JOJO 3db4e0beb4 feat(sandbox): macOS host sandbox deny-list for sensitive paths ... - Add default deny_read_paths/deny_read_regexes to host_sandbox_policy.json - Generate deny rules for ~/.ssh, ~/.aws, ~/.kube, keychains, .env, etc. - Readonly sandbox: global read + deny sensitive + write only /dev/null - Workspace-write sandbox: global read + deny sensitive + writable paths - Keep workspace files readable by re-allowing workspace subpath after deny - Backend API validates path authorization against deny list - Path auth dialog hint explains readable paths behavior		2026-07-09 16:25:04 +08:00
..
__init__.py	refactor(server,modules,utils,frontend): split oversized modules into packages and fix regressions	2026-06-20 15:54:48 +08:00
approval.py	refactor(server,modules,utils,frontend): split oversized modules into packages and fix regressions	2026-06-20 15:54:48 +08:00
files.py	fix(android): 修复App文件下载、PDF卡片展示与本地媒体发送	2026-06-24 00:59:48 +08:00
misc.py	refactor(server,modules,utils,frontend): split oversized modules into packages and fix regressions	2026-06-20 15:54:48 +08:00
permission.py	feat(sandbox): macOS host sandbox deny-list for sensitive paths	2026-07-09 16:25:04 +08:00
settings.py	refactor(server,modules,utils,frontend): split oversized modules into packages and fix regressions	2026-06-20 15:54:48 +08:00
terminal.py	refactor(server,modules,utils,frontend): split oversized modules into packages and fix regressions	2026-06-20 15:54:48 +08:00