Michael Bolin
50b080d20d
merge commit for archive created by Sapling
2025-09-15 11:55:06 -07:00
Michael Bolin
7c861991fa
fix: vendor ripgrep in the npm module
2025-09-15 11:54:59 -07:00
Michael Bolin
3d66c8460e
Merge 34cb2225ab into sapling-pr-archive-bolinfest
2025-09-15 11:11:33 -07:00
Michael Bolin
34cb2225ab
fix: vendor ripgrep in the npm module
2025-09-15 11:11:27 -07:00
Michael Bolin
44907b0fd3
Merge 9a01542d1d into sapling-pr-archive-bolinfest
2025-09-15 11:03:00 -07:00
Michael Bolin
9a01542d1d
fix: vendor ripgrep in the npm module
2025-09-15 11:02:50 -07:00
Michael Bolin
2df7f7efe5
chore: restore prerelease logic in rust-release.yml ( #3659 )
...
Revert #3645 .
2025-09-15 17:52:49 +00:00
Michael Bolin
15e858f4ed
Merge 8c2fd35453 into sapling-pr-archive-bolinfest
2025-09-15 10:37:21 -07:00
Michael Bolin
8c2fd35453
chore: restore prerelease logic in rust-release.yml
2025-09-15 10:37:14 -07:00
Jeremy Rose
0560079c41
notifications on approvals and turn end ( #3329 )
...
uses OSC 9 to notify when a turn ends or approval is required. won't
work in vs code or terminal.app but iterm2/kitty/wezterm supports it :)
2025-09-15 10:22:02 -07:00
Michael Bolin
0de154194d
fix: change MIN_ANIMATION_HEIGHT so show_animation is calculated correctly ( #3656 )
...
Reported height was `20` instead of `21`, so `area.height >=
MIN_ANIMATION_HEIGHT` was `false` and therefore `show_animation` was
`false`, so the animation never displayed.
2025-09-15 10:02:53 -07:00
Michael Bolin
022fadec4d
merge commit for archive created by Sapling
2025-09-15 09:49:58 -07:00
Michael Bolin
89db8ae521
fix: change MIN_ANIMATION_HEIGHT so show_animation is calculated correctly
2025-09-15 09:49:46 -07:00
ae
5c583fe89b
feat: tweak onboarding strings ( #3650 )
2025-09-15 08:49:37 -07:00
easong-openai
cf63cbf153
fix stray login url characters persisting in login ( #3639 )
...
<img width="885" height="177" alt="image"
src="https://github.com/user-attachments/assets/d396e0a5-f303-494f-bab1-f7af57b88a3e "
/>
Fixes this.
2025-09-15 15:44:53 +00:00
pakrym-oai
b1c291e2bb
Add file reference guidelines to gpt-5 prompt ( #3651 )
2025-09-15 08:35:30 -07:00
Thibault Sottiaux and Michael Bolin
934d728946
feat: skip animations on small terminals ( #3647 )
...
Changes:
- skip the welcome animation when the terminal area is below 60x21
- skip the model upgrade animation when the terminal area is below 60x24
to avoid clipping
---------
Co-authored-by: Michael Bolin <mbolin@openai.com >
2025-09-15 08:30:32 -07:00
Michael Bolin
f037b2fd56
chore: rename ( #3648 )
2025-09-15 08:17:13 -07:00
Michael Bolin
be26c5b93e
Merge 14bca55b44 into sapling-pr-archive-bolinfest
2025-09-15 08:01:03 -07:00
Michael Bolin
14bca55b44
chore: rename
2025-09-15 07:59:59 -07:00
Thibault Sottiaux
d60cbed691
fix: add references ( #3633 )
2025-09-15 07:48:22 -07:00
Michael Bolin
6aafe37752
chore: set prerelease:true for now ( #3645 )
2025-09-15 07:17:46 -07:00
Michael Bolin
4be95fdea8
Merge da6086f865 into sapling-pr-archive-bolinfest
2025-09-15 07:07:13 -07:00
Michael Bolin
da6086f865
chore: set prerelease:true for now
2025-09-15 07:07:04 -07:00
jimmyfraiture2
d555b68469
fix: race condition unified exec ( #3644 )
...
Fix race condition without storing an rx in the session
2025-09-15 06:52:39 -07:00
ae
9baa5c33da
feat: update splash ( #3631 )
...
- Update splash styling.
- Add center truncation for long paths.
(Uses new `center_truncate_path` utility.)
- Update the suggested commands.
## New splash
<img width="560" height="326" alt="image"
src="https://github.com/user-attachments/assets/b80d7075-f376-4019-a464-b96a78b0676d "
/>
## Example with truncation:
<img width="524" height="317" alt="image"
src="https://github.com/user-attachments/assets/b023c5cc-0bf0-4d21-9b98-bfea85546eda "
/>
2025-09-15 06:44:40 -07:00
dependabot[bot]
fdf4a68646
chore(deps): bump tracing-subscriber from 0.3.19 to 0.3.20 in /codex-rs ( #3620 )
...
Bumps [tracing-subscriber](https://github.com/tokio-rs/tracing ) from
0.3.19 to 0.3.20.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tokio-rs/tracing/releases ">tracing-subscriber's
releases</a>.</em></p>
<blockquote>
<h2>tracing-subscriber 0.3.20</h2>
<p><strong>Security Fix</strong>: ANSI Escape Sequence Injection
(CVE-TBD)</p>
<h2>Impact</h2>
<p>Previous versions of tracing-subscriber were vulnerable to ANSI
escape sequence injection attacks. Untrusted user input containing ANSI
escape sequences could be injected into terminal output when logged,
potentially allowing attackers to:</p>
<ul>
<li>Manipulate terminal title bars</li>
<li>Clear screens or modify terminal display</li>
<li>Potentially mislead users through terminal manipulation</li>
</ul>
<p>In isolation, impact is minimal, however security issues have been
found in terminal emulators that enabled an attacker to use ANSI escape
sequences via logs to exploit vulnerabilities in the terminal
emulator.</p>
<h2>Solution</h2>
<p>Version 0.3.20 fixes this vulnerability by escaping ANSI control
characters in when writing events to destinations that may be printed to
the terminal.</p>
<h2>Affected Versions</h2>
<p>All versions of tracing-subscriber prior to 0.3.20 are affected by
this vulnerability.</p>
<h2>Recommendations</h2>
<p>Immediate Action Required: We recommend upgrading to
tracing-subscriber 0.3.20 immediately, especially if your
application:</p>
<ul>
<li>Logs user-provided input (form data, HTTP headers, query parameters,
etc.)</li>
<li>Runs in environments where terminal output is displayed to
users</li>
</ul>
<h2>Migration</h2>
<p>This is a patch release with no breaking API changes. Simply update
your Cargo.toml:</p>
<pre lang="toml"><code>[dependencies]
tracing-subscriber = "0.3.20"
</code></pre>
<h2>Acknowledgments</h2>
<p>We would like to thank <a href="http://github.com/zefr0x ">zefr0x</a>
who responsibly reported the issue at
<code>security@tokio.rs </code>.</p>
<p>If you believe you have found a security vulnerability in any
tokio-rs project, please email us at <code>security@tokio.rs </code>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tokio-rs/tracing/commit/4c52ca5266a3920fc5dfeebda2accf15ee7fb278 "><code>4c52ca5</code></a>
fmt: fix ANSI escape sequence injection vulnerability (<a
href="https://redirect.github.com/tokio-rs/tracing/issues/3368 ">#3368</a>)</li>
<li><a
href="https://github.com/tokio-rs/tracing/commit/f71cebe41e4c12735b1d19ca804428d4ff7d905d "><code>f71cebe</code></a>
subscriber: impl Clone for EnvFilter (<a
href="https://redirect.github.com/tokio-rs/tracing/issues/3360 ">#3360</a>)</li>
<li><a
href="https://github.com/tokio-rs/tracing/commit/3a1f571102b38bcdca13d59f3c454989d179055d "><code>3a1f571</code></a>
Fix CI (<a
href="https://redirect.github.com/tokio-rs/tracing/issues/3361 ">#3361</a>)</li>
<li><a
href="https://github.com/tokio-rs/tracing/commit/e63ef57f3d686abe3727ddd586eb9af73d6715b7 "><code>e63ef57</code></a>
chore: prepare tracing-attributes 0.1.30 (<a
href="https://redirect.github.com/tokio-rs/tracing/issues/3316 ">#3316</a>)</li>
<li><a
href="https://github.com/tokio-rs/tracing/commit/6e59a13b1a7bcdd78b8b5a7cbcf70a0b2cdd76f0 "><code>6e59a13</code></a>
attributes: fix tracing::instrument regression around shadowing (<a
href="https://redirect.github.com/tokio-rs/tracing/issues/3311 ">#3311</a>)</li>
<li><a
href="https://github.com/tokio-rs/tracing/commit/e4df76127538aa8370d7dee32a6f84bbec6bbf10 "><code>e4df761</code></a>
tracing: update core to 0.1.34 and attributes to 0.1.29 (<a
href="https://redirect.github.com/tokio-rs/tracing/issues/3305 ">#3305</a>)</li>
<li><a
href="https://github.com/tokio-rs/tracing/commit/643f392ebb73c4fb856f56a78c066c82582dd22c "><code>643f392</code></a>
chore: prepare tracing-attributes 0.1.29 (<a
href="https://redirect.github.com/tokio-rs/tracing/issues/3304 ">#3304</a>)</li>
<li><a
href="https://github.com/tokio-rs/tracing/commit/d08e7a6eea1833810ea527e18ea03b08cd402c9d "><code>d08e7a6</code></a>
chore: prepare tracing-core 0.1.34 (<a
href="https://redirect.github.com/tokio-rs/tracing/issues/3302 ">#3302</a>)</li>
<li><a
href="https://github.com/tokio-rs/tracing/commit/6e70c571d319a033d5f37c885ccf99aa675a9eac "><code>6e70c57</code></a>
tracing-subscriber: count numbers of enters in <code>Timings</code> (<a
href="https://redirect.github.com/tokio-rs/tracing/issues/2944 ">#2944</a>)</li>
<li><a
href="https://github.com/tokio-rs/tracing/commit/c01d4fd9def2fb061669a310598095c789ca0a32 "><code>c01d4fd</code></a>
fix docs and enable CI on <code>main</code> branch (<a
href="https://redirect.github.com/tokio-rs/tracing/issues/3295 ">#3295</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/tokio-rs/tracing/compare/tracing-subscriber-0.3.19...tracing-subscriber-0.3.20 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-15 00:51:33 -07:00
dependabot[bot]
adc9e1526b
chore(deps): bump slab from 0.4.10 to 0.4.11 in /codex-rs ( #3635 )
...
Bumps [slab](https://github.com/tokio-rs/slab ) from 0.4.10 to 0.4.11.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tokio-rs/slab/releases ">slab's
releases</a>.</em></p>
<blockquote>
<h2>v0.4.11</h2>
<ul>
<li>Fix <code>Slab::get_disjoint_mut</code> out of bounds (<a
href="https://redirect.github.com/tokio-rs/slab/issues/152 ">#152</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/tokio-rs/slab/blob/master/CHANGELOG.md ">slab's
changelog</a>.</em></p>
<blockquote>
<h1>0.4.11 (August 8, 2025)</h1>
<ul>
<li>Fix <code>Slab::get_disjoint_mut</code> out of bounds (<a
href="https://redirect.github.com/tokio-rs/slab/issues/152 ">#152</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tokio-rs/slab/commit/2e5779f8eb318827c78cad38007445a93ec04503 "><code>2e5779f</code></a>
Release v0.4.11 (<a
href="https://redirect.github.com/tokio-rs/slab/issues/153 ">#153</a>)</li>
<li><a
href="https://github.com/tokio-rs/slab/commit/2d65c514bc964b192bab212ddf3c1fcea4ae96b8 "><code>2d65c51</code></a>
Fix get_disjoint_mut error condition (<a
href="https://redirect.github.com/tokio-rs/slab/issues/152 ">#152</a>)</li>
<li>See full diff in <a
href="https://github.com/tokio-rs/slab/compare/v0.4.10...v0.4.11 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts page](https://github.com/openai/codex/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-15 00:48:53 -07:00
Ed Bayes and Michael Bolin
b9af1d2b16
Login flow polish ( #3632 )
...
# Description
- Update sign in flow
# Tests
- Passes CI
---------
Co-authored-by: Michael Bolin <mbolin@openai.com >
2025-09-15 00:42:53 -07:00
Ahmed Ibrahim
2d52e3b40a
Fix codex resume so flags (cd, model, search, etc.) still work ( #3625 )
...
Bug: now we can add flags/config values only before resume.
`codex -m gpt-5 resume` works
However, `codex resume -m gpt-5` should also work.
This PR is following this
[approach](https://stackoverflow.com/questions/76408952/rust-clap-re-use-same-arguments-in-different-subcommand )
in doing so.
I didn't convert those flags to global because we have `codex login`
that shouldn't expect them.
2025-09-15 06:16:17 +00:00
Michael Bolin
bd659a452f
merge commit for archive created by Sapling
2025-09-14 23:13:12 -07:00
Michael Bolin
f8b5119504
feat: introduce prettify_command_for_display()
2025-09-14 23:12:50 -07:00
Thibault Sottiaux
6039f8a126
feat: tighten preset filter, tame storage load logs, enable rollout prompt by default ( #3628 )
...
Summary
- common: use exact equality for Swiftfox exclusion to avoid hiding
future slugs that merely contain the substring
- core: treat missing internal_storage.json as expected (debug), warn
only on real IO/parse errors
- tui: drop DEBUG_HIGH gate; always consider showing rollout prompt, but
suppress under ApiKey auth mode
2025-09-14 23:05:41 -07:00
Michael Bolin
cca4037f7a
merge commit for archive created by Sapling
2025-09-14 22:39:07 -07:00
Michael Bolin
ee9cc1fdfd
feat: introduce prettify_command_for_display()
2025-09-14 22:39:03 -07:00
Michael Bolin
6c447a5fc3
merge commit for archive created by Sapling
2025-09-14 22:37:54 -07:00
Michael Bolin
b61fb6cbca
feat: introduce prettify_command_for_display()
2025-09-14 22:37:48 -07:00
Michael Bolin
e1d3917ec5
merge commit for archive created by Sapling
2025-09-14 22:25:11 -07:00
Michael Bolin
1250e3713b
feat: introduce prettify_command_for_display()
2025-09-14 22:25:06 -07:00
Ahmed Ibrahim
50262a44ce
Show abort in the resume ( #3629 )
...
Show abort error when resuming a session
2025-09-15 05:24:30 +00:00
Michael Bolin
68cfa4318f
merge commit for archive created by Sapling
2025-09-14 22:21:40 -07:00
Michael Bolin
06fe4d56f5
feat: introduce prettify_command_for_display()
2025-09-14 22:21:36 -07:00
Michael Bolin
bd3cc6bf0a
merge commit for archive created by Sapling
2025-09-14 22:13:14 -07:00
Michael Bolin
bbfae6d425
feat: introduce prettify_command_for_display()
2025-09-14 22:13:10 -07:00
Michael Bolin
f8bf1568d4
merge commit for archive created by Sapling
2025-09-14 22:07:07 -07:00
Michael Bolin
5550b70070
feat: introduce prettify_command_for_display()
2025-09-14 22:06:59 -07:00
Michael Bolin
08423e49eb
merge commit for archive created by Sapling
2025-09-14 21:58:08 -07:00
Michael Bolin
c89442f21d
feat: introduce prettify_command_for_display()
2025-09-14 21:57:54 -07:00
Ed Bayes
839b2ae7cf
Change animation frames ( #3627 )
...
## Description
- Changes animation frames to be smaller
- Cleans up file names and popup logic
## tests
- Passes local CI
2025-09-15 04:36:34 +00:00
easong-openai
6a8e743d57
initial mcp add interface ( #3543 )
...
Adds `codex mcp add`, `codex mcp list`, `codex mcp remove`. Currently writes to global config.
2025-09-15 04:30:56 +00:00
Michael Bolin