build_bubble_args

Build complete bubblewrap command line arguments.

Constructs the full command line for bubblewrap, including: - Read-only root filesystem bind (--ro-bind / /) - Device filesystem mount (- -ro-bind /dev /dev) with /dev/null override (--dev-bind) for output redirection - Read-write binds for overlay mount point at each project root location - Playground directory mount (--bind) at $HOME/playground - Temporary directory mount (--tmpfs /tmp) - Network isolation flag (--unshare-net) if network is not allowed - Working directory flag (--chdir) if working_dir is provided - Command separator (--) - Shell command (/bin/sh -c "command")

The resulting array can be passed directly to GLib.Subprocess.newv().

Parameters:

command	Shell command after "--" via /bin/sh -c when non-empty; when empty, only "--" is added and caller appends argv (MCP stdio).
working_dir	Optional working directory (absolute path). If empty, defaults to first project root.

Returns:

Array of arguments for bubblewrap

Exceptions:

Error

if argument building fails