vhaudiquet
18d58ea8a4
privacy.rs bound the opened handle in a name only the unix build used, so `-D warnings` failed the wasm target; the bind is now `_file` and the unix branch uses it. The docker images resolve the whole workspace manifest graph before `cargo fetch`, so they now copy the tools contract with its workspace root plus the sandbox manifests rhema-code path-depends on, and the stub loop covers tools/*/ too.