fix(menhir): sandbox infer rule

Infer rules should not observe any modules not listed as dependencies.
This can lead to "inconsistent assumptions" errors.

Signed-off-by: Rudi Grinberg <me@rgrinberg.com>

ps-id: 4494FD38-3CAC-4641-A478-A8E103F82CF6

Author: rgrinberg

src/dune_rules/compilation_context.ml

@@ -104,6 +104,8 @@ let js_of_ocaml t = t.js_of_ocaml
 
 let sandbox t = t.sandbox
 
+let set_sandbox t sandbox = { t with sandbox }
+
 let package t = t.package
 
 let vimpl t = t.vimpl

src/dune_rules/compilation_context.mli

@@ -79,6 +79,8 @@ val js_of_ocaml : t -> Dune_file.Js_of_ocaml.t option
 
 val sandbox : t -> Sandbox_config.t
 
+val set_sandbox : t -> Sandbox_config.t -> t
+
 val package : t -> Package.t option
 
 val vimpl : t -> Vimpl.t option

src/dune_rules/menhir.ml

@@ -204,7 +204,10 @@ module Run (P : PARAMS) = struct
         (Compilation_context.preprocessing cctx)
         name mock_module ~lint:false
     in
-    let cctx = Compilation_context.without_bin_annot cctx in
+    let cctx =
+      Compilation_context.set_sandbox cctx Sandbox_config.needs_sandboxing
+      |> Compilation_context.without_bin_annot
+    in
     let* deps = Dep_rules.for_module cctx mock_module in
     let* () =
       Module_compilation.ocamlc_i ~deps cctx mock_module