fix(agent-runner): close sandbox skill authoring flow

tests/unit_tests/provider/test_tool_manager_native.py

@@ -4,7 +4,7 @@ import base64
 import os
 import tempfile
 from types import SimpleNamespace
-from unittest.mock import AsyncMock, Mock
+from unittest.mock import AsyncMock, Mock, patch
 
 import pytest
 
@@ -236,6 +236,32 @@ async def test_write_creates_subdirectories():
             assert f.read() == 'nested'
 
 
+@pytest.mark.asyncio
+async def test_write_falls_back_to_box_for_container_owned_workspace_file():
+    with tempfile.TemporaryDirectory() as tmpdir:
+        box_service = SimpleNamespace(
+            available=True,
+            default_workspace=tmpdir,
+            execute_tool=AsyncMock(
+                return_value={
+                    'ok': True,
+                    'stdout': '{"ok": true, "path": "/workspace/root-owned.txt"}',
+                }
+            ),
+        )
+        loader = NativeToolLoader(SimpleNamespace(box_service=box_service, logger=Mock()))
+        loader._write_host_file = Mock(side_effect=PermissionError)
+
+        result = await loader.invoke_tool(
+            'write',
+            {'path': '/workspace/root-owned.txt', 'content': 'updated'},
+            _make_query(),
+        )
+
+        assert result == {'ok': True, 'path': '/workspace/root-owned.txt'}
+        box_service.execute_tool.assert_awaited_once()
+
+
 @pytest.mark.asyncio
 async def test_read_binary_file_as_base64_chunk():
     with tempfile.TemporaryDirectory() as tmpdir:
@@ -326,6 +352,35 @@ async def test_edit_replaces_unique_string():
             assert f.read() == 'def foo():\n    return 42\n'
 
 
+@pytest.mark.asyncio
+async def test_edit_falls_back_to_box_for_container_owned_workspace_file():
+    with tempfile.TemporaryDirectory() as tmpdir:
+        path = os.path.join(tmpdir, 'root-owned.txt')
+        with open(path, 'w') as f:
+            f.write('before')
+        box_service = SimpleNamespace(
+            available=True,
+            default_workspace=tmpdir,
+            execute_tool=AsyncMock(
+                return_value={
+                    'ok': True,
+                    'stdout': '{"ok": true, "path": "/workspace/root-owned.txt"}',
+                }
+            ),
+        )
+        loader = NativeToolLoader(SimpleNamespace(box_service=box_service, logger=Mock()))
+
+        with patch('builtins.open', side_effect=PermissionError):
+            result = await loader.invoke_tool(
+                'edit',
+                {'path': '/workspace/root-owned.txt', 'old_string': 'before', 'new_string': 'after'},
+                _make_query(),
+            )
+
+        assert result == {'ok': True, 'path': '/workspace/root-owned.txt'}
+        box_service.execute_tool.assert_awaited_once()
+
+
 @pytest.mark.asyncio
 async def test_edit_rejects_ambiguous_match():
     with tempfile.TemporaryDirectory() as tmpdir: