feat(cua-driver): integrate typed Driver access with Fleet Sandbox - #3654
Merged
Conversation
![trycua-release[bot]](https://github.githubassets.com/images/gravatars/gravatar-user-420.png){kind=avatar}
# Conflicts: # libs/cua-driver/rust/crates/cua-driver-sdk/src/lib.rs
…ver-private-http-20260907
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
…ped-driver-20260907
This was referenced Sep 8, 2026
…velope-receiver-20260907
…r-python-channel-20260907
…rivate-http-20260907
Co-authored-by: Francesco Bonacci <195596869+f-trycua@users.noreply.github.com>
…ped-driver-20260907
…rivate-http-20260907
* fix(sandbox): bound typed Driver lifecycle and request deadlines * fix(cua-driver): allow explicit unrestricted envelope sessions * docs(sandbox): clarify launcher-selected Driver permissions --------- Co-authored-by: Francesco Bonacci <195596869+f-trycua@users.noreply.github.com>
…rivate-http-20260907
…ped-driver-20260907
f-trycua
changed the title
f-trycua
marked this pull request as ready for review
September 9, 2026 03:09
f-trycua
changed the base branch from
feat/driver-private-http-20260907
to
main
September 9, 2026 03:09
This was referenced Sep 9, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Scope
Refs #2512, #3647, #3650, #3651, and #3653.
Adds
sandbox.driver.connect(service="driver"), returning the canonical generatedCuaDriverwith typed inputs and results. Existing computer-server, shell, files, claims, and pool APIs remain unchanged. Fleet transport only: no host-local fallback, new credentials, or public endpoint.This landing includes the mandatory lifecycle/deadline correction from #3655 and the trusted-launcher mode correction from #3664, already merged into this feature branch. Do not land the original accessor without those corrections.
Behavior
Validation
The assembled candidate
43a332a66d8379b4fb9330c6a96f0654cc4afea1includes this complete unit, Windows recovery #3109, Windows classification #3671, and verification coverage #3672:These are cumulative candidate results, not a claim that each incremental PR contains all follow-ons. Final merge guards separately verify current-head checks, review threads, final scope, and source equivalence after ancestor updates.
Limits and rollback
The private carrier remains opt-in. No Fleet image service wiring, package publication, image publication, deployment, or installed-tool update is included. Published Fleet images are not claimed to support this route.
Live typed
verify_stateremains unqualified; #3672 supplies deterministic synthetic native-bridge coverage, not live accessibility proof. The broader RFC remains in review; #3647 records the accepted narrow implementation contract.Before publication, keep the carrier disabled and use existing constructors/computer-server. Any code rollback uses reviewed revert PRs, preserving history and tests.