iceweasel-oai 7a7c188682 Preserve target-native paths in command approvals (#42577) ...

## What changed

- Pass the selected executor's `PathUri` through user command approval requests instead of converting the working directory to a host-native path.
- Make native-path permission helpers explicitly local and require executor-aware permission transforms to receive a `FileSystemSandboxPolicyContext`.
- Cover approved remote commands to verify that the approval request reports the selected remote working directory and execution resumes after approval.

GitOrigin-RevId: 0aa3042f2d7594af6c7d0abf31d7f99cf67d5556

2026-09-03 16:21:10 +00:00

..

client

Add attributed exec process lifecycle telemetry (#42373)

2026-09-02 21:58:58 +00:00

environment

Support host-accepted exec-server WebSockets (#39786)

2026-08-20 19:33:48 +00:00

no_follow

Improve no-follow filesystem behavior across platforms (#39666)

2026-08-20 08:32:11 +00:00

noise_relay

Add attributed exec process lifecycle telemetry (#42373)

2026-09-02 21:58:58 +00:00

proto

Propagate request trace context through exec-server relays (#38690)

2026-08-15 03:00:35 +00:00

remote

Retry confirmed remote registration conflicts (#41219)

2026-08-27 23:24:21 +00:00

server

Add attributed exec process lifecycle telemetry (#42373)

2026-09-02 21:58:58 +00:00

arg0_exec_helper.rs

Preserve custom arg0 for sandboxed exec-server processes (#34497)

2026-07-21 08:59:41 +00:00

capability_discovery_cache.rs

Recover capability discovery after executor disconnects (#38420)

2026-08-13 19:14:30 +00:00

capability_discovery.rs

Harden unsandboxed patch filesystem access (#39659)

2026-08-20 08:10:08 +00:00

client_api.rs

Track provisioned environment state across registration (#37147)

2026-08-05 20:08:41 +00:00

client_recovery_tests.rs

Retry transient registry failures during initial exec connection (#39777)

2026-08-20 18:48:17 +00:00

client_recovery.rs

Recover deferred environments after provisioning failure (#42388)

2026-09-02 23:49:29 +00:00

client_refresh_tests.rs

Add attributed exec process lifecycle telemetry (#42373)

2026-09-02 21:58:58 +00:00

client_refresh.rs

Add explicit remote executor connection refresh (#40710)

2026-08-25 21:23:17 +00:00

client_transport_tests.rs

Add explicit remote executor connection refresh (#40710)

2026-08-25 21:23:17 +00:00

client_transport.rs

Recover deferred environments after provisioning failure (#42388)

2026-09-02 23:49:29 +00:00

client.rs

Recover deferred environments after provisioning failure (#42388)

2026-09-02 23:49:29 +00:00

connection.rs

Trace exec-server requests from receipt through completion (#39098)

2026-08-17 22:53:55 +00:00

environment_bootstrap_tests.rs

Route exec-server WebSockets through configured proxies (#35056)

2026-07-24 00:16:42 +00:00

environment_bootstrap.rs

Route exec-server WebSockets through configured proxies (#35056)

2026-07-24 00:16:42 +00:00

environment_config.rs

Preserve MCP compatibility with older executors (#39979)

2026-08-21 17:21:30 +00:00

environment_provider.rs

Route exec-server WebSockets through configured proxies (#35056)

2026-07-24 00:16:42 +00:00

environment_registry_tests.rs

…

environment_registry.rs

…

environment_toml.rs

Avoid redundant filesystem probes (#36393)

2026-07-31 21:37:56 +00:00

environment.rs

Expose the last accepted environment ready report (#42403)

2026-09-03 01:12:36 +00:00

file_read.rs

…

forward_tests.rs

Add attributed exec process lifecycle telemetry (#42373)

2026-09-02 21:58:58 +00:00

forward.rs

Add exec-server forwarding mode (#39249)

2026-08-18 18:15:21 +00:00

fs_helper_main.rs

Support sandboxed file streaming in exec-server (#38356)

2026-08-13 11:11:26 +00:00

fs_helper.rs

Batch sandboxed capability root discovery (#40443)

2026-08-24 17:39:16 +00:00

fs_sandbox_windows_tests.rs

Harden Windows sandbox helper cleanup (#40808)

2026-08-26 06:02:56 +00:00

fs_sandbox.rs

Preserve target-native paths in command approvals (#42577)

2026-09-03 16:21:10 +00:00

lib.rs

Add attributed exec process lifecycle telemetry (#42373)

2026-09-02 21:58:58 +00:00

local_file_system_path_uri_tests.rs

Harden unsandboxed patch filesystem access (#39659)

2026-08-20 08:10:08 +00:00

local_file_system.rs

Batch sandboxed capability root discovery (#40443)

2026-08-24 17:39:16 +00:00

local_process.rs

Add attributed exec process lifecycle telemetry (#42373)

2026-09-02 21:58:58 +00:00

network_policy_decisions_tests.rs

Handle exec-server network policy requests in the client (#35359)

2026-07-25 16:03:00 +00:00

network_policy_decisions.rs

Handle exec-server network policy requests in the client (#35359)

2026-07-25 16:03:00 +00:00

noise_channel_tests.rs

…

noise_channel.rs

Size Noise handshake buffers to their messages (#34544)

2026-07-21 13:39:33 +00:00

process_sandbox_tests.rs

Add attributed exec process lifecycle telemetry (#42373)

2026-09-02 21:58:58 +00:00

process_sandbox.rs

Add attributed exec process lifecycle telemetry (#42373)

2026-09-02 21:58:58 +00:00

process_telemetry.rs

Add attributed exec process lifecycle telemetry (#42373)

2026-09-02 21:58:58 +00:00

process.rs

Prewarm shell snapshots for eligible turns (#42137)

2026-09-01 21:16:12 +00:00

regular_file_tests.rs

Add a symlink-safe reader for sensitive files (#39200)

2026-08-18 13:36:16 +00:00

regular_file.rs

Harden unsandboxed patch filesystem access (#39659)

2026-08-20 08:10:08 +00:00

relay_noise_tests.rs

Add attributed exec process lifecycle telemetry (#42373)

2026-09-02 21:58:58 +00:00

relay_proto.rs

…

relay.rs

Add attributed exec process lifecycle telemetry (#42373)

2026-09-02 21:58:58 +00:00

remote_file_stream.rs

…

remote_file_system_path_uri_tests.rs

Cache executor metadata from initialization (#40343)

2026-08-24 06:43:07 +00:00

remote_file_system.rs

Require filesystem backends to implement directory walks (#39749)

2026-08-20 17:16:52 +00:00

remote_process.rs

Record normalized sandbox violation events (#36207)

2026-07-30 19:23:33 +00:00

remote.rs

Retry confirmed remote registration conflicts (#41219)

2026-08-27 23:24:21 +00:00

resolved_capability.rs

Remove unused Rust helpers (#34345)

2026-07-20 13:45:29 +00:00

rpc_server_requests_tests.rs

Enable exec-server network policy callbacks (#34770)

2026-07-22 15:22:21 +00:00

rpc_server_requests.rs

Handle exec-server network policy requests in the client (#35359)

2026-07-25 16:03:00 +00:00

rpc.rs

Add attributed exec process lifecycle telemetry (#42373)

2026-09-02 21:58:58 +00:00

runtime_paths.rs

…

sandboxed_file_open.rs

Harden Windows sandbox helper cleanup (#40808)

2026-08-26 06:02:56 +00:00

sandboxed_file_system_path_uri_tests.rs

Harden unsandboxed patch filesystem access (#39659)

2026-08-20 08:10:08 +00:00

sandboxed_file_system.rs

Batch sandboxed capability root discovery (#40443)

2026-08-24 17:39:16 +00:00

server.rs

Add attributed exec process lifecycle telemetry (#42373)

2026-09-02 21:58:58 +00:00

shell_snapshot_tests.rs

Add attributed exec process lifecycle telemetry (#42373)

2026-09-02 21:58:58 +00:00

shell_snapshot.rs

Prewarm shell snapshots for eligible turns (#42137)

2026-09-01 21:16:12 +00:00

telemetry.rs

Add attributed exec process lifecycle telemetry (#42373)

2026-09-02 21:58:58 +00:00

trace_context_tests.rs

[codex] Observe remote exec-server lifecycle (#27470)

2026-06-25 13:42:40 -07:00

trace_context.rs

Propagate caller metadata to rendezvous connections (#39073)

2026-08-17 20:36:10 +00:00

websocket_pong_watchdog_tests.rs

[codex] bound Rendezvous WebSocket liveness (#30643)

2026-07-01 14:15:34 -07:00

websocket_pong_watchdog.rs

[codex] bound Rendezvous WebSocket liveness (#30643)

2026-07-01 14:15:34 -07:00