openai/codex
1
0
Fork 0
mirror of https://github.com/openai/codex.git synced 2026-11-10 21:00:47 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
057d9140a8b356a4b1eb71f01c8e981f2aeef20f
codex/codex-rs
T
History
cazhang-oai 057d9140a8 Honor read-only MCP tool hints in automatic approval (#60638) 
## Why

MCP tools marked with `readOnlyHint: true` could still require approval in automatic mode when `destructiveHint` was also true.

## What changed

Give `readOnlyHint` precedence over `destructiveHint` and `openWorldHint` when deciding whether annotations require approval. Explicit prompt mode and strict automatic review continue to require their respective approval checks.

## Testing

Update unit tests for conflicting annotations, prompt mode, and strict automatic review. Extend app integration coverage to verify that read-only calls proceed while writes prompt in both automatic and writes approval modes.

GitOrigin-RevId: 11a930b857886bf41d09fd54c3a38607ae3d1b4e
2026-11-10 18:33:19 +00:00
..
.cargo
Ignore the unmaintained pin-utils advisory in dependency audits (#59638)
2026-11-05 11:22:06 +00:00
.config
…
agent-graph-store
Persist subagent relationships before creating child storage (#58129)
2026-10-29 17:25:51 +00:00
agent-identity
Wire shared runtime authentication through threads and API clients (#59177)
2026-11-03 15:02:57 +00:00
agent-message-board-client
Route message-board notifications through agent mailboxes (#59139)
2026-11-03 12:33:26 +00:00
agent-message-board-host
Extract channel notification formatting into PostPreview (#59688)
2026-11-05 16:08:23 +00:00
agent-roles
…
analytics
Allow searching persisted attached threads (#60574)
2026-11-10 11:17:06 +00:00
ansi-escape
…
app-server
Allow sampling in-progress turns with thread/sample (#60620)
2026-11-10 16:31:52 +00:00
app-server-client
Support archiving and restoring cloud threads (#60635)
2026-11-10 18:19:11 +00:00
app-server-daemon
Honor feature overrides when starting the app-server daemon (#60489)
2026-11-10 01:31:19 +00:00
app-server-protocol
Allow sampling in-progress turns with thread/sample (#60620)
2026-11-10 16:31:52 +00:00
app-server-protocol-noop-macros
…
app-server-test-client
Allow searching persisted attached threads (#60574)
2026-11-10 11:17:06 +00:00
app-server-transport
Use runtime authentication for Analytics requests (#60101)
2026-11-07 10:41:36 +00:00
apply-patch
Support direct Guardian review of patches invoked through exec_command (#58931)
2026-11-02 17:05:56 +00:00
arg0
Stop dotenv loading on persistent I/O errors (#57233)
2026-10-26 20:26:32 +00:00
async-utils
…
attachment-store
Use measured durations to budget uploaded audio (#59268)
2026-11-04 00:19:12 +00:00
aws-auth
…
backend-client
Use runtime authentication for Analytics requests (#60101)
2026-11-07 10:41:36 +00:00
build-info
…
bwrap
…
chatgpt
Use runtime authentication for OpenAI MCP and app requests (#59749)
2026-11-05 22:03:29 +00:00
cli
Allow searching persisted attached threads (#60574)
2026-11-10 11:17:06 +00:00
cloud-client
Support archiving and restoring cloud threads (#60635)
2026-11-10 18:19:11 +00:00
cloud-config
Add ChatGPT token stdin authentication to exec-server (#59569)
2026-11-05 04:25:19 +00:00
cloud-tasks
Use runtime authentication across backend request paths (#59572)
2026-11-05 05:09:32 +00:00
cloud-tasks-client
Use runtime authentication across backend request paths (#59572)
2026-11-05 05:09:32 +00:00
cloud-tasks-mock-client
…
code-mode
Preserve typed gRPC code-mode session admission errors (#60496)
2026-11-10 02:09:01 +00:00
code-mode-host
Preserve typed gRPC code-mode session admission errors (#60496)
2026-11-10 02:09:01 +00:00
code-mode-protocol
Add support for incremental code mode tool definitions (#60157)
2026-11-07 18:24:25 +00:00
code-mode-runtime
Enable server-side output truncation for Code Mode sessions (#57870)
2026-10-29 01:04:48 +00:00
codex-api
Fragment large Responses WebSocket messages into bounded frames (#60522)
2026-11-10 04:31:32 +00:00
codex-backend-openapi-models
…
codex-client
…
codex-experimental-api-macros
…
codex-home
…
codex-mcp
Preserve MCP trace context when tracing is disabled (#60506)
2026-11-10 03:01:14 +00:00
collaboration-mode-templates
…
config
Add optional tool call summaries to the full-screen transcript (#60554)
2026-11-10 08:34:17 +00:00
config-schema
Use hermetic LLVM for Windows MSVC Bazel builds (#60507)
2026-11-10 03:02:25 +00:00
connectors
Support app settings in plugin configuration (#58428)
2026-10-30 20:39:47 +00:00
context-fragments
Ensure side-chat policy reaches the first model request (#60067)
2026-11-07 05:59:44 +00:00
core
Honor read-only MCP tool hints in automatic approval (#60638)
2026-11-10 18:33:19 +00:00
core-api
Enforce host-required cyber access programs per thread (#59754)
2026-11-05 22:49:46 +00:00
core-plugin-common
…
core-plugins
Reuse installed Git objects when upgrading marketplaces (#60528)
2026-11-10 05:20:44 +00:00
diagnostics
Pin the Rust toolchain to 1.95.0 (#57373)
2026-10-27 05:52:01 +00:00
direct-tool-timing
Report auto-review overhead in turn critical-path analytics (#59260)
2026-11-03 23:49:01 +00:00
docs
Run Bazel CI locally without BuildBuddy credentials (#59055)
2026-11-03 04:08:59 +00:00
exec
Allow searching persisted attached threads (#60574)
2026-11-10 11:17:06 +00:00
exec-server
Route sandbox CLI launches through the shared sandbox manager (#60517)
2026-11-10 04:01:23 +00:00
exec-server-cli
Add ChatGPT token stdin authentication to exec-server (#59569)
2026-11-05 04:25:19 +00:00
exec-server-protocol
Cache empty remote skill discovery with filesystem watches (#57598)
2026-10-27 23:53:09 +00:00
execpolicy
Add opt-in Unicode canonical matching to exec policy rules (#59535)
2026-11-05 00:55:46 +00:00
ext
Treat inference hook denials as terminal errors (#60511)
2026-11-10 03:21:26 +00:00
external-agent-migration
Add local-only Claude Code skill migration (#60492)
2026-11-10 01:51:29 +00:00
features
Support incremental tool declarations on GCP (#60617)
2026-11-10 16:13:17 +00:00
feedback
…
file-search
Prioritize filename matches in fuzzy file search (#59709)
2026-11-05 17:34:20 +00:00
file-system
Remove the legacy sandbox policy constructor (#59772)
2026-11-06 00:37:27 +00:00
file-watcher
Avoid periodic wakeups in idle Windows file watchers (#60560)
2026-11-10 08:52:35 +00:00
git-utils
Stabilize cross-platform tests and directory-change fork permissions (#59369)
2026-11-04 09:51:28 +00:00
guardian-context
Unify Guardian context preparation across reviewers (#60498)
2026-11-10 02:18:39 +00:00
history
Normalize turn context permissions to a required profile (#59963)
2026-11-06 19:29:06 +00:00
hooks
Use hermetic LLVM for Windows MSVC Bazel builds (#60507)
2026-11-10 03:02:25 +00:00
http-client
Add device-code authorization for gateway OAuth (#59822)
2026-11-06 04:24:04 +00:00
install-context
…
keyring-store
…
linux-sandbox
Add policy-checked TCP upstream tunneling for SOCKS (#60523)
2026-11-10 04:43:24 +00:00
lmstudio
…
login
Bind API workload identity source reuse to session claims (#60433)
2026-11-09 19:26:55 +00:00
memories
Encapsulate thread metadata construction (#60524)
2026-11-10 04:56:49 +00:00
mermaid
…
message-board
Decouple Guardian retrieval from local message-board handles (#60002)
2026-11-06 22:26:03 +00:00
message-board-mcp
Add opt-in MCP discovery for in-memory agent message boards (#58973)
2026-11-02 20:34:35 +00:00
message-history
…
model-provider
Enable model catalog discovery with gateway OAuth (#60414)
2026-11-09 16:37:22 +00:00
model-provider-info
Add device-code authorization for gateway OAuth (#59822)
2026-11-06 04:24:04 +00:00
models-manager
Enable model catalog discovery with gateway OAuth (#60414)
2026-11-09 16:37:22 +00:00
mxc-sandbox
Preserve script quotes in Windows sandbox cmd invocations (#60624)
2026-11-10 16:58:06 +00:00
network-proxy
Add policy-checked TCP upstream tunneling for SOCKS (#60523)
2026-11-10 04:43:24 +00:00
ollama
…
otel
Preserve MCP trace context when tracing is disabled (#60506)
2026-11-10 03:01:14 +00:00
otel-trace-websocket
…
plugin
…
plugin-host
Add a bounded V8 runtime for UI plugin processes (#57508)
2026-10-27 16:36:32 +00:00
process-hardening
…
prompts
Simplify Guardian's post-denial approval guidance (#60391)
2026-11-09 12:54:46 +00:00
protocol
Treat inference hook denials as terminal errors (#60511)
2026-11-10 03:21:26 +00:00
realtime-webrtc
…
response-debug-context
Treat inference hook denials as terminal errors (#60511)
2026-11-10 03:21:26 +00:00
responses-api-proxy
…
rmcp-client
Add published OAuth metadata discovery to the RMCP client (#60578)
2026-11-10 11:45:44 +00:00
rollout
Allow searching persisted attached threads (#60574)
2026-11-10 11:17:06 +00:00
rollout-trace
Preserve code mode dispatch errors in rollout traces (#60122)
2026-11-07 12:41:14 +00:00
runtime-agent-instance
Use runtime authentication for Analytics requests (#60101)
2026-11-07 10:41:36 +00:00
sandboxing
Route sandbox CLI launches through the shared sandbox manager (#60517)
2026-11-10 04:01:23 +00:00
scripts
Pin the Rust toolchain to 1.95.0 (#57373)
2026-10-27 05:52:01 +00:00
secrets
Populate the local secrets cache after successful saves (#59520)
2026-11-04 23:46:52 +00:00
shell-command
Pin the Rust toolchain to 1.95.0 (#57373)
2026-10-27 05:52:01 +00:00
skills
Route broad Codex setup questions through self-knowledge guidance (#59949)
2026-11-06 17:47:31 +00:00
state
Allow searching persisted attached threads (#60574)
2026-11-10 11:17:06 +00:00
stdio-to-uds
…
tcp-tunnel
Add an OpenSSH ProxyCommand mode to codex tcp-tunnel (#60568)
2026-11-10 09:54:57 +00:00
terminal-detection
Recognize Rex terminals and enable Kitty graphics for pets (#58270)
2026-10-30 07:11:56 +00:00
test-binary-support
…
thread-manager-sample
Add optional tool call summaries to the full-screen transcript (#60554)
2026-11-10 08:34:17 +00:00
thread-store
Allow searching persisted attached threads (#60574)
2026-11-10 11:17:06 +00:00
tools
Add support for incremental code mode tool definitions (#60157)
2026-11-07 18:24:25 +00:00
tui
Show pending key chords in a shared floating shortcut guide (#60637)
2026-11-10 18:32:00 +00:00
uds
…
user-verification
…
utils
Use hermetic LLVM for Windows MSVC Bazel builds (#60507)
2026-11-10 03:02:25 +00:00
v8-poc
Test V8 inline typed array storage limits (#58385)
2026-10-30 16:35:54 +00:00
vendor
…
voice-host
Stabilize cross-platform tests and directory-change fork permissions (#59369)
2026-11-04 09:51:28 +00:00
websocket-auth
Pin the Rust toolchain to 1.95.0 (#57373)
2026-10-27 05:52:01 +00:00
websocket-client
Wire shared runtime authentication through threads and API clients (#59177)
2026-11-03 15:02:57 +00:00
windows-sandbox-rs
Preserve script quotes in Windows sandbox cmd invocations (#60624)
2026-11-10 16:58:06 +00:00
windows-sandbox-service
Repair legacy Windows sandbox bin permissions for SYSTEM (#59745)
2026-11-05 21:33:57 +00:00
workload-identity
Support API workload identity authentication (#59275)
2026-11-04 00:52:58 +00:00
worktree
…
.gitignore
…
BUILD.bazel
Ship the standalone executor in release packages (#57837)
2026-10-28 21:09:05 +00:00
Cargo.lock
Add an OpenSSH ProxyCommand mode to codex tcp-tunnel (#60568)
2026-11-10 09:54:57 +00:00
Cargo.toml
Fragment large Responses WebSocket messages into bounded frames (#60522)
2026-11-10 04:31:32 +00:00
clippy.toml
…
config.md
…
default.nix
…
deny.toml
Upgrade bundled SQLite to 3.54 for WAL fixes (#60432)
2026-11-09 19:26:23 +00:00
README.md
…
rust-toolchain.toml
Pin the Rust toolchain to 1.95.0 (#57373)
2026-10-27 05:52:01 +00:00
rustfmt.toml
…

README.md

Codex CLI

Codex CLI Documentation

Reference in New Issue View Git Blame Copy Permalink