mirror of
https://github.com/openai/codex.git
synced 2026-11-14 21:40:39 +00:00
Move lexical scan-bound calculation into `codex_protocol::permissions` and expose `windows_deny_read_glob_scan` with its `WindowsDenyReadGlobScan` result. Have the Windows sandbox resolver use the shared helper, preserving literal scan roots, glob suffixes, and traversal depth limits without filesystem access in the planner. GitOrigin-RevId: 748a12b45f89c6e045e9123c055453ec39c202b1