Huanqi Cao 33e4c6580f feat(tool-pwsh): teach the confined named-pipe capture boundary to the model ...

Under read-only and workspace-write the Windows ACL sandbox leaves
programs unable to open named pipes, so a piped-stdio spawn fails with
EPERM. State that boundary in the pwsh tool description next to the
ConstrainedLanguage contract, pin it in the tool tests, and bring the
package README and both implemented Agent Notes current with it.

2026-08-09 16:34:25 +08:00

..

background.ts

feat(tool-pwsh): mirror dsh-tool-bash call-for-call minus the sandbox surface

2026-08-02 14:18:29 +08:00

index.ts

feat(tool-pwsh): teach the confined named-pipe capture boundary to the model

2026-08-09 16:34:25 +08:00

invariant.ts

feat(pwsh): add the pwsh-local executor and the pwsh tool

2026-08-01 18:48:17 +08:00

render.ts

feat(pwsh): mirror the bash sandbox surface — denial rendering, escalation, and the ConstrainedLanguage contract

2026-08-08 20:11:21 +08:00