Omar SobhandClaude Opus 5 cbc9c2d353 fix(microvm): --agents tools is a JSON array; the verifier's restriction was never applied ...

The 2.1.276 canary (mission 01a0b747) exited before its first API call:

    Error: Invalid --agents configuration:
    explorer.tools: Invalid input
    verifier.tools: Invalid input

We sent `"tools": "Read, Grep, Glob, Bash"` — frontmatter syntax, where the
`--agents` JSON schema takes an array. Claude Code 2.1.243 changed invalid
agent definitions from silently ignored to a hard error, which is how the
canary caught it. The uncomfortable half of that: every CLI before 2.1.243
DROPPED the definition, so the verifier's whole guarantee — a tool allowlist
with no Edit and no Write — has plausibly never been in force on any VM run;
the lead's `Agent` calls would have fallen through to a general-purpose
subagent. The test that guarded it read the field with `as_str` and would
have kept passing on the exact string the CLI was discarding.

Both roles now send arrays; the test reads an array; a new test asserts the
shape for every role. Server-side only — no rootfs changes.

Co-Authored-By: Claude Opus 5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01WZb5A2kfVfjpdwSochkuHz

2026-09-18 20:36:33 -05:00

..

src

fix(microvm): --agents tools is a JSON array; the verifier's restriction was never applied

2026-09-18 20:36:33 -05:00

tests

fix: three things that were known and written nowhere

2026-09-13 22:23:09 -05:00

Cargo.toml

feat(missions): copy-in/copy-out primitive for the mission checkout

2026-08-04 15:15:22 -07:00