All pull requests

Pull requests

• fix(egress): disable block_global for loopback transparent listeners

  component/egresssize/XS
  #2240·kittimzhe opened Oct 15, 2026Contributor·

  ·
  1

  1

• fix(server): report BatchSandbox expiry while the pod is still Running

  component/serversize/M
  #2238·comqx opened Oct 15, 2026·7 of 9 tasks·

  ·
  5

• feat(server): record sandbox lifecycle audit in PostgreSQL

  component/serversize/XL
  #2237·comqx opened Oct 15, 2026·7 of 10 tasks·

  ·
  17

• feat(nodeagent): collect FastSandbox VM console logs

  documentationsize/XL
  #2234·jianpingpei opened Oct 15, 2026Contributor·8 of 11 tasks·

  ·
  6

• feat(console): open a sandbox shell through execd PTY

  documentationsize/XXL
  #2233·comqx opened Oct 15, 2026·7 of 9 tasks·

  ·
  1

• fix(server): forward the proxy path suffix from the wire bytes (#2227)

  component/serversize/L
  #2232·kittimzhe opened Oct 15, 2026Contributor·

  ·
  1

  5

• fix(sdk-python): validate list pagination against server bounds

  documentationsdk/pythonsize/S
  #2231·cangen185-sudo opened Oct 15, 2026·7 of 9 tasks·

  ·

• feat(egress): follow up OSEP-0023 with static TLS passthrough selectors

  component/egressdocumentationsize/XL
  #2229·hpliStartAgain opened Oct 15, 2026Contributor·9 of 12 tasks·

  ·
  1

• fix(server): forward the still-encoded path through the sandbox proxy

  component/serversize/M
  #2228·hardness1020 opened Oct 15, 2026·7 of 11 tasks·

  ·
  1

  2

• fix(python): preserve the first SSE event after a UTF-8 BOM

  documentationsdk/pythonsize/S
  #2226·KennyMcSimpson opened Oct 14, 2026·8 of 10 tasks·

  ·

• feat(egress): support port-scoped egress rules

  component/egresscomponent/serverdocumentationsdk/c#sdk/gosdk/javasdk/jssdk/pythonsize/XXL
  #2212·Pangjiping opened Oct 13, 2026Collaborator·1 task done·

  ·
  1

  36

  

• docs(oseps): add OSEP-0025 for best-effort rootfs recovery

  documentationsize/XL
  #2188·lorenzozanee opened Oct 11, 2026Contributor·7 of 11 tasks·

  ·
  1

  6

• fix(sdk): protect C# credentials across redirects

  documentationsdk/c#size/L
  #2183·xxwtiancai opened Oct 11, 2026·8 of 11 tasks·

  ·
  5

• fix(sdk): release JavaScript code interpreter streams

  documentationsdk/jssize/M
  #2179·xxwtiancai opened Oct 11, 2026·7 of 11 tasks·

  ·
  4

• fix(sdk-kotlin): strip protected headers on cross-origin redirect hops

  documentationsdk/javasdk/pythonsize/L
  #2177·BigDataDZ opened Oct 10, 2026·7 of 11 tasks·

  ·
  6

• docs(oseps): carry the credential vault in the binding as a sealed revision (OSEP-0022)

  documentationOSEPsize/L
  #2174·Pangjiping opened Oct 10, 2026Collaborator·

  ·
  29

  

• fix(sdk): strip protected OpenSandbox headers on cross-origin redirects (JS)

  documentationsdk/jssize/XL
  #2173·0ranan opened Oct 10, 2026·8 of 9 tasks·

  ·
  29

• fix(sdk): enforce tenant API key contract on direct data-plane requests (Python & Kotlin)

  documentationsdk/javasdk/pythonsize/M
  #2166·BigDataDZ opened Oct 10, 2026·8 of 13 tasks·

  ·
  11

  

• feat(integrations): add headless DeepSeek Harness sandbox plugin

  documentationsize/XXL
  #2163·hpliStartAgain opened Oct 10, 2026Contributor·

  ·
  8

  

• fix(sdk): keep the tenant API key out of direct code-interpreter requests

  documentationsdk/c#sdk/jssize/M
  #2149·JasonBuildAI opened Oct 9, 2026Contributor·8 of 11 tasks·

  ·
  1

  8

  

• Feat/console pr5 docs ci

  documentationsize/XXL
  #2133·comqx opened Oct 8, 2026·4 of 5 tasks·

  ·
  2

• Feat/console pr4 platform

  size/XXL
  #2132·comqx opened Oct 8, 2026·4 of 6 tasks·

  ·
  2

• Feat/console pr3 admin

  size/XXL
  #2131·comqx opened Oct 8, 2026·4 of 6 tasks·

  ·
  41

• feat(server): add durable single-copy sandbox fork

  component/serverdocumentationsdk/c#sdk/gosdk/javasdk/jssdk/pythonsize/XXL
  #2114·GodBlf opened Oct 4, 2026Contributor·7 of 10 tasks·

  ·
  2

• fix(k8s): validate shard task patch args at admission

  component/k8ssize/L
  #2105·Harbor404 opened Oct 1, 2026Contributor·

  ·
  1

  7