Commit Graph

1811 Commits

Author SHA1 Message Date
Michael Bolin
9812f7978c Merge 217de68af6 into sapling-pr-archive-bolinfest 2025-06-26 09:03:38 -07:00
Michael Bolin
217de68af6 feat: add support for /diff command 2025-06-26 09:03:34 -07:00
Michael Bolin
02d8b5bea4 merge commit for archive created by Sapling 2025-06-25 23:27:18 -07:00
Michael Bolin
e74657bbdd feat: show number of tokens remaining in UI 2025-06-25 23:27:12 -07:00
Michael Bolin
cb7121367d merge commit for archive created by Sapling 2025-06-25 23:10:21 -07:00
Michael Bolin
683cdf9cec feat: show number of tokens remaining in UI 2025-06-25 23:10:16 -07:00
Michael Bolin
ece4ebf640 Merge e7f62d9d67 into sapling-pr-archive-bolinfest 2025-06-25 23:08:18 -07:00
Michael Bolin
e7f62d9d67 feat: show number of tokens remaining in UI 2025-06-25 23:07:01 -07:00
Michael Bolin
14e644ba91 merge commit for archive created by Sapling 2025-06-25 16:41:22 -07:00
Michael Bolin
81e6823428 feat: add support for /diff command 2025-06-25 16:41:15 -07:00
Michael Bolin
4b09784d3a Merge 03fe6a9826 into sapling-pr-archive-bolinfest 2025-06-25 16:38:39 -07:00
Michael Bolin
03fe6a9826 feat: add support for /diff command 2025-06-25 16:36:50 -07:00
Michael Bolin
b42f8459c3 Merge 715aac0c00 into sapling-pr-archive-bolinfest 2025-06-25 16:33:35 -07:00
Michael Bolin
715aac0c00 feat: show number of tokens remaining in UI 2025-06-25 16:33:04 -07:00
Michael Bolin
4e9f95d800 Merge aadfed064f into sapling-pr-archive-bolinfest 2025-06-25 13:15:55 -07:00
Michael Bolin
aadfed064f feat: standalone file search CLI 2025-06-25 13:15:45 -07:00
Michael Bolin
50924101d2 feat: add --dangerously-bypass-approvals-and-sandbox (#1384)
This PR reworks `assess_command_safety()` so that the combination of
`AskForApproval::Never` and `SandboxPolicy::DangerFullAccess` ensures
that commands are run without _any_ sandbox and the user should never be
prompted. In turn, it adds support for a new
`--dangerously-bypass-approvals-and-sandbox` flag (that cannot be used
with `--approval-policy` or `--full-auto`) that sets both of those
options.

Fixes https://github.com/openai/codex/issues/1254
2025-06-25 12:36:10 -07:00
Michael Bolin
3bcda29a24 Merge d8765eecc8 into sapling-pr-archive-bolinfest 2025-06-25 12:27:41 -07:00
Michael Bolin
d8765eecc8 feat: add --dangerously-bypass-approvals-and-sandbox 2025-06-25 12:26:22 -07:00
Michael Bolin
72082164c1 chore: rename AskForApproval::UnlessAllowListed to AskForApproval::UnlessTrusted (#1385)
We could just rename to `Untrusted` instead of `UnlessTrusted`, but I
think `AskForApproval::UnlessTrusted` reads a bit better.
2025-06-25 12:26:13 -07:00
Michael Bolin
61806fc5f5 Merge a66f27bc9d into sapling-pr-archive-bolinfest 2025-06-25 12:09:47 -07:00
Michael Bolin
a66f27bc9d feat: add --dangerously-bypass-approvals-and-sandbox 2025-06-25 12:09:36 -07:00
Michael Bolin
0235df863a chore: rename AskForApproval::UnlessAllowListed to AskForApproval::UnlessTrusted 2025-06-25 12:09:27 -07:00
Michael Bolin
c640e59dcd merge commit for archive created by Sapling 2025-06-25 12:07:16 -07:00
Michael Bolin
24e051c466 feat: add --dangerously-bypass-approvals-and-sandbox 2025-06-25 12:07:09 -07:00
Michael Bolin
2c621b3860 merge commit for archive created by Sapling 2025-06-25 11:33:43 -07:00
Michael Bolin
552b404626 feat: add --dangerously-bypass-approvals-and-sandbox 2025-06-25 11:33:37 -07:00
Michael Bolin
4610c998a1 Merge 1b1611b891 into sapling-pr-archive-bolinfest 2025-06-25 11:32:16 -07:00
Michael Bolin
1b1611b891 feat: add --dangerously-bypass-approvals-and-sandbox 2025-06-25 11:32:11 -07:00
Michael Bolin
66c6ad7801 Merge 1420d2458c into sapling-pr-archive-bolinfest 2025-06-25 11:21:37 -07:00
Michael Bolin
1420d2458c feat: add --dangerously-bypass-approvals-and-sandbox 2025-06-25 11:21:09 -07:00
Michael Bolin
e09691337d chore: improve docstring for --full-auto (#1379)
Reference `-c sandbox.mode=workspace-write` in the docstring and users
can read the config docs for `sandbox` for more information.
2025-06-25 09:13:36 -07:00
Michael Bolin
887a7467f6 Merge 9e144a71d0 into sapling-pr-archive-bolinfest 2025-06-24 22:19:32 -07:00
Michael Bolin
9e144a71d0 chore: improve docstring for --full-auto 2025-06-24 22:19:26 -07:00
Michael Bolin
86d5a9d80d chore: rename unless-allow-listed to untrusted (#1378)
For the `approval_policy` config option, renames `unless-allow-listed`
to `untrusted`. In general, when it comes to exec'ing commands, I think
"trusted" is a more accurate term than "safe."

Also drops the `AskForApproval::AutoEdit` variant, as we were not really
making use of it, anyway.

Fixes https://github.com/openai/codex/issues/1250.


---
[//]: # (BEGIN SAPLING FOOTER)
Stack created with [Sapling](https://sapling-scm.com). Best reviewed
with [ReviewStack](https://reviewstack.dev/openai/codex/pull/1378).
* #1379
* __->__ #1378
2025-06-24 22:19:21 -07:00
Michael Bolin
c6e562aedd merge commit for archive created by Sapling 2025-06-24 22:15:59 -07:00
Michael Bolin
63af91e70d chore: improve docstring for --full-auto 2025-06-24 22:15:47 -07:00
Michael Bolin
4c8514a636 chore: rename unless-allow-listed to untrusted 2025-06-24 22:15:47 -07:00
Michael Bolin
8cd306f8d8 Merge 989afe9e7a into sapling-pr-archive-bolinfest 2025-06-24 22:11:10 -07:00
Michael Bolin
989afe9e7a chore: improve docstring for --full-auto 2025-06-24 22:11:03 -07:00
Michael Bolin
53a97c4b00 chore: rename unless-allow-listed to untrusted 2025-06-24 22:11:03 -07:00
Michael Bolin
b6b2205936 Merge 3734c29859 into sapling-pr-archive-bolinfest 2025-06-24 22:09:22 -07:00
Michael Bolin
3734c29859 chore: improve docstring for --full-auto 2025-06-24 22:09:06 -07:00
Michael Bolin
3d672c2262 merge commit for archive created by Sapling 2025-06-24 22:05:59 -07:00
Michael Bolin
b66373f946 chore: rename unless-allow-listed to untrusted 2025-06-24 22:05:53 -07:00
Michael Bolin
0eff0d93a7 Merge 17fad32de2 into sapling-pr-archive-bolinfest 2025-06-24 22:05:07 -07:00
Michael Bolin
17fad32de2 chore: rename unless-allow-listed to untrusted 2025-06-24 22:04:59 -07:00
Michael Bolin
531ce7626f fix: pretty-print the sandbox config in the TUI/exec modes (#1376)
Now that https://github.com/openai/codex/pull/1373 simplified the
sandbox config, we can print something much simpler in the TUI (and in
`codex exec`) to summarize the sandbox config.

Before:

![Screenshot 2025-06-24 at 5 45
52 PM](https://github.com/user-attachments/assets/b7633efb-a619-43e1-9abe-7bb0be2d0ec0)

With this change:

![Screenshot 2025-06-24 at 5 46
44 PM](https://github.com/user-attachments/assets/8d099bdd-a429-4796-a08d-70931d984e4f)

For reference, my `config.toml` contains:

```
[sandbox]
mode = "workspace-write"
writable_roots = ["/tmp", "/Users/mbolin/.pyenv/shims"]
```

Fixes https://github.com/openai/codex/issues/1248
2025-06-24 17:48:51 -07:00
Michael Bolin
073ff4110c Merge 26f93c320b into sapling-pr-archive-bolinfest 2025-06-24 17:44:11 -07:00
Michael Bolin
26f93c320b fix: pretty-print the sandbox config in the TUI/exec modes 2025-06-24 17:44:04 -07:00