You'll notice
REPL sandbox check now matches file paths against workspace roots instead of scanning code for import statements
What
A helper function used by the REPL (the interactive code-execution environment) sandbox no longer inspects input as JavaScript looking for require/import-style statements to block with a "sealed vm context" error. Instead, it treats the input as a file path: it expands $HOME or ~ prefixes, normalizes the path, and checks whether it falls under one of the configured workspace roots, returning true or false instead of throwing an error.
Why
This changes the sandbox's filtering from code-pattern detection to path-based scoping, which is a more direct way to decide whether a given path is inside allowed workspace boundaries.