Place SQLite override under third_party

The vendored dependency source is not a Codex workspace crate, and its official amalgamation assets necessarily exceed the default blob budget. Keep the pinned source auditable under third_party and allowlist the required large upstream artifacts.

.github/blob-size-allowlist.txt

@@ -8,3 +8,7 @@ codex-rs/app-server-protocol/schema/json/codex_app_server_protocol.v2.schemas.js
 codex-rs/tui/tests/fixtures/oss-story.jsonl
 codex-rs/tui_app_server/tests/fixtures/oss-story.jsonl
 codex-rs/tui/src/app.rs
+third_party/libsqlite3-sys/sqlcipher/sqlite3.c
+third_party/libsqlite3-sys/sqlcipher/sqlite3.h
+third_party/libsqlite3-sys/sqlite3/sqlite3.c
+third_party/libsqlite3-sys/sqlite3/sqlite3.h

MODULE.bazel.lock

@@ -1301,7 +1301,7 @@
       "password-hash_0.4.2": "{\"dependencies\":[{\"name\":\"base64ct\",\"req\":\"^1\"},{\"default_features\":false,\"name\":\"rand_core\",\"optional\":true,\"req\":\"^0.6\"},{\"default_features\":false,\"name\":\"subtle\",\"req\":\"^2\"}],\"features\":{\"alloc\":[\"base64ct/alloc\"],\"default\":[\"rand_core\"],\"std\":[\"alloc\",\"base64ct/std\",\"rand_core/std\"]}}",
       "paste_1.0.15": "{\"dependencies\":[{\"kind\":\"dev\",\"name\":\"paste-test-suite\",\"req\":\"^0\"},{\"kind\":\"dev\",\"name\":\"rustversion\",\"req\":\"^1.0\"},{\"features\":[\"diff\"],\"kind\":\"dev\",\"name\":\"trybuild\",\"req\":\"^1.0.49\"}],\"features\":{}}",
       "pastey_0.2.1": "{\"dependencies\":[],\"features\":{}}",
-      "path+crates/vendor/libsqlite3-sys_libsqlite3-sys": "{\"dependencies\":[{\"default_features\":true,\"features\":[],\"name\":\"openssl-sys\",\"optional\":true},{\"default_features\":false,\"features\":[\"runtime\"],\"kind\":\"build\",\"name\":\"bindgen\",\"optional\":true},{\"default_features\":true,\"features\":[],\"kind\":\"build\",\"name\":\"cc\",\"optional\":true},{\"default_features\":true,\"features\":[],\"kind\":\"build\",\"name\":\"pkg-config\",\"optional\":true},{\"default_features\":true,\"features\":[],\"kind\":\"build\",\"name\":\"prettyplease\",\"optional\":true},{\"default_features\":false,\"features\":[],\"kind\":\"build\",\"name\":\"quote\",\"optional\":true},{\"default_features\":true,\"features\":[\"full\",\"extra-traits\",\"visit-mut\"],\"kind\":\"build\",\"name\":\"syn\",\"optional\":true},{\"default_features\":true,\"features\":[],\"kind\":\"build\",\"name\":\"vcpkg\",\"optional\":true}],\"features\":{\"buildtime_bindgen\":[\"bindgen\",\"pkg-config\",\"vcpkg\"],\"bundled\":[\"cc\",\"bundled_bindings\"],\"bundled-sqlcipher\":[\"bundled\"],\"bundled-sqlcipher-vendored-openssl\":[\"bundled-sqlcipher\",\"openssl-sys/vendored\"],\"bundled-windows\":[\"cc\",\"bundled_bindings\"],\"bundled_bindings\":[],\"default\":[\"min_sqlite_version_3_14_0\"],\"in_gecko\":[],\"loadable_extension\":[\"prettyplease\",\"quote\",\"syn\"],\"min_sqlite_version_3_14_0\":[\"pkg-config\",\"vcpkg\"],\"preupdate_hook\":[\"buildtime_bindgen\"],\"session\":[\"preupdate_hook\",\"buildtime_bindgen\"],\"sqlcipher\":[],\"unlock_notify\":[],\"wasm32-wasi-vfs\":[],\"with-asan\":[]},\"strip_prefix\":\"\"}",
+      "path+crates/../third_party/libsqlite3-sys_libsqlite3-sys": "{\"dependencies\":[{\"default_features\":true,\"features\":[],\"name\":\"openssl-sys\",\"optional\":true},{\"default_features\":false,\"features\":[\"runtime\"],\"kind\":\"build\",\"name\":\"bindgen\",\"optional\":true},{\"default_features\":true,\"features\":[],\"kind\":\"build\",\"name\":\"cc\",\"optional\":true},{\"default_features\":true,\"features\":[],\"kind\":\"build\",\"name\":\"pkg-config\",\"optional\":true},{\"default_features\":true,\"features\":[],\"kind\":\"build\",\"name\":\"prettyplease\",\"optional\":true},{\"default_features\":false,\"features\":[],\"kind\":\"build\",\"name\":\"quote\",\"optional\":true},{\"default_features\":true,\"features\":[\"full\",\"extra-traits\",\"visit-mut\"],\"kind\":\"build\",\"name\":\"syn\",\"optional\":true},{\"default_features\":true,\"features\":[],\"kind\":\"build\",\"name\":\"vcpkg\",\"optional\":true}],\"features\":{\"buildtime_bindgen\":[\"bindgen\",\"pkg-config\",\"vcpkg\"],\"bundled\":[\"cc\",\"bundled_bindings\"],\"bundled-sqlcipher\":[\"bundled\"],\"bundled-sqlcipher-vendored-openssl\":[\"bundled-sqlcipher\",\"openssl-sys/vendored\"],\"bundled-windows\":[\"cc\",\"bundled_bindings\"],\"bundled_bindings\":[],\"default\":[\"min_sqlite_version_3_14_0\"],\"in_gecko\":[],\"loadable_extension\":[\"prettyplease\",\"quote\",\"syn\"],\"min_sqlite_version_3_14_0\":[\"pkg-config\",\"vcpkg\"],\"preupdate_hook\":[\"buildtime_bindgen\"],\"session\":[\"preupdate_hook\",\"buildtime_bindgen\"],\"sqlcipher\":[],\"unlock_notify\":[],\"wasm32-wasi-vfs\":[],\"with-asan\":[]},\"strip_prefix\":\"\"}",
       "path-absolutize_3.1.1": "{\"dependencies\":[{\"kind\":\"dev\",\"name\":\"bencher\",\"req\":\"^0.1.5\"},{\"name\":\"path-dedot\",\"req\":\"^3.1.1\"},{\"kind\":\"dev\",\"name\":\"slash-formatter\",\"req\":\"^3\",\"target\":\"cfg(windows)\"}],\"features\":{\"lazy_static_cache\":[\"path-dedot/lazy_static_cache\"],\"once_cell_cache\":[\"path-dedot/once_cell_cache\"],\"unsafe_cache\":[\"path-dedot/unsafe_cache\"],\"use_unix_paths_on_wasm\":[\"path-dedot/use_unix_paths_on_wasm\"]}}",
       "path-dedot_3.1.1": "{\"dependencies\":[{\"kind\":\"dev\",\"name\":\"bencher\",\"req\":\"^0.1.5\"},{\"name\":\"lazy_static\",\"optional\":true,\"req\":\"^1.4\"},{\"name\":\"once_cell\",\"req\":\"^1.4\"}],\"features\":{\"lazy_static_cache\":[\"lazy_static\"],\"once_cell_cache\":[],\"unsafe_cache\":[],\"use_unix_paths_on_wasm\":[]}}",
       "pathdiff_0.2.3": "{\"dependencies\":[{\"name\":\"camino\",\"optional\":true,\"req\":\"^1.0.5\"},{\"kind\":\"dev\",\"name\":\"cfg-if\",\"req\":\"^1.0.0\"}],\"features\":{}}",

codex-rs/Cargo.toml

@@ -517,8 +517,8 @@ opt-level = 0
 [patch.crates-io]
 # sqlx-sqlite 0.8.6 requires libsqlite3-sys ^0.30.1, whose bundled SQLite
 # predates the WAL-reset corruption fix. Keep its compatible Rust API while
-# bundling the fixed SQLite source documented in vendor/libsqlite3-sys/UPSTREAM.md.
-libsqlite3-sys = { path = "vendor/libsqlite3-sys" }
+# bundling the fixed SQLite source documented in ../third_party/libsqlite3-sys/UPSTREAM.md.
+libsqlite3-sys = { path = "../third_party/libsqlite3-sys" }
 # Uncomment to debug local changes.
 # ratatui = { path = "../../ratatui" }
 crossterm = { git = "https://github.com/nornagon/crossterm", rev = "87db8bfa6dc99427fd3b071681b07fc31c6ce995" }