feat: default to local agents and materialize live sandbox repositories - #1763

Merged

miyaontherelay merged 41 commits into

mainfrom

feat/zero-config-sandbox-recovery-0912

Sep 15, 2026

Commits on Sep 15, 2026

feat(fleet): infer repository and persist sandbox routing

khaliqgant
authored and
miyaontherelay
committed
1f8c374
style: auto-format with Prettier

github-actions[bot]
authored and
miyaontherelay
committed
0acb66a
fix(sandbox): align project routing and harden persisted credentials

khaliqgant
authored and
miyaontherelay
committed
5d01a9b
style: auto-format with Prettier

github-actions[bot]
authored and
miyaontherelay
committed
ce58a45
fix(workspace): fail closed when Git namespace discovery fails

khaliqgant
authored and
miyaontherelay
committed
bd654d0
test: prove zero-config sandbox repository attestation

khaliqgant
authored and
miyaontherelay
committed
bd88e0a
fix: close sandbox credential transport and namespace review gaps

khaliqgant
authored and
miyaontherelay
committed
5070817
style: auto-format with Prettier

github-actions[bot]
authored and
miyaontherelay
committed
8960b80
fix(cloud): harden sandbox repo and resolver inputs

khaliqgant
authored and
miyaontherelay
committed
684fb33
fix(cloud): validate Windows credential directory ACLs

khaliqgant
authored and
miyaontherelay
committed
d0a91f2
fix(cloud): harden Windows credential ACL validation

khaliqgant
authored and
miyaontherelay
committed
53a580a
fix(cloud): normalize Windows creator owner ACLs

khaliqgant
authored and
miyaontherelay
committed
90252fc
fix(cloud): validate credential directory ancestor boundaries

khaliqgant
authored and
miyaontherelay
committed
5bb6491
test(cloud): diagnose Windows ACL fixture boundaries

khaliqgant
authored and
miyaontherelay
committed
e994544
fix(cloud): isolate default API URL from ambient environment

khaliqgant
authored and
miyaontherelay
committed
efbb7ca
test(cloud): validate Windows ACL fixtures before mutation

khaliqgant
authored and
miyaontherelay
committed
9692769
fix(cloud): avoid PowerShell ACL module autoload

khaliqgant
authored and
miyaontherelay
committed
fbfff38
test(cli): isolate persisted route credential fixtures

khaliqgant
authored and
miyaontherelay
committed
f57cb4b
test(cloud): remove resolved Windows ACL diagnostic

khaliqgant
authored and
miyaontherelay
committed
2e32546
fix(cloud): use trusted system PowerShell for credential checks

khaliqgant
authored and
miyaontherelay
committed
b33d166
Harden workspace resolution proof gates

khaliqgant
authored and
miyaontherelay
committed
c44945d
Isolate Windows credential lock stress test

khaliqgant
authored and
miyaontherelay
committed
6cb12c7
Retry atomic credential replacement on Windows

khaliqgant
authored and
miyaontherelay
committed
f9a3473
Treat Windows lock sharing violations as contention

khaliqgant
authored and
miyaontherelay
committed
669d17c
Bound Windows credential lock contention

khaliqgant
authored and
miyaontherelay
committed
603fe3e
refactor(cli): remove unreachable reused mount branch

khaliqgant
authored and
miyaontherelay
committed
1272435
fix(cloud): preserve secure project routing aliases

khaliqgant
authored and
miyaontherelay
committed
eb58952
fix(cloud): validate bootstrap routing context

khaliqgant
authored and
miyaontherelay
committed
cf7167c
test(cloud): exercise missing Windows path casing

khaliqgant
authored and
miyaontherelay
committed
b33cfe9
fix(cli): honor environment broker routing

khaliqgant
authored and
miyaontherelay
committed
916555b
fix(cli): preserve nested sandbox project context

khaliqgant
authored and
miyaontherelay
committed
4ea2363
style: auto-format with Prettier

github-actions[bot]
authored and
miyaontherelay
committed
8916ca9
fix(cli): keep sandbox Relayfile live by default

khaliqgant
authored and
miyaontherelay
committed
70f08e1
feat(cli): mount repository through live Relayfile by default

khaliqgant
authored and
miyaontherelay
committed
f5331c3
fix(cloud): accept attested empty live repositories

khaliqgant
authored and
miyaontherelay
committed
461b0c9
fix(cli): validate live repository materialization inputs

khaliqgant
authored and
miyaontherelay
committed
8c14a1a
fix(cloud): reject zero materialization poll intervals

khaliqgant
authored and
miyaontherelay
committed
ebca720
feat(cli): complete live sandbox source contract

Proactive Runtime Bot
authored and
miyaontherelay
committed
6bc94ac
fix(cli): address PR 1763 review findings

Proactive Runtime Bot
authored and
miyaontherelay
committed
6c3616b
ci: wait for published CLI tarballs before verification

Proactive Runtime Bot
authored and
miyaontherelay
committed
0cb856e
fix(cli): keep default agent spawns in the caller checkout
miyaontherelay
committed
f78b9be