starr-openai 17ed5ad0b0 Apply sandbox context to local view_image reads (#21861) ...

## Summary
- create a selected-cwd filesystem sandbox context for view_image
metadata and file reads in both local and remote environments
- add a local restricted-profile regression test for the previously
unsandboxed read path

## Validation
- just fmt
- bazel test --bes_backend= --bes_results_url= --test_output=errors
--test_filter=view_image::tests::handle_passes_sandbox_context_for_local_filesystem_reads
//codex-rs/core:core-unit-tests

---------

Co-authored-by: Codex <noreply@openai.com>

2026-05-11 18:48:43 -07:00

..

code_mode

Simplify MCP tool handler plumbing (#21595)

2026-05-12 00:11:31 +00:00

handlers

Apply sandbox context to local view_image reads (#21861)

2026-05-11 18:48:43 -07:00

runtimes

Support multi-environment apply_patch selection (#21617)

2026-05-11 16:33:44 -07:00

context_tests.rs

Simplify MCP tool handler plumbing (#21595)

2026-05-12 00:11:31 +00:00

context.rs

Simplify MCP tool handler plumbing (#21595)

2026-05-12 00:11:31 +00:00

events.rs

fix: preserve exact turn diffs after partial apply_patch failures (#21518)

2026-05-07 18:05:45 +02:00

hook_names.rs

fix(core): emit hooks for apply_patch edits (#18391)

2026-04-21 22:00:40 -03:00

hosted_spec_tests.rs

[codex] Move tool specs into core handlers (#21416)

2026-05-06 15:40:50 -07:00

hosted_spec.rs

[codex] Move tool specs into core handlers (#21416)

2026-05-06 15:40:50 -07:00

mod.rs

Remove ToolName display helper (#21465)

2026-05-08 12:17:48 -07:00

network_approval_tests.rs

fix: handle deferred network proxy denials (#19184)

2026-04-29 19:13:57 +00:00

network_approval.rs

fix: handle deferred network proxy denials (#19184)

2026-04-29 19:13:57 +00:00

orchestrator.rs

fix(permissions): preserve managed deny-read during escalation (#15977)

2026-05-11 11:49:44 -07:00

parallel.rs

Remove ToolName display helper (#21465)

2026-05-08 12:17:48 -07:00

registry_tests.rs

Simplify MCP tool handler plumbing (#21595)

2026-05-12 00:11:31 +00:00

registry.rs

Simplify MCP tool handler plumbing (#21595)

2026-05-12 00:11:31 +00:00

router_tests.rs

Simplify MCP tool handler plumbing (#21595)

2026-05-12 00:11:31 +00:00

router.rs

Simplify MCP tool handler plumbing (#21595)

2026-05-12 00:11:31 +00:00

sandboxing_tests.rs

fix(permissions): preserve managed deny-read during escalation (#15977)

2026-05-11 11:49:44 -07:00

sandboxing.rs

fix(permissions): preserve managed deny-read during escalation (#15977)

2026-05-11 11:49:44 -07:00

spec_plan_tests.rs

Simplify MCP tool handler plumbing (#21595)

2026-05-12 00:11:31 +00:00

spec_plan_types.rs

Simplify MCP tool handler plumbing (#21595)

2026-05-12 00:11:31 +00:00

spec_plan.rs

Simplify MCP tool handler plumbing (#21595)

2026-05-12 00:11:31 +00:00

spec_tests.rs

Simplify MCP tool handler plumbing (#21595)

2026-05-12 00:11:31 +00:00

spec.rs

Simplify MCP tool handler plumbing (#21595)

2026-05-12 00:11:31 +00:00

tool_dispatch_trace_tests.rs

Simplify MCP tool handler plumbing (#21595)

2026-05-12 00:11:31 +00:00

tool_dispatch_trace.rs

Simplify MCP tool handler plumbing (#21595)

2026-05-12 00:11:31 +00:00

tool_search_entry.rs

Remove ToolName display helper (#21465)

2026-05-08 12:17:48 -07:00