Skip to content

Retain issue roots in explicit workspaceWrite policies#58

Open
danielmcauley wants to merge 3 commits into
mainfrom
dev/dtm/workspacewrite-implicit-issue-root
Open

Retain issue roots in explicit workspaceWrite policies#58
danielmcauley wants to merge 3 commits into
mainfrom
dev/dtm/workspacewrite-implicit-issue-root

Conversation

@danielmcauley
Copy link
Copy Markdown

@danielmcauley danielmcauley commented Apr 14, 2026

Context

Ensure explicit workspaceWrite sandbox policies keep the current issue workspace writable while still allowing extra writable roots like linked-worktree .git metadata.

TL;DR

Keep the issue workspace in explicit workspaceWrite roots and update the launcher follow-up contract.

Summary

  • prepend the current issue workspace to explicit workspaceWrite policies at runtime
  • keep non-workspaceWrite sandbox policies unchanged
  • update config, app-server, and runtime tests for the new contract
  • document the behavior in the Symphony README and SPEC

Alternatives

  • keep passing explicit policies through unchanged, but that forces callers to grant broad workspace roots
  • rely on cwd being writable implicitly, but current runtime/tests model explicit writableRoots as authoritative

Test Plan

  • make -C elixir all
  • cd /Users/dtm/code/symphony/elixir && mise exec -- mix test test/symphony_elixir/app_server_test.exs test/symphony_elixir/workspace_and_config_test.exs test/symphony_elixir/core_test.exs
  • cd /Users/dtm/code/symphony/elixir && mise exec -- mix specs.check

@airhorns
Copy link
Copy Markdown

I hit this issue as well and an agent made a similar fix

jimoosciuc

This comment was marked as low quality.

Copy link
Copy Markdown

@gpt-cmdr gpt-cmdr left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM — dual-approved, merging.

chihsuan referenced this pull request in Automattic/symphony May 15, 2026
RSM-3010 Guard Codex action approvals
@REFaster
Copy link
Copy Markdown

BLOCKED-OPERATOR: clean MERGEABLE PR with green checks and approvals, but an active human review request remains for frantic-openai. Auto-merge is blocked until that request is cleared or the operator explicitly owns the merge.

corylanou referenced this pull request in digitaldrywood/symphony-elixir May 21, 2026
#### Context

Fixes #23. Upstream #58 keeps issue workspaces writable when explicit workspaceWrite roots add worktree metadata paths.

#### TL;DR

*Retain the issue workspace in runtime workspaceWrite policies.*

#### Summary

- Prepend the current issue workspace to explicit workspaceWrite writableRoots at runtime.
- Preserve non-workspaceWrite policies and non-runtime explicit config behavior.
- Document the upstream adoption and fork changelog origin.
- Stabilize retry-delay assertions that failed under CI scheduler load.

#### Alternatives

- Direct cherry-pick was checked, but the first upstream commit conflicts in fork-shifted docs.
- Leaving explicit roots unchanged keeps linked-worktree git metadata fragile.

#### Test Plan

- [x] `make -C elixir all`
- [x] `cd elixir && mix test test/symphony_elixir/app_server_test.exs test/symphony_elixir/workspace_and_config_test.exs test/symphony_elixir/core_test.exs`
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants