k88936
f6e3e19cd8
Project CI / Backend tests (pull_request) Failing after 35s
Project CI / AI game creator shell Rust crates (pull_request) Successful in 5m43s
Project CI / AI game creator shell Rust lane 2/2 (pull_request) Successful in 7m2s
Project CI / AI game creator shell Rust lane 1/2 (pull_request) Successful in 7m6s
Project CI / Repository checks (pull_request) Failing after 21s
Project CI / Frontend tests (pull_request) Successful in 2m31s
Project CI / Native shell tests (pull_request) Successful in 10m18s
Project CI / AI game creator shell web tests (pull_request) Successful in 4m18s
- prepare_command_sandbox_launch 新增 trusted_npm_install 参数，command_exec 把 spec.node_launcher 的 (node, npm_cli) 透传给沙箱 - command_sandbox_requests_npm_install 改为与可信 (node, npm_cli) 精确比对（executable、首个参数、install 子命令），删除只看 basename 的判定；拿不到可信对时一律不放网 - LinuxSandboxPlan 增加 npm_install_network，build_linux_bwrap_launch 直接采用，避免重复推导 - 新增/更新单测：项目同名 npm-cli.js 不放网、无可信 launcher 不放网、--share-net 开关、可信 (node, npm_cli) 与实际目标逐字一致 - 同步技术方案 V1.11.2、decision-log 与 pitfalls 记录该安全边界