Preserve Windows sandbox proxy settings for process sandbox

This commit is contained in:
David Wiesen
2026-06-29 21:20:55 -07:00
parent cfead68e5d
commit 1d5f0dde3c

View File

@@ -107,8 +107,10 @@ pub(crate) fn prepare_exec_request(
let request = sandbox_manager
.transform_for_direct_spawn(SandboxDirectSpawnTransformRequest {
workspace_roots,
// Preserve the existing Windows sandbox proxy/firewall state instead of
// reconciling it from ambient launcher env like HTTP_PROXY.
windows_sandbox_proxy_settings_mode:
codex_sandboxing::WindowsSandboxProxySettingsMode::Reconcile,
codex_sandboxing::WindowsSandboxProxySettingsMode::Preserve,
transform: SandboxTransformRequest {
// TODO(jif): Preserve params.arg0 for the inner command across the sandbox
// wrapper, or reject sandboxed requests with a custom arg0.