codex

mirror of https://github.com/openai/codex.git synced 2026-09-08 15:50:34 +00:00

Files

viyatb-oai 73abda8bfe Isolate external editor buffers from sandbox-writable paths (#38830 )

## Why

External editor buffers can contain the current composer text and should not be
placed in directories exposed as writable by a restricted filesystem policy.

## What changed

- Create editor buffer files under a protected `editor` directory, trying the
  configured Codex home, the default Codex home, and a workspace fallback.
- Reject candidates that overlap writable roots or resolve through symbolic
  links, while preserving external editor support for full-disk-write policies.
- Surface an editor error when no protected directory is available.

## Testing

Add coverage for writable roots, aliases, symbolic links, fallback selection,
temporary-directory grants, full-disk-write policies, and editor invocation.

GitOrigin-RevId: df1029d81b327678991ab84ffd1077f0e5855631

2026-08-16 03:14:17 +00:00

app

Isolate external editor buffers from sandbox-writable paths (#38830 )

2026-08-16 03:14:17 +00:00

app_server_session

Avoid paginated resume requests for verified legacy rollouts (#38604 )

2026-08-14 16:33:28 +00:00

bin

…

bottom_pane

Add MCP tool handler support to the hooks engine (#38705 )

2026-08-15 05:53:54 +00:00

chatwidget

Scope TUI app directory state to the active context (#38743 )

2026-08-15 10:57:15 +00:00

exec_cell

Recognize PowerShell Get-Content file reads (#38415 )

2026-08-13 18:30:51 +00:00

external_agent_config_migration

Harden TUI startup input handling (#38641 )

2026-08-14 20:23:49 +00:00

history_cell

Preserve user message styling when wrapping long URLs (#38380 )

2026-08-13 13:52:18 +00:00

ide_context

Prefer the Codex home socket for Unix IDE context (#32302 )

2026-07-11 01:15:48 +00:00

inline_visualization

Protect inline visualization viewers from sandbox writes (#38306 )

2026-08-13 04:08:23 +00:00

keymap

Support two-stroke TUI key chords (#36511 )

2026-08-01 17:43:03 +00:00

keymap_setup

Support two-stroke TUI key chords (#36511 )

2026-08-01 17:43:03 +00:00

markdown_render

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00

notifications

…

onboarding

Harden TUI startup input handling (#38641 )

2026-08-14 20:23:49 +00:00

pets

Route pet asset downloads through the shared HTTP client (#36008 )

2026-07-29 18:40:38 +00:00

public_widgets

…

render

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

resume_picker

Avoid paginated resume requests for verified legacy rollouts (#38604 )

2026-08-14 16:33:28 +00:00

snapshots

Isolate external editor buffers from sandbox-writable paths (#38830 )

2026-08-16 03:14:17 +00:00

status

Add thread usage to TUI status surfaces (#38282 )

2026-08-13 00:34:39 +00:00

streaming

Support content references for inline visualizations (#37341 )

2026-08-07 00:37:50 +00:00

terminal_probe

Harden TUI startup input handling (#38641 )

2026-08-14 20:23:49 +00:00

tui

Keep the composer editable during TUI startup (#38642 )

2026-08-14 20:30:30 +00:00

additional_dirs.rs

Skip missing paths in filesystem sandbox entries (#34598 )

2026-07-21 19:17:18 +00:00

app_backtrack.rs

Show estimated thread usage in /status (#38281 )

2026-08-13 00:30:08 +00:00

app_command.rs

Remove the unused TUI shutdown app command (#34553 )

2026-07-21 14:25:18 +00:00

app_event_sender.rs

Keep interrupted prompts in conversation history (#33198 )

2026-07-15 01:07:29 +00:00

app_event.rs

Scope TUI app directory state to the active context (#38743 )

2026-08-15 10:57:15 +00:00

app_info.rs

Remove first-party type from app metadata (#34844 )

2026-07-22 23:45:45 +00:00

app_server_approval_conversions.rs

…

app_server_session.rs

Reuse the TUI startup account response during bootstrap (#38649 )

2026-08-14 20:59:34 +00:00

app.rs

Normalize CRLF line endings in pasted text (#38704 )

2026-08-15 05:43:44 +00:00

approval_events.rs

…

ascii_animation.rs

…

auto_review_denials.rs

Preserve plugin attribution across command approvals (#35029 )

2026-07-23 23:13:59 +00:00

branch_summary.rs

Reject implicitly discovered bare Git repositories (#36924 )

2026-08-04 16:53:33 +00:00

chatwidget.rs

Scope TUI app directory state to the active context (#38743 )

2026-08-15 10:57:15 +00:00

cli.rs

Configure PSP routing through the feature system (#38056 )

2026-08-11 19:16:15 +00:00

clipboard_copy.rs

…

clipboard_paste.rs

…

collaboration_modes.rs

…

color.rs

…

config_update_tests.rs

…

config_update.rs

…

custom_terminal.rs

Fully repaint inline viewports after history overlap (#37335 )

2026-08-07 00:05:41 +00:00

cwd_prompt.rs

Harden TUI startup input handling (#38641 )

2026-08-14 20:23:49 +00:00

debug_config.rs

Support packaged defaults in config layering (#37810 )

2026-08-10 11:22:55 +00:00

diff_model.rs

…

diff_render.rs

Respect rendered width when adding TUI history (#38075 )

2026-08-11 21:12:23 +00:00

exec_command.rs

…

external_editor_tests.rs

Isolate external editor buffers from sandbox-writable paths (#38830 )

2026-08-16 03:14:17 +00:00

external_editor.rs

Isolate external editor buffers from sandbox-writable paths (#38830 )

2026-08-16 03:14:17 +00:00

file_search.rs

…

frames.rs

…

get_git_diff.rs

Reject implicitly discovered bare Git repositories (#36924 )

2026-08-04 16:53:33 +00:00

git_action_directives.rs

…

goal_display.rs

Show blocked goals as stalled in the TUI (#35886 )

2026-07-29 03:50:00 +00:00

goal_files.rs

…

hooks_rpc.rs

…

ide_context.rs

…

inline_visualization_tests.rs

Protect inline visualization viewers from sandbox writes (#38306 )

2026-08-13 04:08:23 +00:00

inline_visualization.rs

Protect inline visualization viewers from sandbox writes (#38306 )

2026-08-13 04:08:23 +00:00

insert_history.rs

Avoid cloning TUI history span content (#38822 )

2026-08-16 01:31:22 +00:00

key_hint.rs

Support two-stroke TUI key chords (#36511 )

2026-08-01 17:43:03 +00:00

keymap_setup.rs

Support two-stroke TUI key chords (#36511 )

2026-08-01 17:43:03 +00:00

keymap.rs

Support two-stroke TUI key chords (#36511 )

2026-08-01 17:43:03 +00:00

lib.rs

Show resume and fork status during TUI startup (#38788 )

2026-08-15 17:30:13 +00:00

line_truncation_tests.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00

line_truncation.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00

live_wrap.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00

local_chatgpt_auth.rs

…

main.rs

Configure PSP routing through the feature system (#38056 )

2026-08-11 19:16:15 +00:00

managed_new_thread_defaults_tests.rs

…

managed_new_thread_defaults.rs

…

markdown_render_tests.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00

markdown_render.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00

markdown_stream.rs

Use the Markdown collector as the streaming source of truth (#34197 )

2026-07-19 16:50:54 +00:00

markdown_text_merge.rs

…

markdown.rs

Render streamed Markdown incrementally (#34045 )

2026-07-18 18:00:51 +00:00

mention_codec.rs

Improve composer completion target resolution (#32628 )

2026-07-12 19:18:37 +00:00

model_catalog.rs

…

model_migration.rs

Harden TUI startup input handling (#38641 )

2026-08-14 20:23:49 +00:00

motion.rs

…

multi_agents.rs

Preserve sub-agent liveness in the agent picker (#33921 )

2026-07-17 23:07:40 +00:00

named_session_lookup_tests.rs

Harden named session lookup in the TUI (#37157 )

2026-08-05 20:44:03 +00:00

named_session_lookup.rs

Avoid paginated resume requests for verified legacy rollouts (#38604 )

2026-08-14 16:33:28 +00:00

npm_registry.rs

…

oss_selection.rs

Keep the composer editable during TUI startup (#38642 )

2026-08-14 20:30:30 +00:00

pager_overlay.rs

Paginate TUI transcript history (#36950 )

2026-08-04 19:12:46 +00:00

permission_compat.rs

Skip missing paths in filesystem sandbox entries (#34598 )

2026-07-21 19:17:18 +00:00

resize_reflow_cap.rs

…

resume_picker_transcript_preview_tests.rs

Fix resume transcript preview line selection (#38605 )

2026-08-14 16:37:40 +00:00

resume_picker_transcript_preview.rs

Fix resume transcript preview line selection (#38605 )

2026-08-14 16:37:40 +00:00

resume_picker.rs

Harden TUI startup input handling (#38641 )

2026-08-14 20:23:49 +00:00

selection_list.rs

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

service_tier_resolution.rs

…

session_archive_commands_tests.rs

Prefer SQLite names for local session archive commands (#36808 )

2026-08-03 23:05:35 +00:00

session_archive_commands.rs

Fail closed when workload identity initialization fails (#38424 )

2026-08-13 19:35:22 +00:00

session_log.rs

Allow naming sessions with /new and /clear (#34605 )

2026-07-21 20:13:08 +00:00

session_resume.rs

Reuse the TUI startup account response during bootstrap (#38649 )

2026-08-14 20:59:34 +00:00

session_state.rs

…

shimmer.rs

…

skills_helpers.rs

Use app-server skill metadata directly in the TUI (#34368 )

2026-07-20 15:44:37 +00:00

slash_command.rs

Add Markdown conversation export to the TUI (#37358 )

2026-08-07 02:45:35 +00:00

startup_draft_tests.rs

Show resume and fork status during TUI startup (#38788 )

2026-08-15 17:30:13 +00:00

startup_draft.rs

Show resume and fork status during TUI startup (#38788 )

2026-08-15 17:30:13 +00:00

startup_error.rs

…

startup_hooks_review.rs

Add MCP tool handler support to the hooks engine (#38705 )

2026-08-15 05:53:54 +00:00

startup_orchestration.rs

Show resume and fork status during TUI startup (#38788 )

2026-08-15 17:30:13 +00:00

startup_preflight_tests.rs

Show onboarding when Codex home lacks authentication state (#38644 )

2026-08-14 20:38:52 +00:00

startup_preflight.rs

Show onboarding when Codex home lacks authentication state (#38644 )

2026-08-14 20:38:52 +00:00

status_indicator_widget.rs

Support two-stroke TUI key chords (#36511 )

2026-08-01 17:43:03 +00:00

style.rs

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

table_detect.rs

…

terminal_hyperlinks.rs

Avoid allocating per character when decorating hyperlinks (#38823 )

2026-08-16 01:34:51 +00:00

terminal_palette.rs

Preserve TUI input when terminal focus returns (#35649 )

2026-07-27 17:59:06 +00:00

terminal_probe.rs

Harden TUI startup input handling (#38641 )

2026-08-14 20:23:49 +00:00

terminal_title.rs

…

terminal_visualization_instructions.rs

…

test_backend.rs

Show estimated thread usage in /status (#38281 )

2026-08-13 00:30:08 +00:00

test_support.rs

…

text_formatting.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00

theme_picker.rs

…

thread_transcript.rs

Protect inline visualization viewers from sandbox writes (#38306 )

2026-08-13 04:08:23 +00:00

token_usage.rs

…

tooltips.rs

Use the shared HTTP client for announcement tips (#35825 )

2026-07-28 20:12:13 +00:00

transcript_reflow.rs

Improve paginated TUI history loading (#36949 )

2026-08-04 19:05:45 +00:00

tui_startup_tests.rs

Show resume and fork status during TUI startup (#38788 )

2026-08-15 17:30:13 +00:00

tui.rs

Keep the composer editable during TUI startup (#38642 )

2026-08-14 20:30:30 +00:00

ui_consts.rs

…

update_action.rs

…

update_prompt.rs

Harden TUI startup input handling (#38641 )

2026-08-14 20:23:49 +00:00

update_versions.rs

…

updates_cache_tests.rs

…

updates_cache.rs

…

updates.rs

Use the shared HTTP client for TUI network checks (#35821 )

2026-07-28 19:58:25 +00:00

version.rs

…

width.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00

windows_sandbox.rs

…

workspace_command.rs

…

workspace_messages_tests.rs

…

workspace_messages.rs

…

wrapping.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00