mirror of https://github.com/pchuan98/codex.git synced 2026-07-01 00:31:56 +08:00

Files

T

zhao-oai 3d35cb4619 Refactor execpolicy fallback evaluation (#7544 )

## Refactor of the `execpolicy` crate

To illustrate why we need this refactor, consider an agent attempting to
run `apple | rm -rf ./`. Suppose `apple` is allowed by `execpolicy`.
Before this PR, `execpolicy` would consider `apple` and `pear` and only
render one rule match: `Allow`. We would skip any heuristics checks on
`rm -rf ./` and immediately approve `apple | rm -rf ./` to run.

To fix this, we now thread a `fallback` evaluation function into
`execpolicy` that runs when no `execpolicy` rules match a given command.
In our example, we would run `fallback` on `rm -rf ./` and prevent
`apple | rm -rf ./` from being run without approval.

3d35cb4619 · 2025-12-03 23:39:48 -08:00

History

src

Refactor execpolicy fallback evaluation (#7544 )

2025-12-03 23:39:48 -08:00

templates

fix: parallel tool call instruction injection (#6893 )

2025-11-19 11:01:57 +00:00

tests

Refactor execpolicy fallback evaluation (#7544 )

2025-12-03 23:39:48 -08:00

Cargo.toml

feat: experimental support for skills.md (#7412 )

2025-12-01 20:22:35 -08:00

gpt_5_1_prompt.md

chore(core) Update shell instructions (#6679 )

2025-11-17 13:05:15 -08:00

gpt_5_codex_prompt.md

chore(core) Update shell instructions (#6679 )

2025-11-17 13:05:15 -08:00

gpt-5.1-codex-max_prompt.md

feat: arcticfox in the wild (#6906 )

2025-11-19 16:31:06 +00:00

prompt.md

Add file reference guidelines to gpt-5 prompt (#3651 )

2025-09-15 08:35:30 -07:00

README.md

docs: align sandbox defaults, dedupe sections and improve getting started guide (#5357 )

2025-10-19 16:41:10 -07:00

review_prompt.md

docs: Fix markdown list item spacing in codex-rs/core/review_prompt.md (#4144 )

2025-10-30 17:39:21 -07:00

README.md

codex-core

This crate implements the business logic for Codex. It is designed to be used by the various Codex UIs written in Rust.

Dependencies

Note that codex-core makes some assumptions about certain helper utilities being available in the environment. Currently, this support matrix is:

macOS

Expects /usr/bin/sandbox-exec to be present.

Linux

Expects the binary containing codex-core to run the equivalent of codex sandbox linux (legacy alias: codex debug landlock) when arg0 is codex-linux-sandbox. See the codex-arg0 crate for details.

All Platforms

Expects the binary containing codex-core to simulate the virtual apply_patch CLI when arg1 is --codex-run-as-apply-patch. See the codex-arg0 crate for details.