mirror of https://github.com/openai/codex.git synced 2026-11-05 20:10:33 +00:00

Files

T

viyatb-oai d92aae5501 Centralize filesystem permission resolution for sandbox enforcement (#59009 )

## What changed

- Add `resolve_for_enforcement` to collect filesystem grants, denials, glob patterns, and platform defaults with backend-specific path handling.
- Use the shared result in Linux bubblewrap and macOS Seatbelt policy generation, including Seatbelt scratch access and filesystem policy equivalence checks.
- Pass already-derived filesystem and network policies to Linux seccomp setup instead of converting the permission profile again.

## Testing

Extend the Seatbelt glob test to execute sandboxed commands and verify that relative deny patterns through a symlink block reads and writes while sibling files remain editable.

GitOrigin-RevId: 748603f6b5a6db739b198a0f93a899041612370a

2026-11-02 23:19:47 +00:00

src

Centralize filesystem permission resolution for sandbox enforcement (#59009 )

2026-11-02 23:19:47 +00:00

tests/support

Support typed content in contextual prompt fragments (#54776 )

2026-10-17 04:02:21 +00:00

BUILD.bazel

build: run buildifier from just fmt (#28125 )

2026-06-13 21:43:39 -07:00

Cargo.toml

Protect metadata writes through macOS case aliases (#54273 )

2026-10-15 12:01:04 +00:00

README.md

fix: separate codex mcp into codex mcp-server and codex app-server (#4471 )

2025-09-30 07:06:18 +00:00

README.md

codex-protocol

This crate defines the "types" for the protocol used by Codex CLI, which includes both "internal types" for communication between codex-core and codex-tui, as well as "external types" used with codex app-server.

This crate should have minimal dependencies.

Ideally, we should avoid "material business logic" in this crate, as we can always introduce Ext-style traits to add functionality to types in other crates.