2)

2026-10-11 05:18:12 +00:00

admission.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

background_card_test.go

Deliver background results through durable nonblocking work cards

2026-10-15 07:05:57 +00:00

background_test.go

Deliver background results through durable nonblocking work cards

2026-10-15 07:05:57 +00:00

command_tools_test.go

Add the generative-ui plugin, capability gating, and surface projection

2026-10-11 10:38:15 +00:00

commands.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

crossread_test.go

Return deliverable generation to the agent and fix the artifact-card root cause

2026-10-01 03:32:30 +00:00

entry_test.go

Route a matched intent to its workflow after commands

2026-10-01 16:04:49 +00:00

events.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

exec_tool_artifact_test.go

Make artifact backfill fixture a structurally valid docx

2026-10-14 07:42:28 +00:00

file_effect_account_check_test.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

genui_auto.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

hitl_timeout_test.go

Add the public extension surface and platform services

2026-10-01 10:35:02 +00:00

inputs_persist_test.go

Keep original materials and cleared results reachable across turns

2026-10-09 14:28:39 +00:00

inputs_test.go

Add professional standards for every agent deliverable

2026-10-01 08:16:58 +00:00

inputs.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

knowledge_resource_test.go

Recheck resumed project work and isolate publication replacement

2026-10-13 09:04:06 +00:00

material_test.go

Stop untracked background execution and retain results on record failures

2026-10-15 07:37:10 +00:00

material.go

Deliver background results through durable nonblocking work cards

2026-10-15 07:05:57 +00:00

memory_test.go

Wire the memory port: store-backed adapter, loop injection, migration parity (N3 WP5)

2026-10-07 16:23:24 +00:00

memory.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

multi_instance_test.go

Harden cross-instance HITL/cancel command paths and add disk-full rejection tests (U7)

2026-10-12 02:28:48 +00:00

notice_recursion_test.go

Make notice redelivery iterative instead of self-recursive

2026-10-11 08:12:03 +00:00

perm_test.go

Keep original materials and cleared results reachable across turns

2026-10-09 14:28:39 +00:00

realproc_test.go

Add same-transaction outbox, S3-compatible blobstore, and real-process acceptance (U5 remainder)

2026-10-11 15:57:12 +00:00

recovery_hold_test.go

Close request atomicity: locked message append, card versions, atomic rate limit, recovery holds (U3 slice 1)

2026-10-11 04:37:50 +00:00

recovery_test.go

Add the team PG tier, atomic migrations and the connection budget (U2)

2026-10-11 03:10:55 +00:00

rewind_test.go

Rewind tracked files and fall back before the first token

2026-10-03 17:31:56 +00:00

rewind.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

runmgr.go

Add immutable layered Python environments for the sandbox.

2026-10-15 13:52:48 +00:00

shared_run_retrieval_test.go

Share retrieval inside runs and open project listing/conversations to members (EXT-13/15)

2026-10-09 15:44:48 +00:00

subagent_n2_test.go

Deliver background results through durable nonblocking work cards

2026-10-15 07:05:57 +00:00

subagent_p3_test.go

Run subagents through a depth-one tool loop

2026-10-01 14:12:44 +00:00

subagent_transcript.go

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

truncate_test.go

Cap tool results by character and gate stale file writes

2026-10-03 16:21:02 +00:00

workcard_failures_test.go

Stop untracked background execution and retain results on record failures

2026-10-15 07:37:10 +00:00

workcard_test.go

Stop untracked background execution and retain results on record failures

2026-10-15 07:37:10 +00:00

workcard.go

Stop untracked background execution and retain results on record failures

2026-10-15 07:37:10 +00:00

workflow_route_test.go

Run workflow scripts through a capped callback host

2026-10-01 16:18:59 +00:00