Michael Bolin
f3af2e32b0
Merge bfc71971a8 into sapling-pr-archive-bolinfest
2026-03-06 12:27:06 -08:00
Michael Bolin
bfc71971a8
linux-sandbox: honor split filesystem policies in bwrap
2026-03-06 12:26:59 -08:00
Michael Bolin
a8119dae5f
protocol: keep root carveouts sandboxed
2026-03-06 12:26:59 -08:00
Michael Bolin
7c35d14add
sandboxing: preserve denied paths when widening permissions
2026-03-06 12:26:59 -08:00
Michael Bolin
082fff3668
linux-sandbox: plumb split sandbox policies through helper
2026-03-06 12:26:59 -08:00
Michael Bolin
f0f11deed7
seatbelt: honor split filesystem sandbox policies
2026-03-06 12:26:59 -08:00
Michael Bolin
e919dbaa59
safety: honor filesystem policy carveouts in apply_patch
2026-03-06 12:26:59 -08:00
Michael Bolin
ebe6f772ea
protocol: derive effective file access from filesystem policies
2026-03-06 12:26:59 -08:00
Michael Bolin
0e7b5f0102
sandboxing: plumb split sandbox policies through runtime
2026-03-06 12:26:59 -08:00
Michael Bolin
1fc282c77b
merge commit for archive created by Sapling
2026-03-06 12:19:12 -08:00
Michael Bolin
b91f578647
linux-sandbox: honor split filesystem policies in bwrap
2026-03-06 12:18:41 -08:00
Michael Bolin
92f5956964
protocol: keep root carveouts sandboxed
2026-03-06 12:18:41 -08:00
Michael Bolin
b54d693aac
sandboxing: preserve denied paths when widening permissions
2026-03-06 12:18:41 -08:00
Michael Bolin
e08629c93f
linux-sandbox: plumb split sandbox policies through helper
2026-03-06 12:18:40 -08:00
Michael Bolin
4a8859f768
seatbelt: honor split filesystem sandbox policies
2026-03-06 12:18:40 -08:00
Michael Bolin
da1d510cb9
safety: honor filesystem policy carveouts in apply_patch
2026-03-06 12:18:40 -08:00
Michael Bolin
e915ef6011
protocol: derive effective file access from filesystem policies
2026-03-06 12:18:40 -08:00
Michael Bolin
38dad30b3e
sandboxing: plumb split sandbox policies through runtime
2026-03-06 12:18:40 -08:00
Michael Bolin
3eb810e045
config: add v3 filesystem permission profiles
2026-03-06 12:12:48 -08:00
Michael Bolin
7a5aff4972
fix bazel build ( #13787 )
...
I believe this broke in https://github.com/openai/codex/pull/13772 .
2026-03-06 12:12:20 -08:00
Michael Bolin
eb3ffb3408
merge commit for archive created by Sapling
2026-03-06 12:03:03 -08:00
Michael Bolin
e1a0e6a0f9
linux-sandbox: honor split filesystem policies in bwrap
2026-03-06 11:58:25 -08:00
Michael Bolin
33c497357e
protocol: keep root carveouts sandboxed
2026-03-06 11:58:25 -08:00
Michael Bolin
89679ab7d9
sandboxing: preserve denied paths when widening permissions
2026-03-06 11:58:25 -08:00
Michael Bolin
6539a36b0e
linux-sandbox: plumb split sandbox policies through helper
2026-03-06 11:58:25 -08:00
Michael Bolin
9f2ff9fc4f
seatbelt: honor split filesystem sandbox policies
2026-03-06 11:58:25 -08:00
Michael Bolin
b9614d65cb
safety: honor filesystem policy carveouts in apply_patch
2026-03-06 11:58:25 -08:00
Michael Bolin
051a925654
protocol: derive effective file access from filesystem policies
2026-03-06 11:58:25 -08:00
Michael Bolin
609036a872
sandboxing: plumb split sandbox policies through runtime
2026-03-06 11:58:25 -08:00
Michael Bolin
974327befd
config: add v3 filesystem permission profiles
2026-03-06 11:58:25 -08:00
Michael Bolin
275e62fcc7
Merge 4151578f30 into sapling-pr-archive-bolinfest
2026-03-06 11:58:22 -08:00
Michael Bolin
4151578f30
fix bazel build
2026-03-06 11:58:15 -08:00
Michael Bolin
488875f24d
fix: move unit tests in codex-rs/core/src/codex.rs into their own file ( #13783 )
...
This is analogous to https://github.com/openai/codex/pull/13780 .
2026-03-06 11:56:49 -08:00
Michael Bolin
28ac254700
merge commit for archive created by Sapling
2026-03-06 11:51:37 -08:00
Michael Bolin
5cd0fd920a
config: add v3 filesystem permission profiles
2026-03-06 11:51:31 -08:00
Michael Bolin
e0cd259424
merge commit for archive created by Sapling
2026-03-06 11:35:27 -08:00
Michael Bolin
656480dbd9
Merge 177d7b09d9 into sapling-pr-archive-bolinfest
2026-03-06 11:28:29 -08:00
Michael Bolin
177d7b09d9
fix: move unit tests in codex-rs/core/src/codex.rs into their own file
2026-03-06 11:28:18 -08:00
Michael Bolin
4688783f85
linux-sandbox: honor split filesystem policies in bwrap
2026-03-06 11:27:47 -08:00
Michael Bolin
7a24003777
protocol: keep root carveouts sandboxed
2026-03-06 11:27:47 -08:00
Michael Bolin
5e998de5bc
sandboxing: preserve denied paths when widening permissions
2026-03-06 11:27:47 -08:00
Michael Bolin
ff2d93e5c2
linux-sandbox: plumb split sandbox policies through helper
2026-03-06 11:27:47 -08:00
Michael Bolin
6f3174887b
seatbelt: honor split filesystem sandbox policies
2026-03-06 11:27:46 -08:00
Michael Bolin
11575e0233
safety: honor filesystem policy carveouts in apply_patch
2026-03-06 11:27:46 -08:00
Michael Bolin
1d1e0badae
protocol: derive effective file access from filesystem policies
2026-03-06 11:27:46 -08:00
Michael Bolin
6eea1b035f
sandboxing: plumb split sandbox policies through runtime
2026-03-06 11:27:46 -08:00
Michael Bolin
88d8e1d1aa
config: add v3 filesystem permission profiles
2026-03-06 11:27:45 -08:00
Michael Bolin
39869f7443
fix: move unit tests in codex-rs/core/src/config/mod.rs into their own file ( #13780 )
...
At over 7,000 lines, `codex-rs/core/src/config/mod.rs` was getting a bit
unwieldy.
This PR does the same type of move as
https://github.com/openai/codex/pull/12957 to put unit tests in their
own file, though I decided `config_tests.rs` is a more intuitive name
than `mod_tests.rs`.
Ultimately, I'll codemod the rest of the codebase to follow suit, but I
want to do it in stages to reduce merge conflicts for people.
2026-03-06 11:21:58 -08:00
Charley Cunningham and Codex
ad98504d74
Reduce SQLite log retention to 10 days ( #13781 )
...
## Summary
- reduce the SQLite-backed log retention window from 90 days to 10 days
## Testing
- just fmt
- cargo test -p codex-state
Co-authored-by: Codex <noreply@openai.com >
2026-03-06 11:15:28 -08:00
sayan-oai
8a54d3caaa
feat: structured plugin parsing ( #13711 )
...
#### What
Add structured `@plugin` parsing and TUI support for plugin mentions.
- Core: switch from plain-text `@display_name` parsing to structured
`plugin://...` mentions via `UserInput::Mention` and
`[$...](plugin://...)` links in text, same pattern as apps/skills.
- TUI: add plugin mention popup, autocomplete, and chips when typing
`$`. Load plugin capability summaries and feed them into the composer;
plugin mentions appear alongside skills and apps.
- Generalize mention parsing to a sigil parameter, still defaults to `$`
<img width="797" height="119" alt="image"
src="https://github.com/user-attachments/assets/f0fe2658-d908-4927-9139-73f850805ceb "
/>
Builds on #13510 . Currently clients have to build their own `id` via
`plugin@marketplace` and filter plugins to show by `enabled`, but we
will add `id` and `available` as fields returned from `plugin/list`
soon.
####Tests
Added tests, verified locally.
2026-03-06 11:08:36 -08:00
Michael Bolin