fix: read-only Codex sandbox with unified diff file fallback for oversized diffs#620

Merged

wesm merged 18 commits intomainfrom

fix/codex-sandboxing

Apr 6, 2026

Commits on Apr 5, 2026

fix: use read-only sandbox for Codex reviews with diff file snapshots
wesm
committed
refactor: unified diff file fallback for all agents

wesm
and
claude
committed
refactor: rename Codex-specific placeholder and prebuilt helpers

wesm
and
claude
committed
fix: platform-neutral diff file reference, retry on snapshot failure

wesm
and
claude
committed
fix: only write diff snapshot when truncation is detected

wesm
and
claude
committed
fix: preserve Build() compat for non-worker callers, fix prebuilt degradation

wesm
and
claude
committed
fix: strip both full and compact diff-file fallback variants

wesm
and
claude
committed
fix: hard-fail prebuilt prompts on snapshot failure, delete stripDiffFileBlock

wesm
and
claude
committed
test: end-to-end diff snapshot integration tests

wesm
and
claude
committed
test: tag snapshot integration tests with //go:build integration

wesm
and
claude
committed
test: move Kilo and OpenCode agent tests behind integration tag

wesm
and
claude
committed
test: split Kilo/OpenCode unit tests from integration tests

wesm
and
claude
committed
fix: add BuildWithSnapshot for all review callers

wesm
and
claude
committed