@stage-labs/metro 0.1.0-beta.114 → 0.1.0-beta.115

package/dist/claude.js

@@ -18,6 +18,11 @@ export const claudeArgs = (extra, mcpConfig, mode = 'auto') => [
     ...extra,
 ];
 const set = (env, name) => (env[name] ?? '').trim() !== '';
+export function bypassSandboxEnv(env, mode, uid) {
+    if (mode !== 'bypass' || uid !== 0 || env.IS_SANDBOX !== undefined)
+        return env;
+    return { ...env, IS_SANDBOX: '1' };
+}
 export function pinnedBy(env) {
     if (set(env, 'ANTHROPIC_BASE_URL'))
         return 'ANTHROPIC_BASE_URL';
@@ -152,12 +157,18 @@ export async function launchClaude(extra) {
     const port = localPort();
     const mcp = mcpConfigFor(await servedKey(decision), port);
     const mode = permissionMode();
+    const sandbox = (env) => {
+        const out = bypassSandboxEnv(env, mode, process.getuid?.());
+        if (out !== env)
+            process.stderr.write('metro claude: bypass permission mode under root, so IS_SANDBOX=1 is set for Claude Code (it refuses to skip permissions as root otherwise); this box is a dedicated single-tenant machine\n');
+        return out;
+    };
     try {
         if ('skip' in decision) {
             process.stderr.write(`metro claude: ${decision.skip}\n`);
-            return await runClaude(claudeArgs(extra, mcp?.path, mode), process.env);
+            return await runClaude(claudeArgs(extra, mcp?.path, mode), sandbox(process.env));
         }
-        return await runClaude(claudeArgs(extra, mcp?.path, mode), gatewayLaunchEnv(decision.key, port));
+        return await runClaude(claudeArgs(extra, mcp?.path, mode), sandbox(gatewayLaunchEnv(decision.key, port)));
     }
     finally {
         mcp?.cleanup();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stage-labs/metro",
-  "version": "0.1.0-beta.114",
+  "version": "0.1.0-beta.115",
   "description": "The metro command line. Sign in once per machine, then hand your MCP connector list to Claude Code without the credentials touching disk, argv or shell history.",
   "license": "MIT",
   "repository": {

package/runtime/marketplace/plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "metro",
-  "version": "0.1.0-beta.114",
+  "version": "0.1.0-beta.115",
   "description": "Metro for Claude Code, installed by the metro daemon on this machine: every connector the agent holds as its own MCP server relayed through the daemon, the orchestrator-only guard on the main thread, the standing rules loaded at each session start, and a refresh skill for when the daemon could not keep the server list current. No vendor credential ever sits in a config file.",
   "author": {
     "name": "Bonustrack",

package/runtime/runtime.json

@@ -1,3 +1,3 @@
 {
-  "version": "0.1.0-beta.114"
+  "version": "0.1.0-beta.115"
 }