core-agent-ide/codex-rs/windows-sandbox-rs
Anton Panasenko 3429de21b3
feat: introduce ExternalSandbox policy (#8290)
## Description

Introduced `ExternalSandbox` policy to cover use case when sandbox
defined by outside environment, effectively it translates to
`SandboxMode#DangerFullAccess` for file system (since sandbox configured
on container level) and configurable `network_access` (either Restricted
or Enabled by outside environment).

as example you can configure `ExternalSandbox` policy as part of
`sendUserTurn` v1 app_server API:

```
 {
            "conversationId": <id>,
            "cwd": <cwd>,
            "approvalPolicy": "never",
            "sandboxPolicy": {
                  "type": ""external-sandbox",
                  "network_access": "enabled"/"restricted"
            },
            "model": <model>,
            "effort": <effort>,
            ....
        }
```
2025-12-18 17:02:03 -08:00
..
src feat: introduce ExternalSandbox policy (#8290) 2025-12-18 17:02:03 -08:00
build.rs Elevated Sandbox 2 (#7792) 2025-12-10 21:23:16 -08:00
Cargo.lock Windows Sandbox - Alpha version (#4905) 2025-10-30 15:51:57 -07:00
Cargo.toml feat: introduce ExternalSandbox policy (#8290) 2025-12-18 17:02:03 -08:00
codex-windows-sandbox-setup.manifest Elevated Sandbox 2 (#7792) 2025-12-10 21:23:16 -08:00
sandbox_smoketests.py smoketest for browser vuln, rough draft of Windows security doc (#6822) 2025-11-18 16:43:34 -08:00