mirror of
https://github.com/garrytan/gstack.git
synced 2026-11-04 15:57:33 +01:00
garrytan
4350c0621d
Claude Code adds <dir>/.mcp.json as a sandbox deny path for every --add-dir. The producer passed the sealed source as one, so bubblewrap left an empty 0444 .mcp.json mount point there that Claude Code cannot unlink from the 0555 directory, and the post-run source check failed with no receipt. - claudeExecArgs no longer adds the source directory - post-run integrity failures write status:failed receipts carrying the check code/reason plus usage, tokens and estimated cost (no output or artifacts) - INVALID_PRODUCER_SOURCE / PRODUCER_CHANGED_SOURCE_MODE name the first offending relative path and the rule it broke
2 lines
10 B
Plaintext
2 lines
10 B
Plaintext
1.91.68.0
|