mirror of https://github.com/openai/codex.git synced 2026-11-12 21:20:34 +00:00

Files

T

ioanbudea-OAI ce3031018e Remove the legacy sandbox policy setter from Config (#61144 )

## What changed

- Remove `Config::set_legacy_sandbox_policy` and update session, approval, and Guardian test setup to set permission profiles and workspace roots explicitly.
- Reuse `PermissionProfile::from_legacy_sandbox_policy_for_cwd` for legacy policy validation and updates in `Permissions`.

GitOrigin-RevId: 5ee92c46290ee6a3d7e2d2db7b02641e80bdc44f

2026-11-12 15:35:27 +00:00

.cargo

Fix Windows atomic writes and refresh build maintenance (#60872 )

2026-11-11 22:31:42 +00:00

.config

…

agent-graph-store

Persist subagent relationships before creating child storage (#58129 )

2026-10-29 17:25:51 +00:00

agent-identity

Wire shared runtime authentication through threads and API clients (#59177 )

2026-11-03 15:02:57 +00:00

agent-message-board-client

Route message-board notifications through agent mailboxes (#59139 )

2026-11-03 12:33:26 +00:00

agent-message-board-host

Extract channel notification formatting into PostPreview (#59688 )

2026-11-05 16:08:23 +00:00

agent-roles

…

analytics

Allow searching persisted attached threads (#60574 )

2026-11-10 11:17:06 +00:00

ansi-escape

…

app-server

Compare resume sandbox overrides using permission profile labels (#61136 )

2026-11-12 14:46:17 +00:00

app-server-client

Reconnect idle Cloud conversations after transient stream loss (#60969 )

2026-11-12 01:57:33 +00:00

app-server-daemon

Honor feature overrides when starting the app-server daemon (#60489 )

2026-11-10 01:31:19 +00:00

app-server-protocol

Report biometric type in user verification responses (#60948 )

2026-11-12 00:44:27 +00:00

app-server-protocol-noop-macros

…

app-server-test-client

Allow searching persisted attached threads (#60574 )

2026-11-10 11:17:06 +00:00

app-server-transport

Use runtime authentication for Analytics requests (#60101 )

2026-11-07 10:41:36 +00:00

apply-patch

Support direct Guardian review of patches invoked through exec_command (#58931 )

2026-11-02 17:05:56 +00:00

arg0

Stop dotenv loading on persistent I/O errors (#57233 )

2026-10-26 20:26:32 +00:00

async-utils

…

attachment-store

Use measured durations to budget uploaded audio (#59268 )

2026-11-04 00:19:12 +00:00

aws-auth

…

backend-client

Use runtime authentication for Analytics requests (#60101 )

2026-11-07 10:41:36 +00:00

build-info

…

bwrap

…

chatgpt

Use runtime authentication for OpenAI MCP and app requests (#59749 )

2026-11-05 22:03:29 +00:00

cli

Keep same-named MCP servers separate across environments (#60905 )

2026-11-11 23:36:19 +00:00

cloud-client

Reconnect idle Cloud conversations after transient stream loss (#60969 )

2026-11-12 01:57:33 +00:00

cloud-config

Add ChatGPT token stdin authentication to exec-server (#59569 )

2026-11-05 04:25:19 +00:00

cloud-tasks

Use runtime authentication across backend request paths (#59572 )

2026-11-05 05:09:32 +00:00

cloud-tasks-client

Use runtime authentication across backend request paths (#59572 )

2026-11-05 05:09:32 +00:00

cloud-tasks-mock-client

…

code-mode

Preserve typed gRPC code-mode session admission errors (#60496 )

2026-11-10 02:09:01 +00:00

code-mode-host

Add refreshable headers for OTLP HTTP exporters (#61028 )

2026-11-12 05:21:30 +00:00

code-mode-protocol

Add a content helper for forwarding MCP blocks in Code Mode (#60665 )

2026-11-10 21:28:22 +00:00

code-mode-runtime

Preserve file-backed audio in tool outputs (#60735 )

2026-11-11 06:41:15 +00:00

codex-api

Record reasoning replay removal metrics (#61017 )

2026-11-12 04:31:25 +00:00

codex-backend-openapi-models

…

codex-client

…

codex-experimental-api-macros

…

codex-home

…

codex-mcp

Keep same-named MCP servers separate across environments (#60905 )

2026-11-11 23:36:19 +00:00

collaboration-mode-templates

…

config

Add refreshable headers for OTLP HTTP exporters (#61028 )

2026-11-12 05:21:30 +00:00

config-schema

Use hermetic LLVM for Windows MSVC Bazel builds (#60507 )

2026-11-10 03:02:25 +00:00

connectors

Support app settings in plugin configuration (#58428 )

2026-10-30 20:39:47 +00:00

context-fragments

Ensure side-chat policy reaches the first model request (#60067 )

2026-11-07 05:59:44 +00:00

core

Remove the legacy sandbox policy setter from Config (#61144 )

2026-11-12 15:35:27 +00:00

core-api

Enforce host-required cyber access programs per thread (#59754 )

2026-11-05 22:49:46 +00:00

core-plugin-common

…

core-plugins

Simplify non-curated plugin cache refreshes (#61129 )

2026-11-12 14:07:50 +00:00

diagnostics

Pin the Rust toolchain to 1.95.0 (#57373 )

2026-10-27 05:52:01 +00:00

direct-tool-timing

Report auto-review overhead in turn critical-path analytics (#59260 )

2026-11-03 23:49:01 +00:00

docs

Run Bazel CI locally without BuildBuddy credentials (#59055 )

2026-11-03 04:08:59 +00:00

exec

Allow searching persisted attached threads (#60574 )

2026-11-10 11:17:06 +00:00

exec-server

Centralize filesystem helper sandbox preparation (#61138 )

2026-11-12 14:47:48 +00:00

exec-server-cli

Add ChatGPT token stdin authentication to exec-server (#59569 )

2026-11-05 04:25:19 +00:00

exec-server-protocol

Cache empty remote skill discovery with filesystem watches (#57598 )

2026-10-27 23:53:09 +00:00

execpolicy

Add opt-in Unicode canonical matching to exec policy rules (#59535 )

2026-11-05 00:55:46 +00:00

ext

Reserve Guardian context budget for selected Code Mode exec results (#60914 )

2026-11-11 23:49:59 +00:00

external-agent-migration

Add local-only Claude Code skill migration (#60492 )

2026-11-10 01:51:29 +00:00

features

Reserve Guardian context budget for selected Code Mode exec results (#60914 )

2026-11-11 23:49:59 +00:00

feedback

…

file-search

Deduplicate file search results from overlapping roots (#60845 )

2026-11-11 19:16:19 +00:00

file-system

Remove the legacy sandbox policy constructor (#59772 )

2026-11-06 00:37:27 +00:00

file-watcher

Avoid periodic wakeups in idle Windows file watchers (#60560 )

2026-11-10 08:52:35 +00:00

git-utils

Skip submodule worktree scans when checking repository changes (#60669 )

2026-11-10 21:58:49 +00:00

guardian-context

Reserve Guardian context budget for selected Code Mode exec results (#60914 )

2026-11-11 23:49:59 +00:00

history

Preserve thread-local model ID state across replay and compaction (#60942 )

2026-11-12 00:27:01 +00:00

hooks

Use hermetic LLVM for Windows MSVC Bazel builds (#60507 )

2026-11-10 03:02:25 +00:00

http-client

Reconnect idle Cloud conversations after transient stream loss (#60969 )

2026-11-12 01:57:33 +00:00

http-headers-helper

Extract HTTP headers helper execution into a shared crate (#61018 )

2026-11-12 04:32:34 +00:00

install-context

…

keyring-store

…

linux-sandbox

Use permission profiles in sandbox tests and documentation (#61133 )

2026-11-12 14:22:20 +00:00

lmstudio

…

Reconnect idle Cloud conversations after transient stream loss (#60969 )

2026-11-12 01:57:33 +00:00

memories

Use permission profiles in sandbox tests and documentation (#61133 )

2026-11-12 14:22:20 +00:00

mermaid

…

message-board

Decouple Guardian retrieval from local message-board handles (#60002 )

2026-11-06 22:26:03 +00:00

message-board-mcp

Add opt-in MCP discovery for in-memory agent message boards (#58973 )

2026-11-02 20:34:35 +00:00

message-history

…

model-provider

Enable model catalog discovery with gateway OAuth (#60414 )

2026-11-09 16:37:22 +00:00

model-provider-info

Add device-code authorization for gateway OAuth (#59822 )

2026-11-06 04:24:04 +00:00

models-manager

Enable model catalog discovery with gateway OAuth (#60414 )

2026-11-09 16:37:22 +00:00

mxc-sandbox

Preserve script quotes in Windows sandbox cmd invocations (#60624 )

2026-11-10 16:58:06 +00:00

network-proxy

Add policy-checked TCP upstream tunneling for SOCKS (#60523 )

2026-11-10 04:43:24 +00:00

ollama

…

otel

Add refreshable headers for OTLP HTTP exporters (#61028 )

2026-11-12 05:21:30 +00:00

otel-trace-websocket

…

plugin

…

plugin-host

Add a bounded V8 runtime for UI plugin processes (#57508 )

2026-10-27 16:36:32 +00:00

process-hardening

…

prompts

Simplify Guardian's post-denial approval guidance (#60391 )

2026-11-09 12:54:46 +00:00

protocol

Preserve allocated response item IDs in requests (#60977 )

2026-11-12 02:43:37 +00:00

realtime-webrtc

…

response-debug-context

Fall back to HTTP immediately for oversized WebSocket requests (#60840 )

2026-11-11 18:58:21 +00:00

responses-api-proxy

…

rmcp-client

Extract HTTP headers helper execution into a shared crate (#61018 )

2026-11-12 04:32:34 +00:00

rollout

Preserve thread-local model ID state across replay and compaction (#60942 )

2026-11-12 00:27:01 +00:00

rollout-trace

Use permission profiles in sandbox tests and documentation (#61133 )

2026-11-12 14:22:20 +00:00

runtime-agent-instance

Use runtime authentication for Analytics requests (#60101 )

2026-11-07 10:41:36 +00:00

sandboxing

Centralize filesystem helper sandbox preparation (#61138 )

2026-11-12 14:47:48 +00:00

scripts

Pin the Rust toolchain to 1.95.0 (#57373 )

2026-10-27 05:52:01 +00:00

secrets

Populate the local secrets cache after successful saves (#59520 )

2026-11-04 23:46:52 +00:00

shell-command

Pin the Rust toolchain to 1.95.0 (#57373 )

2026-10-27 05:52:01 +00:00

skills

Route broad Codex setup questions through self-knowledge guidance (#59949 )

2026-11-06 17:47:31 +00:00

state

Allow searching persisted attached threads (#60574 )

2026-11-10 11:17:06 +00:00

stdio-to-uds

…

tcp-tunnel

Add an OpenSSH ProxyCommand mode to codex tcp-tunnel (#60568 )

2026-11-10 09:54:57 +00:00

terminal-detection

Recognize Rex terminals and enable Kitty graphics for pets (#58270 )

2026-10-30 07:11:56 +00:00

test-binary-support

…

thread-manager-sample

Add optional tool call summaries to the full-screen transcript (#60554 )

2026-11-10 08:34:17 +00:00

thread-store

Preserve thread-local model ID state across replay and compaction (#60942 )

2026-11-12 00:27:01 +00:00

tools

Preserve file-backed audio in tool outputs (#60735 )

2026-11-11 06:41:15 +00:00

tui

Preserve multiline status lines in unfocused chat panes (#61141 )

2026-11-12 15:09:13 +00:00

uds

…

user-verification

Report biometric type in user verification responses (#60948 )

2026-11-12 00:44:27 +00:00

utils

Use permission profiles in sandbox tests and documentation (#61133 )

2026-11-12 14:22:20 +00:00

v8-poc

Test V8 inline typed array storage limits (#58385 )

2026-10-30 16:35:54 +00:00

vendor

…

voice-host

Stabilize cross-platform tests and directory-change fork permissions (#59369 )

2026-11-04 09:51:28 +00:00

websocket-auth

Pin the Rust toolchain to 1.95.0 (#57373 )

2026-10-27 05:52:01 +00:00

websocket-client

Wire shared runtime authentication through threads and API clients (#59177 )

2026-11-03 15:02:57 +00:00

windows-sandbox-rs

Add refreshable headers for OTLP HTTP exporters (#61028 )

2026-11-12 05:21:30 +00:00

windows-sandbox-service

Reconcile Windows runtime registration after service privilege errors (#60944 )

2026-11-12 00:28:56 +00:00

workload-identity

Support API workload identity authentication (#59275 )

2026-11-04 00:52:58 +00:00

worktree

…

.gitignore

…

BUILD.bazel

Ship the standalone executor in release packages (#57837 )

2026-10-28 21:09:05 +00:00

Cargo.lock

Add refreshable headers for OTLP HTTP exporters (#61028 )

2026-11-12 05:21:30 +00:00

Cargo.toml

Extract HTTP headers helper execution into a shared crate (#61018 )

2026-11-12 04:32:34 +00:00

clippy.toml

…

config.md

…

default.nix

…

deny.toml

Fix Windows atomic writes and refresh build maintenance (#60872 )

2026-11-11 22:31:42 +00:00

README.md

…

rust-toolchain.toml

Pin the Rust toolchain to 1.95.0 (#57373 )

2026-10-27 05:52:01 +00:00

rustfmt.toml

…

README.md

Codex CLI

Codex CLI Documentation