permissions: move workspace roots onto thread state

2026-10-21 17:48:44 +00:00 · 2026-05-12 20:15:26 -07:00
parent c51c65ad09
commit 7336736f44
157 changed files with 2837 additions and 3297 deletions
@@ -109,6 +109,7 @@ impl FileSystemSandboxRunner {
                enforce_managed_network: false,
                network: None,
                sandbox_policy_cwd: cwd.as_path(),
+                workspace_roots: &sandbox_context.workspace_roots,
                codex_linux_sandbox_exe: self.runtime_paths.codex_linux_sandbox_exe.as_deref(),
                use_legacy_landlock: sandbox_context.use_legacy_landlock,
                windows_sandbox_level: sandbox_context.windows_sandbox_level,