mirror of
https://github.com/anthropic-experimental/sandbox-runtime.git
synced 2026-05-07 22:20:26 +08:00
Allows callers to specify absolute paths to bwrap and socat instead of resolving them via PATH. Useful for managed installs where the binaries live at fixed locations not on the default PATH. - SandboxRuntimeConfigSchema: new optional bwrapPath / socatPath fields, validated as absolute paths to prevent PATH/CWD hijacking - checkLinuxDependencies / getLinuxDependencyStatus: take an options object; explicit paths are checked via access(X_OK) with no PATH fallback (an override is a directive, not a hint) - initializeLinuxNetworkBridge: optional socatPath for host-side bridges - wrapCommandWithSandboxLinux: uses bwrapPath for the outer command and socatPath for the in-sandbox listeners