Junyan Chin 6b15a732e4 fix(box): purge leftover inbox/outbox on startup; clear root-owned outbox via exec (#2259) ...

The agent attachment outbox is written by the sandbox container as root over
the bind-mount, so the LangBot host process (non-root) cannot rmtree those
files — the host-side delete failed silently and stale files were re-collected
on a later turn that reused the same query_id (the query_id counter resets to 0
on every restart).

- BoxService.initialize now purges leftover inbox/outbox after the runtime is
  available: host rmtree first, then an in-sandbox 'rm -rf' via exec for any
  root-owned survivors.
- _clear_outbox now falls back to exec when the host delete leaves root-owned
  files behind, instead of silently failing.
- collect_outbound_attachments clears the outbox unconditionally (even on an
  empty collection) so a reused query_id never inherits stale files.
- Tests: startup purge (host-owned + root-owned exec fallback + no-workspace
  noop) and empty-collection-still-clears.

2026-06-18 21:59:48 +08:00

..

test_box_connector.py

Feat/sandbox (#2072)

2026-06-03 11:12:39 +08:00

test_box_service.py

fix(box): purge leftover inbox/outbox on startup; clear root-owned outbox via exec (#2259)

2026-06-18 21:59:48 +08:00

test_workspace.py

Feat/sandbox (#2072)

2026-06-03 11:12:39 +08:00