Managed settings can now provide absolute paths for Linux/WSL sandbox helper binaries.
Usage
{
"sandbox": {
"bwrapPath": "/usr/bin/bwrap",
"socatPath": "/usr/bin/socat"
}
}Details
sandbox.bwrapPathoverrides bubblewrap auto-detection.sandbox.socatPathcontrols the sandbox network proxy helper.- These paths are only honored from admin-controlled managed settings.
- Error messages now distinguish “bubblewrap missing” from “configured bwrap path is not executable”.
Evidence
Managed sandbox path descriptions and validation errors (search for "Linux/WSL only: Absolute path to the bwrap" and "sandbox.bwrapPath is set to").
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
One source agreesOne thing we can check says the same as this entry.
Anthropic's release notes agree
Added sandbox.bwrapPath and sandbox.socatPath managed settings (Linux/WSL) to specify custom bubblewrap and socat binary locations