coulomb/sand-boxer
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: deliver owner-bound credentials into bwrap commands
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb
This commit is contained in:
tegwick 2026-09-06 00:25:07 +02:00
parent 0196f083c4
commit 17d4160b6e
10 changed files with 505 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

4
tests/test_bwrap.py
View file

@ -251,7 +251,7 @@ def test_execute_sends_bounded_request_to_in_namespace_owner(tmp_path) -> None:
result = ext.execute(
handle,
["python3", "-V"],
credential_route_refs=["rein-openweights-openrouter-approle"],
credential_route_refs=[],
execution_context={"actor": "agt", "run_id": "run-1"},
timeout_seconds=30,
max_output_bytes=1024,
@ -262,7 +262,7 @@ def test_execute_sends_bounded_request_to_in_namespace_owner(tmp_path) -> None:
assert received["command"] == ["python3", "-V"]
assert received["execution_context"] == {"actor": "agt", "run_id": "run-1"}
assert received["credential_route_refs"] == ["rein-openweights-openrouter-approle"]
assert received["credential_route_refs"] == []
assert received["timeout_seconds"] == 30
assert received["max_output_bytes"] == 1024
assert received["stdin_text"] == "task payload"