Skip to content

Document VS Code sandbox errors in README troubleshooting - #73

Closed
MatanEden1 wants to merge 6 commits into
mainfrom
AX-1992-vscode-plugin-sandbox
Closed

Document VS Code sandbox errors in README troubleshooting#73
MatanEden1 wants to merge 6 commits into
mainfrom
AX-1992-vscode-plugin-sandbox

Conversation

@MatanEden1

Copy link
Copy Markdown
Contributor

Summary

  • AX-1992: a customer (bahrams) hit MODULE_NOT_FOUND, EROFS, and "no jf CLI server(s) found" when running MCP management under VS Code with chat.agent.sandbox.enabled on.
  • Root cause is already documented for the agent in harness-vscode.md on this branch; this adds a matching entry to the README's Troubleshooting section so a human hitting the same errors finds the fix (sandboxBypass / disabling the setting) without needing to ask support.

Test plan

  • Rendered README section reads correctly on GitHub

MatanEden1 and others added 6 commits September 3, 2026 09:34
The sandbox (chat.agent.sandbox.enabled) blocks read/write outside the
workspace, causing Step 0 to fail (MODULE_NOT_FOUND on the check script,
EROFS on npm cache, unreadable ~/.jfrog) in ways that look like Agent
Guard being disabled. Document the env-var credential workaround and
VS Code's sandbox-bypass confirmation as the fix.
Condense to the essential facts and workaround.
"Run once outside sandbox" is Copilot App's wording (a different
product), quoted in a still-open VS Code feature request (#333900)
asking VS Code to adopt it — not current VS Code UI text. VS Code
today shows only its generic tool-confirmation prompt. Verified
chat.agent.sandbox.enabled itself directly against VS Code source
(src/vs/platform/sandbox/common/settings.ts).
- Env vars fix the ~/.jfrog/ credential path only; MODULE_NOT_FOUND
  (sandbox blocks reading the check script itself) needs the bypass/
  disable route instead. Split into two bullets.
- Name the actual confirmation mechanism (sandboxBypass: true / "Run
  in terminal outside the sandbox?"), verified against
  runInTerminalConfirmationTool.ts in microsoft/vscode.
- Note that MCP server env (${input:...}) is resolved by VS Code
  itself and unaffected by this sandbox.
Documents the MODULE_NOT_FOUND / EROFS / "no jf CLI server(s) found"
failure when chat.agent.sandbox.enabled restricts the agent terminal
to the workspace, and the sandboxBypass / setting-disable fix.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@MatanEden1
MatanEden1 requested a review from a team as a code owner September 8, 2026 15:06
@MatanEden1 MatanEden1 closed this Sep 8, 2026
@MatanEden1

Copy link
Copy Markdown
Contributor Author

Superseded by #74, which contains only the README change (this PR also carried the harness-vscode.md changes from the AX-1992-vscode-plugin-sandbox branch, which we're not shipping).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant