()
| 817 | |
| 818 | |
| 819 | def _default_spec() -> openshell_pb2.SandboxSpec: |
| 820 | # Omit the policy field so the sandbox container discovers its policy |
| 821 | # from /etc/openshell/policy.yaml (baked into the image at build time). |
| 822 | # This avoids duplicating policy defaults between the SDK and the |
| 823 | # container image and ensures sandboxes get the full dev-sandbox-policy |
| 824 | # (including network_policies) out of the box. |
| 825 | return openshell_pb2.SandboxSpec() |
| 826 | |
| 827 | |
| 828 | def _xdg_config_home() -> pathlib.Path: |