Charlie Marsh e9919f4b4e Add process-local launch directories for shared MCP servers (#61444) ...

## What changed

- Add hidden app-server options `--plugin-mcp-launch-cwd` and `--mcp-launch-cwd` for host-supplied local stdio server launch directories without writing them to shared configuration.
- Apply these directories when both `mcp_shared_repl_cwd` and `mcp_connection_sharing` are enabled. For configured servers, require a matching executable and preserve any explicit working directory.
- Attach thread-specific sandbox state to direct MCP tool calls for servers advertising support, stripping caller-supplied sandbox and launcher metadata first.

## Testing

Add regression tests for launch-directory feature toggling and executable matching, and for direct MCP calls using each thread's sandbox working directory despite forged caller metadata.

GitOrigin-RevId: d7f78ea92163ec0ee9311f68ef17e87a6694b13b

2026-11-14 01:54:53 +00:00

..

bin

Add managed enforcement of DELETE journaling on NFS (#57225)

2026-10-26 20:10:45 +00:00

debug_sandbox

Load cloud config for sandbox and remote exec-server commands (#57270)

2026-10-26 21:31:28 +00:00

desktop_app

Use descriptor-safe helpers for executable test fixtures (#50018)

2026-10-01 15:57:03 +00:00

doctor

Encapsulate thread metadata construction (#60524)

2026-11-10 04:56:49 +00:00

snapshots

Release MCP OAuth read locks before keyring access (#61401)

2026-11-13 23:15:54 +00:00

app_cmd.rs

Support ChatGPT-branded Desktop app builds (#33901)

2026-07-17 20:46:18 +00:00

cloud_config.rs

Integrate config-server policies with startup and authentication (#57175)

2026-10-26 18:14:57 +00:00

config_override_args_tests.rs

Preserve config overrides across CLI subcommand boundaries (#56022)

2026-10-22 00:07:50 +00:00

config_override_args.rs

Add a standalone codex-exec-server executable (#57589)

2026-10-27 23:13:53 +00:00

daemon_install_tests.rs

Allow daemon updates to restore pinned packages to latest stable (#45780)

2026-09-15 19:51:06 +00:00

daemon_install.rs

Allow daemon updates to restore pinned packages to latest stable (#45780)

2026-09-15 19:51:06 +00:00

daemon_telemetry.rs

Record daemon startup and update telemetry with consent handling (#46126)

2026-09-17 05:26:45 +00:00

daemon_update_tests.rs

Run package updates outside the project on non-Windows platforms (#58403)

2026-10-30 18:12:10 +00:00

debug_sandbox.rs

Add opt-in transparent TCP routing for Linux sandboxes (#61372)

2026-11-13 20:24:37 +00:00

doctor.rs

Fall back to HTTP immediately for oversized WebSocket requests (#60840)

2026-11-11 18:58:21 +00:00

exec_args_tests.rs

Add per-turn Cyber access program selection to exec and the SDK (#49939)

2026-10-01 08:57:53 +00:00

exec_server_args_tests.rs

Add a standalone codex-exec-server executable (#57589)

2026-10-27 23:13:53 +00:00

exit_status.rs

feat: experimental env var: CODEX_SANDBOX_NETWORK_DISABLED (#879)

2025-05-09 18:29:34 -07:00

git_credential.rs

Add a Git credential helper for existing Codex logins (#60746)

2026-11-11 07:12:23 +00:00

lib.rs

Add opt-in transparent TCP routing for Linux sandboxes (#61372)

2026-11-13 20:24:37 +00:00

login_storage_tests.rs

Release MCP OAuth read locks before keyring access (#61401)

2026-11-13 23:15:54 +00:00

login.rs

Integrate config-server policies with startup and authentication (#57175)

2026-10-26 18:14:57 +00:00

main.rs

Add process-local launch directories for shared MCP servers (#61444)

2026-11-14 01:54:53 +00:00

marketplace_cmd.rs

Apply runtime authentication to realtime connections (#60003)

2026-11-06 22:27:23 +00:00

mcp_cmd_tests.rs

Enforce application network policy in standalone MCP commands (#52215)

2026-10-08 18:22:39 +00:00

mcp_cmd.rs

Clarify removal scope for profile MCP servers (#61357)

2026-11-13 18:52:41 +00:00

mcp_login_tests.rs

Add manual callback input to MCP OAuth login (#44629)

2026-09-10 19:51:52 +00:00

mcp_login.rs

Support client secrets for pre-registered MCP OAuth clients (#47891)

2026-09-24 17:26:18 +00:00

migrate_nfs_db.rs

Report when NFS database migration finds no databases (#57357)

2026-10-27 04:46:24 +00:00

migrate_rollouts.rs

Report thread storage changes after rollout migration (#38579)

2026-08-14 13:40:35 +00:00

plugin_cmd_tests.rs

Handle broken pipes gracefully in plugin list output (#53109)

2026-10-11 12:38:29 +00:00

plugin_cmd.rs

Apply runtime authentication to realtime connections (#60003)

2026-11-06 22:27:23 +00:00

queue_cmd.rs

Reject unsupported options for codex queue (#57273)

2026-10-26 21:37:03 +00:00

remote_control_cmd.rs

Restore the daemon auto-start feature flag (#59447)

2026-11-04 16:46:21 +00:00

sandbox_setup.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

sandbox_uninstall.rs

Add a CLI command to uninstall the legacy Windows sandbox (#50437)

2026-10-02 21:51:46 +00:00

state_db_recovery.rs

Classify SQLite corruption using typed error codes (#49710)

2026-09-30 19:00:00 +00:00

wsl_paths.rs

[codex] reduce module visibility (#16978)

2026-04-07 08:03:35 -07:00