viyatb-oai f705f42ba8 fix: fix fs sandbox helper for apply_patch (#18296) ...

## Summary

- pass split filesystem sandbox policy/cwd through apply_patch contexts,
while omitting legacy-equivalent policies to keep payloads small
- keep the fs helper compatible with legacy Landlock by avoiding helper
read-root permission expansion in that mode and disabling helper network
access

## Root Cause

`d626dc38950fb40a1a5ad0a8ffab2485e3348c53` routed exec-server filesystem
operations through a sandboxed helper. That path forwarded legacy
Landlock into a helper policy shape that could require direct
split-policy enforcement. Sandboxed `apply_patch` hit that edge through
the filesystem abstraction.

The same 0.121 edit-regression path is consistent with #18354: normal
writes route through the `apply_patch` filesystem helper, fail under
sandbox, and then surface the generic retry-without-sandbox prompt.

Fixes #18069
Fixes #18354

## Validation

- `cd codex-rs && just fmt`
- earlier branch validation before merging current `origin/main` and
dropping the now-separate PATH fix:
  - `cd codex-rs && cargo test -p codex-exec-server`
- `cd codex-rs && cargo test -p codex-core file_system_sandbox_context`
  - `cd codex-rs && just fix -p codex-exec-server`
  - `cd codex-rs && just fix -p codex-core`
  - `git diff --check`
  - `cd codex-rs && cargo clean`

---------

Co-authored-by: Codex <noreply@openai.com>

2026-04-17 15:39:07 -07:00

..

server

[2/8] Support piped stdin in exec process API (#18086)

2026-04-16 10:30:10 -07:00

client_api.rs

…

client.rs

[3/6] Add pushed exec process events (#18020)

2026-04-17 19:07:43 +00:00

connection.rs

…

environment.rs

[2/8] Support piped stdin in exec process API (#18086)

2026-04-16 10:30:10 -07:00

file_system.rs

fix: fix fs sandbox helper for apply_patch (#18296)

2026-04-17 15:39:07 -07:00

fs_helper_main.rs

…

fs_helper.rs

…

fs_sandbox.rs

fix: fix fs sandbox helper for apply_patch (#18296)

2026-04-17 15:39:07 -07:00

lib.rs

[3/6] Add pushed exec process events (#18020)

2026-04-17 19:07:43 +00:00

local_file_system.rs

Fix fs/readDirectory to skip broken symlinks (#17907)

2026-04-15 10:50:22 -07:00

local_process.rs

[3/6] Add pushed exec process events (#18020)

2026-04-17 19:07:43 +00:00

process_id.rs

…

process.rs

[3/6] Add pushed exec process events (#18020)

2026-04-17 19:07:43 +00:00

protocol.rs

[2/8] Support piped stdin in exec process API (#18086)

2026-04-16 10:30:10 -07:00

remote_file_system.rs

…

remote_process.rs

[3/6] Add pushed exec process events (#18020)

2026-04-17 19:07:43 +00:00

rpc.rs

…

runtime_paths.rs

…

sandboxed_file_system.rs

…

server.rs

…