@rosthq/cli 0.7.48 → 0.7.49

package/dist/index.js

@@ -53459,7 +53459,7 @@ function resolveTurnPlan(input) {
   };
 }
 function buildTurnCommand(input) {
-  const { runtime, prompt, configPath, plan, resumeSessionId } = input;
+  const { runtime, prompt, configPath, plan, resumeSessionId, disableClaudeBashSandbox } = input;
   if (runtime === "codex") {
     return {
       command: "codex",
@@ -53488,6 +53488,9 @@ function buildTurnCommand(input) {
       plan.claudeAllowedTools.join(","),
       "--output-format",
       plan.outputFormat,
+      // DER-1397: turn off Claude Code's own nested Bash sandbox when the outer seatbelt confines
+      // us — the JSON is passed inline (no secret; sandbox-exec reads its profile from a file).
+      ...disableClaudeBashSandbox ? ["--settings", '{"sandbox":{"enabled":false}}'] : [],
       ...plan.repoDir !== null ? ["--add-dir", plan.repoDir] : [],
       ...resumeSessionId ? ["--resume", resumeSessionId] : []
     ]
@@ -53728,7 +53731,15 @@ async function spawnRunnerTurn(ctx, workOrder, runtime, kind) {
 `, { mode: 384 });
   await chmod2(configPath, 384);
   const resumeSessionId = runtime === "claude" ? getClaudeResumeSessionId(ctx.state, workOrder) : void 0;
-  const built = buildTurnCommand({ runtime, prompt, configPath, plan, resumeSessionId });
+  const built = buildTurnCommand({
+    runtime,
+    prompt,
+    configPath,
+    plan,
+    resumeSessionId,
+    // DER-1397: outer seatbelt active ⇒ disable claude's nested bash sandbox (bash runs in the repo cwd).
+    disableClaudeBashSandbox: sandbox.kind === "seatbelt"
+  });
   let sandboxProfilePath = null;
   if (sandbox.kind === "seatbelt") {
     sandboxProfilePath = path5.join(
@@ -53935,7 +53946,14 @@ async function spawnMergeConflictModel(ctx, input) {
     await writeFile3(sandboxProfilePath, input.sandbox.profile, { mode: 384 });
     await chmod2(sandboxProfilePath, 384);
   }
-  const built = buildTurnCommand({ runtime: input.runtime, prompt, configPath, plan });
+  const built = buildTurnCommand({
+    runtime: input.runtime,
+    prompt,
+    configPath,
+    plan,
+    // DER-1397: outer seatbelt active ⇒ disable claude's nested bash sandbox (bash runs in the repo cwd).
+    disableClaudeBashSandbox: input.sandbox.kind === "seatbelt"
+  });
   const { command, args } = wrapCommandWithSandbox(input.sandbox, built.command, built.args, sandboxProfilePath);
   const spawnStartedAt = (/* @__PURE__ */ new Date()).toISOString();
   const result = await runModelProcess({