codex

mirror of https://github.com/openai/codex.git synced 2026-11-05 20:10:33 +00:00

Files

T

Dmitriy Kovalenko 526f6099f6 Preserve filesystem authority when loading skills (#59279 )

## Why

Skill discovery and metadata loading used raw filesystem handles with unrestricted reads, and cache keys distinguished filesystems without accounting for captured permissions.

## What changed

- Pass borrowed `EnvironmentAccess` accessors through skill root resolution, discovery, canonicalization, and metadata reads.
- Include captured permissions in skill snapshot and empty remote root cache keys.
- Add fixed-path watches to `EnvironmentAccess`, falling back to live discovery when read restrictions prevent using unsandboxed executor watches.
- Keep user and plugin roots under host filesystem authority independently of the selected repository executor.

## Testing

Extend remote root cache coverage to verify that changing captured permissions triggers a fresh scan and that restricted accessors decline unsandboxed watches.

GitOrigin-RevId: 97d4bfdfcba78a93fc8845773c6397d4364494e3

2026-11-04 01:13:54 +00:00

agent

Expose and persist turn lineage across the app server (#51415 )

2026-10-06 16:56:39 +00:00

agent-message-board

Move agent message board host integration to app-server (#59162 )

2026-11-03 13:38:59 +00:00

connectors

Rename plugin MCP and app extension APIs (#46564 )

2026-09-19 01:45:51 +00:00

extension-api

Allow volatile World State sections to refresh after compaction (#58956 )