officerdev/platform
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix sandbox HOME resolution — capture at module load before user-instance overrides it

Browse Source 
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
pastilhas
2026-03-08 07:50:33 +00:00
co-authored by Claude Opus 4.6
parent 11d95a25ab
commit 84d5cf5048
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/servers/sidecar/sandbox.ts
+2 -1
View File
@@ -10,6 +10,7 @@ const BUN_DIR = (() => {
const PROJECT_ROOT = resolve(import.meta.dir, '../../..'); const PROJECT_ROOT = resolve(import.meta.dir, '../../..');
const DATA_PATH = process.env.DATA_PATH ?? join(process.cwd(), 'data'); const DATA_PATH = process.env.DATA_PATH ?? join(process.cwd(), 'data');
const HOST_HOME = process.env.HOME!;
// Resolve the OS username for runuser to drop privileges inside the sandbox // Resolve the OS username for runuser to drop privileges inside the sandbox
const OS_USERNAME = (() => { const OS_USERNAME = (() => {
@@ -72,7 +73,7 @@ export function buildSandboxPrefix(email: string): string[] {
// Ensure intermediate dirs under HOME are traversable after runuser drops privileges // Ensure intermediate dirs under HOME are traversable after runuser drops privileges
// (bwrap auto-creates them as root-owned drwx------) // (bwrap auto-creates them as root-owned drwx------)
const homeDir = process.env.HOME!; const homeDir = HOST_HOME;
args.push('--perms', '0755', '--dir', homeDir); args.push('--perms', '0755', '--dir', homeDir);
// Bun runtime (e.g. /home/pastilhas/.bun) // Bun runtime (e.g. /home/pastilhas/.bun)