feat(harness): support workspace folder grants

[ytallo]

Summary

• add durable per-session workspace grants and trusted harness workspace grant controls
• stamp trusted extra_roots across turn loop, direct trigger, and deferred execute paths
• surface structured target errors and support post-trigger holds/re-parking

Test plan

• cargo test --manifest-path harness/Cargo.toml
• git diff --check

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
workers	Ready	Preview, Comment	Jul 3, 2026 2:27am
workers-tech-spec	Ready	Preview, Comment	Jul 3, 2026 2:27am

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 05475768-5bf1-48c6-a8e0-29d062128a39

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch feat/harness-folder-access-grants

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

skill-check — worker

0 verified, 30 skipped (no docs/).

Layer	Result
structure	✓
vale	✓
ai	✓
render	✓

Four for four. Nicely done.

[ytallo]

Superseded by #397, which carries the cleaned filesystem-scope architecture against main. Closing this older workspace/folder-grant stack PR to keep the review path unambiguous.