unified-exec: retain PathUri in command events (#28780)

## Why

App-server must report command events containing foreign-platform paths
without changing existing client or rollout path-string formats.

## What changed

- retain `PathUri` through exec command begin/end events
- convert cwd values to `LegacyAppPathString` at the app-server
compatibility boundary
- drop command actions with foreign paths and log them
- serialize rollout-trace cwd values using their inferred native path
representation
- restore Wine coverage for retained Windows cwd values and successful
completion

codex-rs/core/tests/remote_env_windows/remote_env_windows_test.rs

@@ -20,6 +20,7 @@ use codex_features::Feature;
 use codex_protocol::models::PermissionProfile;
 use codex_protocol::protocol::AskForApproval;
 use codex_protocol::protocol::EventMsg;
+use codex_protocol::protocol::ExecCommandStatus;
 use codex_protocol::protocol::Op;
 use codex_protocol::protocol::TurnEnvironmentSelection;
 use codex_protocol::protocol::TurnEnvironmentSelections;
@@ -127,10 +128,6 @@ async fn windows_exec_server_runs_with_native_shell_and_cwd() -> Result<()> {
                 })
                 .await?;
 
-            // TODO(anp): Re-enable these event assertions once exec command events retain a
-            // PathUri cwd. Today the host-native event conversion drops begin/end events for a
-            // foreign cwd.
-            /*
             let mut begin = None;
             let mut end = None;
             let mut turn_complete = false;
@@ -161,13 +158,9 @@ async fn windows_exec_server_runs_with_native_shell_and_cwd() -> Result<()> {
             assert_eq!(&begin.command[1..], ["-NoProfile", "-Command", COMMAND]);
 
             let end = end.context("exec_command should emit an end event")?;
+            let expected_cwd = PathUri::parse("file:///C:/windows")?;
+            assert_eq!((&begin.cwd, &end.cwd), (&expected_cwd, &expected_cwd));
             assert_eq!((end.exit_code, end.status), (0, ExecCommandStatus::Completed));
-            */
-
-            wait_for_event(&test.codex, |event| {
-                matches!(event, EventMsg::TurnComplete(_))
-            })
-            .await;
 
             let request = response_mock
                 .last_request()

codex-rs/core/tests/suite/unified_exec.rs

@@ -437,7 +437,7 @@ async fn unified_exec_emits_exec_command_begin_event() -> Result<()> {
 
     assert_command(&begin_event.command, "-lc", "/bin/echo hello unified exec");
 
-    assert_eq!(begin_event.cwd.as_path(), cwd.as_path());
+    assert_eq!(begin_event.cwd, PathUri::from_path(&cwd)?);
 
     wait_for_event(&test.codex, |event| {
         matches!(event, EventMsg::TurnComplete(_))
@@ -507,8 +507,8 @@ async fn unified_exec_resolves_relative_workdir() -> Result<()> {
     .await;
 
     assert_eq!(
-        begin_event.cwd.as_path(),
-        workdir.as_path(),
+        begin_event.cwd,
+        PathUri::from_path(&workdir)?,
         "exec_command cwd should resolve relative workdir against turn cwd",
     );
 
@@ -569,8 +569,8 @@ async fn unified_exec_respects_workdir_override() -> Result<()> {
     .await;
 
     assert_eq!(
-        begin_event.cwd.as_path(),
-        workdir.as_path(),
+        begin_event.cwd,
+        PathUri::from_path(&workdir)?,
         "exec_command cwd should reflect the requested workdir override"
     );