Stabilize Bazel tests (timeout tweaks and flake fixes) (#17791)

codex-rs/exec-server/BUILD.bazel

@@ -3,5 +3,9 @@ load("//:defs.bzl", "codex_rust_crate")
 codex_rust_crate(
     name = "exec-server",
     crate_name = "codex_exec_server",
+    # Keep the crate's integration tests single-threaded under Bazel because
+    # they install process-global test-binary dispatch state, and the remote
+    # exec-server cases already rely on serialization around the full CLI path.
+    integration_test_args = ["--test-threads=1"],
     test_tags = ["no-sandbox"],
 )

codex-rs/exec-server/tests/common/exec_server.rs

@@ -22,7 +22,7 @@ use tokio::time::timeout;
 use tokio_tungstenite::connect_async;
 use tokio_tungstenite::tungstenite::Message;
 
-const CONNECT_TIMEOUT: Duration = Duration::from_secs(5);
+const CONNECT_TIMEOUT: Duration = Duration::from_secs(10);
 const CONNECT_RETRY_INTERVAL: Duration = Duration::from_millis(25);
 const EVENT_TIMEOUT: Duration = Duration::from_secs(5);
 

codex-rs/exec-server/tests/exec_process.rs

@@ -153,9 +153,12 @@ async fn assert_exec_process_write_then_read(use_remote: bool) -> Result<()> {
         .start(ExecParams {
             process_id: process_id.clone().into(),
             argv: vec![
-                "/usr/bin/python3".to_string(),
+                // Use `/bin/sh` instead of Python so this stdin round-trip test
+                // stays portable across Bazel and non-macOS runners where
+                // `/usr/bin/python3` is not guaranteed to exist.
+                "/bin/sh".to_string(),
                 "-c".to_string(),
-                "import sys; line = sys.stdin.readline(); sys.stdout.write(f'from-stdin:{line}'); sys.stdout.flush()".to_string(),
+                "IFS= read line; printf 'from-stdin:%s\\n' \"$line\"".to_string(),
             ],
             cwd: std::env::current_dir()?,
             env_policy: /*env_policy*/ None,