feat(sandbox): add opt-in Cageforge command sessions - #2

Draft

m62624 wants to merge 23 commits into

devfrom

feat/cageforge-cli-sandbox

Commits on Sep 23, 2026

feat(sandbox): add opt-in Cageforge command session boundary

m62624
and
codex
committed
08f4843
ci(sandbox): isolate command enforcement checks by native platform

m62624
and
codex
committed
41d3515
fix(test): preserve absolute runtime roots in native probes

m62624
and
codex
committed
f846dcc
fix(ci): normalize Windows archive paths before extraction

m62624
and
codex
committed
eec0242
fix(test): restrict macOS runtime roots to macOS fixtures

m62624
and
codex
committed
5bd86c1
build(sandbox): upgrade Cageforge Java to 0.7.0

m62624
and
codex
committed
3aba492
feat(sandbox): manage bounded session pipes and termination

m62624
and
codex
committed
e3cf796
feat(sandbox): add single-use and app-lifetime consent

m62624
and
codex
committed
d23c2a3
test(sandbox): stream native progress and isolate probe classpath

m62624
and
codex
committed
aba1179
build(sandbox): upgrade Cageforge Java to 0.7.1

m62624
and
codex
committed
69f5847
test(sandbox): verify explicit file grants for root and descendants

m62624
and
codex
committed
4700b2f
fix(test): respect Windows sandbox traversal and ACL cleanup

m62624
and
codex
committed
ae550ee
fix(test): restore Windows sandbox state before fixture cleanup

m62624
and
codex
committed
4cc73ba
fix(sandbox): allow Cageforge permission escalation

m62624
and
codex
committed
cabab3b
test(sandbox): verify Cageforge escalation boundary

m62624
and
codex
committed
ae21165
test(sandbox): initialize Cageforge before escalation request

m62624
and
codex
committed
e284e77
test(sandbox): compare escaped capabilities structurally

m62624
and
codex
committed
1b8f53e
feat(sandbox): own consented command sessions through app shutdown

m62624
and
codex
committed
4ba924f
feat(sandbox): add desktop command session and consent dialogs

m62624
and
codex
committed
bab763a
feat(sandbox): review and launch additional command permissions

m62624
and
codex
committed
d0f6b93
feat(sandbox): expose opt-in startup and consented MCP command tools

m62624
and
codex
committed
c80d5eb
test(sandbox): mark Windows escalation isolation phases

m62624
and
codex
committed
a57d5e2
fix(sandbox): reject unsafe concurrent Windows grants

m62624
and
codex
committed
ad5a4eb

Navigation Menu

feat(sandbox): add opt-in Cageforge command sessions - #2

feat(sandbox): add opt-in Cageforge command sessions#2
m62624 wants to merge 23 commits into
devfrom
feat/cageforge-cli-sandbox

Commits on Sep 23, 2026

feat(sandbox): add opt-in Cageforge command session boundary

ci(sandbox): isolate command enforcement checks by native platform

fix(test): preserve absolute runtime roots in native probes

fix(ci): normalize Windows archive paths before extraction

fix(test): restrict macOS runtime roots to macOS fixtures

build(sandbox): upgrade Cageforge Java to 0.7.0

feat(sandbox): manage bounded session pipes and termination

feat(sandbox): add single-use and app-lifetime consent

test(sandbox): stream native progress and isolate probe classpath

build(sandbox): upgrade Cageforge Java to 0.7.1

test(sandbox): verify explicit file grants for root and descendants

fix(test): respect Windows sandbox traversal and ACL cleanup

fix(test): restore Windows sandbox state before fixture cleanup

fix(sandbox): allow Cageforge permission escalation

test(sandbox): verify Cageforge escalation boundary

test(sandbox): initialize Cageforge before escalation request

test(sandbox): compare escaped capabilities structurally

feat(sandbox): own consented command sessions through app shutdown

feat(sandbox): add desktop command session and consent dialogs

feat(sandbox): review and launch additional command permissions

feat(sandbox): expose opt-in startup and consented MCP command tools

test(sandbox): mark Windows escalation isolation phases

fix(sandbox): reject unsafe concurrent Windows grants