openai/codex
1
0
Fork 0
mirror of https://github.com/openai/codex.git synced 2026-10-26 18:38:47 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
1992f8c0183c6990c82649ef974913cb15a6eef5
codex/codex-rs
T
History
viyatb-oai 1992f8c018 Preserve approval policies for auto-reviewed models (#38439) 
## What changed

- Keep the configured `approvalPolicy` when a model in
  `auto_review.required_on_models` selects the `auto_review` reviewer.
- Continue downgrading full-access sessions to workspace-write and rejecting
  incompatible reviewer overrides.

## Testing

- Cover supported approval policies across thread start, settings updates,
  turn-time model switches, resume, and fork flows.

GitOrigin-RevId: 2bd3e2dcd46f3cadeb2fad20222cf8917c267208
2026-08-13 21:40:42 +00:00
..
.cargo
Upgrade Ratatui to 0.30.2 (#35959)
2026-07-29 13:53:15 +00:00
.config
…
agent-graph-store
Honor the configured SQLite home across state consumers (#34994)
2026-07-23 19:19:35 +00:00
agent-identity
Migrate agent identity to the shared HTTP client (#34631)
2026-07-21 22:44:43 +00:00
analytics
Track plugin metrics for background unified exec commands (#38276)
2026-08-13 00:04:57 +00:00
ansi-escape
Upgrade Ratatui to 0.30.2 (#35959)
2026-07-29 13:53:15 +00:00
app-server
Preserve approval policies for auto-reviewed models (#38439)
2026-08-13 21:40:42 +00:00
app-server-client
Prevent unread events from blocking in-process requests (#38381)
2026-08-13 13:57:25 +00:00
app-server-daemon
Honor system proxy settings in the daemon updater (#34495)
2026-07-21 08:50:21 +00:00
app-server-protocol
Persist security risk scores in rollout history (#38363)
2026-08-13 12:04:29 +00:00
app-server-protocol-noop-macros
Precompute app-server protocol exports (#36212)
2026-07-30 19:47:30 +00:00
app-server-test-client
Forward install attempt IDs for remote plugins (#37773)
2026-08-10 03:28:19 +00:00
app-server-transport
Reduce response serialization and rollout scan overhead (#36006)
2026-07-29 18:29:26 +00:00
apply-patch
Reject duplicate resolved paths in apply_patch (#37867)
2026-08-10 18:44:58 +00:00
arg0
Add a line-ending preservation mode to apply_patch (#37757)
2026-08-10 01:39:55 +00:00
async-utils
…
aws-auth
…
backend-client
Add per-thread usage queries to the backend client (#38270)
2026-08-12 22:58:46 +00:00
build-info
Add shared runtime build information (#37929)
2026-08-11 03:39:02 +00:00
bwrap
…
chatgpt
Fail closed when workload identity initialization fails (#38424)
2026-08-13 19:35:22 +00:00
cli
Add rustls fallback for local MCP HTTP requests (#38436)
2026-08-13 21:13:07 +00:00
cloud-config
Fail closed when workload identity initialization fails (#38424)
2026-08-13 19:35:22 +00:00
cloud-tasks
Fail closed when workload identity initialization fails (#38424)
2026-08-13 19:35:22 +00:00
cloud-tasks-client
Route backend requests through the HTTP client factory (#34490)
2026-07-21 08:28:51 +00:00
cloud-tasks-mock-client
…
code-mode
Support gRPC code-mode hosts in app server (#38288)
2026-08-13 01:32:42 +00:00
code-mode-host
Make gRPC code-mode yield tests deterministic (#38321)
2026-08-13 07:26:27 +00:00
code-mode-protocol
Use protobuf's built-in Bazel proto rule (#38280)
2026-08-13 00:26:06 +00:00
code-mode-runtime
Add per-session code-mode execution limits (#37114)
2026-08-05 16:09:01 +00:00
codex-api
Read model ETags from WebSocket metadata events (#38251)
2026-08-12 21:18:15 +00:00
codex-backend-openapi-models
Support Enterprise automation account plans (#36228)
2026-07-30 21:49:53 +00:00
codex-client
Keep response streams alive through connection failures (#37485)
2026-08-07 18:33:46 +00:00
codex-experimental-api-macros
…
codex-home
…
codex-mcp
Add rustls fallback for local MCP HTTP requests (#38436)
2026-08-13 21:13:07 +00:00
collaboration-mode-templates
Remove legacy collaboration mode variants (#36990)
2026-08-04 22:58:02 +00:00
config
Add dynamic HTTP header helpers for MCP servers (#38245)
2026-08-12 20:36:32 +00:00
connectors
Honor the configured ChatGPT origin in connector install URLs (#37338)
2026-08-07 00:23:38 +00:00
context-fragments
Simplify contextual user fragment registration (#36742)
2026-08-03 11:39:51 +00:00
core
Preserve approval policies for auto-reviewed models (#38439)
2026-08-13 21:40:42 +00:00
core-api
Add interrupted turn recovery (#38303)
2026-08-13 03:27:19 +00:00
core-plugins
Route curated plugin catalogs by authentication mode (#38429)
2026-08-13 20:20:01 +00:00
diagnostics
Add process diagnostics snapshots (#37434)
2026-08-07 11:30:17 +00:00
docs
Unify turn input submission and routing (#38275)
2026-08-13 00:00:16 +00:00
exec
Fail closed when workload identity initialization fails (#38424)
2026-08-13 19:35:22 +00:00
exec-server
Add rustls fallback for local MCP HTTP requests (#38436)
2026-08-13 21:13:07 +00:00
exec-server-protocol
Support sandboxed file streaming in exec-server (#38356)
2026-08-13 11:11:26 +00:00
execpolicy
Migrate legacy exec policy allow rules (#34271)
2026-07-20 06:13:29 +00:00
ext
Route curated plugin catalogs by authentication mode (#38429)
2026-08-13 20:20:01 +00:00
external-agent-migration
Route curated plugin catalogs by authentication mode (#38429)
2026-08-13 20:20:01 +00:00
features
Include Node REPL results in Guardian reviews (#38397)
2026-08-13 15:50:48 +00:00
feedback
Limit payload traces in diagnostic logs (#37497)
2026-08-07 19:56:29 +00:00
file-search
Avoid redundant filesystem probes (#36393)
2026-07-31 21:37:56 +00:00
file-system
Preserve Windows sandbox proxy settings in guardian sessions (#35036)
2026-07-23 23:35:29 +00:00
file-watcher
…
git-utils
Use the shared environment scrubber in git-utils (#37843)
2026-08-10 15:50:53 +00:00
history
Persist security risk scores in rollout history (#38363)
2026-08-13 12:04:29 +00:00
hooks
Reject sessions with unloadable required managed hooks (#38394)
2026-08-13 15:23:09 +00:00
http-client
Add rustls fallback for local MCP HTTP requests (#38436)
2026-08-13 21:13:07 +00:00
install-context
Extend bundled package discovery and expose its version (#37886)
2026-08-10 22:12:14 +00:00
keyring-store
…
linux-sandbox
Reap orphaned processes in Linux sandboxes (#38396)
2026-08-13 15:45:51 +00:00
lmstudio
Route LM Studio requests through the shared HTTP client (#34678)
2026-07-22 04:17:34 +00:00
login
Protect workload identity auth in app-server account RPCs (#38426)
2026-08-13 20:04:57 +00:00
mcp-server
Fail closed when workload identity initialization fails (#38424)
2026-08-13 19:35:22 +00:00
memories
Persist security risk scores in rollout history (#38363)
2026-08-13 12:04:29 +00:00
message-history
Add bounded batch lookups for message history (#33902)
2026-07-17 20:52:42 +00:00
model-provider
Use Luna for API-key Guardian reviews (#37103)
2026-08-05 14:20:59 +00:00
model-provider-info
Enable remote compaction for Amazon Bedrock (#36981)
2026-08-04 22:07:56 +00:00
models-manager
Include Node REPL policy in turn metadata (#38241)
2026-08-12 19:37:51 +00:00
network-proxy
Use bounded fallback ports for Windows managed proxies (#38265)
2026-08-12 22:33:18 +00:00
ollama
Route Ollama through the shared HTTP client (#36078)
2026-07-30 04:26:36 +00:00
otel
Route network access through the shared approval pipeline (#38299)
2026-08-13 02:40:49 +00:00
plugin
Remove obsolete plugin skill discovery helpers (#37832)
2026-08-10 14:25:13 +00:00
process-hardening
…
prompts
Remove unused apply_patch prompt fallback (#38291)
2026-08-13 01:52:02 +00:00
protocol
Centralize thread environment selection state (#38423)
2026-08-13 19:25:05 +00:00
response-debug-context
Keep response streams alive through connection failures (#37485)
2026-08-07 18:33:46 +00:00
responses-api-proxy
…
rmcp-client
Include Node REPL results in Guardian reviews (#38397)
2026-08-13 15:50:48 +00:00
rollout
Preserve floating-point values when decoding rollout lines (#38399)
2026-08-13 16:03:20 +00:00
rollout-trace
Add durable user-message queue dispatch (#37204)
2026-08-06 03:11:42 +00:00
sandboxing
Sandbox remote apply_patch operations (#38043)
2026-08-11 17:47:22 +00:00
scripts
…
secrets
Speed up MCP OAuth credential reads (#37842)
2026-08-10 15:43:10 +00:00
shell-command
Recognize PowerShell Get-Content file reads (#38415)
2026-08-13 18:30:51 +00:00
shell-escalation
Prevent launch context from reaching child processes (#37607)
2026-08-08 16:58:26 +00:00
skills
Recognize PowerShell Get-Content file reads (#38415)
2026-08-13 18:30:51 +00:00
state
Persist security risk scores in rollout history (#38363)
2026-08-13 12:04:29 +00:00
stdio-to-uds
…
terminal-detection
Avoid requesting key-release events in Ghostty (#36834)
2026-08-04 03:49:53 +00:00
test-binary-support
…
thread-manager-sample
Fail closed when workload identity initialization fails (#38424)
2026-08-13 19:35:22 +00:00
thread-store
Allow metadata updates without materializing threads (#38413)
2026-08-13 18:12:27 +00:00
tools
Include Node REPL policy in turn metadata (#38241)
2026-08-12 19:37:51 +00:00
tui
Fail closed when workload identity initialization fails (#38424)
2026-08-13 19:35:22 +00:00
uds
…
utils
Support sandboxed file streaming in exec-server (#38356)
2026-08-13 11:11:26 +00:00
v8-poc
Upgrade Bazel Rust and LLVM dependencies (#34781)
2026-07-22 16:18:08 +00:00
vendor
…
websocket-client
Route exec-server WebSockets through configured proxies (#35056)
2026-07-24 00:16:42 +00:00
windows-sandbox-rs
Allow nested Git repositories in the Windows sandbox (#38080)
2026-08-11 22:22:18 +00:00
workload-identity
Integrate workload identity with Codex authentication (#38188)
2026-08-12 13:27:57 +00:00
.gitignore
…
BUILD.bazel
…
Cargo.lock
Add the Guardian V2 Luna sampler (#38368)
2026-08-13 12:35:56 +00:00
Cargo.toml
Support sandboxed file streaming in exec-server (#38356)
2026-08-13 11:11:26 +00:00
clippy.toml
Enforce centralized SQLite connection creation (#35828)
2026-07-28 20:49:22 +00:00
config.md
…
default.nix
Upgrade Ratatui to 0.30.2 (#35959)
2026-07-29 13:53:15 +00:00
deny.toml
Route gRPC code-mode sessions through the shared HTTP client (#38087)
2026-08-11 23:40:07 +00:00
README.md
…
rust-toolchain.toml
…
rustfmt.toml
…

README.md

Codex CLI

Codex CLI Documentation

Reference in New Issue View Git Blame Copy Permalink