gabec-openai fe287ac467 Log automated reviewer approval sources distinctly (#15201) ...

## Summary

- log guardian-reviewed tool approvals as `source=automated_reviewer` in
`codex.tool_decision`
- keep direct user approvals as `source=user` and config-driven
approvals as `source=config`

## Testing

-
`/Users/gabec/.codex/skills/codex-oss-fastdev/scripts/codex-rs-fmt-quiet.sh`
-
`/Users/gabec/.codex/skills/codex-oss-fastdev/scripts/codex-rs-test-quiet.sh
-p codex-otel` (fails in sandboxed loopback bind tests under
`otel/tests/suite/otlp_http_loopback.rs`)
- `cargo test -p codex-core guardian -- --nocapture` (original-tree run
reached Guardian tests and only hit sandbox-related listener/proxy
failures)

Co-authored-by: Codex <noreply@openai.com>

2026-03-19 12:10:41 -07:00

..

agent

fix: case where agent is already closed (#15163)

2026-03-19 12:12:50 +00:00

apps

[apps] Add tool call meta. (#14647)

2026-03-14 22:24:13 -07:00

auth

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

bin

add generated jsonschema for config.toml (#8956)

2026-01-13 10:22:51 -08:00

codex

feat(core): persist trace_id for turns in RolloutItem::TurnContext (#13602)

2026-03-05 13:26:48 -08:00

config

Add experimental exec server URL handling (#15196)

2026-03-19 18:25:11 +00:00

config_loader

Use workspace requirements for guardian prompt override (#14727)

2026-03-17 22:05:41 -07:00

context_manager

[hooks] use a user message > developer message for prompt continuation (#14867)

2026-03-19 10:53:08 -07:00

features

Rename reject approval policy to granular (#14516)

2026-03-12 16:38:04 -07:00

guardian

Add notify to code-mode (#14842)

2026-03-18 09:37:13 -07:00

instructions

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

mcp

Apply argument comment lint across codex-rs (#14652)

2026-03-16 16:48:15 -07:00

memories

chore: morpheus does not generate memories (#15175)

2026-03-19 15:48:28 +00:00

models_manager

Prefer websockets when providers support them (#13592)

2026-03-17 19:46:44 -07:00

packages

feat: adapt artifacts to new packaging and 2.5.6 (#14947)

2026-03-18 09:17:44 +00:00

plugins

feat: support product-scoped plugins. (#15041)

2026-03-19 00:46:15 -07:00

rollout

feat: support product-scoped plugins. (#15041)

2026-03-19 00:46:15 -07:00

sandboxing

fix: canonicalize symlinked Linux sandbox cwd (#14849)

2026-03-16 22:39:18 -07:00

skills

feat: support product-scoped plugins. (#15041)

2026-03-19 00:46:15 -07:00

state

Move environment abstraction into exec server (#15125)

2026-03-19 08:31:14 -07:00

tasks

Revert "Forward session and turn headers to MCP HTTP requests" (#15185)

2026-03-19 10:38:53 -07:00

tools

Log automated reviewer approval sources distinctly (#15201)

2026-03-19 12:10:41 -07:00

unified_exec

Apply argument comment lint across codex-rs (#14652)

2026-03-16 16:48:15 -07:00

analytics_client_tests.rs

Add plugin usage telemetry (#14531)

2026-03-12 19:22:30 -07:00

analytics_client.rs

Add plugin usage telemetry (#14531)

2026-03-12 19:22:30 -07:00

api_bridge_tests.rs

Add auth 401 observability to client bug reports (#14611)

2026-03-14 15:38:51 -07:00

api_bridge.rs

Add auth 401 observability to client bug reports (#14611)

2026-03-14 15:38:51 -07:00

apply_patch_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

apply_patch.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

arc_monitor_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

arc_monitor.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

auth_env_telemetry.rs

Gate realtime audio interruption logic to v2 (#14984)

2026-03-17 15:24:37 -07:00

auth_tests.rs

Add auth 401 observability to client bug reports (#14611)

2026-03-14 15:38:51 -07:00

auth.rs

Add auth env observability (#14905)

2026-03-17 14:26:27 -07:00

client_common_tests.rs

Add notify to code-mode (#14842)

2026-03-18 09:37:13 -07:00

client_common.rs

Add notify to code-mode (#14842)

2026-03-18 09:37:13 -07:00

client_tests.rs

Prefer websockets when providers support them (#13592)

2026-03-17 19:46:44 -07:00

client.rs

feat(core, tracing): create turn spans over websockets (#14632)

2026-03-19 03:41:06 +00:00

codex_delegate_tests.rs

Add Smart Approvals guardian review across core, app-server, and TUI (#13860)

2026-03-13 15:27:00 -07:00

codex_delegate.rs

fix(subagents) share execpolicy by default (#13702)

2026-03-18 06:42:26 +00:00

codex_tests_guardian.rs

fix(subagents) share execpolicy by default (#13702)

2026-03-18 06:42:26 +00:00

codex_tests.rs

Add experimental exec server URL handling (#15196)

2026-03-19 18:25:11 +00:00

codex_thread.rs

Apply argument comment lint across codex-rs (#14652)

2026-03-16 16:48:15 -07:00

codex.rs

Add experimental exec server URL handling (#15196)

2026-03-19 18:25:11 +00:00

command_canonicalization_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

command_canonicalization.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

commit_attribution_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

commit_attribution.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

compact_remote.rs

[hooks] use a user message > developer message for prompt continuation (#14867)

2026-03-19 10:53:08 -07:00

compact_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

compact.rs

Apply argument comment lint across codex-rs (#14652)

2026-03-16 16:48:15 -07:00

connectors_tests.rs

[plugins] Support configuration tool suggest allowlist. (#15022)

2026-03-17 23:58:27 -07:00

connectors.rs

[plugins] Support configuration tool suggest allowlist. (#15022)

2026-03-17 23:58:27 -07:00

consequential_tool_message_templates.json

[elicitation] User-friendly tool call messages. (#14403)

2026-03-12 00:35:21 -07:00

contextual_user_message_tests.rs

[hooks] use a user message > developer message for prompt continuation (#14867)

2026-03-19 10:53:08 -07:00

contextual_user_message.rs

[hooks] use a user message > developer message for prompt continuation (#14867)

2026-03-19 10:53:08 -07:00

custom_prompts_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

custom_prompts.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

default_client_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

default_client.rs

Apply argument comment lint across codex-rs (#14652)

2026-03-16 16:48:15 -07:00

env.rs

[device-auth] When headless environment is detected, show device login flow instead. (#8756)

2026-01-08 21:48:30 -08:00

environment_context_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

environment_context.rs

Apply argument comment lint across codex-rs (#14652)

2026-03-16 16:48:15 -07:00

error_tests.rs

Add auth 401 observability to client bug reports (#14611)

2026-03-14 15:38:51 -07:00

error.rs

Add auth 401 observability to client bug reports (#14611)

2026-03-14 15:38:51 -07:00

event_mapping_tests.rs

[hooks] use a user message > developer message for prompt continuation (#14867)

2026-03-19 10:53:08 -07:00

event_mapping.rs

[hooks] use a user message > developer message for prompt continuation (#14867)

2026-03-19 10:53:08 -07:00

exec_env_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

exec_env.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

exec_policy_tests.rs

fix(subagents) share execpolicy by default (#13702)

2026-03-18 06:42:26 +00:00

exec_policy.rs

fix(subagents) share execpolicy by default (#13702)

2026-03-18 06:42:26 +00:00

exec_tests.rs

feat: support restricted ReadOnlyAccess in elevated Windows sandbox (#14610)

2026-03-17 19:08:50 -07:00

exec.rs

feat: support restricted ReadOnlyAccess in elevated Windows sandbox (#14610)

2026-03-17 19:08:50 -07:00

external_agent_config_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

external_agent_config.rs

Apply argument comment lint across codex-rs (#14652)

2026-03-16 16:48:15 -07:00

features_tests.rs

Reuse guardian session across approvals (#14668)

2026-03-15 22:56:18 -07:00

features.rs

Prefer websockets when providers support them (#13592)

2026-03-17 19:46:44 -07:00

file_watcher_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

file_watcher.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

flags.rs

chore: drop unused values from env_flags (#4188)

2025-09-24 14:29:51 -07:00

function_tool.rs

nit: drop unused function call error (#8903)

2026-01-08 15:07:30 +00:00

git_info_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

git_info.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

hook_runtime.rs

[hooks] userpromptsubmit - hook before user's prompt is executed (#14626)

2026-03-17 22:09:22 -07:00

landlock_tests.rs

fix: canonicalize symlinked Linux sandbox cwd (#14849)

2026-03-16 22:39:18 -07:00

landlock.rs

fix: honor active permission profiles in sandbox debug (#14293)

2026-03-18 01:52:02 +00:00

lib.rs

feat(tui): restore composer history in app-server tui (#14945)

2026-03-18 11:54:11 -06:00

mcp_connection_manager_tests.rs

Revert "Forward session and turn headers to MCP HTTP requests" (#15185)

2026-03-19 10:38:53 -07:00

mcp_connection_manager.rs

Revert "Forward session and turn headers to MCP HTTP requests" (#15185)

2026-03-19 10:38:53 -07:00

mcp_tool_approval_templates.rs

fix(core): preserve tool_params for elicitations (#14769)

2026-03-15 23:15:52 -07:00

mcp_tool_call_tests.rs

fix(core): preserve tool_params for elicitations (#14769)

2026-03-15 23:15:52 -07:00

mcp_tool_call.rs

Apply argument comment lint across codex-rs (#14652)

2026-03-16 16:48:15 -07:00

memory_trace_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

memory_trace.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

mention_syntax.rs

chore: use @plugin instead of $plugin for plaintext mentions (#13921)

2026-03-08 01:36:39 +00:00

mentions_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

mentions.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

message_history_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

message_history.rs

feat(tui): restore composer history in app-server tui (#14945)

2026-03-18 11:54:11 -06:00

model_provider_info_tests.rs

fix(core): prevent hanging turn/start due to websocket warming issues (#14838)

2026-03-17 10:07:46 -07:00

model_provider_info.rs

fix(core): prevent hanging turn/start due to websocket warming issues (#14838)

2026-03-17 10:07:46 -07:00

network_policy_decision_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

network_policy_decision.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

network_proxy_loader_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

network_proxy_loader.rs

Apply argument comment lint across codex-rs (#14652)

2026-03-16 16:48:15 -07:00

original_image_detail_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

original_image_detail.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

otel_init.rs

fix(otel): make HTTP trace export survive app-server runtimes (#14300)

2026-03-11 12:33:10 -07:00

path_utils_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

path_utils.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

personality_migration_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

personality_migration.rs

Apply argument comment lint across codex-rs (#14652)

2026-03-16 16:48:15 -07:00

project_doc_tests.rs

move plugin/skill instructions into dev msg and reorder (#14609)

2026-03-13 20:51:01 -07:00

project_doc.rs

Apply argument comment lint across codex-rs (#14652)

2026-03-16 16:48:15 -07:00

realtime_context_tests.rs

Feat: CXA-1831 Persist latest model and reasoning effort in sqlite (#14859)

2026-03-17 10:14:34 -07:00

realtime_context.rs

[stack 3/4] Add current thread context to realtime startup (#14829)

2026-03-17 05:11:05 +00:00

realtime_conversation_tests.rs

[stack 2/4] Align main realtime v2 wire and runtime flow (#14830)

2026-03-16 21:38:07 -07:00

realtime_conversation.rs

Handle realtime conversation end in the TUI (#14903)

2026-03-17 21:04:58 -07:00

response_debug_context.rs

Add auth 401 observability to client bug reports (#14611)

2026-03-14 15:38:51 -07:00

restricted_read_only_platform_defaults.sbpl

feat: Add additional macOS Sandbox Permissions for Launch Services, Contacts, Reminders (#14155)

2026-03-11 12:33:09 -07:00

review_format.rs

Apply argument comment lint across codex-rs (#14652)

2026-03-16 16:48:15 -07:00

review_prompts.rs

chore: review everywhere (#7444)

2025-12-02 11:26:27 +00:00

safety_tests.rs

Rename reject approval policy to granular (#14516)

2026-03-12 16:38:04 -07:00

safety.rs

Rename reject approval policy to granular (#14516)

2026-03-12 16:38:04 -07:00

sandbox_tags_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

sandbox_tags.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

seatbelt_base_policy.sbpl

[feat] add seatbelt permission files (#11639)

2026-02-12 23:30:22 +00:00

seatbelt_network_policy.sbpl

feat(sandbox): enforce proxy-aware network routing in sandbox (#11113)

2026-02-10 07:44:21 +00:00

seatbelt_permissions_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

seatbelt_permissions.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

seatbelt_tests.rs

fix: fix symlinked writable roots in sandbox policies (#14674)

2026-03-14 13:24:43 -07:00

seatbelt.rs

fix: honor active permission profiles in sandbox debug (#14293)

2026-03-18 01:52:02 +00:00

session_prefix.rs

feat: add post-compaction sub-agent infos (#12774)

2026-02-26 18:55:34 +00:00

session_startup_prewarm.rs

fix(core): prevent hanging turn/start due to websocket warming issues (#14838)

2026-03-17 10:07:46 -07:00

shell_detect.rs

chore: rename codex-command to codex-shell-command (#11378)

2026-02-10 17:03:46 -08:00

shell_snapshot_tests.rs

feat: add suffix to shell snapshot name (#14938)

2026-03-17 17:59:27 +00:00

shell_snapshot.rs

feat: add suffix to shell snapshot name (#14938)

2026-03-17 17:59:27 +00:00

shell_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

shell.rs

Apply argument comment lint across codex-rs (#14652)

2026-03-16 16:48:15 -07:00

spawn.rs

sandboxing: plumb split sandbox policies through runtime (#13439)

2026-03-07 02:30:21 +00:00

state_db_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

state_db.rs

Apply argument comment lint across codex-rs (#14652)

2026-03-16 16:48:15 -07:00

stream_events_utils_tests.rs

feat: add memory citation to agent message (#14821)

2026-03-18 10:03:38 +00:00

stream_events_utils.rs

Add notify to code-mode (#14842)

2026-03-18 09:37:13 -07:00

terminal_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

terminal.rs

Apply argument comment lint across codex-rs (#14652)

2026-03-16 16:48:15 -07:00

test_support.rs

Stabilize Windows cmd-based shell test harnesses (#14958)

2026-03-17 20:21:46 +00:00

text_encoding_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

text_encoding.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

thread_manager_tests.rs

Add openai_base_url config override for built-in provider (#12031)

2026-03-13 20:12:25 -06:00

thread_manager.rs

feat: support product-scoped plugins. (#15041)

2026-03-19 00:46:15 -07:00

token_data_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

token_data.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

truncate_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

truncate.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

turn_diff_tracker_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

turn_diff_tracker.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

turn_metadata_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

turn_metadata.rs

Apply argument comment lint across codex-rs (#14652)

2026-03-16 16:48:15 -07:00

turn_timing_tests.rs

feat: add memory citation to agent message (#14821)

2026-03-18 10:03:38 +00:00

turn_timing.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

user_shell_command_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

user_shell_command.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

util_tests.rs

Add auth env observability (#14905)

2026-03-17 14:26:27 -07:00

util.rs

Add auth env observability (#14905)

2026-03-17 14:26:27 -07:00

web_search.rs

add missing fields to WebSearchAction and update app-server types (#10276)

2026-01-30 16:37:56 -08:00

windows_sandbox_read_grants_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

windows_sandbox_read_grants.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

windows_sandbox_tests.rs

Use a private desktop for Windows sandbox instead of Winsta0\Default (#14400)

2026-03-13 10:13:39 -07:00

windows_sandbox.rs

Apply argument comment lint across codex-rs (#14652)

2026-03-16 16:48:15 -07:00