Illia PolosukhinandClaude Opus 4.5 a39f5aa1a4 Add Docker execution sandbox for secure shell command isolation ...

Implements a general-purpose Docker sandbox (inspired by Codex) that provides:
- Container isolation for shell commands with ephemeral containers
- HTTP proxy for network access control with domain allowlist
- Credential injection by proxy (secrets never enter containers)
- Three security policies: ReadOnly, WorkspaceWrite, FullAccess
- Resource limits (memory, CPU, timeout enforcement)

Key components:
- SandboxManager: Main entry point coordinating proxy and containers
- NetworkProxy: HTTP proxy validating requests and injecting credentials
- ContainerRunner: Docker lifecycle management via bollard
- DomainAllowlist: Pattern matching for allowed network destinations

The ShellTool now routes commands through the sandbox when enabled,
with automatic fallback to direct execution if Docker is unavailable.

Configuration via SANDBOX_ENABLED, SANDBOX_POLICY, SANDBOX_TIMEOUT_SECS,
SANDBOX_MEMORY_LIMIT_MB, SANDBOX_IMAGE, SANDBOX_EXTRA_DOMAINS env vars.

Co-Authored-By: Claude Opus 4.5 <[email protected]>

2026-02-04 22:09:52 -08:00

..

echo.rs

Initial implementation of the agent framework

2026-02-02 20:41:05 -08:00

ecommerce.rs

Initial implementation of the agent framework

2026-02-02 20:41:05 -08:00

file.rs

Adding builder capability

2026-02-03 08:36:55 -08:00

http.rs

Integrate Codex patterns: task scheduler, TUI, sessions, compaction

2026-02-02 23:41:57 -08:00

json.rs

Initial implementation of the agent framework

2026-02-02 20:41:05 -08:00

marketplace.rs

Initial implementation of the agent framework

2026-02-02 20:41:05 -08:00

memory.rs

Compact memory_tree output format

2026-02-02 21:49:32 -08:00

mod.rs

Adding builder capability

2026-02-03 08:36:55 -08:00

restaurant.rs

Initial implementation of the agent framework

2026-02-02 20:41:05 -08:00

shell.rs

Add Docker execution sandbox for secure shell command isolation

2026-02-04 22:09:52 -08:00

taskrabbit.rs

Initial implementation of the agent framework

2026-02-02 20:41:05 -08:00

time.rs

Initial implementation of the agent framework

2026-02-02 20:41:05 -08:00