Skip to content

Migrate the MXC sandbox to the 1.0.0 SDK - #51819

Merged
copyberry[bot] merged 1 commit into
mainfrom
copyberry/codex-internal-to-codex-oss/f3ccbb92ceaa71f16c5d6cb185a7602a5bb8da53
Oct 7, 2026
Merged

copyberry[bot] merged 1 commit into
mainfrom
copyberry/codex-internal-to-codex-oss/f3ccbb92ceaa71f16c5d6cb185a7602a5bb8da53

Conversation

@copyberry

@copyberry copyberry Bot commented Oct 7, 2026 •

Copy link
Copy Markdown

Migrate the MXC sandbox to the 1.0.0 SDK

What changed

  • Replace the separate MXC crates with the pinned mxc-sdk 1.0.0 dependency and update Cargo and Bazel lockfiles.
  • Use the cached PSEC API-set check for availability and the SDK's native deny-path capability check before launch. Native creation and request-specific capabilities are validated at launch.
  • Map empty environments to None to retain Windows user-profile defaults, while keeping nonempty environments explicit. Document the SDK's SystemRoot and LOCALAPPDATA requirements.
  • Configure Bazel's LLVM resource compiler for Windows GNU builds, document Cargo's RC_PATH requirement, and add libproc and libsandbox to the macOS SDK libraries.

Testing

Update the request-building test to verify that nonempty environments remain explicit and empty environments become None.

## What changed

- Replace the separate MXC crates with the pinned `mxc-sdk` 1.0.0 dependency and update Cargo and Bazel lockfiles.
- Use the cached PSEC API-set check for availability and the SDK's native deny-path capability check before launch. Native creation and request-specific capabilities are validated at launch.
- Map empty environments to `None` to retain Windows user-profile defaults, while keeping nonempty environments explicit. Document the SDK's `SystemRoot` and `LOCALAPPDATA` requirements.
- Configure Bazel's LLVM resource compiler for Windows GNU builds, document Cargo's `RC_PATH` requirement, and add `libproc` and `libsandbox` to the macOS SDK libraries.

## Testing

Update the request-building test to verify that nonempty environments remain explicit and empty environments become `None`.

GitOrigin-RevId: f3ccbb92ceaa71f16c5d6cb185a7602a5bb8da53
@copyberry
copyberry Bot force-pushed the copyberry/codex-internal-to-codex-oss/f3ccbb92ceaa71f16c5d6cb185a7602a5bb8da53 branch from 24948e2 to 1c7c43c Compare October 7, 2026 20:21
@chatgpt-codex-connector

Copy link
Copy Markdown
Contributor

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review 🔄 Running since 2026-10-07T20:21:47.307624Z 24948e2 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@copyberry
copyberry Bot merged commit 1c7c43c into main Oct 7, 2026
1 check passed
@copyberry
copyberry Bot deleted the copyberry/codex-internal-to-codex-oss/f3ccbb92ceaa71f16c5d6cb185a7602a5bb8da53 branch October 7, 2026 20:21
@github-actions github-actions Bot locked and limited conversation to collaborators Oct 7, 2026

This branch was successfully deployed

1 active deployment
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants