jif d2484697b1 Allow codex sandbox to consume MCP sandbox state (#29358) ...

## Summary

- let `codex sandbox` accept the JSON value from
`codex/sandbox-state-meta`
- require the payload `permissionProfile` instead of falling back to
ambient permissions
- reuse the existing macOS, Linux, and Windows launch paths, treating
external sandbox state conservatively as read-only
- let opaque forwarders add runtime read roots and disable direct
network access without decoding the payload

Builds on #29113, which is now on `main`.

## Tests

- `just test -p codex-cli debug_sandbox::tests`
- `cargo build -p codex-rmcp-client --bin test_stdio_server`
- `just test -p codex-core
stdio_mcp_tool_call_includes_sandbox_state_meta`
- `just test -p codex-mcp`
- `just fmt`

d2484697b1 · 2026-06-23 10:17:52 +02:00

History

..

src

Allow codex sandbox to consume MCP sandbox state (#29358)

2026-06-23 10:17:52 +02:00

tests

[codex] Initialize exec-server OpenTelemetry at startup (#25019)

2026-06-18 11:03:42 -07:00

BUILD.bazel

[codex] Move release platform rules into bazel package (#27321)

2026-06-10 19:45:29 +00:00

build.rs

Add WebRTC media transport to realtime TUI (#17058)

2026-04-08 10:26:55 -07:00

Cargo.toml

exec-server: default remote transport to Noise (#26245)

2026-06-15 17:39:00 -07:00