codex

10,443 Commits 4,708 Branches 1,509 Tags

3 Commits

Author	SHA1	Message	Date
dank-openai	7f82397363	Restrict macOS scratch access to process sandboxes (#40961 ) ## Why Filesystem helpers should not inherit access to system scratch directories beyond the paths granted by their filesystem policy, while ordinary processes still need scratch access for compatibility. ## What changed - Move the `/tmp` and `/var/tmp` read/write grants, including their `/private` aliases, from the shared platform defaults into the process-only Seatbelt defaults. - Keep process access to `/Applications` alongside the scratch-directory grants. ## Testing Add a macOS Seatbelt test that verifies the generated policies and, when nested Seatbelt execution is available, confirms process scratch access, helper denial, and helper access to an approved project path. GitOrigin-RevId: 26d83f09c131c1f1d000163b2f8929f601749719	2026-08-26 19:38:42 +00:00
dank-openai	36610d975a	Fix toasts on Windows under WSL 2 (#7137 ) Before this: no notifications or toasts when using Codex CLI in WSL 2. After this: I get toasts from Codex	2025-12-11 15:09:00 -08:00
dank-openai	5c48600bb3	alt+delete deletes the word to the right of the cursor (delete_forward_word) (#3394 ) This mirrors alt+backspace, which deletes to the left of the cursor.	2025-09-09 22:41:23 +00:00

Author

SHA1

Message

Date

dank-openai

7f82397363

Restrict macOS scratch access to process sandboxes (#40961 )

## Why

Filesystem helpers should not inherit access to system scratch directories beyond the paths granted by their filesystem policy, while ordinary processes still need scratch access for compatibility.

## What changed

- Move the `/tmp` and `/var/tmp` read/write grants, including their `/private` aliases, from the shared platform defaults into the process-only Seatbelt defaults.
- Keep process access to `/Applications` alongside the scratch-directory grants.

## Testing

Add a macOS Seatbelt test that verifies the generated policies and, when nested Seatbelt execution is available, confirms process scratch access, helper denial, and helper access to an approved project path.

GitOrigin-RevId: 26d83f09c131c1f1d000163b2f8929f601749719

2026-08-26 19:38:42 +00:00

dank-openai

36610d975a

Fix toasts on Windows under WSL 2 (#7137 )

Before this: no notifications or toasts when using Codex CLI in WSL 2.

After this: I get toasts from Codex

2025-12-11 15:09:00 -08:00

dank-openai

5c48600bb3

alt+delete deletes the word to the right of the cursor (delete_forward_word) (#3394 )

This mirrors alt+backspace, which deletes to the left of the cursor.

2025-09-09 22:41:23 +00:00