fix(sandbox): use spawnSync in exit handler to avoid resource leaks

packages/cli/src/utils/sandbox.test.ts

@@ -70,6 +70,8 @@ vi.mock('@google/gemini-cli-core', async (importOriginal) => {
     },
     spawnAsync: mockSpawnAsync,
     LOCAL_DEV_SANDBOX_IMAGE_NAME: 'gemini-cli-sandbox',
+    SANDBOX_NETWORK_NAME: 'gemini-cli-sandbox',
+    SANDBOX_PROXY_NAME: 'gemini-cli-sandbox-proxy',
     homedir: mockedHomedir,
   };
 });

packages/cli/src/utils/sandbox.ts

@@ -4,7 +4,12 @@
  * SPDX-License-Identifier: Apache-2.0
  */
 
-import { execSync, spawn, type ChildProcess } from 'node:child_process';
+import {
+  execSync,
+  spawn,
+  spawnSync,
+  type ChildProcess,
+} from 'node:child_process';
 import path from 'node:path';
 import fs from 'node:fs';
 import os from 'node:os';
@@ -688,11 +693,11 @@ export async function start_sandbox(
       // install handlers to stop proxy on exit/signal
       const stopProxy = () => {
         debugLogger.log('stopping proxy container ...');
-        return spawnAsync(config.command, [
+        try {
-          'rm',
+          spawnSync(config.command, ['rm', '-f', SANDBOX_PROXY_NAME]);
-          '-f',
+        } catch {
-          SANDBOX_PROXY_NAME,
+          // ignore
-        ])?.catch(() => {});
+        }
       };
 
       process.off('exit', stopProxy);