Files
codex/codex-rs/Cargo.toml
T
Shijie Rao 05eb867845 ## New Features
- The TUI now offers richer session controls and display: data-driven service-tier commands, blended token usage, permissions/approval mode, effective workspace roots, and responsive Markdown tables. (#21745, #21906, #21991, #21669, #21677, #22052, #22612)
- `@` mentions now search files, directories, plugins, and skills in one picker, backed by app-server plugin metadata. (#19068, #22375)
- Plugin workflows gained marketplace CLI commands, version-aware sharing, share checkout, clearer shared-workspace buckets, and default-enabled plugin hooks. (#21396, #22397, #22425, #22435, #22549)
- Remote workflows now support daemon-managed `codex remote-control`, runtime enable/disable APIs, status reads, and registry-backed/configured remote environments. (#20718, #22218, #22562, #22578, #22877, #20667, #21323)
- The Python SDK moved to `openai-codex` / `openai_codex`, with pinned runtime-generated types, concurrent turn routing, approval modes, and integration coverage. (#21778, #21891, #21893, #21896, #21905, #21910, #22014)
- Added `codex doctor` for support-ready diagnostics across runtime, auth, terminal, network, config, and local state. (#22336)

## Bug Fixes
- Fixed several TUI interaction and rendering issues, including URL wrapping, light-mode selection contrast, Shift+Enter in tmux, `/review` MCP startup status, `/side` Esc handling, and network approval history text. (#21760, #21950, #21943, #21624, #22710, #22229)
- Hardened Windows sandbox behavior around deny-read rules, scoped write roots, ineffective firewall policy, and PowerShell edge cases. (#18202, #21479, #22353, #21400, #22643)
- Preserved managed read restrictions during permission escalation and cleaned up workspace-root permission profile resolution. (#15977, #22624, #22683)
- Made app-server and local state startup safer by preserving SQLite data, failing closed when state cannot open, adding recovery paths, and softening optional metadata sync failures. (#21831, #21847, #22580, #22734, #22899)
- Improved Git and auth reliability by using root worktree hooks consistently, ignoring repo hook/fsmonitor config in helper commands, binding local MCP OAuth callbacks, and revoking superseded login tokens. (#21969, #22843, #22652, #20237, #21747)
- Reduced remote and Windows cleanup friction with longer exec-server transport timeouts, quieter `taskkill` cleanup, and non-queued plugin reads. (#21825, #21759, #22058, #22703)

## Documentation
- Clarified that general Codex product docs should not be added to this repo, while app-server API docs remain in scope. (#21772)
- Updated plugin-creator guidance for the simplified local plugin handoff links. (#22240)
- Documented new app-server/API contracts for remote environments and the desktop-owned config namespace. (#21323, #22584)

## Chores
- Improved CI and release reliability across Rust CI, exact PR-head checkout, Windows Bazel sharding, unsigned macOS artifacts, and signed macOS promotion. (#21604, #21628, #21835, #22408, #22559, #22649, #22737, #22788, #22900)
- Split large TUI ChatWidget, history, and composer code into focused modules without intended behavior changes. (#21866, #22269, #22407, #22433, #22518, #22537, #22704, #22581, #22656)
- Continued extracting extension and tool internals, including shared tool contracts plus guardian and memory extension plumbing. (#21736, #21737, #21738, #22138, #22147, #22216, #22258, #22344, #22476, #22480, #22485, #22498)
- Removed obsolete tool paths, feature flags, config gates, and legacy hooks as defaults stabilized. (#21651, #21805, #22173, #22246, #22565, #22711, #22717, #22724, #22730)

## Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.130.0...rust-v0.131.0

- #21550 [codex] make shutdown pending-touch test deterministic @jif-oai
- #21697 Allow string service tiers in config TOML @aibrahim-oai
- #21687 [codex] Enable apply_patch freeform by default @aibrahim-oai
- #19896 Update models.json @github-actions
- #21669 Display blended token count in status line @etraut-openai
- #21677 Show permissions and approval mode in the TUI status line @etraut-openai
- #21757 api: send hyphenated session and thread headers @jif-oai
- #21763 nit: comment @jif-oai
- #21749 codex-otel: validate provider span attributes consistently @bbrown-oai
- #21767 chore: thread tui @jif-oai
- #21443 [sandboxing] Remove Darwin user cache write from Seatbelt network policy @evawong-oai
- #21604 Fix `rust-ci-full` failures due to missing `bwrap` @zanie-oai
- #21628 Use `CARGO_NET_GIT_FETCH_WITH_CLI` in `rust-ci-full` for more reliable git fetches @zanie-oai
- #21745 [codex] Generalize service tier slash commands @aibrahim-oai
- #21772 Clarify docs folder guidance in AGENTS.md @etraut-openai
- #21622 [codex] Address some more GHA hygiene issues @ww-oai
- #21662 feat: Use installation ID in remote enrollments @ddr-oai
- #20667 Load configured environments from CODEX_HOME @starr-openai
- #21776 Update models.json @github-actions
- #21787 Support resource binaries in Python runtime staging @aibrahim-oai
- #21784 Publish Python runtime wheels on release @aibrahim-oai
- #21601 Emit accepted line fingerprint analytics @alexsong-oai
- #21465 Remove ToolName display helper @pakrym-oai
- #20619 [codex] request desktop attestation from app @jiamingz42
- #21810 Revert "Publish Python runtime wheels on release" @aibrahim-oai
- #21651 [codex] Delete function-style apply_patch @pakrym-oai
- #21805 [codex] Remove legacy after tool use hooks @pakrym-oai
- #21616 Enable `--deny-warnings` for `cargo shear` @charliemarsh-oai
- #21497 Using cached connector directory for discoverable tools list @mzeng-openai
- #21835 ci: check out PR head commits in workflows @bolinfest
- #21794 Make environment provider snapshots path-free @starr-openai
- #21831 app-server: support daemon-safe restart handling @euroelessar
- #20293 Support openai library tool @lt-oai
- #21323 [codex] support executor registry remote environments @miz-openai
- #21825 Increase exec-server environment transport timeouts @starr-openai
- #20718 [daemon] Add app-server daemon lifecycle management @euroelessar
- #21840 feat: add Bedrock Mantle client agent header @celia-oai
- #21847 sqlite: no more destructive version bumps @owenlin0
- #21652 Reapply "Move skills watcher to app-server" @pakrym-oai
- #21290 Move file watcher out of core @pakrym-oai
- #21867 feat: Add role-aware plugin share context APIs @xl-openai
- #21875 [codex] compact network context rendering @sayan-oai
- #21778 Route Python SDK turn notifications by ID @aibrahim-oai
- #21906 [codex] Lowercase TUI service tier commands @aibrahim-oai
- #21819 tests: cover sandbox link write behavior @bolinfest
- #21760 fix(tui): preserve wrapped prose beside URLs @fcoury-oai
- #21950 fix(tui): improve light-mode selection contrast @fcoury-oai
- #21755 Improve hooks trust flow in TUI @abhinav-oai
- #21870 Avoid blocking TUI on agent metadata hydration @etraut-openai
- #21866 Split ChatWidget state into focused modules @etraut-openai
- #21991 Persist 'priority' service tier as fast in config @aibrahim-oai
- #21943 fix(tui): preserve Shift+Enter in tmux csi-u panes @fcoury-oai
- #21759 fix(tui): suppress taskkill output for MCP teardown on Windows @fcoury-oai
- #22039 Deduplicate issue digest interactions by user @etraut-openai
- #22052 feat(tui): render responsive Markdown tables in TUI @fcoury-oai
- #20825 Read cached metadata for installed Git plugins @xli-oai
- #21736 extension: add initial typed extension API @jif-oai
- #21737 extension: wire extension registries into sessions @jif-oai
- #21738 extension: move git attribution into an extension @jif-oai
- #22138 refactor: extract executable tool contracts into codex-tool-api @jif-oai
- #22140 feat: drop `CodexExtension` @jif-oai
- #22143 [codex] default unknown contributed tools to mutating @jif-oai
- #22147 feat: wire extension tool bundles into core @jif-oai
- #22163 feat: move extensions tool @jif-oai
- #22113 Add x-codex-ws-stream-request-start-ms @andmis
- #21860 Persist /goal commands in history @etraut-openai
- #22141 [codex] Harden overflow auto-compaction recovery @aibrahim-oai
- #22170 Revert "[codex] Harden overflow auto-compaction recovery" @aibrahim-oai
- #22106 Fix side conversation config inheritance @etraut-openai
- #22045 Improve goal continuation based on feedback @etraut-openai
- #21981 Use goal preview metadata for goal-first threads @etraut-openai
- #21843 app-server: remove TCP websocket listener @euroelessar
- #22173 chore: drop built-in MCPs @jif-oai
- #21954 Fix goal update and add `/goal edit` command in TUI @etraut-openai
- #22110 Make auto-review denial short-circuit use a rolling review window @won-openai
- #21431 [codex-analytics] add turn tool counts to turn events @rhan-oai
- #22154 Add process-scoped SQLite telemetry @jif-oai
- #19068 Unified mentions in TUI @canvrno-oai
- #20305 fix(exec-policy) use is_known_safe_command less @dylan-hurd-oai
- #22058 fix(exec-server): suppress Windows taskkill output @fcoury-oai
- #22178 fix(app-server): thread history redaction for remote clients @owenlin0
- #15977 fix(permissions): preserve managed deny-read during escalation @viyatb-oai
- #21061 feat(connectors): support managed app tool approval requirements @viyatb-oai
- #22188 [elicitation] Advertise new url elicitation capability when auth_elicitation is enabled. @mzeng-openai
- #22192 config: accept `minus` in TUI keymap config @fcoury-oai
- #21853 daemon: refresh updater after validated binary rollout @euroelessar
- #21747 [login] revoke superseded auth tokens on relogin @cooper-oai
- #20147 feat: add network proxy feature flag @viyatb-oai
- #21891 [1/8] Pin Python SDK runtime dependency @aibrahim-oai
- #21893 [2/8] Generate Python SDK types from pinned runtime @aibrahim-oai
- #21895 [3/8] Run Python SDK tests in CI @aibrahim-oai
- #21896 [4/8] Define Python SDK public API surface @aibrahim-oai
- #21905 [5/8] Rename Python SDK package to openai-codex @aibrahim-oai
- #21910 [6/8] Add high-level Python SDK approval mode @aibrahim-oai
- #22014 [7/8] Add Python SDK app-server integration harness @aibrahim-oai
- #22021 [8/8] Add Python SDK Ruff formatting @aibrahim-oai
- #18748 [codex-analytics] emit terminal review events @rhan-oai
- #22159 Add Windows hook command overrides @abhinav-oai
- #22218 Update codex remote-control to start the daemon @owenlin0
- #22180 Stop uploading accepted line fingerprints @alexsong-oai
- #21617 Support multi-environment apply_patch selection @starr-openai
- #22198 Add production startup and TTFT telemetry @mzeng-openai
- #21963 [exec-server] serve websocket listener via HTTP upgrade @euroelessar
- #21946 fix(tui): handle hidden app git directives @fcoury-oai
- #21595 Simplify MCP tool handler plumbing @pakrym-oai
- #22221 feat(skills): default plugin creator to personal share flow @efrazer-oai
- #21861 Apply sandbox context to local view_image reads @starr-openai
- #20527 Support PreToolUse updatedInput rewrites @abhinav-oai
- #22243 [codex] Filter legacy warning messages during compaction @pakrym-oai
- #22254 [codex] Make handlers own parallel tool support @pakrym-oai
- #18202 feat(sandbox): add Windows deny-read parity @viyatb-oai
- #22265 feat: Normalize remote plugin summary identities. @xl-openai
- #22216 feat: guardian as an extension (contributors part) @jif-oai
- #22311 [rollout-trace] Add x-codex-inference-call-id header to inference calls. @cassirer-openai
- #21206 feat(tui): add ambient terminal pets @fcoury-oai
- #22323 fix: uv lock @jif-oai
- #22207 [codex] Tighten unified exec sandbox setup @bookholt-oai
- #22382 tools: remove is_mutating dispatch gating @pakrym-oai
- #22383 chore(config) include_collaboration_mode_instructions @dylan-hurd-oai
- #22377 code-mode: carry nested tool kind through runtime @pakrym-oai
- #22392 test(tui): relax configured pet load timeout @fcoury-oai
- #22343 feat(exec-server): use protobuf relay frames @apanasenko-oai
- #20509 [codex] Remove workspace owner usage nudge gate @richardopenai
- #22256 Refactor namespaced tool spec registration @pakrym-oai
- #22280 code-mode: Add pending-aware code mode execution @cconger
- #22266 core: box multi-agent handler futures @bolinfest
- #22398 [codex] Add search term coverage for tool_search @pakrym-oai
- #22236 Unify thread metadata updates above store @wiltzius-openai
- #22269 Refactor chatwidget state into modules @etraut-openai
- #22381 [codex] Remove tool search bucket limit override @sayan-oai
- #22386 mark Feature::RemoteControl as removed @owenlin0
- #22240 docs(skills): simplify plugin creator deeplink shape @efrazer-oai
- #22397 feat: Expose plugin versions and gate plugin sharing @xl-openai
- #22404 Restore app-server websocket listener with auth guard @etraut-openai
- #22258 feat: route guardian review model selection through providers @celia-oai
- #22268 hooks: use new session IDs instead of thread IDs for hooks, apply parent's session ID to subagents' hooks @eternal-openai
- #20319 Add allow_managed_hooks_only hook requirement @eternal-openai
- #22413 Remove CODEX_RS_SSE_FIXTURE test hook @pakrym-oai
- #22406 tools: infer code-mode namespace descriptions from specs @pakrym-oai
- #22261 Encapsulate tool search entries in handlers @pakrym-oai
- #22425 feat: Split shared workspace plugins by discoverability @xl-openai
- #22414 Add support for UDS in `codex --remote` @etraut-openai
- #22407 Refactor chatwidget input flow into modules @etraut-openai
- #22439 Remove unavailable MCP placeholder tool backfill @sayan-oai
- #21969 Use root repo hooks in linked worktrees @abhinav-oai
- #21768 add --dangerously-bypass-hook-trust CLI flag @abhinav-oai
- #22435 feat: Add plugin share checkout @xl-openai
- #22355 chore: Keep view_image sandbox test in temp dir @jif-oai
- #22344 extension-api: add approval review contributor flow @jif-oai
- #22359 feat: extract shared tool executor interface @jif-oai
- #22369 Refactor extension tools onto shared ToolExecutor @jif-oai
- #22338 [app-server] Gate login issuer override constant @cassirer-openai
- #22437 [codex] isolate plugin/list from config serialization queue @xli-oai
- #22476 feat: add thread lifecycle contributor hooks @jif-oai
- #22479 nit: codeowners @jif-oai
- #22480 feat: add turn lifecycle contributors @jif-oai
- #22482 fix: emit thread stop lifecycle on implicit shutdown @jif-oai
- #22485 feat: add token usage contributor hook @jif-oai
- #22443 Scope macOS signing secrets to release environment @shijie-oai
- #22490 feat: move extension scope ids into ExtensionData @jif-oai
- #22491 Make context contributors async @jif-oai
- #22214 feat(tui): remove Zellij TUI workarounds @fcoury-oai
- #22139 Add service tier overrides to spawned agents @aibrahim-oai
- #22488 feat: add config-change extension contributor @jif-oai
- #22498 feat: memories ext @jif-oai
- #22503 fix: main @jif-oai
- #22347 feat(tui): standardize picker navigation keys @fcoury-oai
- #22500 refactor: split memories extension crate modules @jif-oai
- #22433 Refactor chatwidget protocol flows into modules (phase 3) @etraut-openai
- #22505 fix: prevent fmt from updating Python SDK lockfile @jif-oai
- #22326 [rollout-trace] Add a trace ID to MCP calls. @cassirer-openai
- #20559 config: add strict config parsing @bolinfest
- #22489 Introduce tool exposure for deferred registration @jif-oai
- #22193 fix: drop underscored id headers @jif-oai
- #22246 [codex] Remove unused legacy shell tools @pakrym-oai
- #22520 revert: mark Feature::RemoteControl as removed @owenlin0
- #22513 Revert "Scope macOS signing secrets to release environment" @shijie-oai
- #22514 feat: expose multi-agent v2 as model-only tools @jif-oai
- #22366 Pass Codex product SKU to ChatGPT backend @ericning-o
- #22519 Deprecate TurnContext cwd and resolve_path @pakrym-oai
- #22518 Refactor chatwidget settings surfaces into modules (phase 4) @etraut-openai
- #21479 [codex] Scope Windows sandbox write-root capability SIDs @adrianbravo-oai
- #22353 windows-sandbox: fail elevated setup when firewall policy is ineffective @iceweasel-oai
- #22527 [codex] Reuse Apps MCP path override for plugin-service rollout @adaley-openai
- #22412 chore(config) rm Feature::CodexGitCommit @dylan-hurd-oai
- #22501 chore(config) rm tools.view_image @dylan-hurd-oai
- #22533 fix: prevent codex-backend from stealing originator @owenlin0
- #22408 Shard Bazel Windows tests across jobs @starr-openai
- #22542 Use selected environment cwd for filesystem helpers @pakrym-oai
- #20237 Add callback ids to local MCP OAuth redirects @stevenlee-oai
- #22549 Enable plugin hooks by default @abhinav-oai
- #22375 Use plugin/list to get list of plugins for mentions @canvrno-oai
- #21235 [codex] Fix TUI wrapping for external borrowed slices @canvrno-oai
- #22336 feat(cli): add codex doctor diagnostics @fcoury-oai
- #22543 clean up instructions @sayan-oai
- #21400 Avoid PowerShell profiles in elevated Windows sandbox @iceweasel-oai
- #22528 Make multi_agent_v2 wait_agent timeouts configurable @andmis
- #22529 Spill oversized PreToolUse additionalContext @abhinav-oai
- #22556 feat: namespace in ext @jif-oai
- #22535 Remove resurrected `/collab` slash command @etraut-openai
- #22537 Refactor chatwidget orchestration into modules (phase 5) @etraut-openai
- #22564 [codex] Canonicalize shared workspace plugin IDs @xl-openai
- #22559 Add unsigned macOS release artifacts @shijie-oai
- #22574 Deprecate issue labeler @maxb-openai
- #22555 Remove connector_openai prefix filtering @ericning-o
- #22580 fix: Block appserver startup if state db can't be opened @ddr-oai
- #22565 chore(config) rm experimental_use_freeform_apply_patch @dylan-hurd-oai
- #22562 Improve remote-control daemon UX @owenlin0
- #22578 enable/disable remote control at runtime, not via features @owenlin0
- #22573 Simplify TUI startup test coverage @etraut-openai
- #22594 Relax remote plugin sync gate @xli-oai
- #22587 Defer startup NUX impressions until startup succeeds @etraut-openai
- #22560 feat: make ToolExecutor an async trait @jif-oai
- #22494 Wire turn item contributors into stream output @jif-oai
- #17141 feat: add layered --profile-v2 config files @jif-oai
- #22643 [codex] treat PowerShell stop-parsing forms as unsupported @bookholt-oai
- #22646 Fix abort-path turn extension data plumbing @jif-oai
- #22624 permissions: canonicalize workspace_roots and danger-full-access names @bolinfest
- #22649 Chore: better published unsigned artifacts @shijie-oai
- #22581 tui: split composer attachment and popup state @etraut-openai
- #21396 [codex] add plugin marketplace CLI commands @caseychow-oai
- #22576 tests: avoid ambient temp sandbox roots @starr-openai
- #22652 [codex] Ignore fsmonitor config in Git metadata reads @bookholt-oai
- #22229 fix(tui): render network approval history by target @fcoury-oai
- #22547 Prefer the model list fetched from the backend for SIWC users @jeevnayak
- #22666 [codex] fix plugin CLI active user layer compile @caseychow-oai
- #22575 Support explicit MCP OAuth client IDs @mzeng-openai
- #22512 test: isolate exec review policy config test @bolinfest
- #22572 Fix remote environment test fixtures @starr-openai
- #22563 tests: isolate codex home for live cli @starr-openai
- #18161 [codex] Support multiple forced ChatGPT workspaces @rreichel3-oai
- #22702 make rust-release-prepare use env secret @sayan-oai
- #22703 Unqueue plugin list and read requests @xli-oai
- #22687 Fix Windows sandbox clippy clones @starr-openai
- #22711 chore(features) rm Feature::ApplyPatchFreeform @dylan-hurd-oai
- #22717 chore(config) rm windows_wsl_setup_acknowledged @dylan-hurd-oai
- #22695 Trim TUI legacy core helper usage @etraut-openai
- #21624 Fix /review mode MCP startup render issue @canvrno-oai
- #22684 Remove SSE fixture loaders @pakrym-oai
- #22730 [codex] Group removed feature flags @dylan-hurd-oai
- #22724 [codex] Remove experimental instructions file config @dylan-hurd-oai
- #22237 Add `user_input_requested_during_turn` to MCP turn metadata @mchen-oai
- #22737 ci: support signed macOS release promotion @bolinfest
- #22303 Stabilize compact rollback follow-up test @dylan-hurd-oai
- #22683 permissions: resolve profile identity with constraints @bolinfest
- #22734 tui: recover local state db startup failures @etraut-openai
- #22584 [codex] Add opaque desktop config namespace @guinness-oai
- #22710 Prevent Esc from dismissing or rewinding `/side` @etraut-openai
- #22704 TUI: split history cells into focused modules @etraut-openai
- #22611 app-server: use permission ids and runtime workspace roots @bolinfest
- #22612 tui/exec: show effective workspace roots in summaries @bolinfest
- #22788 Fix signed macOS release promotion follow-up jobs @shijie-oai
- #22647 Reject legacy [profiles] when using profile-v2 @jif-oai
- #22809 [codex] Use compaction_trigger item for remote compaction v2 @jif-oai
- #22636 Simplify tool executor and registry plumbing @jif-oai
- #22820 Remove zombie tools spec module @jif-oai
- #22828 Run compact hooks for remote compaction v2 @jif-oai
- #22841 Move memory prompt injection to app-server extension @jif-oai
- #22789 guardian: use permission profile for review sandbox @bolinfest
- #22656 tui: split remaining composer draft and footer state @etraut-openai
- #22843 Ignore configured hooks in git helpers @bookholt-oai
- #22790 context: remove legacy permissions instructions helper @bolinfest
- #22791 telemetry: tag sandboxes from permission profiles @bolinfest
- #22872 Forward apps MCP product SKU from Codex config @kumquatexpress
- #22582 Workflow updates @viyatb-oai
- #22792 app-server: stop returning thread permission profiles @bolinfest
- #22795 core: construct test permission profiles directly @bolinfest
- #22900 Disable DMG staging for signed macOS promotion @shijie-oai
- #22877 feat(app-server): update remote control APIs for better UX @owenlin0
- #22899 [codex] Soften SQLite metadata sync failures @wiltzius-openai
2026-05-18 08:40:25 -07:00

524 lines
15 KiB
TOML

[workspace]
members = [
"aws-auth",
"analytics",
"agent-graph-store",
"agent-identity",
"backend-client",
"bwrap",
"ansi-escape",
"async-utils",
"app-server",
"app-server-transport",
"app-server-daemon",
"app-server-client",
"app-server-protocol",
"app-server-test-client",
"debug-client",
"apply-patch",
"arg0",
"feedback",
"features",
"install-context",
"codex-backend-openapi-models",
"code-mode",
"cloud-requirements",
"cloud-tasks",
"cloud-tasks-client",
"cloud-tasks-mock-client",
"cli",
"collaboration-mode-templates",
"connectors",
"config",
"shell-command",
"shell-escalation",
"skills",
"core",
"core-api",
"core-plugins",
"core-skills",
"hooks",
"secrets",
"exec",
"file-system",
"exec-server",
"execpolicy",
"execpolicy-legacy",
"ext/extension-api",
"ext/guardian",
"ext/memories",
"external-agent-migration",
"external-agent-sessions",
"keyring-store",
"file-search",
"file-watcher",
"linux-sandbox",
"lmstudio",
"login",
"codex-mcp",
"mcp-server",
"memories/mcp",
"memories/read",
"memories/write",
"model-provider-info",
"models-manager",
"network-proxy",
"ollama",
"process-hardening",
"protocol",
"realtime-webrtc",
"rollout",
"rollout-trace",
"rmcp-client",
"responses-api-proxy",
"response-debug-context",
"sandboxing",
"stdio-to-uds",
"otel",
"tui",
"tools",
"v8-poc",
"utils/absolute-path",
"utils/cargo-bin",
"git-utils",
"utils/cache",
"utils/image",
"utils/json-to-toml",
"utils/home-dir",
"utils/pty",
"utils/readiness",
"utils/rustls-provider",
"utils/string",
"utils/cli",
"utils/elapsed",
"utils/sandbox-summary",
"utils/sleep-inhibitor",
"utils/approval-presets",
"utils/oss",
"utils/output-truncation",
"utils/path-utils",
"utils/plugins",
"utils/fuzzy-match",
"utils/stream-parser",
"utils/template",
"codex-client",
"codex-api",
"state",
"terminal-detection",
"test-binary-support",
"thread-manager-sample",
"thread-store",
"uds",
"codex-experimental-api-macros",
"plugin",
"model-provider",
]
resolver = "2"
[workspace.package]
version = "0.131.0"
# Track the edition for all workspace crates in one place. Individual
# crates can still override this value, but keeping it here means new
# crates created with `cargo new -w ...` automatically inherit the 2024
# edition.
edition = "2024"
license = "Apache-2.0"
[workspace.dependencies]
# Internal
app_test_support = { path = "app-server/tests/common" }
codex-analytics = { path = "analytics" }
codex-agent-graph-store = { path = "agent-graph-store" }
codex-agent-identity = { path = "agent-identity" }
codex-ansi-escape = { path = "ansi-escape" }
codex-api = { path = "codex-api" }
codex-aws-auth = { path = "aws-auth" }
codex-app-server = { path = "app-server" }
codex-app-server-transport = { path = "app-server-transport" }
codex-app-server-daemon = { path = "app-server-daemon" }
codex-app-server-client = { path = "app-server-client" }
codex-app-server-protocol = { path = "app-server-protocol" }
codex-app-server-test-client = { path = "app-server-test-client" }
codex-apply-patch = { path = "apply-patch" }
codex-arg0 = { path = "arg0" }
codex-async-utils = { path = "async-utils" }
codex-backend-client = { path = "backend-client" }
codex-chatgpt = { path = "chatgpt" }
codex-cli = { path = "cli" }
codex-client = { path = "codex-client" }
codex-collaboration-mode-templates = { path = "collaboration-mode-templates" }
codex-cloud-requirements = { path = "cloud-requirements" }
codex-cloud-tasks-client = { path = "cloud-tasks-client" }
codex-cloud-tasks-mock-client = { path = "cloud-tasks-mock-client" }
codex-code-mode = { path = "code-mode" }
codex-config = { path = "config" }
codex-connectors = { path = "connectors" }
codex-core = { path = "core" }
codex-core-api = { path = "core-api" }
codex-core-plugins = { path = "core-plugins" }
codex-core-skills = { path = "core-skills" }
codex-exec = { path = "exec" }
codex-file-system = { path = "file-system" }
codex-exec-server = { path = "exec-server" }
codex-execpolicy = { path = "execpolicy" }
codex-extension-api = { path = "ext/extension-api" }
codex-guardian = { path = "ext/guardian" }
codex-external-agent-migration = { path = "external-agent-migration" }
codex-external-agent-sessions = { path = "external-agent-sessions" }
codex-experimental-api-macros = { path = "codex-experimental-api-macros" }
codex-features = { path = "features" }
codex-feedback = { path = "feedback" }
codex-install-context = { path = "install-context" }
codex-file-search = { path = "file-search" }
codex-file-watcher = { path = "file-watcher" }
codex-git-utils = { path = "git-utils" }
codex-hooks = { path = "hooks" }
codex-keyring-store = { path = "keyring-store" }
codex-linux-sandbox = { path = "linux-sandbox" }
codex-lmstudio = { path = "lmstudio" }
codex-login = { path = "login" }
codex-message-history = { path = "message-history" }
codex-memories-extension = { path = "ext/memories" }
codex-memories-read = { path = "memories/read" }
codex-memories-write = { path = "memories/write" }
codex-mcp = { path = "codex-mcp" }
codex-mcp-server = { path = "mcp-server" }
codex-model-provider-info = { path = "model-provider-info" }
codex-models-manager = { path = "models-manager" }
codex-network-proxy = { path = "network-proxy" }
codex-ollama = { path = "ollama" }
codex-otel = { path = "otel" }
codex-plugin = { path = "plugin" }
codex-model-provider = { path = "model-provider" }
codex-process-hardening = { path = "process-hardening" }
codex-protocol = { path = "protocol" }
codex-realtime-webrtc = { path = "realtime-webrtc" }
codex-responses-api-proxy = { path = "responses-api-proxy" }
codex-response-debug-context = { path = "response-debug-context" }
codex-rmcp-client = { path = "rmcp-client" }
codex-rollout = { path = "rollout" }
codex-rollout-trace = { path = "rollout-trace" }
codex-sandboxing = { path = "sandboxing" }
codex-secrets = { path = "secrets" }
codex-shell-command = { path = "shell-command" }
codex-shell-escalation = { path = "shell-escalation" }
codex-skills = { path = "skills" }
codex-state = { path = "state" }
codex-stdio-to-uds = { path = "stdio-to-uds" }
codex-terminal-detection = { path = "terminal-detection" }
codex-test-binary-support = { path = "test-binary-support" }
codex-thread-store = { path = "thread-store" }
codex-tools = { path = "tools" }
codex-tui = { path = "tui" }
codex-uds = { path = "uds" }
codex-utils-absolute-path = { path = "utils/absolute-path" }
codex-utils-approval-presets = { path = "utils/approval-presets" }
codex-utils-cache = { path = "utils/cache" }
codex-utils-cargo-bin = { path = "utils/cargo-bin" }
codex-utils-cli = { path = "utils/cli" }
codex-utils-elapsed = { path = "utils/elapsed" }
codex-utils-fuzzy-match = { path = "utils/fuzzy-match" }
codex-utils-home-dir = { path = "utils/home-dir" }
codex-utils-image = { path = "utils/image" }
codex-utils-json-to-toml = { path = "utils/json-to-toml" }
codex-utils-oss = { path = "utils/oss" }
codex-utils-output-truncation = { path = "utils/output-truncation" }
codex-utils-path = { path = "utils/path-utils" }
codex-utils-plugins = { path = "utils/plugins" }
codex-utils-pty = { path = "utils/pty" }
codex-utils-rustls-provider = { path = "utils/rustls-provider" }
codex-utils-sandbox-summary = { path = "utils/sandbox-summary" }
codex-utils-sleep-inhibitor = { path = "utils/sleep-inhibitor" }
codex-utils-stream-parser = { path = "utils/stream-parser" }
codex-utils-string = { path = "utils/string" }
codex-utils-template = { path = "utils/template" }
codex-v8-poc = { path = "v8-poc" }
codex-windows-sandbox = { path = "windows-sandbox-rs" }
core_test_support = { path = "core/tests/common" }
mcp_test_support = { path = "mcp-server/tests/common" }
# External
age = "0.11.1"
allocative = "0.3.3"
ansi-to-tui = "7.0.0"
anyhow = "1"
arboard = { version = "3", features = ["wayland-data-control"] }
arc-swap = "1.9.0"
assert_cmd = "2"
assert_matches = "1.5.0"
async-channel = "2.3.1"
async-io = "2.6.0"
async-stream = "0.3.6"
async-trait = "0.1.89"
aws-config = "1"
aws-credential-types = "1"
aws-sigv4 = "1"
aws-types = "1"
axum = { version = "0.8", default-features = false }
base64 = "0.22.1"
bm25 = "2.3.2"
bytes = "1.10.1"
chardetng = "0.1.17"
chrono = "0.4.43"
clap = "4"
clap_complete = "4"
color-eyre = "0.6.3"
constant_time_eq = "0.3.1"
crossbeam-channel = "0.5.15"
crypto_box = { version = "0.9.1", features = ["seal"] }
crossterm = "0.28.1"
csv = "1.3.1"
ctor = "0.6.3"
deno_core_icudata = "0.77.0"
derive_more = "2"
diffy = "0.4.2"
dirs = "6"
dns-lookup = "3.0.1"
dotenvy = "0.15.7"
dunce = "1.0.4"
ed25519-dalek = { version = "2.2.0", features = ["pkcs8"] }
encoding_rs = "0.8.35"
env_logger = "0.11.9"
eventsource-stream = "0.2.3"
flate2 = "1.1.8"
futures = { version = "0.3", default-features = false }
gethostname = "1.1.0"
gix = { version = "0.81.0", default-features = false, features = ["sha1"] }
glob = "0.3"
globset = "0.4"
hmac = "0.12.1"
http = "1.3.1"
iana-time-zone = "0.1.64"
icu_decimal = "2.1"
icu_locale_core = "2.1"
icu_provider = { version = "2.1", features = ["sync"] }
ignore = "0.4.23"
image = { version = "^0.25.9", default-features = false }
include_dir = "0.7.4"
indexmap = "2.12.0"
insta = "1.46.3"
inventory = "0.3.19"
itertools = "0.14.0"
jsonwebtoken = "9.3.1"
keyring = { version = "3.6", default-features = false }
landlock = "0.4.4"
lazy_static = "1"
libc = "0.2.182"
log = "0.4"
lru = "0.16.3"
maplit = "1.0.2"
mime_guess = "2.0.5"
multimap = "0.10.0"
notify = "8.2.0"
nucleo = { git = "https://github.com/helix-editor/nucleo.git", rev = "4253de9faabb4e5c6d81d946a5e35a90f87347ee" }
once_cell = "1.20.2"
openssl-sys = "*"
opentelemetry = "0.31.0"
opentelemetry-appender-tracing = "0.31.0"
opentelemetry-otlp = "0.31.0"
opentelemetry-semantic-conventions = "0.31.0"
opentelemetry_sdk = "0.31.0"
os_info = "3.12.0"
owo-colors = "4.3.0"
path-absolutize = "3.1.1"
pathdiff = "0.2"
portable-pty = "0.9.0"
predicates = "3"
pretty_assertions = "1.4.1"
pulldown-cmark = "0.10"
quick-xml = "0.38.4"
rand = "0.9"
ratatui = "0.29.0"
ratatui-macros = "0.6.0"
rcgen = { version = "0.14.7", default-features = false, features = [
"aws_lc_rs",
"pem",
] }
regex = "1.12.3"
regex-lite = "0.1.8"
reqwest = { version = "0.12", features = ["cookies"] }
rmcp = { version = "0.15.0", default-features = false }
runfiles = { git = "https://github.com/dzbarsky/rules_rust", rev = "b56cbaa8465e74127f1ea216f813cd377295ad81" }
rustls = { version = "0.23", default-features = false, features = [
"ring",
"std",
] }
rustls-native-certs = "0.8.3"
rustls-pki-types = "1.14.0"
schemars = "0.8.22"
seccompiler = "0.5.0"
semver = "1.0"
sentry = "0.46.0"
serde = "1"
serde_ignored = "0.1.14"
serde_json = "1"
serde_path_to_error = "0.1.20"
serde_with = "3.17"
serde_yaml = "0.9"
serial_test = "3.2.0"
sha1 = "0.10.6"
sha2 = "0.10"
shlex = "1.3.0"
similar = "2.7.0"
socket2 = "0.6.1"
sqlx = { version = "0.8.6", default-features = false, features = [
"chrono",
"json",
"macros",
"migrate",
"runtime-tokio-rustls",
"sqlite",
"time",
"uuid",
] }
starlark = "0.13.0"
strum = "0.27.2"
strum_macros = "0.28.0"
supports-color = "3.0.2"
syntect = "5"
sys-locale = "0.3.2"
tar = { version = "=0.4.45", default-features = false }
tempfile = "3.23.0"
test-log = "0.2.19"
textwrap = "0.16.2"
thiserror = "2.0.17"
time = "0.3.47"
tiny_http = "0.12"
tokio = "1"
tokio-stream = "0.1.18"
tokio-test = "0.4"
tokio-tungstenite = { version = "0.28.0", features = [
"proxy",
"rustls-tls-native-roots",
] }
tokio-util = "0.7.18"
toml = "0.9.5"
toml_edit = "0.24.0"
tracing = "0.1.44"
tracing-appender = "0.2.3"
tracing-opentelemetry = "0.32.0"
tracing-subscriber = "0.3.22"
tracing-test = "0.2.5"
tonic = { version = "0.14.3", default-features = false, features = ["channel", "codegen"] }
tonic-prost = "0.14.3"
tree-sitter = "0.25.10"
tree-sitter-bash = "0.25"
ts-rs = "11"
tungstenite = { version = "0.27.0", features = ["deflate", "proxy"] }
uds_windows = "1.1.0"
unicode-segmentation = "1.12.0"
unicode-width = "0.2"
url = "2"
urlencoding = "2.1"
uuid = "1"
v8 = "=146.4.0"
vt100 = "0.16.2"
walkdir = "2.5.0"
webbrowser = "1.0"
which = "8"
whoami = "1.6.1"
wildmatch = "2.6.1"
winapi-util = "0.1.11"
zip = "2.4.2"
zstd = "0.13"
wiremock = "0.6"
zeroize = "1.8.2"
[workspace.lints]
rust = {}
[workspace.lints.clippy]
await_holding_invalid_type = "deny"
await_holding_lock = "deny"
expect_used = "deny"
identity_op = "deny"
manual_clamp = "deny"
manual_filter = "deny"
manual_find = "deny"
manual_flatten = "deny"
manual_map = "deny"
manual_memcpy = "deny"
manual_non_exhaustive = "deny"
manual_ok_or = "deny"
manual_range_contains = "deny"
manual_retain = "deny"
manual_strip = "deny"
manual_try_fold = "deny"
manual_unwrap_or = "deny"
needless_borrow = "deny"
needless_borrowed_reference = "deny"
needless_collect = "deny"
needless_late_init = "deny"
needless_option_as_deref = "deny"
needless_question_mark = "deny"
needless_update = "deny"
redundant_clone = "deny"
redundant_closure = "deny"
redundant_closure_for_method_calls = "deny"
redundant_static_lifetimes = "deny"
trivially_copy_pass_by_ref = "deny"
uninlined_format_args = "deny"
unnecessary_filter_map = "deny"
unnecessary_lazy_evaluations = "deny"
unnecessary_sort_by = "deny"
unnecessary_to_owned = "deny"
unwrap_used = "deny"
# cargo-shear cannot see the platform-specific openssl-sys usage, so we
# silence the false positive here instead of deleting a real dependency.
[workspace.metadata.cargo-shear]
ignored = [
"codex-agent-graph-store",
"icu_provider",
"openssl-sys",
"codex-v8-poc",
]
[profile.dev]
# Keep line tables/backtraces while avoiding expensive full variable debug info
# across local dev builds.
debug = "limited"
[profile.dev-small]
inherits = "dev"
opt-level = 0
debug = "none"
strip = "symbols"
[profile.release]
lto = "fat"
split-debuginfo = "off"
# Because we bundle some of these executables with the TypeScript CLI, we
# remove everything to make the binary as small as possible.
strip = "symbols"
# See https://github.com/openai/codex/issues/1411 for details.
codegen-units = 1
[profile.profiling]
inherits = "release"
debug = "full"
lto = false
strip = false
[profile.ci-test]
# Reduce binary size to reduce disk pressure.
debug = "limited"
inherits = "test"
opt-level = 0
[patch.crates-io]
# Uncomment to debug local changes.
# ratatui = { path = "../../ratatui" }
crossterm = { git = "https://github.com/nornagon/crossterm", rev = "87db8bfa6dc99427fd3b071681b07fc31c6ce995" }
ratatui = { git = "https://github.com/nornagon/ratatui", rev = "9b2ad1298408c45918ee9f8241a6f95498cdbed2" }
tokio-tungstenite = { git = "https://github.com/openai-oss-forks/tokio-tungstenite", rev = "132f5b39c862e3a970f731d709608b3e6276d5f6" }
tungstenite = { git = "https://github.com/openai-oss-forks/tungstenite-rs", rev = "9200079d3b54a1ff51072e24d81fd354f085156f" }
# Uncomment to debug local changes.
# rmcp = { path = "../../rust-sdk/crates/rmcp" }
[patch."ssh://git@github.com/openai-oss-forks/tungstenite-rs.git"]
tungstenite = { git = "https://github.com/openai-oss-forks/tungstenite-rs", rev = "9200079d3b54a1ff51072e24d81fd354f085156f" }