@rynx-ai/runtime 0.1.11-beta.49 → 0.1.11-beta.50

package/dist/codex-app-server/transport.d.ts

@@ -49,10 +49,10 @@ export declare class DefaultCodexAppServerProcessSpawner implements CodexAppServ
         cliPath: string;
         args?: string[];
         /**
-         * Extra env merged on top of the allowlisted child env (see
+         * Extra env merged on top of the inherited child env (see
          * {@link createCodexChildEnv}). Used to inject a per-agent retry budget
          * (`OPENAI_MAX_RETRIES` / `OPENAI_TIMEOUT`) into a dedicated app-server.
-         * Merged after the allowlist, so it is intentionally exempt from it — only
+         * Merged after the inherited environment, so it takes precedence — only
          * the specific keys the caller computed are added, never arbitrary env.
          */
         extraEnv?: Record<string, string>;

package/dist/codex-app-server/ws-channel.d.ts

@@ -3,7 +3,7 @@ export interface WsRpcChannelOptions {
     cliPath: string;
     /** app-server args WITHOUT `--listen` (the channel appends `--listen ws://…`). */
     baseArgs: string[];
-    /** Extra env merged over the allowlisted codex child env (retry budget etc.). */
+    /** Extra env merged over the inherited codex child env (retry budget etc.). */
     extraEnv?: Record<string, string>;
     logger?: TransportLogger;
     /** Ms to wait for the app-server to accept a connection. */

package/dist/codex-child-env.js

@@ -1,28 +1,3 @@
-const CODEX_CHILD_ENV_ALLOWLIST = [
-    "PATH",
-    "HOME",
-    "USER",
-    "SHELL",
-    "TMPDIR",
-    "CODEX_HOME",
-    "TRAE_HOME",
-    // Keep Runtime-local CLIs on the same resident daemon when its state root is
-    // configured outside the default ~/.rynx location.
-    "RYNX_HOME",
-    // RunnerManager supplies this rotation-safe handle for the exact managed
-    // Session. Codex command executions need it to call their own Runtime
-    // Browser; the raw Browser capability and internal runner key stay outside
-    // the allowlist.
-    "RYNX_BROWSER_CONTEXT_FILE",
-    "HTTP_PROXY",
-    "HTTPS_PROXY",
-    "ALL_PROXY",
-    "NO_PROXY",
-    "http_proxy",
-    "https_proxy",
-    "all_proxy",
-    "no_proxy",
-];
 const PROXY_ENV_KEYS = [
     "HTTP_PROXY",
     "HTTPS_PROXY",
@@ -42,13 +17,9 @@ function withLoopbackNoProxy(value) {
     return entries.join(",");
 }
 export function createCodexChildEnv(env) {
-    const childEnv = {};
-    for (const key of CODEX_CHILD_ENV_ALLOWLIST) {
-        const value = env[key];
-        if (typeof value === "string" && value.length > 0) {
-            childEnv[key] = value;
-        }
-    }
+    // Managed Codex/TraeX processes need the same development environment as
+    // their runner, including workspace metadata and user-configured CLI keys.
+    const childEnv = { ...env };
     if (childEnv.NO_PROXY || childEnv.no_proxy || PROXY_ENV_KEYS.some((key) => childEnv[key])) {
         const upper = childEnv.NO_PROXY ?? childEnv.no_proxy;
         const lower = childEnv.no_proxy ?? childEnv.NO_PROXY;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rynx-ai/runtime",
-  "version": "0.1.11-beta.49",
+  "version": "0.1.11-beta.50",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/rynx-ai/rynx.git",
@@ -26,7 +26,7 @@
   "dependencies": {
     "smol-toml": "1.7.1",
     "ws": "^8.21.0",
-    "@rynx-ai/core": "0.1.11-beta.49"
+    "@rynx-ai/core": "0.1.11-beta.50"
   },
   "devDependencies": {
     "@types/ws": "^8.18.1"