mirror of
https://github.com/openai/codex.git
synced 2026-04-24 22:54:54 +00:00
d626dc3895
## Summary - run exec-server filesystem RPCs requiring sandboxing through a `codex-fs` arg0 helper over stdin/stdout - keep direct local filesystem execution for `DangerFullAccess` and external sandbox policies - remove the standalone exec-server binary path in favor of top-level arg0 dispatch/runtime paths - add sandbox escape regression coverage for local and remote filesystem paths ## Validation - `just fmt` - `git diff --check` - remote devbox: `cd codex-rs && bazel test --bes_backend= --bes_results_url= //codex-rs/exec-server:all` (6/6 passed) --------- Co-authored-by: Codex <noreply@openai.com>
96 lines
3.3 KiB
Rust
96 lines
3.3 KiB
Rust
use codex_features::Feature;
|
|
use core_test_support::responses::ev_completed;
|
|
use core_test_support::responses::ev_response_created;
|
|
use core_test_support::responses::mount_sse_once;
|
|
use core_test_support::responses::sse;
|
|
use core_test_support::responses::start_mock_server;
|
|
use core_test_support::test_codex::test_codex;
|
|
|
|
const HIERARCHICAL_AGENTS_SNIPPET: &str =
|
|
"Files called AGENTS.md commonly appear in many places inside a container";
|
|
|
|
#[tokio::test(flavor = "multi_thread", worker_threads = 2)]
|
|
async fn hierarchical_agents_appends_to_project_doc_in_user_instructions() {
|
|
let server = start_mock_server().await;
|
|
let resp_mock = mount_sse_once(
|
|
&server,
|
|
sse(vec![ev_response_created("resp1"), ev_completed("resp1")]),
|
|
)
|
|
.await;
|
|
|
|
let mut builder = test_codex()
|
|
.with_config(|config| {
|
|
config
|
|
.features
|
|
.enable(Feature::ChildAgentsMd)
|
|
.expect("test config should allow feature update");
|
|
})
|
|
.with_workspace_setup(|cwd, fs| async move {
|
|
let agents_md = cwd.join("AGENTS.md");
|
|
fs.write_file(&agents_md, b"be nice".to_vec(), /*sandbox*/ None)
|
|
.await?;
|
|
Ok::<(), anyhow::Error>(())
|
|
});
|
|
let test = builder
|
|
.build_remote_aware(&server)
|
|
.await
|
|
.expect("build test codex");
|
|
|
|
test.submit_turn("hello").await.expect("submit turn");
|
|
|
|
let request = resp_mock.single_request();
|
|
let user_messages = request.message_input_texts("user");
|
|
let instructions = user_messages
|
|
.iter()
|
|
.find(|text| text.starts_with("# AGENTS.md instructions for "))
|
|
.expect("instructions message");
|
|
assert!(
|
|
instructions.contains("be nice"),
|
|
"expected AGENTS.md text included: {instructions}"
|
|
);
|
|
let snippet_pos = instructions
|
|
.find(HIERARCHICAL_AGENTS_SNIPPET)
|
|
.expect("expected hierarchical agents snippet");
|
|
let base_pos = instructions
|
|
.find("be nice")
|
|
.expect("expected AGENTS.md text");
|
|
assert!(
|
|
snippet_pos > base_pos,
|
|
"expected hierarchical agents message appended after base instructions: {instructions}"
|
|
);
|
|
}
|
|
|
|
#[tokio::test(flavor = "multi_thread", worker_threads = 2)]
|
|
async fn hierarchical_agents_emits_when_no_project_doc() {
|
|
let server = start_mock_server().await;
|
|
let resp_mock = mount_sse_once(
|
|
&server,
|
|
sse(vec![ev_response_created("resp1"), ev_completed("resp1")]),
|
|
)
|
|
.await;
|
|
|
|
let mut builder = test_codex().with_config(|config| {
|
|
config
|
|
.features
|
|
.enable(Feature::ChildAgentsMd)
|
|
.expect("test config should allow feature update");
|
|
});
|
|
let test = builder
|
|
.build_remote_aware(&server)
|
|
.await
|
|
.expect("build test codex");
|
|
|
|
test.submit_turn("hello").await.expect("submit turn");
|
|
|
|
let request = resp_mock.single_request();
|
|
let user_messages = request.message_input_texts("user");
|
|
let instructions = user_messages
|
|
.iter()
|
|
.find(|text| text.starts_with("# AGENTS.md instructions for "))
|
|
.expect("instructions message");
|
|
assert!(
|
|
instructions.contains(HIERARCHICAL_AGENTS_SNIPPET),
|
|
"expected hierarchical agents message appended: {instructions}"
|
|
);
|
|
}
|