Derive remote exec env on the exec-server

Add an exec-server env policy contract and send only the env overlay needed for runtime/sandbox transforms when Core starts remote unified-exec processes. Keep local process startup on the existing exact-env path, and share the shell-environment-policy builder from codex-config so the executor can apply the same inherit/filter/set/include rules against its own process environment.

Co-authored-by: Codex <noreply@openai.com>
This commit is contained in:
jif-oai
2026-04-09 12:29:15 +01:00
parent 8f705b0702
commit 3040717ae2
18 changed files with 352 additions and 101 deletions

1
codex-rs/Cargo.lock generated
View File

@@ -2097,6 +2097,7 @@ dependencies = [
"base64 0.22.1",
"clap",
"codex-app-server-protocol",
"codex-config",
"codex-protocol",
"codex-utils-absolute-path",
"codex-utils-cargo-bin",