Observed with cli-dispatch 4.27.0 from a linked worktree under a managed macOS workspace-write sandbox.
Reproductions:
cli-dispatch-run --backend cx ... fails before the worker turn with /Users/rbinar/.local/bin/cx-stream: line 382: /dev/fd/63: Operation not permitted.cli-dispatch-run --backend ag --model claude-sonnet-4-6 ... did not forward the requested model; ag-stream reported configured gemini-3.6-flash-high instead. Setting AG_MODEL=claude-sonnet-4-6 was also overwritten until CLI_DISPATCH_CONFIG=/dev/null was set. This conflicts with the stream-utils comment that env wins.- With config disabled and the live
agy models slug claude-sonnet-4-6, ag-stream warns that the model is unlisted because model_listed compares the normalized full tab-separated slug+display-name line to the slug. The exact slug is accepted by agy.
- The resulting ag run later fails with
could not identify the agy conversation this run created (no NEW conversation matched this run prompt) even with no parallel same-cwd worker.
- Default session root under
~/.cache/cli-dispatch/sessions is not writable in managed workspace-write sandboxes; setting CLI_DISPATCH_SESSIONS_DIR=/tmp/... works.
No target-repo source files were written by these failed runner attempts. A direct Sonnet worker fallback completed the task and deterministic verification was rerun by the orchestrator.
Observed with cli-dispatch 4.27.0 from a linked worktree under a managed macOS workspace-write sandbox.
Reproductions:
cli-dispatch-run --backend cx ...fails before the worker turn with/Users/rbinar/.local/bin/cx-stream: line 382: /dev/fd/63: Operation not permitted.cli-dispatch-run --backend ag --model claude-sonnet-4-6 ...did not forward the requested model;ag-streamreported configuredgemini-3.6-flash-highinstead. SettingAG_MODEL=claude-sonnet-4-6was also overwritten untilCLI_DISPATCH_CONFIG=/dev/nullwas set. This conflicts with the stream-utils comment that env wins.agy modelsslugclaude-sonnet-4-6,ag-streamwarns that the model is unlisted because model_listed compares the normalized full tab-separated slug+display-name line to the slug. The exact slug is accepted by agy.could not identify the agy conversation this run created (no NEW conversation matched this run prompt)even with no parallel same-cwd worker.~/.cache/cli-dispatch/sessionsis not writable in managed workspace-write sandboxes; settingCLI_DISPATCH_SESSIONS_DIR=/tmp/...works.No target-repo source files were written by these failed runner attempts. A direct Sonnet worker fallback completed the task and deterministic verification was rerun by the orchestrator.