Files
ant-kurt 79ad4e401e Add bwrapPath and socatPath config overrides for Linux sandbox
Allows callers to specify absolute paths to bwrap and socat instead of
resolving them via PATH. Useful for managed installs where the binaries
live at fixed locations not on the default PATH.

- SandboxRuntimeConfigSchema: new optional bwrapPath / socatPath fields,
  validated as absolute paths to prevent PATH/CWD hijacking
- checkLinuxDependencies / getLinuxDependencyStatus: take an options
  object; explicit paths are checked via access(X_OK) with no PATH
  fallback (an override is a directive, not a hint)
- initializeLinuxNetworkBridge: optional socatPath for host-side bridges
- wrapCommandWithSandboxLinux: uses bwrapPath for the outer command and
  socatPath for the in-sandbox listeners
2026-05-04 22:10:07 +00:00
..