acrognale-oai db3cb33eca Honor network policy in remote control and recover remote execution (#47410) ...

## What changed

- Route remote-control enrollment, pairing, client management, and WebSocket connections through the authenticated HTTP client factory. Keep policy denials distinct from authentication failures and wait for policy changes before reconnecting.
- Preserve policy denials through exec-server connection failures so later connection attempts and capability discovery can recover. Keep direct executors running through temporary policy outages while rejecting permanent policy failures.
- Build cached HTTP transports on blocking workers, serialize construction, and retain successful builds after callers time out so request deadlines cover queued construction.

## Testing

Add regression coverage for policy recovery during remote startup, direct registration, accepted WebSocket reconnection, and capability discovery; queued transport construction timeouts; and remote-control WebSocket fallback with invalid custom CA files.

GitOrigin-RevId: c81db18e83de957175bb213d165281ac701089dd

2026-09-23 00:48:53 +00:00

..

common

Separate executor sandbox selection from Windows sandbox levels (#45730)

2026-09-15 16:40:06 +00:00

exec_process

Preserve filesystem sandbox policy context when the cwd disappears (#46112)

2026-09-17 04:37:54 +00:00

file_system

Add filesystem accessors bound to environment permissions (#46268)

2026-09-17 17:59:19 +00:00

relay

Retry confirmed remote registration conflicts (#41219)

2026-08-27 23:24:21 +00:00

support

Move relay helpers into exec-server test support (#40712)

2026-08-25 21:31:40 +00:00

unit

Recover deferred environments after provisioning failure (#42388)

2026-09-02 23:49:29 +00:00

accepted_websocket.rs

Honor network policy in remote control and recover remote execution (#47410)

2026-09-23 00:48:53 +00:00

capability_discovery.rs

Preserve filesystem sandbox policy context when the cwd disappears (#46112)

2026-09-17 04:37:54 +00:00

chatgpt_cloudflare_affinity.rs

Add opt-in concurrent exec-server request dispatch (#36987)

2026-08-04 22:28:15 +00:00

deferred_environment.rs

Expose the last accepted environment ready report (#42403)

2026-09-03 01:12:36 +00:00

environment_config.rs

Propagate executor home directories into sandbox contexts (#41204)

2026-08-27 20:44:47 +00:00

environment.rs

Honor network policy in remote control and recover remote execution (#47410)

2026-09-23 00:48:53 +00:00

exec_process.rs

Preserve filesystem sandbox policy context when the cwd disappears (#46112)

2026-09-17 04:37:54 +00:00

file_stream.rs

Preserve filesystem sandbox policy context when the cwd disappears (#46112)

2026-09-17 04:37:54 +00:00

file_system_unix.rs

Preserve filesystem sandbox policy context when the cwd disappears (#46112)

2026-09-17 04:37:54 +00:00

file_system_windows.rs

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

forward.rs

Add attributed exec process lifecycle telemetry (#42373)

2026-09-02 21:58:58 +00:00

health.rs

Expose a stable executor build identity in environment metadata (#43513)

2026-09-07 16:55:06 +00:00

http_client.rs

Cache executor metadata from initialization (#40343)

2026-08-24 06:43:07 +00:00

http_request_logging.rs

Decouple exec-server HTTP from reqwest types (#35059)

2026-07-24 00:53:05 +00:00

http_request.rs

Resolve HTTP MCP bearer tokens in executor environments (#39926)

2026-08-21 12:50:15 +00:00

initialize.rs

Expose a stable executor build identity in environment metadata (#43513)

2026-09-07 16:55:06 +00:00

macos_fs_spawn.rs

Avoid fork when spawning macOS filesystem helpers (#46661)

2026-09-19 15:15:25 +00:00

process.rs

Expose a stable executor build identity in environment metadata (#43513)

2026-09-07 16:55:06 +00:00

relay.rs

Recover deferred environments after provisioning failure (#42388)

2026-09-02 23:49:29 +00:00

selected_capability_roots.rs

Initialize execution environments with the final HTTP policy (#34995)

2026-07-23 19:24:41 +00:00

websocket.rs

[codex] Trace exec-server JSON-RPC requests (#27466)

2026-06-24 12:50:18 -07:00