Commit Graph

  • caecc94407 fix: reconcile sandbox audit rebase viyatb-oai 2026-05-14 09:05:01 -07:00
  • dcb5ed3053 fix: satisfy security event arg lint viyatb-oai 2026-05-05 11:38:22 -07:00
  • ae0f1133bd fix: repair sandbox audit CI viyatb-oai 2026-05-05 11:22:04 -07:00
  • 0a28aeb597 fix: preserve sandbox audit wiring after rebase viyatb-oai 2026-05-04 10:56:57 -07:00
  • 91c47c290b fix: prune local security events viyatb-oai 2026-05-01 17:21:45 -07:00
  • e97e2f88f2 fix: rename autoreview security event kind viyatb-oai 2026-04-27 14:01:42 -07:00
  • fdbd667179 feat: persist sandbox security events viyatb-oai 2026-04-27 13:42:01 -07:00
  • 1fd0858e86 [login] support hosted success redirects (#28745) rafael-jac 2026-07-07 15:48:05 -04:00
  • dd16e95b6c fix: preserve linux sandbox type contract codex/viyatb/add-sandbox-violation-monitor viyatb-oai 2026-06-23 16:42:36 -07:00
  • 27facbf916 refactor: identify bubblewrap sandbox violations viyatb-oai 2026-06-12 13:47:05 -07:00
  • 33735280cf fix: address sandbox violation review feedback viyatb-oai 2026-05-28 17:07:20 -07:00
  • 75b14de84c fix: preserve shell sandbox denial heuristic viyatb-oai 2026-05-28 14:52:03 -07:00
  • 935c9f2b54 refactor: remove redundant sandbox violation predicate viyatb-oai 2026-05-26 16:56:23 -07:00
  • d0cc5676a6 fix: gate signal exit constant to unix viyatb-oai 2026-05-26 13:14:03 -07:00
  • 5459b60d8a refactor: name filesystem violation predicate explicitly viyatb-oai 2026-05-15 10:30:32 -07:00
  • 93b08a2396 fix: preserve sandbox denial helper viyatb-oai 2026-05-15 10:17:32 -07:00
  • d9b9978b09 test: pin sandbox denial parity viyatb-oai 2026-04-13 18:06:24 -07:00
  • bb8257e6cb fix: remove stale sandbox denial wrapper viyatb-oai 2026-04-13 17:52:14 -07:00
  • 320659b1e4 refactor sandbox violation monitoring viyatb-oai 2026-04-12 15:40:04 -07:00
  • 7c28baa0a1 auth: separate managed Bedrock credentials codex/provider-auth-foundation celia-oai 2026-07-06 16:56:44 -07:00
  • c32b50beb7 Reject Windows proxies without elevated sandbox David Wiesen 2026-07-07 12:11:02 -07:00
  • aab8d9b365 Keep Windows proxy policy platform-specific David Wiesen 2026-07-07 12:04:58 -07:00
  • e99be8cf65 feat(exec-server): add ACK-based Noise relay retries Anton Panasenko 2026-07-07 12:04:28 -07:00
  • ff06ab7172 [codex] Enable auth elicitation by default (#28772) Matthew Zeng 2026-07-07 11:48:27 -07:00
  • 2af252a7b8 fix(network-proxy): keep remote config extensible viyatb-oai 2026-07-07 11:43:50 -07:00
  • 272a5aeb65 fix(network-proxy): preserve broker context across snapshots Winston Howes 2026-07-07 11:37:49 -07:00
  • a1709a444d Reject duplicate file entries in apply_patch bryane/codex-fixing-map-structure Bryan Eastes 2026-07-07 11:37:01 -07:00
  • a9ee7fec09 fix(terminal-browser): approve human navigation network access Felipe Coury 2026-07-07 15:27:54 -03:00
  • d1e181047f Require elevated policy for all Windows proxies David Wiesen 2026-07-07 11:25:28 -07:00
  • 55b9447a17 fix(exec-server): start managed proxy on executor viyatb-oai 2026-07-07 11:24:22 -07:00
  • f158b31db5 test: generalize exec-server fixture (#31422) Adam Perry @ OpenAI 2026-07-07 11:21:56 -07:00
  • 270754ddde fix(network-proxy): harden broker environment matching viyatb-oai 2026-06-25 14:30:26 -07:00
  • c03bca9a33 fix(core): enforce managed plaintext injection policy viyatb-oai 2026-06-25 09:50:54 -07:00
  • 336612bc25 fix(core): restore credential broker integration scope viyatb-oai 2026-06-24 18:46:50 -07:00
  • d4e3f91062 test(core): remove credential broker integration test viyatb-oai 2026-06-24 18:39:55 -07:00
  • 259af7522f fix(core): constrain plaintext credential injection viyatb-oai 2026-06-24 18:18:55 -07:00
  • ed623147c1 fix(core): preserve brokered credentials across shell snapshots Winston Howes 2026-06-24 14:03:28 -04:00
  • fd3858655b feat(core): integrate experimental credential broker viyatb-oai 2026-06-23 17:13:32 -07:00
  • 358575465c Use model catalog approval messages (#31312) Dylan Hurd 2026-07-07 10:52:38 -07:00
  • 38f8381d17 Thread MCP App UI support through app discovery martinauyeung-oai 2026-07-07 10:49:26 -07:00
  • 1345c16dd7 [codex] add connector runtime latency metrics (#31319) Matthew Zeng 2026-07-07 10:49:06 -07:00
  • 31eea28d4c feat(terminal-browser): add codex-owned chrome Felipe Coury 2026-07-07 14:47:15 -03:00
  • 6325916d67 merge commit for archive created by Sapling Michael Bolin 2026-07-07 10:35:36 -07:00
  • f772483244 build: ratchet direct reqwest dependencies Michael Bolin 2026-07-07 10:34:40 -07:00
  • 820f875bbc codex-api: route file uploads through HTTP client factory Michael Bolin 2026-07-07 10:34:40 -07:00
  • 0797b7d6e5 core: route realtime and memories through HTTP client factory Michael Bolin 2026-07-07 10:34:40 -07:00
  • 1c63ae4684 model-provider: route model discovery through HTTP client factory Michael Bolin 2026-07-07 10:34:40 -07:00
  • bfcf2b350f core: test Responses WebSockets with system proxy Michael Bolin 2026-07-07 10:34:36 -07:00
  • 44bcd653c6 core: preserve Responses WebSockets with system proxy Michael Bolin 2026-07-07 10:34:31 -07:00
  • 5b34af0ab6 http-client: expose WebSocket proxy prerequisites Michael Bolin 2026-07-07 10:34:11 -07:00
  • 78df1237d1 Handle bio policy errors in Codex (#31439) Francis Chalissery 2026-07-07 10:33:42 -07:00
  • 92541552f8 Merge branch 'main' into raymond/fix-empty-mcp-notification raymond/fix-empty-mcp-notification raymond-openai 2026-07-07 10:26:08 -07:00
  • 9f27231b1b Merge 6de585215e into sapling-pr-archive-bolinfest Michael Bolin 2026-07-07 10:17:08 -07:00
  • 6de585215e build: ratchet direct reqwest dependencies Michael Bolin 2026-07-07 10:16:25 -07:00
  • a1bf1cc725 codex-api: route file uploads through HTTP client factory Michael Bolin 2026-07-07 10:16:25 -07:00
  • e1f37947a7 core: route realtime and memories through HTTP client factory Michael Bolin 2026-07-07 10:16:25 -07:00
  • 11a2bdaf0a model-provider: route model discovery through HTTP client factory Michael Bolin 2026-07-07 10:16:25 -07:00
  • 7409481cf2 core: preserve Responses WebSockets with system proxy Michael Bolin 2026-07-06 20:50:51 -07:00
  • f6e251c3ac [codex-rs] Add writes app approval mode (#30482) Alex Zamoshchin 2026-07-07 13:13:59 -04:00
  • 36e6579917 Require elevated Windows policy for managed network David Wiesen 2026-07-07 10:08:21 -07:00
  • 4c56985b72 Treat bio policy errors as non-retryable agent/bio-policy-non-retryable Farhan Toddywala 2026-07-07 17:06:37 +00:00
  • 8d117e135a fix(core): keep managed network permission profile codex/viyatb/windows-deny-read-escalation viyatb-oai 2026-07-07 10:04:42 -07:00
  • 8841f506c0 ci: increase Windows Bazel local test jobs (#31352) Adam Perry @ OpenAI 2026-07-07 09:55:27 -07:00
  • a3f8b0b332 refactor: make ExternalAuth return CodexAuth (#31355) lt-oai 2026-07-07 09:47:41 -07:00
  • f363ed70cc fix(release): add missing Intel V8 signing entitlement (#30953) malsamiri-oai 2026-07-07 09:47:21 -07:00
  • 4e248f97ff Merge remote-tracking branch 'origin/main' into codex/viyatb/windows-deny-read-escalation viyatb-oai 2026-07-07 09:45:15 -07:00
  • ca9b26ecae fix(core): preserve managed network during escalation viyatb-oai 2026-07-07 09:43:38 -07:00
  • 4b418ecfe0 Merge 2292119fcc into sapling-pr-archive-bolinfest Michael Bolin 2026-07-07 09:30:50 -07:00
  • 2292119fcc build: ratchet direct reqwest dependencies Michael Bolin 2026-07-07 09:30:38 -07:00
  • 42156ba007 test(skills): cover plugin namespace loading (#31369) Adam Perry @ OpenAI 2026-07-07 09:28:52 -07:00
  • 0a451911c3 Address direct MCP egress review feedback dev/mstoiber/stop-exposing-direct-mcp-context Max Stoiber 2026-07-07 09:26:46 -07:00
  • c8bbae079f Stop exposing Codex context to direct MCP servers Max Stoiber 2026-07-06 17:04:34 -07:00
  • f659eb12bc feat(core): emit canonical dynamic tool call items (#31298) Owen Lin 2026-07-07 08:32:14 -07:00
  • 53043223bd @mstoiber-oai has signed the CLA in openai/codex#31328 github-actions[bot] 2026-07-07 15:23:25 +00:00
  • 9ad2bbbc60 fix(terminal-browser): route human input through carbonyl Felipe Coury 2026-07-07 12:05:52 -03:00
  • 4883b1dd52 Preserve EOF insertion after blank lines charlie/fix-apply-patch-crlf Charlie Marsh 2026-07-07 10:36:22 -04:00
  • b47aeadeec fix(tui): restore browser access and chat focus Felipe Coury 2026-07-07 11:26:53 -03:00
  • a95b425f46 Gate EOF matching on update mode Charlie Marsh 2026-07-07 10:24:09 -04:00
  • e2b180a624 Test apply_patch line ending rollout end to end Charlie Marsh 2026-07-07 08:36:54 -04:00
  • 0606b68a22 Restore apply_patch rollout state after snapshots Charlie Marsh 2026-07-07 08:34:56 -04:00
  • db598e0875 Protect apply_patch rollout env on remote exec Charlie Marsh 2026-07-07 08:31:56 -04:00
  • 2811829b1f Resolve apply_patch scenarios from a runfile Charlie Marsh 2026-07-07 08:28:45 -04:00
  • 457e897a0d Update config schema for apply_patch rollout Charlie Marsh 2026-07-07 08:27:51 -04:00
  • d3a831a299 Feature-flag apply_patch line ending preservation Charlie Marsh 2026-07-07 08:25:13 -04:00
  • 7b57dc33bb Reject overlapping EOF patch chunks Charlie Marsh 2026-07-06 09:52:02 -04:00
  • fab3e245ff Support CR line endings in apply_patch Charlie Marsh 2026-07-02 15:48:25 -04:00
  • 1403829fb5 Document line-ending preservation Charlie Marsh 2026-07-01 20:41:35 -04:00
  • 24ed2273d6 Preserve line endings when applying patches Charlie Marsh 2026-07-01 20:36:17 -04:00
  • 0530d747c0 fix(tui): prefer terminal browser for tab requests Felipe Coury 2026-07-07 10:19:35 -03:00
  • 1890039988 fix(tui): restore managed network for auto review Felipe Coury 2026-07-07 10:19:26 -03:00
  • cc23f67e36 Annotate MCP tool test request ids martinauyeung/codex-widget-ui-capability martinauyeung-oai 2026-07-07 05:59:32 -07:00
  • 1ce184efd4 Cover direct MCP UI capability forwarding martinauyeung-oai 2026-07-07 05:43:04 -07:00
  • 79034a9e01 fix(tui): preserve browser network access in auto review Felipe Coury 2026-07-07 09:29:46 -03:00
  • b2c07ba8d8 app-server: hand off tree teardown claims without gaps dev/winston/app-server-atomic-tree-teardown Winston Howes 2026-07-07 04:40:30 -07:00
  • fed1dd3b8d Move MCP UI capability tests to sibling module martinauyeung-oai 2026-07-07 04:26:39 -07:00
  • 1f6c042c0f app-server: claim thread teardown groups atomically Winston Howes 2026-07-07 04:21:11 -07:00
  • 5368909df2 app-server: serialize teardown admission by thread id dev/winston/app-server-exact-teardown-admission Winston Howes 2026-07-07 04:07:01 -07:00
  • ad1db47cec Annotate MCP UI capability arguments martinauyeung-oai 2026-07-07 03:56:21 -07:00
  • 2cf1e9dd69 app-server: track idle thread teardown dev/winston/app-server-idle-teardown-owner Winston Howes 2026-07-07 03:41:53 -07:00
  • 16f525d099 Advertise MCP App UI support to Codex Apps martinauyeung-oai 2026-07-07 03:32:57 -07:00