viyatb-oai e99e8e4a6b fix: follow up on linux sandbox review nits (#14440) ...

## Summary
- address the follow-up review nits from #13996 in a separate PR
- make the approvals test command a raw string and keep the
managed-network path using env proxy routing
- inline `--apply-seccomp-then-exec` in the Linux sandbox inner command
builder
- remove the bubblewrap-specific sandbox metric tag path and drop the
`use_legacy_landlock` shim from `sandbox_tag`/`TurnMetadataState::new`
- restore the `Feature` import that `origin/main` currently still needs
in `connectors.rs`

## Testing
- `cargo test -p codex-linux-sandbox`
- focused `codex-core` tests were rerun/started, but the final
verification pass was interrupted when I pushed at request

2026-03-11 23:59:50 -07:00

..

snapshots

Defer initial context insertion until the first turn (#14313)

2026-03-11 12:33:10 -07:00

abort_tasks.rs

…

agent_jobs.rs

Split spawn_csv from multi_agent (#14282)

2026-03-11 12:33:09 -07:00

agent_websocket.rs

Stabilize websocket response.failed error delivery (#14017)

2026-03-11 12:33:09 -07:00

apply_patch_cli.rs

…

approvals.rs

fix: follow up on linux sandbox review nits (#14440)

2026-03-11 23:59:50 -07:00

auth_refresh.rs

…

cli_stream.rs

…

client_websockets.rs

Responses: set x-client-request-id as convesration_id when talking to responses (#14312)

2026-03-11 12:33:10 -07:00

client.rs

feat: search_tool migrate to bring you own tool of Responses API (#14274)

2026-03-11 17:51:51 -07:00

code_mode.rs

Support waiting for code_mode sessions (#14295)

2026-03-11 23:13:54 -07:00

codex_delegate.rs

…

collaboration_instructions.rs

Defer initial context insertion until the first turn (#14313)

2026-03-11 12:33:10 -07:00

compact_remote.rs

Defer initial context insertion until the first turn (#14313)

2026-03-11 12:33:10 -07:00

compact_resume_fork.rs

feat(app-server): propagate traces across tasks and core ops (#14387)

2026-03-11 20:18:31 -07:00

compact.rs

…

deprecation_notice.rs

…

exec_policy.rs

…

exec.rs

…

fork_thread.rs

feat(app-server): propagate traces across tasks and core ops (#14387)

2026-03-11 20:18:31 -07:00

grep_files.rs

…

hierarchical_agents.rs

…

image_rollout.rs

…

items.rs

unifying all image saves to /tmp to bug-proof (#14149)

2026-03-11 12:33:08 -07:00

js_repl.rs

Add js_repl cwd and homeDir helpers (#14385)

2026-03-11 14:44:44 -07:00

json_result.rs

…

list_dir.rs

…

live_cli.rs

…

live_reload.rs

…

memories.rs

…

mod.rs

spawn prompt (#14362)

2026-03-11 12:33:10 -07:00

model_info_overrides.rs

…

model_overrides.rs

…

model_switching.rs

…

model_visible_layout.rs

…

models_cache_ttl.rs

…

models_etag_responses.rs

…

otel.rs

fix(core) patch otel test (#14014)

2026-03-08 19:06:30 -07:00

override_updates.rs

…

pending_input.rs

…

permissions_messages.rs

feat(app-server): propagate traces across tasks and core ops (#14387)

2026-03-11 20:18:31 -07:00

personality_migration.rs

…

personality.rs

Defer initial context insertion until the first turn (#14313)

2026-03-11 12:33:10 -07:00

plugins.rs

feat: search_tool migrate to bring you own tool of Responses API (#14274)

2026-03-11 17:51:51 -07:00

prompt_caching.rs

…

quota_exceeded.rs

…

read_file.rs

…

realtime_conversation.rs

Use realtime transcript for handoff context (#14132)

2026-03-09 22:30:03 -07:00

remote_models.rs

…

request_compression.rs

…

request_permissions_tool.rs

fix(core) RequestPermissions + ApplyPatch (#14055)

2026-03-09 16:11:19 -07:00

request_permissions.rs

feat(core) Persist request_permission data across turns (#14009)

2026-03-09 14:36:38 -07:00

request_user_input.rs

…

resume_warning.rs

feat(app-server): propagate traces across tasks and core ops (#14387)

2026-03-11 20:18:31 -07:00

resume.rs

Stabilize resumed rollout messages (#14060)

2026-03-09 11:48:13 -07:00

review.rs

…

rmcp_client.rs

Stabilize RMCP streamable HTTP readiness tests (#13880)

2026-03-09 19:52:55 +00:00

rollout_list_find.rs

…

safety_check_downgrade.rs

…

search_tool.rs

feat: search_tool migrate to bring you own tool of Responses API (#14274)

2026-03-11 17:51:51 -07:00

seatbelt.rs

…

shell_command.rs

fix(ci) Faster shell_command::unicode_output test (#14114)

2026-03-09 19:09:56 +00:00

shell_serialization.rs

…

shell_snapshot.rs

…

skill_approval.rs

chore: add a separate reject-policy flag for skill approvals (#14271)

2026-03-11 12:33:09 -07:00

skills.rs

…

spawn_agent_description.rs

Clarify spawn agent authorization (#14432)

2026-03-11 23:03:07 -07:00

sqlite_state.rs

…

stream_error_allows_next_turn.rs

…

stream_no_completed.rs

Stabilize incomplete SSE retry test (#13879)

2026-03-09 22:34:44 -07:00

subagent_notifications.rs

Clarify locked role settings in spawn prompt (#14283)

2026-03-11 12:33:10 -07:00

text_encoding_fix.rs

…

tool_harness.rs

…

tool_parallelism.rs

…

tools.rs

…

truncation.rs

…

turn_state.rs

Stabilize websocket response.failed error delivery (#14017)

2026-03-11 12:33:09 -07:00

undo.rs

…

unified_exec.rs

…

unstable_features_warning.rs

feat(app-server): propagate traces across tasks and core ops (#14387)

2026-03-11 20:18:31 -07:00

user_notification.rs

…

user_shell_cmd.rs

…

view_image.rs

Let models opt into original image detail (#14175)

2026-03-11 15:25:07 -07:00

web_search.rs

…

websocket_fallback.rs

…