openai/codex
1
0
Fork 0
mirror of https://github.com/openai/codex.git synced 2026-11-12 21:20:34 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
c93732887e2e098d6119b2f2a0d1d5d1b9151f52
codex/codex-rs
T
History
ioanbudea-OAI c93732887e Preserve legacy sandbox templates in TUI permission conversions (#60936) 
## What changed

Add lossless conversions between legacy sandbox templates and `PermissionProfile` without probing workspace metadata, collapsing fixed roots into current-directory access, or deduplicating writable roots. Reject profiles whose restrictions cannot survive the round trip.

Use these conversions for sandbox inheritance in `create_thread` and for validating read-only temporary structured threads.

## Testing

Extend coverage for duplicate writable roots, existing `.git` metadata, unrepresentable restrictions, and child threads inheriting writable roots, network access, and temporary-directory exclusions.

GitOrigin-RevId: cb37acaf615b09f45680b4b0c4152470fbc04abb
2026-11-12 00:13:27 +00:00
..
.cargo
Fix Windows atomic writes and refresh build maintenance (#60872)
2026-11-11 22:31:42 +00:00
.config
…
agent-graph-store
Persist subagent relationships before creating child storage (#58129)
2026-10-29 17:25:51 +00:00
agent-identity
Wire shared runtime authentication through threads and API clients (#59177)
2026-11-03 15:02:57 +00:00
agent-message-board-client
Route message-board notifications through agent mailboxes (#59139)
2026-11-03 12:33:26 +00:00
agent-message-board-host
Extract channel notification formatting into PostPreview (#59688)
2026-11-05 16:08:23 +00:00
agent-roles
…
analytics
Allow searching persisted attached threads (#60574)
2026-11-10 11:17:06 +00:00
ansi-escape
…
app-server
Keep same-named MCP servers separate across environments (#60905)
2026-11-11 23:36:19 +00:00
app-server-client
Enable model and reasoning effort selection for Cloud conversations (#60651)
2026-11-10 19:52:49 +00:00
app-server-daemon
Honor feature overrides when starting the app-server daemon (#60489)
2026-11-10 01:31:19 +00:00
app-server-protocol
Preserve legacy sandbox templates in TUI permission conversions (#60936)
2026-11-12 00:13:27 +00:00
app-server-protocol-noop-macros
…
app-server-test-client
Allow searching persisted attached threads (#60574)
2026-11-10 11:17:06 +00:00
app-server-transport
Use runtime authentication for Analytics requests (#60101)
2026-11-07 10:41:36 +00:00
apply-patch
Support direct Guardian review of patches invoked through exec_command (#58931)
2026-11-02 17:05:56 +00:00
arg0
Stop dotenv loading on persistent I/O errors (#57233)
2026-10-26 20:26:32 +00:00
async-utils
…
attachment-store
Use measured durations to budget uploaded audio (#59268)
2026-11-04 00:19:12 +00:00
aws-auth
…
backend-client
Use runtime authentication for Analytics requests (#60101)
2026-11-07 10:41:36 +00:00
build-info
…
bwrap
…
chatgpt
Use runtime authentication for OpenAI MCP and app requests (#59749)
2026-11-05 22:03:29 +00:00
cli
Keep same-named MCP servers separate across environments (#60905)
2026-11-11 23:36:19 +00:00
cloud-client
Enable model and reasoning effort selection for Cloud conversations (#60651)
2026-11-10 19:52:49 +00:00
cloud-config
Add ChatGPT token stdin authentication to exec-server (#59569)
2026-11-05 04:25:19 +00:00
cloud-tasks
Use runtime authentication across backend request paths (#59572)
2026-11-05 05:09:32 +00:00
cloud-tasks-client
Use runtime authentication across backend request paths (#59572)
2026-11-05 05:09:32 +00:00
cloud-tasks-mock-client
…
code-mode
Preserve typed gRPC code-mode session admission errors (#60496)
2026-11-10 02:09:01 +00:00
code-mode-host
Preserve typed gRPC code-mode session admission errors (#60496)
2026-11-10 02:09:01 +00:00
code-mode-protocol
Add a content helper for forwarding MCP blocks in Code Mode (#60665)
2026-11-10 21:28:22 +00:00
code-mode-runtime
Preserve file-backed audio in tool outputs (#60735)
2026-11-11 06:41:15 +00:00
codex-api
Honor advertised WebSocket message size limits (#60841)
2026-11-11 18:58:56 +00:00
codex-backend-openapi-models
…
codex-client
…
codex-experimental-api-macros
…
codex-home
…
codex-mcp
Keep same-named MCP servers separate across environments (#60905)
2026-11-11 23:36:19 +00:00
collaboration-mode-templates
…
config
Apply session app overrides during MCP config refresh (#60730)
2026-11-11 06:17:00 +00:00
config-schema
Use hermetic LLVM for Windows MSVC Bazel builds (#60507)
2026-11-10 03:02:25 +00:00
connectors
Support app settings in plugin configuration (#58428)
2026-10-30 20:39:47 +00:00
context-fragments
Ensure side-chat policy reaches the first model request (#60067)
2026-11-07 05:59:44 +00:00
core
Reserve Guardian context budget for selected Code Mode exec results (#60914)
2026-11-11 23:49:59 +00:00
core-api
Enforce host-required cyber access programs per thread (#59754)
2026-11-05 22:49:46 +00:00
core-plugin-common
…
core-plugins
Keep same-named MCP servers separate across environments (#60905)
2026-11-11 23:36:19 +00:00
diagnostics
Pin the Rust toolchain to 1.95.0 (#57373)
2026-10-27 05:52:01 +00:00
direct-tool-timing
Report auto-review overhead in turn critical-path analytics (#59260)
2026-11-03 23:49:01 +00:00
docs
Run Bazel CI locally without BuildBuddy credentials (#59055)
2026-11-03 04:08:59 +00:00
exec
Allow searching persisted attached threads (#60574)
2026-11-10 11:17:06 +00:00
exec-server
Defer exec-server sandbox preparation to the execution host (#60663)
2026-11-10 21:26:11 +00:00
exec-server-cli
Add ChatGPT token stdin authentication to exec-server (#59569)
2026-11-05 04:25:19 +00:00
exec-server-protocol
Cache empty remote skill discovery with filesystem watches (#57598)
2026-10-27 23:53:09 +00:00
execpolicy
Add opt-in Unicode canonical matching to exec policy rules (#59535)
2026-11-05 00:55:46 +00:00
ext
Reserve Guardian context budget for selected Code Mode exec results (#60914)
2026-11-11 23:49:59 +00:00
external-agent-migration
Add local-only Claude Code skill migration (#60492)
2026-11-10 01:51:29 +00:00
features
Reserve Guardian context budget for selected Code Mode exec results (#60914)
2026-11-11 23:49:59 +00:00
feedback
…
file-search
Deduplicate file search results from overlapping roots (#60845)
2026-11-11 19:16:19 +00:00
file-system
Remove the legacy sandbox policy constructor (#59772)
2026-11-06 00:37:27 +00:00
file-watcher
Avoid periodic wakeups in idle Windows file watchers (#60560)
2026-11-10 08:52:35 +00:00
git-utils
Skip submodule worktree scans when checking repository changes (#60669)
2026-11-10 21:58:49 +00:00
guardian-context
Reserve Guardian context budget for selected Code Mode exec results (#60914)
2026-11-11 23:49:59 +00:00
history
Preserve retained assistant revisions across rollout replay (#60839)
2026-11-11 18:56:47 +00:00
hooks
Use hermetic LLVM for Windows MSVC Bazel builds (#60507)
2026-11-10 03:02:25 +00:00
http-client
Add device-code authorization for gateway OAuth (#59822)
2026-11-06 04:24:04 +00:00
install-context
…
keyring-store
…
linux-sandbox
Include bundled bubblewrap in the root metadata test fixture (#60898)
2026-11-11 23:23:09 +00:00
lmstudio
…
login
Bind API workload identity source reuse to session claims (#60433)
2026-11-09 19:26:55 +00:00
memories
Encapsulate thread metadata construction (#60524)
2026-11-10 04:56:49 +00:00
mermaid
…
message-board
Decouple Guardian retrieval from local message-board handles (#60002)
2026-11-06 22:26:03 +00:00
message-board-mcp
Add opt-in MCP discovery for in-memory agent message boards (#58973)
2026-11-02 20:34:35 +00:00
message-history
…
model-provider
Enable model catalog discovery with gateway OAuth (#60414)
2026-11-09 16:37:22 +00:00
model-provider-info
Add device-code authorization for gateway OAuth (#59822)
2026-11-06 04:24:04 +00:00
models-manager
Enable model catalog discovery with gateway OAuth (#60414)
2026-11-09 16:37:22 +00:00
mxc-sandbox
Preserve script quotes in Windows sandbox cmd invocations (#60624)
2026-11-10 16:58:06 +00:00
network-proxy
Add policy-checked TCP upstream tunneling for SOCKS (#60523)
2026-11-10 04:43:24 +00:00
ollama
…
otel
Preserve MCP trace context when tracing is disabled (#60506)
2026-11-10 03:01:14 +00:00
otel-trace-websocket
…
plugin
…
plugin-host
Add a bounded V8 runtime for UI plugin processes (#57508)
2026-10-27 16:36:32 +00:00
process-hardening
…
prompts
Simplify Guardian's post-denial approval guidance (#60391)
2026-11-09 12:54:46 +00:00
protocol
Preserve legacy sandbox templates in TUI permission conversions (#60936)
2026-11-12 00:13:27 +00:00
realtime-webrtc
…
response-debug-context
Fall back to HTTP immediately for oversized WebSocket requests (#60840)
2026-11-11 18:58:21 +00:00
responses-api-proxy
…
rmcp-client
Protect MCP OAuth persistence from stale credential writes (#60849)
2026-11-11 19:18:48 +00:00
rollout
Fix thread search snippets for whitespace-containing queries (#60846)
2026-11-11 19:17:43 +00:00
rollout-trace
Preserve agent message deliveries in rollout traces (#60673)
2026-11-10 22:22:35 +00:00
runtime-agent-instance
Use runtime authentication for Analytics requests (#60101)
2026-11-07 10:41:36 +00:00
sandboxing
Defer exec-server sandbox preparation to the execution host (#60663)
2026-11-10 21:26:11 +00:00
scripts
Pin the Rust toolchain to 1.95.0 (#57373)
2026-10-27 05:52:01 +00:00
secrets
Populate the local secrets cache after successful saves (#59520)
2026-11-04 23:46:52 +00:00
shell-command
Pin the Rust toolchain to 1.95.0 (#57373)
2026-10-27 05:52:01 +00:00
skills
Route broad Codex setup questions through self-knowledge guidance (#59949)
2026-11-06 17:47:31 +00:00
state
Allow searching persisted attached threads (#60574)
2026-11-10 11:17:06 +00:00
stdio-to-uds
…
tcp-tunnel
Add an OpenSSH ProxyCommand mode to codex tcp-tunnel (#60568)
2026-11-10 09:54:57 +00:00
terminal-detection
Recognize Rex terminals and enable Kitty graphics for pets (#58270)
2026-10-30 07:11:56 +00:00
test-binary-support
…
thread-manager-sample
Add optional tool call summaries to the full-screen transcript (#60554)
2026-11-10 08:34:17 +00:00
thread-store
Preserve retained assistant revisions across rollout replay (#60839)
2026-11-11 18:56:47 +00:00
tools
Preserve file-backed audio in tool outputs (#60735)
2026-11-11 06:41:15 +00:00
tui
Preserve legacy sandbox templates in TUI permission conversions (#60936)
2026-11-12 00:13:27 +00:00
uds
…
user-verification
…
utils
Fix Windows atomic writes and refresh build maintenance (#60872)
2026-11-11 22:31:42 +00:00
v8-poc
Test V8 inline typed array storage limits (#58385)
2026-10-30 16:35:54 +00:00
vendor
…
voice-host
Stabilize cross-platform tests and directory-change fork permissions (#59369)
2026-11-04 09:51:28 +00:00
websocket-auth
Pin the Rust toolchain to 1.95.0 (#57373)
2026-10-27 05:52:01 +00:00
websocket-client
Wire shared runtime authentication through threads and API clients (#59177)
2026-11-03 15:02:57 +00:00
windows-sandbox-rs
Fix Windows atomic writes and refresh build maintenance (#60872)
2026-11-11 22:31:42 +00:00
windows-sandbox-service
Canonicalize Windows sandbox homes and migrate saved junction paths (#60708)
2026-11-11 02:54:40 +00:00
workload-identity
Support API workload identity authentication (#59275)
2026-11-04 00:52:58 +00:00
worktree
…
.gitignore
…
BUILD.bazel
Ship the standalone executor in release packages (#57837)
2026-10-28 21:09:05 +00:00
Cargo.lock
Preserve retained assistant revisions across rollout replay (#60839)
2026-11-11 18:56:47 +00:00
Cargo.toml
Preserve model-facing ID allocations in saved history (#60771)
2026-11-11 09:58:13 +00:00
clippy.toml
…
config.md
…
default.nix
…
deny.toml
Fix Windows atomic writes and refresh build maintenance (#60872)
2026-11-11 22:31:42 +00:00
README.md
…
rust-toolchain.toml
Pin the Rust toolchain to 1.95.0 (#57373)
2026-10-27 05:52:01 +00:00
rustfmt.toml
…

README.md

Codex CLI

Codex CLI Documentation

Reference in New Issue View Git Blame Copy Permalink