Michael Bolin 67d24b54ee exec-server: expose arg0 alias root to fs sandbox ...

## Why

The post-merge `rust-ci-full` run for #18999 still failed the Ubuntu remote `suite::remote_env` sandboxed filesystem tests. That run checked out merge commit `ddde50c611e4800cb805f243ed3c50bbafe7d011`, so the arg0 guard lifetime fix was present.

The remaining gap is that the remote exec-server can pass an arg0 alias path such as `codex-linux-sandbox` as a runtime helper, but the sandboxed filesystem helper only added the real Codex binary parent as a readable runtime root. When bubblewrap re-enters Codex through the alias path, the alias directory also has to be visible inside the sandbox.

## What Changed

- Track all helper runtime read roots instead of a single root.
- Add both the real Codex executable parent and the `codex-linux-sandbox` alias parent to sandbox readable roots.
- Add unit coverage for the alias-parent root.

## Verification

- `cargo test -p codex-exec-server`
- `just argument-comment-lint -p codex-exec-server`
- `just fix -p codex-exec-server`

2026-04-22 12:05:22 -07:00

..

client

[1/4] Add executor HTTP request protocol (#18581)

2026-04-21 02:21:08 +00:00

server

fix: fully revert agent identity runtime wiring (#18757)

2026-04-21 14:30:55 -07:00

client_api.rs

feat: move exec-server ownership (#16344)

2026-04-10 14:11:47 +01:00

client.rs

Support multiple managed environments (#18401)

2026-04-21 15:29:35 -07:00

connection.rs

feat: move exec-server ownership (#16344)

2026-04-10 14:11:47 +01:00

environment.rs

Support multiple managed environments (#18401)

2026-04-21 15:29:35 -07:00

file_system.rs

exec-server: expose arg0 alias root to fs sandbox

2026-04-22 12:05:22 -07:00

fs_helper_main.rs

Run exec-server fs operations through sandbox helper (#17294)

2026-04-12 18:36:03 -07:00

fs_helper.rs

[codex] Add symlink flag to fs metadata (#17719)

2026-04-13 17:46:56 -07:00

fs_sandbox.rs

exec-server: expose arg0 alias root to fs sandbox

2026-04-22 12:05:22 -07:00

lib.rs

Support multiple managed environments (#18401)

2026-04-21 15:29:35 -07:00

local_file_system.rs

Fix fs/readDirectory to skip broken symlinks (#17907)

2026-04-15 10:50:22 -07:00

local_process.rs

[3/6] Add pushed exec process events (#18020)

2026-04-17 19:07:43 +00:00

process_id.rs

feat: use ProcessId in exec-server (#15866)

2026-03-26 16:45:36 +01:00

process.rs

[3/6] Add pushed exec process events (#18020)

2026-04-17 19:07:43 +00:00

protocol.rs

[1/4] Add executor HTTP request protocol (#18581)

2026-04-21 02:21:08 +00:00

remote_file_system.rs

exec-server: expose arg0 alias root to fs sandbox

2026-04-22 12:05:22 -07:00

remote_process.rs

Support multiple managed environments (#18401)

2026-04-21 15:29:35 -07:00

rpc.rs

[6/6] Fail exec client operations after disconnect (#18027)

2026-04-20 23:24:06 +00:00

runtime_paths.rs

Run exec-server fs operations through sandbox helper (#17294)

2026-04-12 18:36:03 -07:00

sandboxed_file_system.rs

[codex] Add symlink flag to fs metadata (#17719)

2026-04-13 17:46:56 -07:00

server.rs

Run exec-server fs operations through sandbox helper (#17294)

2026-04-12 18:36:03 -07:00