Huanqi Cao 976020f2bb refactor(sandbox): derive the private temp dir; drop the acl-session record ...

The durable sandbox/acl-session event carried a workspace binding that
always equals the session cwd and a random temp path that only needed
to be stable per session. Both are now derived: the temp subdirectory
is sha256(session id + workspace), created exclusively and removed on
provider dispose, so fork/resume semantics fall out of the derivation
and the record, its fold/provision/tamper validation, the immediate
flush kick, and the session-store dependency all disappear.

2026-08-10 01:03:29 +08:00

453 B

Raw Blame History

View Raw