mirror of https://github.com/pchuan98/codex.git synced 2026-07-01 00:31:56 +08:00

Files

T

Michael Bolin a2f5874b7a core: derive exec policy filesystem policy from profile (#26499 )

## Why

`PermissionProfile` already owns the runtime filesystem sandbox policy
through `file_system_sandbox_policy()`. Keeping a separate
`FileSystemSandboxPolicy` on exec-policy fallback contexts made it
possible for callers and tests to construct split states that the
production permission model should not rely on.

## What changed

- Removed `file_system_sandbox_policy` from `UnmatchedCommandContext`,
`ExecApprovalRequest`, and the intercepted Unix exec-policy context.
- Derived filesystem sandbox policy inside unmatched-command decision
logic from `PermissionProfile::file_system_sandbox_policy()`.
- Simplified shell/unified-exec callers and tests that were only
plumbing the duplicate policy through.

## Testing

Local tests not run per request; relying on remote CI.

a2f5874b7a · 2026-06-04 21:48:45 -07:00

History

.cargo

windows: link MSVC release binaries with static CRT (#22905 )

2026-05-18 10:32:33 -07:00

.config

Fan out rust-ci-full nextest by platform (#23358 )

2026-05-19 17:54:41 -07:00

.github/workflows

Uprev Rust toolchain pins to 1.95.0 (#24684 )

2026-05-26 20:59:47 -07:00

agent-graph-store

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

agent-identity

Load cloud requirements for agent identity (#19708 )

2026-04-28 12:35:00 -07:00

analytics

[codex-analytics] emit forked thread id on initialization (#26248 )

2026-06-04 11:24:12 -07:00

ansi-escape

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

app-server

[codex] Add use_responses_lite 'override' logic (#26487 )

2026-06-04 18:49:51 -07:00

app-server-client

Switch runtime to cloud config bundle (#24622 )

2026-06-02 13:18:59 -07:00

app-server-daemon

Report app-server version in codex doctor (#24311 )

2026-05-25 09:41:12 -07:00

app-server-protocol

[codex] Expose unavailable app templates in plugin detail (#26317 )

2026-06-04 23:42:27 +00:00

app-server-test-client

[codex] Add user input client ids (#24653 )

2026-05-28 14:54:39 -07:00

app-server-transport

feat(app-server): add remote control client management RPCs (#25785 )

2026-06-02 17:01:02 -07:00

apply-patch

[codex] Consolidate shared prompts in codex-prompts (#25151 )

2026-06-01 18:45:07 +00:00

arg0

cli: add package path from install context (#26189 )

2026-06-03 19:08:19 -07:00

async-utils

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

aws-auth

feat: enable AWS login credentials for Bedrock auth (#21623 )

2026-05-08 04:07:59 +00:00

backend-client

[profile-switcher][rust] -- [1/2] Add app-server account session protocol (#25469 )

2026-06-04 01:25:11 +05:30

bwrap

fix(bwrap): emit libcap after standalone archive (#21285 )

2026-05-05 22:22:01 -07:00

chatgpt

Preserve plugin app manifest order (#25491 )

2026-06-01 11:04:21 -07:00

cli

Expose configured marketplace source in plugin list JSON (#26417 )

2026-06-04 12:20:32 -05:00

cloud-config

Allow EDU accounts to fetch cloud config bundles (#25963 )

2026-06-02 16:41:48 -07:00

cloud-tasks

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

cloud-tasks-client

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

cloud-tasks-mock-client

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

code-mode

Add saved image path hint to standalone image generation (#25947 )

2026-06-04 09:39:20 -07:00

codex-api

[codex] Add use_responses_lite 'override' logic (#26487 )

2026-06-04 18:49:51 -07:00

codex-backend-openapi-models

feat: show enterprise monthly credit limits in status (#24812 )

2026-06-01 21:25:42 -07:00

codex-client

Uprev Rust toolchain pins to 1.95.0 (#24684 )

2026-05-26 20:59:47 -07:00

codex-experimental-api-macros

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

codex-mcp

[app-server][core] Add connector-level Guardian reviewer overrides (#25167 )

2026-06-02 17:04:11 +02:00

collaboration-mode-templates

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

config

core: allow excluding tool namespaces from code mode (#26320 )

2026-06-04 18:40:18 +00:00

connectors

Seed prompt history from resumed messages (#24298 )

2026-05-28 22:08:05 -07:00

context-fragments

skills: resolve per-turn catalogs from turn input context (#26106 )

2026-06-03 13:32:55 +02:00

core

core: derive exec policy filesystem policy from profile (#26499 )

2026-06-04 21:48:45 -07:00

core-api

Route AGENTS.md loading through environment filesystems (#26205 )

2026-06-04 12:43:07 -07:00

core-plugins

Pull plugin service less frequently (#26431 )

2026-06-04 17:47:58 -07:00

core-skills

Bridge host-loaded skills into the skills extension (#26172 )

2026-06-04 15:28:06 +02:00

docs

[codex] Keep Bazel startup options stable across commands (#26256 )

2026-06-04 20:23:37 -07:00

exec

[codex] Support model-defined reasoning efforts (#26444 )

2026-06-04 13:36:24 -07:00

exec-server

exec-server: canonicalize bound filesystem paths (#25149 )

2026-06-01 11:53:31 -07:00

execpolicy

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

execpolicy-legacy

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

ext

Add saved image path hint to standalone image generation (#25947 )

2026-06-04 09:39:20 -07:00

external-agent-migration

external-agent-migration: avoid mixed MCP transport configs (#26435 )

2026-06-04 14:16:03 -04:00

external-agent-sessions

Bound external agent session detection work (#26291 )

2026-06-04 13:13:05 -04:00

features

Remove response.processed websocket request (#26447 )

2026-06-04 13:15:50 -07:00

feedback

Attach Windows sandbox log to feedback reports (#24623 )

2026-05-26 15:59:25 -07:00

file-search

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

file-system

exec-server: canonicalize bound filesystem paths (#25149 )

2026-06-01 11:53:31 -07:00

file-watcher

Fix fs/watch debounce batching (#24716 )

2026-05-28 23:09:55 -07:00

git-utils

Fix remote turn diff display roots (#23261 )

2026-05-18 10:53:49 -07:00

hooks

Switch runtime to cloud config bundle (#24622 )

2026-06-02 13:18:59 -07:00

install-context

cli: add package path from install context (#26189 )

2026-06-03 19:08:19 -07:00

keyring-store

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

linux-sandbox

windows-sandbox: pass workspace roots to runner (#24108 )

2026-05-28 15:26:55 -07:00

lmstudio

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

[codex-cli] Refresh near-expiry ChatGPT access tokens before requests (#23546 )

2026-05-28 05:40:17 -07:00

mcp-server

store and expose parent_thread_id on Threads (#25113 )

2026-06-01 04:33:20 +00:00

memories

[codex] Support model-defined reasoning efforts (#26444 )

2026-06-04 13:36:24 -07:00

message-history

Optimize unbounded byte scans with memchr (#26265 )

2026-06-04 09:53:08 -04:00

model-provider

fix: Limit Bedrock GPT models to default service tier (#25318 )

2026-05-30 11:54:58 -07:00

model-provider-info

chore: add GPT-5.5 to the Amazon Bedrock catalog (#24701 )

2026-05-28 10:29:06 -07:00

models-manager

[codex] Add use_responses_lite 'override' logic (#26487 )

2026-06-04 18:49:51 -07:00

network-proxy

Wire managed MITM CA trust into child env (#22668 )

2026-06-01 23:23:59 +00:00

ollama

Optimize unbounded byte scans with memchr (#26265 )

2026-06-04 09:53:08 -04:00

otel

[codex] Emit sandbox outcome telemetry event (#25955 )

2026-06-04 20:58:14 -04:00

plugin

fix: Allow plugin skills to share plugin-level icon assets (#23776 )

2026-05-21 16:11:59 -07:00

process-hardening

fix(process-hardening): preserve macos malloc diagnostics (#24479 )

2026-05-25 17:26:10 -03:00

prompts

skills: resolve per-turn catalogs from turn input context (#26106 )

2026-06-03 13:32:55 +02:00

protocol

[codex] Add use_responses_lite 'override' logic (#26487 )

2026-06-04 18:49:51 -07:00

realtime-webrtc

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

response-debug-context

Add safety check notification and error handling (#19055 )

2026-04-22 22:24:12 -07:00

responses-api-proxy

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

rmcp-client

fix(rmcp): refresh expired OAuth tokens before startup (#26482 )

2026-06-05 02:31:06 +00:00

rollout

Persist multi-agent runtime metadata (#25721 )

2026-06-02 13:05:20 +02:00

rollout-trace

[codex] Rename multi-agent v2 assign_task to followup_task (#25636 )

2026-06-01 19:57:11 +02:00

sandboxing

core: stop threading SandboxPolicy through exec (#25700 )

2026-06-03 10:41:41 -07:00

scripts

Uprev Rust toolchain pins to 1.95.0 (#24684 )

2026-05-26 20:59:47 -07:00

secrets

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

shell-command

[codex] Avoid PowerShell safety parsing off Windows (#24946 )

2026-05-29 03:00:35 +00:00

shell-escalation

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

skills

[codex] Update OpenAI Docs skill (#24914 )

2026-05-28 15:11:11 +00:00

state

[codex] Support model-defined reasoning efforts (#26444 )

2026-06-04 13:36:24 -07:00

stdio-to-uds

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

terminal-detection

feat(cli): add codex doctor diagnostics (#22336 )

2026-05-13 21:23:19 +00:00

test-binary-support

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

thread-manager-sample

core: allow excluding tool namespaces from code mode (#26320 )

2026-06-04 18:40:18 +00:00

thread-store

[codex] Support model-defined reasoning efforts (#26444 )

2026-06-04 13:36:24 -07:00

tools

[codex] Add use_responses_lite 'override' logic (#26487 )

2026-06-04 18:49:51 -07:00

tui

[codex] Expose unavailable app templates in plugin detail (#26317 )

2026-06-04 23:42:27 +00:00

uds

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

utils

[codex] Support model-defined reasoning efforts (#26444 )

2026-06-04 13:36:24 -07:00

v8-poc

CI: Customize v8 building (#22086 )

2026-05-18 21:33:05 -07:00

vendor

vendor: update bubblewrap to 0.11.2 (#21389 )

2026-05-06 18:10:30 +00:00

windows-sandbox-rs

Improve Windows sandbox setup refresh diagnostics (#26471 )

2026-06-04 16:52:10 -07:00

.gitignore

[MCP] Prefix MCP tools names with mcp__ (#5309 )

2025-10-19 20:41:55 -04:00

BUILD.bazel

Remove js_repl feature (#19410 )

2026-04-24 17:49:29 -07:00

Cargo.lock

fix(rmcp): refresh expired OAuth tokens before startup (#26482 )

2026-06-05 02:31:06 +00:00

Cargo.toml

build: use ThinLTO for release binaries (#23710 )

2026-06-04 20:07:53 +00:00

clippy.toml

chore: document intentional await-holding cases (#18423 )

2026-04-20 22:41:54 -07:00

config.md

Fix link to MCP Servers config section (#5301 )

2025-10-17 14:58:27 -07:00

default.nix

fix(nix): include libcap dependency on linux builds (#12415 )

2026-02-20 19:32:15 -08:00

deny.toml

Remove CODEX_RS_SSE_FIXTURE test hook (#22413 )

2026-05-13 03:08:01 +00:00

README.md

Simplify Codex CLI README (#26313 )

2026-06-04 09:16:03 -07:00

rust-toolchain.toml

Uprev Rust toolchain pins to 1.95.0 (#24684 )

2026-05-26 20:59:47 -07:00

rustfmt.toml

Update cargo to 2024 edition (#842 )

2025-05-07 08:37:48 -07:00

README.md

Codex CLI

Codex CLI Documentation