Temporary content.json outside sandbox

[chrmarti]

Not sure if this is model-specific, would be good if content.json could be within the sandbox:

Version: 1.118.0-insider
Commit: 1b91e5e
Date: 2026-04-27T13:56:59+02:00
Electron: 39.8.8
ElectronBuildId: 13870025
Chromium: 142.0.7444.265
Node.js: 22.22.1
V8: 14.2.231.22-electron.0
OS: Darwin arm64 25.4.0

[chrmarti]

From a later run with the same issue:

Terminal:

❯  ELECTRON_RUN_AS_NODE=1 PATH="$PATH:/Applications/Visual Studio Code - Insiders.app/Contents/Resources/app/node_modules/@vscode/ripgrep/bin" TMPDIR="/Users/chrmarti/.vscode-insiders/tmp/tmp_vscode_5" CLAUDE_TMPDIR="/Users/chrmarti/.vscode-insiders/tmp/tmp_vscode_5" "/Applications/Visual Studio Code - Insiders.app/Contents/MacOS/Code - Insiders" "/Applications/Visual Studio Code - Insiders.app/Contents/Resources/app/node_modules/@anthropic-ai/sandbox-runtime/dist/cli.js" --settings "/Users/chrmarti/.vscode-insiders/tmp/tmp_vscode_5/vscode-sandbox-settings-8aebd958-655e-437c-9c5e-a8e97900ae6b.json" -c 'jq '\''.arrayOfIssues | length'\'' "/Users/chrmarti/Library/Application Support/Code - Insiders/User/workspaceStorage/3055c5f41b54fe8c939a4251cc87d4a0/GitHub.copilot-chat/chat-session-resources/9d88ad18-6674-4bb4-be9e-bfcd42b0decf/toolu_0149aECt6zvVvAveMXEReg5B__vscode-1777385292401/content.json" && echo "---" && jq '\''.arrayOfIssues[] | select(.url | test("devcontainers/|microsoft/vscode-remote|microsoft/vscode-dev-containers")) | {url, title, state, createdAt, updatedAt, author: .author.login}'\'' "/Users/chrmarti/Library/Application Support/Code - Insiders/User/workspaceStorage/3055c5f41b54fe8c939a4251cc87d4a0/GitHub.copilot-chat/chat-session-resources/9d88ad18-6674-4bb4-be9e-bfcd42b0decf/toolu_01SEZbddWGYjBGgLJNwZqCgM__vscode-1777385292402/content.json" && echo "---" && jq '\''.arrayOfIssues[] | select(.url | test("devcontainers/|microsoft/vscode-remote|microsoft/vscode-dev-containers")) | {url, title, state, createdAt, updatedAt, author: .author.login}'\'' "/Users/chrmarti/Library/Application Support/Code - Insiders/User/workspaceStorage/3055c5f41b54fe8c939a4251cc87d4a0/GitHub.copilot-chat/chat-session-resources/9d88ad18-6674-4bb4-be9e-bfcd42b0decf/toolu_01U9iBff4rrc5TsB2iSoE7ah__vscode-1777385292403/content.json"'
jq: error: Could not open file /Users/chrmarti/Library/Application Support/Code - Insiders/User/workspaceStorage/3055c5f41b54fe8c939a4251cc87d4a0/GitHub.copilot-chat/chat-session-resources/9d88ad18-6674-4bb4-be9e-bfcd42b0decf/toolu_0149aECt6zvVvAveMXEReg5B__vscode-1777385292401/content.json: Operation not permitted

Settings:

{
	"network": {
		"allowedDomains": [],
		"deniedDomains": []
	},
	"filesystem": {
		"denyRead": [
			"/Users/chrmarti"
		],
		"allowRead": [
			"/Applications/Visual Studio Code - Insiders.app/Contents/Resources/app",
			"/Applications/Visual Studio Code - Insiders.app/Contents/MacOS/Code - Insiders",
			"/Applications/Visual Studio Code - Insiders.app/Contents/MacOS",
			"/Users/chrmarti/Development/notes",
			"~/.npm",
			"/Users/chrmarti/.vscode-insiders/tmp/tmp_vscode_5",
			"."
		],
		"allowWrite": [
			"/Users/chrmarti/Development/notes",
			"~/.npm",
			"/Users/chrmarti/.vscode-insiders/tmp/tmp_vscode_5",
			"."
		],
		"denyWrite": []
	}
}

CLAUDE_TMPDIR is not respected by the model?

[dileepyavan]

CLAUDE_TMPDIR env variable is set for the sandbox npm package. This is set for npm package to create temp files for the session that are sandbox related. Without this it used to create arbitrary files in the workspace. As part of deny read permissions, I changed the cwd of srt to be a custom tmp folder. Will check if I can remove this altogether.

[yehsuf]

Same issue on Linux: the settings JSON (vscode-sandbox-settings-UUID.json) is written to a directory that is itself included in allowWrite. The sandboxed process can overwrite the file. The content.json you're seeing on macOS and the settings JSON on Linux both point to the same underlying problem — the sandbox configuration should not be stored in a writable location.