fix: restore bounded agent sandbox execution

2026-07-11 02:27:05 +08:00
parent 035c264179
commit 7fcb57013e
14 changed files with 137 additions and 82 deletions
@@ -93,8 +93,8 @@ jobs:

      - name: Prove real Claude SDK Bash sandbox boundary
        run: |
-          sudo install -d -o "$(id -u)" -g "$(id -g)" -m 0700 /var/lib/cph-test
-          CPH_SANDBOX_TEST_ROOT=/var/lib/cph-test \
+          sudo install -d -o "$(id -u)" -g "$(id -g)" -m 0700 /w/t
+          CPH_SANDBOX_TEST_ROOT=/w/t \
            /usr/bin/setpriv --no-new-privs \
            npx vitest run test/integration/agent-sandbox-linux.test.ts