feat(sandbox): per-session windows-acl write grant with dual-mode restricting lists and a private temp subdirectory

2026-08-08 17:29:43 +08:00
parent 91d3ed6c5a
commit abfb933620
40 changed files with 1239 additions and 118 deletions
@@ -137,6 +137,7 @@ export class SandboxPolicyService extends Service {
    return {
      mode: request.mode ?? (session === undefined ? undefined : this.overrideOf(session)) ?? this.defaultMode,
      workspaceRoot: resolveWorkspaceRoot(session?.header.cwd ?? this.workspaceRoot),
+      ...session === undefined ? {} : { sessionId: session.id },
    }
  }