Added: Linux bubblewrap sandbox for shell command execution#69

Merged

Sewer56 merged 13 commits intomainfrom

bwrap-support-new

Mar 28, 2026

Commits on Mar 28, 2026

Added: Linux bubblewrap sandbox for shell command execution
Sewer56
committed
Changed: Apply Trivial Relevant PR Feedback from CodeRabbit
Sewer56
committed
Fixed: Replace broken tmpfs overlay on /etc/shadow with FileOverlay bind-mount
Sewer56
committed
Fixed: Isolate blocking feature in bubblewrap verify tests
Sewer56
committed
Fixed: Align FileOverlay doc with actual validation behavior
Sewer56
committed
Fixed: Remove dead fallback in public_bot_read_only_mounts
Sewer56
committed
Changed: Add doc comments to ToolPrompt::Bash variant fields
Sewer56
committed
Fixed: Mount RO binds after tmpfs/file overlays in bwrap args
Sewer56
committed
Fixed: Return sandbox-side shell path instead of host path
Sewer56
committed
Fixed: Remove incorrect duplicate-skipping claim from docstring
Sewer56
committed
Changed: Restructure CI and verification scripts for clarity
Sewer56
committed
Changed: Preallocate vectors with known capacity in preset constructors
Sewer56
committed
Changed: Optimize PATH deduplication from O(n²) to O(n) using HashSet
Sewer56
committed