starr-openai d626dc3895 Run exec-server fs operations through sandbox helper (#17294) ...

## Summary
- run exec-server filesystem RPCs requiring sandboxing through a
`codex-fs` arg0 helper over stdin/stdout
- keep direct local filesystem execution for `DangerFullAccess` and
external sandbox policies
- remove the standalone exec-server binary path in favor of top-level
arg0 dispatch/runtime paths
- add sandbox escape regression coverage for local and remote filesystem
paths

## Validation
- `just fmt`
- `git diff --check`
- remote devbox: `cd codex-rs && bazel test --bes_backend=
--bes_results_url= //codex-rs/exec-server:all` (6/6 passed)

---------

Co-authored-by: Codex <noreply@openai.com>

2026-04-12 18:36:03 -07:00

..

install

Add Windows direct install script (#12741)

2026-03-03 09:25:50 -08:00

asciicheck.py

Enforce ASCII in README.md (#513)

2025-04-22 10:07:40 -04:00

check_blob_size.py

check for large binaries in CI (#14382)

2026-03-11 22:39:08 +00:00

check-module-bazel-lock.sh

bazel: enforce MODULE.bazel.lock sync with Cargo.lock (#11790)

2026-02-14 02:11:19 +00:00

debug-codex.sh

Enable plan tool by default (#5384)

2025-10-21 16:25:05 +00:00

list-bazel-clippy-targets.sh

ci: align Bazel repo cache and Windows clippy target handling (#16740)

2026-04-03 20:18:33 -07:00

mock_responses_websocket_server.py

WebSocket test server script (#9175)

2026-01-13 16:21:14 -08:00

readme_toc.py

fix: ToC so it doesn’t include itself or duplicate the end marker (#4388)

2025-11-05 14:52:51 -08:00

run_tui_with_exec_server.sh

Run exec-server fs operations through sandbox helper (#17294)

2026-04-12 18:36:03 -07:00

stage_npm_packages.py

# Use @openai/codex dist-tags for platform binaries instead of separate package names (#11339)

2026-02-10 10:33:47 -08:00

start-codex-exec.sh

Run exec-server fs operations through sandbox helper (#17294)

2026-04-12 18:36:03 -07:00

test-remote-env.sh

Run exec-server fs operations through sandbox helper (#17294)

2026-04-12 18:36:03 -07:00