4 months ago
df0bdc0
ClaudeBugbot (commit 5eb57f3): buildSeatbeltCommand unconditionally added cwd as a writable root, so a child agent scoped to narrower targetPaths could still write across the whole workspace on macOS — diverging from the Linux bwrap backend, which binds only the resolved writableRoots. Remove the cwd parameter entirely; use exactly the resolved writableRoots (cwd is already included for the non-targetPaths case) + the /tmp scratch family. This also keeps the earlier unused-param lint satisfied. macOS and Linux write scope now match. Verified: bun run check, typecheck, sandbox + bash tests.
Parent5eb57f3