viyatb-oai 73abda8bfe Isolate external editor buffers from sandbox-writable paths (#38830) ...

## Why

External editor buffers can contain the current composer text and should not be
placed in directories exposed as writable by a restricted filesystem policy.

## What changed

- Create editor buffer files under a protected `editor` directory, trying the
  configured Codex home, the default Codex home, and a workspace fallback.
- Reject candidates that overlap writable roots or resolve through symbolic
  links, while preserving external editor support for full-disk-write policies.
- Surface an editor error when no protected directory is available.

## Testing

Add coverage for writable roots, aliases, symbolic links, fallback selection,
temporary-directory grants, full-disk-write policies, and editor invocation.

GitOrigin-RevId: df1029d81b327678991ab84ffd1077f0e5855631

2026-08-16 03:14:17 +00:00

..

codex_tui__app__tests__agent_picker_item_name.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__app__tests__backtrack_branch_failure_restores_selected_prompt.snap

Branch conversations when editing earlier TUI prompts (#33201)

2026-07-15 01:36:44 +00:00

codex_tui__app__tests__bypass_hook_trust_startup_warning.snap

add --dangerously-bypass-hook-trust CLI flag (#21768)

2026-05-13 07:13:57 +00:00

codex_tui__app__tests__clear_ui_after_long_transcript_fresh_header_only.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__app__tests__clear_ui_header_fast_status_fast_capable_models.snap

Use model metadata for Fast Mode status (#16949)

2026-04-07 17:55:40 -07:00

codex_tui__app__tests__cyber_model_auto_review_notice.snap

Add safer TUI defaults for cyber models (#37055)

2026-08-05 08:04:15 +00:00

codex_tui__app__tests__external_editor_writable_directory_rejected.snap

Isolate external editor buffers from sandbox-writable paths (#38830)

2026-08-16 03:14:17 +00:00

codex_tui__app__tests__in_app_resume_session_cwd_without_metadata.snap

Let users remember the working directory for resumed sessions (#33950)

2026-07-18 03:58:20 +00:00

codex_tui__app__tests__path_backed_agent_picker.snap

Allow selecting path-backed agents in the TUI picker (#33922)

2026-07-17 23:11:07 +00:00

codex_tui__app__tests__remote_resume_current_cwd_rejected.snap

Let users remember the working directory for resumed sessions (#33950)

2026-07-18 03:58:20 +00:00

codex_tui__app__tests__replace_goal_confirmation.snap

[1 of 3] Support long raw TUI goal objectives (#27508)

2026-06-11 22:26:31 -07:00

codex_tui__app__tests__side_backtrack_rejection_reports_unavailable_message.snap

Prevent Esc from dismissing or rewinding /side (#22710)

2026-05-14 20:51:08 -07:00

codex_tui__app_backtrack__tests__backtrack_unavailable_info_message_snapshot.snap

Hide rewind preview when no user message exists (#19510)

2026-04-27 09:51:12 -07:00

codex_tui__cwd_prompt__tests__cwd_prompt_fork_modal.snap

Let users remember the working directory for resumed sessions (#33950)

2026-07-18 03:58:20 +00:00

codex_tui__cwd_prompt__tests__cwd_prompt_modal.snap

Let users remember the working directory for resumed sessions (#33950)

2026-07-18 03:58:20 +00:00

codex_tui__cwd_prompt__tests__cwd_prompt_persistence_failure.snap

Let users remember the working directory for resumed sessions (#33950)

2026-07-18 03:58:20 +00:00

codex_tui__cwd_prompt__tests__cwd_prompt_remembered_current_modal.snap

Let users remember the working directory for resumed sessions (#33950)

2026-07-18 03:58:20 +00:00

codex_tui__cwd_prompt__tests__cwd_prompt_remote_exec_modal.snap

Let users remember the working directory for resumed sessions (#33950)

2026-07-18 03:58:20 +00:00

codex_tui__debug_config__tests__debug_config_effective_sandbox_modes_with_deny_read.snap

Show effective sandbox modes in /debug-config (#27068)

2026-06-08 17:03:52 -07:00

codex_tui__debug_config__tests__debug_config_output_lists_agents_fields.snap

Remove CSV-backed agent jobs (#34413)

2026-07-20 21:00:17 +00:00

codex_tui__debug_config__tests__debug_config_requirement_sources.snap

Enforce exact values from managed config requirements (#34597)

2026-07-21 19:08:58 +00:00

codex_tui__diff_render__tests__add_details.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__diff_render__tests__ansi16_insert_delete_no_background.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__diff_render__tests__apply_add_block.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__diff_render__tests__apply_delete_block.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__diff_render__tests__apply_multiple_files_block.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__diff_render__tests__apply_update_block_line_numbers_three_digits_text.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__diff_render__tests__apply_update_block_relativizes_path.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__diff_render__tests__apply_update_block_wraps_long_lines_text.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__diff_render__tests__apply_update_block_wraps_long_lines.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__diff_render__tests__apply_update_block.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__diff_render__tests__apply_update_with_rename_block.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__diff_render__tests__blank_context_line.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__diff_render__tests__cpp_module_extension_highlighting.snap

Highlight CUDA files as C++ in the TUI (#34570)

2026-07-21 15:53:33 +00:00

codex_tui__diff_render__tests__diff_gallery_80x24.snap

Expand tabs when rendering TUI diffs (#32461)

2026-07-11 17:47:17 +00:00

codex_tui__diff_render__tests__diff_gallery_94x35.snap

Expand tabs when rendering TUI diffs (#32461)

2026-07-11 17:47:17 +00:00

codex_tui__diff_render__tests__diff_gallery_120x40.snap

Expand tabs when rendering TUI diffs (#32461)

2026-07-11 17:47:17 +00:00

codex_tui__diff_render__tests__single_line_replacement_counts.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__diff_render__tests__syntax_highlighted_insert_wraps_text.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__diff_render__tests__syntax_highlighted_insert_wraps.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__diff_render__tests__theme_scope_background_resolution.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__diff_render__tests__update_details_with_rename.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__diff_render__tests__vertical_ellipsis_between_hunks.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__diff_render__tests__wrap_behavior_insert.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__git_action_directives__tests__code_comment_directive_fallback.snap

Render code comment directives in TUI replay (#26554)

2026-06-05 08:34:34 -07:00

codex_tui__inline_visualization__tests__agent_code_blocks_preserve_visualization_directive_literals.snap

Normalize whitespace-only lines in agent messages (#34772)

2026-07-22 15:34:11 +00:00

codex_tui__inline_visualization__tests__finalized_agent_cell_visualization_link.snap

Normalize whitespace-only lines in agent messages (#34772)

2026-07-22 15:34:11 +00:00

codex_tui__inline_visualization__tests__transcript_overlay_visualization_becomes_available.snap

Remeasure dynamic cells in the transcript overlay (#34232)

2026-07-19 21:34:05 +00:00

codex_tui__inline_visualization__tests__viewer_document_contract.snap

Render inline visualization links in the TUI (#33925)

2026-07-17 23:19:12 +00:00

codex_tui__insert_history__tests__zellij_raw_terminal_wrap_above_viewport.snap

fix(tui): keep raw output above composer in zellij (#24593)

2026-05-26 16:08:45 -03:00

codex_tui__insert_history__tests__zellij_raw_terminal_wrap_overflow_above_viewport.snap

fix(tui): keep raw output above composer in zellij (#24593)

2026-05-26 16:08:45 -03:00

codex_tui__keymap_setup__tests__keymap_action_menu_responsive.snap

Support two-stroke TUI key chords (#36511)

2026-08-01 17:43:03 +00:00

codex_tui__keymap_setup__tests__keymap_action_menu.snap

Support two-stroke TUI key chords (#36511)

2026-08-01 17:43:03 +00:00

codex_tui__keymap_setup__tests__keymap_capture_view.snap

feat(tui): add configurable keymap support (#18593)

2026-04-28 12:52:25 -03:00

codex_tui__keymap_setup__tests__keymap_debug_view_delayed_hint.snap

feat(tui): add keymap debug inspector (#20794)

2026-05-04 14:40:50 -03:00

codex_tui__keymap_setup__tests__keymap_debug_view_initial.snap

feat(tui): add keymap debug inspector (#20794)

2026-05-04 14:40:50 -03:00

codex_tui__keymap_setup__tests__keymap_debug_view_match.snap

feat(tui): add keymap debug inspector (#20794)

2026-05-04 14:40:50 -03:00

codex_tui__keymap_setup__tests__keymap_picker_all_tab_search.snap

Keep side conversations open when switching threads (#35011)

2026-07-23 21:03:40 +00:00

codex_tui__keymap_setup__tests__keymap_picker_custom.snap

Keep side conversations open when switching threads (#35011)

2026-07-23 21:03:40 +00:00

codex_tui__keymap_setup__tests__keymap_picker_fast_mode_enabled.snap

Keep side conversations open when switching threads (#35011)

2026-07-23 21:03:40 +00:00

codex_tui__keymap_setup__tests__keymap_picker_first_actions.snap

Keep side conversations open when switching threads (#35011)

2026-07-23 21:03:40 +00:00

codex_tui__keymap_setup__tests__keymap_picker_global_chord.snap

Support two-stroke TUI key chords (#36511)

2026-08-01 17:43:03 +00:00

codex_tui__keymap_setup__tests__keymap_picker_narrow.snap

Keep side conversations open when switching threads (#35011)

2026-07-23 21:03:40 +00:00

codex_tui__keymap_setup__tests__keymap_picker_wide.snap

Keep side conversations open when switching threads (#35011)

2026-07-23 21:03:40 +00:00

codex_tui__markdown_render__markdown_render_tests__bare_url_with_tilde_keeps_complete_hyperlink.snap

fix(tui): linkify complete bare URLs with tildes (#27088)

2026-06-08 17:02:36 -07:00

codex_tui__markdown_render__markdown_render_tests__list_item_after_code_block_keeps_blank_separator.snap

Preserve TUI markdown list spacing after code blocks (#19706)

2026-04-27 13:40:46 -07:00

codex_tui__markdown_render__markdown_render_tests__markdown_render_complex_snapshot.snap

feat(tui): render markdown tables in app style [1 of 2] (#24489)

2026-05-27 16:18:24 -03:00

codex_tui__markdown_render__markdown_render_tests__markdown_render_file_link_snapshot.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__markdown_render__markdown_render_tests__mixed_url_markdown_wraps_prose_without_splitting_words_snapshot.snap

fix(tui): preserve wrapped prose beside URLs (#21760)

2026-05-09 13:58:10 -03:00

codex_tui__markdown_render__markdown_render_tests__multiline_finding_items_are_separated_snapshot.snap

fix(tui): improve multiline markdown list readability (#24351)

2026-05-25 15:42:28 -03:00

codex_tui__markdown_render__markdown_render_tests__table_keeps_grid_when_only_one_compact_record_fragments_snapshot.snap

feat(tui): render cramped markdown tables as key-value records [2 of 2] (#24636)

2026-05-27 20:27:55 +00:00

codex_tui__markdown_render__markdown_render_tests__table_renders_halfwidth_sound_marks_at_constrained_width_snapshot.snap

Fix TUI layout for halfwidth Japanese sound marks (#35962)

2026-07-29 14:01:31 +00:00

codex_tui__markdown_render__markdown_render_tests__table_renders_key_value_records_when_compact_fragmentation_is_systemic_snapshot.snap

feat(tui): render cramped markdown tables as key-value records [2 of 2] (#24636)

2026-05-27 20:27:55 +00:00

codex_tui__markdown_render__markdown_render_tests__table_renders_records_when_multiple_prose_columns_are_starved_snapshot.snap

feat(tui): render cramped markdown tables as key-value records [2 of 2] (#24636)

2026-05-27 20:27:55 +00:00

codex_tui__markdown_render__markdown_render_tests__table_renders_stacked_key_value_records_when_path_column_becomes_too_narrow_snapshot.snap

feat(tui): render cramped markdown tables as key-value records [2 of 2] (#24636)

2026-05-27 20:27:55 +00:00

codex_tui__markdown_render__markdown_render_tests__table_wraps_file_paths_before_collapsing_narrative_columns_snapshot.snap

feat(tui): render markdown tables in app style [1 of 2] (#24489)

2026-05-27 16:18:24 -03:00

codex_tui__model_migration__tests__model_migration_prompt_gpt5_codex_mini.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__model_migration__tests__model_migration_prompt_gpt5_codex.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__model_migration__tests__model_migration_prompt_gpt5_family.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__model_migration__tests__model_migration_prompt.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__multi_agents__tests__collab_agent_transcript.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__multi_agents__tests__collab_resume_interrupted.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__pager_overlay__tests__static_overlay_snapshot_basic.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__pager_overlay__tests__static_overlay_wraps_long_lines.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__pager_overlay__tests__transcript_overlay_apply_patch_scroll_vt100.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__pager_overlay__tests__transcript_overlay_paginated_history_states.snap

Paginate TUI transcript history (#36950)

2026-08-04 19:12:46 +00:00

codex_tui__pager_overlay__tests__transcript_overlay_prepended_history.snap

Paginate transcript history in the TUI (#36948)

2026-08-04 18:59:32 +00:00

codex_tui__pager_overlay__tests__transcript_overlay_renders_live_tail.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__pager_overlay__tests__transcript_overlay_snapshot_basic.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__resume_picker__tests__resume_picker_db_fallback_transition.snap

Load local session pickers from the state DB first (#36378)

2026-07-31 18:58:32 +00:00

codex_tui__resume_picker__tests__resume_picker_dense_all_auto_hidden_cwd.snap

feat(tui): redesign session picker (#20065)

2026-05-05 13:32:54 -07:00

codex_tui__resume_picker__tests__resume_picker_dense_all_forced_cwd.snap

feat(tui): redesign session picker (#20065)

2026-05-05 13:32:54 -07:00

codex_tui__resume_picker__tests__resume_picker_dense_all.snap

feat(tui): redesign session picker (#20065)

2026-05-05 13:32:54 -07:00

codex_tui__resume_picker__tests__resume_picker_dense_cwd.snap

feat(tui): redesign session picker (#20065)

2026-05-05 13:32:54 -07:00

codex_tui__resume_picker__tests__resume_picker_dense_narrow.snap

feat(tui): redesign session picker (#20065)

2026-05-05 13:32:54 -07:00

codex_tui__resume_picker__tests__resume_picker_dense_no_blank_lines.snap

feat(tui): redesign session picker (#20065)

2026-05-05 13:32:54 -07:00

codex_tui__resume_picker__tests__resume_picker_expanded_session.snap

feat(tui): redesign session picker (#20065)

2026-05-05 13:32:54 -07:00

codex_tui__resume_picker__tests__resume_picker_footer_compact.snap

feat(tui): redesign session picker (#20065)

2026-05-05 13:32:54 -07:00

codex_tui__resume_picker__tests__resume_picker_footer_wide.snap

feat(tui): redesign session picker (#20065)

2026-05-05 13:32:54 -07:00

codex_tui__resume_picker__tests__resume_picker_more_indicators.snap

feat(tui): redesign session picker (#20065)

2026-05-05 13:32:54 -07:00

codex_tui__resume_picker__tests__resume_picker_narrow_session.snap

feat(tui): redesign session picker (#20065)

2026-05-05 13:32:54 -07:00

codex_tui__resume_picker__tests__resume_picker_screen.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__resume_picker__tests__resume_picker_search_error.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__resume_picker__tests__resume_picker_search_line_sort_filter_tabs.snap

Restore archived sessions from the resume picker (#37371)

2026-08-07 03:54:23 +00:00

codex_tui__resume_picker__tests__resume_picker_table.snap

feat(tui): redesign session picker (#20065)

2026-05-05 13:32:54 -07:00

codex_tui__resume_picker__tests__resume_picker_thread_names.snap

Fix resume picker timestamp labels and stability (#16822)

2026-04-06 08:51:13 -07:00

codex_tui__resume_picker__tests__resume_picker_transcript_loading_overlay.snap

feat(tui): redesign session picker (#20065)

2026-05-05 13:32:54 -07:00

codex_tui__startup_draft__tests__startup_draft_fresh_session_transitions.snap

Show resume and fork status during TUI startup (#38788)

2026-08-15 17:30:13 +00:00

codex_tui__startup_draft__tests__startup_draft_full_frames.snap

Show resume and fork status during TUI startup (#38788)

2026-08-15 17:30:13 +00:00

codex_tui__startup_draft__tests__startup_draft_onboarding_transition.snap

Delay the startup composer until first-login onboarding (#38643)

2026-08-14 20:35:11 +00:00

codex_tui__startup_hooks_review__tests__startup_hooks_review_prompt_with_trust_error.snap

Surface TUI config write error causes (#26537)

2026-06-05 08:32:07 -07:00

codex_tui__startup_hooks_review__tests__startup_hooks_review_prompt.snap

Surface TUI config write error causes (#26537)

2026-06-05 08:32:07 -07:00

codex_tui__status_indicator_widget__tests__renders_remapped_interrupt_hint.snap

feat(tui): make turn interruption keybind configurable (#24766)

2026-05-27 18:59:17 +00:00

codex_tui__status_indicator_widget__tests__renders_truncated.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__status_indicator_widget__tests__renders_with_queued_messages.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__status_indicator_widget__tests__renders_with_queued_messages@macos.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__status_indicator_widget__tests__renders_with_working_header.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00

codex_tui__status_indicator_widget__tests__renders_wrapped_details_panama_two_lines.snap

Enforce animations = false for screen readers (#20564)

2026-05-01 09:07:56 -07:00

codex_tui__terminal_hyperlinks__tests__forced_width_hyperlinks_render_wide_and_halfwidth_cells.snap

Preserve hyperlink cell widths during terminal diffing (#35960)

2026-07-29 13:57:46 +00:00

codex_tui__update_prompt__tests__update_prompt_modal.snap

Rename tui_app_server to tui (#16104)

2026-03-28 11:23:07 -06:00