mirror of https://github.com/openai/codex.git synced 2026-09-17 12:23:33 +00:00

Files

Michael Bolin 0dac67f375 chore: introduce SandboxPolicy::WorkspaceWrite::use_exact_writable_roots

Without this change, it is challenging to create integration tests to
verify that the folders not included in `writable_roots` in
`SandboxPolicy::WorkspaceWrite` are read-only because, by default,
`get_writable_roots_with_cwd()` includes `TMPDIR`, which is where most integrationt
tests do their work.

This introduces a `use_exact_writable_roots` option to disable the default
includes returned by `get_writable_roots_with_cwd()`.

2025-08-01 11:31:24 -07:00

src

chore: introduce SandboxPolicy::WorkspaceWrite::use_exact_writable_roots

2025-08-01 11:31:24 -07:00

tests

chore: refactor exec.rs: create separate seatbelt.rs and spawn.rs files (#1762 )

2025-07-31 13:11:47 -07:00

Cargo.toml

Auto format toml (#1745 )

2025-07-30 18:37:00 -07:00

prompt.md

feat: initial import of Rust implementation of Codex CLI in codex-rs/ (#629 )

2025-04-24 13:31:40 -07:00

README.md

fix: support special --codex-run-as-apply-patch arg (#1702 )

2025-07-28 09:26:44 -07:00

README.md

codex-core

This crate implements the business logic for Codex. It is designed to be used by the various Codex UIs written in Rust.

Dependencies

Note that codex-core makes some assumptions about certain helper utilities being available in the environment. Currently, this

macOS

Expects /usr/bin/sandbox-exec to be present.

Linux

Expects the binary containing codex-core to run the equivalent of codex debug landlock when arg0 is codex-linux-sandbox. See the codex-arg0 crate for details.

All Platforms

Expects the binary containing codex-core to simulate the virtual apply_patch CLI when arg1 is --codex-run-as-apply-patch. See the codex-arg0 crate for details.