agent/codex
1
0
Fork 0
mirror of https://github.com/pchuan98/codex.git synced 2026-07-01 00:31:56 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
790213ded0588d824e99f830f41f04f3d98196df
codex/codex-rs
T
jif 790213ded0 Scope MCP sandbox metadata to server environment (#28914) 
Scope MCP sandbox metadata to the MCP server's owning environment.

Previously, `codex/sandbox-state-meta` always used the turn's primary
cwd and rebuilt a legacy sandbox policy from that cwd. That can be wrong
for MCP servers owned by a different execution environment.

This now sends the owning environment cwd as a `file:` URI in
`sandboxCwd`, keeps `permissionProfile` as the permission source of
truth, and omits sandbox-state metadata when a non-default server
environment is not selected for the turn. Local/default MCP servers keep
the existing fallback cwd behavior.

Tests:
- `just fmt`
- `just bazel-lock-update`
- `just bazel-lock-check`
- `just test -p codex-mcp`
- `just test -p codex-core mcp_sandbox_cwd`
- `cargo build -p codex-rmcp-client --bin test_stdio_server`
- `just test -p codex-core
stdio_mcp_tool_call_includes_sandbox_state_meta`
790213ded0 ยท 2026-06-18 19:31:07 +02:00
History
..
.cargo
Ignore proc-macro-error2 advisory (#26974)
2026-06-08 11:39:08 +02:00
.config
[codex] Speed up local nextest runs (#26479)
2026-06-09 12:48:04 -07:00
.github/workflows
Uprev Rust toolchain pins to 1.95.0 (#24684)
2026-05-26 20:59:47 -07:00
agent-graph-store
[codex] Remove async_trait from first-party code (#27475)
2026-06-11 18:16:39 -07:00
agent-identity
feat: add run task identity primitives (#19047)
2026-06-17 11:23:39 -07:00
analytics
unified-exec: retain PathUri in command events (#28780)
2026-06-18 05:00:04 +00:00
ansi-escape
Disable empty Cargo test targets (#21584)
2026-05-07 15:44:17 -07:00
app-server
Add network environment ID plumbing (#28766)
2026-06-18 14:09:38 +02:00
app-server-client
[codex] Add external agent import result accounting (#28008)
2026-06-15 13:25:42 -07:00
app-server-daemon
feat(app-server): persist remote-control desired state (#27445)
2026-06-11 21:28:52 -07:00
app-server-protocol
unified-exec: retain PathUri in command events (#28780)
2026-06-18 05:00:04 +00:00
app-server-test-client
unified-exec: retain PathUri in command events (#28780)
2026-06-18 05:00:04 +00:00
app-server-transport
feat(app-server): enforce managed remote control disable (#27961)
2026-06-12 20:10:12 -07:00
apply-patch
unified-exec: preserve PathUri through exec-server (#28681)
2026-06-17 19:36:16 +00:00
arg0
Add hidden Windows sandbox wrapper entrypoint (#28358)
2026-06-15 21:30:32 +00:00
async-utils
[codex] Remove async_trait from first-party code (#27475)
2026-06-11 18:16:39 -07:00
aws-auth
feat: enable AWS login credentials for Bedrock auth (#21623)
2026-05-08 04:07:59 +00:00
backend-client
feat(app-server): expose rate-limit reset credits (#28143)
2026-06-15 21:54:01 +00:00
bwrap
build: run buildifier from just fmt (#28125)
2026-06-13 21:43:39 -07:00
chatgpt
[codex] Preserve plugin apps in connector listings (#27602)
2026-06-15 13:50:08 +01:00
cli
feat: add run task identity primitives (#19047)
2026-06-17 11:23:39 -07:00
cloud-config
feat: use encrypted local secrets for CLI auth (#27539)
2026-06-12 21:23:50 +00:00
cloud-tasks
feat: use encrypted local secrets for CLI auth (#27539)
2026-06-12 21:23:50 +00:00
cloud-tasks-client
[codex] Remove async_trait from first-party code (#27475)
2026-06-11 18:16:39 -07:00
cloud-tasks-mock-client
[codex] Remove async_trait from first-party code (#27475)
2026-06-11 18:16:39 -07:00
code-mode
code-mode: move cell state into library actor (#28599)
2026-06-16 19:28:55 -07:00
code-mode-host
code-mode standalone: extract protocol and add host crate (#27724)
2026-06-11 22:37:26 -07:00
code-mode-protocol
[code-mode] Reject remote image URLs from output helpers (#27732)
2026-06-12 02:49:17 -07:00
codex-api
[codex] Support assistant realtime append text (#28836)
2026-06-17 20:57:13 -07:00
codex-backend-openapi-models
feat: show enterprise monthly credit limits in status (#24812)
2026-06-01 21:25:42 -07:00
codex-client
[codex] Use expect in integration tests (#28441)
2026-06-15 21:53:47 -07:00
codex-experimental-api-macros
Disable empty Cargo test targets (#21584)
2026-05-07 15:44:17 -07:00
codex-home
[codex] Bind shell snapshots to retained thread environments (#28421)
2026-06-15 20:10:53 -07:00
codex-mcp
Scope MCP sandbox metadata to server environment (#28914)
2026-06-18 19:31:07 +02:00
collaboration-mode-templates
build: run buildifier from just fmt (#28125)
2026-06-13 21:43:39 -07:00
config
[codex] add rollout token budget configuration (varlength 1/N) (#28746)
2026-06-18 04:29:47 -07:00
connectors
[ez][codex-rs] Support apps._default.default_tools_approval_mode (#27965)
2026-06-17 08:50:39 -07:00
context-fragments
feat(core): add metadata field to ResponseItem (#28355)
2026-06-15 15:05:28 -07:00
core
Scope MCP sandbox metadata to server environment (#28914)
2026-06-18 19:31:07 +02:00
core-api
feat(exec-server): add Noise rendezvous environment (#28774)
2026-06-17 17:20:53 -07:00
core-plugins
[codex] Pass plugin namespace into skill loading (#28608)
2026-06-18 00:16:46 -07:00
core-skills
[codex] Pass plugin namespace into skill loading (#28608)
2026-06-18 00:16:46 -07:00
docs
protocol: remove submission-side serde from Op (#26674)
2026-06-05 15:41:13 -07:00
exec
Add network environment ID plumbing (#28766)
2026-06-18 14:09:38 +02:00
exec-server
Recover exec process stdin writes (#28895)
2026-06-18 19:04:26 +02:00
execpolicy
[codex] Use expect in integration tests (#28441)
2026-06-15 21:53:47 -07:00
execpolicy-legacy
build: run buildifier from just fmt (#28125)
2026-06-13 21:43:39 -07:00
ext
[codex] Pass plugin namespace into skill loading (#28608)
2026-06-18 00:16:46 -07:00
external-agent-migration
[codex] Record external agent import results (#28396)
2026-06-15 23:17:24 -07:00
external-agent-sessions
feat(core): add metadata field to ResponseItem (#28355)
2026-06-15 15:05:28 -07:00
features
[codex] add rollout token budget configuration (varlength 1/N) (#28746)
2026-06-18 04:29:47 -07:00
feedback
Attach Windows sandbox log to feedback reports (#24623)
2026-05-26 15:59:25 -07:00
file-search
Disable empty Cargo test targets (#21584)
2026-05-07 15:44:17 -07:00
file-system
Run fs helper through Windows sandbox wrapper (#28359)
2026-06-17 10:00:42 -07:00
file-watcher
Fix fs/watch debounce batching (#24716)
2026-05-28 23:09:55 -07:00
git-utils
[codex] make PathUri::from_abs_path infallible (#27976)
2026-06-12 16:58:42 -07:00
hooks
Respect blocking PostToolUse hooks in code mode (#28365)
2026-06-15 15:12:26 -07:00
install-context
cli: add package path from install context (#26189)
2026-06-03 19:08:19 -07:00
keyring-store
feat: add auth-specific encrypted secret namespaces (#27535)
2026-06-12 19:52:49 +00:00
linux-sandbox
Add network environment ID plumbing (#28766)
2026-06-18 14:09:38 +02:00
lmstudio
Disable empty Cargo test targets (#21584)
2026-05-07 15:44:17 -07:00
login
[codex] trace tools build latency (#28782)
2026-06-17 14:53:54 -07:00
mcp-server
Scope command approvals by execution environment (#28738)
2026-06-17 19:52:43 +02:00
memories
[codex] Add optional IDs to response items (#28812)
2026-06-17 18:27:43 -07:00
message-history
Optimize unbounded byte scans with memchr (#26265)
2026-06-04 09:53:08 -04:00
model-provider
feat: add run task identity primitives (#19047)
2026-06-17 11:23:39 -07:00
model-provider-info
[codex-rs] support v2 personal access tokens (#25731)
2026-06-05 17:36:18 -07:00
models-manager
build: run buildifier from just fmt (#28125)
2026-06-13 21:43:39 -07:00
network-proxy
Add network environment ID plumbing (#28766)
2026-06-18 14:09:38 +02:00
ollama
Optimize unbounded byte scans with memchr (#26265)
2026-06-04 09:53:08 -04:00
otel
[codex] Use expect in integration tests (#28441)
2026-06-15 21:53:47 -07:00
plugin
[codex] Pass plugin namespace into skill loading (#28608)
2026-06-18 00:16:46 -07:00
process-hardening
fix(process-hardening): preserve macos malloc diagnostics (#24479)
2026-05-25 17:26:10 -03:00
prompts
build: run buildifier from just fmt (#28125)
2026-06-13 21:43:39 -07:00
protocol
unified-exec: retain PathUri in command events (#28780)
2026-06-18 05:00:04 +00:00
realtime-webrtc
Disable empty Cargo test targets (#21584)
2026-05-07 15:44:17 -07:00
response-debug-context
Add safety check notification and error handling (#19055)
2026-04-22 22:24:12 -07:00
responses-api-proxy
Disable empty Cargo test targets (#21584)
2026-05-07 15:44:17 -07:00
rmcp-client
[codex] Carry exec-server cwd as PathUri (#28032)
2026-06-13 20:56:42 +00:00
rollout
[codex] Restore thread recency with compatible migration history (#28671)
2026-06-17 18:52:18 +00:00
rollout-trace
unified-exec: retain PathUri in command events (#28780)
2026-06-18 05:00:04 +00:00
sandboxing
Add network environment ID plumbing (#28766)
2026-06-18 14:09:38 +02:00
scripts
Uprev Rust toolchain pins to 1.95.0 (#24684)
2026-05-26 20:59:47 -07:00
secrets
feat: add auth-specific encrypted secret namespaces (#27535)
2026-06-12 19:52:49 +00:00
shell-command
[codex] simplify memory read metrics (#28164)
2026-06-15 08:28:02 -07:00
shell-escalation
[codex] Remove async_trait from first-party code (#27475)
2026-06-11 18:16:39 -07:00
skills
[codex] Use compact OpenAI docs search queries (#28389)
2026-06-17 19:16:18 +00:00
state
[codex] Restore thread recency with compatible migration history (#28671)
2026-06-17 18:52:18 +00:00
stdio-to-uds
Disable empty Cargo test targets (#21584)
2026-05-07 15:44:17 -07:00
terminal-detection
feat(cli): add codex doctor diagnostics (#22336)
2026-05-13 21:23:19 +00:00
test-binary-support
Disable empty Cargo test targets (#21584)
2026-05-07 15:44:17 -07:00
thread-manager-sample
[codex] add rollout token budget configuration (varlength 1/N) (#28746)
2026-06-18 04:29:47 -07:00
thread-store
[codex] Add optional IDs to response items (#28812)
2026-06-17 18:27:43 -07:00
tools
[codex] [4/4] Simplify recommended plugin install schema (#28403)
2026-06-16 23:44:42 +00:00
tui
Pause active goals before TUI interrupts (#28813)
2026-06-18 08:48:03 -07:00
uds
Disable empty Cargo test targets (#21584)
2026-05-07 15:44:17 -07:00
utils
[codex] Pass plugin namespace into skill loading (#28608)
2026-06-18 00:16:46 -07:00
v8-poc
build: run buildifier from just fmt (#28125)
2026-06-13 21:43:39 -07:00
vendor
build: run buildifier from just fmt (#28125)
2026-06-13 21:43:39 -07:00
windows-sandbox-rs
Run fs helper through Windows sandbox wrapper (#28359)
2026-06-17 10:00:42 -07:00
.gitignore
[MCP] Prefix MCP tools names with mcp__ (#5309)
2025-10-19 20:41:55 -04:00
BUILD.bazel
Remove js_repl feature (#19410)
2026-04-24 17:49:29 -07:00
Cargo.lock
Scope MCP sandbox metadata to server environment (#28914)
2026-06-18 19:31:07 +02:00
Cargo.toml
exec-server: add Noise relay transport (#26242)
2026-06-15 16:39:41 -07:00
clippy.toml
chore: document intentional await-holding cases (#18423)
2026-04-20 22:41:54 -07:00
config.md
Fix link to MCP Servers config section (#5301)
2025-10-17 14:58:27 -07:00
default.nix
fix(nix): include libcap dependency on linux builds (#12415)
2026-02-20 19:32:15 -08:00
deny.toml
[codex] Remove async_trait from first-party code (#27475)
2026-06-11 18:16:39 -07:00
README.md
Simplify Codex CLI README (#26313)
2026-06-04 09:16:03 -07:00
rust-toolchain.toml
Uprev Rust toolchain pins to 1.95.0 (#24684)
2026-05-26 20:59:47 -07:00
rustfmt.toml
Update cargo to 2024 edition (#842)
2025-05-07 08:37:48 -07:00

README.md

Codex CLI

Codex CLI Documentation

Reference in New Issue View Git Blame Copy Permalink