openai/codex
1
0
Fork 0
mirror of https://github.com/openai/codex.git synced 2026-09-05 15:18:41 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
54b8f112a3815ead40ebcd50f9c2f2fc786e26fb
codex/codex-rs
History
jif 54b8f112a3 Preserve parent sandbox enforcement for memory consolidation (#32441) 
## What changed

- Pass the parent turn's effective permission profile to the memory consolidation agent, including thread-level permission and legacy sandbox overrides.
- Preserve disabled and externally enforced permission profiles instead of replacing them with a managed sandbox.
- Continue restricting consolidation to the memory root without network access when the parent uses Codex-managed permissions.

## Testing

- Add coverage for disabled, external, and managed parent permission profiles.

GitOrigin-RevId: 9ca3be0e41dc14d858053f6f70e33f4ae7c578e1
2026-07-11 15:20:49 +00:00
..
.cargo
fix: address quick-xml security advisories (#30941)
2026-07-02 10:59:00 -07:00
.config
…
agent-graph-store
[codex] Inject agent graph store into ThreadManager (#29736)
2026-06-24 13:24:10 -07:00
agent-identity
Allow ChatGPT accounts without email (#28991)
2026-06-22 13:19:40 -07:00
analytics
Import enabled plugins from known marketplaces (#31672)
2026-07-09 12:16:15 -04:00
ansi-escape
…
app-server
Preserve parent sandbox enforcement for memory consolidation (#32441)
2026-07-11 15:20:49 +00:00
app-server-client
Remove the personality migration (#32274)
2026-07-10 21:24:03 +00:00
app-server-daemon
feat(remote-control): add daemon pairing command (#29913)
2026-06-24 18:00:06 -07:00
app-server-protocol
Add ordinals to paginated rollout records (#32332)
2026-07-11 04:15:42 +00:00
app-server-test-client
[login] support hosted success redirects (#28745)
2026-07-07 19:48:05 +00:00
app-server-transport
fix(remote-control): avoid server token refresh retry storms (#30201)
2026-06-26 17:34:52 -07:00
apply-patch
path-uri: clarify host-native path conversion (#29501)
2026-06-23 00:02:33 +00:00
arg0
Revert "Conditional codex_home dotenv" (#31276)
2026-07-06 12:17:16 -07:00
async-utils
[codex] Remove async_trait from first-party code (#27475)
2026-06-11 18:16:39 -07:00
aws-auth
…
backend-client
[1/5] [codex] sync managed-layer bundle schema (#31285)
2026-07-07 13:00:44 -07:00
bwrap
build: run buildifier from just fmt (#28125)
2026-06-13 21:43:39 -07:00
chatgpt
[apps] Thread structured icon assets through app list (#29889)
2026-06-24 13:25:44 -07:00
cli
Add ordinals to paginated rollout records (#32332)
2026-07-11 04:15:42 +00:00
cloud-config
refactor: unify external auth resolution (#31421)
2026-07-07 17:05:05 -07:00
cloud-tasks
Migrate direct HTTP consumers to codex-http-client (#31331)
2026-07-07 01:34:36 +00:00
cloud-tasks-client
[codex] Remove async_trait from first-party code (#27475)
2026-06-11 18:16:39 -07:00
cloud-tasks-mock-client
[codex] Remove async_trait from first-party code (#27475)
2026-06-11 18:16:39 -07:00
code-mode
code-mode: fall back to using in process v8 if we fail to resolve external process (#31899)
2026-07-09 14:40:10 -07:00
code-mode-host
fix: update crossbeam-epoch for RUSTSEC-2026-0204 (#31308)
2026-07-06 16:26:56 -07:00
code-mode-protocol
code-mode: retain shared MCP types for deferred tools (#31745)
2026-07-09 08:17:13 -07:00
codex-api
Require prefixes for outbound response item IDs (#32312)
2026-07-11 02:29:14 +00:00
codex-backend-openapi-models
[1/5] [codex] sync managed-layer bundle schema (#31285)
2026-07-07 13:00:44 -07:00
codex-client
Extract shared HTTP transport into codex-http-client (#31323)
2026-07-07 01:12:24 +00:00
codex-experimental-api-macros
…
codex-home
[codex] Bind shell snapshots to retained thread environments (#28421)
2026-06-15 20:10:53 -07:00
codex-mcp
[codex-apps] Filter optional file fields by tool schema (#31686)
2026-07-09 14:32:23 -07:00
collaboration-mode-templates
[prompting] updated plan mode prompt (#29301)
2026-06-21 13:35:25 -07:00
config
Always send reasoning parameters in Responses requests (#32206)
2026-07-10 16:11:58 +00:00
connectors
Add a connector declaration snapshot (#29851)
2026-06-24 23:24:01 +01:00
context-fragments
core: rename metadata -> internal_chat_message_metadata_passthrough (#28968)
2026-06-22 11:11:25 -07:00
core
Add ordinals to paginated rollout records (#32332)
2026-07-11 04:15:42 +00:00
core-api
Use the image generation extension by default (#31596)
2026-07-09 12:25:19 +09:00
core-plugins
Trust hooks from materialized workspace plugins (#32301)
2026-07-11 01:11:37 +00:00
core-skills
Test bounded concurrency in ancestor discovery (#32126)
2026-07-10 10:29:30 +00:00
docs
…
exec
[codex] Preserve reviewer when resuming threads (#30278)
2026-07-09 00:58:28 +00:00
exec-server
Support pending remote environment registration (#32231)
2026-07-10 18:08:35 +00:00
exec-server-protocol
Bound streamed exec-server HTTP response bodies (#32112)
2026-07-10 09:56:03 +00:00
execpolicy
Remove the legacy exec policy engine (#32093)
2026-07-10 09:09:22 +00:00
ext
Require prefixes for outbound response item IDs (#32312)
2026-07-11 02:29:14 +00:00
external-agent-migration
[codex] Preserve skill descriptions outside model context (#29006)
2026-06-19 12:47:53 -07:00
external-agent-sessions
Include terminal errors in turn completion events (#32280)
2026-07-10 22:04:03 +00:00
features
Stabilize the memories feature flag (#31804)
2026-07-09 15:44:59 +01:00
feedback
Improve Responses WebSocket timing telemetry (#32256)
2026-07-10 20:01:47 +00:00
file-search
…
file-system
Propagate workspace roots to exec-server sandboxes (#32214)
2026-07-10 16:55:01 +00:00
file-watcher
…
git-utils
Speed up review branch picker via for-each-ref (#31464)
2026-07-07 20:01:03 -04:00
hooks
trace hook command execution (#31501)
2026-07-07 18:00:35 -07:00
http-client
login: route raw auth flows through HTTP client (#31637)
2026-07-09 14:26:20 -07:00
install-context
Detect Codex installs managed by pnpm (#31503)
2026-07-08 12:17:58 -04:00
keyring-store
feat: add auth-specific encrypted secret namespaces (#27535)
2026-06-12 19:52:49 +00:00
linux-sandbox
fix: attribut network requests to the exact exec on linux (#29697)
2026-07-06 14:51:34 -07:00
lmstudio
…
login
login: route raw auth flows through HTTP client (#31637)
2026-07-09 14:26:20 -07:00
mcp-server
Use the image generation extension by default (#31596)
2026-07-09 12:25:19 +09:00
memories
Preserve parent sandbox enforcement for memory consolidation (#32441)
2026-07-11 15:20:49 +00:00
message-history
…
model-provider
Make GPT-5.6 Sol the default Bedrock model (#32288)
2026-07-10 23:22:56 +00:00
model-provider-info
[codex] Add externally provided Codex auth (#31274)
2026-07-07 17:43:19 -07:00
models-manager
Respect model support for reasoning summaries (#32290)
2026-07-10 23:39:21 +00:00
network-proxy
Remove the network proxy config wrapper (#31767)
2026-07-09 17:33:37 +01:00
ollama
…
otel
Improve Responses WebSocket timing telemetry (#32256)
2026-07-10 20:01:47 +00:00
plugin
Make selected plugin roots URI-native (#28918)
2026-06-23 22:51:19 +01:00
process-hardening
…
prompts
Use model catalog approval messages (#31312)
2026-07-07 10:52:38 -07:00
protocol
Add ordinals to paginated rollout records (#32332)
2026-07-11 04:15:42 +00:00
realtime-webrtc
…
response-debug-context
…
responses-api-proxy
…
rmcp-client
Serialize MCP OAuth credential refreshes (#32229)
2026-07-10 17:59:41 +00:00
rollout
Add ordinals to paginated rollout records (#32332)
2026-07-11 04:15:42 +00:00
rollout-trace
Require prefixes for outbound response item IDs (#32312)
2026-07-11 02:29:14 +00:00
sandboxing
fix(sandboxing): initialize network proxy config inline (#31830)
2026-07-09 19:36:36 +01:00
scripts
…
secrets
feat: add auth-specific encrypted secret namespaces (#27535)
2026-06-12 19:52:49 +00:00
shell-command
Handle mixed-case URLs in Windows command safety (#30879)
2026-07-07 17:50:39 -04:00
shell-escalation
release: publish standalone zsh artifacts (#30114)
2026-06-25 13:56:08 -07:00
skills
Update bundled OpenAI Docs skill for GPT-5.6 (#31842)
2026-07-09 14:01:16 -07:00
state
Improve Responses WebSocket timing telemetry (#32256)
2026-07-10 20:01:47 +00:00
stdio-to-uds
…
terminal-detection
…
test-binary-support
…
thread-manager-sample
Always send reasoning parameters in Responses requests (#32206)
2026-07-10 16:11:58 +00:00
thread-store
Persist paginated items in the local thread store (#32289)
2026-07-10 23:26:58 +00:00
tools
Respect model support for reasoning summaries (#32290)
2026-07-10 23:39:21 +00:00
tui
Stop falling back to older model availability announcements (#32316)
2026-07-11 03:01:18 +00:00
uds
…
utils
path-uri: normalize parent segments in absolute joins (#29903)
2026-06-24 22:33:18 +00:00
v8-poc
build: run buildifier from just fmt (#28125)
2026-06-13 21:43:39 -07:00
vendor
build: run buildifier from just fmt (#28125)
2026-06-13 21:43:39 -07:00
websocket-client
websocket-client: add proxy-aware connector (#31622)
2026-07-08 12:57:27 -07:00
windows-sandbox-rs
[codex] Grant Windows sandbox access to primary runtime (#31574)
2026-07-08 13:22:10 -07:00
.gitignore
…
BUILD.bazel
bench: add e2e benchmark entrypoints (#31428)
2026-07-09 17:31:44 -07:00
Cargo.lock
Improve file blob upload diagnostics (#32305)
2026-07-11 01:46:27 +00:00
Cargo.toml
Remove the legacy exec policy engine (#32093)
2026-07-10 09:09:22 +00:00
clippy.toml
…
config.md
Use canonical links in the moved config notice (#32326)
2026-07-11 03:27:51 +00:00
default.nix
…
deny.toml
build: ratchet direct reqwest dependencies (#31431)
2026-07-09 11:53:18 -07:00
README.md
…
rust-toolchain.toml
…
rustfmt.toml
…

README.md

Codex CLI

Codex CLI Documentation

Reference in New Issue View Git Blame Copy Permalink