viyatb-oai 9a7213ca37
Resolve workspace permissions at the sandbox launch boundary ( #59530 ) ...
## What changed
Add optional executor workspace roots to `SandboxTransformRequest` and resolve symbolic workspace rules after merging additional permissions. Preserve explicit deny rules and treat an empty root list as granting no workspace access.
Route Windows restricted-token preparation through the shared transform path and use explicit roots when building its direct-spawn wrapper. Update Windows MXC debug launches to bind configured roots before adding the managed CA read grant.
## Testing
Extend sandbox manager tests to cover workspace and subpath expansion, empty root lists, deny preservation, and the roots and write permissions serialized into the Windows wrapper.
GitOrigin-RevId: 0bebdb08b67cbbc182c18b031b9d13a21a799682
2026-11-05 00:30:20 +00:00
2026-10-30 18:02:30 +00:00
2026-10-29 17:25:51 +00:00
2026-11-03 15:02:57 +00:00
2026-11-03 12:33:26 +00:00
2026-11-04 19:10:59 +00:00
2026-11-03 23:49:01 +00:00
2026-11-04 22:55:22 +00:00
2026-11-05 00:05:34 +00:00
2026-11-03 04:20:50 +00:00
2026-11-04 22:55:22 +00:00
2026-11-02 16:00:20 +00:00
2026-11-04 21:33:28 +00:00
2026-11-02 17:05:56 +00:00
2026-10-26 20:26:32 +00:00
2026-11-04 00:19:12 +00:00
2026-10-22 19:36:47 +00:00
2026-11-03 23:35:00 +00:00
2026-10-26 21:08:15 +00:00
2026-11-05 00:30:20 +00:00
2026-11-04 23:18:18 +00:00
2026-11-03 23:35:00 +00:00
2026-11-03 23:35:00 +00:00
2026-11-03 23:35:00 +00:00
2026-10-29 16:57:12 +00:00
2026-11-04 09:51:28 +00:00
2026-10-29 01:04:48 +00:00
2026-10-29 01:04:48 +00:00
2026-11-04 19:58:24 +00:00
2026-10-19 21:43:19 +00:00
2026-11-04 22:55:22 +00:00
2026-11-05 00:19:26 +00:00
2026-10-30 20:39:47 +00:00
2026-10-29 18:24:34 +00:00
2026-11-05 00:30:20 +00:00
2026-11-04 19:58:24 +00:00
2026-10-19 15:15:17 +00:00
2026-11-03 06:37:07 +00:00
2026-10-27 05:52:01 +00:00
2026-11-03 23:49:01 +00:00
2026-11-03 04:08:59 +00:00
2026-11-02 20:36:39 +00:00
2026-11-05 00:30:20 +00:00
2026-11-04 09:51:28 +00:00
2026-10-27 23:53:09 +00:00
2026-10-30 18:20:57 +00:00
2026-11-04 20:37:39 +00:00
2026-10-28 21:22:06 +00:00
2026-11-04 19:57:59 +00:00
2026-10-22 19:36:47 +00:00
2026-10-22 19:36:47 +00:00
2026-11-04 01:13:54 +00:00
2026-11-04 09:51:28 +00:00
2026-11-04 13:02:36 +00:00
2026-11-04 13:03:01 +00:00
2026-10-26 19:21:08 +00:00
2026-11-03 23:35:00 +00:00
2026-10-22 19:36:47 +00:00
2026-11-03 21:22:21 +00:00
2026-11-04 22:03:18 +00:00
2026-11-04 22:43:34 +00:00
2026-10-22 19:36:47 +00:00
2026-11-03 12:33:26 +00:00
2026-11-02 20:34:35 +00:00
2026-10-22 19:36:47 +00:00
2026-11-04 21:22:28 +00:00
2026-11-02 08:31:14 +00:00
2026-11-03 15:02:57 +00:00
2026-11-03 23:00:54 +00:00
2026-10-26 18:22:40 +00:00
2026-11-04 19:57:30 +00:00
2026-10-27 16:36:32 +00:00
2026-11-03 01:58:18 +00:00
2026-11-04 19:58:49 +00:00
2026-11-03 21:02:34 +00:00
2026-10-19 16:56:42 +00:00
2026-11-04 22:55:22 +00:00
2026-11-04 19:58:49 +00:00
2026-10-30 14:40:32 +00:00
2026-11-03 23:35:00 +00:00
2026-11-05 00:30:20 +00:00
2026-10-27 05:52:01 +00:00
2026-11-04 23:46:52 +00:00
2026-10-27 05:52:01 +00:00
2026-10-29 17:49:51 +00:00
2026-11-04 19:58:49 +00:00
2026-10-22 00:19:02 +00:00
2026-10-30 07:11:56 +00:00
2026-11-05 00:19:26 +00:00
2026-11-04 19:58:49 +00:00
2026-10-30 20:53:25 +00:00
2026-11-05 00:19:26 +00:00
2026-11-04 09:51:28 +00:00
2026-10-30 16:35:54 +00:00
2026-11-04 09:51:28 +00:00
2026-10-27 05:52:01 +00:00
2026-11-03 15:02:57 +00:00
2026-11-03 23:00:54 +00:00
2026-10-29 22:36:06 +00:00
2026-11-04 00:52:58 +00:00
2026-10-28 21:09:05 +00:00
2026-11-04 20:51:55 +00:00
2026-11-04 19:10:59 +00:00
2026-11-04 02:40:55 +00:00
2026-10-27 05:52:01 +00:00
viyatb-oai
9a7213ca37