Feature/code sandbox security v3#26

Merged

haseeb-heaven merged 41 commits intomainfrom

feature/code-sandbox-security-v3

Apr 7, 2026

Commits on Apr 6, 2026

Refactor execution architecture with python-first model, restore bash compatibility for tests, fix decoding bug, enforce output limits, update versioning, and correct gitignore entries for logs and…
haseeb-heaven
committed
Update the Sandbox and Code Exectution
haseeb-heaven
committed
Add mode indicator, strict safe-mode blocking, unsafe confirmations, warnings, and improved safety controls for enterprise-grade execution behavior and user awareness
haseeb-heaven
committed
Release v3.2.1
haseeb-heaven
committed
Bump the version to 3.2.1
haseeb-heaven
committed
Update Version file
haseeb-heaven
committed
fix: apply CodeRabbit auto-fixes

coderabbitai[bot]
and
CodeRabbit
authored
📝 CodeRabbit Chat: Add unit tests
coderabbitai[bot]
authored
fix: apply CodeRabbit auto-fixes

coderabbitai[bot]
and
CodeRabbit
authored
fix(P0): process-group SIGKILL on timeout + Python routing in execute_script
haseeb-heaven
committed
fix(#3 #5): add export_artifacts + unquoted POSIX absolute-path block
haseeb-heaven
committed
fix(safety): expand write-mode detection — close binary/pathlib/JS bypasses (Bug #2)
haseeb-heaven
committed
fix: apply CodeRabbit auto-fixes

coderabbitai[bot]
and
CodeRabbit
authored
fix(security): P0 absolute-path read escape + artifact export symlink escape
haseeb-heaven
committed
fix: allow read-only absolute path access in safe mode
haseeb-heaven
committed
fix: block bare .write() calls on file handles in safe mode
haseeb-heaven
committed
fix(safety): add system-level destructive commands to safe-mode block list
haseeb-heaven
committed
fix(interpreter): use _kill_process_group on timeout + ast.parse for Python detection
haseeb-heaven
committed
fix(security): resolve all P1/P2 audit issues from PR #26
haseeb-heaven
committed

Commits on Apr 7, 2026