zm-oai ed59a6c1cd Preserve the CLI MXC preference in executor config reads (#51525) ...

## Why

Executor config reads omitted the startup `features.prefer_mxc` override, so clients could not see the CLI sandbox preference.

## What changed

- Include the explicit CLI `features.prefer_mxc` value in `environmentConfig/read` as a `session-flags` layer, above project config and below legacy managed file and MDM config.
- Retain only this preference from startup overrides.
- Expose `windows_mxc_allowed_by_config` to share MXC eligibility checks after callers resolve the active permission profile.

## Testing

Add CLI and remote executor coverage for preference propagation and filtering, plus a unit test verifying that both legacy managed config sources retain precedence.

GitOrigin-RevId: 5ac6f5257f1e807c2f197dcf5dcb2385cedca0ea

2026-10-07 00:29:04 +00:00

..

exec_server

Reject sandbox-writable bubblewrap executables from PATH (#51211)

2026-10-06 00:58:19 +00:00

snapshots

Preserve validation errors for invalid TUI keybindings (#49910)

2026-10-01 06:59:13 +00:00

app_server_daemon.rs

Use descriptor-safe helpers for executable test fixtures (#50018)

2026-10-01 15:57:03 +00:00

app_server.rs

Support the app-server daemon on Windows (#42405)

2026-09-03 01:26:35 +00:00

cloud_auth.rs

Restrict cloud task credentials to trusted origins (#41403)

2026-08-28 19:44:50 +00:00

cloud_config.rs

Respect config layers when removing plugin marketplaces (#40683)

2026-08-25 19:38:39 +00:00

daemon_startup.rs

Use descriptor-safe helpers for executable test fixtures (#50018)

2026-10-01 15:57:03 +00:00

daemon_telemetry.rs

Track credential storage outcomes and redact sensitive errors (#49384)

2026-09-29 22:24:09 +00:00

debug_clear_memories.rs

Add macOS voice runtime projection (#42204)

2026-09-02 04:52:32 +00:00

debug_models.rs

Add codex debug models to show model catalog (#18625)

2026-04-20 05:42:22 +00:00

delete.rs

Add session delete commands in CLI and TUI (#27476)

2026-06-10 18:04:02 -07:00

doctor_enterprise_network.rs

Report managed filesystem policy in codex doctor (#42821)

2026-09-04 18:23:10 +00:00

doctor_path_safety.rs

Report the configured TUI mode in codex doctor (#50200)

2026-10-02 06:23:25 +00:00

exec_server_websocket_auth.rs

Support bearer tokens for app-server executor connections (#47648)

2026-09-23 20:05:37 +00:00

exec_server.rs

Preserve the CLI MXC preference in executor config reads (#51525)

2026-10-07 00:29:04 +00:00

execpolicy.rs

feat: add justification arg to prefix_rule() in *.rules (#8751)

2026-01-05 21:24:48 +00:00

features.rs

Reject unknown TUI keys in strict config validation (#50525)

2026-10-03 05:16:04 +00:00

login.rs

Enable enterprise MCP sign-in and account-scoped grant cleanup (#49276)

2026-09-29 14:46:33 +00:00

marketplace_add.rs

Add JSON output for plugin subcommands (#26631)

2026-06-05 14:40:31 -05:00

marketplace_remove.rs

Respect config layers when removing plugin marketplaces (#40683)

2026-08-25 19:38:39 +00:00

marketplace_upgrade.rs

Upgrade Git marketplaces from merged configuration (#42149)

2026-09-01 22:37:26 +00:00

mcp_add_remove.rs

Support client secrets for pre-registered MCP OAuth clients (#47891)

2026-09-24 17:26:18 +00:00

mcp_list.rs

Add dynamic HTTP header helpers for MCP servers (#38245)

2026-08-12 20:36:32 +00:00

mcp_login.rs

Support client secrets for pre-registered MCP OAuth clients (#47891)

2026-09-24 17:26:18 +00:00

plugin_cli.rs

Support remote marketplaces in the plugin CLI (#42150)

2026-09-01 22:51:14 +00:00

queue.rs

Use server authentication for explicit remote session commands (#49624)

2026-09-30 13:16:08 +00:00

sandbox_cloud_config.rs

Load cloud-managed profiles for codex sandbox (#35685)

2026-07-27 23:16:37 +00:00

sandbox_network_proxy.rs

Resolve enterprise-managed MCP registrations in the catalog (#45459)

2026-09-14 16:30:00 +00:00

sandbox_tty.rs

Support close-on-exec attachments without changing PTY semantics (#47797)

2026-09-24 09:25:19 +00:00

sandbox_uninstall.rs

Add a CLI command to uninstall the legacy Windows sandbox (#50437)

2026-10-02 21:51:46 +00:00

update.rs

Add codex update command (#19933)

2026-04-27 23:33:59 -07:00

worktree.rs

Use descriptor-safe helpers for executable test fixtures (#50018)

2026-10-01 15:57:03 +00:00