Repository navigation

feat(analyst): add sandboxed python_exec tool - #1538

Draft

anandgupta42 wants to merge 15 commits into

mainfrom

feat/analyst-python-exec

Draft

feat(analyst): add sandboxed python_exec tool#1538
anandgupta42 wants to merge 15 commits into
mainfrom
feat/analyst-python-exec

Commits on Oct 17, 2026
- feat(analyst): add sandboxed `python_exec` tool
  
  anandgupta42
  and
  claude
  committed
  da0beea
- fix(analyst): confine `python_exec` writes to the session workspace on macOS
  
  anandgupta42
  and
  claude
  committed
  54ab3df
- fix(analyst): confine `python_exec` reads and fail closed without a sandbox
  
  anandgupta42
  and
  claude
  committed
  5115857
- fix(analyst): kill the whole `python_exec` sandbox, block host signals, explain Linux refusals
  
  anandgupta42
  and
  claude
  committed
  f7dc69d
- fix(analyst): make `python_exec` descendant tracking non-blocking and clarify macOS refusals
  
  anandgupta42
  and
  claude
  committed
  0d7df67
- fix(analyst): never signal a `python_exec` descendant that is not provably ours
  
  anandgupta42
  and
  claude
  committed
  87f416c
- fix(analyst): make the `python_exec` self-test canaries non-vacuous and tighten sandbox tests
  
  anandgupta42
  and
  claude
  committed
  0dc826a
- fix(analyst): run the macOS process snapshot under the C locale
  
  anandgupta42
  and
  claude
  committed
  6fff449
- fix(analyst): return from `python_exec` only after descendant cleanup completes
  
  anandgupta42
  and
  claude
  committed
  c248e32
- fix(storage): serialize first-run database setup across concurrent processes
  
  anandgupta42
  and
  claude
  committed
  01379b7
- chore: mark the first-run setup changes in the shared database layer
  
  anandgupta42
  and
  claude
  committed
  ae84ca4
- chore: sync the shared database first-open fix with #1541
  
  anandgupta42
  and
  claude
  committed
  2bf4155
- Merge remote-tracking branch 'origin/main' into feat/analyst-python-exec
  anandgupta42
  committed
  35ef388
- fix: [review] python_exec macOS sandbox denies child processes and fails closed on host environment exposure
  
  anandgupta42
  and
  claude
  committed
  b9f6ccf
- fix: [review] register `python_exec` only where the sandbox self-test passes
  
  anandgupta42
  and
  claude
  committed
  6c34ba9

Commits

Commits on Oct 17, 2026