Chris Bookholt
3e4c7d6380
Merge commit 'fab7d5a1e6aeebabdca0cea4dd09b5f9ad1a2d4e' into codex/psec-4394-git-05b-stage-filters
2026-07-02 01:42:45 -07:00
Chris Bookholt
34f1bb3ee0
git-utils: integrate exact staging with repository authority
2026-07-02 01:42:30 -07:00
Chris Bookholt
fab7d5a1e6
git-utils: fix Windows authority and test fixtures
2026-07-02 01:33:44 -07:00
Chris Bookholt
5632dfd765
git-utils: support older Git boolean ranges
2026-07-02 01:01:44 -07:00
Chris Bookholt
e8b30bd7d3
git-utils: integrate filter guards with repository authority
2026-07-02 00:46:29 -07:00
Chris Bookholt
801018897f
Merge repository authority into apply filter guard
2026-07-02 00:16:26 -07:00
Chris Bookholt
7a4648aff4
git-utils: normalize junction fixture paths
2026-07-01 23:42:37 -07:00
Chris Bookholt
5a95b65f57
git-utils: gate Unix-only authority fixtures
2026-07-01 23:19:38 -07:00
Chris Bookholt
4430c51039
git-utils: fix Windows repository authority tests
2026-07-01 23:07:18 -07:00
Chris Bookholt
9c0e48eba6
git-utils: fix Windows repository authority checks
2026-07-01 22:27:54 -07:00
Chris Bookholt
bf70395505
git-utils: make registry retarget test deterministic
2026-07-01 21:42:21 -07:00
Chris Bookholt
daca14580c
git-utils: fix Windows authority build
2026-07-01 21:30:49 -07:00
Chris Bookholt
bcf026cbca
git-utils: centralize repository authority and trusted Git launch
2026-07-01 21:19:17 -07:00
Chris Bookholt
17f491ab67
git-utils: stage patch paths without recursive add
2026-07-01 18:57:30 -07:00
Chris Bookholt
9a21b607e3
Merge branch 'codex/psec-4394-git-02-effective-patch-paths' into codex/psec-4394-git-03-path-containment
2026-07-01 16:50:50 -07:00
Chris Bookholt
f303ab00da
Merge commit '300bbcbf5c' into codex/psec-4394-git-02-effective-patch-paths
2026-07-01 16:50:46 -07:00
Chris Bookholt
300bbcbf5c
git-utils: clarify raw PATH rejection
2026-07-01 16:50:40 -07:00
Chris Bookholt
efbd215b81
Merge branch 'codex/psec-4394-git-02-effective-patch-paths' into codex/psec-4394-git-03-path-containment
2026-07-01 16:49:45 -07:00
Chris Bookholt
1ea2e7fcc4
Merge commit 'edda59a703' into codex/psec-4394-git-02-effective-patch-paths
2026-07-01 16:49:32 -07:00
Chris Bookholt
edda59a703
git-utils: fix Windows traversal regression test
2026-07-01 16:49:19 -07:00
Chris Bookholt
d98e980a31
git-utils: scope filter test helpers to tests
2026-07-01 16:34:53 -07:00
Chris Bookholt
f2874f80f9
Merge branch 'codex/psec-4394-git-05a-apply-filters' into codex/psec-4394-git-05b-stage-filters
2026-07-01 16:21:28 -07:00
Chris Bookholt
68da17b9d8
Merge branch 'codex/psec-4394-git-03-path-containment' into codex/psec-4394-git-05a-apply-filters
2026-07-01 16:21:13 -07:00
Chris Bookholt
21bcee35e4
Merge branch 'codex/psec-4394-git-02-effective-patch-paths' into codex/psec-4394-git-03-path-containment
2026-07-01 16:21:00 -07:00
Chris Bookholt
e76a347987
Merge branch 'codex/psec-4394-trusted-git-runner' into codex/psec-4394-git-02-effective-patch-paths
2026-07-01 16:20:46 -07:00
Chris Bookholt
f062f6916e
git-utils: reject raw Windows PATH traversal
2026-07-01 16:20:33 -07:00
Chris Bookholt
19a85ed470
git-utils: normalize required filter booleans
2026-07-01 16:13:43 -07:00
Chris Bookholt
9dcd750de7
Merge apply filter neutralization into staging guard
2026-07-01 16:09:25 -07:00
Chris Bookholt
edce1cb0c5
git-utils: refine staging filter policy
2026-07-01 16:00:25 -07:00
Chris Bookholt
98635fbb42
Merge branch 'codex/psec-4394-git-03-path-containment' into codex/psec-4394-git-05a-apply-filters
2026-07-01 15:59:00 -07:00
Chris Bookholt
bed78fad06
git-utils: neutralize off-path filter helpers
2026-07-01 15:58:52 -07:00
Chris Bookholt
48fde8c368
Merge branch 'codex/psec-4394-git-02-effective-patch-paths' into codex/psec-4394-git-03-path-containment
2026-07-01 15:51:09 -07:00
Chris Bookholt
5045e45bf8
Merge branch 'codex/psec-4394-trusted-git-runner' into codex/psec-4394-git-02-effective-patch-paths
2026-07-01 15:51:00 -07:00
Chris Bookholt
b262c52803
git-utils: mirror resolver roots in traversal test
2026-07-01 15:50:37 -07:00
Chris Bookholt
4bf391509e
Merge branch 'codex/psec-4394-git-03-path-containment' into codex/psec-4394-git-05a-apply-filters
...
# Conflicts:
# codex-rs/git-utils/src/apply.rs
2026-07-01 15:25:38 -07:00
Chris Bookholt
17920f9a57
Merge branch 'codex/psec-4394-git-02-effective-patch-paths' into codex/psec-4394-git-03-path-containment
2026-07-01 15:24:02 -07:00
Chris Bookholt
6a7530f161
Merge branch 'codex/psec-4394-trusted-git-runner' into codex/psec-4394-git-02-effective-patch-paths
2026-07-01 15:23:52 -07:00
Chris Bookholt
9ec1720f7c
git-utils: reject Git from enclosing repositories
2026-07-01 15:22:59 -07:00
Chris Bookholt
5b1fe8c0f2
git-utils: fix selected filter edge cases
2026-07-01 15:17:42 -07:00
Chris Bookholt
db8a0aeadf
git-utils: block selected filters before staging
2026-07-01 10:43:30 -07:00
Chris Bookholt
0b84913ea8
git-utils: block selected patch filters
2026-07-01 10:21:29 -07:00
Chris Bookholt
c21e78bbd6
git-utils: normalize Windows junction test paths
2026-07-01 10:20:33 -07:00
Chris Bookholt
4c0a1feded
git-utils: consume confined staging candidates
2026-07-01 09:57:14 -07:00
Chris Bookholt
7cdf6b09bc
git-utils: confine staged paths to the worktree
2026-07-01 09:34:06 -07:00
Chris Bookholt
843f07e265
Derive effective patch paths through Git
2026-07-01 08:37:37 -07:00
Chris Bookholt
2ca4f55c0d
Bind Git worktree helpers to a trusted executable
2026-07-01 07:45:11 -07:00
Chris Bookholt
ec69e784c2
Handle Windows environment overrides safely
2026-06-30 11:54:44 -07:00
Chris Bookholt
f6122dbf59
Deny transport for local-only Git operations
2026-06-29 15:46:01 -07:00
Eric Traut
9d13291955
Update safety check links ( #30491 )
...
## Summary
Bio/Cyber safety surfaces in the TUI could send users to stale Trusted
Access pages, and safety buffering did not always expose the Help
Center.
This follow-up to #30317 adds the missing Learn more action, refreshes
the Bio access URL and block copy, and updates the affected snapshots
while preserving the existing retry and wait behavior.
2026-06-29 11:10:11 -07:00
Shijie Rao
80f54d1266
[codex] Treat max as a first-class reasoning effort ( #30467 )
...
## Why
The Bedrock GPT-5.6 catalog advertises `max`, but Codex treated it as an
opaque custom effort. That made the reasoning picker render it as
lowercase `max` while known efforts use productized labels.
Making `max` a known effort aligns catalog data, parsing, and UI
presentation without changing the `max` wire value or persisted
representation.
## What changed
- Add first-class `ReasoningEffort::Max` parsing and serialization.
- Use the typed effort in the Bedrock catalog and render it as `Max` in
the TUI.
- Preserve forward-compatible custom-effort coverage with a genuinely
unknown `future` value.
### Before
<img width="559" height="124" alt="Screenshot 2026-06-28 at 12 08 47 PM"
src="https://github.com/user-attachments/assets/7c43cf4f-020b-4605-9239-0a9c97eb7364 "
/>
### After
<img width="558" height="107" alt="Screenshot 2026-06-28 at 12 09 10 PM"
src="https://github.com/user-attachments/assets/b9cc5ded-c940-43b4-b024-bba25abe0a17 "
/>
2026-06-29 09:38:49 -07:00
Chris Bookholt