Commit Graph
9448 Commits
Author SHA1 Message Date
Val Kharitonov 26f4b8e2f1 remove serviceTier from app-server examples (#13489)
Documentation-only
2026-03-04 19:12:40 +00:00
Owen Lin 27724f6ead feat(core, tracing): add a span representing a turn (#13424)
This is PR 3 of the app-server tracing rollout.

PRs https://github.com/openai/codex/pull/13285 and
https://github.com/openai/codex/pull/13368 gave us inbound request spans
in app-server and propagated trace context through Submission. This
change finishes the next piece in core: when a request actually starts a
turn, we now create a core-owned long-lived span that stays open for the
real lifetime of the turn.

What changed:
- `Session::spawn_task` can now optionally create a long-lived turn span
and run the spawned task inside it
- `turn/start` uses that path, so normal turn execution stays under a
single core-owned span after the async handoff
- `review/start` uses the same pattern
- added a unit test that verifies the spawned turn task inherits the
submission dispatch trace ancestry

**Why**
The app-server request span is intentionally short-lived. Once work
crosses into core, we still want one span that covers the actual
execution window until completion or interruption. This keeps that
ownership where it belongs: in the layer that owns the runtime
lifecycle.
2026-03-04 11:09:17 -08:00
iceweasel-oai 54a1c81d73 allow apps to specify cwd for sandbox setup. (#13484)
The electron app doesn't start up the app-server in a particular
workspace directory.
So sandbox setup happens in the app-installed directory instead of the
project workspace.

This allows the app do specify the workspace cwd so that the sandbox
setup actually sets up the ACLs instead of exiting fast and then having
the first shell command be slow.
2026-03-04 10:54:30 -08:00
Alex Daley 8a59386273 add new scopes to login (#12383)
Validated login + refresh flows. Removing scopes from the refresh
request until we have upgrade flow in place. Confirmed that tokens
refresh with existing scopes.
2026-03-04 16:41:54 +00:00
jif-oai f72ab43fd1 feat: memories in workspace write (#13467) artifact-runtime-v2.3.4 2026-03-04 13:00:26 +00:00
jif-oai df619474f5 nit: citation prompt (#13468) 2026-03-04 13:00:11 +00:00
jif-oai e07eaff0d3 feat: add metric for per-turn tool count and add tmp_mem flag (#13456) 2026-03-04 11:25:58 +00:00
jif-oai bda3c49dc4 feat: disable request input on sub agent (#13460)
https://github.com/openai/codex/issues/13289
2026-03-04 11:25:49 +00:00
jif-oai e6b2e3a9f7 fix: bad merge (#13461) 2026-03-04 11:00:48 +00:00
jif-oai e4a202ea52 fix: pending messages in /agent (#13240) 2026-03-04 10:17:29 +00:00
jif-oai 49634b7f9c add metric for per-turn token usage (#13454) 2026-03-04 10:17:25 +00:00
Michael Bolin d327d4e7f2 Merge 0fbe89feee into sapling-pr-archive-bolinfest 2026-03-04 01:58:23 -08:00
Michael Bolin 0fbe89feee linux-sandbox: honor split filesystem policies in bwrap 2026-03-04 01:58:13 -08:00
Michael Bolin 304b726043 protocol: keep root carveouts sandboxed 2026-03-04 01:56:05 -08:00
Michael Bolin dd05b14d5b merge commit for archive created by Sapling 2026-03-04 01:47:06 -08:00
Michael Bolin cfa19e21f5 sandboxing: preserve denied paths when widening permissions 2026-03-04 01:46:54 -08:00
Michael Bolin 6790e7fa4a linux-sandbox: plumb split sandbox policies through helper 2026-03-04 01:44:48 -08:00
Michael Bolin ed7a864c46 seatbelt: honor split filesystem sandbox policies 2026-03-04 01:44:48 -08:00
Michael Bolin 1434bba73c safety: honor filesystem policy carveouts in apply_patch 2026-03-04 01:44:48 -08:00
Michael Bolin fab10a6b54 artifacts: honor filesystem policy carveouts in path checks 2026-03-04 01:44:48 -08:00
Michael Bolin 2adc12ed7c protocol: derive effective file access from filesystem policies 2026-03-04 01:44:48 -08:00
Michael Bolin 6c47eda8a4 sandboxing: plumb split sandbox policies through runtime 2026-03-04 01:44:48 -08:00
jif-oai a4ad101125 feat: ordinal nick name (#13412) 2026-03-04 09:41:29 +00:00
jif-oai 932ff28183 feat: better multi-agent prompt (#13404) 2026-03-04 09:41:20 +00:00
Michael Bolin b7befa4329 Merge ae14f980c4 into sapling-pr-archive-bolinfest 2026-03-04 01:38:24 -08:00
Michael Bolin ae14f980c4 linux-sandbox: plumb split sandbox policies through helper 2026-03-04 01:38:11 -08:00
Michael Bolin a05294ed6a Merge c3b03c7861 into sapling-pr-archive-bolinfest 2026-03-04 01:24:31 -08:00
Michael Bolin c3b03c7861 seatbelt: honor split filesystem sandbox policies 2026-03-04 01:24:22 -08:00
Michael Bolin 9fef0efae0 merge commit for archive created by Sapling 2026-03-04 01:10:24 -08:00
Michael Bolin 7abd70178a config: add v3 filesystem permission profiles 2026-03-04 01:10:16 -08:00
Michael Bolin 3244ffd774 safety: honor filesystem policy carveouts in apply_patch 2026-03-04 01:10:16 -08:00
Michael Bolin 65344a607a artifacts: honor filesystem policy carveouts in path checks 2026-03-04 01:10:16 -08:00
Michael Bolin 03b0581a3a protocol: derive effective file access from filesystem policies 2026-03-04 01:10:16 -08:00
Michael Bolin 6e5325c2d3 sandboxing: plumb split sandbox policies through runtime 2026-03-04 01:10:16 -08:00
Michael Bolin 60394eddc8 merge commit for archive created by Sapling 2026-03-04 01:08:18 -08:00
Michael Bolin a06222f74c safety: honor filesystem policy carveouts in apply_patch 2026-03-04 01:07:23 -08:00
Michael Bolin 9634623df2 artifacts: honor filesystem policy carveouts in path checks 2026-03-04 01:07:23 -08:00
Michael Bolin 32620a9bdd protocol: derive effective file access from filesystem policies 2026-03-04 01:07:23 -08:00
Michael Bolin 582451849f sandboxing: plumb split sandbox policies through runtime 2026-03-04 01:07:23 -08:00
Michael Bolin 15b518e8ec config: add v3 filesystem permission profiles 2026-03-04 01:07:23 -08:00
Michael Bolin 090e1f1517 Merge d7e45d6e8c into sapling-pr-archive-bolinfest 2026-03-04 00:57:10 -08:00
Michael Bolin d7e45d6e8c safety: honor filesystem policy carveouts in apply_patch 2026-03-04 00:57:01 -08:00
Michael Bolin 9a0a3bbcf8 merge commit for archive created by Sapling 2026-03-04 00:51:14 -08:00
Michael Bolin 6c55884b93 artifacts: honor filesystem policy carveouts in path checks 2026-03-04 00:50:57 -08:00
Michael Bolin 36d7f4656a protocol: derive effective file access from filesystem policies 2026-03-04 00:50:57 -08:00
Michael Bolin b34529d0c5 sandboxing: plumb split sandbox policies through runtime 2026-03-04 00:50:57 -08:00
Michael Bolin 236acdbe64 Merge 3767b44330 into sapling-pr-archive-bolinfest 2026-03-04 00:38:45 -08:00
Michael Bolin 3767b44330 protocol: derive effective file access from filesystem policies 2026-03-04 00:38:38 -08:00
Michael Bolin eb8967ef36 Merge 3d8f475bce into sapling-pr-archive-bolinfest 2026-03-04 00:32:52 -08:00
Michael Bolin 3d8f475bce sandboxing: plumb split sandbox policies through runtime 2026-03-04 00:32:38 -08:00