ymq f3e81a69db security: Wterm(workspace_edit) bwrap沙箱化，防 rm -rf/sudo提权/越界/网络攻击 ...

- vi 编辑包进 bwrap 沙箱：只暴露 workspace(挂/home) + 只读系统目录
- --unshare-user/pid/ipc/uts/net 隔离，no_new_privileges 阻断 sudo setuid
- bwrap 缺失时拒绝终端（安全优先，不给完整 shell）

2026-08-13 18:33:31 +08:00

..

api

fix: cockpit_chat_v2 输出 content 流式格式（AgentIO→AgentOut 期望 content/reasoning_content/error，非 widget JSON）

2026-08-13 18:19:33 +08:00

json

fix: cockpit_context_update 处理未登录用户

2026-08-07 15:17:34 +08:00

sd_bug_list

feat: add 40 dspy APIs, 7 UI pages, CSS, pipeline definition SQL

2026-06-16 13:16:24 +08:00

sd_cockpit

fix: model_id form reading fallback to select element

2026-08-01 21:57:04 +08:00

sd_dashboard

feat(cockpit): product-grade LLM integration with context + model mgmt

2026-07-31 18:06:27 +08:00

sd_deploy_env_list

feat: add 40 dspy APIs, 7 UI pages, CSS, pipeline definition SQL

2026-06-16 13:16:24 +08:00

sd_iteration_list

fix: CRUD endpoint return format - remove json.dumps, use widgettype format

2026-07-03 14:50:43 +08:00

sd_org_setting_list

fix: CRUD dspy — move return outside async with, fix dbname underscore

2026-08-03 17:40:30 +08:00

sd_project_list

feat: add 40 dspy APIs, 7 UI pages, CSS, pipeline definition SQL

2026-06-16 13:16:24 +08:00

sd_project_repo_list

fix: CRUD dspy — move return outside async with, fix dbname underscore

2026-08-03 17:40:30 +08:00

sd_review

feat: add 40 dspy APIs, 7 UI pages, CSS, pipeline definition SQL

2026-06-16 13:16:24 +08:00

sd_test_case_list

fix: CRUD endpoint return format - remove json.dumps, use widgettype format

2026-07-03 14:50:43 +08:00

sd_test_plan_list

fix: CRUD endpoint return format - remove json.dumps, use widgettype format

2026-07-03 14:50:43 +08:00

agent_input.js

fix: 文件传输改用file_names数组(避免File对象序列化丢失)

2026-08-06 17:45:39 +08:00

index_cockpit.ui

feat: switch cockpit UI to v2 agent endpoint

2026-08-11 13:36:58 +08:00

index.ui

workspace: use ResourceBrowser widget

2026-08-13 12:02:00 +08:00

pipeline_sdlc.css

feat: add 40 dspy APIs, 7 UI pages, CSS, pipeline definition SQL

2026-06-16 13:16:24 +08:00

task_tree_popup.ui

feat: model config popup button in cockpit, my_bugs API, task_tree_popup

2026-08-01 10:43:43 +08:00

workspace_edit.xterm

security: Wterm(workspace_edit) bwrap沙箱化，防 rm -rf/sudo提权/越界/网络攻击

2026-08-13 18:33:31 +08:00