fix(sandbox): remove a symlink itself in UnixLocal rm, not its target - #4830

Open

coderdailyone wants to merge 5 commits into

openai:mainfrom

coderdailyone:fix/unix-local-rm-symlink

Commits on Sep 2, 2026

fix(sandbox): remove a symlink itself in UnixLocal rm, not its target

coderdailyone
and
claude
committed
6ff8a29
fix(sandbox): validate raw rm paths before splitting off the leaf

coderdailyone
and
claude
committed
e505c43
fix(sandbox): validate the rm leaf through the workspace path policy

coderdailyone
and
claude
committed
3509f30

Commits on Sep 4, 2026

fix(sandbox): address the workspace root through its resolved form in the leaf-preserving check

coderdailyone
and
claude
committed
2bf051c
fix(sandbox): recognize a noncanonical spelling of the workspace root alias

coderdailyone
and
claude
committed
4eebfa2