Commit Graph

  • 7a7756ce40 Merge 63d0cc87d3 into sapling-pr-archive-bolinfest Michael Bolin 2026-05-08 14:27:56 -07:00
  • 63d0cc87d3 Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots. Michael Bolin 2026-05-08 13:44:25 -07:00
  • b076e8bf58 [codex] Eliminate direct writes to GITHUB_ENV ww/gh-env William Woodruff 2026-05-08 14:27:30 -07:00
  • 67f7f4bad9 Merge 841a91d42d into sapling-pr-archive-bolinfest Michael Bolin 2026-05-08 14:21:49 -07:00
  • 841a91d42d apply-patch: avoid sandbox link write-through Michael Bolin 2026-05-08 14:21:30 -07:00
  • 2f3a2d7a86 Using cached connector directory for discoverable tools list (#21497) Matthew Zeng 2026-05-08 14:14:11 -07:00
  • 36b7954abe Merge ecb02fdc53 into sapling-pr-archive-bolinfest Michael Bolin 2026-05-08 14:05:18 -07:00
  • ecb02fdc53 Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots. Michael Bolin 2026-05-08 13:44:25 -07:00
  • b3aba87592 Merge 950d4add9f into sapling-pr-archive-bolinfest Michael Bolin 2026-05-08 13:51:28 -07:00
  • 950d4add9f Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots. Michael Bolin 2026-05-08 13:44:25 -07:00
  • e43a0df84e merge commit for archive created by Sapling Michael Bolin 2026-05-08 13:47:46 -07:00
  • f7df27bd44 Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots. Michael Bolin 2026-05-08 13:44:25 -07:00
  • 908a829b64 clean up test owen/sqlite_init_fallback_telemetry Owen Lin 2026-05-08 13:43:10 -07:00
  • 4f0e8c98ac Run old main Windows core repro pakrym/repro-old-main-sideband-windows-targeted pakrym-oai 2026-05-08 13:38:03 -07:00
  • a5c8892beb Add old main Windows sideband repro pakrym-oai 2026-05-08 13:30:46 -07:00
  • 7c9731c9af Enable --deny-warnings for cargo shear (#21616) Charlie Marsh 2026-05-08 13:29:00 -07:00
  • 24389ee21d Merge 3f811565a3 into sapling-pr-archive-bolinfest Michael Bolin 2026-05-08 13:27:47 -07:00
  • 3f811565a3 apply-patch: reject sandbox hard-link writes Michael Bolin 2026-05-08 13:27:27 -07:00
  • 46e2250bcf [codex] Remove legacy after tool use hooks (#21805) pakrym-oai 2026-05-08 13:20:05 -07:00
  • 53f9480cd8 Respect fast_mode for Fast service tier shijie/fix-fast-mode shijie-openai 2026-05-08 13:04:55 -07:00
  • 0d98b8583a Merge legacy hook state with canonical state abhinav/hooks-worktree-trust Abhinav Vedmala 2026-05-08 16:06:37 -04:00
  • 971045b88c Repro main Windows sideband test pakrym/repro-main-sideband-windows-bazel pakrym-oai 2026-05-08 13:04:33 -07:00
  • e783341b70 [codex] Delete function-style apply_patch (#21651) pakrym-oai 2026-05-08 13:00:57 -07:00
  • 3cc96a5aac update Owen Lin 2026-05-08 12:50:56 -07:00
  • 33b182d805 Add SQLite init and fallback telemetry Owen Lin 2026-05-07 17:54:29 -07:00
  • df5c06ff51 Build Python runtime wheels in virtualenvs Ahmed Ibrahim 2026-05-08 22:41:14 +03:00
  • aca7a6097a Release 0.130.0-alpha.10 rust-v0.130.0-alpha.10 Ruslan Nigmatullin 2026-05-08 12:40:39 -07:00
  • cf941ede15 Revert "Publish Python runtime wheels on release" (#21810) Ahmed Ibrahim 2026-05-08 22:37:10 +03:00
  • 5f4d0ec343 [codex] request desktop attestation from app (#20619) Jiaming Zhang 2026-05-08 12:36:02 -07:00
  • a32e80ac17 Merge c816a90aa5 into sapling-pr-archive-bolinfest Michael Bolin 2026-05-08 12:20:03 -07:00
  • c816a90aa5 Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots. Michael Bolin 2026-05-08 09:22:02 -07:00
  • 61142b6169 Remove ToolName display helper (#21465) pakrym-oai 2026-05-08 12:17:48 -07:00
  • bbb6bf0a37 Emit accepted line fingerprint analytics (#21601) alexsong-oai 2026-05-08 12:16:24 -07:00
  • 18bf41c8fc Merge ab151d008d into sapling-pr-archive-bolinfest Michael Bolin 2026-05-08 12:13:21 -07:00
  • ab151d008d Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots. Michael Bolin 2026-05-08 09:22:02 -07:00
  • 59c17d6cb5 @ericning-o has signed the CLA in openai/codex#21802 github-actions[bot] 2026-05-08 19:05:04 +00:00
  • 30b4c144c7 Release 0.130.0-alpha.9 rust-v0.130.0-alpha.9 Ruslan Nigmatullin 2026-05-08 12:04:27 -07:00
  • 9183503b97 Publish Python runtime wheels on release (#21784) Ahmed Ibrahim 2026-05-08 22:00:58 +03:00
  • 8956a928a1 Support resource binaries in Python runtime staging (#21787) Ahmed Ibrahim 2026-05-08 22:00:44 +03:00
  • 05920a8a87 merge commit for archive created by Sapling Michael Bolin 2026-05-08 11:59:21 -07:00
  • c30c7140c2 Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots. Michael Bolin 2026-05-08 09:22:02 -07:00
  • d6b4edb2a2 Allow OpenAI-prefixed app connectors via config eric/codex-app-configuration Eric Ning 2026-05-08 11:58:33 -07:00
  • b493bf48a4 Fix skills watcher test after base update pakrym/repro-windows-sideband-timeout-full-ci pakrym-oai 2026-05-08 11:38:55 -07:00
  • 7db6415c3b merge commit for archive created by Sapling Michael Bolin 2026-05-08 11:47:08 -07:00
  • 744585400c Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots. Michael Bolin 2026-05-08 09:22:02 -07:00
  • 1bac41c2a4 Reapply "Move skills watcher to app-server" (#21460) pakrym-oai 2026-05-07 20:18:55 -07:00
  • 1e50865d9a Emit OTEL user prompts when recording turns rreichel3/fix-otel-user-prompts rreichel3-oai 2026-05-08 14:43:54 -04:00
  • 6a9001324b Merge a16a2b93a2 into sapling-pr-archive-bolinfest Michael Bolin 2026-05-08 11:39:23 -07:00
  • a16a2b93a2 Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots. Michael Bolin 2026-05-08 09:22:02 -07:00
  • 772e034594 Update models.json (#21776) github-actions[bot] 2026-05-08 21:37:23 +03:00
  • 24758396c3 add linked worktree hook trust integration test Abhinav Vedmala 2026-05-08 14:31:26 -04:00
  • ef4d315994 Make Python runtime publish non-blocking Ahmed Ibrahim 2026-05-08 21:28:11 +03:00
  • 5f2543b74e Load configured environments from CODEX_HOME (#20667) starr-openai 2026-05-08 11:17:56 -07:00
  • 4ae49b36b6 normalize project hook key paths Abhinav Vedmala 2026-05-08 14:16:23 -04:00
  • 33706d769b Move goal prompts to hidden user context etraut/goal-context-user-role Eric Traut 2026-05-08 11:10:19 -07:00
  • 872b8b15b3 feat: Use installation ID in remote enrollments (#21662) David de Regt 2026-05-08 10:54:01 -07:00
  • 87a55c082a Pin PyPI publish action to release tag commit Ahmed Ibrahim 2026-05-08 20:52:28 +03:00
  • 20e9c28b98 [codex] Minimize, explain GitHub Actions permissions ww/perm William Woodruff 2026-05-08 10:49:00 -07:00
  • af93a3a3ca Use PyPI environment for runtime publishing Ahmed Ibrahim 2026-05-08 20:46:06 +03:00
  • 9196541e8b Bundle Linux bwrap in Python runtime wheels Ahmed Ibrahim 2026-05-08 20:40:30 +03:00
  • 4a59ca9393 Explain Windows runtime wheel helper packaging Ahmed Ibrahim 2026-05-08 20:34:18 +03:00
  • eda5361964 Publish Python runtime wheels on release Ahmed Ibrahim 2026-05-08 20:28:54 +03:00
  • 343f36735c Verify runtime resources are included in wheels Ahmed Ibrahim 2026-05-08 20:44:41 +03:00
  • 12b366aa08 Keep Python runtime resources platform neutral Ahmed Ibrahim 2026-05-08 20:40:13 +03:00
  • 11d69666ff Explain Python runtime resource staging Ahmed Ibrahim 2026-05-08 20:33:57 +03:00
  • 3995b7d95d Release 0.130.0-alpha.8 rust-v0.130.0-alpha.8 Ahmed Ibrahim 2026-05-08 20:31:12 +03:00
  • a114208641 Support resource binaries in Python runtime packages Ahmed Ibrahim 2026-05-08 20:28:45 +03:00
  • 8bea5d231a [codex] Address some more GHA hygiene issues (#21622) William Woodruff 2026-05-08 10:19:27 -07:00
  • 6e460f31cd feat(worktree): add move-all dirty policy Felipe Coury 2026-05-08 14:13:46 -03:00
  • 0a0d09ad21 Clarify docs folder guidance in AGENTS.md (#21772) Eric Traut 2026-05-08 10:11:57 -07:00
  • 7c0e54bf59 [codex] Generalize service tier slash commands (#21745) Ahmed Ibrahim 2026-05-08 20:09:51 +03:00
  • 03fbadbce7 Ensure the Cargo.lock file is up-to-date in pull request CI zb/cargo-lock-check-pull Zanie Blue 2026-05-08 10:01:46 -07:00
  • 47f1d7b40b Use CARGO_NET_GIT_FETCH_WITH_CLI in rust-ci-full for more reliable git fetches (#21628) Zanie Blue 2026-05-08 09:53:21 -07:00
  • 05ffa0b1d0 Fix rust-ci-full failures due to missing bwrap (#21604) Zanie Blue 2026-05-08 09:52:19 -07:00
  • ab7eea0ecc Resolve Windows sandbox command paths before spawn automation/windows-sandbox-bugs-21715-20260508 David Wiesen 2026-05-01 10:22:17 -07:00
  • 2811530a96 fix(windows-sandbox): decouple runner launch cwd from workspace automation/windows-sandbox-bugs-21606-20260508 David Wiesen 2026-04-30 10:00:31 -07:00
  • 5733e00c79 [sandboxing] Remove Darwin user cache write from Seatbelt network policy (#21443) evawong-oai 2026-05-08 09:43:07 -07:00
  • 0008d1fe04 Fix Windows elevated runner launch cwd automation/windows-sandbox-bugs-21606-20260508T164020Z David Wiesen 2026-05-08 09:42:05 -07:00
  • 2f95f41bda Fix Windows sandbox bash token DACL fix/windows-sandbox-21715-bash-filemapping David Wiesen 2026-05-08 09:41:59 -07:00
  • 0b90caa393 Avoid loading Windows sandbox runner profiles fix/windows-sandbox-runner-no-profile-21455 David Wiesen 2026-05-08 09:40:13 -07:00
  • b2f3484b3c Allow Windows sandbox Git signal pipes automation/windows-sandbox-bugs-21715 Eva Wong 2026-05-04 10:08:57 -07:00
  • 003b0aca61 windows-sandbox: preserve user SID for bash workspace-write tokens fix/windows-sandbox-21715-bash-token David Wiesen 2026-05-08 09:39:20 -07:00
  • a780939ec7 [exec-server] Make remote environment settings configurable codex/configurable-exec-server-env Ruslan Nigmatullin 2026-05-08 16:19:06 +00:00
  • 11b04c6fe0 Merge a2c34edc75 into sapling-pr-archive-bolinfest Michael Bolin 2026-05-08 09:29:22 -07:00
  • a2c34edc75 Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads now preserve their persisted PermissionProfile value across resume, fork, and turn updates; permissions requests on existing threads only update the active named profile after validating it exists. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots. Michael Bolin 2026-05-08 09:22:02 -07:00
  • ae5ae131b0 merge commit for archive created by Sapling Michael Bolin 2026-05-08 09:28:58 -07:00
  • 85d16b5d6e scripts: add Makeself Codex dev builder pr21679 Michael Bolin 2026-05-07 23:47:15 -07:00
  • 80649cfb9d Allow CUA MCP subspan telemetry dev/zm/codex/cua-subspan-observability Zach Murphy 2026-05-08 09:28:25 -07:00
  • 076320ab1e update hooks list project key expectation Abhinav Vedmala 2026-05-08 12:24:26 -04:00
  • 8b021e3cc2 test(app-server): update trimmed skills expectation caseychow/codex/plugin-sideload-skill Casey Chow 2026-05-08 11:57:17 -04:00
  • 5b87bd2845 chore: thread tui (#21767) jif-oai 2026-05-08 17:53:23 +02:00
  • 607b0dd1f0 codex-otel: validate provider span attributes consistently (#21749) bbrown-oai 2026-05-08 08:20:49 -07:00
  • 1eb725c650 Release 0.130.0-alpha.7 rust-v0.130.0-alpha.7 jif-oai 2026-05-08 17:19:29 +02:00
  • 01890edc1e flatten project hook trust metadata Abhinav Vedmala 2026-05-08 11:18:26 -04:00
  • f9bbbafb68 nit: comment (#21763) jif-oai 2026-05-08 17:15:46 +02:00
  • 327f449cc6 share project hook trust across worktrees Abhinav Vedmala 2026-05-08 11:10:25 -04:00
  • bd8fc9adb9 api: send hyphenated session and thread headers (#21757) jif-oai 2026-05-08 17:11:19 +02:00
  • e6312d44f0 Show permissions and approval mode in the TUI status line (#21677) Eric Traut 2026-05-08 08:03:11 -07:00
  • f86d95a242 Display blended token count in status line (#21669) Eric Traut 2026-05-08 07:56:13 -07:00
  • aadcae9f3c Update models.json (#19896) github-actions[bot] 2026-05-08 17:41:55 +03:00