4 commits

Author	SHA1	Message	Date
tegwick	cf490220f4	Add local reachability descriptor for same-host extensions (SAND-WP-0013-T04) ... Reachability gains pid/workspace_dir, populated by enrich_reachability whenever a backend's wait_ready() returns a pid: endpoint (currently just ext.bwrap). build_reachability_report() now also returns a local_exec_hint (nsenter into the pid's namespaces) alongside the existing ssh_one_liner, so glas-harness can branch on which is populated instead of assuming every sandbox is SSH-reachable. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-07-26 12:58:32 +02:00
tegwick	1f87be4c6b	feat: reachability and consumer profiles (SAND-WP-0011) ... Add reachability enrichment (tunnel metadata, ops-bridge pointer), secret_refs boundary resolution, profile.agent-dev and profile.build, CLI reachability show, API endpoint, consumer smoke scripts, and tests.	2026-06-24 12:54:27 +02:00
tegwick	df658e7ef9	feat: TTL enforcement and operational hardening (SAND-WP-0009) ... Add TTL parser, expires_at on create, extend_ttl and expire/reap APIs, activity-core integration doc, repo classification, registry refresh, HTTP parity, and 69 tests.	2026-06-24 12:44:04 +02:00
tegwick	d6d3155792	Implement SAND-WP-0002 meta-framework foundation (T01–T09) ... Add meta-framework spec, pydantic schemas, profile/extension YAML, extension registry, ext.compose-ssh backend, SandboxManager with State Hub events, CLI commands, integration docs, capability registry entry, and compose-e2e runbook. Nine unit tests pass. T10 remote smoke test remains for operator.	2026-06-22 23:27:31 +02:00