Claude Code + Vertex AI on Fedora/Podman: context_management rejection and SELinux on user bind mounts

[ogajduse]

Hi,

I'm trying to run Claude Code inside an OpenShell sandbox on Fedora (Podman driver, SELinux enforcing, v0.0.71) with a Vertex AI provider and I've hit two issues. Wondering if I'm missing something in my setup or if these are known gaps.

Setup:

openshell provider create --name vertex --type google-vertex-ai --from-gcloud-adc \
  --config VERTEX_AI_PROJECT_ID=my-project --config VERTEX_AI_REGION=global
openshell inference set --provider vertex --model claude-opus-4-6 --no-verify
openshell sandbox create --provider vertex \
  --env ANTHROPIC_BASE_URL=https://inference.local \
  --env ANTHROPIC_API_KEY=unused \
  --driver-config-json '{"podman":{"mounts":[{"type":"bind","source":"/home/me/repos","target":"/sandbox/repos","read_only":true}]}}' \
  -- claude --bare

1) context_management: Extra inputs are not permitted

Claude Code sends a context_management field in the request body (part of the context-management-2025-06-27 beta). The router strips the anthropic-beta header for Vertex rawPredict routes (makes sense — Vertex rejects it), but the corresponding body field isn't stripped. Vertex then rejects the unknown field with 400.

I'm working around it with CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS=1, which works but disables all experimental features. Would it make sense for the router to strip beta-only body fields (like context_management) alongside stripping the anthropic-beta header?

2) User bind mounts don't get SELinux relabeling

On Fedora with SELinux enforcing, the bind-mounted /sandbox/repos is inaccessible to the sandbox user — SELinux blocks it because the source files have user_home_t context. I noticed that internal TLS bind mounts get the z (shared relabel) option when SELinux is detected, but user-configured bind mounts via --driver-config-json don't. Is there a way to pass mount options I'm missing, or would adding automatic z relabeling for user bind mounts on SELinux systems be a reasonable enhancement?

Thanks for any pointers.