mirror of
https://github.com/openai/codex.git
synced 2026-10-21 17:48:44 +00:00
olliem-oai
4a3e829c56
## What changed - Add a dedicated developer policy for Guardian reviews of Node REPL browser and computer-use actions. - Inject the policy once before the first eligible Node REPL approval and retain it when the reviewer session is reused. - Include Node REPL policy eligibility in the reviewer reuse key so sessions are not reused across incompatible model settings. - Keep the approval request itself on the generic planned-action format. ## Testing - Cover first-action injection, reuse after a shell review, repeated Node REPL reviews, and ineligible parent models through the production approval path. GitOrigin-RevId: bfce190ff8599788aa85e388cc6a959d27fb489c
55 lines
1.9 KiB
Python
55 lines
1.9 KiB
Python
load("//:defs.bzl", "codex_rust_crate")
|
|
|
|
codex_rust_crate(
|
|
name = "core",
|
|
compile_data = glob(
|
|
include = ["**"],
|
|
allow_empty = True,
|
|
exclude = [
|
|
"**/* *",
|
|
"BUILD.bazel",
|
|
"Cargo.toml",
|
|
],
|
|
),
|
|
crate_name = "codex_core",
|
|
extra_binaries = [
|
|
"//codex-rs/bwrap:bwrap",
|
|
"//codex-rs/code-mode-host:codex-code-mode-host",
|
|
"//codex-rs/linux-sandbox:codex-linux-sandbox",
|
|
"//codex-rs/rmcp-client:test_stdio_server",
|
|
"//codex-rs/rmcp-client:test_streamable_http_server",
|
|
"//codex-rs/cli:codex",
|
|
"//codex-rs/windows-sandbox-rs:codex-command-runner",
|
|
"//codex-rs/windows-sandbox-rs:codex-windows-sandbox-setup",
|
|
],
|
|
integration_compile_data_extra = ["src/guardian/node_repl_policy.md"],
|
|
integration_test_timeout = "long",
|
|
run_tests_with_wine_exec = True,
|
|
rustc_env = {
|
|
# Keep manifest-root path lookups inside the Bazel execroot for code
|
|
# that relies on env!("CARGO_MANIFEST_DIR").
|
|
"CARGO_MANIFEST_DIR": "codex-rs/core",
|
|
},
|
|
test_data_extra = [
|
|
"config.schema.json",
|
|
] + glob([
|
|
"src/**/snapshots/**",
|
|
]) + [
|
|
# This is a bit of a hack, but empirically, some of our integration tests
|
|
# are relying on the presence of this file as a repo root marker. When
|
|
# running tests locally, this "just works," but in remote execution,
|
|
# the working directory is different and so the file is not found unless it
|
|
# is explicitly added as test data.
|
|
#
|
|
# TODO(aibrahim): Update the tests so that `just bazel-remote-test`
|
|
# succeeds without this workaround.
|
|
"//:AGENTS.md",
|
|
],
|
|
test_shard_counts = {
|
|
"core-all-test": 16,
|
|
"core-unit-tests": 8,
|
|
},
|
|
test_tags = ["no-sandbox"],
|
|
unit_test_timeout = "long",
|
|
)
|