#!/usr/bin/env bash
# authorized_keys forced command for the sandbox e2e key. Takes no arguments:
# the request arrives base64-encoded in SSH_ORIGINAL_COMMAND and is validated
# before anything is executed.
set -euo pipefail
ROOT="${SANDBOX_HOST_ROOT:-$HOME/.local/share/overdeck-sandbox}"
exec node "$ROOT/lib/receiver.mjs"