gongzhiyongandClaude Opus 4.8 98fb0d2bdb feat(sandbox): Daytona 云沙箱后端 — 代码执行移出 Pod(SANDBOX_BACKEND=daytona) ...

§8.1 提到的"专用 sandbox worker"路径:模型生成代码在 Daytona 隔离沙箱执行,不在
本 Pod 跑;只上传生成文件 + sandbox_runner.py,绝不传 env/secret。复用 _runner.py
保证 SandboxResult 一致。fail-soft:Daytona/传输出错回退 Pod 内 subprocess。
双门控(ENABLE_QUALITY_EVAL+HEICODE_SANDBOX_ISOLATED)不变,不削弱 fail-closed。

依赖:加 daytona==0.189.0;为满足其 otel floor 把 otel 1.24→1.42、instrumentation
0.45b0→0.63b1、pydantic 2.9.2→2.13.4(与 agent 对齐)。import + runtime-contract/
security-boundary/result-aggregator 测试在新依赖下验证全绿。

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-21 21:14:07 +08:00

..

rbac

fix(#56): 补齐 k8s 部署产物 —— 编排器镜像装 kubectl、RBAC 加 secrets、Deployment 接拉起 env + workload-identity label

2026-06-14 19:39:10 +08:00

agent-deployment-full.yaml

Initial commit

2026-06-08 17:32:34 +08:00

agent-deployment-simple.yaml

Initial commit

2026-06-08 17:32:34 +08:00

agent-deployment-v2.yaml

Initial commit

2026-06-08 17:32:34 +08:00

agent-pod-template.yaml

Initial commit

2026-06-08 17:32:34 +08:00

daemonset-image-puller.yaml

Initial commit

2026-06-08 17:32:34 +08:00

git-test-server.yaml

Initial commit

2026-06-08 17:32:34 +08:00

grafana-dashboard.json

Initial commit

2026-06-08 17:32:34 +08:00

orchestrator-deployment-simple.yaml

Initial commit

2026-06-08 17:32:34 +08:00

orchestrator-deployment.yaml

fix(#56): 补齐 k8s 部署产物 —— 编排器镜像装 kubectl、RBAC 加 secrets、Deployment 接拉起 env + workload-identity label

2026-06-14 19:39:10 +08:00

orchestrator-heicode-test.yaml

feat(sandbox): Daytona 云沙箱后端 — 代码执行移出 Pod(SANDBOX_BACKEND=daytona)

2026-06-21 21:14:07 +08:00

orchestrator-local.yaml

feat(agent): Jina 搜索改用标准 MCP SDK 接入

2026-06-21 20:45:56 +08:00

orchestrator-source-configmap.yaml

Initial commit

2026-06-08 17:32:34 +08:00

prometheus-config.yaml

Initial commit

2026-06-08 17:32:34 +08:00

redis-statefulset.yaml

Initial commit

2026-06-08 17:32:34 +08:00

test-namespace.yaml

Initial commit

2026-06-08 17:32:34 +08:00