mirror of https://github.com/pchuan98/codex.git synced 2026-07-01 00:31:56 +08:00

Files

T

Adam Perry @ OpenAI 52a50aec70 sandboxing: migrate cwd inputs to PathUri (#27816 )

## Why

Sandbox cwd values can cross app-server and exec-server host boundaries.
They should retain URI semantics until the receiving host validates them
instead of being interpreted early as native paths.

## What

- Carry `PathUri` through filesystem sandbox contexts, sandbox commands,
and transform inputs.
- Convert command and policy cwd once in `SandboxManager::transform`,
then keep launch requests native.
- Preserve sandbox cwd over remote filesystem transport and reject
non-native URIs without fallback.
- Cache paired native/URI turn-environment cwd values during migration,
with immutable access to keep them synchronized.
- Extend existing protocol, forwarding, transform, and core runtime
tests.

52a50aec70 · 2026-06-12 11:38:01 -07:00

History

.cargo

Ignore proc-macro-error2 advisory (#26974 )

2026-06-08 11:39:08 +02:00

.config

[codex] Speed up local nextest runs (#26479 )

2026-06-09 12:48:04 -07:00

.github/workflows

Uprev Rust toolchain pins to 1.95.0 (#24684 )

2026-05-26 20:59:47 -07:00

agent-graph-store

[codex] Remove async_trait from first-party code (#27475 )

2026-06-11 18:16:39 -07:00

agent-identity

…

analytics

Emit plugin ID on MCP tool call analytics events (#27483 )

2026-06-11 09:55:53 -07:00

ansi-escape

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

app-server

realtime: add AVAS architecture override (#27720 )

2026-06-12 18:11:13 +00:00

app-server-client

Add request_user_input auto-resolution window contract (#27256 )

2026-06-11 22:30:41 -07:00

app-server-daemon

feat(app-server): persist remote-control desired state (#27445 )

2026-06-11 21:28:52 -07:00

app-server-protocol

realtime: add AVAS architecture override (#27720 )

2026-06-12 18:11:13 +00:00

app-server-test-client

[codex] Add user input client ids (#24653 )

2026-05-28 14:54:39 -07:00

app-server-transport

feat(app-server): persist remote-control desired state (#27445 )

2026-06-11 21:28:52 -07:00

apply-patch

[codex] migrate ExecutorFileSystem paths to PathUri (#27424 )

2026-06-11 18:44:18 +00:00

arg0

cli: add package path from install context (#26189 )

2026-06-03 19:08:19 -07:00

async-utils

[codex] Remove async_trait from first-party code (#27475 )

2026-06-11 18:16:39 -07:00

aws-auth

feat: enable AWS login credentials for Bedrock auth (#21623 )

2026-05-08 04:07:59 +00:00

backend-client

feat(app-server): expose account token usage [1 of 2] (#25344 )

2026-06-05 14:43:44 +00:00

bwrap

…

chatgpt

Route hosted Apps MCP through extensions (#27191 )

2026-06-09 22:44:16 +02:00

cli

feat(app-server): persist remote-control desired state (#27445 )

2026-06-11 21:28:52 -07:00

cloud-config

[codex] Tune cloud config cache intervals (#26513 )

2026-06-10 23:42:15 -07:00

cloud-tasks

[codex] Remove async_trait from first-party code (#27475 )

2026-06-11 18:16:39 -07:00

cloud-tasks-client

[codex] Remove async_trait from first-party code (#27475 )

2026-06-11 18:16:39 -07:00

cloud-tasks-mock-client

[codex] Remove async_trait from first-party code (#27475 )

2026-06-11 18:16:39 -07:00

code-mode

[code-mode] Reject remote image URLs from output helpers (#27732 )

2026-06-12 02:49:17 -07:00

code-mode-host

code-mode standalone: extract protocol and add host crate (#27724 )

2026-06-11 22:37:26 -07:00

code-mode-protocol

[code-mode] Reject remote image URLs from output helpers (#27732 )

2026-06-12 02:49:17 -07:00

codex-api

realtime: add AVAS architecture override (#27720 )

2026-06-12 18:11:13 +00:00

codex-backend-openapi-models

feat: show enterprise monthly credit limits in status (#24812 )

2026-06-01 21:25:42 -07:00

codex-client

[codex] Remove async_trait from first-party code (#27475 )

2026-06-11 18:16:39 -07:00

codex-experimental-api-macros

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

codex-home

[codex] Load user instructions through an injected provider (#27101 )

2026-06-11 19:28:47 +00:00

codex-mcp

Extract shared plugin MCP config parsing (#27863 )

2026-06-12 15:10:05 +02:00

collaboration-mode-templates

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

config

realtime: add AVAS architecture override (#27720 )

2026-06-12 18:11:13 +00:00

connectors

Seed prompt history from resumed messages (#24298 )

2026-05-28 22:08:05 -07:00

context-fragments

skills: resolve per-turn catalogs from turn input context (#26106 )

2026-06-03 13:32:55 +02:00

core

sandboxing: migrate cwd inputs to PathUri (#27816 )

2026-06-12 11:38:01 -07:00

core-api

[codex] Load user instructions through an injected provider (#27101 )

2026-06-11 19:28:47 +00:00

core-plugins

Extract shared plugin MCP config parsing (#27863 )

2026-06-12 15:10:05 +02:00

core-skills

[codex] migrate ExecutorFileSystem paths to PathUri (#27424 )

2026-06-11 18:44:18 +00:00

docs

protocol: remove submission-side serde from Op (#26674 )

2026-06-05 15:41:13 -07:00

exec

[codex] Load user instructions through an injected provider (#27101 )

2026-06-11 19:28:47 +00:00

exec-server

sandboxing: migrate cwd inputs to PathUri (#27816 )

2026-06-12 11:38:01 -07:00

execpolicy

deps: update starlark to 0.14.2 (#24820 )

2026-06-07 17:35:33 -07:00

execpolicy-legacy

deps: update starlark to 0.14.2 (#24820 )

2026-06-07 17:35:33 -07:00

ext

Make MCP server contributions thread-scoped (#27670 )

2026-06-12 11:20:34 +02:00

external-agent-migration

external-agent-migration: avoid mixed MCP transport configs (#26435 )

2026-06-04 14:16:03 -04:00

external-agent-sessions

[codex] Speed up external agent session imports (#26637 )

2026-06-08 14:16:32 -04:00

features

core: enable remote compaction v2 by default (#27573 )

2026-06-11 10:07:19 +00:00

feedback

Attach Windows sandbox log to feedback reports (#24623 )

2026-05-26 15:59:25 -07:00

file-search

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

file-system

sandboxing: migrate cwd inputs to PathUri (#27816 )

2026-06-12 11:38:01 -07:00

file-watcher

Fix fs/watch debounce batching (#24716 )

2026-05-28 23:09:55 -07:00

git-utils

[codex] migrate ExecutorFileSystem paths to PathUri (#27424 )

2026-06-11 18:44:18 +00:00

hooks

Warn when hooks.json has unsupported top-level fields (#26426 )

2026-06-11 23:08:07 +00:00

install-context

cli: add package path from install context (#26189 )

2026-06-03 19:08:19 -07:00

keyring-store

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

linux-sandbox

[codex] Allow socketpair in proxy-routed Linux sandbox (#26625 )

2026-06-05 09:34:36 -07:00

lmstudio

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

fix: serialize auth environment tests (#27879 )

2026-06-12 16:24:08 +02:00

mcp-server

[codex] Load user instructions through an injected provider (#27101 )

2026-06-11 19:28:47 +00:00

memories

[codex] Load AGENTS.md from all bound environments (#27696 )

2026-06-12 00:10:06 -07:00

message-history

Optimize unbounded byte scans with memchr (#26265 )

2026-06-04 09:53:08 -04:00

model-provider

[codex] Remove async_trait from first-party code (#27475 )

2026-06-11 18:16:39 -07:00

model-provider-info

[codex-rs] support v2 personal access tokens (#25731 )

2026-06-05 17:36:18 -07:00

models-manager

[codex] Remove async_trait from first-party code (#27475 )

2026-06-11 18:16:39 -07:00

network-proxy

[codex] Remove async_trait from first-party code (#27475 )

2026-06-11 18:16:39 -07:00

ollama

Optimize unbounded byte scans with memchr (#26265 )

2026-06-04 09:53:08 -04:00

otel

feat: add Bedrock API key as a managed auth mode (#27443 )

2026-06-10 20:42:38 -07:00

plugin

Add executor-owned plugin resolution (#27692 )

2026-06-12 13:37:33 +02:00

process-hardening

fix(process-hardening): preserve macos malloc diagnostics (#24479 )

2026-05-25 17:26:10 -03:00

prompts

skills: resolve per-turn catalogs from turn input context (#26106 )

2026-06-03 13:32:55 +02:00

protocol

realtime: add AVAS architecture override (#27720 )

2026-06-12 18:11:13 +00:00

realtime-webrtc

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

response-debug-context

…

responses-api-proxy

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

rmcp-client

[codex] Retry streamable HTTP initialize failures (#25147 )

2026-06-09 15:49:48 -07:00

rollout

[codex] Remove async_trait from first-party code (#27475 )

2026-06-11 18:16:39 -07:00

rollout-trace

multi-agent: add path-based v2 activity tracking (#27007 )

2026-06-09 12:14:48 +02:00

sandboxing

sandboxing: migrate cwd inputs to PathUri (#27816 )

2026-06-12 11:38:01 -07:00

scripts

Uprev Rust toolchain pins to 1.95.0 (#24684 )

2026-05-26 20:59:47 -07:00

secrets

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

shell-command

[codex] Add /usr/bin/bash shell fallback (#26538 )

2026-06-05 09:38:26 -07:00

shell-escalation

[codex] Remove async_trait from first-party code (#27475 )

2026-06-11 18:16:39 -07:00

skills

[codex] Propagate plugin app categories (#27420 )

2026-06-11 10:34:41 -07:00

state

feat(app-server): persist remote-control desired state (#27445 )

2026-06-11 21:28:52 -07:00

stdio-to-uds

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

terminal-detection

feat(cli): add codex doctor diagnostics (#22336 )

2026-05-13 21:23:19 +00:00

test-binary-support

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

thread-manager-sample

realtime: add AVAS architecture override (#27720 )

2026-06-12 18:11:13 +00:00

thread-store

[codex] Remove async_trait from first-party code (#27475 )

2026-06-11 18:16:39 -07:00

tools

Route image extension reads through turn environments v2 (#27498 )

2026-06-11 16:32:52 -07:00

tui

tui: Allow extra o's in /goal command (#27814 )

2026-06-12 09:30:25 -07:00

uds

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

utils

Add executor-owned plugin resolution (#27692 )

2026-06-12 13:37:33 +02:00

v8-poc

CI: Customize v8 building (#22086 )

2026-05-18 21:33:05 -07:00

vendor

…

windows-sandbox-rs

Improve Windows sandbox setup refresh diagnostics (#26471 )

2026-06-04 16:52:10 -07:00

.gitignore

…

BUILD.bazel

…

Cargo.lock

sandboxing: migrate cwd inputs to PathUri (#27816 )

2026-06-12 11:38:01 -07:00

Cargo.toml

code-mode standalone: extract protocol and add host crate (#27724 )

2026-06-11 22:37:26 -07:00

clippy.toml

…

config.md

…

default.nix

…

deny.toml

[codex] Remove async_trait from first-party code (#27475 )

2026-06-11 18:16:39 -07:00

README.md

Simplify Codex CLI README (#26313 )

2026-06-04 09:16:03 -07:00

rust-toolchain.toml

Uprev Rust toolchain pins to 1.95.0 (#24684 )

2026-05-26 20:59:47 -07:00

rustfmt.toml

…

README.md

Codex CLI

Codex CLI Documentation