diff options
Diffstat (limited to 'hostnix/mojo/packages/claude-code/default.nix')
| -rw-r--r-- | hostnix/mojo/packages/claude-code/default.nix | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/hostnix/mojo/packages/claude-code/default.nix b/hostnix/mojo/packages/claude-code/default.nix new file mode 100644 index 0000000..a9798fd --- /dev/null +++ b/hostnix/mojo/packages/claude-code/default.nix @@ -0,0 +1,16 @@ +{ writeShellScriptBin, claude-code }: + +writeShellScriptBin "claude" '' + if [[ $HOME/ = ''${PWD%/}/* ]]; then + echo "fatal: refusing to allow access to $PWD" >&2 + exit 1 + fi + + exec /usr/bin/sandbox-exec -f ${./claude.sb} \ + -D TARGET_DIR="$(realpath "$PWD")" \ + -D TMP_DIR=/tmp \ + -D HOME_DIR="$HOME" \ + -D CACHE_DIR="$HOME/.cache" \ + ${claude-code}/bin/claude \ + --allow-dangerously-skip-permissions "$@" +'' |