Eric Traut 2e038e6d38 Fix Windows exec policy test flake (#18304) ...

## Summary

This fixes a Windows-only failure in the exec policy multi-segment shell
test. The test was meant to verify that a compound shell command only
bypasses sandboxing when every parsed segment has an explicit exec
policy allow rule.

On Windows, the read-only sandbox setup is intentionally treated as
lacking sandbox protection, so the old fixture could take the approval
path before reaching the intended bypass assertion. The test now uses
the workspace-write sandbox policy, keeping the focus on the per-segment
bypass rule while preserving the expected bypass_sandbox false result
when only cat is explicitly allowed.

2026-04-17 00:43:49 -07:00

..

agent

Refactor config loading to use filesystem abstraction (#18209)

2026-04-17 00:51:21 +00:00

agent_identity

Register agent tasks behind use_agent_identity (#17387)

2026-04-16 14:30:02 -07:00

apps

[codex] reduce module visibility (#16978)

2026-04-07 08:03:35 -07:00

bin

Refactor config types into a separate crate (#16962)

2026-04-07 00:32:41 +00:00

codex

feat: add opt-in provider runtime abstraction (#17713)

2026-04-17 02:27:45 +00:00

config

Refactor config loading to use filesystem abstraction (#18209)

2026-04-17 00:51:21 +00:00

config_loader

Refactor config loading to use filesystem abstraction (#18209)

2026-04-17 00:51:21 +00:00

context_manager

feat(permissions): add glob deny-read policy support (#15979)

2026-04-16 10:31:51 -07:00

guardian

feat: add opt-in provider runtime abstraction (#17713)

2026-04-17 02:27:45 +00:00

instructions

[codex] reduce module visibility (#16978)

2026-04-07 08:03:35 -07:00

memories

chore: unify memory drop endpoints (#18134)

2026-04-16 15:44:23 +01:00

plugins

Move Computer Use tool suggestion to core (#18219)

2026-04-16 19:55:23 -07:00

sandboxing

Build remote exec env from exec-server policy (#17216)

2026-04-13 09:59:08 +01:00

snapshots

[codex] Defer fork context injection until first turn (#15699)

2026-03-24 18:34:44 -07:00

state

Register agent tasks behind use_agent_identity (#17387)

2026-04-16 14:30:02 -07:00

tasks

feat: add opt-in provider runtime abstraction (#17713)

2026-04-17 02:27:45 +00:00

tools

feat: add opt-in provider runtime abstraction (#17713)

2026-04-17 02:27:45 +00:00

unified_exec

feat(sandbox): add glob deny-read platform enforcement (#18096)

2026-04-16 17:35:16 -07:00

utils

Extract rollout into its own crate (#15548)

2026-03-24 18:10:53 -07:00

agent_identity.rs

Register agent tasks behind use_agent_identity (#17387)

2026-04-16 14:30:02 -07:00

agents_md_tests.rs

Refactor AGENTS.md discovery into AgentsMdManager (#18035)

2026-04-16 10:51:33 -07:00

agents_md.rs

Refactor AGENTS.md discovery into AgentsMdManager (#18035)

2026-04-16 10:51:33 -07:00

apply_patch_tests.rs

[codex] Migrate apply_patch to executor filesystem (#17027)

2026-04-07 21:20:22 +00:00

apply_patch.rs

Route apply_patch through the environment filesystem (#17674)

2026-04-14 12:49:02 -07:00

arc_monitor_tests.rs

core: remove cross-crate re-exports from lib.rs (#16512)

2026-04-01 23:06:24 -07:00

arc_monitor.rs

core: remove cross-crate re-exports from lib.rs (#16512)

2026-04-01 23:06:24 -07:00

client_common_tests.rs

fix(app-server) revert null instructions changes (#17047)

2026-04-07 15:18:34 -07:00

client_common.rs

fix(app-server) revert null instructions changes (#17047)

2026-04-07 15:18:34 -07:00

client_tests.rs

feat: add opt-in provider runtime abstraction (#17713)

2026-04-17 02:27:45 +00:00

client.rs

feat: add opt-in provider runtime abstraction (#17713)

2026-04-17 02:27:45 +00:00

codex_delegate_tests.rs

Spread AbsolutePathBuf (#17792)

2026-04-14 14:26:10 -07:00

codex_delegate.rs

Fix for CI Tests failing from stack overflow (#17846)

2026-04-14 18:04:35 -07:00

codex_tests_guardian.rs

feat: add opt-in provider runtime abstraction (#17713)

2026-04-17 02:27:45 +00:00

codex_tests.rs

Register agent tasks behind use_agent_identity (#17387)

2026-04-16 14:30:02 -07:00

codex_thread.rs

fix(app-server): replay token usage after resume and fork (#18023)

2026-04-16 17:29:34 -03:00

codex.rs

Split codex session modules (#18244)

2026-04-16 18:15:19 -07:00

command_canonicalization_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

command_canonicalization.rs

core: remove cross-crate re-exports from lib.rs (#16512)

2026-04-01 23:06:24 -07:00

commit_attribution_tests.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054)

2026-03-27 19:00:44 -07:00

commit_attribution.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

compact_remote.rs

[codex-analytics] add compaction analytics event (#17155)

2026-04-10 13:03:54 -07:00

compact_tests.rs

Support remote compaction for Azure responses providers (#17958)

2026-04-15 13:05:11 -07:00

compact.rs

feat: add opt-in provider runtime abstraction (#17713)

2026-04-17 02:27:45 +00:00

connectors_tests.rs

Move more connector logic into connectors crate (#18158)

2026-04-16 11:16:44 -07:00

connectors.rs

Move more connector logic into connectors crate (#18158)

2026-04-16 11:16:44 -07:00

consequential_tool_message_templates.json

[elicitation] User-friendly tool call messages. (#14403)

2026-03-12 00:35:21 -07:00

contextual_user_message_tests.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054)

2026-03-27 19:00:44 -07:00

contextual_user_message.rs

Extract codex-instructions crate (#15744)

2026-03-25 10:43:49 -07:00

environment_context_tests.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054)

2026-03-27 19:00:44 -07:00

environment_context.rs

chore: refactor network permissions to use explicit domain and unix socket rule maps (#15120)

2026-03-27 06:17:59 +00:00

event_mapping_tests.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054)

2026-03-27 19:00:44 -07:00

event_mapping.rs

Trim pre-turn context updates during rollback (#15577)

2026-03-24 12:43:53 -07:00

exec_env_tests.rs

fix: preserve platform-specific core shell env vars (#16707)

2026-04-03 12:07:07 -07:00

exec_env.rs

Build remote exec env from exec-server policy (#17216)

2026-04-13 09:59:08 +01:00

exec_policy_tests.rs

Fix Windows exec policy test flake (#18304)

2026-04-17 00:43:49 -07:00

exec_policy.rs

fix(exec-policy) rules parsing (#18126)

2026-04-16 21:18:39 -07:00

exec_tests.rs

feat(permissions): add glob deny-read policy support (#15979)

2026-04-16 10:31:51 -07:00

exec.rs

feat(permissions): add glob deny-read policy support (#15979)

2026-04-16 10:31:51 -07:00

external_agent_config_tests.rs

Improve external agent plugin migration for configured marketplaces (#18055)

2026-04-16 17:34:38 +00:00

external_agent_config.rs

Improve external agent plugin migration for configured marketplaces (#18055)

2026-04-16 17:34:38 +00:00

file_watcher_tests.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054)

2026-03-27 19:00:44 -07:00

file_watcher.rs

Make skill loading filesystem-aware (#17720)

2026-04-14 15:40:40 -07:00

flags.rs

…

function_tool.rs

…

git_info_tests.rs

Refactor config loading to use filesystem abstraction (#18209)

2026-04-17 00:51:21 +00:00

hook_runtime.rs

Add OTEL metrics for hook runs (#18026)

2026-04-16 21:30:38 +00:00

installation_id.rs

Spread AbsolutePathBuf (#17792)

2026-04-14 14:26:10 -07:00

landlock.rs

Spread AbsolutePathBuf (#17792)

2026-04-14 14:26:10 -07:00

lib.rs

Refactor AGENTS.md discovery into AgentsMdManager (#18035)

2026-04-16 10:51:33 -07:00

mcp_openai_file.rs

feat: add opt-in provider runtime abstraction (#17713)

2026-04-17 02:27:45 +00:00

mcp_skill_dependencies.rs

Add server-level approval defaults for custom MCP servers (#17843)

2026-04-16 18:18:07 +00:00

mcp_tool_approval_templates.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054)

2026-03-27 19:00:44 -07:00

mcp_tool_call_tests.rs

feat: add opt-in provider runtime abstraction (#17713)

2026-04-17 02:27:45 +00:00

mcp_tool_call.rs

Add server-level approval defaults for custom MCP servers (#17843)

2026-04-16 18:18:07 +00:00

mcp_tool_exposure.rs

register all mcp tools with namespace (#17404)

2026-04-15 21:02:59 +08:00

mcp.rs

Refactor plugin loading to async (#17747)

2026-04-13 21:52:56 -07:00

memory_trace_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

memory_trace.rs

remove temporary ownership re-exports (#16626)

2026-04-03 00:33:34 -07:00

mention_syntax.rs

Extract codex-utils-plugins crate (#15746)

2026-03-25 11:05:35 -07:00

message_history_tests.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054)

2026-03-27 19:00:44 -07:00

message_history.rs

Spread AbsolutePathBuf (#17792)

2026-04-14 14:26:10 -07:00

network_policy_decision_tests.rs

extract models manager and related ownership from core (#16508)

2026-04-02 23:00:02 -07:00

network_policy_decision.rs

refactor(proxy): clarify sandbox block messages (#17168)

2026-04-09 10:53:06 -07:00

network_proxy_loader_tests.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054)

2026-03-27 19:00:44 -07:00

network_proxy_loader.rs

Refactor config loading to use filesystem abstraction (#18209)

2026-04-17 00:51:21 +00:00

original_image_detail.rs

Support original-detail metadata on MCP image outputs (#17714)

2026-04-15 14:43:33 -07:00

otel_init.rs

Use AbsolutePathBuf in skill loading and codex_home (#17407)

2026-04-13 10:26:51 -07:00

personality_migration_tests.rs

[codex] Add local thread store listing (#17824)

2026-04-15 11:34:27 -07:00

personality_migration.rs

[codex] Add local thread store listing (#17824)

2026-04-15 11:34:27 -07:00

prompt_debug.rs

Async config loading (#18022)

2026-04-15 19:18:38 -07:00

realtime_context_tests.rs

Refactor config loading to use filesystem abstraction (#18209)

2026-04-17 00:51:21 +00:00

realtime_context.rs

Refactor config loading to use filesystem abstraction (#18209)

2026-04-17 00:51:21 +00:00

realtime_conversation_tests.rs

Wrap delegated input text (#17868)

2026-04-14 19:58:58 -07:00

realtime_conversation.rs

[codex] Make realtime startup context truncation deterministic (#18172)

2026-04-16 13:51:43 -07:00

realtime_prompt.rs

[codex] Update realtime V2 VAD silence delay and 1.5 prompt (#18092)

2026-04-16 14:30:57 -07:00

review_format.rs

core: remove cross-crate re-exports from lib.rs (#16512)

2026-04-01 23:06:24 -07:00

review_prompts.rs

Spread AbsolutePathBuf (#17792)

2026-04-14 14:26:10 -07:00

rollout.rs

[codex] Add local thread store listing (#17824)

2026-04-15 11:34:27 -07:00

safety_tests.rs

Spread AbsolutePathBuf (#17792)

2026-04-14 14:26:10 -07:00

safety.rs

Spread AbsolutePathBuf (#17792)

2026-04-14 14:26:10 -07:00

sandbox_tags_tests.rs

core: remove cross-crate re-exports from lib.rs (#16512)

2026-04-01 23:06:24 -07:00

sandbox_tags.rs

core: remove cross-crate re-exports from lib.rs (#16512)

2026-04-01 23:06:24 -07:00

session_prefix.rs

feat: change multi-agent to use path-like system instead of uuids (#15313)

2026-03-20 18:23:48 +00:00

session_rollout_init_error.rs

remove temporary ownership re-exports (#16626)

2026-04-03 00:33:34 -07:00

session_startup_prewarm.rs

fix(app-server) revert null instructions changes (#17047)

2026-04-07 15:18:34 -07:00

shell_detect.rs

chore: rename codex-command to codex-shell-command (#11378)

2026-02-10 17:03:46 -08:00

shell_snapshot_tests.rs

Spread AbsolutePathBuf (#17792)

2026-04-14 14:26:10 -07:00

shell_snapshot.rs

Spread AbsolutePathBuf (#17792)

2026-04-14 14:26:10 -07:00

shell_tests.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054)

2026-03-27 19:00:44 -07:00

shell.rs

fix: add shell fallback paths for pwsh/powershell that work on GitHub Actions Windows runners (#16617)

2026-04-02 13:47:10 -07:00

skills_watcher.rs

Make skill loading filesystem-aware (#17720)

2026-04-14 15:40:40 -07:00

skills.rs

Use AbsolutePathBuf in skill loading and codex_home (#17407)

2026-04-13 10:26:51 -07:00

spawn.rs

Spread AbsolutePathBuf (#17792)

2026-04-14 14:26:10 -07:00

state_db_bridge.rs

[codex] reduce module visibility (#16978)

2026-04-07 08:03:35 -07:00

stream_events_utils_tests.rs

chore: more pollution filtering (#18138)

2026-04-16 15:32:32 +01:00

stream_events_utils.rs

chore: more pollution filtering (#18138)

2026-04-16 15:32:32 +01:00

test_support.rs

remove temporary ownership re-exports (#16626)

2026-04-03 00:33:34 -07:00

thread_manager_tests.rs

Async config loading (#18022)

2026-04-15 19:18:38 -07:00

thread_manager.rs

Make skill loading filesystem-aware (#17720)

2026-04-14 15:40:40 -07:00

thread_rollout_truncation_tests.rs

fix: update fork boundaries computation (#16322)

2026-03-31 14:10:43 +02:00

thread_rollout_truncation.rs

[codex-analytics] feature plumbing and emittance (#16640)

2026-04-13 23:11:49 -07:00

turn_diff_tracker_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

turn_diff_tracker.rs

core: remove cross-crate re-exports from lib.rs (#16512)

2026-04-01 23:06:24 -07:00

turn_metadata_tests.rs

Spread AbsolutePathBuf (#17792)

2026-04-14 14:26:10 -07:00

turn_metadata.rs

Spread AbsolutePathBuf (#17792)

2026-04-14 14:26:10 -07:00

turn_timing_tests.rs

feat: add memory citation to agent message (#14821)

2026-03-18 10:03:38 +00:00

turn_timing.rs

Stream apply_patch changes (#17862)

2026-04-16 18:12:19 -07:00

unavailable_tool.rs

[mcp] Add dummy tools for previously called but currently missing tools. (#17853)

2026-04-15 21:48:05 +00:00

user_shell_command_tests.rs

remove temporary ownership re-exports (#16626)

2026-04-03 00:33:34 -07:00

user_shell_command.rs

remove temporary ownership re-exports (#16626)

2026-04-03 00:33:34 -07:00

util_tests.rs

remove temporary ownership re-exports (#16626)

2026-04-03 00:33:34 -07:00

util.rs

remove temporary ownership re-exports (#16626)

2026-04-03 00:33:34 -07:00

web_search.rs

add missing fields to WebSearchAction and update app-server types (#10276)

2026-01-30 16:37:56 -08:00

windows_sandbox_read_grants_tests.rs

core: remove cross-crate re-exports from lib.rs (#16512)

2026-04-01 23:06:24 -07:00

windows_sandbox_read_grants.rs

core: remove cross-crate re-exports from lib.rs (#16512)

2026-04-01 23:06:24 -07:00

windows_sandbox_tests.rs

Configure multi_agent_v2 spawn agent hints (#17071)

2026-04-08 08:42:18 -07:00

windows_sandbox.rs

Configure multi_agent_v2 spawn agent hints (#17071)

2026-04-08 08:42:18 -07:00