Commit Graph
7028 Commits
Author SHA1 Message Date
Chris Bookholt db3b880cbf Merge PR #31019 follow-ups into model shell policy
# Conflicts:
#	codex-rs/core/src/exec_policy.rs
2026-07-03 15:55:13 -07:00
Chris Bookholt 1fd1c9b417 Merge PR #30990 follow-ups into PowerShell policy 2026-07-03 15:36:24 -07:00
Chris Bookholt 24f63bcaa6 Merge PR #30983 follow-ups into namespace exec policy 2026-07-03 15:35:47 -07:00
Chris Bookholt c13157bbf5 Merge PR #30976 follow-up into one-shot approvals 2026-07-03 15:35:22 -07:00
Chris Bookholt 2aac4aa37f test(core): cover sandbox retry callback identity 2026-07-03 15:35:15 -07:00
Chris Bookholt 38c70e2df1 fix(core): harden model-selected shell policy identity 2026-07-03 15:34:28 -07:00
Chris Bookholt 06bed09452 Merge PR #30969 follow-up into approval purpose 2026-07-03 15:19:40 -07:00
Chris Bookholt f13cd9685f Merge PR #30963 follow-up into repeated approval clients 2026-07-03 15:19:08 -07:00
Chris Bookholt 73e7bbfd73 Merge PR #30628 follow-up into approval integrity 2026-07-03 15:18:40 -07:00
Chris Bookholt 7a02f212e9 fix(core): require authority without filesystem containment 2026-07-03 15:15:55 -07:00
Chris Bookholt e32f317912 fix(execpolicy): preserve restrictive namespace rules 2026-07-03 15:11:37 -07:00
Chris Bookholt 729c31bcf4 fix(core): require exact outer argv authority 2026-07-03 14:59:58 -07:00
Chris Bookholt e294be0be7 Merge commit '1b7971db15e13a68da3fecdc8e5cda38bc6271fd' into bookholt/bugb-17231-approval-override 2026-07-03 11:49:50 -07:00
Chris Bookholt 1b7971db15 Merge commit '22e9d5ff64c6c0be7563f15227d875ca097f2984' into bookholt/psec-4922-powershell-one-shot-policy 2026-07-03 11:49:30 -07:00
Chris Bookholt 22e9d5ff64 Merge commit 'e2c95101bcb0bcf7390954b7f0fbb7188214631b' into bookholt/psec-4922-namespace-safe-execpolicy-published 2026-07-03 11:49:10 -07:00
Chris Bookholt e2c95101bc Merge commit 'f9c6f4acfad76b152ef88326d503e6ce6f7516b1' into bookholt/psec-4922-one-shot-approval-lifecycle-published 2026-07-03 11:48:47 -07:00
Chris Bookholt f9c6f4acfa Merge commit 'e3c97a97ae19b1da1662fccc37178bb22fdac1cd' into bookholt/psec-4922-explicit-approval-purpose 2026-07-03 11:48:24 -07:00
Chris Bookholt e3c97a97ae Merge commit 'a0eb300e647051b2fecf3954e6df2a7187d5f0ba' into bookholt/psec-4922-repeated-approval-client-integrity 2026-07-03 11:48:03 -07:00
Chris Bookholt a0eb300e64 Merge commit '13a5b13880195b1b43906b4577b5b1fa656fda9c' into bookholt/psec-4922-approval-integrity 2026-07-03 11:47:43 -07:00
Chris Bookholt 13a5b13880 Fix Windows compaction shell fixtures 2026-07-03 11:36:37 -07:00
Chris Bookholt b4317f4cc7 Fix native Windows policy fixtures 2026-07-03 10:38:38 -07:00
Chris Bookholt 387e083154 Use read-only remote cwd predicate 2026-07-03 10:03:43 -07:00
Chris Bookholt 5dff637b0c Fix Wine remote shell fixtures 2026-07-03 09:50:23 -07:00
Chris Bookholt cb648e6876 Fix cross-platform shell approval fixtures 2026-07-03 09:27:44 -07:00
Chris Bookholt fbd4ac4a4d Harden model-selected shell approval boundaries 2026-07-03 09:04:38 -07:00
Chris Bookholt 1c37924e39 test: remove redundant approval wait loop 2026-07-03 06:13:07 -07:00
Chris Bookholt 2d13f93d85 test: follow PowerShell approval abort lifecycle 2026-07-03 06:02:40 -07:00
Chris Bookholt 485ecf740f test: assert requested PowerShell argv 2026-07-03 05:37:49 -07:00
Chris Bookholt 8f03e96cf7 Fix Windows policy test redundant clones 2026-07-03 05:13:09 -07:00
Chris Bookholt 42a055cc3b Restore one-shot policy for inspected PowerShell wrappers 2026-07-03 04:50:10 -07:00
Chris Bookholt 0a8f5f1e26 Merge PR #30983 one-shot approval lifecycle layer 2026-07-03 03:23:54 -07:00
Chris Bookholt 7f7fd528a6 Merge PR #30976 approval purpose layer 2026-07-03 02:49:07 -07:00
Chris Bookholt 5337f1087e Merge commit '627ece53833650a86257e08d9a2ea935fc3e8d97' into bookholt/psec-4922-explicit-approval-purpose 2026-07-03 02:06:55 -07:00
Chris Bookholt 4dc7747cc3 Merge final repeated-approval parent 2026-07-03 02:06:51 -07:00
Chris Bookholt 627ece5383 Fix TUI argument comment lint 2026-07-03 02:01:44 -07:00
Chris Bookholt 8c9c1ea9fe Harden TUI app-server request correlation 2026-07-03 01:37:58 -07:00
Chris Bookholt e7a5490858 Merge commit 'ee10594f6cea193c6eb3530b80454a6f298c44f5' into bookholt/psec-4922-repeated-approval-client-integrity 2026-07-03 00:05:17 -07:00
Chris Bookholt ee10594f6c Merge commit '20be6f275ee88225a4974687e07e4d5210e5de4d' into bookholt/psec-4922-approval-integrity 2026-07-02 23:50:47 -07:00
Chris Bookholt 416a3672e4 Merge one-shot approval lifecycle parent 2026-07-02 23:29:47 -07:00
Chris Bookholt 924589da6e Harden namespace host mapping aliases 2026-07-02 23:29:35 -07:00
Chris Bookholt 498ca9ee04 fix(core): bound interim one-shot dead-code expectation 2026-07-02 22:41:16 -07:00
Chris Bookholt 45e2d1c252 Harden namespace-aware executable policy matching 2026-07-02 22:24:55 -07:00
Chris Bookholt 20be6f275e fix(shell-command): satisfy Windows and argument lint 2026-07-02 22:18:23 -07:00
Chris Bookholt 00e7179f00 Bind retry approvals to fresh callback authority 2026-07-02 22:02:53 -07:00
Chris Bookholt 19cd2cb97c Harden one-shot command approval retries 2026-07-02 22:02:34 -07:00
Chris Bookholt 91798e6206 fix(shell-command): reject assembly-qualified parser input 2026-07-02 21:54:03 -07:00
Chris Bookholt 7697208282 fix(shell-command): harden PowerShell policy parsing 2026-07-02 21:42:31 -07:00
Chris Bookholt 8a241c6ef8 Merge corrected repeated-approval parent
# Conflicts:
#	codex-rs/analytics/src/reducer.rs
2026-07-02 20:57:08 -07:00
Chris Bookholt 458fc093c4 Fix argument comment lint in approval tests 2026-07-02 20:49:38 -07:00
Chris Bookholt 7346a178fd Merge explicit command approval purpose 2026-07-02 20:42:51 -07:00