Files
Drew Newberry b4ba7335b4 fix(sandbox): deliver user command via K8s args instead of env var
The join(" ")/split_whitespace() round-trip through OPENSHELL_SANDBOX_COMMAND
mangled arguments containing embedded spaces (e.g. python -c "print('hello
world')"). Pass the command as K8s container args instead, which delivers
each token as a separate argv entry — preserving argument boundaries exactly
with no shell interpretation or encoding.
2026-04-04 21:30:21 -07:00
..