codex

mirror of https://github.com/openai/codex.git synced 2026-09-06 15:29:32 +00:00

Files

Felipe Coury 637c3227b3 Avoid executing PATH helpers before workspace trust (#42324 )

## Why

Automatic startup work and `codex doctor` can run before a workspace is
trusted. A repository-controlled `PATH` must not be able to make those flows
execute workspace-provided helpers.

## What changed

- Resolve helpers used by automatic startup from trusted system installation
  directories, and give plugin-sync Git subprocesses a sanitized environment.
- Make terminal detection environment-only and have doctor inspect executable
  locations without running them. Fetch update metadata with the HTTP client
  instead of `curl`.
- Fall back conservatively when trusted terminal helpers are unavailable,
  including for tmux keyboard enhancement flags.

## Testing

Add black-box coverage with hostile workspace `PATH` entries for startup,
interactive tmux startup, support log collection, doctor, and curated plugin
sync. Add unit coverage for trusted executable resolution and bounded update
HTTP responses.

GitOrigin-RevId: 3b8995eb422b60ed53b0386951de59e8f9bfc542

2026-09-02 18:34:27 +00:00

app_server.rs

Allow session configuration with codex agents (#39870 )

2026-08-21 06:08:26 +00:00

cloud_auth.rs

Restrict cloud task credentials to trusted origins (#41403 )

2026-08-28 19:44:50 +00:00

cloud_config.rs

Respect config layers when removing plugin marketplaces (#40683 )

2026-08-25 19:38:39 +00:00

debug_clear_memories.rs

Add macOS voice runtime projection (#42204 )