mirror of
https://github.com/openai/codex.git
synced 2026-04-29 02:41:12 +03:00
3429de21b3
## Description
Introduced `ExternalSandbox` policy to cover use case when sandbox
defined by outside environment, effectively it translates to
`SandboxMode#DangerFullAccess` for file system (since sandbox configured
on container level) and configurable `network_access` (either Restricted
or Enabled by outside environment).
as example you can configure `ExternalSandbox` policy as part of
`sendUserTurn` v1 app_server API:
```
{
"conversationId": <id>,
"cwd": <cwd>,
"approvalPolicy": "never",
"sandboxPolicy": {
"type": ""external-sandbox",
"network_access": "enabled"/"restricted"
},
"model": <model>,
"effort": <effort>,
....
}
```
58 lines
1.8 KiB
Rust
58 lines
1.8 KiB
Rust
use anyhow::Result;
|
|
pub use codex_protocol::protocol::SandboxPolicy;
|
|
|
|
pub fn parse_policy(value: &str) -> Result<SandboxPolicy> {
|
|
match value {
|
|
"read-only" => Ok(SandboxPolicy::ReadOnly),
|
|
"workspace-write" => Ok(SandboxPolicy::new_workspace_write_policy()),
|
|
"danger-full-access" | "external-sandbox" => anyhow::bail!(
|
|
"DangerFullAccess and ExternalSandbox are not supported for sandboxing"
|
|
),
|
|
other => {
|
|
let parsed: SandboxPolicy = serde_json::from_str(other)?;
|
|
if matches!(
|
|
parsed,
|
|
SandboxPolicy::DangerFullAccess | SandboxPolicy::ExternalSandbox { .. }
|
|
) {
|
|
anyhow::bail!(
|
|
"DangerFullAccess and ExternalSandbox are not supported for sandboxing"
|
|
);
|
|
}
|
|
Ok(parsed)
|
|
}
|
|
}
|
|
}
|
|
|
|
#[cfg(test)]
|
|
mod tests {
|
|
use super::*;
|
|
use pretty_assertions::assert_eq;
|
|
|
|
#[test]
|
|
fn rejects_external_sandbox_preset() {
|
|
let err = parse_policy("external-sandbox").unwrap_err();
|
|
assert!(err
|
|
.to_string()
|
|
.contains("DangerFullAccess and ExternalSandbox are not supported"));
|
|
}
|
|
|
|
#[test]
|
|
fn rejects_external_sandbox_json() {
|
|
let payload = serde_json::to_string(
|
|
&codex_protocol::protocol::SandboxPolicy::ExternalSandbox {
|
|
network_access: codex_protocol::protocol::NetworkAccess::Enabled,
|
|
},
|
|
)
|
|
.unwrap();
|
|
let err = parse_policy(&payload).unwrap_err();
|
|
assert!(err
|
|
.to_string()
|
|
.contains("DangerFullAccess and ExternalSandbox are not supported"));
|
|
}
|
|
|
|
#[test]
|
|
fn parses_read_only_policy() {
|
|
assert_eq!(parse_policy("read-only").unwrap(), SandboxPolicy::ReadOnly);
|
|
}
|
|
}
|