Commit Graph

  • fa92d4ac98 Test forced workspace allowlist login URL rreichel3-oai 2026-05-11 11:41:16 -04:00
  • 43c04f0e8b Reject comma-separated forced workspace config rreichel3-oai 2026-05-08 16:39:25 -04:00
  • d5f71d397e Send forced workspaces as one auth query param rreichel3-oai 2026-05-06 15:24:56 -04:00
  • 38c994eec5 Fix app-server protocol TS schema fixture rreichel3-oai 2026-05-06 12:03:28 -04:00
  • 5ad1e5982b Fix remaining rebased login test callsites rreichel3-oai 2026-05-04 12:30:52 -04:00
  • f8d77459f9 Fix device login test server options rreichel3-oai 2026-05-04 12:16:21 -04:00
  • 281a2db844 Fix login server test constructor rreichel3-oai 2026-05-04 11:59:26 -04:00
  • e31301a585 Fix rebased login tests rreichel3-oai 2026-05-04 11:43:01 -04:00
  • f2090c43a4 Restore forced workspace config shape rreichel3-oai 2026-05-04 11:26:40 -04:00
  • dc38fe22f1 Add debug escape hatch for managed config rreichel3-oai 2026-04-17 15:33:11 -04:00
  • 765b6aca04 codex: fix remaining CI lint on PR #18161 rreichel3-oai 2026-04-16 13:56:11 -04:00
  • 439317fabc codex: fix CI failure on PR #18161 rreichel3-oai 2026-04-16 13:31:30 -04:00
  • 8712e2c1aa Support multiple forced ChatGPT workspaces rreichel3-oai 2026-04-16 13:24:25 -04:00
  • 1c2f0d38d3 merge commit for archive created by Sapling Michael Bolin 2026-05-11 16:05:29 -07:00
  • 4081253747 Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots. Michael Bolin 2026-05-11 15:24:36 -07:00
  • b861e9ea81 Enable image generation continuation nm-codex/image-gen-continuation Noah MacCallum 2026-05-11 16:02:41 -07:00
  • f921703092 merge commit for archive created by Sapling Michael Bolin 2026-05-11 15:44:54 -07:00
  • 435b7ab8c5 Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots. Michael Bolin 2026-05-11 15:24:36 -07:00
  • bb6134c028 Stop uploading accepted line fingerprints (#22180) alexsong-oai 2026-05-11 15:41:38 -07:00
  • 4859d80ffe Update codex remote-control to start the daemon (#22218) Owen Lin 2026-05-11 15:38:30 -07:00
  • 65c80faaf5 [exec-server] remove added HTTP upgrade tests codex/pr-21963-remove-tests Michael Zeng 2026-05-11 15:31:01 -07:00
  • b53c13f674 Release 0.131.0-alpha.8 rust-v0.131.0-alpha.8 Ahmed Ibrahim 2026-05-12 01:30:39 +03:00
  • 5fa4a8c994 merge commit for archive created by Sapling Michael Bolin 2026-05-11 15:29:31 -07:00
  • 178080cc75 Move live thread metadata handling above recorder wiltzius/codex/live-thread-metadata-handler Tom Wiltzius 2026-05-08 20:15:04 -07:00
  • fca2a68f85 Add thread metadata store API wiltzius/codex/thread-metadata-store-api Tom Wiltzius 2026-05-08 20:08:20 -07:00
  • 4df5670b06 Publish Linux runtime wheels with glibc-compatible tags Ahmed Ibrahim 2026-05-12 01:26:19 +03:00
  • 2d23f3ad7b Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots. Michael Bolin 2026-05-11 15:24:36 -07:00
  • c50d5fdbb7 Merge 6579ec2f9d into sapling-pr-archive-bolinfest Michael Bolin 2026-05-11 15:23:23 -07:00
  • 6579ec2f9d Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots. Michael Bolin 2026-05-11 15:23:15 -07:00
  • 9ab7f4e6ac Add Windows hook command overrides (#22159) Abhinav 2026-05-11 18:22:29 -04:00
  • 84307c03ee merge commit for archive created by Sapling Michael Bolin 2026-05-11 15:19:58 -07:00
  • 162da66557 Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots. Michael Bolin 2026-05-11 15:19:33 -07:00
  • a175ddacc0 [codex-analytics] emit terminal review events (#18748) rhan-oai 2026-05-11 15:13:32 -07:00
  • 81f5eabfc1 [exec-server] add HTTP-upgrade listen mode Ruslan Nigmatullin 2026-05-11 22:11:36 +00:00
  • b3f4dc3642 @bookholt-oai has signed the CLA in openai/codex#22207 github-actions[bot] 2026-05-11 22:11:08 +00:00
  • aa9e8f0262 [8/8] Add Python SDK Ruff formatting (#22021) Ahmed Ibrahim 2026-05-12 01:10:29 +03:00
  • 686953b63b [exec-server] preserve raw websocket listen mode Ruslan Nigmatullin 2026-05-11 22:08:49 +00:00
  • a4a0322224 [exec-server] drop binary websocket handling Ruslan Nigmatullin 2026-05-11 22:07:02 +00:00
  • f7a99e5a29 Merge ea13af2fa5 into sapling-pr-archive-bolinfest Michael Bolin 2026-05-11 15:06:46 -07:00
  • 3e10e09e24 [7/8] Add Python SDK app-server integration harness (#22014) Ahmed Ibrahim 2026-05-12 01:06:41 +03:00
  • ea13af2fa5 Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots. Michael Bolin 2026-05-11 14:58:23 -07:00
  • 2b90c37069 [6/8] Add high-level Python SDK approval mode (#21910) Ahmed Ibrahim 2026-05-12 01:02:43 +03:00
  • f1b84fac63 [5/8] Rename Python SDK package to openai-codex (#21905) Ahmed Ibrahim 2026-05-12 00:59:25 +03:00
  • 49a7b9f625 Merge 3eace94625 into sapling-pr-archive-bolinfest Michael Bolin 2026-05-11 14:58:29 -07:00
  • 3eace94625 Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots. Michael Bolin 2026-05-11 14:58:23 -07:00
  • b4bc02439f [4/8] Define Python SDK public API surface (#21896) Ahmed Ibrahim 2026-05-12 00:57:44 +03:00
  • c04e59e045 merge commit for archive created by Sapling Michael Bolin 2026-05-11 14:54:04 -07:00
  • 34416d6a9e Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots. Michael Bolin 2026-05-11 11:23:30 -07:00
  • 3e2936dd0e [3/8] Run Python SDK tests in CI (#21895) Ahmed Ibrahim 2026-05-12 00:53:36 +03:00
  • 6a4653efc8 [2/8] Generate Python SDK types from pinned runtime (#21893) Ahmed Ibrahim 2026-05-12 00:53:21 +03:00
  • a0fd0e36f3 Report blocked code-mode tool frontiers codex/code-mode-blocked-frontier Danny Zhang 2026-05-11 14:34:32 -07:00
  • 5fe33443b0 [1/8] Pin Python SDK runtime dependency (#21891) Ahmed Ibrahim 2026-05-12 00:42:26 +03:00
  • a5a031cde0 [exec-server] add readiness endpoint Ruslan Nigmatullin 2026-05-11 21:33:10 +00:00
  • 5634aa3bf2 [codex] Cover WFP setup failure results dev/bookholt/windows-sandbox-setup-errors Chris Bookholt 2026-05-11 21:18:46 +00:00
  • 734af5228e [exec-server] keep websocket URL surface unchanged Ruslan Nigmatullin 2026-05-11 21:16:39 +00:00
  • c7b55cdc46 feat: add network proxy feature flag (#20147) viyatb-oai 2026-05-11 14:12:00 -07:00
  • 240d80895d adjust apply_patch replacement behavior dev/bookholt/pr-22208 Chris Bookholt 2026-05-11 20:05:41 +00:00
  • 9176718eb7 cloud-tasks: tighten backend request setup dev/bookholt/request-config-hardening Chris Bookholt 2026-05-11 20:10:40 +00:00
  • 54ec99cb54 [login] revoke superseded auth tokens on relogin (#21747) cooper-oai 2026-05-11 13:36:46 -07:00
  • 4a5013386b [codex] Stop Windows sandbox setup after filter installation failure Chris Bookholt 2026-05-11 20:02:46 +00:00
  • a5d2fe5104 merge commit for archive created by Sapling Michael Bolin 2026-05-11 13:31:53 -07:00
  • 50719c6d17 Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots. Michael Bolin 2026-05-11 11:23:30 -07:00
  • e567a11c79 Release 0.131.0-alpha.7 rust-v0.131.0-alpha.7 Andrey Mishchenko 2026-05-11 13:05:54 -07:00
  • 2799c3c082 Merge 3de8082c79 into sapling-pr-archive-bolinfest Michael Bolin 2026-05-11 12:56:42 -07:00
  • 3de8082c79 Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots. Michael Bolin 2026-05-11 11:23:30 -07:00
  • de130c5844 merge commit for archive created by Sapling Michael Bolin 2026-05-11 12:46:04 -07:00
  • f70b13c7ff Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots. Michael Bolin 2026-05-11 11:23:30 -07:00
  • e3f481da98 daemon: refresh updater after validated binary rollout (#21853) Ruslan Nigmatullin 2026-05-11 12:37:10 -07:00
  • e54b1ab023 merge commit for archive created by Sapling Michael Bolin 2026-05-11 12:35:52 -07:00
  • 4df845f153 Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots. Michael Bolin 2026-05-11 11:23:30 -07:00
  • 99b98aece6 config: accept minus in TUI keymap config (#22192) Felipe Coury 2026-05-11 16:34:33 -03:00
  • c9d222f803 Merge 64435bee22 into sapling-pr-archive-bolinfest Michael Bolin 2026-05-11 12:24:43 -07:00
  • 64435bee22 Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots. Michael Bolin 2026-05-11 11:23:30 -07:00
  • 192481d1a1 [elicitation] Advertise new url elicitation capability when auth_elicitation is enabled. (#22188) Matthew Zeng 2026-05-11 12:23:55 -07:00
  • 361dff228e Avoid duplicate codex_apps tool refresh on force refetch dev/mzeng/avoid_duplicate_codex_apps_tools_refresh Matthew Zeng 2026-05-11 12:23:39 -07:00
  • d0fa2d81d8 feat(connectors): support managed app tool approval requirements (#21061) viyatb-oai 2026-05-11 12:08:26 -07:00
  • 59add06f0c merge commit for archive created by Sapling Michael Bolin 2026-05-11 11:55:32 -07:00
  • cea7dd8caa Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots. Michael Bolin 2026-05-11 11:23:30 -07:00
  • 6506765168 fix(permissions): preserve managed deny-read during escalation (#15977) viyatb-oai 2026-05-11 11:49:44 -07:00
  • 01e102ef89 Add code mode forward_output helper fjord/output Curtis 'Fjord' Hawthorne 2026-05-11 11:49:17 -07:00
  • 78f29f853d merge commit for archive created by Sapling Michael Bolin 2026-05-11 11:45:28 -07:00
  • 7bddb3083d fix(app-server): thread history redaction for remote clients (#22178) Owen Lin 2026-05-11 11:45:25 -07:00
  • cdfe9c443c Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots. Michael Bolin 2026-05-11 11:23:30 -07:00
  • 0726b39509 Merge c326cb1025 into sapling-pr-archive-bolinfest Michael Bolin 2026-05-11 11:42:01 -07:00
  • c326cb1025 config: add strict config parsing Michael Bolin 2026-05-11 11:26:50 -07:00
  • f8cf9a7cb7 Reject shell globs in safe command parsing codex/cli8726-glob-safe-command Eva Wong 2026-05-11 11:40:50 -07:00
  • 90bd445e7f fix(exec-server): suppress Windows taskkill output (#22058) Felipe Coury 2026-05-11 15:40:56 -03:00
  • e783dab44c fix(exec-policy) use is_known_safe_command less (#20305) Dylan Hurd 2026-05-11 14:37:53 -04:00
  • a2d6b53765 Merge 6b894fde91 into sapling-pr-archive-bolinfest Michael Bolin 2026-05-11 11:35:54 -07:00
  • eaf05c9002 Unified mentions in TUI (#19068) canvrno-oai 2026-05-11 11:34:52 -07:00
  • b401666ca5 Add process-scoped SQLite telemetry (#22154) jif-oai 2026-05-11 20:32:40 +02:00
  • 3121e5745e reduce tests jif/keep-splitting-tool-bundles jif-oai 2026-05-11 19:25:35 +01:00
  • 6b894fde91 Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots. Michael Bolin 2026-05-11 11:23:30 -07:00
  • cf6342b75b [codex-analytics] add turn tool counts to turn events (#21431) rhan-oai 2026-05-11 11:18:02 -07:00
  • 4e244b254b go further jif-oai 2026-05-11 19:11:15 +01:00
  • 0dbad2a348 Make auto-review denial short-circuit use a rolling review window (#22110) Won Park 2026-05-11 11:03:11 -07:00
  • 1e65b3e0af Fix goal update and add /goal edit command in TUI (#21954) Eric Traut 2026-05-11 10:49:19 -07:00
  • 32b1ae7099 chore: drop built-in MCPs (#22173) jif-oai 2026-05-11 19:45:08 +02:00
  • 33b668df0b Update schema preservation test expectations soheil-oai/codex-rs-schema-handling-issue Soheil Norouzi 2026-05-11 13:32:09 -04:00
  • a124ddb854 app-server: remove TCP websocket listener (#21843) Ruslan Nigmatullin 2026-05-11 10:17:26 -07:00