Vasanth T 3e7692d8f0 fix(sandbox): scrub the daemon token file pointer (#677) (#818) ...

scrubSensitiveEnv removed ZERO_DAEMON_REMOTE_TOKEN but not its file
counterpart. TokenFromEnv accepts either form, so a sandboxed command
still inherited the path to the bridge token, and the default posture is
read-all, so it could then read the token itself.

Scrubbing the pointer is the whole fix rather than half of one: the path
comes from this variable alone and TokenFromEnv has no default location
to fall back on, so a command that never sees the variable has nothing to
guess at. This mirrors GOOGLE_APPLICATION_CREDENTIALS, which is already
scrubbed for the same reason.

Extends the existing scrub table, which compares the surviving
environment exactly, so the case fails if the entry is dropped. Verified:
without the fix the assertion reports ZERO_DAEMON_REMOTE_TOKEN_FILE
surviving into the scrubbed environment.

2026-07-28 21:56:28 +08:00

..

adapters_test.go

fix(sandbox): self-dispatch the Windows sandbox helpers so they work in dev (#280)

2026-06-21 14:01:49 +05:30

adapters.go

fix(lint): resolve static analysis baseline (#769)

2026-07-27 09:59:33 +08:00

analyzer_test.go

fix(windows): use PowerShell for command execution (#804)

2026-07-27 13:21:47 +05:30

analyzer.go

fix(windows): use PowerShell for command execution (#804)

2026-07-27 13:21:47 +05:30

architecture_baseline_test.go

Align sandbox command approval behavior (#322)

2026-06-26 13:20:07 +05:30

auto_allow_bash_test.go

fix(sandbox): don't auto-allow shell when re-entrancy skips wrapping (#727) (#744)

2026-07-20 11:56:36 +05:30

command_prefix.go

fix(lint): resolve static analysis baseline (#769)

2026-07-27 09:59:33 +08:00

engine_test.go

fix(windows): use PowerShell for command execution (#804)

2026-07-27 13:21:47 +05:30

engine.go

fix(lint): resolve static analysis baseline (#769)

2026-07-27 09:59:33 +08:00

execution_adapter_test.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

export_test.go

chore: remove code unreachable on every supported platform (#706)

2026-07-24 09:04:41 +08:00

grant_scope_test.go

fix: address bugs found in a multi-agent codebase audit (#481)

2026-07-06 18:48:28 +08:00

grant_scope.go

fix: address bugs found in a multi-agent codebase audit (#481)

2026-07-06 18:48:28 +08:00

grants_lock_unix.go

fix(sandbox): add platform-specific write lock around grant state file (#752) (#755)

2026-07-27 12:11:35 +08:00

grants_lock_windows.go

fix(sandbox): add platform-specific write lock around grant state file (#752) (#755)

2026-07-27 12:11:35 +08:00

grants_test.go

fix(sandbox): add platform-specific write lock around grant state file (#752) (#755)

2026-07-27 12:11:35 +08:00

grants.go

fix(sandbox): add platform-specific write lock around grant state file (#752) (#755)

2026-07-27 12:11:35 +08:00

homebrew_tools_test.go

fix(sandbox): retry approved network shell commands (#301)

2026-06-23 17:44:46 +05:30

landlock_linux_test.go

Align sandbox permission blocks and backend states (#253)

2026-06-19 19:50:12 +05:30

landlock_linux.go

fix(lint): resolve static analysis baseline (#769)

2026-07-27 09:59:33 +08:00

landlock_other.go

fix(lint): resolve static analysis baseline (#769)

2026-07-27 09:59:33 +08:00

linux_helper_linux_test.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

linux_helper_linux.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

linux_helper_other.go

Add sandbox architecture baseline (#240)

2026-06-18 12:03:10 +05:30

linux_helper_test.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

linux_helper.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

log_monitor_darwin_test.go

Align sandbox permission blocks and backend states (#253)

2026-06-19 19:50:12 +05:30

log_monitor_darwin.go

Align sandbox permission blocks and backend states (#253)

2026-06-19 19:50:12 +05:30

log_monitor_other.go

Align sandbox permission blocks and backend states (#253)

2026-06-19 19:50:12 +05:30

manager_test.go

fix(sandbox): preserve user config and retry denied writes (#801)

2026-07-27 15:35:04 +05:30

manager.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

normalize.go

Add local control browser and terminal tools (#319)

2026-06-26 08:22:56 +05:30

pathlists_test.go

Fix shared temp roots in sandbox scope (#314)

2026-06-25 09:47:55 +05:30

pathlists.go

Align sandbox permission blocks and backend states (#253)

2026-06-19 19:50:12 +05:30

paths.go

Align sandbox permission blocks and backend states (#253)

2026-06-19 19:50:12 +05:30

platform_contract_test.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

profile_test.go

fix(sandbox): deny reads of git's credential stores (#815) (#816)

2026-07-28 18:31:33 +08:00

profile.go

fix(sandbox): deny reads of git's credential stores (#815) (#816)

2026-07-28 18:31:33 +08:00

protected_create_linux_test.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

protected_create_linux.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

reentrancy_test.go

fix(sandbox): scrub sensitive credentials from sandbox environment (#660)

2026-07-14 21:46:10 +08:00

request_permissions_test.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

request_permissions.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

risk_hardening_test.go

Add local control browser and terminal tools (#319)

2026-06-26 08:22:56 +05:30

risk.go

Add local control browser and terminal tools (#319)

2026-06-26 08:22:56 +05:30

runner_linux_integration_test.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

runner_test.go

fix(sandbox): scrub the daemon token file pointer (#677) (#818)

2026-07-28 21:56:28 +08:00

runner_windows_integration_test.go

fix(windows): use PowerShell for command execution (#804)

2026-07-27 13:21:47 +05:30

runner.go

fix(sandbox): scrub the daemon token file pointer (#677) (#818)

2026-07-28 21:56:28 +08:00

runtime_lease_unix.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

runtime_lease_windows.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

runtime_lease.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

runtime_state_test.go

fix(sandbox): preserve user config and retry denied writes (#801)

2026-07-27 15:35:04 +05:30

runtime_state.go

fix(sandbox): preserve user config and retry denied writes (#801)

2026-07-27 15:35:04 +05:30

safe_command_test.go

fix(sandbox): AST second opinion for interactive-command bypasses (#473) (#745)

2026-07-20 21:01:55 +05:30

safe_command.go

fix(windows): use PowerShell for command execution (#804)

2026-07-27 13:21:47 +05:30

scope_test.go

fix(sandbox): clarify scoped permission prompts (#798)

2026-07-24 17:37:32 +05:30

scope_windows_test.go

Fix shared temp roots in sandbox scope (#314)

2026-06-25 09:47:55 +05:30

scope.go

fix(sandbox): clarify scoped permission prompts (#798)

2026-07-24 17:37:32 +05:30

seatbelt_integration_darwin_test.go

fix(sandbox): unblock git fetch/commit/add under the write-restricted sandbox (#654)

2026-07-13 21:56:10 +08:00

seccomp_linux.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

seccomp_other.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

seccomp_test.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

seccomp.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

types.go

feat(sandbox): unelevated Windows fallback tier instead of prompts-only degrade (#427)

2026-07-03 16:38:28 +08:00

windows_acl_apply_windows_test.go

fix(sandbox): bind Windows elevated ACL setup to one no-follow handle (#765)

2026-07-21 13:00:29 +05:30

windows_acl_apply_windows.go

fix(sandbox): bind Windows elevated ACL setup to one no-follow handle (#765)

2026-07-21 13:00:29 +05:30

windows_acl_test.go

Add sandbox architecture baseline (#240)

2026-06-18 12:03:10 +05:30

windows_acl.go

Add sandbox architecture baseline (#240)

2026-06-18 12:03:10 +05:30

windows_command_runner_other.go

Add sandbox architecture baseline (#240)

2026-06-18 12:03:10 +05:30

windows_command_runner_windows.go

fix(sandbox): use WRITE_RESTRICTED token when no DenyRead paths are configured (#658)

2026-07-13 22:17:31 +08:00

windows_command_runner.go

Add sandbox architecture baseline (#240)

2026-06-18 12:03:10 +05:30

windows_degrade_test.go

feat(sandbox): unelevated Windows fallback tier instead of prompts-only degrade (#427)

2026-07-03 16:38:28 +08:00

windows_helper_discovery_test.go

fix(sandbox): self-dispatch the Windows sandbox helpers so they work in dev (#280)

2026-06-21 14:01:49 +05:30

windows_network_test.go

fix(sandbox): retry approved network shell commands (#301)

2026-06-23 17:44:46 +05:30

windows_network_windows.go

fix(sandbox): retry approved network shell commands (#301)

2026-06-23 17:44:46 +05:30

windows_network.go

fix(lint): resolve static analysis baseline (#769)

2026-07-27 09:59:33 +08:00

windows_online_offline_test.go

fix(sandbox): retry approved network shell commands (#301)

2026-06-23 17:44:46 +05:30

windows_process_windows.go

fix(tools): fix cmd.exe /S/C corrupting commands with embedded quotes (#465)

2026-07-05 11:36:00 +08:00

windows_runner_test.go

fix(tools): fix cmd.exe /S/C corrupting commands with embedded quotes (#465)

2026-07-05 11:36:00 +08:00

windows_runner.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

windows_setup_other.go

Add sandbox architecture baseline (#240)

2026-06-18 12:03:10 +05:30

windows_setup_test.go

feat(sandbox): online/offline Windows network identity — run approved network commands sandboxed (#297)

2026-06-21 22:49:54 +05:30

windows_setup_windows.go

feat(sandbox): online/offline Windows network identity — run approved network commands sandboxed (#297)

2026-06-21 22:49:54 +05:30

windows_setup.go

chore: remove code unreachable on every supported platform (#706)

2026-07-24 09:04:41 +08:00

windows_shell_autoallow_test.go

fix(sandbox): stop bricking Windows when the sandbox isn't set up (degrade like Linux/macOS) (#295)

2026-06-21 22:49:39 +05:30

windows_token_windows.go

fix(sandbox): use WRITE_RESTRICTED token when no DenyRead paths are configured (#658)

2026-07-13 22:17:31 +08:00

windows_unelevated_test.go

fix(sandbox): self-heal a corrupt unelevated setup marker (#437)

2026-07-03 19:34:56 +08:00

windows_unelevated.go

fix(sandbox): scrub sensitive credentials from sandbox environment (#660)

2026-07-14 21:46:10 +08:00

wsl_linux.go

feat(sandbox): complete sandbox breadth — WSL fallback + opt-in MITM TLS inspection (#206)

2026-06-15 11:38:14 +05:30

wsl_other.go

feat(sandbox): complete sandbox breadth — WSL fallback + opt-in MITM TLS inspection (#206)

2026-06-15 11:38:14 +05:30

wsl_test.go

Align sandbox command approval behavior (#322)

2026-06-26 13:20:07 +05:30

wsl.go

Add sandbox architecture baseline (#240)

2026-06-18 12:03:10 +05:30