iceweasel-oai 2013e04354 Preserve filesystem permission path conventions (#39084) ...

## Why

Filesystem permission paths can use a convention that differs from the host
running Codex. Converting them immediately to native absolute paths can change
the meaning of ambiguous paths such as `/C:/secret` or Windows UNC paths.

## What changed

- Store literal filesystem permission paths as `PathUri` values through the
  runtime policy and execution protocol.
- Keep legacy string-based serialization at explicit protocol boundaries and
  reject conversions that cannot be represented losslessly.
- Encode native paths as opaque URIs when a normal file URI would imply the
  wrong path convention.

## Testing

Added coverage for cross-platform and ambiguous path round trips, UNC path
variants, permission-profile serialization, and deny-policy enforcement.

GitOrigin-RevId: 5247713796d1f2bb4e02f94eb9fc82d4698060f0

2026-08-17 21:49:30 +00:00

..

absolute-path

Support execution-host context when resolving cloud config (#38086)

2026-08-11 23:31:26 +00:00

approval-presets

tui: pass active permission profiles through app commands (#22891)

2026-05-15 22:42:35 +00:00

audio

Add durable user-message queue dispatch (#37204)

2026-08-06 03:11:42 +00:00

cache

Disable empty Cargo test targets (#21584)

2026-05-07 15:44:17 -07:00

cargo-bin

build: run buildifier from just fmt (#28125)

2026-06-13 21:43:39 -07:00

cli

Add an --approve-for-me CLI flag (#36373)

2026-07-31 18:26:04 +00:00

elapsed

Disable empty Cargo test targets (#21584)

2026-05-07 15:44:17 -07:00

fuzzy-match

Disable empty Cargo test targets (#21584)

2026-05-07 15:44:17 -07:00

home-dir

Disable empty Cargo test targets (#21584)

2026-05-07 15:44:17 -07:00

image

Include node_repl images in Guardian review evidence (#38454)

2026-08-13 23:29:52 +00:00

json-to-toml

Disable empty Cargo test targets (#21584)

2026-05-07 15:44:17 -07:00

oss

Route Ollama through the shared HTTP client (#36078)

2026-07-30 04:26:36 +00:00

output-truncation

Preserve audio across history and tool outputs (#34385)

2026-07-20 17:36:44 +00:00

path-uri

Preserve filesystem permission path conventions (#39084)

2026-08-17 21:49:30 +00:00

path-utils

Avoid redundant filesystem probes (#36393)

2026-07-31 21:37:56 +00:00

plugins

Remove obsolete plugin skill discovery helpers (#37832)

2026-08-10 14:25:13 +00:00

pty

Support sandboxed file streaming in exec-server (#38356)

2026-08-13 11:11:26 +00:00

readiness

[codex] Remove async_trait from first-party code (#27475)

2026-06-11 18:16:39 -07:00

rustls-provider

Use aws-lc-rs for rustls crypto provider (#27706)

2026-06-15 11:32:13 -07:00

sandbox-summary

Remove unused Rust helpers (#34345)

2026-07-20 13:45:29 +00:00

sleep-inhibitor

Keep feature tests focused on behavior (#33864)

2026-07-17 16:17:29 +00:00

stream-parser

Disable empty Cargo test targets (#21584)

2026-05-07 15:44:17 -07:00

string

Disable empty Cargo test targets (#21584)

2026-05-07 15:44:17 -07:00

template

Disable empty Cargo test targets (#21584)

2026-05-07 15:44:17 -07:00