From 7fc4cf8f23bf1e69b4a4f8e82a4d6b6b61b230b6 Mon Sep 17 00:00:00 2001 From: David Wiesen Date: Mon, 29 Jun 2026 21:20:55 -0700 Subject: [PATCH] Preserve Windows sandbox proxy settings for process sandbox --- codex-rs/exec-server/src/process_sandbox.rs | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/codex-rs/exec-server/src/process_sandbox.rs b/codex-rs/exec-server/src/process_sandbox.rs index ef97d0ce5f..7c53b489c0 100644 --- a/codex-rs/exec-server/src/process_sandbox.rs +++ b/codex-rs/exec-server/src/process_sandbox.rs @@ -107,8 +107,10 @@ pub(crate) fn prepare_exec_request( let request = sandbox_manager .transform_for_direct_spawn(SandboxDirectSpawnTransformRequest { workspace_roots, + // Preserve the existing Windows sandbox proxy/firewall state instead of + // reconciling it from ambient launcher env like HTTP_PROXY. windows_sandbox_proxy_settings_mode: - codex_sandboxing::WindowsSandboxProxySettingsMode::Reconcile, + codex_sandboxing::WindowsSandboxProxySettingsMode::Preserve, transform: SandboxTransformRequest { // TODO(jif): Preserve params.arg0 for the inner command across the sandbox // wrapper, or reject sandboxed requests with a custom arg0.