Add --keep-fd to pass chosen inherited descriptors into the sandbox

2026-11-04 18:18:24 +01:00
parent f9ac595d63
commit c7d88d87d9
10 changed files with 141 additions and 25 deletions
@@ -50,6 +50,7 @@ env = [
 # entrypoint = ["claude", "--dangerously-skip-permissions"]  # binary + baked-in args
 # command = ["--model", "opus"]                              # default trailing args
 # bwrap-args = ["--tmpfs /opt/scratch"]                      # raw bwrap escape hatch
+# keep-fd = [3]                                              # pass inherited fds through

 profile = ["claude", "audio"]