mirror of https://github.com/openai/codex.git synced 2026-10-18 17:18:52 +00:00

Files

T

Ankush Gupta 4e1a772a7d Let Guardian V2 satisfy required model reviews (#39658 )

## What changed

- Allow the Guardian V2 approval monitor to handle reviews for models that require automatic review.
- Preserve full Guardian review when Guardian V2 is disabled by configuration or managed requirements.
- Cover required-model routing for low- and high-risk actions, plus both Guardian V2 disable paths.

GitOrigin-RevId: d1201cc3dbd7c4a07de633388b14f17ada9feb39

2026-08-20 08:07:06 +00:00

.cargo

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

.config

…

agent-graph-store

…

agent-identity

…

analytics

Track built-in control tool calls in analytics (#39510 )

2026-08-19 15:55:38 +00:00

ansi-escape

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

app-server

Let Guardian V2 satisfy required model reviews (#39658 )

2026-08-20 08:07:06 +00:00

app-server-client

Add async delivery metadata to agent messages (#39312 )

2026-08-18 23:05:52 +00:00

app-server-daemon

…

app-server-protocol

Retire the untrusted approval policy (#39630 )

2026-08-20 07:03:02 +00:00

app-server-protocol-noop-macros

Precompute app-server protocol exports (#36212 )

2026-07-30 19:47:30 +00:00

app-server-test-client

Add experimental app-server project APIs (#38940 )

2026-08-17 04:01:37 +00:00

app-server-transport

Identify Mac mini hosts in remote control handshakes (#38840 )

2026-08-16 06:48:59 +00:00

apply-patch

Reject duplicate resolved paths in apply_patch (#37867 )

2026-08-10 18:44:58 +00:00

arg0

Add a line-ending preservation mode to apply_patch (#37757 )

2026-08-10 01:39:55 +00:00

async-utils

…

aws-auth

…

backend-client

Support Edu Plus and Edu Pro account plans (#39316 )

2026-08-18 23:47:00 +00:00

build-info

Add shared runtime build information (#37929 )

2026-08-11 03:39:02 +00:00

bwrap

Verify bundled bwrap in Bazel builds (#38494 )

2026-08-14 05:03:39 +00:00

chatgpt

Clarify the external contribution policy (#39089 )

2026-08-17 22:37:14 +00:00

cli

Warn when launching the deprecated MCP server (#39657 )

2026-08-20 08:02:39 +00:00

cloud-config

Support Edu Plus and Edu Pro account plans (#39316 )

2026-08-18 23:47:00 +00:00

cloud-tasks

Fail closed when workload identity initialization fails (#38424 )

2026-08-13 19:35:22 +00:00

cloud-tasks-client

…

cloud-tasks-mock-client

…

code-mode

Deliver gRPC code-mode notifications without truncation (#38645 )

2026-08-14 20:42:35 +00:00

code-mode-host

Add a health endpoint to the code-mode gRPC listener (#38806 )

2026-08-15 21:26:28 +00:00

code-mode-protocol

Resolve local JSON Schema refs in Code Mode types (#38664 )

2026-08-14 22:40:19 +00:00

code-mode-runtime

Test text stringify errors in the code mode runtime (#39505 )

2026-08-19 15:37:26 +00:00

codex-api

Reconnect WebRTC Realtime sideband transports (#39257 )

2026-08-18 18:41:40 +00:00

codex-backend-openapi-models

Support Edu Plus and Edu Pro account plans (#39316 )

2026-08-18 23:47:00 +00:00

codex-client

Add structured telemetry for response retries (#38452 )

2026-08-13 23:13:37 +00:00

codex-experimental-api-macros

…

codex-home

…

codex-mcp

Raise the MCP tool name limit to 128 bytes (#39594 )

2026-08-20 05:21:09 +00:00

collaboration-mode-templates

Remove legacy collaboration mode variants (#36990 )

2026-08-04 22:58:02 +00:00

config

Retire the untrusted approval policy (#39630 )

2026-08-20 07:03:02 +00:00

connectors

Honor the configured ChatGPT origin in connector install URLs (#37338 )

2026-08-07 00:23:38 +00:00

context-fragments

Simplify contextual user fragment registration (#36742 )

2026-08-03 11:39:51 +00:00

core

Let Guardian V2 satisfy required model reviews (#39658 )

2026-08-20 08:07:06 +00:00

core-api

Expose permission profile resolution in the core API (#39632 )

2026-08-20 07:11:46 +00:00

core-plugins

Keep marketplace upgrade state out of config (#39595 )

2026-08-20 05:24:56 +00:00

diagnostics

Add process diagnostics snapshots (#37434 )

2026-08-07 11:30:17 +00:00

docs

Unify turn input submission and routing (#38275 )

2026-08-13 00:00:16 +00:00

exec

Add async delivery metadata to agent messages (#39312 )

2026-08-18 23:05:52 +00:00

exec-server

Stream executor capability and skill file reads (#39620 )

2026-08-20 06:43:50 +00:00

exec-server-protocol

Preserve filesystem permission path conventions (#39084 )

2026-08-17 21:49:30 +00:00

execpolicy

Enforce environment-specific command policies (#38942 )

2026-08-17 04:37:50 +00:00

ext

Skip sandboxed shell commands in Guardian v2 by default (#39631 )

2026-08-20 07:08:31 +00:00

external-agent-migration

Stop migrating Cursor sandbox settings (#39325 )

2026-08-19 01:06:12 +00:00

features

Skip sandboxed shell commands in Guardian v2 by default (#39631 )

2026-08-20 07:08:31 +00:00

feedback

Report diagnostic upload failures (#39287 )

2026-08-18 21:46:18 +00:00

file-search

Avoid redundant filesystem probes (#36393 )

2026-07-31 21:37:56 +00:00

file-system

Preserve filesystem permission path conventions (#39084 )

2026-08-17 21:49:30 +00:00

file-watcher

…

git-utils

Preserve parent repository discovery through sandbox metadata mounts (#39629 )

2026-08-20 06:57:00 +00:00

history

Preserve MCP resource origins across compaction (#39192 )

2026-08-18 12:37:41 +00:00

hooks

Run hooks with the captured session environment (#39314 )

2026-08-18 23:23:23 +00:00

http-client

Improve codex doctor network diagnostics (#38918 )

2026-08-17 00:09:44 +00:00

install-context

Extend bundled package discovery and expose its version (#37886 )

2026-08-10 22:12:14 +00:00

keyring-store

…

linux-sandbox

Preserve parent repository discovery through sandbox metadata mounts (#39629 )

2026-08-20 06:57:00 +00:00

lmstudio

…

Enforce managed residency for model providers (#39645 )

2026-08-20 07:33:27 +00:00

mcp-server

Retire the untrusted approval policy (#39630 )

2026-08-20 07:03:02 +00:00

memories

Retire the untrusted approval policy (#39630 )

2026-08-20 07:03:02 +00:00

message-history

…

model-provider

Enforce managed residency for model providers (#39645 )

2026-08-20 07:33:27 +00:00

model-provider-info

Refresh expired AWS credentials for Bedrock (#39410 )

2026-08-19 04:46:58 +00:00

models-manager

Raise the GPT-5.6 maximum context window (#39102 )

2026-08-17 23:08:26 +00:00

network-proxy

Report network disconnects during approval (#39284 )

2026-08-18 21:30:45 +00:00

ollama

Route Ollama through the shared HTTP client (#36078 )

2026-07-30 04:26:36 +00:00

otel

Prepare the telemetry shutdown worker during initialization (#39050 )

2026-08-17 19:06:53 +00:00

plugin

Remove obsolete plugin skill discovery helpers (#37832 )

2026-08-10 14:25:13 +00:00

process-hardening

…

prompts

Retire the untrusted approval policy (#39630 )

2026-08-20 07:03:02 +00:00

protocol

Retire the untrusted approval policy (#39630 )

2026-08-20 07:03:02 +00:00

response-debug-context

Surface misalignment policy violations as typed errors (#38682 )

2026-08-15 01:34:33 +00:00

responses-api-proxy

…

rmcp-client

Bind MCP OAuth refresh tokens to their issuer (#39615 )

2026-08-20 06:25:17 +00:00

rollout

Add async delivery metadata to agent messages (#39312 )

2026-08-18 23:05:52 +00:00

rollout-trace

Add durable user-message queue dispatch (#37204 )

2026-08-06 03:11:42 +00:00

sandboxing

Prevent protected-path rename bypasses in macOS Seatbelt (#39623 )

2026-08-20 06:47:30 +00:00

scripts

…

secrets

Speed up MCP OAuth credential reads (#37842 )

2026-08-10 15:43:10 +00:00

shell-command

Retire the untrusted approval policy (#39630 )

2026-08-20 07:03:02 +00:00

shell-escalation

Prevent launch context from reaching child processes (#37607 )

2026-08-08 16:58:26 +00:00

skills

Harden skill installation against unsafe symlinks (#39608 )

2026-08-20 06:10:03 +00:00

state

Prevent SQLx warnings from feeding back into SQLite logs (#39592 )

2026-08-20 05:16:59 +00:00

stdio-to-uds

…

terminal-detection

Avoid requesting key-release events in Ghostty (#36834 )

2026-08-04 03:49:53 +00:00

test-binary-support

…

thread-manager-sample

Remove the experimental thread config endpoint (#39115 )

2026-08-18 00:45:00 +00:00

thread-store

Use stored item types when materializing turn summaries (#39514 )

2026-08-19 16:20:21 +00:00

tools

Enable parallel tool calls for all model prompts (#38499 )

2026-08-14 05:49:33 +00:00

tui

Advertise the Desktop app in graphical Linux sessions (#39656 )

2026-08-20 07:58:28 +00:00

uds

…

utils

Retire the untrusted approval policy (#39630 )

2026-08-20 07:03:02 +00:00

v8-poc

…

vendor

…

websocket-client

…

windows-sandbox-rs

Resolve bundled Windows helpers through bin junctions (#39649 )

2026-08-20 07:42:18 +00:00

workload-identity

Forward workload identity context during token exchange (#38767 )

2026-08-15 14:31:04 +00:00

.gitignore

…

BUILD.bazel

…

Cargo.lock

Harden MCP OAuth fallback credential writes (#39611 )

2026-08-20 06:17:48 +00:00

Cargo.toml

Consolidate Guardian extensions into codex-guardian-v2 (#39474 )

2026-08-19 11:59:23 +00:00

clippy.toml

Enforce centralized SQLite connection creation (#35828 )

2026-07-28 20:49:22 +00:00

config.md

…

default.nix

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

deny.toml

Remove app-server's direct reqwest dependency (#39293 )

2026-08-18 22:00:25 +00:00

README.md

…

rust-toolchain.toml

…

rustfmt.toml

…

README.md

Codex CLI

Codex CLI Documentation