Foundation: introduce weaver-sandbox for CLI/daemon isolation#33

Merged

leynos merged 14 commits intomainfrom

terragon/feature/cli-daemon-foundation-5gg587

Dec 5, 2025

Commits on Dec 3, 2025

feat(weaver-sandbox): add initial crate wrapping birdcage for sandboxing

leynos
and
terragon-labs[bot]
committed

Commits on Dec 4, 2025

test(sandbox): serialize environment variable mutations in behavioural tests

leynos
and
terragon-labs[bot]
committed
fix(tests): restore environment correctly and add cleanup on TestWorld drop

leynos
and
terragon-labs[bot]
committed
feat(sandbox environment): add full environment inheritance and enhance EnvGuard

leynos
and
terragon-labs[bot]
committed
refactor(weaver-sandbox): replace once_cell::sync::Lazy with std::sync::OnceLock

leynos
and
terragon-labs[bot]
committed
docs(env_guard): add documentation on environment mutation safety policy

leynos
and
terragon-labs[bot]
committed
feat(sandbox): add path canonicalisation and enforce single-threaded execution

leynos
and
terragon-labs[bot]
committed
refactor(sandbox): remove fallback path reconstruction in canonicalise

leynos
and
terragon-labs[bot]
committed
refactor(weaver-sandbox): use Vec instead of BTreeSet for canonical paths

leynos
and
terragon-labs[bot]
committed
docs(weaver-design): add class diagram illustrating sandbox crate structure

leynos
and
terragon-labs[bot]
committed

Commits on Dec 5, 2025

refactor(sandbox): optimize path canonicalisation and improve sandbox error handling

leynos
and
terragon-labs[bot]
committed
refactor(sandbox): extract path rebuilding logic into separate function

leynos
and
terragon-labs[bot]
committed
refactor(weaver-sandbox): replace std::sync::OnceLock with once_cell::sync::OnceCell

leynos
and
terragon-labs[bot]
committed
refactor(sandbox): simplify canonicalised_set and improve error handling

leynos
and
terragon-labs[bot]
committed