openai/codex
1
0
Fork 0
mirror of https://github.com/openai/codex.git synced 2026-11-06 20:20:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

delegate remote MCP file deny checks

Browse Source
This commit is contained in:
Soheil Norouzi
2026-06-15 20:02:06 +00:00
parent 7db7ea9f94
commit 50c5453099
1 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
codex-rs/core/src/mcp_file_transfer.rs
+8 -4
View File
@@ -288,10 +288,14 @@ async fn rewrite_single_file(
/*additional_permissions*/ None,
turn_environment.cwd_uri(),
);
if let (Ok(native_path), Some(native_cwd)) = (
path.to_abs_path(),
sandbox.cwd.as_ref().and_then(|cwd| cwd.to_abs_path().ok()),
) {
if !turn_environment.environment.is_remote() {
let native_path = path
.to_abs_path()
.map_err(|error| format!("failed to read `{path_display}`: {error}"))?;
let native_cwd = turn_environment
.cwd_uri()
.to_abs_path()
.map_err(|error| format!("failed to read `{path_display}`: {error}"))?;
let file_system_policy = sandbox.permissions.file_system_sandbox_policy();
if ReadDenyMatcher::new(&file_system_policy, native_cwd.as_path())
.is_some_and(|matcher| matcher.is_read_denied(native_path.as_path()))