Commit graph

3 commits

Author SHA1 Message Date
8a43732b7e fix: validate computer snapshot ids
- reject unsafe snapshot ids in the TypeScript wrapper before spawning the helper
- reject unsafe snapshot ids in agent-computer before loading snapshot files
- add regression coverage for wrapper and helper traversal attempts

Co-authored-by: Codex <noreply@openai.com>
2026-03-11 14:34:10 -04:00
a4250bad30 fix: harden computer tool helper
- remove the unimplemented accessibility observe mode from the public contract
- refuse unmatched app_open requests instead of shelling out
- add direct helper tests for both review findings

Co-authored-by: Codex <noreply@openai.com>
2026-03-11 14:26:18 -04:00
e1bba1c1a5 computer use tool 2026-03-11 14:13:03 -04:00