Michael Bolin 642b7566df fix: introduce AbsolutePathBuf as part of sandbox config (#7856) ...

Changes the `writable_roots` field of the `WorkspaceWrite` variant of
the `SandboxPolicy` enum from `Vec<PathBuf>` to `Vec<AbsolutePathBuf>`.
This is helpful because now callers can be sure the value is an absolute
path rather than a relative one. (Though when using an absolute path in
a Seatbelt config policy, we still have to _canonicalize_ it first.)

Because `writable_roots` can be read from a config file, it is important
that we are able to resolve relative paths properly using the parent
folder of the config file as the base path.

642b7566df · 2025-12-12 15:25:22 -08:00

History

..

auth

[Auth] Add keyring support for Codex CLI (#5591)

2025-10-27 12:10:11 -07:00

command_safety

fix: use PowerShell to parse PowerShell (#7607)

2025-12-12 13:06:49 -08:00

config

fix: introduce AbsolutePathBuf as part of sandbox config (#7856)

2025-12-12 15:25:22 -08:00

config_loader

feat: clean config loading and config api (#7924)

2025-12-12 12:01:24 -08:00

context_manager

Remote compact for API-key users (#7835)

2025-12-12 10:05:02 -08:00

features

Removed experimental "command risk assessment" feature (#7799)

2025-12-10 09:48:11 -08:00

mcp

fix: restore MCP startup progress messages in TUI (fixes #7827) (#7828)

2025-12-12 22:07:03 +00:00

openai_models

support 1p (#7945)

2025-12-12 13:36:20 -08:00

rollout

Remote compact for API-key users (#7835)

2025-12-12 10:05:02 -08:00

sandboxing

Removed experimental "command risk assessment" feature (#7799)

2025-12-10 09:48:11 -08:00

skills

Make skill name and description limit based on characters not byte counts (#7915)

2025-12-11 22:28:59 -08:00

state

Inject SKILL.md when it's explicitly mentioned. (#7763)

2025-12-10 13:59:17 -08:00

tasks

Remote compact for API-key users (#7835)

2025-12-12 10:05:02 -08:00

tools

fix: use PowerShell to parse PowerShell (#7607)

2025-12-12 13:06:49 -08:00

unified_exec

refactoring with_escalated_permissions to use SandboxPermissions instead (#7750)

2025-12-10 17:18:48 +00:00

api_bridge.rs

feat: retroactive image placeholder to prevent poisoning (#6774)

2025-12-03 11:35:56 +00:00

apply_patch.rs

Refactor execpolicy fallback evaluation (#7544)

2025-12-03 23:39:48 -08:00

auth.rs

Remove conversation_id and bring back request ID logging (#7830)

2025-12-10 10:44:12 -08:00

bash.rs

Always fallback to real shell (#6953)

2025-11-20 10:58:46 -08:00

client_common.rs

Chore: limit find family visability (#7891)

2025-12-11 13:30:56 -08:00

client.rs

fix: omit reasoning summary when ReasoningSummary::None (#7845)

2025-12-11 11:59:40 -08:00

codex_conversation.rs

Add feedback upload request handling (#5682)

2025-10-27 05:53:39 +00:00

codex_delegate.rs

Removed experimental "command risk assessment" feature (#7799)

2025-12-10 09:48:11 -08:00

codex.rs

fix: restore MCP startup progress messages in TUI (fixes #7827) (#7828)

2025-12-12 22:07:03 +00:00

compact_remote.rs

feat: add compaction event (#7289)

2025-11-25 16:12:14 +00:00

compact.rs

Remote compact for API-key users (#7835)

2025-12-12 10:05:02 -08:00

conversation_manager.rs

make model optional in config (#7769)

2025-12-10 11:19:00 -08:00

custom_prompts.rs

fix(core): load custom prompts from symlinked Markdown files (#3643)

2025-11-04 17:44:02 -08:00

default_client.rs

Remove conversation_id and bring back request ID logging (#7830)

2025-12-10 10:44:12 -08:00

env.rs

Fix toasts on Windows under WSL 2 (#7137)

2025-12-11 15:09:00 -08:00

environment_context.rs

fix: introduce AbsolutePathBuf as part of sandbox config (#7856)

2025-12-12 15:25:22 -08:00

error.rs

chores: models manager (#7937)

2025-12-12 18:59:39 +00:00

event_mapping.rs

Inject SKILL.md when it's explicitly mentioned. (#7763)

2025-12-10 13:59:17 -08:00

exec_env.rs

chore: unify config crates (#5958)

2025-10-30 10:28:32 +00:00

exec_policy.rs

fix: policy/*.codexpolicy -> rules/*.rules (#7888)

2025-12-11 14:46:00 -08:00

exec.rs

Elevated Sandbox 4 (#7889)

2025-12-12 12:30:38 -08:00

features.rs

Elevated Sandbox 4 (#7889)

2025-12-12 12:30:38 -08:00

flags.rs

chore: drop unused values from env_flags (#4188)

2025-09-24 14:29:51 -07:00

function_tool.rs

chore: rework tools execution workflow (#5278)

2025-10-20 20:57:37 +01:00

git_info.rs

feat: intercept apply_patch for unified_exec (#7446)

2025-12-02 17:54:02 +00:00

landlock.rs

chore: rework tools execution workflow (#5278)

2025-10-20 20:57:37 +01:00

lib.rs

Added deprecation notice for "chat" wire_api (#7897)

2025-12-11 15:24:43 -08:00

mcp_connection_manager.rs

fix: restore MCP startup progress messages in TUI (fixes #7827) (#7828)

2025-12-12 22:07:03 +00:00

mcp_tool_call.rs

[MCP] Render MCP tool call result images to the model (#5600)

2025-10-27 17:55:57 -04:00

message_history.rs

chore: update unified exec sandboxing detection (#7541)

2025-12-03 20:06:47 +00:00

model_provider_info.rs

Remote compact for API-key users (#7835)

2025-12-12 10:05:02 -08:00

otel_init.rs

[codex][otel] support mtls configuration (#6228)

2025-11-18 14:01:01 -08:00

parse_command.rs

parse rg | head a search (#7797)

2025-12-09 18:30:16 -08:00

powershell.rs

fix: use PowerShell to parse PowerShell (#7607)

2025-12-12 13:06:49 -08:00

project_doc.rs

Inject SKILL.md when it's explicitly mentioned. (#7763)

2025-12-10 13:59:17 -08:00

review_format.rs

feat: detached review (#7292)

2025-11-28 11:34:57 +00:00

review_prompts.rs

chore: review everywhere (#7444)

2025-12-02 11:26:27 +00:00

safety.rs

fix: introduce AbsolutePathBuf as part of sandbox config (#7856)

2025-12-12 15:25:22 -08:00

seatbelt_base_policy.sbpl

feat: update sandbox policy to allow TTY (#7580)

2025-12-04 17:58:58 +00:00

seatbelt_network_policy.sbpl

core: widen sandbox to allow certificate ops when network is enabled (#5980)

2025-11-06 12:47:20 -08:00

seatbelt.rs

fix: introduce AbsolutePathBuf as part of sandbox config (#7856)

2025-12-12 15:25:22 -08:00

shell_snapshot.rs

feat: add shell snapshot for shell command (#7786)

2025-12-11 13:46:43 +00:00

shell.rs

feat: add shell snapshot for shell command (#7786)

2025-12-11 13:46:43 +00:00

spawn.rs

Kill shell tool process groups on timeout (#5258)

2025-11-07 17:54:35 -08:00

stream_events_utils.rs

Inline response recording and remove process_items indirection (#7310)

2025-12-04 12:17:54 -08:00

terminal.rs

detect terminal and include in request headers (#2437)

2025-08-20 16:54:26 +00:00

text_encoding.rs

Fix: Improve text encoding for shell output in VSCode preview (#6178) (#6182)

2025-11-20 11:04:11 -08:00

token_data.rs

Add forced_chatgpt_workspace_id and forced_login_method configuration options (#5303)

2025-10-20 08:50:54 -07:00

truncate.rs

Update Model Info (#7853)

2025-12-11 14:06:07 -08:00

turn_diff_tracker.rs

chore: more clippy rules 2 (#4057)

2025-09-22 17:16:02 +00:00

user_instructions.rs

Inject SKILL.md when it's explicitly mentioned. (#7763)

2025-12-10 13:59:17 -08:00

user_notification.rs

feat: include cwd in notify payload (#5415)

2025-10-20 23:53:03 +00:00

user_shell_command.rs

Move shell to use truncate_text (#6842)

2025-11-19 01:56:08 -08:00

util.rs

feat: retroactive image placeholder to prevent poisoning (#6774)

2025-12-03 11:35:56 +00:00