Skip to content

Apply sandbox context to local view_image reads#21861

Merged
starr-openai merged 7 commits into
mainfrom
starr/view-image-sandbox-20260508
May 12, 2026
Merged

Apply sandbox context to local view_image reads#21861
starr-openai merged 7 commits into
mainfrom
starr/view-image-sandbox-20260508

Conversation

@starr-openai
Copy link
Copy Markdown
Contributor

Summary

  • create a selected-cwd filesystem sandbox context for view_image metadata and file reads in both local and remote environments
  • add a local restricted-profile regression test for the previously unsandboxed read path

Validation

  • just fmt
  • bazel test --bes_backend= --bes_results_url= --test_output=errors --test_filter=view_image::tests::handle_passes_sandbox_context_for_local_filesystem_reads //codex-rs/core:core-unit-tests

);
}

#[tokio::test]
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

can we add an integration test instead?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

added. imo having unit test equivalents is nice too - so I left this

@starr-openai starr-openai requested a review from pakrym-oai May 11, 2026 19:59
starr-openai added a commit that referenced this pull request May 11, 2026
Co-authored-by: Codex <noreply@openai.com>
starr-openai added a commit that referenced this pull request May 11, 2026
Co-authored-by: Codex <noreply@openai.com>
starr-openai added a commit that referenced this pull request May 11, 2026
Co-authored-by: Codex <noreply@openai.com>
starr-openai added a commit that referenced this pull request May 11, 2026
Co-authored-by: Codex <noreply@openai.com>
starr-openai added a commit that referenced this pull request May 11, 2026
Co-authored-by: Codex <noreply@openai.com>
starr-openai and others added 7 commits May 11, 2026 17:20
Create a selected-cwd filesystem sandbox context for view_image metadata and file reads regardless of whether the selected environment is local or remote. Add a local restricted-profile regression test for the previously unsandboxed read path.

Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Codex <noreply@openai.com>
@starr-openai starr-openai force-pushed the starr/view-image-sandbox-20260508 branch from 0f3c454 to 722a98c Compare May 12, 2026 00:20
@starr-openai starr-openai merged commit 17ed5ad into main May 12, 2026
27 checks passed
@starr-openai starr-openai deleted the starr/view-image-sandbox-20260508 branch May 12, 2026 01:48
@github-actions github-actions Bot locked and limited conversation to collaborators May 12, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants