This repository has been archived on 2026-08-16. You can view files and clone it, but cannot push or open issues or pull requests.

Levi Neely 2d122c70dd gate file tools with sandbox path checks ... file_read, file_write, file_edit, file_grep, and file_glob now check paths against the sandbox config before operating. Same policy that landrun enforces on execute_code, applied at the application level. - Add sandbox.LoadMerged: loads base config + named layer, graceful fallback if layer missing. Replaces duplicated logic in execute. - Add sandbox.CheckPath: resolves symlinks, expands templates, checks path against allowed entries (RO/ROX for read, RW/RWX for write). - file.Server.checkAccess wires the check into every file dispatch.		2026-04-13 18:37:17 +02:00
..
code.go	gate file tools with sandbox path checks	2026-04-13 18:37:17 +02:00
pipe.go	cleanup tools	2026-04-12 16:26:50 +02:00
server.go	rename workdir to cwd	2026-04-13 18:03:20 +02:00
tool.go	core: update default tools path to ~/.config/ollie/tools	2026-04-13 10:25:18 +02:00