42472dc91c46ab049f59a1059e1c62c12dbfcbb9
The workspace root matched every relative path, so prompts/ was never reached, and paths like workspace/notes.txt landed at workspace/workspace/notes.txt. Fix: _resolve_sandboxed_path now treats allowed_roots[0] as the resolution base (project root) and allowed_roots[1:] as permitted subdirectories. _get_allowed_roots returns (project_root, workspace_dir, prompts_root). Paths are now correctly routed: workspace/notes.txt -> workspace/notes.txt, prompts/ai/parts/x.md -> prompts/ai/parts/x.md. app/ and other project dirs remain blocked. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Description
No description provided
Languages
Python
100%