imccyu c0e7c008cf feat(web): sandboxed executor family on the web roster ...

apps/cli/cordis.yml swaps bash-local/fs-local for the acp-agent composition
(sandbox-local + sandbox-policy + bash-sandbox + user-approval + permission
+ fs-sandbox; fs-policy composes on top unchanged). The deployment default
stays danger-full-access + never — byte-for-byte the old unconfined
behavior, so the replay e2e lane and demos are unaffected — while
DSH_PERMISSION_MODE opts a process into a confined default and the
/permission command switches per session. The permission preset table ships
the three product presets (read-only/ask, workspace-write/ask,
danger-full-access/never) explicitly in the deployment config.

2026-07-28 22:59:12 +08:00

..

cli

feat(web): sandboxed executor family on the web roster

2026-07-28 22:59:12 +08:00

web

Merge branch 'master' into feat/close-todo

2026-07-28 19:45:36 +08:00