mirror of https://github.com/openai/codex.git synced 2026-10-21 04:50:22 +00:00

Files

T

Eric Traut 09bc28f348 Restrict Windows IDE pipe client impersonation (#39020 )

## Why

Windows named pipe servers can impersonate connected clients. IDE context
connections only require the server to identify the client, so they should not
grant broader impersonation rights.

## What changed

Open Windows IDE context pipes with `SECURITY_SQOS_PRESENT` and
`SECURITY_IDENTIFICATION`, limiting the server's impersonation token to the
identification level.

## Testing

Add a Windows regression test that connects to a named pipe, asks the server to
impersonate the client, and verifies that the resulting token has the
`SecurityIdentification` level.

GitOrigin-RevId: 51ef080f3367857987e03b0113a476040ea40e56

2026-08-17 16:34:21 +00:00

.cargo

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

.config

[codex] Speed up local nextest runs (#26479 )

2026-06-09 12:48:04 -07:00

agent-graph-store

Honor the configured SQLite home across state consumers (#34994 )

2026-07-23 19:19:35 +00:00

agent-identity

Migrate agent identity to the shared HTTP client (#34631 )

2026-07-21 22:44:43 +00:00

analytics

Add experimental app-server project APIs (#38940 )

2026-08-17 04:01:37 +00:00

ansi-escape

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

app-server

Emit API-key turn cost telemetry from app-server (#39006 )

2026-08-17 13:20:58 +00:00

app-server-client

Prevent unread events from blocking in-process requests (#38381 )

2026-08-13 13:57:25 +00:00

app-server-daemon

Honor system proxy settings in the daemon updater (#34495 )

2026-07-21 08:50:21 +00:00

app-server-protocol

Add experimental app-server project APIs (#38940 )

2026-08-17 04:01:37 +00:00

app-server-protocol-noop-macros

Precompute app-server protocol exports (#36212 )

2026-07-30 19:47:30 +00:00

app-server-test-client

Add experimental app-server project APIs (#38940 )

2026-08-17 04:01:37 +00:00

app-server-transport

Identify Mac mini hosts in remote control handshakes (#38840 )

2026-08-16 06:48:59 +00:00

apply-patch

Reject duplicate resolved paths in apply_patch (#37867 )

2026-08-10 18:44:58 +00:00

arg0

Add a line-ending preservation mode to apply_patch (#37757 )

2026-08-10 01:39:55 +00:00

async-utils

[codex] Remove async_trait from first-party code (#27475 )

2026-06-11 18:16:39 -07:00

aws-auth

…

backend-client

Emit API-key turn cost telemetry from app-server (#39006 )

2026-08-17 13:20:58 +00:00

build-info

Add shared runtime build information (#37929 )

2026-08-11 03:39:02 +00:00

bwrap

Verify bundled bwrap in Bazel builds (#38494 )

2026-08-14 05:03:39 +00:00

chatgpt

Remove the workspace settings gate for apps and plugins (#38994 )

2026-08-17 12:26:59 +00:00

cli

Add a configurable skill catalog token budget (#38978 )

2026-08-17 10:01:59 +00:00

cloud-config

Fail closed when workload identity initialization fails (#38424 )

2026-08-13 19:35:22 +00:00

cloud-tasks

Fail closed when workload identity initialization fails (#38424 )

2026-08-13 19:35:22 +00:00

cloud-tasks-client

Route backend requests through the HTTP client factory (#34490 )

2026-07-21 08:28:51 +00:00

cloud-tasks-mock-client

[codex] Remove async_trait from first-party code (#27475 )

2026-06-11 18:16:39 -07:00

code-mode

Deliver gRPC code-mode notifications without truncation (#38645 )

2026-08-14 20:42:35 +00:00

code-mode-host

Add a health endpoint to the code-mode gRPC listener (#38806 )

2026-08-15 21:26:28 +00:00

code-mode-protocol

Resolve local JSON Schema refs in Code Mode types (#38664 )

2026-08-14 22:40:19 +00:00

code-mode-runtime

Add per-session code-mode execution limits (#37114 )

2026-08-05 16:09:01 +00:00

codex-api

Surface misalignment policy violations as typed errors (#38682 )

2026-08-15 01:34:33 +00:00

codex-backend-openapi-models

Support Enterprise automation account plans (#36228 )

2026-07-30 21:49:53 +00:00

codex-client

Add structured telemetry for response retries (#38452 )

2026-08-13 23:13:37 +00:00

codex-experimental-api-macros

…

codex-home

[codex] Bind shell snapshots to retained thread environments (#28421 )

2026-06-15 20:10:53 -07:00

codex-mcp

Add MCP protocol discovery metrics (#38634 )

2026-08-14 19:57:04 +00:00

collaboration-mode-templates

Remove legacy collaboration mode variants (#36990 )

2026-08-04 22:58:02 +00:00

config

Move MCP policy types into codex-protocol (#39017 )

2026-08-17 16:20:52 +00:00

connectors

Honor the configured ChatGPT origin in connector install URLs (#37338 )

2026-08-07 00:23:38 +00:00

context-fragments

Simplify contextual user fragment registration (#36742 )

2026-08-03 11:39:51 +00:00

core

Move MCP policy types into codex-protocol (#39017 )

2026-08-17 16:20:52 +00:00

core-api

Move permission profile snapshots into the protocol (#38651 )

2026-08-14 21:17:29 +00:00

core-plugins

Refresh hook runtimes after plugin changes (#38703 )

2026-08-15 05:28:53 +00:00

diagnostics

Add process diagnostics snapshots (#37434 )

2026-08-07 11:30:17 +00:00

docs

Unify turn input submission and routing (#38275 )

2026-08-13 00:00:16 +00:00

exec

Add experimental app-server project APIs (#38940 )

2026-08-17 04:01:37 +00:00

exec-server

Prevent Noise auth tokens from reaching child processes (#38941 )

2026-08-17 04:17:45 +00:00

exec-server-protocol

Forward executor network policy decisions for auditing (#38670 )

2026-08-14 23:42:40 +00:00

execpolicy

Enforce environment-specific command policies (#38942 )

2026-08-17 04:37:50 +00:00

ext

Add task context to shadow skill selection (#39008 )

2026-08-17 13:29:57 +00:00

external-agent-migration

Keep the latest Guardian risk score during concurrent sampling (#38580 )

2026-08-14 13:44:51 +00:00

features

Ignore stale Guardian tool risk scores (#39001 )

2026-08-17 13:06:15 +00:00

feedback

Limit payload traces in diagnostic logs (#37497 )

2026-08-07 19:56:29 +00:00

file-search

Avoid redundant filesystem probes (#36393 )

2026-07-31 21:37:56 +00:00

file-system

Preserve Windows sandbox proxy settings in guardian sessions (#35036 )

2026-07-23 23:35:29 +00:00

file-watcher

Fix fs/watch debounce batching (#24716 )

2026-05-28 23:09:55 -07:00

git-utils

Use the shared environment scrubber in git-utils (#37843 )

2026-08-10 15:50:53 +00:00

history

Store security risk scores as a snapshot (#38567 )

2026-08-14 12:16:51 +00:00

hooks

Prevent Noise auth tokens from reaching child processes (#38941 )

2026-08-17 04:17:45 +00:00

http-client

Improve codex doctor network diagnostics (#38918 )

2026-08-17 00:09:44 +00:00

install-context

Extend bundled package discovery and expose its version (#37886 )

2026-08-10 22:12:14 +00:00

keyring-store

feat: add auth-specific encrypted secret namespaces (#27535 )

2026-06-12 19:52:49 +00:00

linux-sandbox

Verify bundled bwrap in Bazel builds (#38494 )

2026-08-14 05:03:39 +00:00

lmstudio

Route LM Studio requests through the shared HTTP client (#34678 )

2026-07-22 04:17:34 +00:00

Forward workload identity context during token exchange (#38767 )

2026-08-15 14:31:04 +00:00

mcp-server

Add a configurable skill catalog token budget (#38978 )

2026-08-17 10:01:59 +00:00

memories

Keep the latest Guardian risk score during concurrent sampling (#38580 )

2026-08-14 13:44:51 +00:00

message-history

Add bounded batch lookups for message history (#33902 )

2026-07-17 20:52:42 +00:00

model-provider

Prioritize global models in the Bedrock Runtime catalog (#38617 )

2026-08-14 18:01:06 +00:00

model-provider-info

Add an Amazon Bedrock Runtime provider (#38470 )

2026-08-14 01:23:59 +00:00

models-manager

Source Guardian v2 defaults from the model catalog (#38990 )

2026-08-17 11:44:56 +00:00

network-proxy

Forward executor network policy decisions for auditing (#38670 )

2026-08-14 23:42:40 +00:00

ollama

Route Ollama through the shared HTTP client (#36078 )

2026-07-30 04:26:36 +00:00

otel

Emit API-key turn cost telemetry from app-server (#39006 )

2026-08-17 13:20:58 +00:00

plugin

Remove obsolete plugin skill discovery helpers (#37832 )

2026-08-10 14:25:13 +00:00

process-hardening

fix(process-hardening): preserve macos malloc diagnostics (#24479 )

2026-05-25 17:26:10 -03:00

prompts

Remove unused apply_patch prompt fallback (#38291 )

2026-08-13 01:52:02 +00:00

protocol

Move MCP policy types into codex-protocol (#39017 )

2026-08-17 16:20:52 +00:00

response-debug-context

Surface misalignment policy violations as typed errors (#38682 )

2026-08-15 01:34:33 +00:00

responses-api-proxy

…

rmcp-client

Isolate MCP resource headers during OAuth requests (#39019 )

2026-08-17 16:29:47 +00:00

rollout

Add experimental app-server project APIs (#38940 )

2026-08-17 04:01:37 +00:00

rollout-trace

Add durable user-message queue dispatch (#37204 )

2026-08-06 03:11:42 +00:00

sandboxing

Restrict filesystem helper sandbox access (#38561 )

2026-08-14 11:47:12 +00:00

scripts

Uprev Rust toolchain pins to 1.95.0 (#24684 )

2026-05-26 20:59:47 -07:00

secrets

Speed up MCP OAuth credential reads (#37842 )

2026-08-10 15:43:10 +00:00

shell-command

Recognize PowerShell Get-Content file reads (#38415 )

2026-08-13 18:30:51 +00:00

shell-escalation

Prevent launch context from reaching child processes (#37607 )

2026-08-08 16:58:26 +00:00

skills

Add bounded skill model delegation instructions (#38475 )

2026-08-14 01:49:00 +00:00

state

Add experimental app-server project APIs (#38940 )

2026-08-17 04:01:37 +00:00

stdio-to-uds

…

terminal-detection

Avoid requesting key-release events in Ghostty (#36834 )

2026-08-04 03:49:53 +00:00

test-binary-support

…

thread-manager-sample

Add a configurable skill catalog token budget (#38978 )

2026-08-17 10:01:59 +00:00

thread-store

Add experimental app-server project APIs (#38940 )

2026-08-17 04:01:37 +00:00

tools

Enable parallel tool calls for all model prompts (#38499 )

2026-08-14 05:49:33 +00:00

tui

Restrict Windows IDE pipe client impersonation (#39020 )

2026-08-17 16:34:21 +00:00

uds

…

utils

Include node_repl images in Guardian review evidence (#38454 )

2026-08-13 23:29:52 +00:00

v8-poc

Upgrade Bazel Rust and LLVM dependencies (#34781 )

2026-07-22 16:18:08 +00:00

vendor

build: run buildifier from just fmt (#28125 )

2026-06-13 21:43:39 -07:00

websocket-client

Route exec-server WebSockets through configured proxies (#35056 )

2026-07-24 00:16:42 +00:00

windows-sandbox-rs

Enforce managed deny-read rules in the Windows sandbox (#38660 )

2026-08-14 22:28:33 +00:00

workload-identity

Forward workload identity context during token exchange (#38767 )

2026-08-15 14:31:04 +00:00

.gitignore

…

BUILD.bazel

bench: add e2e benchmark entrypoints (#31428 )

2026-07-09 17:31:44 -07:00

Cargo.lock

Improve codex doctor network diagnostics (#38918 )

2026-08-17 00:09:44 +00:00

Cargo.toml

Remove the TUI test dependency on codex-cli (#38746 )

2026-08-15 11:01:30 +00:00

clippy.toml

Enforce centralized SQLite connection creation (#35828 )

2026-07-28 20:49:22 +00:00

config.md

Use canonical links in the moved config notice (#32326 )

2026-07-11 03:27:51 +00:00

default.nix

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

deny.toml

Route gRPC code-mode sessions through the shared HTTP client (#38087 )

2026-08-11 23:40:07 +00:00

README.md

Simplify Codex CLI README (#26313 )

2026-06-04 09:16:03 -07:00

rust-toolchain.toml

Uprev Rust toolchain pins to 1.95.0 (#24684 )

2026-05-26 20:59:47 -07:00

rustfmt.toml

…

README.md

Codex CLI

Codex CLI Documentation