mirror of
https://github.com/openai/codex.git
synced 2026-10-24 18:18:41 +00:00
Owen Lin
758ef40f50
- Added an interactive `codex agents` dashboard for searching, starting, opening, renaming, and stopping tasks, with configurable shortcuts. (#39094, #39112, #39114, #39142) - Added `/cd`, `/pwd`, and `/cwd` commands for managing the working directory in TUI sessions. (#38894) - Added `codex queue` for sending messages to existing local or remote sessions. (#39092) - Expanded Vim editing with character replacement and more change motions such as `cw`, `c$`, and `cc`. (#39661) - `codex doctor` now diagnoses endpoint protection, network/proxy failures, desktop app state, and update connectivity. (#38827, #38918, #39060, #39074) - SDK users can now pass exact CLI config overrides and select `max` or `ultra` reasoning effort. (#38817, #39662) ## Bug Fixes - Queued messages now wake idle sessions reliably, resolve duplicate session names more usefully, and preserve pasted or deferred command semantics. (#39034, #39385, #39604) - Resumed and forked threads now restore their active permission profile instead of silently falling back to current defaults. (#39153) - Fixed duplicate sub-agent activity and tightened TUI routing for sub-agent notifications and approvals. (#39049, #39088) - Realtime WebRTC sideband connections now reconnect after unexpected transport loss without dropping pending output. (#39257) - Inline TUI history now remains available in Windows Terminal scrollback. (#39619) - Inactive TUI thread replay buffers are now bounded to prevent excessive retained streamed output. (#39081) ## Documentation - Clarified that external contributions should go through issues and design discussion rather than pull requests. (#39089) - Documented DNS exfiltration risks and trust limitations for secure devcontainers. (#39283) ## Changelog Full Changelog: https://github.com/openai/codex/compare/rust-v0.148.0...rust-v0.149.0 - #38817 Add raw config overrides to the TypeScript SDK @copyberry - #38819 Support metadata staging for reserved thread IDs @copyberry - #38822 Avoid cloning TUI history span content @copyberry - #38823 Avoid allocating per character when decorating hyperlinks @copyberry - #38827 Add endpoint protection checks to `codex doctor` @copyberry - #38830 Isolate external editor buffers from sandbox-writable paths @copyberry - #38837 Share editor keymaps across TUI composer components @copyberry - #38840 Identify Mac mini hosts in remote control handshakes @copyberry - #38893 Restore thread timestamp maxima independently @copyberry - #38894 Add working-directory commands to the TUI @copyberry - #38899 Move requirements policy ownership to execpolicy @copyberry - #38902 Honor per-environment shell variable policies @copyberry - #38907 Edit queued messages with Vim history-up @copyberry - #38913 Stop rendering columns after filling their area @copyberry - #38916 Honor legacy `:project_roots` permission entries @copyberry - #38918 Improve `codex doctor` network diagnostics @copyberry - #38919 Reject obsolete app-server permission profile fields @copyberry - #38921 Compact successful command activity in the TUI @copyberry - #38940 Add experimental app-server project APIs @copyberry - #38941 Prevent Noise auth tokens from reaching child processes @copyberry - #38942 Enforce environment-specific command policies @copyberry - #38947 Stop loading legacy managed config on Windows @copyberry - #38978 Add a configurable skill catalog token budget @copyberry - #38980 Bound Guardian v2 parent compaction context @copyberry - #38987 Include images in Guardian v2 transcripts @copyberry - #38990 Source Guardian v2 defaults from the model catalog @copyberry - #38993 Evaluate recent and character-routed skill selection @copyberry - #38994 Remove the workspace settings gate for apps and plugins @copyberry - #38997 Retry transient Guardian sampling failures @copyberry - #39001 Ignore stale Guardian tool risk scores @copyberry - #39005 Disable Guardian V2 for managed automatic reviewers @copyberry - #39006 Emit API-key turn cost telemetry from app-server @copyberry - #39007 Wait for Guardian score progress in approval tests @copyberry - #39008 Add task context to shadow skill selection @copyberry - #39017 Move MCP policy types into `codex-protocol` @copyberry - #39019 Isolate MCP resource headers during OAuth requests @copyberry - #39020 Restrict Windows IDE pipe client impersonation @copyberry - #39022 Hang soft-break whitespace in the TUI composer @copyberry - #39023 Reduce retained MCP result data in TUI history @copyberry - #39025 Speed up the large diff highlighting test @copyberry - #39026 Use simulated time in the long typing test @copyberry - #39028 Cache the test pet spritesheet encoding @copyberry - #39030 Speed up the in-app resume cwd test @copyberry - #39032 Encapsulate TUI shimmer under the motion module @copyberry - #39033 Bound legacy resume preview scans @copyberry - #39034 Dispatch queued messages written by other processes @copyberry - #39035 Add app-server coverage for Guardian V2 approval routing @copyberry - #39036 Allow config reads to join active app-server read batches @copyberry - #39038 Restore Guardian risk scores across thread lifecycles @copyberry - #39040 Preserve foreign paths in managed network approvals @copyberry - #39043 Enforce managed authentication backend settings @copyberry - #39045 Add managed gates for in-app chat and dictation @copyberry - #39046 Restrict MCP HTTP redirects to the configured origin @copyberry - #39047 Skip plugin hook loading when hooks are disabled @copyberry - #39049 Avoid rendering sub-agent activity twice in the TUI @copyberry - #39050 Prepare the telemetry shutdown worker during initialization @copyberry - #39051 Use installed callable apps for TUI mentions @copyberry - #39055 Add network policy metadata to environment configuration @copyberry - #39056 Verify the pinned zsh manifest in release builds @copyberry - #39057 Rate-limit TUI frames from their actual emission time @copyberry - #39058 Tag Codex Apps protocol discovery metrics @copyberry - #39060 Add desktop app diagnostics to `codex doctor` @copyberry - #39061 Avoid rerendering streamed code fences @copyberry - #39063 Render only visible rows in the transcript pager @copyberry - #39064 Restrict queued-message editing to its dedicated binding @copyberry - #39065 Limit terminal hyperlink layout to the visible viewport @copyberry - #39067 Add desktop security enforcement diagnostics @copyberry - #39068 Remove skill model delegation support @copyberry - #39072 Persist generated images through turn executors @copyberry - #39073 Propagate caller metadata to rendezvous connections @copyberry - #39074 Add desktop update diagnostics to `codex doctor` @copyberry - #39075 Avoid redundant terminal row clears @copyberry - #39077 Build filesystem JSON params only for remote TUI sessions @copyberry - #39078 Preserve tracing context for environment resolution @copyberry - #39079 Apply user MCP policy to selected executor plugins @copyberry - #39081 Bound TUI thread replay buffers by delta size @copyberry - #39082 Prompt for project trust in remote TUI workspaces @copyberry - #39083 Harden Windows sandbox provisioning against reparse points @copyberry - #39084 Preserve filesystem permission path conventions @copyberry - #39087 Read plugin authentication state from AuthManager @copyberry - #39088 Harden TUI subagent navigation @copyberry - #39089 Clarify the external contribution policy @copyberry - #39092 Add a command to queue messages for existing sessions @copyberry - #39094 Add an agents overview dashboard to the TUI @copyberry - #39098 Trace exec-server requests from receipt through completion @copyberry - #39100 Avoid redundant terminal size queries during history insertion @copyberry - #39101 Update rmcp to 3.1.2 @copyberry - #39102 Raise the GPT-5.6 maximum context window @copyberry - #39103 Drop capabilities from Linux sandbox processes @copyberry - #39112 Make the agents overview an interactive task dashboard @copyberry - #39113 Surface interactive requests in realtime conversations @copyberry - #39114 Add a dedicated `codex agents` dashboard command @copyberry - #39115 Remove the experimental thread config endpoint @copyberry - #39117 Reject lossy legacy permission projections @copyberry - #39122 Fail closed on deeply nested command wrappers @copyberry - #39131 Validate identifiers in plugin creator workflows @copyberry - #39141 Redact auth tokens from app-server response logs @copyberry - #39142 Add configurable shortcuts for the agents dashboard @copyberry - #39143 Hydrate recommended plugin metadata on selection @copyberry - #39145 Persist active permission profiles in turn context @copyberry - #39147 Centralize persisted resume settings lookup @copyberry - #39152 Update PyPI publish action to v1.14.2 @copyberry - #39153 Restore permission profiles when resuming threads @copyberry - #39154 Box the TUI future to bound CLI stack usage @copyberry - #39155 Prepare Python SDK 0.147.0 stable release @copyberry - #39157 Notify clients when Guardian requires strict review @copyberry - #39159 Require approval for commands with dynamic shell words @copyberry - #39163 Refresh collaboration instructions when their content changes @copyberry - #39165 Prevent marketplace identity spoofing @copyberry - #39174 Skip empty user messages for automatic idle turns @copyberry - #39176 Drop descendant progress updates after remote compaction @copyberry - #39187 Scope MCP app resource reads to their originating call @copyberry - #39192 Preserve MCP resource origins across compaction @copyberry - #39200 Add a symlink-safe reader for sensitive files @copyberry - #39205 Reject symbolic links in memory workspaces @copyberry - #39213 Add a fail-closed Tree-sitter PowerShell lowerer @copyberry - #39214 Prevent custom providers from inheriting ambient auth @copyberry - #39220 Reconnect Guardian sampling WebSockets after auth changes @copyberry - #39221 Skip redirected external-agent migration destinations @copyberry - #39224 Add Guardian v2 approval review metrics @copyberry - #39227 Include node_repl screenshots in Guardian v2 reviews @copyberry - #39235 Decouple Noise relay streams from JSON-RPC processing @copyberry - #39240 Deduplicate remote plugin bundle syncs with shared semaphores @copyberry - #39241 Record Guardian v2 classification metrics @copyberry - #39242 Add safe permission profile intersection @copyberry - #39244 Scope MCP resource reads by connector @copyberry - #39246 Give Guardian classifier connections distinct thread identities @copyberry - #39249 Add exec-server forwarding mode @copyberry - #39256 Deduplicate rollout moves when archiving threads @copyberry - #39257 Reconnect WebRTC Realtime sideband transports @copyberry - #39259 Simplify unified exec output snapshots @copyberry - #39261 Stop TUI chats on misalignment policy violations @copyberry - #39262 Prevent ConPTY DLL loading from the current directory @copyberry - #39264 Improve Guardian v2 risk classification @copyberry - #39266 Require fresh approval beneath denied permission paths @copyberry - #39267 Inject Node REPL policy into Guardian review sessions @copyberry - #39273 Preserve thread names during rollout migration @copyberry - #39274 Add provider-owned authentication recovery @copyberry - #39277 Declare experimental Amazon Bedrock setup APIs @copyberry - #39278 Preserve owner-provided environment configuration @copyberry - #39279 Propagate Windows sandbox ACL update failures @copyberry - #39281 Move shell snapshot scripts into `codex-shell-command` @copyberry - #39283 Document secure devcontainer DNS exfiltration risk @copyberry - #39284 Report network disconnects during approval @copyberry - #39285 Show file destinations in TUI change approvals @copyberry - #39287 Report diagnostic upload failures @copyberry - #39288 Register the async message feature flag @copyberry - #39290 Add Windows sandbox diagnostics to `codex doctor` @copyberry - #39293 Remove app-server's direct reqwest dependency @copyberry - #39294 Increase SQLite log sink batching @copyberry - #39296 Enable MCP tool hooks in Codex sessions @copyberry - #39298 Allow overriding Codex package versions @copyberry - #39299 Restrict agent roles to bounded configuration overrides @copyberry - #39301 Prevent Node REPL auth tokens from reaching child processes @copyberry - #39303 Record Guardian v2 classification token usage @copyberry - #39304 Keep Guardian v2 risk scores in memory @copyberry - #39306 Honor managed config during project discovery @copyberry - #39307 Fail closed on Guardian V2 risk scoring errors @copyberry - #39309 Attribute executor skill invocations to plugins @copyberry - #39311 Bind unified exec approvals to shell executables @copyberry - #39312 Add async delivery metadata to agent messages @copyberry - #39314 Run hooks with the captured session environment @copyberry - #39315 Evict guardian transcript entries in cacheable chunks @copyberry - #39316 Support Edu Plus and Edu Pro account plans @copyberry - #39319 Add the async user message tool @copyberry - #39320 Expand OAuth metadata redirect test coverage @copyberry - #39322 Enforce workspace restrictions for header authentication @copyberry - #39325 Stop migrating Cursor sandbox settings @copyberry - #39331 Route hook MCP calls through current connections @copyberry - #39335 Enforce environment MCP policies @copyberry - #39372 Scope TUI approval requests to their threads @copyberry - #39385 Prefer the most recent session when queueing by name @copyberry - #39402 Remove npm package staging from repo checks @copyberry - #39404 Support FD mounts with older system Bubblewrap versions @copyberry - #39410 Refresh expired AWS credentials for Bedrock @copyberry - #39452 Remove the feature gate for async user messages @copyberry - #39474 Consolidate Guardian extensions into `codex-guardian-v2` @copyberry - #39480 Move shell snapshot tests into shell-command @copyberry - #39493 Make head-tail buffer capacity const generic @copyberry - #39494 Test panoramic Guardian transcript image resizing @copyberry - #39496 Use default timeouts in cyber exec policy tests @copyberry - #39497 Correct normalized dynamic tool coverage across response modes @copyberry - #39501 Use a narrow fixture for the unified image resize test @copyberry - #39505 Test text stringify errors in the code mode runtime @copyberry - #39506 Test code mode notifications without a sync tool call @copyberry - #39509 Test disabled enhanced Node REPL transcript images separately @copyberry - #39510 Track built-in control tool calls in analytics @copyberry - #39514 Use stored item types when materializing turn summaries @copyberry - #39515 Use `mem::take` to drain unified exec output buffers @copyberry - #39520 Isolate automatic plugin Git operations @copyberry - #39523 Persist thread section moves before the first turn @copyberry - #39524 Stop treating Git commands as inherently safe @copyberry - #39584 Add a just recipe for assembling Codex packages @copyberry - #39585 Test plugin sync isolation from repository Git config @copyberry - #39586 Isolate IPC in Bubblewrap sandboxes @copyberry - #39588 Preserve unparsed shell wrappers in exec policy @copyberry - #39590 Harden plugin manifest handling during installation @copyberry - #39592 Prevent SQLx warnings from feeding back into SQLite logs @copyberry - #39594 Raise the MCP tool name limit to 128 bytes @copyberry - #39595 Keep marketplace upgrade state out of config @copyberry - #39597 Separate thread settings from environment configuration @copyberry - #39599 Protect macOS Seatbelt writable root anchors @copyberry - #39601 Keep async user messages on the direct tool surface @copyberry - #39602 Use in-process parsing for PowerShell command classification @copyberry - #39604 Preserve queued TUI input semantics @copyberry - #39605 Hide approved automatic review warnings in the TUI @copyberry - #39606 Enable user namespaces in shared CI setup @copyberry - #39607 Resolve model-provided shells by type @copyberry - #39608 Harden skill installation against unsafe symlinks @copyberry - #39609 Limit Bazel integration test threads on macOS @copyberry - #39611 Harden MCP OAuth fallback credential writes @copyberry - #39614 Prevent `apply_patch` from widening write permissions @copyberry - #39615 Bind MCP OAuth refresh tokens to their issuer @copyberry - #39616 Validate linked worktrees before inheriting project trust @copyberry - #39618 Apply composer editing preferences to TUI text prompts @copyberry - #39619 Preserve inline TUI scrollback in Windows Terminal @copyberry - #39620 Stream executor capability and skill file reads @copyberry - #39623 Prevent protected-path rename bypasses in macOS Seatbelt @copyberry - #39625 Add cwd-relative turn diff paths @copyberry - #39629 Preserve parent repository discovery through sandbox metadata mounts @copyberry - #39630 Retire the untrusted approval policy @copyberry - #39631 Skip sandboxed shell commands in Guardian v2 by default @copyberry - #39632 Expose permission profile resolution in the core API @copyberry - #39635 Show strict review warnings in the TUI @copyberry - #39637 Treat `invalid_grant` refresh failures as permanent @copyberry - #39640 Prompt to unarchive sessions before resuming or forking @copyberry - #39641 Sanitize developer context in full-history agent forks @copyberry - #39645 Enforce managed residency for model providers @copyberry - #39646 Exercise restricted-token sandboxing in cyber policy tests @copyberry - #39649 Resolve bundled Windows helpers through bin junctions @copyberry - #39653 Enforce filesystem permissions when loading AGENTS.md @copyberry - #39655 Make core integration test permissions explicit @copyberry - #39656 Advertise the Desktop app in graphical Linux sessions @copyberry - #39657 Warn when launching the deprecated MCP server @copyberry - #39658 Let Guardian V2 satisfy required model reviews @copyberry - #39659 Harden unsandboxed patch filesystem access @copyberry - #39661 Expand Vim change commands and add character replacement @copyberry - #39662 Add max and ultra reasoning efforts to the SDKs @copyberry - #39663 Restrict plugin migration to home scope @copyberry - #39665 Add macOS Seatbelt filesystem integration tests @copyberry - #39666 Improve no-follow filesystem behavior across platforms @copyberry
595 lines
18 KiB
TOML
595 lines
18 KiB
TOML
[workspace]
|
|
members = [
|
|
"aws-auth",
|
|
"analytics",
|
|
"agent-graph-store",
|
|
"agent-identity",
|
|
"backend-client",
|
|
"bwrap",
|
|
"build-info",
|
|
"ansi-escape",
|
|
"async-utils",
|
|
"app-server",
|
|
"app-server-transport",
|
|
"app-server-daemon",
|
|
"app-server-client",
|
|
"app-server-protocol",
|
|
"app-server-protocol-noop-macros",
|
|
"app-server-test-client",
|
|
"apply-patch",
|
|
"arg0",
|
|
"feedback",
|
|
"features",
|
|
"install-context",
|
|
"codex-backend-openapi-models",
|
|
"code-mode",
|
|
"code-mode-host",
|
|
"code-mode-protocol",
|
|
"code-mode-runtime",
|
|
"codex-home",
|
|
"cloud-config",
|
|
"cloud-tasks",
|
|
"cloud-tasks-client",
|
|
"cloud-tasks-mock-client",
|
|
"cli",
|
|
"collaboration-mode-templates",
|
|
"connectors",
|
|
"config",
|
|
"context-fragments",
|
|
"shell-command",
|
|
"shell-escalation",
|
|
"skills",
|
|
"core",
|
|
"core-api",
|
|
"core-plugins",
|
|
"diagnostics",
|
|
"hooks",
|
|
"history",
|
|
"http-client",
|
|
"secrets",
|
|
"exec",
|
|
"file-system",
|
|
"exec-server-protocol",
|
|
"exec-server",
|
|
"exec-server/tests/support",
|
|
"execpolicy",
|
|
"ext/agent",
|
|
"ext/connectors",
|
|
"ext/extension-api",
|
|
"ext/goal",
|
|
"ext/git-attribution",
|
|
"ext/guardian-v2",
|
|
"ext/image-generation",
|
|
"ext/items",
|
|
"ext/memories",
|
|
"ext/mcp",
|
|
"ext/queue",
|
|
"ext/skills",
|
|
"ext/web-search",
|
|
"external-agent-migration",
|
|
"keyring-store",
|
|
"file-search",
|
|
"file-watcher",
|
|
"linux-sandbox",
|
|
"lmstudio",
|
|
"login",
|
|
"codex-mcp",
|
|
"mcp-server",
|
|
"memories/read",
|
|
"memories/write",
|
|
"model-provider-info",
|
|
"models-manager",
|
|
"network-proxy",
|
|
"ollama",
|
|
"process-hardening",
|
|
"protocol",
|
|
"prompts",
|
|
"rollout",
|
|
"rollout-trace",
|
|
"rmcp-client",
|
|
"responses-api-proxy",
|
|
"response-debug-context",
|
|
"sandboxing",
|
|
"stdio-to-uds",
|
|
"otel",
|
|
"tui",
|
|
"tools",
|
|
"v8-poc",
|
|
"websocket-client",
|
|
"workload-identity",
|
|
"utils/absolute-path",
|
|
"utils/audio",
|
|
"utils/path-uri",
|
|
"utils/cargo-bin",
|
|
"git-utils",
|
|
"utils/cache",
|
|
"utils/image",
|
|
"utils/json-to-toml",
|
|
"utils/home-dir",
|
|
"utils/pty",
|
|
"utils/readiness",
|
|
"utils/rustls-provider",
|
|
"utils/string",
|
|
"utils/cli",
|
|
"utils/elapsed",
|
|
"utils/sandbox-summary",
|
|
"utils/sleep-inhibitor",
|
|
"utils/approval-presets",
|
|
"utils/oss",
|
|
"utils/output-truncation",
|
|
"utils/path-utils",
|
|
"utils/plugins",
|
|
"utils/fuzzy-match",
|
|
"utils/stream-parser",
|
|
"utils/template",
|
|
"codex-client",
|
|
"codex-api",
|
|
"state",
|
|
"terminal-detection",
|
|
"test-binary-support",
|
|
"thread-manager-sample",
|
|
"thread-store",
|
|
"uds",
|
|
"codex-experimental-api-macros",
|
|
"plugin",
|
|
"model-provider",
|
|
]
|
|
resolver = "2"
|
|
|
|
[workspace.package]
|
|
version = "0.149.0"
|
|
# Track the edition for all workspace crates in one place. Individual
|
|
# crates can still override this value, but keeping it here means new
|
|
# crates created with `cargo new -w ...` automatically inherit the 2024
|
|
# edition.
|
|
edition = "2024"
|
|
license = "Apache-2.0"
|
|
|
|
[workspace.dependencies]
|
|
# Internal
|
|
app_test_support = { path = "app-server/tests/common" }
|
|
codex-analytics = { path = "analytics" }
|
|
codex-agent-graph-store = { path = "agent-graph-store" }
|
|
codex-agent-identity = { path = "agent-identity" }
|
|
codex-ansi-escape = { path = "ansi-escape" }
|
|
codex-api = { path = "codex-api" }
|
|
codex-aws-auth = { path = "aws-auth" }
|
|
codex-app-server = { path = "app-server" }
|
|
codex-app-server-transport = { path = "app-server-transport" }
|
|
codex-app-server-daemon = { path = "app-server-daemon" }
|
|
codex-app-server-client = { path = "app-server-client" }
|
|
codex-app-server-protocol = { path = "app-server-protocol" }
|
|
codex-app-server-protocol-noop-macros = { path = "app-server-protocol-noop-macros" }
|
|
codex-app-server-test-client = { path = "app-server-test-client" }
|
|
codex-apply-patch = { path = "apply-patch" }
|
|
codex-arg0 = { path = "arg0" }
|
|
codex-async-utils = { path = "async-utils" }
|
|
codex-backend-client = { path = "backend-client" }
|
|
codex-chatgpt = { path = "chatgpt" }
|
|
codex-client = { path = "codex-client" }
|
|
codex-collaboration-mode-templates = { path = "collaboration-mode-templates" }
|
|
codex-cloud-config = { path = "cloud-config" }
|
|
codex-cloud-tasks-client = { path = "cloud-tasks-client" }
|
|
codex-cloud-tasks-mock-client = { path = "cloud-tasks-mock-client" }
|
|
codex-code-mode = { path = "code-mode" }
|
|
codex-code-mode-protocol = { path = "code-mode-protocol" }
|
|
codex-code-mode-runtime = { path = "code-mode-runtime" }
|
|
codex-home = { path = "codex-home" }
|
|
codex-http-client = { path = "http-client" }
|
|
codex-websocket-client = { path = "websocket-client" }
|
|
codex-config = { path = "config" }
|
|
codex-connectors = { path = "connectors" }
|
|
codex-agent-extension = { path = "ext/agent" }
|
|
codex-connectors-extension = { path = "ext/connectors" }
|
|
codex-context-fragments = { path = "context-fragments" }
|
|
codex-core = { path = "core" }
|
|
codex-core-api = { path = "core-api" }
|
|
codex-core-plugins = { path = "core-plugins" }
|
|
codex-diagnostics = { path = "diagnostics" }
|
|
codex-exec = { path = "exec" }
|
|
codex-file-system = { path = "file-system" }
|
|
codex-exec-server-protocol = { path = "exec-server-protocol" }
|
|
codex-exec-server = { path = "exec-server" }
|
|
codex-exec-server-test-support = { path = "exec-server/tests/support" }
|
|
codex-execpolicy = { path = "execpolicy" }
|
|
codex-extension-api = { path = "ext/extension-api" }
|
|
codex-extension-items = { path = "ext/items" }
|
|
codex-goal-extension = { path = "ext/goal" }
|
|
codex-git-attribution = { path = "ext/git-attribution" }
|
|
codex-guardian-v2 = { path = "ext/guardian-v2" }
|
|
codex-image-generation-extension = { path = "ext/image-generation" }
|
|
codex-external-agent-migration = { path = "external-agent-migration" }
|
|
codex-experimental-api-macros = { path = "codex-experimental-api-macros" }
|
|
codex-features = { path = "features" }
|
|
codex-feedback = { path = "feedback" }
|
|
codex-install-context = { path = "install-context" }
|
|
codex-file-search = { path = "file-search" }
|
|
codex-file-watcher = { path = "file-watcher" }
|
|
codex-git-utils = { path = "git-utils" }
|
|
codex-hooks = { path = "hooks" }
|
|
codex-history = { path = "history" }
|
|
codex-keyring-store = { path = "keyring-store" }
|
|
codex-linux-sandbox = { path = "linux-sandbox" }
|
|
codex-lmstudio = { path = "lmstudio" }
|
|
codex-login = { path = "login" }
|
|
codex-message-history = { path = "message-history" }
|
|
codex-memories-extension = { path = "ext/memories" }
|
|
codex-web-search-extension = { path = "ext/web-search" }
|
|
codex-memories-read = { path = "memories/read" }
|
|
codex-memories-write = { path = "memories/write" }
|
|
codex-mcp = { path = "codex-mcp" }
|
|
codex-mcp-extension = { path = "ext/mcp" }
|
|
codex-mcp-server = { path = "mcp-server" }
|
|
codex-model-provider-info = { path = "model-provider-info" }
|
|
codex-models-manager = { path = "models-manager" }
|
|
codex-network-proxy = { path = "network-proxy" }
|
|
codex-ollama = { path = "ollama" }
|
|
codex-otel = { path = "otel" }
|
|
codex-plugin = { path = "plugin" }
|
|
codex-model-provider = { path = "model-provider" }
|
|
codex-process-hardening = { path = "process-hardening" }
|
|
codex-protocol = { path = "protocol" }
|
|
codex-prompts = { path = "prompts" }
|
|
codex-queue-extension = { path = "ext/queue" }
|
|
codex-responses-api-proxy = { path = "responses-api-proxy" }
|
|
codex-response-debug-context = { path = "response-debug-context" }
|
|
codex-rmcp-client = { path = "rmcp-client" }
|
|
codex-rollout = { path = "rollout" }
|
|
codex-rollout-trace = { path = "rollout-trace" }
|
|
codex-sandboxing = { path = "sandboxing" }
|
|
codex-secrets = { path = "secrets" }
|
|
codex-shell-command = { path = "shell-command" }
|
|
codex-shell-escalation = { path = "shell-escalation" }
|
|
codex-skills-extension = { path = "ext/skills" }
|
|
codex-skills = { path = "skills" }
|
|
codex-state = { path = "state" }
|
|
codex-stdio-to-uds = { path = "stdio-to-uds" }
|
|
codex-terminal-detection = { path = "terminal-detection" }
|
|
codex-test-binary-support = { path = "test-binary-support" }
|
|
codex-thread-store = { path = "thread-store" }
|
|
codex-tools = { path = "tools" }
|
|
codex-tui = { path = "tui" }
|
|
codex-uds = { path = "uds" }
|
|
codex-utils-absolute-path = { path = "utils/absolute-path" }
|
|
codex-utils-approval-presets = { path = "utils/approval-presets" }
|
|
codex-utils-audio = { path = "utils/audio" }
|
|
codex-utils-cache = { path = "utils/cache" }
|
|
codex-utils-cargo-bin = { path = "utils/cargo-bin" }
|
|
codex-utils-cli = { path = "utils/cli" }
|
|
codex-utils-elapsed = { path = "utils/elapsed" }
|
|
codex-utils-fuzzy-match = { path = "utils/fuzzy-match" }
|
|
codex-utils-home-dir = { path = "utils/home-dir" }
|
|
codex-utils-image = { path = "utils/image" }
|
|
codex-utils-json-to-toml = { path = "utils/json-to-toml" }
|
|
codex-utils-oss = { path = "utils/oss" }
|
|
codex-utils-output-truncation = { path = "utils/output-truncation" }
|
|
codex-utils-path = { path = "utils/path-utils" }
|
|
codex-utils-path-uri = { path = "utils/path-uri" }
|
|
codex-utils-plugins = { path = "utils/plugins" }
|
|
codex-utils-pty = { path = "utils/pty" }
|
|
codex-utils-rustls-provider = { path = "utils/rustls-provider" }
|
|
codex-utils-sandbox-summary = { path = "utils/sandbox-summary" }
|
|
codex-utils-sleep-inhibitor = { path = "utils/sleep-inhibitor" }
|
|
codex-utils-stream-parser = { path = "utils/stream-parser" }
|
|
codex-utils-string = { path = "utils/string" }
|
|
codex-utils-template = { path = "utils/template" }
|
|
codex-v8-poc = { path = "v8-poc" }
|
|
codex-workload-identity = { path = "workload-identity" }
|
|
codex-windows-sandbox = { path = "windows-sandbox-rs" }
|
|
core_test_support = { path = "core/tests/common" }
|
|
mcp_test_support = { path = "mcp-server/tests/common" }
|
|
|
|
# External
|
|
age = "0.11.1"
|
|
ansi-to-tui = "8.0.1"
|
|
anyhow = "1"
|
|
arboard = { version = "3", features = ["wayland-data-control"] }
|
|
arc-swap = "1.9.0"
|
|
assert_cmd = "2"
|
|
assert_matches = "1.5.0"
|
|
async-channel = "2.3.1"
|
|
async-io = "2.6.0"
|
|
async-stream = "0.3.6"
|
|
aws-config = "1"
|
|
aws-credential-types = "1"
|
|
aws-sigv4 = "1"
|
|
aws-types = "1"
|
|
axum = { version = "0.8", default-features = false }
|
|
base64 = "0.22.1"
|
|
bitflags = "2.13.1"
|
|
bm25 = "2.3.2"
|
|
bytes = "1.10.1"
|
|
chardetng = "0.1.17"
|
|
chrono = "0.4.43"
|
|
clap = "4"
|
|
clap_complete = "4"
|
|
clatter = { version = "2.2.0", default-features = false, features = [
|
|
"alloc",
|
|
"getrandom",
|
|
"use-25519",
|
|
"use-aes-gcm",
|
|
"use-rust-crypto-ml-kem",
|
|
"use-sha",
|
|
] }
|
|
color-eyre = "0.6.3"
|
|
constant_time_eq = "0.3.1"
|
|
crossbeam-channel = "0.5.15"
|
|
crypto_box = { version = "0.9.1", features = ["seal"] }
|
|
crossterm = "0.29.0"
|
|
ctor = "0.6.3"
|
|
deno_core_icudata = "0.77.0"
|
|
derive_more = "2"
|
|
diffy = "0.4.2"
|
|
dirs = "6"
|
|
divan = "0.1.21"
|
|
dns-lookup = "3.0.1"
|
|
dotenvy = "0.15.7"
|
|
dunce = "1.0.4"
|
|
ed25519-dalek = { version = "2.2.0", features = ["pkcs8"] }
|
|
encoding_rs = "0.8.35"
|
|
eventsource-stream = "0.2.3"
|
|
flate2 = "1.1.8"
|
|
futures = { version = "0.3", default-features = false }
|
|
gethostname = "1.1.0"
|
|
gix = { version = "0.81.0", default-features = false, features = ["sha1"] }
|
|
glob = "0.3"
|
|
globset = "0.4"
|
|
hmac = "0.12.1"
|
|
http = "1.3.1"
|
|
httpdate = "1.0.3"
|
|
iana-time-zone = "0.1.64"
|
|
icu_decimal = "2.1"
|
|
icu_locale_core = "2.1"
|
|
icu_provider = { version = "2.1", features = ["sync"] }
|
|
ignore = "0.4.23"
|
|
image = { version = "^0.25.9", default-features = false }
|
|
include_dir = "0.7.4"
|
|
indexmap = "2.12.0"
|
|
insta = "1.46.3"
|
|
inventory = "0.3.19"
|
|
itertools = "0.14.0"
|
|
jsonptr = { version = "0.7.1", default-features = false }
|
|
jsonwebtoken = "9.3.1"
|
|
keyring = { version = "3.6", default-features = false }
|
|
landlock = "0.4.4"
|
|
lazy_static = "1"
|
|
libc = "0.2.182"
|
|
# Keep SQLx's bundled SQLite on a version containing the WAL-reset corruption fix:
|
|
# https://www.sqlite.org/wal.html#the_wal_reset_bug
|
|
libsqlite3-sys = { version = "0.37", default-features = false }
|
|
log = "0.4"
|
|
lru = "0.18.2"
|
|
maplit = "1.0.2"
|
|
memchr = "2.7.6"
|
|
mime_guess = "2.0.5"
|
|
multimap = "0.10.0"
|
|
notify = "8.2.0"
|
|
nucleo = { git = "https://github.com/helix-editor/nucleo.git", rev = "4253de9faabb4e5c6d81d946a5e35a90f87347ee" }
|
|
once_cell = "1.20.2"
|
|
openssl-sys = "*"
|
|
opentelemetry = "0.31.0"
|
|
opentelemetry-appender-tracing = "0.31.0"
|
|
opentelemetry-otlp = "0.31.0"
|
|
opentelemetry-semantic-conventions = "0.31.0"
|
|
opentelemetry_sdk = "0.31.0"
|
|
os_info = "3.12.0"
|
|
owo-colors = "4.3.0"
|
|
pathdiff = "0.2"
|
|
portable-pty = "0.9.0"
|
|
predicates = "3"
|
|
pretty_assertions = "1.4.1"
|
|
pulldown-cmark = { version = "0.10", default-features = false }
|
|
quick-xml = "0.41.0"
|
|
rand = "0.9"
|
|
ratatui = { version = "0.30.2", default-features = false, features = [
|
|
"crossterm",
|
|
"layout-cache",
|
|
"underline-color",
|
|
] }
|
|
ratatui-macros = "0.7.2"
|
|
rcgen = { version = "0.14.7", default-features = false, features = [
|
|
"aws_lc_rs",
|
|
"pem",
|
|
] }
|
|
regex = "1.12.3"
|
|
regex-lite = "0.1.8"
|
|
reqwest = { version = "0.12", features = ["cookies"] }
|
|
rmcp = { version = "=3.1.2", default-features = false }
|
|
runfiles = { git = "https://github.com/dzbarsky/rules_rust", rev = "b56cbaa8465e74127f1ea216f813cd377295ad81" }
|
|
rustix = { version = "1.1.4", features = ["net"] }
|
|
rustls = { version = "0.23", default-features = false, features = [
|
|
"aws_lc_rs",
|
|
"std",
|
|
] }
|
|
rustls-native-certs = "0.8.3"
|
|
rustls-pki-types = "1.14.0"
|
|
schemars = "0.8.22"
|
|
seccompiler = "0.5.0"
|
|
semver = "1.0"
|
|
sentry = "0.46.0"
|
|
serde = { version = "1", features = ["rc"] }
|
|
serde_ignored = "0.1.14"
|
|
serde_json = "1"
|
|
serde_path_to_error = "0.1.20"
|
|
serde_with = "3.17"
|
|
serde_yaml = "0.9"
|
|
serial_test = "3.2.0"
|
|
sha1 = "0.10.6"
|
|
scopeguard = "1.2.0"
|
|
sha2 = "0.10"
|
|
shlex = "1.3.0"
|
|
similar = "2.7.0"
|
|
symphonia = { version = "0.6.0", default-features = false, features = [
|
|
"isomp4",
|
|
"mkv",
|
|
"mp3",
|
|
"ogg",
|
|
"wav",
|
|
] }
|
|
socket2 = "0.6.1"
|
|
# When bumping sqlx, audit the SQLite constructor deny list in clippy.toml.
|
|
sqlx = { version = "0.9.0", default-features = false, features = [
|
|
"chrono",
|
|
"json",
|
|
"macros",
|
|
"migrate",
|
|
"runtime-tokio",
|
|
"tls-rustls",
|
|
"sqlite-bundled",
|
|
"time",
|
|
"uuid",
|
|
] }
|
|
starlark = { version = "0.14.2", default-features = false }
|
|
strum = "0.27.2"
|
|
strum_macros = "0.28.0"
|
|
supports-color = "3.0.2"
|
|
syntect = "5"
|
|
sys-locale = "0.3.2"
|
|
system-configuration = "0.7"
|
|
tar = { version = "=0.4.45", default-features = false }
|
|
tempfile = "3.23.0"
|
|
test-log = "0.2.19"
|
|
textwrap = "0.16.2"
|
|
thiserror = "2.0.17"
|
|
time = "0.3.47"
|
|
tiny_http = "0.12"
|
|
tokio = "1"
|
|
tokio-rustls = "0.26.4"
|
|
tokio-stream = "0.1.18"
|
|
tokio-test = "0.4"
|
|
tokio-tungstenite = { version = "0.28.0", features = [
|
|
"proxy",
|
|
"rustls-tls-native-roots",
|
|
] }
|
|
tokio-util = "0.7.18"
|
|
toml = "0.9.5"
|
|
toml_edit = "0.24.0"
|
|
tracing = "0.1.44"
|
|
tracing-appender = "0.2.3"
|
|
tracing-opentelemetry = "0.32.0"
|
|
tracing-subscriber = "0.3.22"
|
|
tracing-test = "0.2.5"
|
|
tonic = { version = "0.14.3", default-features = false, features = ["channel", "codegen"] }
|
|
tonic-prost = "0.14.3"
|
|
tree-sitter = "0.25.10"
|
|
tree-sitter-bash = "0.25"
|
|
tree-sitter-powershell = "=0.26.4"
|
|
ts-rs = "11"
|
|
tungstenite = { version = "0.27.0", features = ["deflate", "proxy"] }
|
|
uds_windows = "1.1.0"
|
|
unicode-segmentation = "1.12.0"
|
|
unicode-width = "0.2"
|
|
url = "2"
|
|
urlencoding = "2.1"
|
|
uuid = "1"
|
|
v8 = "=150.4.0"
|
|
vt100 = "0.16.2"
|
|
walkdir = "2.5.0"
|
|
webbrowser = "1.2.2"
|
|
which = "8"
|
|
whoami = "1.6.1"
|
|
wildmatch = "2.6.1"
|
|
winapi-util = "0.1.11"
|
|
zip = "2.4.2"
|
|
zstd = "0.13"
|
|
|
|
wiremock = "0.6"
|
|
zeroize = "1.8.2"
|
|
|
|
[workspace.lints]
|
|
rust = {}
|
|
|
|
[workspace.lints.clippy]
|
|
await_holding_invalid_type = "deny"
|
|
await_holding_lock = "deny"
|
|
disallowed_methods = "deny"
|
|
expect_used = "deny"
|
|
identity_op = "deny"
|
|
manual_clamp = "deny"
|
|
manual_filter = "deny"
|
|
manual_find = "deny"
|
|
manual_flatten = "deny"
|
|
manual_map = "deny"
|
|
manual_memcpy = "deny"
|
|
manual_non_exhaustive = "deny"
|
|
manual_ok_or = "deny"
|
|
manual_range_contains = "deny"
|
|
manual_retain = "deny"
|
|
manual_strip = "deny"
|
|
manual_try_fold = "deny"
|
|
manual_unwrap_or = "deny"
|
|
needless_borrow = "deny"
|
|
needless_borrowed_reference = "deny"
|
|
needless_collect = "deny"
|
|
needless_late_init = "deny"
|
|
needless_option_as_deref = "deny"
|
|
needless_question_mark = "deny"
|
|
needless_update = "deny"
|
|
redundant_clone = "deny"
|
|
redundant_closure = "deny"
|
|
redundant_closure_for_method_calls = "deny"
|
|
redundant_static_lifetimes = "deny"
|
|
trivially_copy_pass_by_ref = "deny"
|
|
uninlined_format_args = "deny"
|
|
unnecessary_filter_map = "deny"
|
|
unnecessary_lazy_evaluations = "deny"
|
|
unnecessary_sort_by = "deny"
|
|
unnecessary_to_owned = "deny"
|
|
unwrap_used = "deny"
|
|
|
|
# cargo-shear cannot see the platform-specific openssl-sys usage, so we
|
|
# silence the false positive here instead of deleting a real dependency.
|
|
[workspace.metadata.cargo-shear]
|
|
ignored = [
|
|
"icu_provider",
|
|
"openssl-sys",
|
|
"codex-v8-poc",
|
|
]
|
|
|
|
[profile.dev]
|
|
# Keep line tables/backtraces while avoiding expensive full variable debug info
|
|
# across local dev builds.
|
|
debug = "limited"
|
|
|
|
[profile.dev-small]
|
|
inherits = "dev"
|
|
opt-level = 0
|
|
debug = "none"
|
|
strip = "symbols"
|
|
|
|
[profile.release]
|
|
lto = "thin"
|
|
debug = "line-tables-only"
|
|
split-debuginfo = "off"
|
|
# Keep release binaries symbolicateable until packaging has archived the
|
|
# sidecar symbols and stripped the binaries.
|
|
strip = false
|
|
|
|
# Balance parallel release code generation against binary size.
|
|
codegen-units = 4
|
|
|
|
[profile.profiling]
|
|
inherits = "release"
|
|
debug = "full"
|
|
lto = false
|
|
strip = false
|
|
|
|
[profile.ci-test]
|
|
# Reduce binary size to reduce disk pressure.
|
|
debug = "limited"
|
|
inherits = "test"
|
|
opt-level = 0
|
|
|
|
[patch.crates-io]
|
|
# Uncomment to debug local changes.
|
|
# ratatui = { path = "../../ratatui" }
|
|
crossterm = { git = "https://github.com/openai-oss-forks/crossterm", rev = "45fecb9508105988f42fe6ff0441783ed3717f92" }
|
|
tokio-tungstenite = { git = "https://github.com/openai-oss-forks/tokio-tungstenite", rev = "0e5b2d73aa18dd9f0a50ee9ff199d5aef7594186" }
|
|
tungstenite = { git = "https://github.com/openai-oss-forks/tungstenite-rs", rev = "4fffad30fe373adbdcffab9545e9e9bf4f2fc19f" }
|
|
|
|
# Uncomment to debug local changes.
|
|
# rmcp = { path = "../../rust-sdk/crates/rmcp" }
|
|
|
|
[patch."ssh://git@github.com/openai-oss-forks/tungstenite-rs.git"]
|
|
tungstenite = { git = "https://github.com/openai-oss-forks/tungstenite-rs", rev = "4fffad30fe373adbdcffab9545e9e9bf4f2fc19f" }
|