185ca7a832
Avoid using --ignore-workspace ( #353 )
2026-02-19 14:41:21 +00:00
0e1f1ccbb7
pass GEMINI_MODEL and OPENCODE_MODEL vars through CI and Docker
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-02-14 02:33:00 +00:00
8a64742ddf
sync action workflow fail-fast to match root workflow
...
the root workflow was updated to fail-fast: true but the action
workflow wasn't updated to match. the ci consistency test enforces
they stay in sync.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-02-14 02:10:18 +00:00
9071c0ae6c
refactor mode selection into delegate tool that spawns subagents ( #265 )
2026-02-12 19:34:47 +00:00
bc28c658f2
harden sandbox escape vectors for bash disabled/restricted modes ( #257 )
...
* harden sandbox escape vectors for bash disabled/restricted modes
block git config injection (-c flag as subcommand), dangerous subcommands
(config, submodule, rebase, bisect), code-executing arg flags (--exec,
--extcmd), .gitattributes/.gitmodules writes, and package lifecycle scripts.
add retry logic to test runner for transient failures. add security unit
tests and adhoc attack tests.
Co-authored-by: Cursor <cursoragent@cursor.com >
* only filter subcommands in nobash, remove nobash from ui
* use regex matching
* iterate on tests
* simplify githooks
---------
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-02-11 02:02:41 +00:00
19df8372cd
add file_read/file_write tools, sandbox tests, CI improvements ( #239 )
...
* migrate to flags
* init
* iterate on file write lockdown tests
* improve ci
* fix lockfile
* fix typecheck
* fix lint
* improve pushRestricted
* ok
* fix more
* ok
* remove process.env spreading rule
Co-authored-by: Cursor <cursoragent@cursor.com >
* enhanced fs rw tools
---------
Co-authored-by: Cursor <cursoragent@cursor.com >
Co-authored-by: Colin McDonnell <colinmcd94@gmail.com >
2026-02-10 06:35:47 +00:00
9a8db3e07c
add restricted tests, refactor test infrastructure ( #150 )
2026-01-22 21:06:19 +00:00
4e19178c81
fix CI ( #111 )
2026-01-20 17:25:06 +00:00
410b11db71
test CI
2026-01-16 20:21:54 +00:00
02a498e0cb
update workflows
2026-01-16 16:00:27 +00:00
e4b086938e
iterate on CI
2026-01-16 15:52:37 +00:00
332ef73b87
Remove invalid working-directory setting ( #105 )
2026-01-16 10:56:28 +00:00
cd16ba67a6
Get rid of incorrect cache-dependency-path in an /action workflow ( #104 )
2026-01-16 10:47:52 +00:00
9432a5b737
Revert 4c5cf44
2026-01-16 11:31:38 +01:00
4c5cf444a2
Fix cache-dependency-path in test workflow
2026-01-16 11:28:45 +01:00
f34379415e
add per-agent smoke tests ( #100 )
2026-01-16 08:00:16 +00:00
c5d201ce60
Add CI workflow for testing.
2026-01-12 15:10:06 +01:00
Mateusz Burzyński