Eric TrautandGitHub 5296e06b61 Protect workspace .agents directory in Windows sandbox (#11970) ...

The Mac and Linux implementations of the sandbox recently added write
protections for `.codex` and `.agents` subdirectories in all writable
roots. When adding documentation for this, I noticed that this change
was never made for the Windows sandbox.

Summary
- make compute_allow_paths treat .codex/.agents as protected alongside
.git, and cover their behavior in new tests
- wire protect_workspace_agents_dir through the sandbox lib and setup
path to apply deny ACEs when `.agents` exists
- factor shared ACL logic for workspace subdirectories

2026-02-17 09:40:46 -08:00

..

bin

Elevated Sandbox 3 (#7809)

2025-12-11 13:51:27 -08:00

acl.rs

implement per-workspace capability SIDs for workspace specific ACLs (#10189)

2026-02-03 12:37:51 -08:00

allow.rs

Protect workspace .agents directory in Windows sandbox (#11970)

2026-02-17 09:40:46 -08:00

audit.rs

feat: make sandbox read access configurable with ReadOnlyAccess (#11387)

2026-02-11 18:31:14 -08:00

cap.rs

implement per-workspace capability SIDs for workspace specific ACLs (#10189)

2026-02-03 12:37:51 -08:00

command_runner_win.rs

feat: make sandbox read access configurable with ReadOnlyAccess (#11387)

2026-02-11 18:31:14 -08:00

cwd_junction.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

dpapi.rs

use machine scope instead of user scope for dpapi. (#9713)

2026-01-22 16:40:13 -08:00

elevated_impl.rs

feat: make sandbox read access configurable with ReadOnlyAccess (#11387)

2026-02-11 18:31:14 -08:00

env.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

firewall.rs

error code/msg details for failed elevated setup (#9941)

2026-01-27 23:06:10 -08:00

hide_users.rs

best effort to "hide" Sandbox users (#8492)

2026-01-05 12:29:10 -08:00

identity.rs

Elevated sandbox NUX (#8789)

2026-01-08 16:23:06 -08:00

lib.rs

Protect workspace .agents directory in Windows sandbox (#11970)

2026-02-17 09:40:46 -08:00

logging.rs

fix: handle utf-8 in windows sandbox logs (#8647)

2026-01-26 15:11:27 -08:00

path_normalization.rs

implement per-workspace capability SIDs for workspace specific ACLs (#10189)

2026-02-03 12:37:51 -08:00

policy.rs

feat: make sandbox read access configurable with ReadOnlyAccess (#11387)

2026-02-11 18:31:14 -08:00

process.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

read_acl_mutex.rs

speed and reliability improvements for setting reads ACLs (#8216)

2025-12-17 15:27:52 -08:00

sandbox_users.rs

error code/msg details for failed elevated setup (#9941)

2026-01-27 23:06:10 -08:00

setup_error.rs

Include real OS info in metrics. (#10425)

2026-02-05 06:30:31 -08:00

setup_main_win.rs

Protect workspace .agents directory in Windows sandbox (#11970)

2026-02-17 09:40:46 -08:00

setup_orchestrator.rs

add a slash command to grant sandbox read access to inaccessible directories (#11512)

2026-02-12 12:48:36 -08:00

token.rs

implement per-workspace capability SIDs for workspace specific ACLs (#10189)

2026-02-03 12:37:51 -08:00

winutil.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

workspace_acl.rs

Protect workspace .agents directory in Windows sandbox (#11970)

2026-02-17 09:40:46 -08:00