starr-openai d626dc3895 Run exec-server fs operations through sandbox helper (#17294) ...

## Summary
- run exec-server filesystem RPCs requiring sandboxing through a
`codex-fs` arg0 helper over stdin/stdout
- keep direct local filesystem execution for `DangerFullAccess` and
external sandbox policies
- remove the standalone exec-server binary path in favor of top-level
arg0 dispatch/runtime paths
- add sandbox escape regression coverage for local and remote filesystem
paths

## Validation
- `just fmt`
- `git diff --check`
- remote devbox: `cd codex-rs && bazel test --bes_backend=
--bes_results_url= //codex-rs/exec-server:all` (6/6 passed)

---------

Co-authored-by: Codex <noreply@openai.com>

d626dc3895 · 2026-04-12 18:36:03 -07:00

History

..

snapshots

Mirror user text into realtime (#17520)

2026-04-12 15:03:14 -07:00

abort_tasks.rs

Forward app-server turn clientMetadata to Responses (#16009)

2026-04-09 11:52:37 -07:00

agent_jobs.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054)

2026-03-27 19:00:44 -07:00

agent_websocket.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054)

2026-03-27 19:00:44 -07:00

agents_md.rs

Run exec-server fs operations through sandbox helper (#17294)

2026-04-12 18:36:03 -07:00

apply_patch_cli.rs

[codex] Apply patches through executor filesystem (#17048)

2026-04-07 16:35:02 -07:00

approvals.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054)

2026-03-27 19:00:44 -07:00

cli_stream.rs

Remove OPENAI_BASE_URL config fallback (#16720)

2026-04-03 15:03:21 -07:00

client_websockets.rs

Revert "Option to Notify Workspace Owner When Usage Limit is Reached" (#17391)

2026-04-10 23:33:13 +00:00

client.rs

Revert "Option to Notify Workspace Owner When Usage Limit is Reached" (#17391)

2026-04-10 23:33:13 +00:00

code_mode.rs

Add output_schema to code mode render (#17210)

2026-04-10 11:41:44 +00:00

codex_delegate.rs

chore: remove codex-core public protocol/shell re-exports (#12432)

2026-02-20 23:45:35 -08:00

collaboration_instructions.rs

Forward app-server turn clientMetadata to Responses (#16009)

2026-04-09 11:52:37 -07:00

compact_remote.rs

Forward app-server turn clientMetadata to Responses (#16009)

2026-04-09 11:52:37 -07:00

compact_resume_fork.rs

Forward app-server turn clientMetadata to Responses (#16009)

2026-04-09 11:52:37 -07:00

compact.rs

Forward app-server turn clientMetadata to Responses (#16009)

2026-04-09 11:52:37 -07:00

deprecation_notice.rs

Split features into codex-features crate (#15253)

2026-03-19 20:12:07 -07:00

exec_policy.rs

chore(core) Add approvals reviewer to UserTurn (#15426)

2026-03-23 15:19:01 -07:00

exec.rs

Use AbsolutePathBuf for exec cwd plumbing (#17063)

2026-04-08 10:54:12 -07:00

fork_thread.rs

Forward app-server turn clientMetadata to Responses (#16009)

2026-04-09 11:52:37 -07:00

hierarchical_agents.rs

Run exec-server fs operations through sandbox helper (#17294)

2026-04-12 18:36:03 -07:00

hooks.rs

Forward app-server turn clientMetadata to Responses (#16009)

2026-04-09 11:52:37 -07:00

image_rollout.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054)

2026-03-27 19:00:44 -07:00

items.rs

Forward app-server turn clientMetadata to Responses (#16009)

2026-04-09 11:52:37 -07:00

js_repl.rs

Split features into codex-features crate (#15253)

2026-03-19 20:12:07 -07:00

json_result.rs

chore(core) Add approvals reviewer to UserTurn (#15426)

2026-03-23 15:19:01 -07:00

live_cli.rs

feat: introduce codex-utils-cargo-bin as an alternative to assert_cmd::Command (#8496)

2025-12-23 19:29:32 -08:00

live_reload.rs

Refactor config types into a separate crate (#16962)

2026-04-07 00:32:41 +00:00

memories.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054)

2026-03-27 19:00:44 -07:00

mod.rs

Run exec-server fs operations through sandbox helper (#17294)

2026-04-12 18:36:03 -07:00

model_overrides.rs

Add Smart Approvals guardian review across core, app-server, and TUI (#13860)

2026-03-13 15:27:00 -07:00

model_switching.rs

Use model metadata for Fast Mode status (#16949)

2026-04-07 17:55:40 -07:00

model_visible_layout.rs

Forward app-server turn clientMetadata to Responses (#16009)

2026-04-09 11:52:37 -07:00

models_cache_ttl.rs

Use model metadata for Fast Mode status (#16949)

2026-04-07 17:55:40 -07:00

models_etag_responses.rs

core: remove cross-crate re-exports from lib.rs (#16512)

2026-04-01 23:06:24 -07:00

openai_file_mcp.rs

feat: add Codex Apps sediment file remapping (#15197)

2026-04-09 14:10:44 -04:00

otel.rs

Forward app-server turn clientMetadata to Responses (#16009)

2026-04-09 11:52:37 -07:00

override_updates.rs

Add Smart Approvals guardian review across core, app-server, and TUI (#13860)

2026-03-13 15:27:00 -07:00

pending_input.rs

Forward app-server turn clientMetadata to Responses (#16009)

2026-04-09 11:52:37 -07:00

permissions_messages.rs

Forward app-server turn clientMetadata to Responses (#16009)

2026-04-09 11:52:37 -07:00

personality_migration.rs

fix(app-server) revert null instructions changes (#17047)

2026-04-07 15:18:34 -07:00

personality.rs

Use model metadata for Fast Mode status (#16949)

2026-04-07 17:55:40 -07:00

plugins.rs

Forward app-server turn clientMetadata to Responses (#16009)

2026-04-09 11:52:37 -07:00

prompt_caching.rs

Forward app-server turn clientMetadata to Responses (#16009)

2026-04-09 11:52:37 -07:00

quota_exceeded.rs

Forward app-server turn clientMetadata to Responses (#16009)

2026-04-09 11:52:37 -07:00

realtime_conversation.rs

Mirror user text into realtime (#17520)

2026-04-12 15:03:14 -07:00

remote_env.rs

Run exec-server fs operations through sandbox helper (#17294)

2026-04-12 18:36:03 -07:00

remote_models.rs

Use model metadata for Fast Mode status (#16949)

2026-04-07 17:55:40 -07:00

request_compression.rs

Forward app-server turn clientMetadata to Responses (#16009)

2026-04-09 11:52:37 -07:00

request_permissions_tool.rs

chore(core) Add approvals reviewer to UserTurn (#15426)

2026-03-23 15:19:01 -07:00

request_permissions.rs

permissions: remove macOS seatbelt extension profiles (#15918)

2026-03-26 17:12:45 -07:00

request_user_input.rs

chore(core) Add approvals reviewer to UserTurn (#15426)

2026-03-23 15:19:01 -07:00

responses_api_proxy_headers.rs

[codex] add response proxy subagent header test (#16876)

2026-04-06 08:18:46 -07:00

resume_warning.rs

[codex-analytics] add protocol-native turn timestamps (#16638)

2026-04-06 16:22:59 -07:00

resume.rs

Forward app-server turn clientMetadata to Responses (#16009)

2026-04-09 11:52:37 -07:00

review.rs

Forward app-server turn clientMetadata to Responses (#16009)

2026-04-09 11:52:37 -07:00

rmcp_client.rs

Add MCP tool wall time to model output (#17406)

2026-04-12 18:26:15 -07:00

rollout_list_find.rs

chore: merge name and title (#17116)

2026-04-09 18:44:26 +01:00

safety_check_downgrade.rs

chore(core) Add approvals reviewer to UserTurn (#15426)

2026-03-23 15:19:01 -07:00

search_tool.rs

[mcp] Expand tool search to custom MCPs. (#16944)

2026-04-09 13:34:52 -07:00

seatbelt.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054)

2026-03-27 19:00:44 -07:00

shell_command.rs

fix: preserve platform-specific core shell env vars (#16707)

2026-04-03 12:07:07 -07:00

shell_serialization.rs

[codex] Apply patches through executor filesystem (#17048)

2026-04-07 16:35:02 -07:00

shell_snapshot.rs

[codex-cli][app-server] Update self-serve business usage limit copy in error returned (#15478)

2026-03-24 04:41:38 +00:00

skill_approval.rs

core: remove special execve handling for skill scripts (#15812)

2026-03-26 07:46:04 -07:00

skills.rs

chore(core) Add approvals reviewer to UserTurn (#15426)

2026-03-23 15:19:01 -07:00

spawn_agent_description.rs

Use model metadata for Fast Mode status (#16949)

2026-04-07 17:55:40 -07:00

sqlite_state.rs

Forward app-server turn clientMetadata to Responses (#16009)

2026-04-09 11:52:37 -07:00

stream_error_allows_next_turn.rs

Forward app-server turn clientMetadata to Responses (#16009)

2026-04-09 11:52:37 -07:00

stream_no_completed.rs

Forward app-server turn clientMetadata to Responses (#16009)

2026-04-09 11:52:37 -07:00

subagent_notifications.rs

Add spawn context for MultiAgentV2 children (#16746)

2026-04-03 19:56:59 -07:00

tool_harness.rs

chore(core) Add approvals reviewer to UserTurn (#15426)

2026-03-23 15:19:01 -07:00

tool_parallelism.rs

chore(core) Add approvals reviewer to UserTurn (#15426)

2026-03-23 15:19:01 -07:00

tool_suggest.rs

remove temporary ownership re-exports (#16626)

2026-04-03 00:33:34 -07:00

tools.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054)

2026-03-27 19:00:44 -07:00

truncation.rs

Add MCP tool wall time to model output (#17406)

2026-04-12 18:26:15 -07:00

turn_state.rs

Stabilize websocket response.failed error delivery (#14017)

2026-03-11 12:33:09 -07:00

undo.rs

Split features into codex-features crate (#15253)

2026-03-19 20:12:07 -07:00

unified_exec.rs

Run exec-server fs operations through sandbox helper (#17294)

2026-04-12 18:36:03 -07:00

unstable_features_warning.rs

core: remove cross-crate re-exports from lib.rs (#16512)

2026-04-01 23:06:24 -07:00

user_notification.rs

Forward app-server turn clientMetadata to Responses (#16009)

2026-04-09 11:52:37 -07:00

user_shell_cmd.rs

fix: add more detail to test assertion (#16606)

2026-04-02 12:34:42 -07:00

view_image.rs

Run exec-server fs operations through sandbox helper (#17294)

2026-04-12 18:36:03 -07:00

web_search.rs

Split features into codex-features crate (#15253)

2026-03-19 20:12:07 -07:00

websocket_fallback.rs

remove temporary ownership re-exports (#16626)

2026-04-03 00:33:34 -07:00

window_headers.rs

Forward app-server turn clientMetadata to Responses (#16009)

2026-04-09 11:52:37 -07:00