mirror of https://github.com/openai/codex.git synced 2026-10-24 18:18:41 +00:00

Files

T

Jeremy Rose 3bebaea8f2 Isolate IPC in Bubblewrap sandboxes (#39586 )

## What changed

- Pass `--unshare-ipc` when building Bubblewrap arguments for both restricted-filesystem and full-filesystem sandbox paths.
- Update the Bubblewrap argument tests to cover the new namespace flag.

GitOrigin-RevId: 61fb1d5150d09626a3b6ee7a9c6a508108c52e80

2026-08-20 05:03:49 +00:00

.cargo

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

.config

…

agent-graph-store

Honor the configured SQLite home across state consumers (#34994 )

2026-07-23 19:19:35 +00:00

agent-identity

…

analytics

Track built-in control tool calls in analytics (#39510 )

2026-08-19 15:55:38 +00:00

ansi-escape

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

app-server

Persist thread section moves before the first turn (#39523 )

2026-08-19 17:57:40 +00:00

app-server-client

Add async delivery metadata to agent messages (#39312 )

2026-08-18 23:05:52 +00:00

app-server-daemon

…

app-server-protocol

Support Edu Plus and Edu Pro account plans (#39316 )

2026-08-18 23:47:00 +00:00

app-server-protocol-noop-macros

Precompute app-server protocol exports (#36212 )

2026-07-30 19:47:30 +00:00

app-server-test-client

Add experimental app-server project APIs (#38940 )

2026-08-17 04:01:37 +00:00

app-server-transport

Identify Mac mini hosts in remote control handshakes (#38840 )

2026-08-16 06:48:59 +00:00

apply-patch

Reject duplicate resolved paths in apply_patch (#37867 )

2026-08-10 18:44:58 +00:00

arg0

Add a line-ending preservation mode to apply_patch (#37757 )

2026-08-10 01:39:55 +00:00

async-utils

…

aws-auth

…

backend-client

Support Edu Plus and Edu Pro account plans (#39316 )

2026-08-18 23:47:00 +00:00

build-info

Add shared runtime build information (#37929 )

2026-08-11 03:39:02 +00:00

bwrap

Verify bundled bwrap in Bazel builds (#38494 )

2026-08-14 05:03:39 +00:00

chatgpt

Clarify the external contribution policy (#39089 )

2026-08-17 22:37:14 +00:00

cli

Add Windows sandbox diagnostics to codex doctor (#39290 )

2026-08-18 21:56:54 +00:00

cloud-config

Support Edu Plus and Edu Pro account plans (#39316 )

2026-08-18 23:47:00 +00:00

cloud-tasks

Fail closed when workload identity initialization fails (#38424 )

2026-08-13 19:35:22 +00:00

cloud-tasks-client

…

cloud-tasks-mock-client

…

code-mode

Deliver gRPC code-mode notifications without truncation (#38645 )

2026-08-14 20:42:35 +00:00

code-mode-host

Add a health endpoint to the code-mode gRPC listener (#38806 )

2026-08-15 21:26:28 +00:00

code-mode-protocol

Resolve local JSON Schema refs in Code Mode types (#38664 )

2026-08-14 22:40:19 +00:00

code-mode-runtime

Test text stringify errors in the code mode runtime (#39505 )

2026-08-19 15:37:26 +00:00

codex-api

Reconnect WebRTC Realtime sideband transports (#39257 )

2026-08-18 18:41:40 +00:00

codex-backend-openapi-models

Support Edu Plus and Edu Pro account plans (#39316 )

2026-08-18 23:47:00 +00:00

codex-client

Add structured telemetry for response retries (#38452 )

2026-08-13 23:13:37 +00:00

codex-experimental-api-macros

…

codex-home

…

codex-mcp

Enforce environment MCP policies (#39335 )

2026-08-19 01:26:16 +00:00

collaboration-mode-templates

Remove legacy collaboration mode variants (#36990 )

2026-08-04 22:58:02 +00:00

config

Refresh expired AWS credentials for Bedrock (#39410 )

2026-08-19 04:46:58 +00:00

connectors

Honor the configured ChatGPT origin in connector install URLs (#37338 )

2026-08-07 00:23:38 +00:00

context-fragments

Simplify contextual user fragment registration (#36742 )

2026-08-03 11:39:51 +00:00

core

Stop treating Git commands as inherently safe (#39524 )

2026-08-19 18:01:14 +00:00

core-api

Enforce environment MCP policies (#39335 )

2026-08-19 01:26:16 +00:00

core-plugins

Test plugin sync isolation from repository Git config (#39585 )

2026-08-20 04:59:20 +00:00

diagnostics

Add process diagnostics snapshots (#37434 )

2026-08-07 11:30:17 +00:00

docs

Unify turn input submission and routing (#38275 )

2026-08-13 00:00:16 +00:00

exec

Add async delivery metadata to agent messages (#39312 )

2026-08-18 23:05:52 +00:00

exec-server

Report network disconnects during approval (#39284 )

2026-08-18 21:30:45 +00:00

exec-server-protocol

Preserve filesystem permission path conventions (#39084 )

2026-08-17 21:49:30 +00:00

execpolicy

Enforce environment-specific command policies (#38942 )

2026-08-17 04:37:50 +00:00

ext

Consolidate Guardian extensions into codex-guardian-v2 (#39474 )

2026-08-19 11:59:23 +00:00

external-agent-migration

Stop migrating Cursor sandbox settings (#39325 )

2026-08-19 01:06:12 +00:00

features

Remove the feature gate for async user messages (#39452 )

2026-08-19 09:01:23 +00:00

feedback

Report diagnostic upload failures (#39287 )

2026-08-18 21:46:18 +00:00

file-search

Avoid redundant filesystem probes (#36393 )

2026-07-31 21:37:56 +00:00

file-system

Preserve filesystem permission path conventions (#39084 )

2026-08-17 21:49:30 +00:00

file-watcher

…

git-utils

Use the shared environment scrubber in git-utils (#37843 )

2026-08-10 15:50:53 +00:00

history

Preserve MCP resource origins across compaction (#39192 )

2026-08-18 12:37:41 +00:00

hooks

Run hooks with the captured session environment (#39314 )

2026-08-18 23:23:23 +00:00

http-client

Improve codex doctor network diagnostics (#38918 )

2026-08-17 00:09:44 +00:00

install-context

Extend bundled package discovery and expose its version (#37886 )

2026-08-10 22:12:14 +00:00

keyring-store

…

linux-sandbox

Isolate IPC in Bubblewrap sandboxes (#39586 )

2026-08-20 05:03:49 +00:00

lmstudio

…

Enforce workspace restrictions for header authentication (#39322 )

2026-08-19 00:28:52 +00:00

mcp-server

Add a configurable skill catalog token budget (#38978 )

2026-08-17 10:01:59 +00:00

memories

Reject symbolic links in memory workspaces (#39205 )

2026-08-18 14:14:57 +00:00

message-history

…

model-provider

Refresh expired AWS credentials for Bedrock (#39410 )

2026-08-19 04:46:58 +00:00

model-provider-info

Refresh expired AWS credentials for Bedrock (#39410 )

2026-08-19 04:46:58 +00:00

models-manager

Raise the GPT-5.6 maximum context window (#39102 )

2026-08-17 23:08:26 +00:00

network-proxy

Report network disconnects during approval (#39284 )

2026-08-18 21:30:45 +00:00

ollama

Route Ollama through the shared HTTP client (#36078 )

2026-07-30 04:26:36 +00:00

otel

Prepare the telemetry shutdown worker during initialization (#39050 )

2026-08-17 19:06:53 +00:00

plugin

Remove obsolete plugin skill discovery helpers (#37832 )

2026-08-10 14:25:13 +00:00

process-hardening

…

prompts

Preserve filesystem permission path conventions (#39084 )

2026-08-17 21:49:30 +00:00

protocol

Enforce environment MCP policies (#39335 )

2026-08-19 01:26:16 +00:00

response-debug-context

Surface misalignment policy violations as typed errors (#38682 )

2026-08-15 01:34:33 +00:00

responses-api-proxy

…

rmcp-client

Expand OAuth metadata redirect test coverage (#39320 )

2026-08-19 00:05:23 +00:00

rollout

Add async delivery metadata to agent messages (#39312 )

2026-08-18 23:05:52 +00:00

rollout-trace

Add durable user-message queue dispatch (#37204 )

2026-08-06 03:11:42 +00:00

sandboxing

Require fresh approval beneath denied permission paths (#39266 )

2026-08-18 19:17:09 +00:00

scripts

…

secrets

Speed up MCP OAuth credential reads (#37842 )

2026-08-10 15:43:10 +00:00

shell-command

Stop treating Git commands as inherently safe (#39524 )

2026-08-19 18:01:14 +00:00

shell-escalation

Prevent launch context from reaching child processes (#37607 )

2026-08-08 16:58:26 +00:00

skills

Validate identifiers in plugin creator workflows (#39131 )

2026-08-18 03:31:06 +00:00

state

Persist thread section moves before the first turn (#39523 )

2026-08-19 17:57:40 +00:00

stdio-to-uds

…

terminal-detection

Avoid requesting key-release events in Ghostty (#36834 )

2026-08-04 03:49:53 +00:00

test-binary-support

…

thread-manager-sample

Remove the experimental thread config endpoint (#39115 )

2026-08-18 00:45:00 +00:00

thread-store

Use stored item types when materializing turn summaries (#39514 )

2026-08-19 16:20:21 +00:00

tools

Enable parallel tool calls for all model prompts (#38499 )

2026-08-14 05:49:33 +00:00

tui

Refresh expired AWS credentials for Bedrock (#39410 )

2026-08-19 04:46:58 +00:00

uds

…

utils

Prevent ConPTY DLL loading from the current directory (#39262 )

2026-08-18 19:09:33 +00:00

v8-poc

Upgrade Bazel Rust and LLVM dependencies (#34781 )

2026-07-22 16:18:08 +00:00

vendor

…

websocket-client

Route exec-server WebSockets through configured proxies (#35056 )

2026-07-24 00:16:42 +00:00

windows-sandbox-rs

Add Windows sandbox diagnostics to codex doctor (#39290 )

2026-08-18 21:56:54 +00:00

workload-identity

Forward workload identity context during token exchange (#38767 )

2026-08-15 14:31:04 +00:00

.gitignore

…

BUILD.bazel

…

Cargo.lock

Move shell snapshot tests into shell-command (#39480 )

2026-08-19 12:56:08 +00:00

Cargo.toml

Consolidate Guardian extensions into codex-guardian-v2 (#39474 )

2026-08-19 11:59:23 +00:00

clippy.toml

Enforce centralized SQLite connection creation (#35828 )

2026-07-28 20:49:22 +00:00

config.md

…

default.nix

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

deny.toml

Remove app-server's direct reqwest dependency (#39293 )

2026-08-18 22:00:25 +00:00

README.md

…

rust-toolchain.toml

…

rustfmt.toml

…

README.md

Codex CLI

Codex CLI Documentation