viyatb-oai 1165a16e6f fix: keep permissions profiles forward compatible (#14107) ...

## Summary
- preserve unknown `:special_path` tokens, including nested entries, so
older Codex builds warn and ignore instead of failing config load
- fail closed with a startup warning when a permissions profile has
missing or empty filesystem entries instead of aborting profile
compilation
- normalize Windows verbatim paths like `\?\C:\...` before absolute-path
validation while keeping explicit errors for truly invalid paths

## Testing
- just fmt
- cargo test -p codex-core permissions_profiles_allow
- cargo test -p codex-core
normalize_absolute_path_for_platform_simplifies_windows_verbatim_paths
- cargo test -p codex-protocol
unknown_special_paths_are_ignored_by_legacy_bridge
- cargo clippy -p codex-core -p codex-protocol --all-targets -- -D
warnings
- cargo clean

2026-03-09 18:43:38 -07:00

..

agent

feat: simplify DB further (#13771)

2026-03-07 03:48:36 -08:00

apps

[apps] Fix app mention syntax. (#11894)

2026-02-16 22:01:49 +00:00

auth

fix(app-server): for external auth, replace id_token with chatgpt_acc… (#11240)

2026-02-09 20:48:58 -08:00

bin

add generated jsonschema for config.toml (#8956)

2026-01-13 10:22:51 -08:00

codex

feat(core): persist trace_id for turns in RolloutItem::TurnContext (#13602)

2026-03-05 13:26:48 -08:00

config

fix: keep permissions profiles forward compatible (#14107)

2026-03-09 18:43:38 -07:00

config_loader

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00

context_manager

pass on save info to model + ui tweaks (#14123)

2026-03-09 20:10:15 +00:00

features

Allow full web search tool config (#13675)

2026-03-07 00:50:50 +00:00

instructions

core: bundle settings diff updates into one dev/user envelope (#12417)

2026-02-26 00:12:08 -08:00

mcp

add @plugin mentions (#13510)

2026-03-06 00:03:39 +00:00

memories

feat: simplify DB further (#13771)

2026-03-07 03:48:36 -08:00

models_manager

chore: add web_search_tool_type for image support (#13538)

2026-03-05 07:02:27 +00:00

plugins

chore: plugin/uninstall endpoint (#14111)

2026-03-09 12:40:25 -07:00

rollout

Add request permissions tool (#13092)

2026-03-08 20:23:06 -07:00

sandboxing

Add request permissions tool (#13092)

2026-03-08 20:23:06 -07:00

skills

chore: use @plugin instead of $plugin for plaintext mentions (#13921)

2026-03-08 01:36:39 +00:00

snapshots

fix(ci): restore guardian coverage and bazel unit tests (#13912)

2026-03-08 12:05:19 -07:00

state

feat(core) Persist request_permission data across turns (#14009)

2026-03-09 14:36:38 -07:00

tasks

feat(otel): Centralize OTEL metric names and shared tag builders (#14117)

2026-03-09 12:46:42 -07:00

tools

feat(approvals) RejectConfig for request_permissions (#14118)

2026-03-09 18:16:54 -07:00

unified_exec

Add request permissions tool (#13092)

2026-03-08 20:23:06 -07:00

analytics_client.rs

Support implicit skill invocation analytics events (#12049)

2026-02-23 21:55:49 -08:00

api_bridge.rs

Better error message for model limit hit. (#11636)

2026-02-12 14:10:30 -08:00

apply_patch.rs

safety: honor filesystem policy carveouts in apply_patch (#13445)

2026-03-07 08:01:08 +00:00

auth.rs

add new scopes to login (#12383)

2026-03-04 16:41:54 +00:00

client_common.rs

fix(core): use dedicated types for responsesapi web search tool config (#14136)

2026-03-09 14:58:33 -07:00

client.rs

chore(otel): rename OtelManager to SessionTelemetry (#13808)

2026-03-06 16:23:30 -08:00

codex_delegate.rs

feat(core) Persist request_permission data across turns (#14009)

2026-03-09 14:36:38 -07:00

codex_tests_guardian.rs

Stabilize guardian approval coverage (#14103)

2026-03-09 11:23:20 -07:00

codex_tests.rs

fix(protocol): preserve legacy workspace-write semantics (#13957)

2026-03-09 18:43:27 -07:00

codex_thread.rs

app-server service tier plumbing (plus some cleanup) (#13334)

2026-03-03 02:35:09 -08:00

codex.rs

fix(protocol): preserve legacy workspace-write semantics (#13957)

2026-03-09 18:43:27 -07:00

command_canonicalization.rs

fix(core): canonicalize wrapper approvals and support heredoc prefix … (#10941)

2026-02-10 11:46:40 -08:00

commit_attribution.rs

Use prompt-based co-author attribution with config override (#11617)

2026-02-17 20:15:54 +00:00

compact_remote.rs

chore(otel): rename OtelManager to SessionTelemetry (#13808)

2026-03-06 16:23:30 -08:00

compact.rs

chore(otel): rename OtelManager to SessionTelemetry (#13808)

2026-03-06 16:23:30 -08:00

connectors.rs

add @plugin mentions (#13510)

2026-03-06 00:03:39 +00:00

contextual_user_message.rs

core: bundle settings diff updates into one dev/user envelope (#12417)

2026-02-26 00:12:08 -08:00

custom_prompts.rs

fix(core): load custom prompts from symlinked Markdown files (#3643)

2025-11-04 17:44:02 -08:00

default_client.rs

[apps] Update apps allowlist. (#12211)

2026-02-18 23:21:32 -08:00

env.rs

[device-auth] When headless environment is detected, show device login flow instead. (#8756)

2026-01-08 21:48:30 -08:00

environment_context.rs

feat: add local date/timezone to turn environment context (#12947)

2026-02-26 23:17:35 +00:00

error.rs

feat(core): add structured network approval plumbing and policy decision model (#11672)

2026-02-14 04:18:12 +00:00

event_mapping.rs

Enabling CWD Saving for Image-Gen (#13607)

2026-03-06 00:47:21 -08:00

exec_env.rs

Inject CODEX_THREAD_ID into the terminal environment (#10096)

2026-02-03 11:31:12 -08:00

exec_policy.rs

feat(approvals) RejectConfig for request_permissions (#14118)

2026-03-09 18:16:54 -07:00

exec.rs

safety: honor filesystem policy carveouts in apply_patch (#13445)

2026-03-07 08:01:08 +00:00

external_agent_config.rs

add metrics for external config import (#13501)

2026-03-04 13:59:50 -08:00

features.rs

guardian initial feedback / tweaks (#13897)

2026-03-09 09:25:24 -07:00

file_watcher.rs

feat: load from plugins (#12864)

2026-03-01 10:50:56 -08:00

flags.rs

chore: drop unused values from env_flags (#4188)

2025-09-24 14:29:51 -07:00

function_tool.rs

nit: drop unused function call error (#8903)

2026-01-08 15:07:30 +00:00

git_info.rs

fix: avoid invoking git before project trust is established (#13804)

2026-03-06 17:46:23 -08:00

guardian_prompt.md

Add guardian approval MVP (#13692)

2026-03-07 05:40:10 -08:00

guardian_tests.rs

guardian initial feedback / tweaks (#13897)

2026-03-09 09:25:24 -07:00

guardian.rs

guardian initial feedback / tweaks (#13897)

2026-03-09 09:25:24 -07:00

landlock.rs

fix(protocol): preserve legacy workspace-write semantics (#13957)

2026-03-09 18:43:27 -07:00

lib.rs

chore: use @plugin instead of $plugin for plaintext mentions (#13921)

2026-03-08 01:36:39 +00:00

mcp_connection_manager.rs

feat(approvals) RejectConfig for request_permissions (#14118)

2026-03-09 18:16:54 -07:00

mcp_tool_call.rs

guardian initial feedback / tweaks (#13897)

2026-03-09 09:25:24 -07:00

memory_trace.rs

chore(otel): rename OtelManager to SessionTelemetry (#13808)

2026-03-06 16:23:30 -08:00

mention_syntax.rs

chore: use @plugin instead of $plugin for plaintext mentions (#13921)

2026-03-08 01:36:39 +00:00

mentions.rs

chore: use @plugin instead of $plugin for plaintext mentions (#13921)

2026-03-08 01:36:39 +00:00

message_history.rs

chore: unify conversation with thread name (#8830)

2026-01-07 17:04:53 +00:00

model_provider_info.rs

Fix: update parallel tool call exec approval to approve on request id (#11162)

2026-02-10 09:38:00 -08:00

network_policy_decision.rs

feat(core): persist network approvals in execpolicy (#12357)

2026-02-23 21:37:46 -08:00

network_proxy_loader.rs

config: add initial support for the new permission profile config language in config.toml (#13434)

2026-03-06 15:39:13 -08:00

otel_init.rs

feat: show runtime metrics in console (#10278)

2026-01-30 22:20:02 -08:00

path_utils.rs

fix: windows normalization (#13742)

2026-03-06 15:50:44 +01:00

personality_migration.rs

feat: polluted memories (#13008)

2026-03-02 11:57:32 +00:00

project_doc.rs

Clarify js_repl binding reuse guidance (#13803)

2026-03-06 15:19:06 -08:00

realtime_context.rs

Refine realtime startup context formatting (#13560)

2026-03-05 16:31:20 -08:00

realtime_conversation.rs

Add realtime startup context override (#13796)

2026-03-06 16:00:30 -08:00

review_format.rs

feat: detached review (#7292)

2025-11-28 11:34:57 +00:00

review_prompts.rs

chore: review everywhere (#7444)

2025-12-02 11:26:27 +00:00

safety.rs

fix(protocol): preserve legacy workspace-write semantics (#13957)

2026-03-09 18:43:27 -07:00

sandbox_tags.rs

fix(core): add linux bubblewrap sandbox tag (#11767)

2026-02-14 19:00:01 +00:00

seatbelt_base_policy.sbpl

[feat] add seatbelt permission files (#11639)

2026-02-12 23:30:22 +00:00

seatbelt_network_policy.sbpl

feat(sandbox): enforce proxy-aware network routing in sandbox (#11113)

2026-02-10 07:44:21 +00:00

seatbelt_permissions.rs

fix: MacOSAutomationPermission::BundleIDs should allow communicating … (#12989)

2026-03-01 11:00:54 -08:00

seatbelt_platform_defaults.sbpl

fix: Restricted Read: /System is too permissive for macOS platform de… (#11798)

2026-02-17 23:56:35 -08:00

seatbelt.rs

fix(protocol): preserve legacy workspace-write semantics (#13957)

2026-03-09 18:43:27 -07:00

session_prefix.rs

feat: add post-compaction sub-agent infos (#12774)

2026-02-26 18:55:34 +00:00

shell_detect.rs

chore: rename codex-command to codex-shell-command (#11378)

2026-02-10 17:03:46 -08:00

shell_snapshot.rs

Serialize shell snapshot stdin test (#13878)

2026-03-09 10:44:13 -07:00

shell.rs

Make shell detection tests

2026-02-21 20:08:02 -08:00

spawn.rs

sandboxing: plumb split sandbox policies through runtime (#13439)

2026-03-07 02:30:21 +00:00

state_db.rs

feat: simplify DB further (#13771)

2026-03-07 03:48:36 -08:00

stream_events_utils.rs

feat: simplify DB further (#13771)

2026-03-07 03:48:36 -08:00

terminal.rs

fix(tui): promote windows terminal diff ansi16 to truecolor (#13016)

2026-02-27 10:45:59 -07:00

test_support.rs

Enable request_user_input in Default mode (#12735)

2026-02-25 15:20:46 -08:00

text_encoding.rs

Fix: Improve text encoding for shell output in VSCode preview (#6178) (#6182)

2025-11-20 11:04:11 -08:00

thread_manager.rs

core: box wrapper futures to reduce stack pressure (#13429)

2026-03-04 05:44:52 +00:00

token_data.rs

fix(app-server): for external auth, replace id_token with chatgpt_acc… (#11240)

2026-02-09 20:48:58 -08:00

truncate.rs

Add under-development original-resolution view_image support (#13050)

2026-03-03 15:56:54 -08:00

turn_diff_tracker.rs

chore: more clippy rules 2 (#4057)

2025-09-22 17:16:02 +00:00

turn_metadata.rs

fix(core): add linux bubblewrap sandbox tag (#11767)

2026-02-14 19:00:01 +00:00

turn_timing.rs

feat(otel): Centralize OTEL metric names and shared tag builders (#14117)

2026-03-09 12:46:42 -07:00

user_shell_command.rs

core: bundle settings diff updates into one dev/user envelope (#12417)

2026-02-26 00:12:08 -08:00

util.rs

Cloud Requirements: increase timeout and retries (#10631)

2026-02-05 01:52:12 +00:00

web_search.rs

add missing fields to WebSearchAction and update app-server types (#10276)

2026-01-30 16:37:56 -08:00

windows_sandbox_read_grants.rs

add a slash command to grant sandbox read access to inaccessible directories (#11512)

2026-02-12 12:48:36 -08:00

windows_sandbox.rs

app-server support for Windows sandbox setup. (#12025)

2026-02-18 13:03:16 -08:00