mirror of
https://github.com/openai/codex.git
synced 2026-09-11 20:36:49 +00:00
ce254df05a
## What changed Add `policy::build_request` to `codex-rs/mxc-sandbox` to translate `MxcCommand` permissions into native MXC execution requests. Preserve filesystem denies, read-only carveouts, and protected metadata paths, and resolve overlapping grants using canonical path identities. Map network permissions to ingress, egress, and loopback policies; quote arguments for Windows process creation; and disable DACL mutation fallback. Reject unsupported symbolic roots and deny globs, empty commands, relative working directories, and non-Unicode request paths. ## Testing Enable unit tests and add coverage for filesystem grants and carveouts, disabled DACL mutation, deny-glob rejection, relative working directories, and non-Unicode paths. GitOrigin-RevId: 3e647ed5fa932ab9d528eb44a49dd9283ef50481
34 lines
873 B
TOML
34 lines
873 B
TOML
[package]
|
|
name = "codex-mxc-sandbox"
|
|
version.workspace = true
|
|
edition.workspace = true
|
|
license.workspace = true
|
|
|
|
[lib]
|
|
doctest = false
|
|
|
|
[lints]
|
|
workspace = true
|
|
|
|
# This direct dependency pins MXC's transitive ETW dependency for Windows GNU linking.
|
|
[package.metadata.cargo-shear]
|
|
ignored = ["tracelogging"]
|
|
|
|
[dependencies]
|
|
anyhow = { workspace = true }
|
|
codex-protocol = { workspace = true }
|
|
codex-utils-absolute-path = { workspace = true }
|
|
codex-utils-path-uri = { workspace = true }
|
|
thiserror = { workspace = true }
|
|
wxc_common = { workspace = true }
|
|
|
|
[target.'cfg(windows)'.dependencies]
|
|
appcontainer_common = { workspace = true }
|
|
learning_mode_windows = { workspace = true }
|
|
# 1.2.4 imports OneCore_apiset, which the GNU Windows toolchain does not ship.
|
|
tracelogging = "=1.2.3"
|
|
|
|
[dev-dependencies]
|
|
pretty_assertions = { workspace = true }
|
|
tempfile = { workspace = true }
|