Codex ACP fails to start under :root = "deny" despite read access to its executable

What version of the IDE extension are you using?

JetBrains AI Assistant 262.9437.276

What subscription do you have?

Business

Which IDE are you using?

WebStorm 2026.2.1

What platform is your computer?

Linux 7.0.0-30-generic x86_64 x86_64

What issue are you seeing?

Bubblewrap fails while launching WebStorm’s bundled Codex executable:

bwrap: execvp /home/abc/.cache/JetBrains/WebStorm2026.2/acp-agents/codex-acp/1.4.0/node_modules/@openai/codex-linux-x64/vendor/x86_64-unknown-linux-musl/bin/codex: No such file or directory

What steps can reproduce the bug?

1. Configure /etc/codex/requirements.toml:

default_permissions = "org-workspace"

[allowed_permission_profiles]
"org-workspace" = true

[permissions.org-workspace]
extends = ":workspace"

[permissions.org-workspace.filesystem]
":root" = "deny"
":minimal" = "read"
"~" = "read"

[permissions.org-workspace.filesystem.":workspace_roots"]
"." = "write"
".git" = "read"
".codex" = "read"
".agents" = "read"

1. Fully restart WebStorm and open a new AI Chat session.
2. Send the message pwd and allow the command to run.

What is the expected behavior?

The Codex ACP process starts successfully, executes pwd, and returns the current project directory.

Additional information

Issue was reproducible on other JetBrains IDEs. It was reported on JetBrains YouTrack, with no response.