codex

mirror of https://github.com/openai/codex.git synced 2026-05-24 21:14:51 +00:00

Files

Michael Bolin 63a72e6b78 core: pass permission profiles to Windows runner (#23715 )

## Why

This is the functional handoff PR for the Windows sandbox
`PermissionProfile` migration. After #23714, the Windows elevated
backend can accept a profile-native request, but core still sent a
compatibility `SandboxPolicy` into the elevated command-runner path.
That meant profile-only details such as deny globs had to be translated
through side channels instead of being preserved in the runner
`SpawnRequest`.

Passing the real `PermissionProfile` completes the command-runner
handoff while leaving the unelevated restricted-token fallback on the
legacy policy-string API.

## What

- Updates one-shot Windows elevated execution in `core/src/exec.rs` to
call `run_windows_sandbox_capture_for_permission_profile_elevated`.
- Updates unified exec in `core/src/unified_exec/process_manager.rs` to
call `spawn_windows_sandbox_session_elevated_for_permission_profile`.
- Passes `request.permission_profile` /
`exec_request.permission_profile` and the stored Windows sandbox policy
cwd to the elevated backend.
- Keeps compatibility `SandboxPolicy` serialization only for the
non-elevated restricted-token fallback.

## Verification

- `cargo test -p codex-core --test all --no-run`

2026-05-20 17:57:36 -07:00

async_watcher_tests.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054 )

2026-03-27 19:00:44 -07:00

async_watcher.rs

Make turn diff tracking operation backed (#21180 )

2026-05-07 11:33:47 +02:00

errors.rs

remove temporary ownership re-exports (#16626 )

2026-04-03 00:33:34 -07:00

head_tail_buffer_tests.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054 )