codex

mirror of https://github.com/openai/codex.git synced 2026-10-21 21:06:49 +00:00

Files

T

Adam Perry @ OpenAI c39bfa4c8f Enable writable file streaming in exec-server (#50177 )

## What changed

Advertise `fileWriteStreaming` and support `fs/open` with `mode: "replace"` to create or truncate a file for writing. Implement `fs/writeBlock` with explicit offsets and nonempty chunks of up to 1 MiB, rejecting ranges beyond the signed 64-bit file offset limit.

Apply write sandbox permissions when opening writable handles, including when full-disk reads are allowed. Keep `read` as the default open mode.

## Testing

Add integration coverage for positional writes, chunk and offset bounds, replacement truncation, read/write handle permissions, and sandbox write restrictions. Verify that duplicate handle IDs and exhausted handle capacity reject replacement opens without creating or truncating files.

GitOrigin-RevId: 696ee6437dd5f5b69d5a7667dddea0ff44472094

2026-10-02 04:25:52 +00:00

client

Protect the guardian decisions API key from environment forwarding (#50019 )

2026-10-01 15:57:53 +00:00

discoverV2

Enable writable file streaming in exec-server (#50177 )

2026-10-02 04:25:52 +00:00

environment

Support bearer tokens for app-server executor connections (#47648 )

2026-09-23 20:05:37 +00:00

no_follow

Upgrade Windows bindings to windows-sys 0.61.2 (#50058 )

2026-10-01 18:05:05 +00:00

noise_relay

Allow exec-server to proxy permitted private IPs upstream (#48568 )

2026-09-26 23:17:41 +00:00

proto

Propagate request trace context through exec-server relays (#38690 )

2026-08-15 03:00:35 +00:00

remote

Allow exec-server to proxy permitted private IPs upstream (#48568 )

2026-09-26 23:17:41 +00:00

server

Enable writable file streaming in exec-server (#50177 )

2026-10-02 04:25:52 +00:00

arg0_exec_helper.rs

Preserve custom arg0 for sandboxed exec-server processes (#34497 )

2026-07-21 08:59:41 +00:00

capability_discovery_cache.rs

Honor network policy in remote control and recover remote execution (#47410 )

2026-09-23 00:48:53 +00:00

capability_discovery.rs

Add executor capability discovery V2 infrastructure (#47683 )

2026-09-23 22:20:34 +00:00

client_api.rs

Support trusted headers for remote exec WebSockets (#42606 )

2026-09-03 20:01:07 +00:00

client_error.rs

Classify retryable exec-server preparation errors by type (#47638 )

2026-09-23 19:37:16 +00:00

client_inbound_request_limit_tests.rs

Bound inbound exec-server requests across client transports (#47362 )

2026-09-22 21:07:20 +00:00

client_inbound_request_limit.rs

Bound inbound exec-server requests across client transports (#47362 )

2026-09-22 21:07:20 +00:00

client_recovery_tests.rs

Retry transient registry failures during initial exec connection (#39777 )

2026-08-20 18:48:17 +00:00

client_recovery.rs

Honor network policy in remote control and recover remote execution (#47410 )

2026-09-23 00:48:53 +00:00

client_refresh_tests.rs

Allow provisioned executors more time to come online (#48575 )

2026-09-27 00:01:17 +00:00

client_refresh.rs

Honor network policy in remote control and recover remote execution (#47410 )

2026-09-23 00:48:53 +00:00

client_telemetry.rs

Add client-side exec-server RPC attempt metrics (#42883 )

2026-09-04 23:06:00 +00:00

client_transport_tests.rs

Allow provisioned executors more time to come online (#48575 )

2026-09-27 00:01:17 +00:00

client_transport.rs

Suppress Windows console windows for background subprocesses (#49164 )

2026-09-29 04:38:37 +00:00

client.rs

Add renewable EMA HTTP authentication and credential versioning (#49987 )

2026-10-01 13:57:48 +00:00

connection.rs

Suppress Windows console windows for background subprocesses (#49164 )

2026-09-29 04:38:37 +00:00

environment_bootstrap_tests.rs

Route exec-server WebSockets through configured proxies (#35056 )

2026-07-24 00:16:42 +00:00

environment_bootstrap.rs

Allow exec-server to proxy permitted private IPs upstream (#48568 )

2026-09-26 23:17:41 +00:00

environment_config.rs

Preserve MCP compatibility with older executors (#39979 )

2026-08-21 17:21:30 +00:00

environment_provider.rs

Route exec-server WebSockets through configured proxies (#35056 )

2026-07-24 00:16:42 +00:00

environment_registry_tests.rs

feat(exec-server): add Noise rendezvous environment (#28774 )

2026-06-17 17:20:53 -07:00

environment_registry.rs

feat(exec-server): add Noise rendezvous environment (#28774 )

2026-06-17 17:20:53 -07:00

environment_toml.rs

Support bearer tokens for app-server executor connections (#47648 )

2026-09-23 20:05:37 +00:00

environment.rs

Allow exec-server to proxy permitted private IPs upstream (#48568 )

2026-09-26 23:17:41 +00:00

file_handle_tests.rs

Bound in-flight file opens in exec-server (#50162 )

2026-10-02 03:31:52 +00:00

file_handle.rs

Enable writable file streaming in exec-server (#50177 )

2026-10-02 04:25:52 +00:00

forward_tests.rs

Add attributed exec process lifecycle telemetry (#42373 )

2026-09-02 21:58:58 +00:00

forward.rs

Add exec-server forwarding mode (#39249 )

2026-08-18 18:15:21 +00:00

fs_helper_main.rs

Enable writable file streaming in exec-server (#50177 )

2026-10-02 04:25:52 +00:00

fs_helper.rs

Enable writable file streaming in exec-server (#50177 )

2026-10-02 04:25:52 +00:00

fs_sandbox_windows_tests.rs

Enable writable file streaming in exec-server (#50177 )

2026-10-02 04:25:52 +00:00

fs_sandbox.rs

Allow exec-server to proxy permitted private IPs upstream (#48568 )

2026-09-26 23:17:41 +00:00

lib.rs

Clean up process groups for failed shell snapshot captures (#49782 )

2026-10-01 00:48:08 +00:00

local_file_system_path_uri_tests.rs

Harden unsandboxed patch filesystem access (#39659 )

2026-08-20 08:10:08 +00:00

local_file_system_read_tests.rs

Make exec-server file reads cancellable between chunks (#49696 )

2026-09-30 18:18:03 +00:00

local_file_system_read.rs

Enable writable file streaming in exec-server (#50177 )

2026-10-02 04:25:52 +00:00

local_file_system.rs

Enable writable file streaming in exec-server (#50177 )

2026-10-02 04:25:52 +00:00

local_process.rs

Share byte buffers across exec-server output chunks (#49972 )

2026-10-01 12:41:39 +00:00

network_policy_decisions_tests.rs

Handle exec-server network policy requests in the client (#35359 )

2026-07-25 16:03:00 +00:00

network_policy_decisions.rs

Handle exec-server network policy requests in the client (#35359 )

2026-07-25 16:03:00 +00:00

noise_channel_tests.rs

exec-server: default remote transport to Noise (#26245 )

2026-06-15 17:39:00 -07:00

noise_channel.rs

Size Noise handshake buffers to their messages (#34544 )

2026-07-21 13:39:33 +00:00

process_sandbox_tests.rs

Allow exec-server to proxy permitted private IPs upstream (#48568 )

2026-09-26 23:17:41 +00:00

process_sandbox.rs

Resolve Windows sandbox PowerShell fallbacks on the exec server (#49098 )

2026-09-28 23:21:26 +00:00

process_telemetry.rs

Add exec-server RPC timing and process startup tracing (#47680 )

2026-09-23 22:10:28 +00:00

process.rs

Wire the Windows MXC sandbox into command execution (#45176 )

2026-09-13 06:07:03 +00:00

regular_file_tests.rs

Add a symlink-safe reader for sensitive files (#39200 )

2026-08-18 13:36:16 +00:00

regular_file.rs

Enable writable file streaming in exec-server (#50177 )

2026-10-02 04:25:52 +00:00

relay_noise_tests.rs

Allow exec-server to proxy permitted private IPs upstream (#48568 )

2026-09-26 23:17:41 +00:00

relay_proto.rs

exec-server: default remote transport to Noise (#26245 )

2026-06-15 17:39:00 -07:00

relay.rs

Allow exec-server to proxy permitted private IPs upstream (#48568 )

2026-09-26 23:17:41 +00:00

remote_file_stream.rs

Define exec-server protocol types for streamed file writes (#49778 )

2026-10-01 00:43:55 +00:00

remote_file_system_path_uri_tests.rs

Preserve filesystem sandbox policy context when the cwd disappears (#46112 )

2026-09-17 04:37:54 +00:00

remote_file_system.rs

Classify retryable exec-server preparation errors by type (#47638 )

2026-09-23 19:37:16 +00:00

remote_process.rs

Record normalized sandbox violation events (#36207 )

2026-07-30 19:23:33 +00:00

remote.rs

Allow exec-server to proxy permitted private IPs upstream (#48568 )

2026-09-26 23:17:41 +00:00

resolved_capability.rs

Remove unused Rust helpers (#34345 )

2026-07-20 13:45:29 +00:00

rpc_client_metrics_tests.rs

Add client-side exec-server RPC attempt metrics (#42883 )

2026-09-04 23:06:00 +00:00

rpc_pending_request.rs

Clean up canceled exec-server RPC requests immediately (#49332 )

2026-09-29 18:34:48 +00:00

rpc_server_requests_tests.rs

Bound inbound exec-server requests across client transports (#47362 )

2026-09-22 21:07:20 +00:00

rpc_server_requests.rs

Bound inbound exec-server requests across client transports (#47362 )

2026-09-22 21:07:20 +00:00

rpc_timing.rs

Add exec-server RPC timing and process startup tracing (#47680 )

2026-09-23 22:10:28 +00:00

rpc.rs

Clean up canceled exec-server RPC requests immediately (#49332 )

2026-09-29 18:34:48 +00:00

runtime_options.rs

Allow exec-server to proxy permitted private IPs upstream (#48568 )

2026-09-26 23:17:41 +00:00

sandbox_selection.rs

Enable MXC selection through Windows sandbox configuration (#46271 )

2026-09-17 18:20:28 +00:00

sandboxed_file_open.rs

Enable writable file streaming in exec-server (#50177 )

2026-10-02 04:25:52 +00:00

sandboxed_file_system_path_uri_tests.rs

Allow exec-server to proxy permitted private IPs upstream (#48568 )

2026-09-26 23:17:41 +00:00

sandboxed_file_system.rs

Enable writable file streaming in exec-server (#50177 )

2026-10-02 04:25:52 +00:00

server.rs

Allow exec-server to proxy permitted private IPs upstream (#48568 )

2026-09-26 23:17:41 +00:00

shell_snapshot_file_tests.rs

Replay exec-server shell snapshots through unnamed files (#48078 )

2026-09-25 12:23:15 +00:00

shell_snapshot_file.rs

Replay exec-server shell snapshots through unnamed files (#48078 )

2026-09-25 12:23:15 +00:00

shell_snapshot_process.rs

Clean up process groups for failed shell snapshot captures (#49782 )

2026-10-01 00:48:08 +00:00

shell_snapshot_tests.rs

Replay exec-server shell snapshots through unnamed files (#48078 )

2026-09-25 12:23:15 +00:00

shell_snapshot.rs

Clean up process groups for failed shell snapshot captures (#49782 )

2026-10-01 00:48:08 +00:00

telemetry.rs

Measure total exec-server request duration including queueing (#44207 )

2026-09-09 17:03:57 +00:00

trace_context_tests.rs

[codex] Observe remote exec-server lifecycle (#27470 )

2026-06-25 13:42:40 -07:00

trace_context.rs

Propagate caller metadata to rendezvous connections (#39073 )

2026-08-17 20:36:10 +00:00

websocket_pong_watchdog_tests.rs

[codex] bound Rendezvous WebSocket liveness (#30643 )

2026-07-01 14:15:34 -07:00

websocket_pong_watchdog.rs

[codex] bound Rendezvous WebSocket liveness (#30643 )

2026-07-01 14:15:34 -07:00