jif 790213ded0 Scope MCP sandbox metadata to server environment (#28914) ...

Scope MCP sandbox metadata to the MCP server's owning environment.

Previously, `codex/sandbox-state-meta` always used the turn's primary
cwd and rebuilt a legacy sandbox policy from that cwd. That can be wrong
for MCP servers owned by a different execution environment.

This now sends the owning environment cwd as a `file:` URI in
`sandboxCwd`, keeps `permissionProfile` as the permission source of
truth, and omits sandbox-state metadata when a non-default server
environment is not selected for the turn. Local/default MCP servers keep
the existing fallback cwd behavior.

Tests:
- `just fmt`
- `just bazel-lock-update`
- `just bazel-lock-check`
- `just test -p codex-mcp`
- `just test -p codex-core mcp_sandbox_cwd`
- `cargo build -p codex-rmcp-client --bin test_stdio_server`
- `just test -p codex-core
stdio_mcp_tool_call_includes_sandbox_state_meta`

790213ded0 · 2026-06-18 19:31:07 +02:00

History

..

common

app-server: keep the model cache warm (#28699)

2026-06-17 16:18:39 +02:00

remote_env_windows

unified-exec: retain PathUri in command events (#28780)

2026-06-18 05:00:04 +00:00

suite

Scope MCP sandbox metadata to server environment (#28914)

2026-06-18 19:31:07 +02:00

all.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

responses_headers.rs

feat(core): add metadata field to ResponseItem (#28355)

2026-06-15 15:05:28 -07:00