Build out `assembly live`: sandboxed `--files`, spoken approval, keyless tools#269

Open

alexkroman wants to merge 105 commits into

mainfrom

claude/bold-edison-vuqcu5

Commits on Jun 22, 2026

Commits on Jun 23, 2026

refactor(live): extract _io.py + split filler tests to stay under the 500-line gate

alexkroman-assembly
and
claude
committed
docs: add spoken approval + consistency pass on execute design

alexkroman-assembly
and
claude
committed
docs(live): M1 implementation plan for sandboxed execute + memory

alexkroman-assembly
and
claude
committed
fix(live): unbreak branch gate baseline (re-exports, coverage, mutation kills)

alexkroman-assembly
and
claude
committed
feat(live): seatbelt sandbox profile renderer + denylist constants

alexkroman-assembly
and
claude
committed
feat(live): bwrap argv builder + renderer parity test

alexkroman-assembly
and
claude
committed
feat(live): sandbox capability probe + default subprocess runner

alexkroman-assembly
and
claude
committed
feat(live): SandboxedShellBackend.execute confines to cwd or refuses

alexkroman-assembly
and
claude
committed
feat(live): sandbox-capable backend, gated execute, durable memory

alexkroman-assembly
and
claude
committed
feat(live): document sandboxed execute + memory; --files help + mutation kills

alexkroman-assembly
and
claude
committed
fix(live): order tool affordances above the answer; graceful tool-call cap

alexkroman-assembly
and
claude
committed
Add honesty and file-safety guidance to live agent prompt

alexkroman-assembly
and
claude
committed
fix(live): reset the reply widget per turn so the answer isn't glued to the greeting

alexkroman-assembly
and
claude
committed
feat(live): general-purpose subagent spec for the task tool (M2)

alexkroman-assembly
and
claude
committed
feat(live): wire the gated general-purpose subagent + task label (M2)

alexkroman-assembly
and
claude
committed
test(live): lock subagent write surfacing through the parent gate (M2)

alexkroman-assembly
and
claude
committed
feat(live): advertise delegation under --files; document the task subagent (M2)

alexkroman-assembly
and
claude
committed
feat(live): spoken-approval grammar (fail-safe to reject) (M3)

alexkroman-assembly
and
claude
committed
docs(live): M3 spoken-approval plan (grammar done; engine race designed)

alexkroman-assembly
and
claude
committed
feat(live): voice-or-keyboard approval resolution core (M3)

alexkroman-assembly
and
claude
committed
feat(live): hands-free spoken approval for --files (M3)

alexkroman-assembly
and
claude
committed
docs(live): document hands-free spoken approval for --files (M3)

alexkroman-assembly
and
claude
committed
feat(live): harden cascade prompt with borrowed openclaw techniques

alexkroman-assembly
and
claude
committed
feat(live): return comprehensive weather data from the Open-Meteo tool

alexkroman-assembly
and
claude
committed
test(live): split brain tests under the 500-line gate; green the diff gates
claude
committed