Skip to content

Add per-session workspace sandbox#3

Merged
mrcfps merged 56 commits intomainfrom
session-workspaces
Apr 27, 2026
Merged

Add per-session workspace sandbox#3
mrcfps merged 56 commits intomainfrom
session-workspaces

Conversation

@mrcfps
Copy link
Copy Markdown
Contributor

@mrcfps mrcfps commented Apr 27, 2026

Summary

  • Add per-session workspace sandboxing for file tools, including path classification, quota checks, and workspace lifecycle cleanup on session deletion.
  • Thread workspace paths through controller/chat context and expose session workspace metadata in APIs and generated clients.
  • Add desktop/web UI controls to copy/open the current session workspace and update filesystem access messaging.

Tests

  • Not run as part of PR creation.

Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: b3217e43e3

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread apps/controller/src/routes/sessions.ts Outdated
Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 44f1135303

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread apps/controller/src/session-workspace-service.ts Outdated
Comment thread apps/controller/src/app.ts
Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: fba451deca

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread apps/controller/src/session-workspace-service.ts
Comment thread apps/controller/src/session-workspace-service.ts Outdated
@mrcfps mrcfps merged commit 526514f into main Apr 27, 2026
2 checks passed
@mrcfps mrcfps deleted the session-workspaces branch April 27, 2026 09:41
Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 188bde4418

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

const baseDirectory = resolve(options.baseDirectory);

function getWorkspacePath(sessionId: string): string {
assertValidWorkspaceSessionId(sessionId);
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Accept legacy session IDs when deriving workspace paths

getWorkspacePath now hard-fails any ID outside /^ses_[a-z0-9]+$/, but the chat API still accepts any non-empty sessionId and prepareChatRequest persists it verbatim, so UUID/custom IDs that previously worked now fail later when workspace logic runs (chat start, session detail, delete/open workspace) and surface as 500s instead of a client error. This creates a regression for existing data and external clients; either validate/reject incompatible IDs at the API boundary before persisting, or make workspace derivation tolerant of pre-existing session IDs.

Useful? React with 👍 / 👎.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant