Backport #50129 to the 0.160 release line so a Unix host can start
remote stdio MCP servers on Windows when explicit remote environment
variables are configured.
Preserve `SYSTEMROOT`, `TEMP`, and `TMP` in the remote environment
allowlist. The existing regression test checks these variables survive
while unrequested secrets remain excluded.
This is the exact single-file patch from #50129, based on the immutable
0.160.0 release's content commit
(`cb7799623b2241f536d799f2d46259148fb987ce`). No unrelated main changes
are included.
Validation:
- Patch ID matches #50129 exactly:
`990a7674801ac5adbc6c8c6380568e18b3d396e2`.
- `cargo build -p codex-cli --bin codex` passed.
- `just test -p codex-rmcp-client`: 332 passed, 9 skipped, 4 setup
failures initially. After building the CLI, all three
`streamable_http_remote` integration tests passed on retry. The
remaining OAuth auth-status test cannot create its lock directory in the
read-only local home.
- The remote environment filtering regression passed, including
preservation of Windows variables and exclusion of unrequested secrets.
- Core MCP environment-propagation integration validation is in
progress.
- The supported publisher dry run selects 0.160.1 from the exact
candidate SHA.
CI currently reports unrelated failures in unchanged formatter tests,
lint imports, spelling checks, manifest-feature exceptions, and
unlinked-file checks. The Linux and Windows production build checks
passed; remaining checks are running.
andrewgu-oai
91c0ea5dd1