Michael BolinandGitHub e0d7ac51d3 fix: policy/*.codexpolicy -> rules/*.rules (#7888) ...

We decided that `*.rules` is a more fitting (and concise) file extension
than `*.codexpolicy`, so we are changing the file extension for the
"execpolicy" effort. We are also changing the subfolder of `$CODEX_HOME`
from `policy` to `rules` to match.

This PR updates the in-repo docs and we will update the public docs once
the next CLI release goes out.

Locally, I created `~/.codex/rules/default.rules` with the following
contents:

```
prefix_rule(pattern=["gh", "pr", "view"])
```

And then I asked Codex to run:

```
gh pr view 7888 --json title,body,comments
```

and it was able to!

2025-12-11 14:46:00 -08:00

..

auth

[Auth] Add keyring support for Codex CLI (#5591)

2025-10-27 12:10:11 -07:00

command_safety

Windows: flag some invocations that launch browsers/URLs as dangerous (#7111)

2025-11-21 13:36:17 -08:00

config

Update Model Info (#7853)

2025-12-11 14:06:07 -08:00

config_loader

feat[app-serve]: config management (#7241)

2025-11-25 09:29:38 +00:00

context_manager

fix: ignore ghost snapshots in token consumption (#7638)

2025-12-05 13:57:24 +00:00

features

Removed experimental "command risk assessment" feature (#7799)

2025-12-10 09:48:11 -08:00

mcp

feat: support list mcp servers in app server (#7505)

2025-12-03 09:51:46 -08:00

openai_models

Update Model Info (#7853)

2025-12-11 14:06:07 -08:00

rollout

chore: rework unified exec events (#7775)

2025-12-10 10:30:38 +00:00

sandboxing

Removed experimental "command risk assessment" feature (#7799)

2025-12-10 09:48:11 -08:00

skills

Inject SKILL.md when it's explicitly mentioned. (#7763)

2025-12-10 13:59:17 -08:00

state

Inject SKILL.md when it's explicitly mentioned. (#7763)

2025-12-10 13:59:17 -08:00

tasks

feat: warning for long snapshots (#7870)

2025-12-11 12:42:47 +00:00

tools

Update Model Info (#7853)

2025-12-11 14:06:07 -08:00

unified_exec

refactoring with_escalated_permissions to use SandboxPermissions instead (#7750)

2025-12-10 17:18:48 +00:00

api_bridge.rs

feat: retroactive image placeholder to prevent poisoning (#6774)

2025-12-03 11:35:56 +00:00

apply_patch.rs

Refactor execpolicy fallback evaluation (#7544)

2025-12-03 23:39:48 -08:00

auth.rs

Remove conversation_id and bring back request ID logging (#7830)

2025-12-10 10:44:12 -08:00

bash.rs

Always fallback to real shell (#6953)

2025-11-20 10:58:46 -08:00

client_common.rs

Chore: limit find family visability (#7891)

2025-12-11 13:30:56 -08:00

client.rs

fix: omit reasoning summary when ReasoningSummary::None (#7845)

2025-12-11 11:59:40 -08:00

codex_conversation.rs

Add feedback upload request handling (#5682)

2025-10-27 05:53:39 +00:00

codex_delegate.rs

Removed experimental "command risk assessment" feature (#7799)

2025-12-10 09:48:11 -08:00

codex.rs

Inject SKILL.md when it's explicitly mentioned. (#7763)

2025-12-10 13:59:17 -08:00

compact_remote.rs

feat: add compaction event (#7289)

2025-11-25 16:12:14 +00:00

compact.rs

fix: Features should be immutable over the lifetime of a session/thread (#7540)

2025-12-03 16:12:31 -08:00

conversation_manager.rs

make model optional in config (#7769)

2025-12-10 11:19:00 -08:00

custom_prompts.rs

fix(core): load custom prompts from symlinked Markdown files (#3643)

2025-11-04 17:44:02 -08:00

default_client.rs

Remove conversation_id and bring back request ID logging (#7830)

2025-12-10 10:44:12 -08:00

environment_context.rs

feat: shell snapshotting (#7641)

2025-12-09 18:36:58 +00:00

error.rs

fix: taking plan type from usage endpoint instead of thru auth token (#7610)

2025-12-04 23:34:13 -08:00

event_mapping.rs

Inject SKILL.md when it's explicitly mentioned. (#7763)

2025-12-10 13:59:17 -08:00

exec_env.rs

chore: unify config crates (#5958)

2025-10-30 10:28:32 +00:00

exec_policy.rs

fix: policy/*.codexpolicy -> rules/*.rules (#7888)

2025-12-11 14:46:00 -08:00

exec.rs

refactoring with_escalated_permissions to use SandboxPermissions instead (#7750)

2025-12-10 17:18:48 +00:00

features.rs

fix: remove duplicated parallel FeatureSpec (#7823)

2025-12-10 10:23:01 -08:00

flags.rs

chore: drop unused values from env_flags (#4188)

2025-09-24 14:29:51 -07:00

function_tool.rs

chore: rework tools execution workflow (#5278)

2025-10-20 20:57:37 +01:00

git_info.rs

feat: intercept apply_patch for unified_exec (#7446)

2025-12-02 17:54:02 +00:00

landlock.rs

chore: rework tools execution workflow (#5278)

2025-10-20 20:57:37 +01:00

lib.rs

feat: shell snapshotting (#7641)

2025-12-09 18:36:58 +00:00

mcp_connection_manager.rs

fix: drop lock once it is no longer needed (#7500)

2025-12-02 20:46:26 +00:00

mcp_tool_call.rs

[MCP] Render MCP tool call result images to the model (#5600)

2025-10-27 17:55:57 -04:00

message_history.rs

chore: update unified exec sandboxing detection (#7541)

2025-12-03 20:06:47 +00:00

model_provider_info.rs

fix: remove inaccurate #[allow(dead_code)] marker (#7851)

2025-12-10 17:48:46 -08:00

otel_init.rs

[codex][otel] support mtls configuration (#6228)

2025-11-18 14:01:01 -08:00

parse_command.rs

parse rg | head a search (#7797)

2025-12-09 18:30:16 -08:00

powershell.rs

fix(windows) shell_command on windows, minor parsing (#6811)

2025-11-17 22:23:53 -08:00

project_doc.rs

Inject SKILL.md when it's explicitly mentioned. (#7763)

2025-12-10 13:59:17 -08:00

review_format.rs

feat: detached review (#7292)

2025-11-28 11:34:57 +00:00

review_prompts.rs

chore: review everywhere (#7444)

2025-12-02 11:26:27 +00:00

safety.rs

feat: intercept apply_patch for unified_exec (#7446)

2025-12-02 17:54:02 +00:00

seatbelt_base_policy.sbpl

feat: update sandbox policy to allow TTY (#7580)

2025-12-04 17:58:58 +00:00

seatbelt_network_policy.sbpl

core: widen sandbox to allow certificate ops when network is enabled (#5980)

2025-11-06 12:47:20 -08:00

seatbelt.rs

core: widen sandbox to allow certificate ops when network is enabled (#5980)

2025-11-06 12:47:20 -08:00

shell_snapshot.rs

feat: add shell snapshot for shell command (#7786)

2025-12-11 13:46:43 +00:00

shell.rs

feat: add shell snapshot for shell command (#7786)

2025-12-11 13:46:43 +00:00

spawn.rs

Kill shell tool process groups on timeout (#5258)

2025-11-07 17:54:35 -08:00

stream_events_utils.rs

Inline response recording and remove process_items indirection (#7310)

2025-12-04 12:17:54 -08:00

terminal.rs

detect terminal and include in request headers (#2437)

2025-08-20 16:54:26 +00:00

text_encoding.rs

Fix: Improve text encoding for shell output in VSCode preview (#6178) (#6182)

2025-11-20 11:04:11 -08:00

token_data.rs

Add forced_chatgpt_workspace_id and forced_login_method configuration options (#5303)

2025-10-20 08:50:54 -07:00

truncate.rs

Update Model Info (#7853)

2025-12-11 14:06:07 -08:00

turn_diff_tracker.rs

chore: more clippy rules 2 (#4057)

2025-09-22 17:16:02 +00:00

user_instructions.rs

Inject SKILL.md when it's explicitly mentioned. (#7763)

2025-12-10 13:59:17 -08:00

user_notification.rs

feat: include cwd in notify payload (#5415)

2025-10-20 23:53:03 +00:00

user_shell_command.rs

Move shell to use truncate_text (#6842)

2025-11-19 01:56:08 -08:00

util.rs

feat: retroactive image placeholder to prevent poisoning (#6774)

2025-12-03 11:35:56 +00:00