3 Commits

• Run exec-server fs operations through sandbox helper (#17294)

  ## Summary
  - run exec-server filesystem RPCs requiring sandboxing through a
  `codex-fs` arg0 helper over stdin/stdout
  - keep direct local filesystem execution for `DangerFullAccess` and
  external sandbox policies
  - remove the standalone exec-server binary path in favor of top-level
  arg0 dispatch/runtime paths
  - add sandbox escape regression coverage for local and remote filesystem
  paths
  
  ## Validation
  - `just fmt`
  - `git diff --check`
  - remote devbox: `cd codex-rs && bazel test --bes_backend=
  --bes_results_url= //codex-rs/exec-server:all` (6/6 passed)
  
  ---------
  
  Co-authored-by: Codex <noreply@openai.com>

  starr-openai · 2026-04-12 18:36:03 -07:00
  d626dc3895
• [codex] Make unified exec tests remote aware (#16977)

  ## Summary
  - Convert unified exec integration tests that can run against the remote
  executor to use the remote-aware test harness.
  - Create workspace directories through the executor filesystem for
  remote runs.
  - Install `python3` and `zsh` in the remote test container so restored
  Python/zsh-based test commands work in fresh Ubuntu containers.
  
  ## Validation
  - `just fmt`
  - `cargo test -p codex-core --test all unified_exec_defaults_to_pipe`
  - `cargo test -p codex-core --test all unified_exec_can_enable_tty`
  - `cargo test -p codex-core --test all unified_exec`
  - Remote on `codex-remote`: `source scripts/test-remote-env.sh && cd
  codex-rs && cargo test -p codex-core --test all unified_exec`
  - `just fix -p codex-core`

  pakrym-oai · 2026-04-07 10:56:08 -07:00
  365154d5da
• Add remote env CI matrix and integration test (#14869)

  `CODEX_TEST_REMOTE_ENV` will make `test_codex` start the executor
  "remotely" (inside a docker container) turning any integration test into
  remote test.

  pakrym-oai · 2026-03-20 08:02:50 -07:00
  ba85a58039