chore: Remove sandbox devShell

Author: tomasol

flake.nix

@@ -78,89 +78,6 @@
           devShells.default = pkgs.mkShell {
             nativeBuildInputs = withObelisk;
           };
-          devShells.sandbox = pkgs.mkShell {
-            packages = commonDeps ++ ( with pkgs; [
-              codex
-              gemini-cli
-              claude-code
-              bubblewrap
-              # tools
-              git
-              gh
-              curl
-              helix
-              wget
-              htop
-              procps
-              ripgrep
-              which
-              less
-            ]);
-            shellHook = ''
-              CURRENT_DIR=$(pwd)
-
-              # SSL/Network Fixes
-              export SSL_CERT_FILE="${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"
-              export NIX_SSL_CERT_FILE=$SSL_CERT_FILE
-              REAL_RESOLV=$(realpath /etc/resolv.conf)
-              REAL_HOSTS=$(realpath /etc/hosts)
-              REAL_GITCONFIG=$(realpath "$HOME/.gitconfig")
-
-              # Construct mocked /run/current-system/sw/bin
-              MOCKED_SYSTEM_BIN=$(mktemp -d)
-              # Iterate through current PATH and symlink executables.
-              # We use 'ln -s' without '-f' (force) so that the FIRST entry found
-              # in the PATH (highest priority) wins, mimicking actual shell behavior.
-              IFS=':' read -ra PATH_DIRS <<< "$PATH"
-              for dir in "''${PATH_DIRS[@]}"; do
-                if [ -d "$dir" ]; then
-                   ln -s "$dir"/* "$MOCKED_SYSTEM_BIN/" 2>/dev/null || true
-                fi
-              done
-
-              BWRAP_CMD=(
-                ${pkgs.bubblewrap}/bin/bwrap
-                --unshare-all
-                --share-net
-                --die-with-parent
-                # --- Essential Binds ---
-                --ro-bind /nix /nix
-                --proc /proc
-                --dev /dev
-                --tmpfs /tmp
-                # Tools need these to know "who" is running the process
-                --ro-bind /etc/passwd /etc/passwd
-                --ro-bind /etc/group /etc/group
-                # --- Network ---
-                --ro-bind "$REAL_RESOLV" /etc/resolv.conf
-                --ro-bind "$REAL_HOSTS"  /etc/hosts
-                # Git
-                --ro-bind "$REAL_GITCONFIG" /tmp/.gitconfig
-                # Claude
-                --bind $HOME/.claude /tmp/.claude
-                --bind $HOME/.claude.json /tmp/.claude.json
-                # Cargo
-                --bind $HOME/.cargo  /tmp/.cargo
-                # --- Project Mount ---
-                --dir /workspace
-                --bind "$CURRENT_DIR" /workspace
-                --chdir /workspace
-                # --- Mocked System Bin ---
-                # Create the directory structure in the sandbox
-                --dir /run/current-system/sw/bin
-                # Bind our constructed temp folder to it
-                --ro-bind "$MOCKED_SYSTEM_BIN" /run/current-system/sw/bin
-                --ro-bind "$MOCKED_SYSTEM_BIN" /usr/bin
-                # --- Environment ---
-                --setenv PS1 "[BWRAP] \w> "
-                --setenv HOME /tmp
-                --setenv TMPDIR /tmp
-                --setenv TEMP /tmp
-                --setenv CARGO_TARGET_DIR target-sandbox
-              )
-              exec "''${BWRAP_CMD[@]}" ${pkgs.bashInteractive}/bin/bash -l +m
-            '';
-          };
           devShells.cloudflared = pkgs.mkShell {
             nativeBuildInputs = withObelisk ++ [ pkgs.cloudflared ];
           };