fix(codex): keep SRT MCP on managed Unix sockets - #65
Merged
Conversation
Summary: - Allow SRT settings to grant access to specific Unix socket paths. - Keep local Codex MCP on the managed Unix socket under SRT. - Prioritize stdout draining over stderr tailing for app-server ports. Rationale: - Current SRT supports network.allowUnixSockets, so the MCP channel no longer needs to move through loopback TCP just because SRT is enabled. - The allowance is limited to the per-session MCP socket directory instead of opening broad local IPC access. - Stdout carries the JSON-RPC protocol, so it should be drained ahead of diagnostic stderr noise under SRT. Tests: - HEX_HOME=/private/tmp/symphony-hex-home MIX_ENV=test mise exec -- mix test test/symphony_elixir/agent_sandbox_config_test.exs test/symphony_elixir/app_server_test.exs - HEX_HOME=/private/tmp/symphony-hex-home MIX_ENV=test mise exec -- mix specs.check - HEX_HOME=/private/tmp/symphony-hex-home MIX_ENV=test mise exec -- mix compile --warnings-as-errors
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Context
RSM-3734 SRT runs can fail when Codex cannot write stdout under local transport pressure.
TL;DR
Keep SRT Codex MCP on a token-authenticated Unix socket instead of loopback TCP.
Summary
network.allowUnixSocketsfor the per-session MCP socket directory.Alternatives
Test Plan
make all