mirror of https://github.com/openai/codex.git synced 2026-10-18 17:18:52 +00:00

Files

T

iceweasel-oai 938ddfb66c Fix Windows environment handling for remote MCP servers (#54069 )

## Why

Remote MCP environment filtering could drop `SystemDrive` and `LocalAppData`. Explicit overrides also need Windows-aware merging to replace inherited variables with differently cased names.

## What changed

- Preserve `SYSTEMDRIVE` and `LOCALAPPDATA` when remote environment variables activate the allowlist.
- Apply explicit environment overrides through the executor environment policy, while retaining the final overlay for variables excluded by the allowlist.

## Testing

Extend environment-policy tests to cover the additional Windows variables, overrides with differently cased names, and the final overlay used by older executors.

GitOrigin-RevId: 36df69117f248536e47cf7e1d855b99a138fe698
(cherry picked from commit 0fd85b0752)

2026-10-14 12:05:05 -07:00

.cargo

Ignore the unsafe-libyaml advisory in dependency audits (#53382 )

2026-10-12 13:39:54 +00:00

.config

Move Windows sandbox tests into a dedicated integration binary (#51678 )

2026-10-07 12:47:04 +00:00

agent-graph-store

…

agent-identity

…

agent-message-board-client

Expose message board permissions and structured denials (#52568 )

2026-10-09 13:15:39 +00:00

agent-roles

…

analytics

Attribute compaction analytics to the correct voice session (#51963 )

2026-10-08 05:29:11 +00:00

ansi-escape

Omit payloads from multiline ANSI warnings (#49416 )

2026-09-30 00:51:39 +00:00

app-server

Preserve URLs and email addresses during external agent migration (#53706 )

2026-10-13 16:15:41 +00:00

app-server-client

Keep remote app-server events deliverable during shutdown (#53155 )

2026-10-11 15:57:06 +00:00

app-server-daemon

Normalize formatting in docs, web assets, and sample scripts (#52256 )

2026-10-08 20:11:43 +00:00

app-server-protocol

Remove selected protocol, apply-patch, MCP, and TUI tests (#53358 )

2026-10-12 11:24:22 +00:00

app-server-protocol-noop-macros

…

app-server-test-client

Normalize formatting in docs, web assets, and sample scripts (#52256 )

2026-10-08 20:11:43 +00:00

app-server-transport

Prevent invalidated wakeups from starting a turn (#51427 )

2026-10-06 17:26:19 +00:00

apply-patch

Remove selected protocol, apply-patch, MCP, and TUI tests (#53358 )

2026-10-12 11:24:22 +00:00

arg0

Isolate arg0 helper directories by operating system (#53412 )

2026-10-12 15:43:27 +00:00

async-utils

…

attachment-store

Pass thread persistence intent to attachment uploads (#51517 )

2026-10-06 23:44:17 +00:00

aws-auth

…

backend-client

Retry bootstrap GETs through the system proxy after request failures (#52702 )

2026-10-09 21:29:36 +00:00

build-info

…

bwrap

Add Bazel release staging archives (#51850 )

2026-10-07 22:11:14 +00:00

chatgpt

Upgrade the argument comment lint toolchain and Dylint (#49706 )

2026-09-30 18:49:29 +00:00

cli

Separate MCP sandbox policy from launcher metadata (#53709 )

2026-10-13 16:23:44 +00:00

cloud-client

Add a native gRPC client for cloud thread resume and attach (#50113 )

2026-10-01 22:32:29 +00:00

cloud-config

Preserve thread overrides and cloud policy validity during config reloads (#49269 )

2026-09-29 13:58:09 +00:00

cloud-tasks

Simplify cloud task base URL normalization (#49147 )

2026-09-29 03:32:19 +00:00

cloud-tasks-client

…

cloud-tasks-mock-client

…

code-mode

Report exec runtime resets before accepting further requests (#52825 )

2026-10-10 08:51:21 +00:00

code-mode-host

Report exec runtime resets before accepting further requests (#52825 )

2026-10-10 08:51:21 +00:00

code-mode-protocol

Recover gRPC code-mode sessions after missing-session errors (#52235 )

2026-10-08 19:15:17 +00:00

code-mode-runtime

Make code-mode exit() stop the entire cell (#52748 )

2026-10-10 02:14:13 +00:00

codex-api

Interrupt and drain canceled classifier responses before socket reuse (#53698 )

2026-10-13 15:24:00 +00:00

codex-backend-openapi-models

Add Pro Max plan support and update Pro display names (#47971 )

2026-09-25 00:20:02 +00:00

codex-client

…

codex-experimental-api-macros

…

codex-home

…

codex-mcp

Separate MCP sandbox policy from launcher metadata (#53709 )

2026-10-13 16:23:44 +00:00

collaboration-mode-templates

…

config

Add async compaction feature configuration (#53595 )

2026-10-13 07:32:21 +00:00

config-schema

…

connectors

…

context-fragments

Add opt-in output token replay for OpenAI requests (#52742 )

2026-10-10 01:25:00 +00:00

core

Enable Cyber access programs for API-key sessions by default (#53717 )

2026-10-13 16:57:54 +00:00

core-api

Expose detailed agent tree shutdown failure reports (#51515 )

2026-10-06 23:28:55 +00:00

core-plugin-common

…

core-plugins

Fix marketplace path matching for Windows junctions (#52696 )

2026-10-09 20:36:17 +00:00

diagnostics

…

docs

Normalize formatting in docs, web assets, and sample scripts (#52256 )

2026-10-08 20:11:43 +00:00

exec

Enable Cyber access programs for API-key sessions by default (#53717 )

2026-10-13 16:57:54 +00:00

exec-server

Preserve Windows startup variables and MXC child environment defaults (#54027 )

2026-10-14 11:57:06 -07:00

exec-server-protocol

Expose originating tool call metadata in command environments (#52119 )

2026-10-08 13:45:19 +00:00

execpolicy

…

ext

Cancel Guardian V2 classifications that exceed the tool-call lag window (#53699 )

2026-10-13 15:25:12 +00:00

external-agent-migration

Preserve URLs and email addresses during external agent migration (#53706 )

2026-10-13 16:15:41 +00:00

features

Enable Cyber access programs for API-key sessions by default (#53717 )

2026-10-13 16:57:54 +00:00

feedback

Persist Guardian review failures for reports across restarts (#51651 )

2026-10-07 11:18:05 +00:00

file-search

Prevent stale file search results from being labeled with a new query (#49946 )

2026-10-01 09:52:54 +00:00

file-system

Preserve sandbox overrides across execution requests (#51786 )

2026-10-07 17:59:22 +00:00

file-watcher

Wire V2 capability discovery through exec-server RPC (#53723 )

2026-10-13 17:22:34 +00:00

git-utils

Use descriptor-safe helpers for executable test fixtures (#50018 )

2026-10-01 15:57:03 +00:00

guardian-context

Account for replay caches in encrypted compaction budgets (#53691 )

2026-10-13 15:05:16 +00:00

history

Add opt-in output token replay for OpenAI requests (#52742 )

2026-10-10 01:25:00 +00:00

hooks

Share hook configuration across cloned hook views (#53657 )

2026-10-13 12:51:12 +00:00

http-client

Upgrade hyper to 1.11.1 and test connection closure (#52608 )

2026-10-09 15:13:29 +00:00

install-context

Remove the patched zsh shell execution backend (#52160 )

2026-10-08 16:19:09 +00:00

keyring-store

Track credential storage outcomes and redact sensitive errors (#49384 )

2026-09-29 22:24:09 +00:00

linux-sandbox

Align Linux sandbox names and docs with bubblewrap and seccomp (#52610 )

2026-10-09 15:29:50 +00:00

lmstudio

…

Normalize formatting in docs, web assets, and sample scripts (#52256 )

2026-10-08 20:11:43 +00:00

memories

Upgrade rmcp to 3.5.1 and harden lifecycle tests (#52972 )

2026-10-10 19:43:24 +00:00

mermaid

Normalize formatting in docs, web assets, and sample scripts (#52256 )

2026-10-08 20:11:43 +00:00

message-history

…

model-provider

Advertise Ultrafast for GPT-6.1 Sol on Amazon Bedrock (#51794 )

2026-10-07 18:32:50 +00:00

model-provider-info

Add capability overrides for custom model providers (#50459 )

2026-10-02 23:26:27 +00:00

models-manager

Remove legacy personality template metadata (#51223 )

2026-10-06 01:46:33 +00:00

mxc-sandbox

Preserve Windows startup variables and MXC child environment defaults (#54027 )

2026-10-14 11:57:06 -07:00

network-proxy

Reject duplicate Host headers in the network proxy (#53506 )

2026-10-12 23:46:16 +00:00

ollama

…

otel

Record truncation metrics for accepted Guardian review inputs (#53628 )

2026-10-13 10:21:42 +00:00

otel-trace-websocket

…

plugin

Use PathUri for skill identity and path matching (#51482 )

2026-10-06 21:29:35 +00:00

process-hardening

…

prompts

Allow model catalogs to override incremental tool notices (#52736 )

2026-10-10 01:14:28 +00:00

protocol

Account for replay caches in encrypted compaction budgets (#53691 )

2026-10-13 15:05:16 +00:00

realtime-webrtc

Classify voice session failures and record terminal outcomes (#52756 )

2026-10-10 02:54:59 +00:00

response-debug-context

Treat incomplete responses as terminal errors (#53451 )

2026-10-12 18:53:49 +00:00

responses-api-proxy

Add Bazel release staging archives (#51850 )

2026-10-07 22:11:14 +00:00

rmcp-client

Fix Windows environment handling for remote MCP servers (#54069 )

2026-10-14 12:05:05 -07:00

rollout

Add opt-in output token replay for OpenAI requests (#52742 )

2026-10-10 01:25:00 +00:00

rollout-trace

Signal abandonment of unanswered MCP elicitations (#51611 )

2026-10-07 07:57:14 +00:00

sandboxing

Migrate the Windows MXC sandbox to split MXC crates (#52707 )

2026-10-09 22:11:30 +00:00

scripts

…

secrets

…

shell-command

Remove the patched zsh shell execution backend (#52160 )

2026-10-08 16:19:09 +00:00

skills

Normalize formatting in docs, web assets, and sample scripts (#52256 )

2026-10-08 20:11:43 +00:00

state

Add opt-in output token replay for OpenAI requests (#52742 )

2026-10-10 01:25:00 +00:00

stdio-to-uds

…

tcp-tunnel

Add opt-in JSON diagnostics for TCP tunnels (#50131 )

2026-10-02 00:46:14 +00:00

terminal-detection

Stop identifying Apple Terminal from TERM_SESSION_ID (#53438 )

2026-10-12 17:52:12 +00:00

test-binary-support

…

thread-manager-sample

Add async compaction feature configuration (#53595 )

2026-10-13 07:32:21 +00:00

thread-store

Add opt-in output token replay for OpenAI requests (#52742 )

2026-10-10 01:25:00 +00:00

tools

Add opt-in output token replay for OpenAI requests (#52742 )

2026-10-10 01:25:00 +00:00

tui

Enable Cyber access programs for API-key sessions by default (#53717 )

2026-10-13 16:57:54 +00:00

uds

Upgrade Windows bindings to windows-sys 0.61.2 (#50058 )

2026-10-01 18:05:05 +00:00

user-verification

…

utils

Add opt-in output token replay for OpenAI requests (#52742 )

2026-10-10 01:25:00 +00:00

v8-poc

…

vendor

…

voice-host

Use descriptor-safe helpers for executable test fixtures (#50018 )

2026-10-01 15:57:03 +00:00

websocket-auth

…

websocket-client

…

windows-sandbox-rs

Preserve native errors in Windows sandbox ACL diagnostics (#51896 )

2026-10-08 01:12:16 +00:00

windows-sandbox-service

Preserve Windows runtime registration failure diagnostics (#53426 )

2026-10-12 16:58:24 +00:00

workload-identity

…

worktree

Use descriptor-safe helpers for executable test fixtures (#50018 )

2026-10-01 15:57:03 +00:00

.gitignore

…

BUILD.bazel

Add Bazel release staging archives (#51850 )

2026-10-07 22:11:14 +00:00

Cargo.lock

Preserve URLs and email addresses during external agent migration (#53706 )

2026-10-13 16:15:41 +00:00

Cargo.toml

Preserve URLs and email addresses during external agent migration (#53706 )

2026-10-13 16:15:41 +00:00

clippy.toml

…

config.md

…

default.nix

…

deny.toml

Ignore the unsafe-libyaml advisory in dependency audits (#53382 )

2026-10-12 13:39:54 +00:00

README.md

…

rust-toolchain.toml

…

rustfmt.toml

…

README.md

Codex CLI

Codex CLI Documentation