appbase update: sandbox.flags generator emits broken double-quoting
Nobody has claimed this yet.
Assessment
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Newbie friendliness
- 70/100
Research direction
Run appbase update in the calendar-sync reproduction and inspect the sandbox.flags output, then trace the update path that migrates flags and the sandbox template. Done means generated flags no longer contain nested double-quotes and the resulting exec nono run command remains correct.
Written by the indexing model from the issue text.
Description
Problem
appbase update migrated existing sandbox flags into sandbox.flags, but the emitted shell has nested double quotes:
APP_FLAGS="$APP_FLAGS --allow "$HOME/.config/calendar-sync""
APP_FLAGS="$APP_FLAGS --allow "$HOME/go""
The inner " closes the outer string. The shell parses this as three concatenated pieces:
"$APP_FLAGS --allow "(quoted)$HOME/.config/calendar-sync(unquoted)""(empty)
It works by accident when $HOME contains no spaces or glob chars, but it's not what was intended.
Suggested fix
Drop the inner quotes entirely:
APP_FLAGS="$APP_FLAGS --allow $HOME/.config/calendar-sync"
The sandbox template uses $APP_FLAGS unquoted in the final exec nono run line, so word-splitting happens there regardless — quoting individual paths inside the accumulator string doesn't survive to the exec. (If paths-with-spaces support is actually desired, the whole APP_FLAGS accumulator pattern needs to become an array, which is a bigger change.)
Repro
In calendar-sync at appbase v0.2.2:
$ appbase update
updated: ./sandbox regenerated from template (migrated 3 flags to sandbox.flags)
$ cat sandbox.flags
APP_FLAGS="$APP_FLAGS --allow "$HOME/.config/calendar-sync""
...
- Dominant language
- Go
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from michaelwinser/appbase
-
Difficulty 5/5 Over a week Newbie friendliness 25/100
michaelwinser/appbase#46 · 3 comments ·
-
Difficulty 5/5 Over a week Newbie friendliness 45/100
michaelwinser/appbase#45 · 2 comments ·
-
Difficulty 5/5 Over a week Newbie friendliness 35/100
michaelwinser/appbase#43 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 68/100
michaelwinser/appbase#42 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 52/100
michaelwinser/appbase#40 ·
All issues in michaelwinser/appbase
Similar issues
-
Difficulty 1/5 Under an hour Newbie friendliness 84/100
-
enhancement needs triage
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
-
kind/cleanup
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
kubernetes-sigs/kueue#15947 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
sympozium-ai/sympozium#627 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 86/100