openai/codex

mirror of https://github.com/openai/codex.git synced 2026-09-10 20:26:47 +00:00

Files

History

iceweasel-oai 772e88c8ae Honor legacy :project_roots permission entries (#38916 )

## Why

Permission profiles written before the rename to `:workspace_roots` can still
contain `:project_roots`. Treating that token as unknown ignores its entries and
can drop filesystem restrictions.

## What changed

- Parse `:project_roots` as an alias for `:workspace_roots`.
- Cover deny rules and read-only subpath carveouts in legacy profiles.

GitOrigin-RevId: 10aafc9e15372d1a8bcc2dbcf3ad7cc987f4e67e

2026-08-17 00:05:54 +00:00

..

…

…

agent-graph-store

…

…

Stop generating accepted-line fingerprints (#38473 )

2026-08-14 01:44:33 +00:00

…

Add storage diagnostics to codex doctor (#38795 )

2026-08-15 18:47:25 +00:00

app-server-client

Prevent unread events from blocking in-process requests (#38381 )

2026-08-13 13:57:25 +00:00

app-server-daemon

…

app-server-protocol

Add MCP tool handler support to the hooks engine (#38705 )

2026-08-15 05:53:54 +00:00

app-server-protocol-noop-macros

…

app-server-test-client

Forward install attempt IDs for remote plugins (#37773 )

2026-08-10 03:28:19 +00:00

app-server-transport

Identify Mac mini hosts in remote control handshakes (#38840 )

2026-08-16 06:48:59 +00:00

Reject duplicate resolved paths in apply_patch (#37867 )

2026-08-10 18:44:58 +00:00

Add a line-ending preservation mode to apply_patch (#37757 )

2026-08-10 01:39:55 +00:00

…

…

Add per-thread usage queries to the backend client (#38270 )

2026-08-12 22:58:46 +00:00

Add shared runtime build information (#37929 )

2026-08-11 03:39:02 +00:00

Verify bundled bwrap in Bazel builds (#38494 )

2026-08-14 05:03:39 +00:00

Fail closed when workload identity initialization fails (#38424 )

2026-08-13 19:35:22 +00:00

Add endpoint protection checks to codex doctor (#38827 )

2026-08-16 02:35:50 +00:00

Fail closed when workload identity initialization fails (#38424 )

2026-08-13 19:35:22 +00:00

Fail closed when workload identity initialization fails (#38424 )

2026-08-13 19:35:22 +00:00

cloud-tasks-client

…

cloud-tasks-mock-client

…

Deliver gRPC code-mode notifications without truncation (#38645 )

2026-08-14 20:42:35 +00:00

Add a health endpoint to the code-mode gRPC listener (#38806 )

2026-08-15 21:26:28 +00:00

code-mode-protocol

Resolve local JSON Schema refs in Code Mode types (#38664 )

2026-08-14 22:40:19 +00:00

code-mode-runtime

…

Surface misalignment policy violations as typed errors (#38682 )

2026-08-15 01:34:33 +00:00

codex-backend-openapi-models

…

Add structured telemetry for response retries (#38452 )

2026-08-13 23:13:37 +00:00

codex-experimental-api-macros

…

…

Add MCP protocol discovery metrics (#38634 )

2026-08-14 19:57:04 +00:00

collaboration-mode-templates

…

Move requirements policy ownership to execpolicy (#38899 )

2026-08-16 20:27:05 +00:00

…

context-fragments

…

Honor legacy :project_roots permission entries (#38916 )

2026-08-17 00:05:54 +00:00

Move permission profile snapshots into the protocol (#38651 )

2026-08-14 21:17:29 +00:00

Refresh hook runtimes after plugin changes (#38703 )

2026-08-15 05:28:53 +00:00

…

Unify turn input submission and routing (#38275 )

2026-08-13 00:00:16 +00:00

Use paginated history for persistent exec threads (#38774 )

2026-08-15 15:24:30 +00:00

Route executor policy audits through log-only telemetry (#38800 )

2026-08-15 19:34:50 +00:00

exec-server-protocol

Forward executor network policy decisions for auditing (#38670 )

2026-08-14 23:42:40 +00:00

Move requirements policy ownership to execpolicy (#38899 )

2026-08-16 20:27:05 +00:00

Make Guardian v2 risk classification configurable (#38628 )

2026-08-14 19:11:41 +00:00

external-agent-migration

Keep the latest Guardian risk score during concurrent sampling (#38580 )

2026-08-14 13:44:51 +00:00

Make Guardian v2 risk classification configurable (#38628 )

2026-08-14 19:11:41 +00:00

Limit payload traces in diagnostic logs (#37497 )

2026-08-07 19:56:29 +00:00

…

…

…

Use the shared environment scrubber in git-utils (#37843 )

2026-08-10 15:50:53 +00:00

Store security risk scores as a snapshot (#38567 )

2026-08-14 12:16:51 +00:00

Add MCP tool handler support to the hooks engine (#38705 )

2026-08-15 05:53:54 +00:00

Add rustls fallback for local MCP HTTP requests (#38436 )

2026-08-13 21:13:07 +00:00

install-context

Extend bundled package discovery and expose its version (#37886 )

2026-08-10 22:12:14 +00:00

…

Verify bundled bwrap in Bazel builds (#38494 )

2026-08-14 05:03:39 +00:00

…

Forward workload identity context during token exchange (#38767 )

2026-08-15 14:31:04 +00:00

Fail closed when workload identity initialization fails (#38424 )

2026-08-13 19:35:22 +00:00

Keep the latest Guardian risk score during concurrent sampling (#38580 )

2026-08-14 13:44:51 +00:00

message-history

…

Prioritize global models in the Bedrock Runtime catalog (#38617 )

2026-08-14 18:01:06 +00:00

model-provider-info

Add an Amazon Bedrock Runtime provider (#38470 )

2026-08-14 01:23:59 +00:00

Source multi-agent instructions from the model catalog (#38619 )

2026-08-14 18:26:20 +00:00

Forward executor network policy decisions for auditing (#38670 )

2026-08-14 23:42:40 +00:00

…

Route network access through the shared approval pipeline (#38299 )

2026-08-13 02:40:49 +00:00

Remove obsolete plugin skill discovery helpers (#37832 )

2026-08-10 14:25:13 +00:00

process-hardening

…

Remove unused apply_patch prompt fallback (#38291 )

2026-08-13 01:52:02 +00:00

Honor per-environment shell variable policies (#38902 )

2026-08-16 20:35:05 +00:00

response-debug-context

Surface misalignment policy violations as typed errors (#38682 )

2026-08-15 01:34:33 +00:00

responses-api-proxy

…

Include node_repl images in Guardian review evidence (#38454 )

2026-08-13 23:29:52 +00:00

Keep the latest Guardian risk score during concurrent sampling (#38580 )

2026-08-14 13:44:51 +00:00

…

Restrict filesystem helper sandbox access (#38561 )

2026-08-14 11:47:12 +00:00

…

Speed up MCP OAuth credential reads (#37842 )

2026-08-10 15:43:10 +00:00

Recognize PowerShell Get-Content file reads (#38415 )

2026-08-13 18:30:51 +00:00

shell-escalation

Prevent launch context from reaching child processes (#37607 )

2026-08-08 16:58:26 +00:00

Add bounded skill model delegation instructions (#38475 )

2026-08-14 01:49:00 +00:00

Restore thread timestamp maxima independently (#38893 )

2026-08-16 19:37:39 +00:00

…

terminal-detection

…

test-binary-support

…

thread-manager-sample

Fail closed when workload identity initialization fails (#38424 )

2026-08-13 19:35:22 +00:00

Support metadata staging for reserved thread IDs (#38819 )

2026-08-16 00:57:28 +00:00

Enable parallel tool calls for all model prompts (#38499 )

2026-08-14 05:49:33 +00:00

Stop rendering columns after filling their area (#38913 )

2026-08-16 23:05:11 +00:00

…

Include node_repl images in Guardian review evidence (#38454 )

2026-08-13 23:29:52 +00:00

…

…

websocket-client

…

windows-sandbox-rs

Enforce managed deny-read rules in the Windows sandbox (#38660 )

2026-08-14 22:28:33 +00:00

workload-identity

Forward workload identity context during token exchange (#38767 )

2026-08-15 14:31:04 +00:00

.gitignore

…

BUILD.bazel

…

Cargo.lock

Support metadata staging for reserved thread IDs (#38819 )

2026-08-16 00:57:28 +00:00

Cargo.toml

Remove the TUI test dependency on codex-cli (#38746 )

2026-08-15 11:01:30 +00:00

clippy.toml

…

config.md

…

default.nix

…

deny.toml

Route gRPC code-mode sessions through the shared HTTP client (#38087 )

2026-08-11 23:40:07 +00:00

README.md

…

rust-toolchain.toml

…

rustfmt.toml

…

README.md

Codex CLI

Codex CLI Documentation