Josh Avant ba06376c79 fix: harden codex sandbox execution ...

Harden the Codex app-server native execution bridge for OpenClaw sandboxed runs. The change keeps core sandbox policy in OpenClaw while exposing the process, filesystem, and HTTP relay behavior Codex needs inside a scoped exec server.

The large exec-server/test files were split into focused modules before landing, and the PR was rebased onto current main with focused tests, Testbox changed checks, CI, and Codex autoreview green.

Co-authored-by: joshavant <830519+joshavant@users.noreply.github.com>

2026-05-21 23:47:32 +01:00

..

acpx

chore(deadcode): dedupe repeated helpers

2026-05-21 18:47:09 +08:00

active-memory

feat(plugin-sdk): add session entry workflow helpers

2026-05-21 22:41:45 +01:00

admin-http-rpc

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

alibaba

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

amazon-bedrock

chore: update dependencies

2026-05-21 08:28:44 +01:00

amazon-bedrock-mantle

chore: update dependencies

2026-05-21 08:28:44 +01:00

anthropic

chore: update dependencies

2026-05-21 08:28:44 +01:00

anthropic-vertex

chore: update dependencies

2026-05-21 08:28:44 +01:00

arcee

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

azure-speech

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

bonjour

chore(deadcode): dedupe repeated helpers

2026-05-21 18:47:09 +08:00

brave

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

browser

chore(deadcode): dedupe repeated helpers

2026-05-21 18:47:09 +08:00

byteplus

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

canvas

chore(deadcode): dedupe repeated helpers

2026-05-21 18:47:09 +08:00

cerebras

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

chutes

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

clickclack

refactor: remove sender owner tool gating

2026-05-21 15:14:48 +01:00

cloudflare-ai-gateway

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

codex

fix: harden codex sandbox execution

2026-05-21 23:47:32 +01:00

comfy

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

copilot-proxy

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

deepgram

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

deepinfra

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

deepseek

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

device-pair

chore(lint): remove underscore-dangle allow list (#83542)

2026-05-18 14:56:06 +01:00

diagnostics-otel

fix(status): add gateway delivery health telemetry (#85016)

2026-05-21 16:55:29 +00:00

diagnostics-prometheus

fix(status): add gateway delivery health telemetry (#85016)

2026-05-21 16:55:29 +00:00

diffs

fix(diffs): replace iconMarkup string with ToolbarIconName enum to el… (#83955)

2026-05-21 17:39:01 +08:00

discord

fix(discord): log component registry error details

2026-05-21 22:13:14 +01:00

document-extract

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

duckduckgo

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

elevenlabs

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

exa

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

fal

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

feishu

chore: update dependencies

2026-05-21 08:28:44 +01:00

file-transfer

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

firecrawl

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

fireworks

chore: update dependencies

2026-05-21 08:28:44 +01:00

github-copilot

chore: update dependencies

2026-05-21 08:28:44 +01:00

google

chore: update dependencies

2026-05-21 08:28:44 +01:00

google-meet

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

googlechat

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

gradium

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

groq

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

huggingface

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

image-generation-core

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

imessage

refactor: remove sender owner tool gating

2026-05-21 15:14:48 +01:00

inworld

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

irc

test(secret-file): cover NickServ + account-level symlinks, narrow inspect catch (#84713)

2026-05-20 15:35:52 -07:00

kilocode

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

kimi-coding

chore(deadcode): dedupe repeated helpers

2026-05-21 18:47:09 +08:00

line

fix(infra): restore symlink rejection in tryReadSecretFileSync (#84711)

2026-05-20 15:21:13 -07:00

litellm

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

llm-task

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

lmstudio

chore: update dependencies

2026-05-21 08:28:44 +01:00

lobster

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

matrix

refactor: remove sender owner tool gating

2026-05-21 15:14:48 +01:00

mattermost

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

media-understanding-core

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

memory-core

fix(memory): stop recall tracking when dreaming is disabled

2026-05-21 17:13:49 +08:00

memory-lancedb

chore: update dependencies

2026-05-21 08:28:44 +01:00

memory-wiki

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

microsoft

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

microsoft-foundry

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

migrate-claude

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

migrate-hermes

chore(deadcode): dedupe repeated helpers

2026-05-21 18:47:09 +08:00

minimax

fix(minimax): stop advertising music duration control (#84765)

2026-05-21 02:26:17 +00:00

mistral

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

moonshot

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

msteams

refactor: remove sender owner tool gating

2026-05-21 15:14:48 +01:00

nextcloud-talk

fix(infra): restore symlink rejection in tryReadSecretFileSync (#84711)

2026-05-20 15:21:13 -07:00

nostr

chore(deadcode): dedupe repeated helpers

2026-05-21 18:47:09 +08:00

nvidia

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

oc-path

chore(deadcode): dedupe repeated helpers

2026-05-21 18:47:09 +08:00

ollama

Fix Ollama cloud API key discovery (#85091)

2026-05-21 20:54:59 +00:00

open-prose

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

openai

chore(deadcode): dedupe repeated helpers

2026-05-21 18:47:09 +08:00

opencode

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

opencode-go

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

openrouter

chore(deadcode): dedupe repeated helpers

2026-05-21 18:47:09 +08:00

openshell

fix(openshell): use NVIDIA CLI contract

2026-05-21 22:51:57 +08:00

perplexity

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

phone-control

chore: update dependencies

2026-05-15 07:28:28 +01:00

policy

Policy: add model, network, and MCP conformance checks (#80783)

2026-05-21 07:27:16 -07:00

qa-channel

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

qa-lab

fix(qa): accept Telegram no-reply timeout details

2026-05-21 22:45:25 +01:00

qa-matrix

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

qianfan

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

qqbot

refactor: remove sender owner tool gating

2026-05-21 15:14:48 +01:00

qwen

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

runway

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

searxng

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

senseaudio

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

sglang

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

signal

refactor: remove sender owner tool gating

2026-05-21 15:14:48 +01:00

skill-workshop

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

slack

refactor: remove sender owner tool gating

2026-05-21 15:14:48 +01:00

speech-core

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

stepfun

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

synology-chat

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

synthetic

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

talk-voice

chore: update dependencies

2026-05-15 07:28:28 +01:00

tavily

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

telegram

Fix Telegram isolated polling stall watchdog (#84861)

2026-05-21 00:19:10 -07:00

tencent

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

test-support

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

thread-ownership

test: guard thread ownership mock calls

2026-05-12 00:23:11 +01:00

tlon

chore: update dependencies

2026-05-21 08:28:44 +01:00

together

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

tokenjuice

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

tts-local-cli

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

twitch

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

venice

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

vercel-ai-gateway

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

video-generation-core

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

vllm

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

voice-call

feat(plugin-sdk): add session entry workflow helpers

2026-05-21 22:41:45 +01:00

volcengine

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

voyage

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

vydra

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

web-readability

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

webhooks

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

whatsapp

fix(whatsapp): update baileys dependency

2026-05-21 22:20:09 +01:00

xai

fix(xai): keep OAuth URL clickable (#84927)

2026-05-21 07:08:34 -07:00

xiaomi

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

zai

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

zalo

fix(infra): restore symlink rejection in tryReadSecretFileSync (#84711)

2026-05-20 15:21:13 -07:00

zalouser

chore(release): bump version to 2026.5.20

2026-05-20 21:58:56 +01:00

.npmignore

…

AGENTS.md

docs: prefer clean refactors over compat shims

2026-05-16 12:38:51 +01:00

CLAUDE.md

…

music-generation-providers.live.test.ts

feat: add fal and OpenRouter music generation (#82789)

2026-05-17 02:05:22 +01:00

tsconfig.package-boundary.base.json

…

tsconfig.package-boundary.paths.json

…

video-generation-providers.live.test.ts

test(live): tolerate provider drift in release checks

2026-05-17 02:36:48 +08:00