starr-openai d626dc3895 Run exec-server fs operations through sandbox helper (#17294) ...

## Summary
- run exec-server filesystem RPCs requiring sandboxing through a
`codex-fs` arg0 helper over stdin/stdout
- keep direct local filesystem execution for `DangerFullAccess` and
external sandbox policies
- remove the standalone exec-server binary path in favor of top-level
arg0 dispatch/runtime paths
- add sandbox escape regression coverage for local and remote filesystem
paths

## Validation
- `just fmt`
- `git diff --check`
- remote devbox: `cd codex-rs && bazel test --bes_backend=
--bes_results_url= //codex-rs/exec-server:all` (6/6 passed)

---------

Co-authored-by: Codex <noreply@openai.com>

2026-04-12 18:36:03 -07:00

..

app

representing guardian review timeouts in protocol types (#17381)

2026-04-10 20:02:33 -07:00

bin

…

bottom_pane

Remove context status-line meter (#17420)

2026-04-12 15:42:09 -07:00

chatwidget

Expose instruction sources (AGENTS.md) via app server (#17506)

2026-04-12 15:50:12 -07:00

exec_cell

[codex] Show ctrl + t hint on truncated exec output in TUI (#17076)

2026-04-09 11:01:30 -07:00

history_cell

[codex] Improve hook status rendering (#17266)

2026-04-10 14:05:47 -07:00

notifications

Support Warp for OSC 9 notifications (#17174)

2026-04-08 18:49:31 -07:00

onboarding

TUI: enforce core boundary (#17399)

2026-04-10 20:25:31 -07:00

public_widgets

[codex] reduce module visibility (#16978)

2026-04-07 08:03:35 -07:00

render

[codex] reduce module visibility (#16978)

2026-04-07 08:03:35 -07:00

snapshots

[codex] Show ctrl + t hint on truncated exec output in TUI (#17076)

2026-04-09 11:01:30 -07:00

status

Expose instruction sources (AGENTS.md) via app server (#17506)

2026-04-12 15:50:12 -07:00

streaming

…

tui

…

additional_dirs.rs

…

app_backtrack.rs

feat(tui): Ctrl+O copy hotkey and harden copy-as-markdown behavior (#16966)

2026-04-09 18:10:38 -03:00

app_command.rs

Revert "Option to Notify Workspace Owner When Usage Limit is Reached" (#17391)

2026-04-10 23:33:13 +00:00

app_event_sender.rs

…

app_event.rs

Pass turn id with feedback uploads (#17314)

2026-04-11 00:23:50 -07:00

app_server_approval_conversions.rs

…

app_server_session.rs

Expose instruction sources (AGENTS.md) via app server (#17506)

2026-04-12 15:50:12 -07:00

app.rs

Expose instruction sources (AGENTS.md) via app server (#17506)

2026-04-12 15:50:12 -07:00

ascii_animation.rs

…

audio_device.rs

TUI: enforce core boundary (#17399)

2026-04-10 20:25:31 -07:00

chatwidget.rs

Expose instruction sources (AGENTS.md) via app server (#17506)

2026-04-12 15:50:12 -07:00

cli.rs

…

clipboard_copy.rs

feat(tui): Ctrl+O copy hotkey and harden copy-as-markdown behavior (#16966)

2026-04-09 18:10:38 -03:00

clipboard_paste.rs

…

collaboration_modes.rs

…

color.rs

…

custom_terminal.rs

…

cwd_prompt.rs

…

debug_config.rs

TUI: enforce core boundary (#17399)

2026-04-10 20:25:31 -07:00

diff_render.rs

…

exec_command.rs

…

external_editor.rs

…

file_search.rs

…

frames.rs

…

get_git_diff.rs

…

history_cell.rs

TUI: enforce core boundary (#17399)

2026-04-10 20:25:31 -07:00

insert_history.rs

…

key_hint.rs

…

lib.rs

Run exec-server fs operations through sandbox helper (#17294)

2026-04-12 18:36:03 -07:00

line_truncation.rs

…

live_wrap.rs

…

local_chatgpt_auth.rs

Refactor config types into a separate crate (#16962)

2026-04-07 00:32:41 +00:00

main.rs

Restore codex-tui resume hint on exit (#17415)

2026-04-11 15:46:54 -07:00

markdown_render_tests.rs

(tui): Decode percent-escaped bare local file links (#16810)

2026-04-06 08:52:18 -07:00

markdown_render.rs

(tui): Decode percent-escaped bare local file links (#16810)

2026-04-06 08:52:18 -07:00

markdown_stream.rs

…

markdown.rs

…

mention_codec.rs

TUI: enforce core boundary (#17399)

2026-04-10 20:25:31 -07:00

model_catalog.rs

…

model_migration.rs

…

multi_agents.rs

…

oss_selection.rs

TUI: enforce core boundary (#17399)

2026-04-10 20:25:31 -07:00

pager_overlay.rs

…

resume_picker.rs

Fix thread/list cwd filtering for Windows verbatim paths (#17414)

2026-04-10 23:08:02 -07:00

selection_list.rs

…

session_log.rs

TUI: enforce core boundary (#17399)

2026-04-10 20:25:31 -07:00

shimmer.rs

…

skills_helpers.rs

TUI: enforce core boundary (#17399)

2026-04-10 20:25:31 -07:00

slash_command.rs

feat(tui): Ctrl+O copy hotkey and harden copy-as-markdown behavior (#16966)

2026-04-09 18:10:38 -03:00

status_indicator_widget.rs

…

style.rs

…

terminal_palette.rs

…

terminal_title.rs

…

test_backend.rs

…

test_support.rs

[codex] Migrate apply_patch to executor filesystem (#17027)

2026-04-07 21:20:22 +00:00

text_formatting.rs

…

theme_picker.rs

…

tooltips.rs

Support prolite plan type (#17419)

2026-04-11 13:58:16 -07:00

tui.rs

Add TUI notification condition config (#17175)

2026-04-08 21:50:02 -07:00

ui_consts.rs

…

update_action.rs

…

update_prompt.rs

TUI: enforce core boundary (#17399)

2026-04-10 20:25:31 -07:00

updates.rs

TUI: enforce core boundary (#17399)

2026-04-10 20:25:31 -07:00

version.rs

…

voice.rs

TUI: enforce core boundary (#17399)

2026-04-10 20:25:31 -07:00

wrapping.rs

…