From 83270c6283c0dcb9cc2cb93cb6c340ca2593f293 Mon Sep 17 00:00:00 2001
From: Channing Conger <cconger@openai.com>
Date: Thu, 11 Jun 2026 11:30:12 -0700
Subject: [PATCH] Enable the V8 sandbox directly in the host

---
 codex-rs/Cargo.lock                | 1 +
 codex-rs/code-mode-host/Cargo.toml | 5 ++++-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/codex-rs/Cargo.lock b/codex-rs/Cargo.lock
index d6c8255335..2cb4f962d4 100644
--- a/codex-rs/Cargo.lock
+++ b/codex-rs/Cargo.lock
@@ -2518,6 +2518,7 @@ dependencies = [
  "serde_json",
  "tokio",
  "tokio-util",
+ "v8",
 ]
 
 [[package]]
diff --git a/codex-rs/code-mode-host/Cargo.toml b/codex-rs/code-mode-host/Cargo.toml
index 87e2eba092..ccda6b9518 100644
--- a/codex-rs/code-mode-host/Cargo.toml
+++ b/codex-rs/code-mode-host/Cargo.toml
@@ -12,11 +12,14 @@ path = "src/main.rs"
 workspace = true
 
 [dependencies]
-codex-code-mode = { workspace = true, features = ["sandbox"] }
+codex-code-mode = { workspace = true }
 codex-code-mode-protocol = { workspace = true }
 serde_json = { workspace = true }
 tokio = { workspace = true, features = ["io-std", "io-util", "macros", "rt-multi-thread", "sync"] }
 tokio-util = { workspace = true, features = ["rt"] }
+# The host owns V8 process configuration, so enable the sandbox without an
+# internal workspace-crate feature gate.
+v8 = { workspace = true, features = ["v8_enable_sandbox"] }
 
 [dev-dependencies]
 codex-utils-cargo-bin = { workspace = true }