openai/codex
1
0
Fork 0
mirror of https://github.com/openai/codex.git synced 2026-09-09 15:58:47 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
c8dc8e5fd5fdfe9c249bb98d691372d87e4b3cff
codex/codex-rs
History
pakrym-oai c8dc8e5fd5 Propagate workspace roots to exec-server sandboxes (#32214) 
## What changed

- Pass configured workspace roots from core to the exec server so filesystem and process sandbox permissions are materialized against the intended roots.
- Preserve an explicitly empty workspace-root list instead of treating the sandbox working directory as an implicit root.
- Initialize filesystem sandbox contexts with their working directory as the default workspace root.

## Testing

- Add end-to-end coverage for patch and command writes inside and outside workspace roots.
- Verify remote filesystem and process sandboxes do not grant access through an empty workspace-root list.

GitOrigin-RevId: 6684c8f7de50970b45a29e2a6323df954c96f9f6
2026-07-10 16:55:01 +00:00
..
.cargo
fix: address quick-xml security advisories (#30941)
2026-07-02 10:59:00 -07:00
.config
…
agent-graph-store
[codex] Inject agent graph store into ThreadManager (#29736)
2026-06-24 13:24:10 -07:00
agent-identity
Allow ChatGPT accounts without email (#28991)
2026-06-22 13:19:40 -07:00
analytics
Import enabled plugins from known marketplaces (#31672)
2026-07-09 12:16:15 -04:00
ansi-escape
…
app-server
Always send reasoning parameters in Responses requests (#32206)
2026-07-10 16:11:58 +00:00
app-server-client
Remove TUI exec-policy core exports (#31179)
2026-07-06 10:22:25 -07:00
app-server-daemon
feat(remote-control): add daemon pairing command (#29913)
2026-06-24 18:00:06 -07:00
app-server-protocol
feat: add managed Bedrock login API (#31327)
2026-07-09 17:05:37 -07:00
app-server-test-client
[login] support hosted success redirects (#28745)
2026-07-07 19:48:05 +00:00
app-server-transport
fix(remote-control): avoid server token refresh retry storms (#30201)
2026-06-26 17:34:52 -07:00
apply-patch
path-uri: clarify host-native path conversion (#29501)
2026-06-23 00:02:33 +00:00
arg0
Revert "Conditional codex_home dotenv" (#31276)
2026-07-06 12:17:16 -07:00
async-utils
[codex] Remove async_trait from first-party code (#27475)
2026-06-11 18:16:39 -07:00
aws-auth
…
backend-client
[1/5] [codex] sync managed-layer bundle schema (#31285)
2026-07-07 13:00:44 -07:00
bwrap
build: run buildifier from just fmt (#28125)
2026-06-13 21:43:39 -07:00
chatgpt
[apps] Thread structured icon assets through app list (#29889)
2026-06-24 13:25:44 -07:00
cli
bench: add codex help e2e macrobenchmark (#31295)
2026-07-09 17:23:44 -07:00
cloud-config
refactor: unify external auth resolution (#31421)
2026-07-07 17:05:05 -07:00
cloud-tasks
Migrate direct HTTP consumers to codex-http-client (#31331)
2026-07-07 01:34:36 +00:00
cloud-tasks-client
[codex] Remove async_trait from first-party code (#27475)
2026-06-11 18:16:39 -07:00
cloud-tasks-mock-client
[codex] Remove async_trait from first-party code (#27475)
2026-06-11 18:16:39 -07:00
code-mode
code-mode: fall back to using in process v8 if we fail to resolve external process (#31899)
2026-07-09 14:40:10 -07:00
code-mode-host
fix: update crossbeam-epoch for RUSTSEC-2026-0204 (#31308)
2026-07-06 16:26:56 -07:00
code-mode-protocol
code-mode: retain shared MCP types for deferred tools (#31745)
2026-07-09 08:17:13 -07:00
codex-api
Always send reasoning parameters in Responses requests (#32206)
2026-07-10 16:11:58 +00:00
codex-backend-openapi-models
[1/5] [codex] sync managed-layer bundle schema (#31285)
2026-07-07 13:00:44 -07:00
codex-client
Extract shared HTTP transport into codex-http-client (#31323)
2026-07-07 01:12:24 +00:00
codex-experimental-api-macros
…
codex-home
[codex] Bind shell snapshots to retained thread environments (#28421)
2026-06-15 20:10:53 -07:00
codex-mcp
[codex-apps] Filter optional file fields by tool schema (#31686)
2026-07-09 14:32:23 -07:00
collaboration-mode-templates
[prompting] updated plan mode prompt (#29301)
2026-06-21 13:35:25 -07:00
config
Always send reasoning parameters in Responses requests (#32206)
2026-07-10 16:11:58 +00:00
connectors
Add a connector declaration snapshot (#29851)
2026-06-24 23:24:01 +01:00
context-fragments
core: rename metadata -> internal_chat_message_metadata_passthrough (#28968)
2026-06-22 11:11:25 -07:00
core
Propagate workspace roots to exec-server sandboxes (#32214)
2026-07-10 16:55:01 +00:00
core-api
Use the image generation extension by default (#31596)
2026-07-09 12:25:19 +09:00
core-plugins
Import enabled plugins from known marketplaces (#31672)
2026-07-09 12:16:15 -04:00
core-skills
Test bounded concurrency in ancestor discovery (#32126)
2026-07-10 10:29:30 +00:00
docs
…
exec
[codex] Preserve reviewer when resuming threads (#30278)
2026-07-09 00:58:28 +00:00
exec-server
Propagate workspace roots to exec-server sandboxes (#32214)
2026-07-10 16:55:01 +00:00
exec-server-protocol
Bound streamed exec-server HTTP response bodies (#32112)
2026-07-10 09:56:03 +00:00
execpolicy
Remove the legacy exec policy engine (#32093)
2026-07-10 09:09:22 +00:00
ext
Add a skill invocation extension contributor (#32200)
2026-07-10 15:52:04 +00:00
external-agent-migration
[codex] Preserve skill descriptions outside model context (#29006)
2026-06-19 12:47:53 -07:00
external-agent-sessions
[codex] Sanitize imported session fallback titles (#29875)
2026-07-08 15:20:40 -04:00
features
Stabilize the memories feature flag (#31804)
2026-07-09 15:44:59 +01:00
feedback
Fix MIME types for path-backed feedback attachments (#30796)
2026-07-03 13:06:07 -07:00
file-search
…
file-system
Propagate workspace roots to exec-server sandboxes (#32214)
2026-07-10 16:55:01 +00:00
file-watcher
…
git-utils
Speed up review branch picker via for-each-ref (#31464)
2026-07-07 20:01:03 -04:00
hooks
trace hook command execution (#31501)
2026-07-07 18:00:35 -07:00
http-client
login: route raw auth flows through HTTP client (#31637)
2026-07-09 14:26:20 -07:00
install-context
Detect Codex installs managed by pnpm (#31503)
2026-07-08 12:17:58 -04:00
keyring-store
feat: add auth-specific encrypted secret namespaces (#27535)
2026-06-12 19:52:49 +00:00
linux-sandbox
fix: attribut network requests to the exact exec on linux (#29697)
2026-07-06 14:51:34 -07:00
lmstudio
…
login
login: route raw auth flows through HTTP client (#31637)
2026-07-09 14:26:20 -07:00
mcp-server
Use the image generation extension by default (#31596)
2026-07-09 12:25:19 +09:00
memories
Rebind memory consolidation workspace roots (#32197)
2026-07-10 15:44:56 +00:00
message-history
…
model-provider
Always send reasoning parameters in Responses requests (#32206)
2026-07-10 16:11:58 +00:00
model-provider-info
[codex] Add externally provided Codex auth (#31274)
2026-07-07 17:43:19 -07:00
models-manager
Always send reasoning parameters in Responses requests (#32206)
2026-07-10 16:11:58 +00:00
network-proxy
Remove the network proxy config wrapper (#31767)
2026-07-09 17:33:37 +01:00
ollama
…
otel
[codex] Add externally provided Codex auth (#31274)
2026-07-07 17:43:19 -07:00
plugin
Make selected plugin roots URI-native (#28918)
2026-06-23 22:51:19 +01:00
process-hardening
…
prompts
Use model catalog approval messages (#31312)
2026-07-07 10:52:38 -07:00
protocol
Always send reasoning parameters in Responses requests (#32206)
2026-07-10 16:11:58 +00:00
realtime-webrtc
…
response-debug-context
…
responses-api-proxy
…
rmcp-client
Resolve and pin MCP OAuth credential stores (#30293)
2026-07-09 18:46:29 -04:00
rollout
feat(rollout): persist TurnItems for paginated thread rollouts (#30188)
2026-07-08 19:55:03 -07:00
rollout-trace
Use the image generation extension by default (#31596)
2026-07-09 12:25:19 +09:00
sandboxing
fix(sandboxing): initialize network proxy config inline (#31830)
2026-07-09 19:36:36 +01:00
scripts
…
secrets
feat: add auth-specific encrypted secret namespaces (#27535)
2026-06-12 19:52:49 +00:00
shell-command
Handle mixed-case URLs in Windows command safety (#30879)
2026-07-07 17:50:39 -04:00
shell-escalation
release: publish standalone zsh artifacts (#30114)
2026-06-25 13:56:08 -07:00
skills
Update bundled OpenAI Docs skill for GPT-5.6 (#31842)
2026-07-09 14:01:16 -07:00
state
Filter routine Hyper logs from SQLite (#31791)
2026-07-09 14:35:09 +01:00
stdio-to-uds
…
terminal-detection
…
test-binary-support
…
thread-manager-sample
Always send reasoning parameters in Responses requests (#32206)
2026-07-10 16:11:58 +00:00
thread-store
feat(rollout): persist TurnItems for paginated thread rollouts (#30188)
2026-07-08 19:55:03 -07:00
tools
Always send reasoning parameters in Responses requests (#32206)
2026-07-10 16:11:58 +00:00
tui
Always send reasoning parameters in Responses requests (#32206)
2026-07-10 16:11:58 +00:00
uds
…
utils
path-uri: normalize parent segments in absolute joins (#29903)
2026-06-24 22:33:18 +00:00
v8-poc
build: run buildifier from just fmt (#28125)
2026-06-13 21:43:39 -07:00
vendor
build: run buildifier from just fmt (#28125)
2026-06-13 21:43:39 -07:00
websocket-client
websocket-client: add proxy-aware connector (#31622)
2026-07-08 12:57:27 -07:00
windows-sandbox-rs
[codex] Grant Windows sandbox access to primary runtime (#31574)
2026-07-08 13:22:10 -07:00
.gitignore
…
BUILD.bazel
bench: add e2e benchmark entrypoints (#31428)
2026-07-09 17:31:44 -07:00
Cargo.lock
Remove the legacy exec policy engine (#32093)
2026-07-10 09:09:22 +00:00
Cargo.toml
Remove the legacy exec policy engine (#32093)
2026-07-10 09:09:22 +00:00
clippy.toml
…
config.md
…
default.nix
…
deny.toml
build: ratchet direct reqwest dependencies (#31431)
2026-07-09 11:53:18 -07:00
README.md
…
rust-toolchain.toml
…
rustfmt.toml
…

README.md

Codex CLI

Codex CLI Documentation

Reference in New Issue View Git Blame Copy Permalink