starr-openai d626dc3895 Run exec-server fs operations through sandbox helper (#17294) ...

## Summary
- run exec-server filesystem RPCs requiring sandboxing through a
`codex-fs` arg0 helper over stdin/stdout
- keep direct local filesystem execution for `DangerFullAccess` and
external sandbox policies
- remove the standalone exec-server binary path in favor of top-level
arg0 dispatch/runtime paths
- add sandbox escape regression coverage for local and remote filesystem
paths

## Validation
- `just fmt`
- `git diff --check`
- remote devbox: `cd codex-rs && bazel test --bes_backend=
--bes_results_url= //codex-rs/exec-server:all` (6/6 passed)

---------

Co-authored-by: Codex <noreply@openai.com>

d626dc3895 · 2026-04-12 18:36:03 -07:00

History

..

src

Run exec-server fs operations through sandbox helper (#17294)

2026-04-12 18:36:03 -07:00

tests

[codex] Migrate apply_patch to executor filesystem (#17027)

2026-04-07 21:20:22 +00:00

apply_patch_tool_instructions.md

[apply-patch] Clean up apply-patch tool definitions (#2539)

2025-08-21 20:07:41 -07:00

BUILD.bazel

feat: add support for building with Bazel (#8875)

2026-01-09 11:09:43 -08:00

Cargo.toml

[codex] Migrate apply_patch to executor filesystem (#17027)

2026-04-07 21:20:22 +00:00