This repository has been archived on 2026-06-13. You can view files and clone it, but cannot push or open issues or pull requests.
anvillm/internal/sandbox
Levi Neely b21c56b960 anvilmcp: use layered sandbox config from sandbox package
Reuse the same layered config approach as anvilsrv:
- global.yaml provides base permissions (including /usr, /lib, /bin)
- sandbox/<name>.yaml adds sandbox-specific permissions
- Merge uses most-permissive-wins strategy

This fixes the fallback to default sandbox, which now has proper
system paths from global.yaml.
2026-03-06 10:18:31 +01:00
..
config.go anvilmcp: use layered sandbox config from sandbox package 2026-03-06 10:18:31 +01:00
detect.go basic sandboxing support with landrun, fail fast 2026-02-11 08:32:14 +01:00
wrapper.go anvilmcp: use layered sandbox config from sandbox package 2026-03-06 10:18:31 +01:00