fix(sandbox): scope exclusive Add File creation to UnixLocal - #4893

Merged

jbeckwith-oai merged 18 commits into

openai:mainfrom

ayaangazali:fix/apply-patch-create-existing

Sep 28, 2026

Commits on Sep 14, 2026

fix(sandbox): reject apply_patch create_file on an existing file
ayaangazali
committed
ee46ee6
fix(sandbox): keep the create precondition probe out of failed read spans
ayaangazali
committed
a68a49c
test(sandbox): skip the create span test on Windows
ayaangazali
committed
6e3d6c2
fix(sandbox): claim the create_file name at the backend write boundary
ayaangazali
committed
0593532
fix(sandbox): link a completed payload into place for create_file
ayaangazali
committed
d7321b2
fix(sandbox): claim the requested name, not its resolved target
ayaangazali
committed
49bdc8a
fix(sandbox): drop the login shell and narrow the create collision
ayaangazali
committed
37c15d7
fix(sandbox): use a fixed-length staging basename
ayaangazali
committed
1995aed
fix(sandbox): classify a visible collision before staging the payload
ayaangazali
committed
e444c85
fix(sandbox): build exclusive create on the descriptor-relative file ops

ayaangazali
and
claude
committed
59ea737
fix(sandbox): keep supported parent symlinks and stop reading the target

ayaangazali
and
claude
committed
a2c5e05
fix(sandbox): probe the target directly instead of listing its parent

ayaangazali
and
claude
committed
9bc4eb8
fix(sandbox): fail closed on a failed probe and keep scripted creates working

ayaangazali
and
claude
committed
5545805
fix(sandbox): keep scripted create calls on their normalized paths
ayaangazali
committed
c9a7a6a

Commits on Sep 27, 2026