feat(agent): sandbox conversation analysis

src/runtime/opencode.ts

@@ -10,6 +10,7 @@ import { resolve } from "node:path";
 import { config } from "../config.js";
 import { logger } from "../logger.js";
 import { ensureDirectory } from "../utils/fileStore.js";
+import { setSandboxOwnership } from "./conversationWorkspace.js";
 import {
   cleanupExpiredToolOutputs,
   resolveOpencodeToolOutputDirectory,
@@ -149,6 +150,7 @@ export class OpencodeRuntimeAdapter {
     await ensureDirectory(workspaceRoot);
     await chmod(workspaceRoot, 0o700);
     await mkdir(directory, { mode: 0o700 });
+    await setSandboxOwnership(directory);
     try {
       const response = await client.session.create({
         directory,