linkst 277fdda894 fix(sandbox): fall back to --map-auto when root-user mapping is restricted ...

Plain `unshare --user --map-root-user` fails on kernels and containers
that block unprivileged writes to /proc/self/uid_map (e.g. GitHub Actions,
restricted AppArmor profiles). On those systems util-linux delegates to the
setuid newuidmap/newgidmap helpers when --map-auto is also present.

Add the combined form as a fallback candidate and build the launcher args
from the probed mapping, so systems without newuidmap/newgidmap or a
/etc/subuid range keep using the plain form.

2026-07-31 17:09:00 +08:00

..

approval_tokens.rs

task: approval token chain

2026-05-14 18:07:03 +09:00

bash_validation.rs

feat: bash validation module + output truncation parity

2026-04-03 19:31:49 +09:00

bash.rs

fix: keep hooks clean and close bash stdin

2026-06-03 20:20:04 +09:00

bootstrap.rs

feat(runtime): add tests and improve error handling across runtime crate

2026-04-02 18:10:12 +09:00

branch_lock.rs

Close the clawability backlog with deterministic CLI output and lane lineage

2026-04-05 18:41:02 +00:00

compact.rs

fix(test): update compact test to reflect flattened previous-context header

2026-05-25 12:49:34 +09:00

config_validate.rs

fix: preserve runtime config validation compatibility

2026-06-08 15:01:48 +09:00

config.rs

fix: update slash command count and add /setup assertion in test

2026-06-04 22:06:32 -05:00

conversation.rs

fix: recover from llama.cpp context overflow and reqwest SSE decode failures

2026-05-27 16:57:59 +02:00

file_ops.rs

omx(team): auto-checkpoint worker-1 [1]

2026-05-14 18:11:53 +09:00

g004_conformance.rs

Prove G004 contract bundles are machine-checkable

2026-05-14 18:07:11 +09:00

git_context.rs

feat: b5-git-aware — batch 5 wave 2

2026-04-07 15:19:45 +09:00

green_contract.rs

require provenance for green contracts

2026-05-14 18:33:51 +09:00

hooks.rs

fix: parse object-style hook config

2026-06-03 21:23:00 +09:00

json.rs

fix: auto compaction threshold default 200k tokens

2026-04-01 03:55:00 +00:00

lane_events.rs

omx(team): auto-checkpoint worker-1 [1]

2026-05-14 18:05:26 +09:00

lib.rs

fix: update slash command count and add /setup assertion in test

2026-06-04 22:06:32 -05:00

lsp_client.rs

Restore a fully green workspace verification baseline

2026-04-05 18:46:06 +00:00

mcp_client.rs

omx(team): auto-checkpoint worker-1 [1]

2026-05-15 10:00:40 +09:00

mcp_lifecycle_hardened.rs

Restore a fully green workspace verification baseline

2026-04-05 18:46:06 +00:00

mcp_server.rs

style: cargo fmt — fix CI formatting failures

2026-04-08 11:21:13 +09:00

mcp_stdio.rs

surface required MCP server semantics

2026-05-15 10:06:39 +09:00

mcp_tool_bridge.rs

omx(team): auto-checkpoint worker-1 [1]

2026-05-15 10:00:40 +09:00

mcp.rs

omx(team): auto-checkpoint worker-1 [1]

2026-05-15 10:05:42 +09:00

oauth.rs

fix(startup): fall back to USERPROFILE when HOME is not set (Windows)

2026-04-10 08:33:35 +09:00

permission_enforcer.rs

style: cargo fmt after merged PRs (#3164, #3209, #3214, #3216)

2026-06-05 10:52:37 +09:00

permissions.rs

fix: normalize permission rule tool names to lowercase (#94)

2026-06-05 09:53:26 +09:00

plugin_lifecycle.rs

omx(team): auto-checkpoint worker-2 [2]

2026-05-15 09:45:29 +09:00

policy_engine.rs

Stabilize final gate before release checkpoint

2026-05-15 13:34:57 +09:00

prompt.rs

fix: bound parent memory discovery

2026-06-04 17:07:00 +09:00

recovery_recipes.rs

omx(team): auto-checkpoint worker-1 [1]

2026-05-14 18:28:21 +09:00

remote.rs

fix: auto compaction threshold default 200k tokens

2026-04-01 03:55:00 +00:00

report_schema.rs

harden report contract projection identity

2026-05-14 18:09:36 +09:00

sandbox.rs

fix(sandbox): fall back to --map-auto when root-user mapping is restricted

2026-07-31 17:09:00 +08:00

session_control.rs

test(cli): serialize env-sensitive model alias checks

2026-06-08 01:37:28 +09:00

session.rs

fix: wrap concurrent ENOENT as domain-specific session error (#112)

2026-06-05 10:19:43 +09:00

sse.rs

feat(runtime): add tests and improve error handling across runtime crate

2026-04-02 18:10:12 +09:00

stale_base.rs

feat: bridge directory metadata + stale-base preflight check

2026-04-07 15:55:38 +09:00

stale_branch.rs

Restore a fully green workspace verification baseline

2026-04-05 18:46:06 +00:00

summary_compression.rs

feat(runtime): actionable summary compression for lane event streams

2026-04-04 00:43:30 +09:00

task_packet.rs

Keep G006 packet regressions aligned with shipped schema

2026-05-15 09:41:38 +09:00

task_registry.rs

Make G006 task policy state machine executable

2026-05-15 09:29:26 +09:00

team_cron_registry.rs

Restore a fully green workspace verification baseline

2026-04-05 18:46:06 +00:00

trident.rs

chore: cargo fmt --all on fix-160 branch

2026-05-25 12:49:36 +09:00

trust_resolver.rs

feat: sweep

2026-05-25 04:36:30 +00:00

usage.rs

docs: describe the runtime public API surface

2026-04-04 15:23:29 +00:00

worker_boot.rs

test(runtime): isolate session and git metadata checks

2026-06-08 01:23:32 +09:00