Val Kharitonov
26f4b8e2f1
remove serviceTier from app-server examples ( #13489 )
...
Documentation-only
2026-03-04 19:12:40 +00:00
Owen Lin
27724f6ead
feat(core, tracing): add a span representing a turn ( #13424 )
...
This is PR 3 of the app-server tracing rollout.
PRs https://github.com/openai/codex/pull/13285 and
https://github.com/openai/codex/pull/13368 gave us inbound request spans
in app-server and propagated trace context through Submission. This
change finishes the next piece in core: when a request actually starts a
turn, we now create a core-owned long-lived span that stays open for the
real lifetime of the turn.
What changed:
- `Session::spawn_task` can now optionally create a long-lived turn span
and run the spawned task inside it
- `turn/start` uses that path, so normal turn execution stays under a
single core-owned span after the async handoff
- `review/start` uses the same pattern
- added a unit test that verifies the spawned turn task inherits the
submission dispatch trace ancestry
**Why**
The app-server request span is intentionally short-lived. Once work
crosses into core, we still want one span that covers the actual
execution window until completion or interruption. This keeps that
ownership where it belongs: in the layer that owns the runtime
lifecycle.
2026-03-04 11:09:17 -08:00
iceweasel-oai
54a1c81d73
allow apps to specify cwd for sandbox setup. ( #13484 )
...
The electron app doesn't start up the app-server in a particular
workspace directory.
So sandbox setup happens in the app-installed directory instead of the
project workspace.
This allows the app do specify the workspace cwd so that the sandbox
setup actually sets up the ACLs instead of exiting fast and then having
the first shell command be slow.
2026-03-04 10:54:30 -08:00
Alex Daley
8a59386273
add new scopes to login ( #12383 )
...
Validated login + refresh flows. Removing scopes from the refresh
request until we have upgrade flow in place. Confirmed that tokens
refresh with existing scopes.
2026-03-04 16:41:54 +00:00
jif-oai
f72ab43fd1
feat: memories in workspace write ( #13467 )
artifact-runtime-v2.3.4
2026-03-04 13:00:26 +00:00
jif-oai
df619474f5
nit: citation prompt ( #13468 )
2026-03-04 13:00:11 +00:00
jif-oai
e07eaff0d3
feat: add metric for per-turn tool count and add tmp_mem flag ( #13456 )
2026-03-04 11:25:58 +00:00
jif-oai
bda3c49dc4
feat: disable request input on sub agent ( #13460 )
...
https://github.com/openai/codex/issues/13289
2026-03-04 11:25:49 +00:00
jif-oai
e6b2e3a9f7
fix: bad merge ( #13461 )
2026-03-04 11:00:48 +00:00
jif-oai
e4a202ea52
fix: pending messages in /agent ( #13240 )
2026-03-04 10:17:29 +00:00
jif-oai
49634b7f9c
add metric for per-turn token usage ( #13454 )
2026-03-04 10:17:25 +00:00
Michael Bolin
d327d4e7f2
Merge 0fbe89feee into sapling-pr-archive-bolinfest
2026-03-04 01:58:23 -08:00
Michael Bolin
0fbe89feee
linux-sandbox: honor split filesystem policies in bwrap
2026-03-04 01:58:13 -08:00
Michael Bolin
304b726043
protocol: keep root carveouts sandboxed
2026-03-04 01:56:05 -08:00
Michael Bolin
dd05b14d5b
merge commit for archive created by Sapling
2026-03-04 01:47:06 -08:00
Michael Bolin
cfa19e21f5
sandboxing: preserve denied paths when widening permissions
2026-03-04 01:46:54 -08:00
Michael Bolin
6790e7fa4a
linux-sandbox: plumb split sandbox policies through helper
2026-03-04 01:44:48 -08:00
Michael Bolin
ed7a864c46
seatbelt: honor split filesystem sandbox policies
2026-03-04 01:44:48 -08:00
Michael Bolin
1434bba73c
safety: honor filesystem policy carveouts in apply_patch
2026-03-04 01:44:48 -08:00
Michael Bolin
fab10a6b54
artifacts: honor filesystem policy carveouts in path checks
2026-03-04 01:44:48 -08:00
Michael Bolin
2adc12ed7c
protocol: derive effective file access from filesystem policies
2026-03-04 01:44:48 -08:00
Michael Bolin
6c47eda8a4
sandboxing: plumb split sandbox policies through runtime
2026-03-04 01:44:48 -08:00
jif-oai
a4ad101125
feat: ordinal nick name ( #13412 )
2026-03-04 09:41:29 +00:00
jif-oai
932ff28183
feat: better multi-agent prompt ( #13404 )
2026-03-04 09:41:20 +00:00
Michael Bolin
b7befa4329
Merge ae14f980c4 into sapling-pr-archive-bolinfest
2026-03-04 01:38:24 -08:00
Michael Bolin
ae14f980c4
linux-sandbox: plumb split sandbox policies through helper
2026-03-04 01:38:11 -08:00
Michael Bolin
a05294ed6a
Merge c3b03c7861 into sapling-pr-archive-bolinfest
2026-03-04 01:24:31 -08:00
Michael Bolin
c3b03c7861
seatbelt: honor split filesystem sandbox policies
2026-03-04 01:24:22 -08:00
Michael Bolin
9fef0efae0
merge commit for archive created by Sapling
2026-03-04 01:10:24 -08:00
Michael Bolin
7abd70178a
config: add v3 filesystem permission profiles
2026-03-04 01:10:16 -08:00
Michael Bolin
3244ffd774
safety: honor filesystem policy carveouts in apply_patch
2026-03-04 01:10:16 -08:00
Michael Bolin
65344a607a
artifacts: honor filesystem policy carveouts in path checks
2026-03-04 01:10:16 -08:00
Michael Bolin
03b0581a3a
protocol: derive effective file access from filesystem policies
2026-03-04 01:10:16 -08:00
Michael Bolin
6e5325c2d3
sandboxing: plumb split sandbox policies through runtime
2026-03-04 01:10:16 -08:00
Michael Bolin
60394eddc8
merge commit for archive created by Sapling
2026-03-04 01:08:18 -08:00
Michael Bolin
a06222f74c
safety: honor filesystem policy carveouts in apply_patch
2026-03-04 01:07:23 -08:00
Michael Bolin
9634623df2
artifacts: honor filesystem policy carveouts in path checks
2026-03-04 01:07:23 -08:00
Michael Bolin
32620a9bdd
protocol: derive effective file access from filesystem policies
2026-03-04 01:07:23 -08:00
Michael Bolin
582451849f
sandboxing: plumb split sandbox policies through runtime
2026-03-04 01:07:23 -08:00
Michael Bolin
15b518e8ec
config: add v3 filesystem permission profiles
2026-03-04 01:07:23 -08:00
Michael Bolin
090e1f1517
Merge d7e45d6e8c into sapling-pr-archive-bolinfest
2026-03-04 00:57:10 -08:00
Michael Bolin
d7e45d6e8c
safety: honor filesystem policy carveouts in apply_patch
2026-03-04 00:57:01 -08:00
Michael Bolin
9a0a3bbcf8
merge commit for archive created by Sapling
2026-03-04 00:51:14 -08:00
Michael Bolin
6c55884b93
artifacts: honor filesystem policy carveouts in path checks
2026-03-04 00:50:57 -08:00
Michael Bolin
36d7f4656a
protocol: derive effective file access from filesystem policies
2026-03-04 00:50:57 -08:00
Michael Bolin
b34529d0c5
sandboxing: plumb split sandbox policies through runtime
2026-03-04 00:50:57 -08:00
Michael Bolin
236acdbe64
Merge 3767b44330 into sapling-pr-archive-bolinfest
2026-03-04 00:38:45 -08:00
Michael Bolin
3767b44330
protocol: derive effective file access from filesystem policies
2026-03-04 00:38:38 -08:00
Michael Bolin
eb8967ef36
Merge 3d8f475bce into sapling-pr-archive-bolinfest
2026-03-04 00:32:52 -08:00
Michael Bolin
3d8f475bce
sandboxing: plumb split sandbox policies through runtime
2026-03-04 00:32:38 -08:00