Created: 2021-10-22T20:35:47-05:00
Putting a target in the 'tool' option won't pull dependent files in to the workspace. If you need to bring the configs in to the workspace then it needs to go in a filegroup which is added as a dependency of the tool user.
Possibly making them dependencies of the tool's rule will put them in the sandbox tool with that tool, but it will have to be coded to read relative to its own executable.
Note that if a tool will read from a home folder you'll want to make sure that is disabled or it can break the sandbox.
Apparently this kind of problem is what "entry_points" are for.