openai/codex
1
0
Fork 0
mirror of https://github.com/openai/codex.git synced 2026-11-12 21:20:34 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
4dd5f1e70b544967b76ebacda08b9ad28a7ab5bb
codex/codex-rs
T
History
trpcic-openai 4dd5f1e70b Limit MCP product attribution to configured REPL-backed calls (#60697) 
## Why

MCP request metadata could forward a client-supplied `product_sku` to unrelated servers and connectors.

## What changed

Remove `product_sku` from turn metadata before forwarding it. For Node REPL-backed servers and the browser connector, populate it from the turn's `apps_mcp_product_sku` configuration, mapping unrecognized values to `other` and omitting empty or missing values.

## Testing

Add regression coverage for configured REPL and browser attribution, unrelated servers and connectors, unrecognized or absent configuration, and spoofed client metadata.

GitOrigin-RevId: bc24062526048ea1c1621099e609053cf167602f
2026-11-11 01:47:52 +00:00
..
.cargo
Ignore the unmaintained pin-utils advisory in dependency audits (#59638)
2026-11-05 11:22:06 +00:00
.config
…
agent-graph-store
Persist subagent relationships before creating child storage (#58129)
2026-10-29 17:25:51 +00:00
agent-identity
Wire shared runtime authentication through threads and API clients (#59177)
2026-11-03 15:02:57 +00:00
agent-message-board-client
Route message-board notifications through agent mailboxes (#59139)
2026-11-03 12:33:26 +00:00
agent-message-board-host
Extract channel notification formatting into PostPreview (#59688)
2026-11-05 16:08:23 +00:00
agent-roles
…
analytics
Allow searching persisted attached threads (#60574)
2026-11-10 11:17:06 +00:00
ansi-escape
…
app-server
Support environment updates in app-server settings APIs (#60655)
2026-11-10 20:35:28 +00:00
app-server-client
Enable model and reasoning effort selection for Cloud conversations (#60651)
2026-11-10 19:52:49 +00:00
app-server-daemon
Honor feature overrides when starting the app-server daemon (#60489)
2026-11-10 01:31:19 +00:00
app-server-protocol
Support environment updates in app-server settings APIs (#60655)
2026-11-10 20:35:28 +00:00
app-server-protocol-noop-macros
…
app-server-test-client
Allow searching persisted attached threads (#60574)
2026-11-10 11:17:06 +00:00
app-server-transport
Use runtime authentication for Analytics requests (#60101)
2026-11-07 10:41:36 +00:00
apply-patch
Support direct Guardian review of patches invoked through exec_command (#58931)
2026-11-02 17:05:56 +00:00
arg0
…
async-utils
…
attachment-store
Use measured durations to budget uploaded audio (#59268)
2026-11-04 00:19:12 +00:00
aws-auth
…
backend-client
Use runtime authentication for Analytics requests (#60101)
2026-11-07 10:41:36 +00:00
build-info
…
bwrap
…
chatgpt
Use runtime authentication for OpenAI MCP and app requests (#59749)
2026-11-05 22:03:29 +00:00
cli
Defer exec-server sandbox preparation to the execution host (#60663)
2026-11-10 21:26:11 +00:00
cloud-client
Enable model and reasoning effort selection for Cloud conversations (#60651)
2026-11-10 19:52:49 +00:00
cloud-config
Add ChatGPT token stdin authentication to exec-server (#59569)
2026-11-05 04:25:19 +00:00
cloud-tasks
Use runtime authentication across backend request paths (#59572)
2026-11-05 05:09:32 +00:00
cloud-tasks-client
Use runtime authentication across backend request paths (#59572)
2026-11-05 05:09:32 +00:00
cloud-tasks-mock-client
…
code-mode
Preserve typed gRPC code-mode session admission errors (#60496)
2026-11-10 02:09:01 +00:00
code-mode-host
Preserve typed gRPC code-mode session admission errors (#60496)
2026-11-10 02:09:01 +00:00
code-mode-protocol
Add a content helper for forwarding MCP blocks in Code Mode (#60665)
2026-11-10 21:28:22 +00:00
code-mode-runtime
Add a content helper for forwarding MCP blocks in Code Mode (#60665)
2026-11-10 21:28:22 +00:00
codex-api
Fragment large Responses WebSocket messages into bounded frames (#60522)
2026-11-10 04:31:32 +00:00
codex-backend-openapi-models
…
codex-client
…
codex-experimental-api-macros
…
codex-home
…
codex-mcp
Refresh Apps tools outside the MCP runtime gate (#60639)
2026-11-10 18:33:49 +00:00
collaboration-mode-templates
…
config
Use trusted Guardian templates for managed policies (#60646)
2026-11-10 19:30:21 +00:00
config-schema
Use hermetic LLVM for Windows MSVC Bazel builds (#60507)
2026-11-10 03:02:25 +00:00
connectors
Support app settings in plugin configuration (#58428)
2026-10-30 20:39:47 +00:00
context-fragments
Ensure side-chat policy reaches the first model request (#60067)
2026-11-07 05:59:44 +00:00
core
Limit MCP product attribution to configured REPL-backed calls (#60697)
2026-11-11 01:47:52 +00:00
core-api
Enforce host-required cyber access programs per thread (#59754)
2026-11-05 22:49:46 +00:00
core-plugin-common
…
core-plugins
Reuse installed Git objects when upgrading marketplaces (#60528)
2026-11-10 05:20:44 +00:00
diagnostics
…
direct-tool-timing
Report auto-review overhead in turn critical-path analytics (#59260)
2026-11-03 23:49:01 +00:00
docs
Run Bazel CI locally without BuildBuddy credentials (#59055)
2026-11-03 04:08:59 +00:00
exec
Allow searching persisted attached threads (#60574)
2026-11-10 11:17:06 +00:00
exec-server
Defer exec-server sandbox preparation to the execution host (#60663)
2026-11-10 21:26:11 +00:00
exec-server-cli
Add ChatGPT token stdin authentication to exec-server (#59569)
2026-11-05 04:25:19 +00:00
exec-server-protocol
…
execpolicy
Add opt-in Unicode canonical matching to exec policy rules (#59535)
2026-11-05 00:55:46 +00:00
ext
Initialize Guardian evidence cursors from thread history state (#60670)
2026-11-10 22:00:08 +00:00
external-agent-migration
Add local-only Claude Code skill migration (#60492)
2026-11-10 01:51:29 +00:00
features
Support incremental tool declarations on GCP (#60617)
2026-11-10 16:13:17 +00:00
feedback
…
file-search
Prioritize filename matches in fuzzy file search (#59709)
2026-11-05 17:34:20 +00:00
file-system
Remove the legacy sandbox policy constructor (#59772)
2026-11-06 00:37:27 +00:00
file-watcher
Avoid periodic wakeups in idle Windows file watchers (#60560)
2026-11-10 08:52:35 +00:00
git-utils
Skip submodule worktree scans when checking repository changes (#60669)
2026-11-10 21:58:49 +00:00
guardian-context
Unify Guardian context preparation across reviewers (#60498)
2026-11-10 02:18:39 +00:00
history
Normalize turn context permissions to a required profile (#59963)
2026-11-06 19:29:06 +00:00
hooks
Use hermetic LLVM for Windows MSVC Bazel builds (#60507)
2026-11-10 03:02:25 +00:00
http-client
Add device-code authorization for gateway OAuth (#59822)
2026-11-06 04:24:04 +00:00
install-context
…
keyring-store
…
linux-sandbox
Add policy-checked TCP upstream tunneling for SOCKS (#60523)
2026-11-10 04:43:24 +00:00
lmstudio
…
login
Bind API workload identity source reuse to session claims (#60433)
2026-11-09 19:26:55 +00:00
memories
Encapsulate thread metadata construction (#60524)
2026-11-10 04:56:49 +00:00
mermaid
…
message-board
Decouple Guardian retrieval from local message-board handles (#60002)
2026-11-06 22:26:03 +00:00
message-board-mcp
Add opt-in MCP discovery for in-memory agent message boards (#58973)
2026-11-02 20:34:35 +00:00
message-history
…
model-provider
Enable model catalog discovery with gateway OAuth (#60414)
2026-11-09 16:37:22 +00:00
model-provider-info
Add device-code authorization for gateway OAuth (#59822)
2026-11-06 04:24:04 +00:00
models-manager
Enable model catalog discovery with gateway OAuth (#60414)
2026-11-09 16:37:22 +00:00
mxc-sandbox
Preserve script quotes in Windows sandbox cmd invocations (#60624)
2026-11-10 16:58:06 +00:00
network-proxy
Add policy-checked TCP upstream tunneling for SOCKS (#60523)
2026-11-10 04:43:24 +00:00
ollama
…
otel
Preserve MCP trace context when tracing is disabled (#60506)
2026-11-10 03:01:14 +00:00
otel-trace-websocket
…
plugin
…
plugin-host
…
process-hardening
…
prompts
Simplify Guardian's post-denial approval guidance (#60391)
2026-11-09 12:54:46 +00:00
protocol
Add a content helper for forwarding MCP blocks in Code Mode (#60665)
2026-11-10 21:28:22 +00:00
realtime-webrtc
…
response-debug-context
Treat inference hook denials as terminal errors (#60511)
2026-11-10 03:21:26 +00:00
responses-api-proxy
…
rmcp-client
Add published OAuth metadata discovery to the RMCP client (#60578)
2026-11-10 11:45:44 +00:00
rollout
Allow searching persisted attached threads (#60574)
2026-11-10 11:17:06 +00:00
rollout-trace
Preserve agent message deliveries in rollout traces (#60673)
2026-11-10 22:22:35 +00:00
runtime-agent-instance
Use runtime authentication for Analytics requests (#60101)
2026-11-07 10:41:36 +00:00
sandboxing
Defer exec-server sandbox preparation to the execution host (#60663)
2026-11-10 21:26:11 +00:00
scripts
…
secrets
Populate the local secrets cache after successful saves (#59520)
2026-11-04 23:46:52 +00:00
shell-command
…
skills
Route broad Codex setup questions through self-knowledge guidance (#59949)
2026-11-06 17:47:31 +00:00
state
Allow searching persisted attached threads (#60574)
2026-11-10 11:17:06 +00:00
stdio-to-uds
…
tcp-tunnel
Add an OpenSSH ProxyCommand mode to codex tcp-tunnel (#60568)
2026-11-10 09:54:57 +00:00
terminal-detection
Recognize Rex terminals and enable Kitty graphics for pets (#58270)
2026-10-30 07:11:56 +00:00
test-binary-support
…
thread-manager-sample
Add optional tool call summaries to the full-screen transcript (#60554)
2026-11-10 08:34:17 +00:00
thread-store
Allow searching persisted attached threads (#60574)
2026-11-10 11:17:06 +00:00
tools
Add support for incremental code mode tool definitions (#60157)
2026-11-07 18:24:25 +00:00
tui
Fit composer footer hints to available terminal space (#60683)
2026-11-10 23:36:04 +00:00
uds
…
user-verification
…
utils
Use hermetic LLVM for Windows MSVC Bazel builds (#60507)
2026-11-10 03:02:25 +00:00
v8-poc
Test V8 inline typed array storage limits (#58385)
2026-10-30 16:35:54 +00:00
vendor
…
voice-host
Stabilize cross-platform tests and directory-change fork permissions (#59369)
2026-11-04 09:51:28 +00:00
websocket-auth
…
websocket-client
Wire shared runtime authentication through threads and API clients (#59177)
2026-11-03 15:02:57 +00:00
windows-sandbox-rs
Preserve script quotes in Windows sandbox cmd invocations (#60624)
2026-11-10 16:58:06 +00:00
windows-sandbox-service
Repair legacy Windows sandbox bin permissions for SYSTEM (#59745)
2026-11-05 21:33:57 +00:00
workload-identity
Support API workload identity authentication (#59275)
2026-11-04 00:52:58 +00:00
worktree
…
.gitignore
…
BUILD.bazel
Ship the standalone executor in release packages (#57837)
2026-10-28 21:09:05 +00:00
Cargo.lock
Add an OpenSSH ProxyCommand mode to codex tcp-tunnel (#60568)
2026-11-10 09:54:57 +00:00
Cargo.toml
Fragment large Responses WebSocket messages into bounded frames (#60522)
2026-11-10 04:31:32 +00:00
clippy.toml
…
config.md
…
default.nix
…
deny.toml
Upgrade bundled SQLite to 3.54 for WAL fixes (#60432)
2026-11-09 19:26:23 +00:00
README.md
…
rust-toolchain.toml
…
rustfmt.toml
…

README.md

Codex CLI

Codex CLI Documentation

Reference in New Issue View Git Blame Copy Permalink