[codex] Centralize subprocess env boundaries (#585)

* Centralize subprocess env boundaries * Remove env boundary static audit test * Tighten env boundary process launches * Fix Windows native process launches * Inline provider env pass-throughs
2026-04-27 13:24:16 +08:00
parent 90032570ec
commit 15df680a64
40 changed files with 760 additions and 304 deletions
@@ -257,6 +257,7 @@ function spawnAsync(
 ): Promise<{ stdout: string; stderr: string; exitCode: number | null }> {
  return new Promise((resolve, reject) => {
    const child = spawnProcess(command, args, {
+      envMode: "internal",
      env: options.env,
      stdio: ["ignore", "pipe", "pipe"],
    });