feat: add ha_manage_custom_tool — sandboxed code execution escape hatch - #854

Merged

kingpanther13 merged 41 commits into

homeassistant-ai:masterfrom

kingpanther13:feat/execute-code-tool

May 7, 2026

Commits on May 6, 2026

feat: add sandboxed code execution tool (ha_execute_code)

kingpanther13
and
claude
committed
54dfb11
refactor: rename ha_execute_code to ha_create_custom_tool

kingpanther13
and
claude
committed
d66a80d
fix: resolve CI failures — update uv.lock and fix mypy errors

kingpanther13
and
claude
committed
27c6576
feat: add recursion limit, E2E tests for ha_create_custom_tool

kingpanther13
and
claude
committed
5093cd4
fix: correct relative import path in E2E tests

kingpanther13
and
claude
committed
e53a235
feat: add saved tools cache (ha_run_saved_tool, ha_list_saved_tools)

kingpanther13
and
claude
committed
71538f4
feat: pin code mode tools when tool search is active

kingpanther13
and
claude
committed
1802c5a
fix: remove unused type: ignore after refactor

kingpanther13
and
claude
committed
c77e663
fix: add fallback for Monty.run_async on ARM

kingpanther13
and
claude
committed
5e6d4f9
fix: use safe_call_tool for saved tools tests

kingpanther13
and
claude
committed
9707906
refactor: consolidate to single ha_manage_custom_tool, fix review issues

kingpanther13
and
claude
committed
177a995
fix: handle ToolResult serialization, fix ruff import order

kingpanther13
and
claude
committed
e581ed4
fix: ruff import sorting, robust entity search test

kingpanther13
and
claude
committed
0e3120f
fix: correct ha_search_entities result shape in test and docstring

kingpanther13
and
claude
committed
4219788
fix: correct result shape and import sorting for CI

kingpanther13
and
claude
committed
33ee33a
feat: expose enable_code_mode in add-on configuration

kingpanther13
and
claude
committed
4e9dd67
feat: add translation strings for enable_code_mode toggle

kingpanther13
and
claude
committed
af5b015
feat: add direct HA REST API access (api_get/api_post) to sandbox

kingpanther13
and
claude
committed
8ce9ff2
test: add E2E tests for api_get/api_post error handling and payloads

kingpanther13
and
claude
committed
bbcc5ad
fix: remove /api/ prefix from sandbox API endpoints

kingpanther13
and
claude
committed
68bda1d
fix: remove missed /api/ prefix from sun.sun endpoint test

kingpanther13
and
claude
committed
a335b86
fix: use ternary expression in sun.sun test for Monty compatibility

kingpanther13
and
claude
committed
d3738b1
fix: address Gemini review — docs, configurable limits, code cleanup

kingpanther13
and
claude
committed
925db7e
fix: normalize api_get/api_post endpoints to prevent leading-slash path issues

kingpanther13
and
claude
committed
b715469
fix: use structured error responses in sandbox call_tool helper

kingpanther13
and
claude
committed
1602427
fix(test): create fresh server in code mode E2E fixture

kingpanther13
and
claude
committed
91357cc
fix: sandbox errors return dicts (not exceptions) and clean up env var teardown

kingpanther13
and
claude
committed
eaddd22
refactor(addon): move ha_manage_custom_tool to dev channel only (beta)

kingpanther13
and
claude
committed
5a5cb00
feat(code-mode): add ws_send WebSocket helper to sandbox

kingpanther13
and
claude
committed
1b76f71
fix(deps): bump mypy to 1.20.2 in lockfile

kingpanther13
and
claude
committed
96c03ec
chore(tests): drop unrelated living_room_dashboard E2E carryover

kingpanther13
and
claude
committed
2fc8d04
fix(code-mode): block URL injection, tighten error handling and validation

kingpanther13
and
claude
committed
b7bc98d
fix(code-mode): drop success:False from _extract_tool_result error returns

kingpanther13
and
claude
committed
5375077
feat(code-mode): persist saved tools to disk + add delete_saved_tool helper

kingpanther13
and
claude
committed
57338b2
fix(code-mode): add api_post/ws_send blocklists, classify sandbox errors, audit log

kingpanther13
and
claude
committed
d4550ec
fix(code-mode): address round-2 review findings

kingpanther13
and
claude
committed
f264b78
fix(test): split scene/script blocklist test, add positive scene case

kingpanther13
and
claude
committed
97a963e
fix(code-mode): close proxy-laundering, ..-traversal, and 5 other Patch76 review findings

kingpanther13
and
claude
committed
d1122b9
fix(test): rewrite memory test for Monty, skip unreachable recursion test

kingpanther13
and
claude
committed
5e2f878
fix(code-mode): address Patch76 round-3 review (H1, M2, M3, L1-L6) + clean uv.lock

kingpanther13
and
claude
committed
58899e8

Commits on May 7, 2026

test(code-mode): pin %2e%2e traversal rejection + naked-list passthrough contract

kingpanther13
and
claude
committed
8c00740