Commit Graph
9551 Commits
Author SHA1 Message Date
Michael Bolin da1d510cb9 safety: honor filesystem policy carveouts in apply_patch 2026-03-06 12:18:40 -08:00
Michael Bolin e915ef6011 protocol: derive effective file access from filesystem policies 2026-03-06 12:18:40 -08:00
Michael Bolin 38dad30b3e sandboxing: plumb split sandbox policies through runtime 2026-03-06 12:18:40 -08:00
Michael Bolin 3eb810e045 config: add v3 filesystem permission profiles 2026-03-06 12:12:48 -08:00
Michael Bolin 7a5aff4972 fix bazel build (#13787)
I believe this broke in https://github.com/openai/codex/pull/13772.
2026-03-06 12:12:20 -08:00
Michael Bolin eb3ffb3408 merge commit for archive created by Sapling 2026-03-06 12:03:03 -08:00
Michael Bolin e1a0e6a0f9 linux-sandbox: honor split filesystem policies in bwrap 2026-03-06 11:58:25 -08:00
Michael Bolin 33c497357e protocol: keep root carveouts sandboxed 2026-03-06 11:58:25 -08:00
Michael Bolin 89679ab7d9 sandboxing: preserve denied paths when widening permissions 2026-03-06 11:58:25 -08:00
Michael Bolin 6539a36b0e linux-sandbox: plumb split sandbox policies through helper 2026-03-06 11:58:25 -08:00
Michael Bolin 9f2ff9fc4f seatbelt: honor split filesystem sandbox policies 2026-03-06 11:58:25 -08:00
Michael Bolin b9614d65cb safety: honor filesystem policy carveouts in apply_patch 2026-03-06 11:58:25 -08:00
Michael Bolin 051a925654 protocol: derive effective file access from filesystem policies 2026-03-06 11:58:25 -08:00
Michael Bolin 609036a872 sandboxing: plumb split sandbox policies through runtime 2026-03-06 11:58:25 -08:00
Michael Bolin 974327befd config: add v3 filesystem permission profiles 2026-03-06 11:58:25 -08:00
Michael Bolin 275e62fcc7 Merge 4151578f30 into sapling-pr-archive-bolinfest 2026-03-06 11:58:22 -08:00
Michael Bolin 4151578f30 fix bazel build 2026-03-06 11:58:15 -08:00
Michael Bolin 488875f24d fix: move unit tests in codex-rs/core/src/codex.rs into their own file (#13783)
This is analogous to https://github.com/openai/codex/pull/13780.
2026-03-06 11:56:49 -08:00
Michael Bolin 28ac254700 merge commit for archive created by Sapling 2026-03-06 11:51:37 -08:00
Michael Bolin 5cd0fd920a config: add v3 filesystem permission profiles 2026-03-06 11:51:31 -08:00
Michael Bolin e0cd259424 merge commit for archive created by Sapling 2026-03-06 11:35:27 -08:00
Michael Bolin 656480dbd9 Merge 177d7b09d9 into sapling-pr-archive-bolinfest 2026-03-06 11:28:29 -08:00
Michael Bolin 177d7b09d9 fix: move unit tests in codex-rs/core/src/codex.rs into their own file 2026-03-06 11:28:18 -08:00
Michael Bolin 4688783f85 linux-sandbox: honor split filesystem policies in bwrap 2026-03-06 11:27:47 -08:00
Michael Bolin 7a24003777 protocol: keep root carveouts sandboxed 2026-03-06 11:27:47 -08:00
Michael Bolin 5e998de5bc sandboxing: preserve denied paths when widening permissions 2026-03-06 11:27:47 -08:00
Michael Bolin ff2d93e5c2 linux-sandbox: plumb split sandbox policies through helper 2026-03-06 11:27:47 -08:00
Michael Bolin 6f3174887b seatbelt: honor split filesystem sandbox policies 2026-03-06 11:27:46 -08:00
Michael Bolin 11575e0233 safety: honor filesystem policy carveouts in apply_patch 2026-03-06 11:27:46 -08:00
Michael Bolin 1d1e0badae protocol: derive effective file access from filesystem policies 2026-03-06 11:27:46 -08:00
Michael Bolin 6eea1b035f sandboxing: plumb split sandbox policies through runtime 2026-03-06 11:27:46 -08:00
Michael Bolin 88d8e1d1aa config: add v3 filesystem permission profiles 2026-03-06 11:27:45 -08:00
Michael Bolin 39869f7443 fix: move unit tests in codex-rs/core/src/config/mod.rs into their own file (#13780)
At over 7,000 lines, `codex-rs/core/src/config/mod.rs` was getting a bit
unwieldy.

This PR does the same type of move as
https://github.com/openai/codex/pull/12957 to put unit tests in their
own file, though I decided `config_tests.rs` is a more intuitive name
than `mod_tests.rs`.

Ultimately, I'll codemod the rest of the codebase to follow suit, but I
want to do it in stages to reduce merge conflicts for people.
2026-03-06 11:21:58 -08:00
Charley CunninghamandCodex ad98504d74 Reduce SQLite log retention to 10 days (#13781)
## Summary
- reduce the SQLite-backed log retention window from 90 days to 10 days

## Testing
- just fmt
- cargo test -p codex-state

Co-authored-by: Codex <noreply@openai.com>
2026-03-06 11:15:28 -08:00
sayan-oai 8a54d3caaa feat: structured plugin parsing (#13711)
#### What

Add structured `@plugin` parsing and TUI support for plugin mentions.

- Core: switch from plain-text `@display_name` parsing to structured
`plugin://...` mentions via `UserInput::Mention` and
`[$...](plugin://...)` links in text, same pattern as apps/skills.
- TUI: add plugin mention popup, autocomplete, and chips when typing
`$`. Load plugin capability summaries and feed them into the composer;
plugin mentions appear alongside skills and apps.
- Generalize mention parsing to a sigil parameter, still defaults to `$`

<img width="797" height="119" alt="image"
src="https://github.com/user-attachments/assets/f0fe2658-d908-4927-9139-73f850805ceb"
/>

Builds on #13510. Currently clients have to build their own `id` via
`plugin@marketplace` and filter plugins to show by `enabled`, but we
will add `id` and `available` as fields returned from `plugin/list`
soon.

####Tests

Added tests, verified locally.
2026-03-06 11:08:36 -08:00
Michael Bolin 45bc4bf6ba merge commit for archive created by Sapling 2026-03-06 11:08:17 -08:00
Michael Bolin 84db80f616 fix: move unit tests in codex-rs/core/src/config/mod.rs into their own file 2026-03-06 11:08:06 -08:00
Michael Bolin e0676d4311 merge commit for archive created by Sapling 2026-03-06 11:05:02 -08:00
Michael Bolin 7f7a180110 merge commit for archive created by Sapling 2026-03-06 11:02:37 -08:00
Michael Bolin a05ed06409 fix: move unit tests in codex-rs/core/src/config/mod.rs into their own file 2026-03-06 11:02:29 -08:00
jif-oai 0e41a5c4a8 chore: improve DB flushing (#13620)
This branch:
* Avoid flushing DB when not necessary
* Filter events for which we perfom an `upsert` into the DB
* Add a dedicated update function of the `thread:updated_at` that is
lighter

This should significantly reduce the DB lock contention. If it is not
sufficient, we can de-sync the flush of the DB for `updated_at`
2026-03-06 19:58:14 +01:00
Michael Bolin f05a0a3210 linux-sandbox: honor split filesystem policies in bwrap 2026-03-06 10:54:33 -08:00
Michael Bolin d3e5080d04 protocol: keep root carveouts sandboxed 2026-03-06 10:54:33 -08:00
Michael Bolin a86cbebf52 sandboxing: preserve denied paths when widening permissions 2026-03-06 10:54:33 -08:00
Charley CunninghamandCodex 4e6c6193a1 Move sqlite logs to a dedicated database (#13772)
## Summary
- move sqlite log reads and writes onto a dedicated `logs_1.sqlite`
database to reduce lock contention with the main state DB
- add a dedicated logs migrator and route `codex-state-logs` to the new
database path
- leave the old `logs` table in the existing state DB untouched for now

## Testing
- just fmt
- cargo test -p codex-state

---------

Co-authored-by: Codex <noreply@openai.com>
2026-03-06 10:54:20 -08:00
Michael Bolin 5b731acf15 merge commit for archive created by Sapling 2026-03-06 10:53:16 -08:00
Michael Bolin c88ee7f2eb fix: move unit tests in codex-rs/core/src/config/mod.rs into their own file 2026-03-06 10:53:10 -08:00
Michael Bolin 3db879892d linux-sandbox: plumb split sandbox policies through helper 2026-03-06 10:52:42 -08:00
Michael Bolin 3e354add15 seatbelt: honor split filesystem sandbox policies 2026-03-06 10:51:14 -08:00
Michael Bolin a6a9651774 safety: honor filesystem policy carveouts in apply_patch 2026-03-06 10:51:14 -08:00