mirror of
https://github.com/openai/codex.git
synced 2026-09-20 12:47:38 +00:00
## Why Workspace paths from the client configuration belong to the client host. Sending them to a remote app server can override the server's workspace roots. ## What changed - Omit client-configured `runtimeWorkspaceRoots` from remote start, resume, and fork requests so the server resolves defaults or restores saved roots. - Preserve server-provided roots when forking an active session or side conversation, including after reloading client configuration. - Reject `--add-dir` and `sandbox_workspace_write.writable_roots` command-line overrides with `--remote` before connecting, directing users to configure additional roots on the server. ## Testing Add regression coverage for remote workspace roots across start, turn, resume, and fork operations; active-session forks after configuration reloads; and embedded requests retaining explicit roots. CLI tests cover rejected root overrides and continued acceptance of network-access overrides. GitOrigin-RevId: b87ea6037d197db68e25a1a8610d693f6aa13caf