DEV Community

邱敬幃 Pardn Chiu
邱敬幃 Pardn Chiu

Posted on

Agenvoy@v0.14.0: Add OS-native sandbox isolation with automatic bubblewrap installation on Linux

cover
repo: pardnchiu/Agenvoy


Agenvoy is inspired by OpenClaw, built on a Go-based architecture with multi-provider intelligent dispatch and a security-first design.


v0.13.0 -> v0.14.0

Summary

Add OS-native sandbox isolation with automatic bubblewrap installation on Linux, per-request token usage tracking across all providers, and restructure tool handlers into individually named files.

Changes

FEAT

  • Add sandbox package with OS-native isolation: bubblewrap on Linux, sandbox-exec on macOS
  • Add automatic bubblewrap dependency detection and installation via system package manager on Linux
  • Add sandbox dependency check at startup in both CLI and Discord server entry points
  • Wrap all tool command execution and scheduler scripts through sandbox gate
  • Add per-request token usage accumulation across all tool-call iterations within a session
  • Display total token consumption (model + in/out) in CLI output and Discord reply footers

REFACTOR

  • Extract tool handlers into individually named files: glob.go → globFiles.go, list.go → listFiles.go, patch.go → patchEdit.go, search.go → searchContent.go
  • Remove monolithic routes.go; each handler self-registers via init-style pattern
  • Move exclude logic and file walk/list functions from tools into filesystem package
  • Simplify ReadFile/WriteFile by removing redundant dir parameter
  • Rename Executor field WorkPath → WorkDir for consistency
  • Resolve symlinks in GetAbsPath with fallback to parent resolution for new files

©️ 2026 邱敬幃 Pardn Chiu

Top comments (0)