Michael Bolin 40460faf2a fix: tighten up check for /usr/bin/sandbox-exec (#710) ...

* In both TypeScript and Rust, we now invoke `/usr/bin/sandbox-exec`
explicitly rather than whatever `sandbox-exec` happens to be on the
`PATH`.
* Changed `isSandboxExecAvailable` to use `access()` rather than
`command -v` so that:
  *  We only do the check once over the lifetime of the Codex process.
  * The check is specific to `/usr/bin/sandbox-exec`.
* We now do a syscall rather than incur the overhead of spawning a
process, dealing with timeouts, etc.

I think there is still room for improvement here where we should move
the `isSandboxExecAvailable` check earlier in the CLI, ideally right
after we do arg parsing to verify that we can provide the Seatbelt
sandbox if that is what the user has requested.

40460faf2a · 2025-04-28 13:42:04 -07:00

History

..

bin

fix: /bug report command, thinking indicator (#381)

2025-04-18 18:13:34 -07:00

examples

fix: typos in prompts and comments (#195)

2025-04-17 07:12:39 -07:00

scripts

fix: update scripts/build_container.sh to use pnpm instead of npm (#631)

2025-04-24 16:38:57 -07:00

src

fix: tighten up check for /usr/bin/sandbox-exec (#710)

2025-04-28 13:42:04 -07:00

tests

feat: user config api key (#569)

2025-04-26 10:13:30 -07:00

.dockerignore

(fix) update Docker container scripts (#47)

2025-04-16 12:02:41 -07:00

.editorconfig

Initial commit

2025-04-16 12:56:08 -04:00

.eslintrc.cjs

Initial commit

2025-04-16 12:56:08 -04:00

build.mjs

chore(build): cleanup dist before build (#477)

2025-04-21 12:35:25 -04:00

Dockerfile

fix: only allow running without sandbox if explicitly marked in safe container (#699)

2025-04-28 07:48:38 -07:00

HUSKY.md

Feat/add husky (#223)

2025-04-17 07:18:43 -07:00

ignore-react-devtools-plugin.js

Initial commit

2025-04-16 12:56:08 -04:00

package.json

bump(version): 0.1.2504251709 (#660)

2025-04-25 17:15:40 -07:00

require-shim.js

Initial commit

2025-04-16 12:56:08 -04:00

tsconfig.json

fix: /bug report command, thinking indicator (#381)

2025-04-18 18:13:34 -07:00

vite.config.ts

fix: add empty vite config file to prevent resolving to parent (#273)

2025-04-17 17:03:15 -07:00