openai/codex
1
0
Fork 0
mirror of https://github.com/openai/codex.git synced 2026-10-19 17:28:46 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
51a9edc0837ad64b414549f7b2257c73b6168e08
codex/codex-rs
T
History
chess 51a9edc083 Add desktop security enforcement diagnostics (#39067) 
## What changed

- Add a `desktop.security.enforcement` doctor check for macOS that assesses the app with Gatekeeper and classifies recent Gatekeeper and XProtect events.
- Add the same check on Windows by inspecting recent Microsoft Defender, AppLocker, and Windows App Control events for Codex executables.
- Report blocked or quarantined executions as failures, audit-only or unavailable evidence as warnings, and include actionable remediation while bounding and redacting collected event details.

## Testing

- Add coverage for platform event classification, trusted executable matching, unavailable diagnostics, remediation, and bounded redacted evidence.

GitOrigin-RevId: 792844390cd2cf92d3bc20e6a0973020b4364e51
2026-08-17 20:15:37 +00:00
..
.cargo
Upgrade Ratatui to 0.30.2 (#35959)
2026-07-29 13:53:15 +00:00
.config
…
agent-graph-store
…
agent-identity
…
analytics
Add experimental app-server project APIs (#38940)
2026-08-17 04:01:37 +00:00
ansi-escape
Upgrade Ratatui to 0.30.2 (#35959)
2026-07-29 13:53:15 +00:00
app-server
Skip plugin hook loading when hooks are disabled (#39047)
2026-08-17 18:54:49 +00:00
app-server-client
Prevent unread events from blocking in-process requests (#38381)
2026-08-13 13:57:25 +00:00
app-server-daemon
…
app-server-protocol
Enforce managed authentication backend settings (#39043)
2026-08-17 18:35:54 +00:00
app-server-protocol-noop-macros
Precompute app-server protocol exports (#36212)
2026-07-30 19:47:30 +00:00
app-server-test-client
Add experimental app-server project APIs (#38940)
2026-08-17 04:01:37 +00:00
app-server-transport
Identify Mac mini hosts in remote control handshakes (#38840)
2026-08-16 06:48:59 +00:00
apply-patch
Reject duplicate resolved paths in apply_patch (#37867)
2026-08-10 18:44:58 +00:00
arg0
Add a line-ending preservation mode to apply_patch (#37757)
2026-08-10 01:39:55 +00:00
async-utils
…
aws-auth
…
backend-client
Emit API-key turn cost telemetry from app-server (#39006)
2026-08-17 13:20:58 +00:00
build-info
Add shared runtime build information (#37929)
2026-08-11 03:39:02 +00:00
bwrap
Verify bundled bwrap in Bazel builds (#38494)
2026-08-14 05:03:39 +00:00
chatgpt
Remove the workspace settings gate for apps and plugins (#38994)
2026-08-17 12:26:59 +00:00
cli
Add desktop security enforcement diagnostics (#39067)
2026-08-17 20:15:37 +00:00
cloud-config
Fail closed when workload identity initialization fails (#38424)
2026-08-13 19:35:22 +00:00
cloud-tasks
Fail closed when workload identity initialization fails (#38424)
2026-08-13 19:35:22 +00:00
cloud-tasks-client
…
cloud-tasks-mock-client
…
code-mode
Deliver gRPC code-mode notifications without truncation (#38645)
2026-08-14 20:42:35 +00:00
code-mode-host
Add a health endpoint to the code-mode gRPC listener (#38806)
2026-08-15 21:26:28 +00:00
code-mode-protocol
Resolve local JSON Schema refs in Code Mode types (#38664)
2026-08-14 22:40:19 +00:00
code-mode-runtime
Add per-session code-mode execution limits (#37114)
2026-08-05 16:09:01 +00:00
codex-api
Surface misalignment policy violations as typed errors (#38682)
2026-08-15 01:34:33 +00:00
codex-backend-openapi-models
Support Enterprise automation account plans (#36228)
2026-07-30 21:49:53 +00:00
codex-client
Add structured telemetry for response retries (#38452)
2026-08-13 23:13:37 +00:00
codex-experimental-api-macros
…
codex-home
…
codex-mcp
Tag Codex Apps protocol discovery metrics (#39058)
2026-08-17 19:38:18 +00:00
collaboration-mode-templates
Remove legacy collaboration mode variants (#36990)
2026-08-04 22:58:02 +00:00
config
Enforce managed authentication backend settings (#39043)
2026-08-17 18:35:54 +00:00
connectors
Honor the configured ChatGPT origin in connector install URLs (#37338)
2026-08-07 00:23:38 +00:00
context-fragments
Simplify contextual user fragment registration (#36742)
2026-08-03 11:39:51 +00:00
core
Add network policy metadata to environment configuration (#39055)
2026-08-17 19:22:45 +00:00
core-api
Add network policy metadata to environment configuration (#39055)
2026-08-17 19:22:45 +00:00
core-plugins
Refresh hook runtimes after plugin changes (#38703)
2026-08-15 05:28:53 +00:00
diagnostics
Add process diagnostics snapshots (#37434)
2026-08-07 11:30:17 +00:00
docs
Unify turn input submission and routing (#38275)
2026-08-13 00:00:16 +00:00
exec
Add experimental app-server project APIs (#38940)
2026-08-17 04:01:37 +00:00
exec-server
Prevent Noise auth tokens from reaching child processes (#38941)
2026-08-17 04:17:45 +00:00
exec-server-protocol
Forward executor network policy decisions for auditing (#38670)
2026-08-14 23:42:40 +00:00
execpolicy
Enforce environment-specific command policies (#38942)
2026-08-17 04:37:50 +00:00
ext
Dispatch queued messages written by other processes (#39034)
2026-08-17 17:19:46 +00:00
external-agent-migration
Keep the latest Guardian risk score during concurrent sampling (#38580)
2026-08-14 13:44:51 +00:00
features
Add managed gates for in-app chat and dictation (#39045)
2026-08-17 18:41:50 +00:00
feedback
Limit payload traces in diagnostic logs (#37497)
2026-08-07 19:56:29 +00:00
file-search
Avoid redundant filesystem probes (#36393)
2026-07-31 21:37:56 +00:00
file-system
…
file-watcher
…
git-utils
Use the shared environment scrubber in git-utils (#37843)
2026-08-10 15:50:53 +00:00
history
Store security risk scores as a snapshot (#38567)
2026-08-14 12:16:51 +00:00
hooks
Prevent Noise auth tokens from reaching child processes (#38941)
2026-08-17 04:17:45 +00:00
http-client
Improve codex doctor network diagnostics (#38918)
2026-08-17 00:09:44 +00:00
install-context
Extend bundled package discovery and expose its version (#37886)
2026-08-10 22:12:14 +00:00
keyring-store
…
linux-sandbox
Verify bundled bwrap in Bazel builds (#38494)
2026-08-14 05:03:39 +00:00
lmstudio
…
login
Forward workload identity context during token exchange (#38767)
2026-08-15 14:31:04 +00:00
mcp-server
Add a configurable skill catalog token budget (#38978)
2026-08-17 10:01:59 +00:00
memories
Keep the latest Guardian risk score during concurrent sampling (#38580)
2026-08-14 13:44:51 +00:00
message-history
…
model-provider
Prioritize global models in the Bedrock Runtime catalog (#38617)
2026-08-14 18:01:06 +00:00
model-provider-info
Add an Amazon Bedrock Runtime provider (#38470)
2026-08-14 01:23:59 +00:00
models-manager
Source Guardian v2 defaults from the model catalog (#38990)
2026-08-17 11:44:56 +00:00
network-proxy
Add network policy metadata to environment configuration (#39055)
2026-08-17 19:22:45 +00:00
ollama
Route Ollama through the shared HTTP client (#36078)
2026-07-30 04:26:36 +00:00
otel
Prepare the telemetry shutdown worker during initialization (#39050)
2026-08-17 19:06:53 +00:00
plugin
Remove obsolete plugin skill discovery helpers (#37832)
2026-08-10 14:25:13 +00:00
process-hardening
…
prompts
Remove unused apply_patch prompt fallback (#38291)
2026-08-13 01:52:02 +00:00
protocol
Add network policy metadata to environment configuration (#39055)
2026-08-17 19:22:45 +00:00
response-debug-context
Surface misalignment policy violations as typed errors (#38682)
2026-08-15 01:34:33 +00:00
responses-api-proxy
…
rmcp-client
Restrict MCP HTTP redirects to the configured origin (#39046)
2026-08-17 18:46:12 +00:00
rollout
Add experimental app-server project APIs (#38940)
2026-08-17 04:01:37 +00:00
rollout-trace
Add durable user-message queue dispatch (#37204)
2026-08-06 03:11:42 +00:00
sandboxing
Restrict filesystem helper sandbox access (#38561)
2026-08-14 11:47:12 +00:00
scripts
…
secrets
Speed up MCP OAuth credential reads (#37842)
2026-08-10 15:43:10 +00:00
shell-command
Recognize PowerShell Get-Content file reads (#38415)
2026-08-13 18:30:51 +00:00
shell-escalation
Prevent launch context from reaching child processes (#37607)
2026-08-08 16:58:26 +00:00
skills
Add bounded skill model delegation instructions (#38475)
2026-08-14 01:49:00 +00:00
state
Dispatch queued messages written by other processes (#39034)
2026-08-17 17:19:46 +00:00
stdio-to-uds
…
terminal-detection
Avoid requesting key-release events in Ghostty (#36834)
2026-08-04 03:49:53 +00:00
test-binary-support
…
thread-manager-sample
Add a configurable skill catalog token budget (#38978)
2026-08-17 10:01:59 +00:00
thread-store
Dispatch queued messages written by other processes (#39034)
2026-08-17 17:19:46 +00:00
tools
Enable parallel tool calls for all model prompts (#38499)
2026-08-14 05:49:33 +00:00
tui
Limit terminal hyperlink layout to the visible viewport (#39065)
2026-08-17 20:06:41 +00:00
uds
…
utils
Include node_repl images in Guardian review evidence (#38454)
2026-08-13 23:29:52 +00:00
v8-poc
…
vendor
…
websocket-client
…
windows-sandbox-rs
Prepare the telemetry shutdown worker during initialization (#39050)
2026-08-17 19:06:53 +00:00
workload-identity
Forward workload identity context during token exchange (#38767)
2026-08-15 14:31:04 +00:00
.gitignore
…
BUILD.bazel
…
Cargo.lock
Prepare the telemetry shutdown worker during initialization (#39050)
2026-08-17 19:06:53 +00:00
Cargo.toml
Remove the TUI test dependency on codex-cli (#38746)
2026-08-15 11:01:30 +00:00
clippy.toml
…
config.md
…
default.nix
Upgrade Ratatui to 0.30.2 (#35959)
2026-07-29 13:53:15 +00:00
deny.toml
Route gRPC code-mode sessions through the shared HTTP client (#38087)
2026-08-11 23:40:07 +00:00
README.md
…
rust-toolchain.toml
…
rustfmt.toml
…

README.md

Codex CLI

Codex CLI Documentation

Reference in New Issue View Git Blame Copy Permalink