Michael Bolin 277babba79 feat: load ExecPolicyManager from ConfigLayerStack (#8453) ...

https://github.com/openai/codex/pull/8354 added support for in-repo
`.config/` files, so this PR updates the logic for loading `*.rules`
files to load `*.rules` files from all relevant layers. The main change
to the business logic is `load_exec_policy()` in
`codex-rs/core/src/exec_policy.rs`.

Note this adds a `config_folder()` method to `ConfigLayerSource` that
returns `Option<AbsolutePathBuf>` so that it is straightforward to
iterate over the sources and get the associated config folder, if any.

277babba79 · 2025-12-22 17:24:17 -08:00

History

..

auth

[Auth] Add keyring support for Codex CLI (#5591)

2025-10-27 12:10:11 -07:00

command_safety

feat: introduce ExternalSandbox policy (#8290)

2025-12-18 17:02:03 -08:00

config

chore: add ConfigLayerStack as a field of Config (#8448)

2025-12-22 14:16:33 -08:00

config_loader

feat: load ExecPolicyManager from ConfigLayerStack (#8453)

2025-12-22 17:24:17 -08:00

context_manager

Do not panic when session contains a tool call without an output (#8048)

2025-12-14 22:16:49 -08:00

features

Chore: remove rmcp feature and exp flag usages (#8087)

2025-12-20 14:18:00 -08:00

mcp

fix: restore MCP startup progress messages in TUI (fixes #7827) (#7828)

2025-12-12 22:07:03 +00:00

models_manager

remove minimal client version (#8447)

2025-12-22 12:52:24 -08:00

rollout

Add public skills + improve repo skill discovery and error UX (#8098)

2025-12-17 01:35:49 -08:00

sandboxing

feat: introduce ExternalSandbox policy (#8290)

2025-12-18 17:02:03 -08:00

skills

Remove plan from system skills (#8374)

2025-12-20 19:42:53 -08:00

state

Add ExecPolicyManager (#8349)

2025-12-22 09:59:32 -08:00

tasks

Rename OpenAI models to models manager (#8346)

2025-12-19 16:20:05 -08:00

tools

Add ExecPolicyManager (#8349)

2025-12-22 09:59:32 -08:00

unified_exec

Add ExecPolicyManager (#8349)

2025-12-22 09:59:32 -08:00

api_bridge.rs

feat: retroactive image placeholder to prevent poisoning (#6774)

2025-12-03 11:35:56 +00:00

apply_patch.rs

Refactor execpolicy fallback evaluation (#7544)

2025-12-03 23:39:48 -08:00

auth.rs

chore: migrate from Config::load_from_base_config_with_overrides to ConfigBuilder (#8276)

2025-12-18 16:12:52 -08:00

bash.rs

Handle concatenation nodes in bash command parser for exec policy (#8395)

2025-12-22 19:59:27 +00:00

client_common.rs

Rename OpenAI models to models manager (#8346)

2025-12-19 16:20:05 -08:00

client.rs

Rename OpenAI models to models manager (#8346)

2025-12-19 16:20:05 -08:00

codex_conversation.rs

Add feedback upload request handling (#5682)

2025-10-27 05:53:39 +00:00

codex_delegate.rs

Rename OpenAI models to models manager (#8346)

2025-12-19 16:20:05 -08:00

codex.rs

feat: load ExecPolicyManager from ConfigLayerStack (#8453)

2025-12-22 17:24:17 -08:00

compact_remote.rs

feat: add compaction event (#7289)

2025-11-25 16:12:14 +00:00

compact.rs

Remote compact for API-key users (#7835)

2025-12-12 10:05:02 -08:00

conversation_manager.rs

Rename OpenAI models to models manager (#8346)

2025-12-19 16:20:05 -08:00

custom_prompts.rs

fix(core): load custom prompts from symlinked Markdown files (#3643)

2025-11-04 17:44:02 -08:00

default_client.rs

feat: change ConfigLayerName into a disjoint union rather than a simple enum (#8095)

2025-12-17 08:13:59 -08:00

env.rs

Fix toasts on Windows under WSL 2 (#7137)

2025-12-11 15:09:00 -08:00

environment_context.rs

feat: introduce ExternalSandbox policy (#8290)

2025-12-18 17:02:03 -08:00

error.rs

chores: models manager (#7937)

2025-12-12 18:59:39 +00:00

event_mapping.rs

Inject SKILL.md when it's explicitly mentioned. (#7763)

2025-12-10 13:59:17 -08:00

exec_env.rs

Set exclude to true by default in app server (#8281)

2025-12-18 14:28:30 -08:00

exec_policy.rs

feat: load ExecPolicyManager from ConfigLayerStack (#8453)

2025-12-22 17:24:17 -08:00

exec.rs

feat: introduce ExternalSandbox policy (#8290)

2025-12-18 17:02:03 -08:00

features.rs

feat: support in-repo .codex/config.toml entries as sources of config info (#8354)

2025-12-22 11:07:36 -08:00

flags.rs

chore: drop unused values from env_flags (#4188)

2025-09-24 14:29:51 -07:00

function_tool.rs

chore: rework tools execution workflow (#5278)

2025-10-20 20:57:37 +01:00

git_info.rs

feat: intercept apply_patch for unified_exec (#7446)

2025-12-02 17:54:02 +00:00

landlock.rs

chore: rework tools execution workflow (#5278)

2025-10-20 20:57:37 +01:00

lib.rs

Rename OpenAI models to models manager (#8346)

2025-12-19 16:20:05 -08:00

mcp_connection_manager.rs

fix: change codex/sandbox-state/update from a notification to a request (#8142)

2025-12-18 15:32:01 -08:00

mcp_tool_call.rs

[MCP] Render MCP tool call result images to the model (#5600)

2025-10-27 17:55:57 -04:00

message_history.rs

chore: migrate from Config::load_from_base_config_with_overrides to ConfigBuilder (#8276)

2025-12-18 16:12:52 -08:00

model_provider_info.rs

Remote compact for API-key users (#7835)

2025-12-12 10:05:02 -08:00

otel_init.rs

[codex] add otel tracing (#7844)

2025-12-12 17:07:17 -08:00

parse_command.rs

parse rg | head a search (#7797)

2025-12-09 18:30:16 -08:00

path_utils.rs

chore: prefer AsRef<Path> to &Path (#8249)

2025-12-18 08:50:13 -08:00

powershell.rs

feat(windows) start powershell in utf-8 mode (#7902)

2025-12-22 09:36:44 -08:00

project_doc.rs

chore: migrate from Config::load_from_base_config_with_overrides to ConfigBuilder (#8276)

2025-12-18 16:12:52 -08:00

review_format.rs

feat: detached review (#7292)

2025-11-28 11:34:57 +00:00

review_prompts.rs

chore: review everywhere (#7444)

2025-12-02 11:26:27 +00:00

safety.rs

feat: introduce ExternalSandbox policy (#8290)

2025-12-18 17:02:03 -08:00

seatbelt_base_policy.sbpl

feat: update sandbox policy to allow TTY (#7580)

2025-12-04 17:58:58 +00:00

seatbelt_network_policy.sbpl

core: widen sandbox to allow certificate ops when network is enabled (#5980)

2025-11-06 12:47:20 -08:00

seatbelt.rs

feat: if .codex is a sub-folder of a writable root, then make it read-only to the sandbox (#8088)

2025-12-15 22:54:43 -08:00

shell_snapshot.rs

feat: add shell snapshot for shell command (#7786)

2025-12-11 13:46:43 +00:00

shell.rs

feat: add shell snapshot for shell command (#7786)

2025-12-11 13:46:43 +00:00

spawn.rs

Kill shell tool process groups on timeout (#5258)

2025-11-07 17:54:35 -08:00

stream_events_utils.rs

nit: trace span for regular task (#8053)

2025-12-16 16:53:15 +00:00

terminal.rs

Terminal Detection Metadata for Per-Terminal Scroll Scaling (#8252)

2025-12-18 12:50:00 -08:00

text_encoding.rs

Fix: Improve text encoding for shell output in VSCode preview (#6178) (#6182)

2025-11-20 11:04:11 -08:00

token_data.rs

Add forced_chatgpt_workspace_id and forced_login_method configuration options (#5303)

2025-10-20 08:50:54 -07:00

truncate.rs

Update Model Info (#7853)

2025-12-11 14:06:07 -08:00

turn_diff_tracker.rs

chore: more clippy rules 2 (#4057)

2025-09-22 17:16:02 +00:00

user_instructions.rs

Inject SKILL.md when it's explicitly mentioned. (#7763)

2025-12-10 13:59:17 -08:00

user_notification.rs

feat: include cwd in notify payload (#5415)

2025-10-20 23:53:03 +00:00

user_shell_command.rs

chore: migrate from Config::load_from_base_config_with_overrides to ConfigBuilder (#8276)

2025-12-18 16:12:52 -08:00

util.rs

fix: do not panic on alphas (#8406)

2025-12-22 00:20:53 +00:00