permissions: move workspace roots onto thread state

2026-10-22 17:58:46 +00:00 · 2026-05-13 09:11:30 -07:00
parent 889ee018e7
commit dfbc24a916
168 changed files with 3264 additions and 3360 deletions
@@ -109,6 +109,7 @@ impl FileSystemSandboxRunner {
                enforce_managed_network: false,
                network: None,
                sandbox_policy_cwd: cwd.as_path(),
+                workspace_roots: &sandbox_context.workspace_roots,
                codex_linux_sandbox_exe: self.runtime_paths.codex_linux_sandbox_exe.as_deref(),
                use_legacy_landlock: sandbox_context.use_legacy_landlock,
                windows_sandbox_level: sandbox_context.windows_sandbox_level,