fix(tools): empty execute_code capability set denies all sandbox tools - #86148

Open

Christopher-Schulze wants to merge 8 commits into

NousResearch:mainfrom

Christopher-Schulze:fix/84271-execute-code-empty-capability-deny-all

Commits on Sep 9, 2026

fix(tools): empty execute_code capability set denies all sandbox tools
Christopher-Schulze
committed
9b430f2
fix(tools): share execute_code sandbox-tool tri-state helper
Christopher-Schulze
committed
c6f8b1d
test(agent): isolate plugin prompt cache from live git snapshot
Christopher-Schulze
committed
f3a3cb7
fix(tools): enforce sandbox grants at RPC boundaries
Christopher-Schulze
committed
0a81f71
test(tools): keep sandbox boundary proof type-clean
Christopher-Schulze
committed
c15f8ac
fix(agent): pin resumed prompt workspace context in CI
Christopher-Schulze
committed
97956fd
test(tools): keep Unix RPC proof independent of checkout path length
Christopher-Schulze
committed
9c075c8
test(tools): type generated RPC module namespace explicitly
Christopher-Schulze
committed
b327243