viyatb-oai 3391e5ea86 feat(sandbox): enforce proxy-aware network routing in sandbox (#11113) ...

## Summary
- expand proxy env injection to cover common tool env vars
(`HTTP_PROXY`/`HTTPS_PROXY`/`ALL_PROXY`/`NO_PROXY` families +
tool-specific variants)
- harden macOS Seatbelt network policy generation to route through
inferred loopback proxy endpoints and fail closed when proxy env is
malformed
- thread proxy-aware Linux sandbox flags and add minimal bwrap netns
isolation hook for restricted non-proxy runs
- add/refresh tests for proxy env wiring, Seatbelt policy generation,
and Linux sandbox argument wiring

3391e5ea86 · 2026-02-10 07:44:21 +00:00

History

..

agent

Revert "chore: enable sub agents" (#11230)

2026-02-09 20:22:38 +00:00

apps

[apps] Add gated instructions for Apps. (#10924)

2026-02-09 14:48:09 -08:00

auth

fix(app-server): for external auth, replace id_token with chatgpt_acc… (#11240)

2026-02-09 20:48:58 -08:00

bin

add generated jsonschema for config.toml (#8956)

2026-01-13 10:22:51 -08:00

command_safety

fix: unsafe auto-approval of git commands (#10258)

2026-02-02 12:30:17 -08:00

config

Load requirements on windows (#10770)

2026-02-09 16:05:38 +00:00

config_loader

Load requirements on windows (#10770)

2026-02-09 16:05:38 +00:00

context_manager

core: add focused diagnostics for remote compaction overflows (#11133)

2026-02-09 12:42:20 -08:00

features

[connectors] Support connectors part 2 - slash command and tui (#9728)

2026-01-28 19:51:58 -08:00

hooks

Add hooks implementation and wire up to notify (#9691)

2026-02-05 16:49:35 +00:00

instructions

chore: add phase to message responseitem (#10455)

2026-02-03 02:52:26 +00:00

mcp

feat: add SkillPolicy to skill metadata and support allow_implicit_invocation (#11244)

2026-02-09 23:13:27 -08:00

models_manager

Disable dynamic model refresh for custom model providers (#11239)

2026-02-09 21:36:09 -08:00

rollout

Defer persistence of rollout file (#11028)

2026-02-07 23:05:03 -08:00

sandboxing

feat(sandbox): enforce proxy-aware network routing in sandbox (#11113)

2026-02-10 07:44:21 +00:00

skills

feat: add SkillPolicy to skill metadata and support allow_implicit_invocation (#11244)

2026-02-09 23:13:27 -08:00

state

feat: tie shell snapshot to cwd (#11231)

2026-02-09 22:14:39 +00:00

tasks

feat(sandbox): enforce proxy-aware network routing in sandbox (#11113)

2026-02-10 07:44:21 +00:00

tools

feat(sandbox): enforce proxy-aware network routing in sandbox (#11113)

2026-02-10 07:44:21 +00:00

unified_exec

feat(sandbox): enforce proxy-aware network routing in sandbox (#11113)

2026-02-10 07:44:21 +00:00

analytics_client.rs

feat: fire tracking events for skill invocation (#10120)

2026-01-31 18:06:26 -08:00

api_bridge.rs

Add more detail to 401 error (#10508)

2026-02-03 14:58:33 +00:00

apply_patch.rs

remove sandbox globals. (#9797)

2026-01-27 11:04:23 -08:00

auth.rs

fix(app-server): for external auth, replace id_token with chatgpt_acc… (#11240)

2026-02-09 20:48:58 -08:00

bash.rs

chore: use some raw strings to reduce quoting (#9745)

2026-01-22 22:38:10 -08:00

client_common.rs

feat(app-server, core): allow text + image content items for dynamic tool outputs (#10567)

2026-02-04 16:12:47 -08:00

client.rs

Move warmup to the task level (#11216)

2026-02-09 10:57:52 -08:00

codex_delegate.rs

Added support for live updates to skills (#10478)

2026-02-04 15:25:03 -08:00

codex_thread.rs

[apps] Add thread_id param to optionally load thread config for apps feature check. (#11279)

2026-02-09 23:10:26 -08:00

codex.rs

feat: add SkillPolicy to skill metadata and support allow_implicit_invocation (#11244)

2026-02-09 23:13:27 -08:00

compact_remote.rs

core: add focused diagnostics for remote compaction overflows (#11133)

2026-02-09 12:42:20 -08:00

compact.rs

feat: include [experimental_network] in <environment_context> (#11044)

2026-02-08 15:16:50 -08:00

connectors.rs

[apps] Improve app loading. (#10994)

2026-02-08 15:24:56 -08:00

custom_prompts.rs

fix(core): load custom prompts from symlinked Markdown files (#3643)

2025-11-04 17:44:02 -08:00

default_client.rs

Add enforce_residency to requirements (#10263)

2026-01-31 00:26:25 +00:00

env.rs

[device-auth] When headless environment is detected, show device login flow instead. (#8756)

2026-01-08 21:48:30 -08:00

environment_context.rs

feat: include [experimental_network] in <environment_context> (#11044)

2026-02-08 15:16:50 -08:00

error.rs

Add more detail to 401 error (#10508)

2026-02-03 14:58:33 +00:00

event_mapping.rs

fix(tui): conditionally restore status indicator using message phase (#10947)

2026-02-07 02:39:52 +00:00

exec_env.rs

Inject CODEX_THREAD_ID into the terminal environment (#10096)

2026-02-03 11:31:12 -08:00

exec_policy.rs

Removed "exec_policy" feature flag (#10851)

2026-02-06 08:59:47 -08:00

exec.rs

feat(sandbox): enforce proxy-aware network routing in sandbox (#11113)

2026-02-10 07:44:21 +00:00

features.rs

fix(feature) UnderDevelopment feature must be off (#11242)

2026-02-09 15:14:15 -08:00

file_watcher.rs

Fixed bug in file watcher that results in spurious skills update events and large log files (#11217)

2026-02-09 10:33:57 -08:00

flags.rs

chore: drop unused values from env_flags (#4188)

2025-09-24 14:29:51 -07:00

function_tool.rs

nit: drop unused function call error (#8903)

2026-01-08 15:07:30 +00:00

git_info.rs

make codex better at git (#10145)

2026-02-02 16:57:29 -08:00

landlock.rs

feat(sandbox): enforce proxy-aware network routing in sandbox (#11113)

2026-02-10 07:44:21 +00:00

lib.rs

[apps] Add gated instructions for Apps. (#10924)

2026-02-09 14:48:09 -08:00

mcp_connection_manager.rs

feat: search_tool (#10657)

2026-02-09 12:53:50 -08:00

mcp_tool_call.rs

feat(app-server, core): allow text + image content items for dynamic tool outputs (#10567)

2026-02-04 16:12:47 -08:00

memory_trace.rs

Session-level model client (#10664)

2026-02-04 16:58:48 -08:00

mentions.rs

[connectors] Support connectors part 2 - slash command and tui (#9728)

2026-01-28 19:51:58 -08:00

message_history.rs

chore: unify conversation with thread name (#8830)

2026-01-07 17:04:53 +00:00

model_provider_info.rs

go back to auto-enabling web_search for azure (#10820)

2026-02-05 14:57:07 -08:00

network_proxy_loader.rs

chore: change ConfigState so it no longer depends on a single config.toml file for reloading (#11262)

2026-02-09 19:26:39 -08:00

otel_init.rs

feat: show runtime metrics in console (#10278)

2026-01-30 22:20:02 -08:00

parse_command.rs

[CODEX-4427] improve parsed commands (#8933)

2026-01-13 16:59:33 -08:00

path_utils.rs

Fixed symlink support for config.toml (#9445)

2026-01-18 19:22:28 -08:00

personality_migration.rs

chore(config) Rename config setting to personality (#10314)

2026-01-31 19:38:06 -08:00

powershell.rs

feat(windows) start powershell in utf-8 mode (#7902)

2025-12-22 09:36:44 -08:00

project_doc.rs

[apps] Add gated instructions for Apps. (#10924)

2026-02-09 14:48:09 -08:00

proposed_plan_parser.rs

Plan mode: stream proposed plans, emit plan items, and render in TUI (#9786)

2026-01-30 18:59:30 +00:00

review_format.rs

feat: detached review (#7292)

2025-11-28 11:34:57 +00:00

review_prompts.rs

chore: review everywhere (#7444)

2025-12-02 11:26:27 +00:00

safety.rs

remove sandbox globals. (#9797)

2026-01-27 11:04:23 -08:00

seatbelt_base_policy.sbpl

feat: update sandbox policy to allow TTY (#7580)

2025-12-04 17:58:58 +00:00

seatbelt_network_policy.sbpl

feat(sandbox): enforce proxy-aware network routing in sandbox (#11113)

2026-02-10 07:44:21 +00:00

seatbelt.rs

feat(sandbox): enforce proxy-aware network routing in sandbox (#11113)

2026-02-10 07:44:21 +00:00

session_prefix.rs

Leverage state DB metadata for thread summaries (#10621)

2026-02-05 16:39:11 +00:00

shell_snapshot.rs

feat: tie shell snapshot to cwd (#11231)

2026-02-09 22:14:39 +00:00

shell.rs

fix: make sure the shell exists (#10222)

2026-01-30 14:18:31 +01:00

spawn.rs

feat(sandbox): enforce proxy-aware network routing in sandbox (#11113)

2026-02-10 07:44:21 +00:00

state_db.rs

state: add memory consolidation lock primitives (#11199)

2026-02-09 21:04:20 +00:00

stream_events_utils.rs

feat(app-server, core): allow text + image content items for dynamic tool outputs (#10567)

2026-02-04 16:12:47 -08:00

tagged_block_parser.rs

Plan mode: stream proposed plans, emit plan items, and render in TUI (#9786)

2026-01-30 18:59:30 +00:00

terminal.rs

[codex-tui] exit when terminal is dumb (#9293)

2026-01-20 16:17:38 -08:00

text_encoding.rs

Fix: Improve text encoding for shell output in VSCode preview (#6178) (#6182)

2025-11-20 11:04:11 -08:00

thread_manager.rs

Add resume_agent collab tool (#10903)

2026-02-07 17:31:45 +01:00

token_data.rs

fix(app-server): for external auth, replace id_token with chatgpt_acc… (#11240)

2026-02-09 20:48:58 -08:00

truncate.rs

core: add focused diagnostics for remote compaction overflows (#11133)

2026-02-09 12:42:20 -08:00

turn_diff_tracker.rs

chore: more clippy rules 2 (#4057)

2025-09-22 17:16:02 +00:00

turn_metadata.rs

Move warmup to the task level (#11216)

2026-02-09 10:57:52 -08:00

user_shell_command.rs

chore: add phase to message responseitem (#10455)

2026-02-03 02:52:26 +00:00

util.rs

Cloud Requirements: increase timeout and retries (#10631)

2026-02-05 01:52:12 +00:00

web_search.rs

add missing fields to WebSearchAction and update app-server types (#10276)

2026-01-30 16:37:56 -08:00

windows_sandbox.rs

emit a separate metric when the user cancels UAT during elevated setup (#10399)

2026-02-02 15:31:08 -08:00