mirror of https://github.com/openai/codex.git synced 2026-10-24 23:54:33 +00:00

Files

T

alexsong-oai 13fe2bcb7a Redact Bedrock API keys from debug output (#40706 )

## Why

Derived debug formatting exposed the managed Amazon Bedrock API key.

## What changed

Implement custom `Debug` formatting for `BedrockApiKeyAuth` that replaces the
API key with `<redacted>` while retaining the region.

## Testing

Add regression coverage for direct and `CodexAuth`-wrapped debug output.

GitOrigin-RevId: 68920fa00a9189c959b0025f22797b32f53d1995

2026-08-25 21:08:22 +00:00

.cargo

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

.config

…

agent-graph-store

Honor the configured SQLite home across state consumers (#34994 )

2026-07-23 19:19:35 +00:00

agent-identity

Migrate agent identity to the shared HTTP client (#34631 )

2026-07-21 22:44:43 +00:00

agent-roles

Extract agent role loading into a dedicated crate (#40487 )

2026-08-24 22:40:35 +00:00

analytics

Track remaining multi-agent v2 tools in analytics (#40585 )

2026-08-25 10:17:03 +00:00

ansi-escape

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

app-server

Remove WebSocket transport from code-mode hosts (#40692 )

2026-08-25 20:37:15 +00:00

app-server-client

Add async delivery metadata to agent messages (#39312 )

2026-08-18 23:05:52 +00:00

app-server-daemon

Honor system proxy settings in the daemon updater (#34495 )

2026-07-21 08:50:21 +00:00

app-server-protocol

Add per-turn cyber access program selection (#40687 )

2026-08-25 19:54:52 +00:00

app-server-protocol-noop-macros

Precompute app-server protocol exports (#36212 )

2026-07-30 19:47:30 +00:00

app-server-test-client

Represent terminal input in approval reviews (#40528 )

2026-08-25 03:08:33 +00:00

app-server-transport

Support managed AWS access keys for Amazon Bedrock (#40481 )

2026-08-24 21:39:48 +00:00

apply-patch

Harden unsandboxed patch filesystem access (#39659 )

2026-08-20 08:10:08 +00:00

arg0

Preserve Unicode paths in Windows batch aliases (#40570 )

2026-08-25 07:37:42 +00:00

async-utils

…

aws-auth

Support managed AWS access keys for Amazon Bedrock (#40481 )

2026-08-24 21:39:48 +00:00

backend-client

Support turn cost telemetry for custom model providers (#39785 )

2026-08-20 19:28:32 +00:00

build-info

Add shared runtime build information (#37929 )

2026-08-11 03:39:02 +00:00

bwrap

Verify bundled bwrap in Bazel builds (#38494 )

2026-08-14 05:03:39 +00:00

chatgpt

Clarify the external contribution policy (#39089 )

2026-08-17 22:37:14 +00:00

cli

Remove WebSocket transport from code-mode hosts (#40692 )

2026-08-25 20:37:15 +00:00

cloud-config

Retry timed-out cloud config loads in the background (#40637 )

2026-08-25 16:38:46 +00:00

cloud-tasks

Fail closed when workload identity initialization fails (#38424 )

2026-08-13 19:35:22 +00:00

cloud-tasks-client

Route backend requests through the HTTP client factory (#34490 )

2026-07-21 08:28:51 +00:00

cloud-tasks-mock-client

…

code-mode

Remove WebSocket transport from code-mode hosts (#40692 )

2026-08-25 20:37:15 +00:00

code-mode-host

Remove WebSocket transport from code-mode hosts (#40692 )

2026-08-25 20:37:15 +00:00

code-mode-protocol

Remove WebSocket transport from code-mode hosts (#40692 )

2026-08-25 20:37:15 +00:00

code-mode-runtime

Consolidate code mode output helper tests (#39969 )

2026-08-21 16:50:34 +00:00

codex-api

Add per-turn cyber access program selection (#40687 )

2026-08-25 19:54:52 +00:00

codex-backend-openapi-models

Support Edu Plus and Edu Pro account plans (#39316 )

2026-08-18 23:47:00 +00:00

codex-client

Add structured telemetry for response retries (#38452 )

2026-08-13 23:13:37 +00:00

codex-experimental-api-macros

…

codex-home

…

codex-mcp

Harden MCP OAuth callback handling (#40691 )

2026-08-25 20:26:23 +00:00

collaboration-mode-templates

Remove legacy collaboration mode variants (#36990 )

2026-08-04 22:58:02 +00:00

config

Harden MCP OAuth callback handling (#40691 )

2026-08-25 20:26:23 +00:00

connectors

Honor the configured ChatGPT origin in connector install URLs (#37338 )

2026-08-07 00:23:38 +00:00

context-fragments

Preserve content metadata when truncating messages (#40264 )

2026-08-23 18:53:15 +00:00

core

Harden MCP OAuth callback handling (#40691 )

2026-08-25 20:26:23 +00:00

core-api

Add unfinished root turn suspension (#40038 )

2026-08-22 00:42:19 +00:00

core-plugins

Harden MCP OAuth callback handling (#40691 )

2026-08-25 20:26:23 +00:00

diagnostics

Add process diagnostics snapshots (#37434 )

2026-08-07 11:30:17 +00:00

docs

Unify turn input submission and routing (#38275 )

2026-08-13 00:00:16 +00:00

exec

Add per-turn cyber access program selection (#40687 )

2026-08-25 19:54:52 +00:00

exec-server

Instrument exec-server shell snapshot capture (#40620 )

2026-08-25 14:34:25 +00:00

exec-server-protocol

Propagate temporary directories into sandbox policy contexts (#40660 )

2026-08-25 18:04:01 +00:00

execpolicy

Enforce environment-specific command policies (#38942 )

2026-08-17 04:37:50 +00:00

ext

Add per-turn cyber access program selection (#40687 )

2026-08-25 19:54:52 +00:00

external-agent-migration

Migrate Claude commands without frontmatter (#40643 )

2026-08-25 17:13:50 +00:00

features

Add Amazon Bedrock setup to TUI onboarding (#40679 )

2026-08-25 19:30:21 +00:00

feedback

Report diagnostic upload failures (#39287 )

2026-08-18 21:46:18 +00:00

file-search

Avoid redundant filesystem probes (#36393 )

2026-07-31 21:37:56 +00:00

file-system

Propagate temporary directories into sandbox policy contexts (#40660 )

2026-08-25 18:04:01 +00:00

file-watcher

…

git-utils

Harden unsandboxed patch filesystem access (#39659 )

2026-08-20 08:10:08 +00:00

history

Persist realtime events in the thread timeline (#40508 )

2026-08-25 01:03:20 +00:00

hooks

Scope stop hooks for memory consolidation (#40587 )

2026-08-25 10:29:26 +00:00

http-client

Improve codex doctor network diagnostics (#38918 )

2026-08-17 00:09:44 +00:00

install-context

Extend bundled package discovery and expose its version (#37886 )

2026-08-10 22:12:14 +00:00

keyring-store

…

linux-sandbox

Harden bubblewrap synthetic mount registry isolation (#40302 )

2026-08-24 00:52:52 +00:00

lmstudio

Route LM Studio requests through the shared HTTP client (#34678 )

2026-07-22 04:17:34 +00:00

Redact Bedrock API keys from debug output (#40706 )

2026-08-25 21:08:22 +00:00

mcp-server

Represent terminal input in approval reviews (#40528 )

2026-08-25 03:08:33 +00:00

memories

Scope stop hooks for memory consolidation (#40587 )

2026-08-25 10:29:26 +00:00

message-history

Add bounded batch lookups for message history (#33902 )

2026-07-17 20:52:42 +00:00

model-provider

Support managed AWS access keys for Amazon Bedrock (#40481 )

2026-08-24 21:39:48 +00:00

model-provider-info

Keep credentials out of app-server logs (#39993 )

2026-08-21 19:04:32 +00:00

models-manager

Support managed AWS access keys for Amazon Bedrock (#40481 )

2026-08-24 21:39:48 +00:00

network-proxy

Reuse private desktops across Windows sandbox commands (#40672 )

2026-08-25 18:41:03 +00:00

ollama

Route Ollama through the shared HTTP client (#36078 )

2026-07-30 04:26:36 +00:00

otel

Prevent telemetry exporters from feeding back into themselves (#40658 )

2026-08-25 17:59:32 +00:00

plugin

Run allowlisted executor plugin stop hooks (#40009 )

2026-08-21 21:01:59 +00:00

process-hardening

…

prompts

Harden goal continuation and remove duplicate prompt helpers (#40628 )

2026-08-25 15:50:19 +00:00

protocol

Add per-turn cyber access program selection (#40687 )

2026-08-25 19:54:52 +00:00

response-debug-context

Surface misalignment policy violations as typed errors (#38682 )

2026-08-15 01:34:33 +00:00

responses-api-proxy

Upgrade pnpm to 10.34.5 (#39967 )

2026-08-21 16:45:05 +00:00

rmcp-client

Harden MCP OAuth callback handling (#40691 )

2026-08-25 20:26:23 +00:00

rollout

Add per-turn cyber access program selection (#40687 )

2026-08-25 19:54:52 +00:00

rollout-trace

Report completed sub-agent activity on parent turns (#40437 )

2026-08-24 17:07:21 +00:00

sandboxing

Derive sandbox contexts from turn environments (#40551 )

2026-08-25 05:16:45 +00:00

scripts

…

secrets

Speed up MCP OAuth credential reads (#37842 )

2026-08-10 15:43:10 +00:00

shell-command

Cache shell snapshots in the exec server (#39756 )

2026-08-20 17:39:06 +00:00

shell-escalation

Prevent launch context from reaching child processes (#37607 )

2026-08-08 16:58:26 +00:00

skills

Harden skill installation against unsafe symlinks (#39608 )

2026-08-20 06:10:03 +00:00

state

Bound SQLite integrity checks for diagnostic attachments (#40688 )

2026-08-25 20:09:55 +00:00

stdio-to-uds

…

terminal-detection

Avoid requesting key-release events in Ghostty (#36834 )

2026-08-04 03:49:53 +00:00

test-binary-support

…

thread-manager-sample

Standardize shell execution on unified exec (#39772 )

2026-08-20 18:29:35 +00:00

thread-store

Add per-turn cyber access program selection (#40687 )

2026-08-25 19:54:52 +00:00

tools

Expose invocation sources to extension tools (#40382 )

2026-08-24 11:02:14 +00:00

tui

Generate automatic and manual conversation recaps (#40705 )

2026-08-25 21:03:11 +00:00

uds

…

utils

Prevent Unix PTY I/O from blocking runtime shutdown (#40460 )

2026-08-24 19:25:32 +00:00

v8-poc

Upgrade Bazel Rust and LLVM dependencies (#34781 )

2026-07-22 16:18:08 +00:00

vendor

…

websocket-client

Box the WebSocket dial future (#39726 )

2026-08-20 14:55:08 +00:00

windows-sandbox-rs

Reuse private desktops across Windows sandbox commands (#40672 )

2026-08-25 18:41:03 +00:00

workload-identity

Forward workload identity context during token exchange (#38767 )

2026-08-15 14:31:04 +00:00

worktree

Add worktree settings parser (#40624 )

2026-08-25 15:10:27 +00:00

.gitignore

…

BUILD.bazel

bench: add e2e benchmark entrypoints (#31428 )

2026-07-09 17:31:44 -07:00

Cargo.lock

Remove WebSocket transport from code-mode hosts (#40692 )

2026-08-25 20:37:15 +00:00

Cargo.toml

Add worktree settings parser (#40624 )

2026-08-25 15:10:27 +00:00

clippy.toml

Enforce centralized SQLite connection creation (#35828 )

2026-07-28 20:49:22 +00:00

config.md

Use canonical links in the moved config notice (#32326 )

2026-07-11 03:27:51 +00:00

default.nix

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

deny.toml

Remove app-server's direct reqwest dependency (#39293 )

2026-08-18 22:00:25 +00:00

README.md

…

rust-toolchain.toml

…

rustfmt.toml

…

README.md

Codex CLI

Codex CLI Documentation