jif d13aeb77ea Allow trusted symlinks beneath CODEX_HOME on macOS (#42716) ...

## What changed

- Add the macOS-only `allow_symlinked_codex_home` user setting. When enabled in the execution host's `$CODEX_HOME/config.toml`, writable roots at or beneath that home may traverse symlinks.
- Keep the exception disabled by default and prevent project config, command-line overrides, and ignored user config from enabling it. Other writable roots remain subject to symlink checks.
- Propagate the resolved setting through local, interactive, and exec-server sandbox paths, including `CODEX_HOME` aliases.
- Explain the opt-out in symlink rejection errors, including that it trusts targets outside `CODEX_HOME` and targets that change between commands.

## Testing

- Add macOS coverage for shell commands, patches, filesystem helpers, process execution, and interactive startup with enabled, disabled, aliased, and out-of-scope homes.

GitOrigin-RevId: 99fcdf611200c9e1b7713cf06f7fdea5bfa7f089

2026-09-04 10:12:03 +00:00

..

add_dir.rs

…

agents_md.rs

…

apply_patch.rs

Support managed AWS access keys for Amazon Bedrock (#40481)

2026-08-24 21:39:48 +00:00

approval_policy.rs

Add an --approve-for-me CLI flag (#36373)

2026-07-31 18:26:04 +00:00

auth_env.rs

…

completion_backfill_tests.rs

Backfill completion items only for the active exec turn (#34226)

2026-07-19 20:36:18 +00:00

ephemeral.rs

…

hooks.rs

…

mcp_required_exit.rs

…

mod.rs

Add managed worktrees to codex exec (#42652)

2026-09-04 01:56:38 +00:00

originator.rs

…

output_schema.rs

…

prompt_stdin.rs

…

resume.rs

Include shared histories in rollout compression (#42039)

2026-09-01 12:23:20 +00:00

sandbox.rs

Add macOS Seatbelt filesystem integration tests (#39665)

2026-08-20 08:28:35 +00:00

seatbelt.rs

Allow trusted symlinks beneath CODEX_HOME on macOS (#42716)

2026-09-04 10:12:03 +00:00

server_error_exit.rs

…

worktree.rs

Add managed worktrees to codex exec (#42652)

2026-09-04 01:56:38 +00:00