codex/codex-rs/exec-server/src at 61b08f101142f02e0f79e62be601a3b96a3415d0 - codex - Gitea: Git with a cup of tea

openai/codex

mirror of https://github.com/openai/codex.git synced 2026-09-20 12:47:38 +00:00

Files

History

Sean Huang 3724dc8361 Share platform identity across path, network, and sandbox configuration (#46334 )

## What changed

- Add `Platform` to `codex-utils-path-uri` with metadata parsing, native platform detection, and path convention mapping. Preserve missing or unrecognized metadata as `Unknown`.
- Replace `NetworkProxyExecutorOs` with the shared type and keep executor-specific socket path validation in the network proxy.
- Extract `effective_sandbox_mode` with explicit platform and Windows sandbox level inputs, preserving the native Windows fallback from `workspace-write` to `read-only` when the sandbox is disabled.

## Testing

Add unit tests for platform metadata, path conventions, native platform detection, and sandbox mode selection across platforms and Windows sandbox levels.

GitOrigin-RevId: 4fe0972e3a91040e35f2a6dfa5bcdf6c9a29be88

2026-09-18 00:51:34 +00:00

..

Support trusted headers for remote exec WebSockets (#42606 )

2026-09-03 20:01:07 +00:00

Support trusted headers for remote exec WebSockets (#42606 )

2026-09-03 20:01:07 +00:00

Improve no-follow filesystem behavior across platforms (#39666 )

2026-08-20 08:32:11 +00:00

Bound Noise handshakes by the exec server initialization timeout (#42623 )

2026-09-03 22:16:19 +00:00

Propagate request trace context through exec-server relays (#38690 )

2026-08-15 03:00:35 +00:00

Add direct SigV4 transport to exec-server (#42781 )

2026-09-04 14:49:46 +00:00

Route filesystem reads and writes by their own sandbox permissions (#46122 )

2026-09-17 05:09:03 +00:00

arg0_exec_helper.rs

Preserve custom arg0 for sandboxed exec-server processes (#34497 )

2026-07-21 08:59:41 +00:00

capability_discovery_cache.rs

Recover capability discovery after executor disconnects (#38420 )

2026-08-13 19:14:30 +00:00

capability_discovery.rs

Route filesystem reads and writes by their own sandbox permissions (#46122 )

2026-09-17 05:09:03 +00:00

client_api.rs

Support trusted headers for remote exec WebSockets (#42606 )

2026-09-03 20:01:07 +00:00

client_recovery_tests.rs

Retry transient registry failures during initial exec connection (#39777 )

2026-08-20 18:48:17 +00:00

client_recovery.rs

Handle pending network reviews after process completion (#42746 )

2026-09-04 12:08:02 +00:00

client_refresh_tests.rs

Add attributed exec process lifecycle telemetry (#42373 )

2026-09-02 21:58:58 +00:00

client_refresh.rs

Add explicit remote executor connection refresh (#40710 )

2026-08-25 21:23:17 +00:00

client_telemetry.rs

Add client-side exec-server RPC attempt metrics (#42883 )

2026-09-04 23:06:00 +00:00

client_transport_tests.rs

Bound Noise handshakes by the exec server initialization timeout (#42623 )

2026-09-03 22:16:19 +00:00

client_transport.rs

Add direct SigV4 transport to exec-server (#42781 )

2026-09-04 14:49:46 +00:00

client.rs

Preserve filesystem sandbox policy context when the cwd disappears (#46112 )

2026-09-17 04:37:54 +00:00

connection.rs

Trace exec-server requests from receipt through completion (#39098 )

2026-08-17 22:53:55 +00:00

environment_bootstrap_tests.rs

Route exec-server WebSockets through configured proxies (#35056 )

2026-07-24 00:16:42 +00:00

environment_bootstrap.rs

Route exec-server WebSockets through configured proxies (#35056 )

2026-07-24 00:16:42 +00:00

environment_config.rs

Preserve MCP compatibility with older executors (#39979 )

2026-08-21 17:21:30 +00:00

environment_provider.rs

Route exec-server WebSockets through configured proxies (#35056 )

2026-07-24 00:16:42 +00:00

environment_registry_tests.rs

feat(exec-server): add Noise rendezvous environment (#28774 )

2026-06-17 17:20:53 -07:00

environment_registry.rs

feat(exec-server): add Noise rendezvous environment (#28774 )

2026-06-17 17:20:53 -07:00

environment_toml.rs

Support trusted headers for remote exec WebSockets (#42606 )

2026-09-03 20:01:07 +00:00

environment.rs

Add filesystem accessors bound to environment permissions (#46268 )

2026-09-17 17:59:19 +00:00

file_read.rs

[codex] exec-server: stream files in chunks (#28354 )

2026-06-16 09:50:55 -07:00

forward_tests.rs

Add attributed exec process lifecycle telemetry (#42373 )

2026-09-02 21:58:58 +00:00

forward.rs

Add exec-server forwarding mode (#39249 )

2026-08-18 18:15:21 +00:00

fs_helper_main.rs

Support sandboxed file streaming in exec-server (#38356 )

2026-08-13 11:11:26 +00:00

fs_helper.rs

Batch sandboxed capability root discovery (#40443 )

2026-08-24 17:39:16 +00:00

fs_sandbox_windows_tests.rs

Harden Windows sandbox helper cleanup (#40808 )

2026-08-26 06:02:56 +00:00

fs_sandbox.rs

Preserve filesystem sandbox policy context when the cwd disappears (#46112 )

2026-09-17 04:37:54 +00:00

lib.rs

Add filesystem accessors bound to environment permissions (#46268 )

2026-09-17 17:59:19 +00:00

local_file_system_path_uri_tests.rs

Harden unsandboxed patch filesystem access (#39659 )

2026-08-20 08:10:08 +00:00

local_file_system.rs

Route filesystem reads and writes by their own sandbox permissions (#46122 )

2026-09-17 05:09:03 +00:00

local_process.rs

Share platform identity across path, network, and sandbox configuration (#46334 )

2026-09-18 00:51:34 +00:00

network_policy_decisions_tests.rs

Handle exec-server network policy requests in the client (#35359 )

2026-07-25 16:03:00 +00:00

network_policy_decisions.rs

Handle exec-server network policy requests in the client (#35359 )

2026-07-25 16:03:00 +00:00

noise_channel_tests.rs

exec-server: default remote transport to Noise (#26245 )

2026-06-15 17:39:00 -07:00

noise_channel.rs

Size Noise handshake buffers to their messages (#34544 )

2026-07-21 13:39:33 +00:00

process_sandbox_tests.rs

Preserve filesystem sandbox policy context when the cwd disappears (#46112 )

2026-09-17 04:37:54 +00:00

process_sandbox.rs

Share platform identity across path, network, and sandbox configuration (#46334 )

2026-09-18 00:51:34 +00:00

process_telemetry.rs

Add attributed exec process lifecycle telemetry (#42373 )

2026-09-02 21:58:58 +00:00

process.rs

Wire the Windows MXC sandbox into command execution (#45176 )

2026-09-13 06:07:03 +00:00

regular_file_tests.rs

Add a symlink-safe reader for sensitive files (#39200 )

2026-08-18 13:36:16 +00:00

regular_file.rs

Harden unsandboxed patch filesystem access (#39659 )

2026-08-20 08:10:08 +00:00

relay_noise_tests.rs

Keep Noise relay streams alive after repeated handshake failures (#46031 )

2026-09-16 21:21:45 +00:00

relay_proto.rs

exec-server: default remote transport to Noise (#26245 )

2026-06-15 17:39:00 -07:00

relay.rs

Keep Noise relay streams alive after repeated handshake failures (#46031 )

2026-09-16 21:21:45 +00:00

remote_file_stream.rs

Preserve filesystem sandbox policy context when the cwd disappears (#46112 )

2026-09-17 04:37:54 +00:00

remote_file_system_path_uri_tests.rs

Preserve filesystem sandbox policy context when the cwd disappears (#46112 )

2026-09-17 04:37:54 +00:00

remote_file_system.rs

Route filesystem reads and writes by their own sandbox permissions (#46122 )

2026-09-17 05:09:03 +00:00

remote_process.rs

Record normalized sandbox violation events (#36207 )

2026-07-30 19:23:33 +00:00

remote.rs

Add direct SigV4 transport to exec-server (#42781 )

2026-09-04 14:49:46 +00:00

resolved_capability.rs

Remove unused Rust helpers (#34345 )

2026-07-20 13:45:29 +00:00

rpc_client_metrics_tests.rs

Add client-side exec-server RPC attempt metrics (#42883 )

2026-09-04 23:06:00 +00:00

rpc_server_requests_tests.rs

Enable exec-server network policy callbacks (#34770 )

2026-07-22 15:22:21 +00:00

rpc_server_requests.rs

Handle exec-server network policy requests in the client (#35359 )

2026-07-25 16:03:00 +00:00

rpc.rs

Add client-side exec-server RPC attempt metrics (#42883 )

2026-09-04 23:06:00 +00:00

runtime_paths.rs

Allow trusted symlinks beneath CODEX_HOME on macOS (#42716 )

2026-09-04 10:12:03 +00:00

sandbox_selection.rs

Enable MXC selection through Windows sandbox configuration (#46271 )

2026-09-17 18:20:28 +00:00

sandboxed_file_open.rs

Harden Windows sandbox helper cleanup (#40808 )

2026-08-26 06:02:56 +00:00

sandboxed_file_system_path_uri_tests.rs

Route filesystem reads and writes by their own sandbox permissions (#46122 )

2026-09-17 05:09:03 +00:00

sandboxed_file_system.rs

Route filesystem reads and writes by their own sandbox permissions (#46122 )

2026-09-17 05:09:03 +00:00

server.rs

Expose a stable executor build identity in environment metadata (#43513 )

2026-09-07 16:55:06 +00:00

shell_snapshot_tests.rs

Preserve complete shell snapshot exports through filtering and replay (#43907 )

2026-09-08 20:41:01 +00:00

shell_snapshot.rs

Preserve complete shell snapshot exports through filtering and replay (#43907 )

2026-09-08 20:41:01 +00:00

telemetry.rs

Measure total exec-server request duration including queueing (#44207 )

2026-09-09 17:03:57 +00:00

trace_context_tests.rs

[codex] Observe remote exec-server lifecycle (#27470 )

2026-06-25 13:42:40 -07:00

trace_context.rs

Propagate caller metadata to rendezvous connections (#39073 )

2026-08-17 20:36:10 +00:00

websocket_pong_watchdog_tests.rs

[codex] bound Rendezvous WebSocket liveness (#30643 )

2026-07-01 14:15:34 -07:00

websocket_pong_watchdog.rs

[codex] bound Rendezvous WebSocket liveness (#30643 )

2026-07-01 14:15:34 -07:00