Sandbox won't let copilot use git anymore

[logar16]

Describe the bug

Just got the latest version of enforced-sandbox copilot and it turns out it's super broken and overly restrictive. I enabled my entire working directory and ~/.copilot because agents no longer had a way to share information across sessions. Then I found that even though it could now read the files it couldn't even run git status. I checked and the /cwd is the git repo but when it runs git status it gets a "fatal: not a git repository (or any of the parent directories): .git" error.

I can't even do it by ! git status in shell mode as I get the same. If it uses git -C <repo> status it does a slightly different error of "fatal: Unable to read current working directory: Permission denied".

I ran ! pwd and see that it's C:\ which of course is not a great place to add to your policy if you want to keep the pc safe. So can we not have powershell run in the allowed directory? This seems like the logical thing to do instead of starting at root and failing all git commands.

Affected version

1.0.81-1

Steps to reproduce the behavior

1. Get forced into sandboxing via enterprise managed systems
2. Ask the agent to do a git command like git status (fails)
3. Run Shell Get-Item 'path/to/.git' where path is on not C:/ and it fails saying "Get-Item: Cannot find drive. A drive with the name 'E' does not exist."

Expected behavior

I was expecting it wouldn't fail to do such a simple command. It doesn't if I do the exact same command outside of copilot. It worked before the update.

Additional context

[logar16]

#4522 seems to be the root cause of why sandboxing is being applied even when I disable, but doesn't seem to explain why you can't find the E:/ directory anymore (MXC sandbox limitation?) which is a terrible experience. Not everyone has one massive C:/ drive to dev, some of us use additional drives...

[sebastko]

I confirm that version 1.0.81-1 introduces lots of problems w/ sandboxing which cannot be disabled in my experience. /sandbox disable doesn't seem to work, the lower-right corner still says sandbox enabled.