Remove test-only sandbox wrappers

codex-rs/core/src/landlock.rs

@@ -1,63 +0,0 @@
-use crate::protocol::SandboxPolicy;
-use crate::spawn::SpawnChildRequest;
-use crate::spawn::StdioPolicy;
-use crate::spawn::spawn_child_async;
-use codex_network_proxy::NetworkProxy;
-use codex_protocol::permissions::FileSystemSandboxPolicy;
-use codex_protocol::permissions::NetworkSandboxPolicy;
-use codex_sandboxing::landlock::allow_network_for_proxy;
-use codex_sandboxing::landlock::create_linux_sandbox_command_args_for_policies;
-use std::collections::HashMap;
-use std::path::Path;
-use std::path::PathBuf;
-use tokio::process::Child;
-
-/// Spawn a shell tool command under the Linux sandbox helper
-/// (codex-linux-sandbox), which defaults to bubblewrap for filesystem
-/// isolation plus seccomp for network restrictions.
-///
-/// Unlike macOS Seatbelt where we directly embed the policy text, the Linux
-/// helper is a separate executable. We pass the legacy [`SandboxPolicy`] plus
-/// split filesystem/network policies as JSON so the helper can migrate
-/// incrementally without breaking older call sites.
-#[allow(clippy::too_many_arguments)]
-pub async fn spawn_command_under_linux_sandbox<P>(
-    codex_linux_sandbox_exe: P,
-    command: Vec<String>,
-    command_cwd: PathBuf,
-    sandbox_policy: &SandboxPolicy,
-    sandbox_policy_cwd: &Path,
-    use_legacy_landlock: bool,
-    stdio_policy: StdioPolicy,
-    network: Option<&NetworkProxy>,
-    env: HashMap<String, String>,
-) -> std::io::Result<Child>
-where
-    P: AsRef<Path>,
-{
-    let file_system_sandbox_policy =
-        FileSystemSandboxPolicy::from_legacy_sandbox_policy(sandbox_policy, sandbox_policy_cwd);
-    let network_sandbox_policy = NetworkSandboxPolicy::from(sandbox_policy);
-    let args = create_linux_sandbox_command_args_for_policies(
-        command,
-        command_cwd.as_path(),
-        sandbox_policy,
-        &file_system_sandbox_policy,
-        network_sandbox_policy,
-        sandbox_policy_cwd,
-        use_legacy_landlock,
-        allow_network_for_proxy(/*enforce_managed_network*/ false),
-    );
-    let arg0 = Some("codex-linux-sandbox");
-    spawn_child_async(SpawnChildRequest {
-        program: codex_linux_sandbox_exe.as_ref().to_path_buf(),
-        args,
-        arg0,
-        cwd: command_cwd,
-        network_sandbox_policy,
-        network,
-        stdio_policy,
-        env,
-    })
-    .await
-}

codex-rs/core/src/lib.rs

@@ -45,7 +45,6 @@ pub mod git_info;
 mod guardian;
 mod hook_runtime;
 pub mod instructions;
-pub mod landlock;
 pub mod mcp;
 mod mcp_connection_manager;
 mod mcp_tool_approval_templates;
@@ -121,7 +120,6 @@ pub mod default_client {
 pub mod project_doc;
 mod rollout;
 pub(crate) mod safety;
-pub mod seatbelt;
 pub mod shell;
 pub mod shell_snapshot;
 pub mod skills;

codex-rs/core/src/seatbelt.rs

@@ -1,49 +0,0 @@
-#![cfg(target_os = "macos")]
-
-use crate::protocol::SandboxPolicy;
-use crate::spawn::CODEX_SANDBOX_ENV_VAR;
-use crate::spawn::SpawnChildRequest;
-use crate::spawn::StdioPolicy;
-use crate::spawn::spawn_child_async;
-use codex_network_proxy::NetworkProxy;
-use codex_protocol::permissions::FileSystemSandboxPolicy;
-use codex_protocol::permissions::NetworkSandboxPolicy;
-use codex_sandboxing::seatbelt::MACOS_PATH_TO_SEATBELT_EXECUTABLE;
-use codex_sandboxing::seatbelt::create_seatbelt_command_args_for_policies_with_extensions;
-use std::collections::HashMap;
-use std::path::Path;
-use std::path::PathBuf;
-use tokio::process::Child;
-
-pub async fn spawn_command_under_seatbelt(
-    command: Vec<String>,
-    command_cwd: PathBuf,
-    sandbox_policy: &SandboxPolicy,
-    sandbox_policy_cwd: &Path,
-    stdio_policy: StdioPolicy,
-    network: Option<&NetworkProxy>,
-    mut env: HashMap<String, String>,
-) -> std::io::Result<Child> {
-    let args = create_seatbelt_command_args_for_policies_with_extensions(
-        command,
-        &FileSystemSandboxPolicy::from_legacy_sandbox_policy(sandbox_policy, sandbox_policy_cwd),
-        NetworkSandboxPolicy::from(sandbox_policy),
-        sandbox_policy_cwd,
-        /*enforce_managed_network*/ false,
-        network,
-        /*extensions*/ None,
-    );
-    let arg0 = None;
-    env.insert(CODEX_SANDBOX_ENV_VAR.to_string(), "seatbelt".to_string());
-    spawn_child_async(SpawnChildRequest {
-        program: PathBuf::from(MACOS_PATH_TO_SEATBELT_EXECUTABLE),
-        args,
-        arg0,
-        cwd: command_cwd,
-        network_sandbox_policy: NetworkSandboxPolicy::from(sandbox_policy),
-        network,
-        stdio_policy,
-        env,
-    })
-    .await
-}