Codex ACP fails to start under :root = "deny" despite read access to its executable

What version of the IDE extension are you using?

JetBrains AI Assistant 262.9437.276

What subscription do you have?

Business

Which IDE are you using?

WebStorm 2026.2.1

What platform is your computer?

Linux 7.0.0-30-generic x86_64 x86_64

What issue are you seeing?

Bubblewrap fails while launching WebStorm’s bundled Codex executable:

bwrap: execvp /home/abc/.cache/JetBrains/WebStorm2026.2/acp-agents/codex-acp/1.4.0/node_modules/@openai/codex-linux-x64/vendor/x86_64-unknown-linux-musl/bin/codex: No such file or directory

What steps can reproduce the bug?

1. Configure /etc/codex/requirements.toml:

default_permissions = "org-workspace"

[allowed_permission_profiles]
"org-workspace" = true

[permissions.org-workspace]
extends = ":workspace"

[permissions.org-workspace.filesystem]
":root" = "deny"
":minimal" = "read"
"~" = "read"

[permissions.org-workspace.filesystem.":workspace_roots"]
"." = "write"
".git" = "read"
".codex" = "read"
".agents" = "read"

2. Fully restart WebStorm and open a new AI Chat session.
3. Send the message pwd and allow the command to run.

What is the expected behavior?

The Codex ACP process starts successfully, executes pwd, and returns the current project directory.

Additional information

Issue was reproducible on other JetBrains IDEs. It was reported on JetBrains YouTrack, with no response.

Start by reproducing the launch with /etc/codex/requirements.toml and the reported root-deny permissions, then trace the Bubblewrap launch of the bundled Codex executable. Verify the behavior across JetBrains IDEs; done means the ACP process starts, runs pwd, and returns the current project directory without the reported executable error.