codex

mirror of https://github.com/openai/codex.git synced 2026-11-12 21:20:34 +00:00

Files

T

felixxia-oai ad8ee16a5f Require Guardian review for incompatible compaction checkpoints (#42588 )

## Why

Guardian can reuse an opaque parent compaction only when the checkpoint's
recorded producer hash matches the scoring model. Missing or incompatible
provenance must not allow an asynchronous score or cached approval to omit
compacted context.

## What changed

- Record the producing model's compatibility hash on compaction history items
  and expose the latest checkpoint hash through conversation snapshots.
- In thread-owned context mode, fail closed and require synchronous review when
  checkpoint reuse is enabled but the latest checkpoint is incompatible or has
  unknown provenance.
- Reject incompatible checkpoints in the sampler while preserving the legacy
  context behavior.

## Testing

Add coverage for local, remote, resumed, compacted, and rolled-back histories,
including matching, mismatched, missing, and empty compatibility hashes.

GitOrigin-RevId: 1ce959cb276edc602fd7dfa442133c7fe5e53857

2026-09-03 17:48:15 +00:00

agent

Persist verified user answers in Guardian thread context (#42579 )

2026-09-03 16:41:11 +00:00

apps

…

config

Preserve target-native paths in command approvals (#42577 )

2026-09-03 16:21:10 +00:00

context

Require Guardian review for incompatible compaction checkpoints (#42588 )

2026-09-03 17:48:15 +00:00

context_manager

Require Guardian review for incompatible compaction checkpoints (#42588 )

2026-09-03 17:48:15 +00:00

exec_policy

Apply remote platform semantics to exec safety checks (#42113 )

2026-09-01 18:24:56 +00:00

guardian

Persist verified user answers in Guardian thread context (#42579 )

2026-09-03 16:41:11 +00:00

mcp_tool_call

Honor explicit account selectors for Apps tool calls (#42054 )

2026-09-01 13:29:18 +00:00

plugins

Include originator in plugin measurement analytics (#42445 )

2026-09-03 04:38:26 +00:00

realtime_conversation

Support attaching to existing realtime calls (#39876 )

2026-08-21 06:41:28 +00:00

realtime_history

Record realtime conversation history in Core (#41924 )

2026-08-31 22:38:23 +00:00

sandboxing

Derive sandbox contexts from turn environments (#40551 )

2026-08-25 05:16:45 +00:00

session

Require Guardian review for incompatible compaction checkpoints (#42588 )

2026-09-03 17:48:15 +00:00

state

Add Luna Reserve usage fallback to the TUI (#42372 )

2026-09-02 21:50:51 +00:00

tasks

Honor explicit plugin mentions during MCP startup (#42406 )

2026-09-03 01:33:32 +00:00

tools

Persist verified user answers in Guardian thread context (#42579 )

2026-09-03 16:41:11 +00:00

unified_exec

Expose the Codex version to commands and turn metadata (#42395 )

2026-09-03 00:17:19 +00:00

utils

Count serialized JSON bytes without allocating strings (#40604 )

2026-08-25 13:10:24 +00:00

agent_communication.rs

…

agents_md_manager.rs

Rename host instruction payload to Instructions (#40709 )

2026-08-25 21:20:51 +00:00

agents_md_tests.rs

Honor environment-resolved workspace roots (#40912 )

2026-08-26 16:28:35 +00:00

agents_md.rs

Rename host instruction payload to Instructions (#40709 )

2026-08-25 21:20:51 +00:00

apply_patch_tests.rs

Authorize apply_patch in the executor path context (#42391 )

2026-09-02 23:58:24 +00:00

apply_patch.rs

Authorize apply_patch in the executor path context (#42391 )

2026-09-02 23:58:24 +00:00

attestation.rs

…

client_common_tests.rs

Add per-turn cyber access program selection (#40687 )

2026-08-25 19:54:52 +00:00

client_common.rs

Support durable reasoning configuration updates (#42328 )

2026-09-02 18:52:44 +00:00

client_tests.rs

Surface model provider authentication recovery progress (#41239 )

2026-08-28 01:14:02 +00:00

client.rs

Surface model provider authentication recovery progress (#41239 )

2026-08-28 01:14:02 +00:00

codex_delegate_tests.rs

Distinguish Guardian review threads from subagents (#40221 )

2026-08-23 10:06:57 +00:00

codex_delegate.rs

Bound Git root discovery for metadata enrichment (#42132 )

2026-09-01 20:41:32 +00:00

codex_thread.rs

Require Guardian review for incompatible compaction checkpoints (#42588 )

2026-09-03 17:48:15 +00:00

command_canonicalization_tests.rs

…

command_canonicalization.rs

…

compact_model_fallback.rs

…

compact_remote_history.rs

Report prompt image resizing to the model (#37134 )

2026-08-05 18:19:22 +00:00

compact_remote_metadata_tests.rs

Support standalone named function call outputs (#39782 )

2026-08-20 19:19:41 +00:00

compact_remote_request.rs

Make the update_plan tool opt-in (#41744 )

2026-08-31 00:53:30 +00:00

compact_remote_v2_attempt.rs

Persist response token usage in rollout history (#41912 )

2026-08-31 21:15:38 +00:00

compact_remote_v2_image_budget_tests.rs

Support per-tool MCP output limits (#41421 )

2026-08-28 21:40:23 +00:00

compact_remote_v2_images.rs

Budget retained images during remote compaction (#40280 )

2026-08-23 21:29:11 +00:00

compact_remote_v2.rs

Require Guardian review for incompatible compaction checkpoints (#42588 )

2026-09-03 17:48:15 +00:00

compact_remote.rs

Require Guardian review for incompatible compaction checkpoints (#42588 )

2026-09-03 17:48:15 +00:00

compact_tests.rs

Budget retained images during remote compaction (#40280 )

2026-08-23 21:29:11 +00:00

compact_token_budget.rs

Snapshot resolved settings for each model step (#40651 )

2026-08-25 17:41:22 +00:00

compact.rs

Require Guardian review for incompatible compaction checkpoints (#42588 )

2026-09-03 17:48:15 +00:00

connectors_tests.rs

Honor app link settings for MCP tool approvals (#42056 )

2026-09-01 13:43:27 +00:00

connectors.rs

Honor app link settings for MCP tool approvals (#42056 )

2026-09-01 13:43:27 +00:00

current_time.rs

…

cyber_access_program.rs

Add per-turn cyber access program selection (#40687 )

2026-08-25 19:54:52 +00:00

elicitation_tests.rs

…

elicitation.rs

…

environment_selection.rs

Skip Guardian reviews in Full Access (#42147 )

2026-09-01 22:16:54 +00:00

event_mapping_tests.rs

…

event_mapping.rs

Add structured asynchronous user input requests (#42178 )

2026-09-02 02:09:35 +00:00

exec_env_tests.rs

Add a feature flag to preserve apply_patch line endings (#37758 )

2026-08-10 01:44:30 +00:00

exec_env.rs

Expose the Codex version to commands and turn metadata (#42395 )

2026-09-03 00:17:19 +00:00

exec_policy_tests.rs

Remove selected core test cases (#42066 )

2026-09-01 14:43:27 +00:00

exec_policy_windows_tests.rs

Retire the untrusted approval policy (#39630 )

2026-08-20 07:03:02 +00:00

exec_policy.rs

Apply remote platform semantics to exec safety checks (#42113 )

2026-09-01 18:24:56 +00:00

exec_tests.rs

Add an AbsolutePathBuf conversion for FileSystemPath (#38460 )

2026-08-14 00:18:29 +00:00

exec.rs

Derive sandbox contexts from turn environments (#40551 )

2026-08-25 05:16:45 +00:00

function_tool.rs

…

git_info_tests.rs

Sanitize credentials from Git remote metadata (#40713 )

2026-08-25 21:34:05 +00:00

hook_mcp_executor.rs

Preserve executor context for MCP stop hooks (#40012 )

2026-08-21 21:17:42 +00:00

hook_runtime.rs

Treat bundled cleanup hooks as built-ins (#42110 )

2026-09-01 18:02:27 +00:00

image_preparation_tests.rs

Preserve content kinds during image preparation (#40281 )

2026-08-23 22:23:40 +00:00

image_preparation.rs

Support durable reasoning configuration updates (#42328 )

2026-09-02 18:52:44 +00:00

installation_id.rs

…

lib.rs

Record realtime conversation history in Core (#41924 )

2026-08-31 22:38:23 +00:00

mcp_openai_file.rs

Honor environment-resolved workspace roots (#40912 )

2026-08-26 16:28:35 +00:00

mcp_skill_dependencies.rs

Harden MCP OAuth callback handling (#40691 )

2026-08-25 20:26:23 +00:00

mcp_tool_approval_templates.rs

Organize bundled Rust resources under asset directories (#41477 )

2026-08-29 06:05:28 +00:00

mcp_tool_call_tests.rs

Scope session MCP approvals to app account links (#42133 )

2026-09-01 20:46:17 +00:00

mcp_tool_call.rs

Include app link metadata in MCP approval elicitations (#42134 )

2026-09-01 20:54:25 +00:00

mcp_tool_exposure_test.rs

Reuse MCP handlers across sampling steps (#37273 )

2026-08-06 13:37:07 +00:00

mcp_tool_exposure.rs

Honor app link settings for MCP tool approvals (#42056 )

2026-09-01 13:43:27 +00:00

mcp.rs

Honor managed plugin disablement for executor capabilities (#40640 )

2026-08-25 16:47:13 +00:00

memory_usage.rs

Standardize shell execution on unified exec (#39757 )

2026-08-20 17:46:05 +00:00

mention_syntax.rs

…

network_policy_decision_tests.rs

…

network_policy_decision.rs

…

original_image_detail.rs

…

otel_init.rs

Prepare the telemetry shutdown worker during initialization (#39050 )

2026-08-17 19:06:53 +00:00

prompt_debug.rs

Snapshot resolved settings for each model step (#40651 )

2026-08-25 17:41:22 +00:00

realtime_context_tests.rs

Expose thread originators through the app-server API (#42458 )

2026-09-03 06:02:25 +00:00

realtime_context.rs

Add experimental app-server project APIs (#38940 )

2026-08-17 04:01:37 +00:00

realtime_conversation_tests.rs

Reconnect WebRTC Realtime sideband transports (#39257 )

2026-08-18 18:41:40 +00:00

realtime_conversation.rs

Record realtime conversation history in Core (#41924 )

2026-08-31 22:38:23 +00:00

realtime_history_tests.rs

Add structured asynchronous user input requests (#42178 )

2026-09-02 02:09:35 +00:00

realtime_history.rs

Record realtime conversation history in Core (#41924 )

2026-08-31 22:38:23 +00:00

realtime_prompt.rs

…

responses_metadata.rs

Report turn trigger and source in turn analytics (#42003 )

2026-09-01 07:32:54 +00:00

responses_retry_tests.rs

…

responses_retry.rs

Snapshot resolved settings for each model step (#40651 )

2026-08-25 17:41:22 +00:00

rollout_budget.rs

…

rollout.rs

…

safety_tests.rs

Authorize apply_patch in the executor path context (#42391 )

2026-09-02 23:58:24 +00:00

safety.rs

Authorize apply_patch in the executor path context (#42391 )

2026-09-02 23:58:24 +00:00

sandbox_tags_tests.rs

Report configured sandbox policy consistently (#41933 )

2026-08-31 23:29:20 +00:00

sandbox_tags.rs

Report configured sandbox policy consistently (#41933 )

2026-08-31 23:29:20 +00:00

session_prefix_tests.rs

…

session_prefix.rs

Classify additional generated context fragments (#40275 )

2026-08-23 20:08:40 +00:00

session_rollout_init_error.rs

Preserve sandbox errors during session initialization (#40381 )

2026-08-24 10:56:54 +00:00

session_startup_prewarm.rs

Track window and fork positions in turn metadata (#40987 )

2026-08-26 22:37:59 +00:00

shell_snapshot_tests.rs

Move shell snapshot tests into shell-command (#39480 )

2026-08-19 12:56:08 +00:00

shell_snapshot.rs

Instrument exec-server shell snapshot capture (#40620 )

2026-08-25 14:34:25 +00:00

shell_tests.rs

Resolve model-provided shells by type (#39607 )

2026-08-20 06:03:25 +00:00

shell.rs

Resolve model-provided shells by type (#39607 )

2026-08-20 06:03:25 +00:00

skills.rs

Trust invoked user skills in Guardian reviews (#41006 )

2026-08-27 00:07:26 +00:00

spawn.rs

Support sandboxed file streaming in exec-server (#38356 )

2026-08-13 11:11:26 +00:00

state_db_bridge.rs

…

stream_events_utils_tests.rs

Finalize model-specific tool plans in ToolRouter (#41195 )

2026-08-27 20:01:39 +00:00

stream_events_utils.rs

Support durable reasoning configuration updates (#42328 )

2026-09-02 18:52:44 +00:00

test_support.rs

Negotiate MCP extensions per app-server session (#36910 )

2026-08-04 15:23:43 +00:00

thread_manager_tests.rs

Add structured asynchronous user input requests (#42178 )

2026-09-02 02:09:35 +00:00

thread_manager.rs

Bound Git root discovery for metadata enrichment (#42132 )

2026-09-01 20:41:32 +00:00

thread_rollout_truncation_tests.rs

Preserve harness metadata across conversation history (#38058 )

2026-08-11 19:30:12 +00:00

thread_rollout_truncation.rs

Preserve harness metadata across conversation history (#38058 )

2026-08-11 19:30:12 +00:00

turn_diff_tracker_tests.rs

…

turn_diff_tracker.rs

…

turn_metadata_tests.rs

Expose the Codex version to commands and turn metadata (#42395 )

2026-09-03 00:17:19 +00:00

turn_metadata.rs

Expose the Codex version to commands and turn metadata (#42395 )

2026-09-03 00:17:19 +00:00

turn_timing_tests.rs

Add structured asynchronous user input requests (#42178 )

2026-09-02 02:09:35 +00:00

turn_timing.rs

Support durable reasoning configuration updates (#42328 )

2026-09-02 18:52:44 +00:00

user_shell_command_tests.rs

…

user_shell_command.rs

Snapshot resolved settings for each model step (#40651 )

2026-08-25 17:41:22 +00:00

util_tests.rs

…

util.rs

…

web_search.rs

…

windows_sandbox_read_grants_tests.rs

…

windows_sandbox_read_grants.rs

…

windows_sandbox_tests.rs

…

windows_sandbox.rs

Add experimental Windows sandbox service provisioning (#42353 )

2026-09-02 20:30:45 +00:00

worktree_trust_tests.rs

Validate linked worktrees before inheriting project trust (#39616 )

2026-08-20 06:29:32 +00:00