github/codex
4
0
Fork 0
mirror of https://github.com/openai/codex.git synced 2026-10-24 23:54:33 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
3a211471d2c3c39b2f3369e82b2df938db155798
codex/codex-rs
T
History
iceweasel-oai 3a211471d2 Request read control when updating Windows sandbox ACLs (#40475) 
## Why

`SetSecurityInfo` can reject a directory handle opened with only `WRITE_DAC`.

## What changed

- Request `READ_CONTROL` alongside `WRITE_DAC` when opening or creating a
  no-reparse sandbox directory.
- Add a Windows regression test that provisions and locks a plain sandbox
  directory through the handle-based ACL path.

GitOrigin-RevId: bd50dc54d4cc80e9609323ddb4ecc7e4780a31fb
2026-08-24 20:34:13 +00:00
..
.cargo
Upgrade Ratatui to 0.30.2 (#35959)
2026-07-29 13:53:15 +00:00
.config
[codex] Speed up local nextest runs (#26479)
2026-06-09 12:48:04 -07:00
agent-graph-store
Honor the configured SQLite home across state consumers (#34994)
2026-07-23 19:19:35 +00:00
agent-identity
Migrate agent identity to the shared HTTP client (#34631)
2026-07-21 22:44:43 +00:00
analytics
Report completed sub-agent activity on parent turns (#40437)
2026-08-24 17:07:21 +00:00
ansi-escape
Upgrade Ratatui to 0.30.2 (#35959)
2026-07-29 13:53:15 +00:00
app-server
Add credential brokering to network proxy feature config (#40466)
2026-08-24 19:52:27 +00:00
app-server-client
Add async delivery metadata to agent messages (#39312)
2026-08-18 23:05:52 +00:00
app-server-daemon
Honor system proxy settings in the daemon updater (#34495)
2026-07-21 08:50:21 +00:00
app-server-protocol
Report completed sub-agent activity on parent turns (#40437)
2026-08-24 17:07:21 +00:00
app-server-protocol-noop-macros
Precompute app-server protocol exports (#36212)
2026-07-30 19:47:30 +00:00
app-server-test-client
Add experimental app-server project APIs (#38940)
2026-08-17 04:01:37 +00:00
app-server-transport
Identify Mac mini hosts in remote control handshakes (#38840)
2026-08-16 06:48:59 +00:00
apply-patch
Harden unsandboxed patch filesystem access (#39659)
2026-08-20 08:10:08 +00:00
arg0
Harden unsandboxed patch filesystem access (#39659)
2026-08-20 08:10:08 +00:00
async-utils
[codex] Remove async_trait from first-party code (#27475)
2026-06-11 18:16:39 -07:00
aws-auth
Implement Amazon Bedrock setup in the app server (#40007)
2026-08-21 20:57:17 +00:00
backend-client
Support turn cost telemetry for custom model providers (#39785)
2026-08-20 19:28:32 +00:00
build-info
Add shared runtime build information (#37929)
2026-08-11 03:39:02 +00:00
bwrap
Verify bundled bwrap in Bazel builds (#38494)
2026-08-14 05:03:39 +00:00
chatgpt
Clarify the external contribution policy (#39089)
2026-08-17 22:37:14 +00:00
cli
Harden Windows updater command execution (#40422)
2026-08-24 15:48:51 +00:00
cloud-config
Support Edu Plus and Edu Pro account plans (#39316)
2026-08-18 23:47:00 +00:00
cloud-tasks
Fail closed when workload identity initialization fails (#38424)
2026-08-13 19:35:22 +00:00
cloud-tasks-client
Route backend requests through the HTTP client factory (#34490)
2026-07-21 08:28:51 +00:00
cloud-tasks-mock-client
[codex] Remove async_trait from first-party code (#27475)
2026-06-11 18:16:39 -07:00
code-mode
Allow more time for local code-mode host startup (#39940)
2026-08-21 14:14:00 +00:00
code-mode-host
Add a health endpoint to the code-mode gRPC listener (#38806)
2026-08-15 21:26:28 +00:00
code-mode-protocol
Resolve local JSON Schema refs in Code Mode types (#38664)
2026-08-14 22:40:19 +00:00
code-mode-runtime
Consolidate code mode output helper tests (#39969)
2026-08-21 16:50:34 +00:00
codex-api
Support attaching to existing realtime calls (#39876)
2026-08-21 06:41:28 +00:00
codex-backend-openapi-models
Support Edu Plus and Edu Pro account plans (#39316)
2026-08-18 23:47:00 +00:00
codex-client
Add structured telemetry for response retries (#38452)
2026-08-13 23:13:37 +00:00
codex-experimental-api-macros
…
codex-home
[codex] Bind shell snapshots to retained thread environments (#28421)
2026-06-15 20:10:53 -07:00
codex-mcp
Report runtime MCP connection status (#40068)
2026-08-22 05:54:43 +00:00
collaboration-mode-templates
Remove legacy collaboration mode variants (#36990)
2026-08-04 22:58:02 +00:00
config
Add credential brokering to network proxy feature config (#40466)
2026-08-24 19:52:27 +00:00
connectors
Honor the configured ChatGPT origin in connector install URLs (#37338)
2026-08-07 00:23:38 +00:00
context-fragments
Preserve content metadata when truncating messages (#40264)
2026-08-23 18:53:15 +00:00
core
Add structured full approval reviews to extensions (#40472)
2026-08-24 20:25:26 +00:00
core-api
Add unfinished root turn suspension (#40038)
2026-08-22 00:42:19 +00:00
core-plugins
Strengthen Agent Plugin MCP environment overlay tests (#40410)
2026-08-24 14:37:48 +00:00
diagnostics
Add process diagnostics snapshots (#37434)
2026-08-07 11:30:17 +00:00
docs
Unify turn input submission and routing (#38275)
2026-08-13 00:00:16 +00:00
exec
Allow exec callers to classify new threads (#40161)
2026-08-23 00:27:02 +00:00
exec-server
Retry failed shell snapshot captures (#40447)
2026-08-24 18:09:47 +00:00
exec-server-protocol
Advertise shell snapshot v2 support on Unix (#40376)
2026-08-24 10:15:42 +00:00
execpolicy
Enforce environment-specific command policies (#38942)
2026-08-17 04:37:50 +00:00
ext
Add structured full approval reviews to extensions (#40472)
2026-08-24 20:25:26 +00:00
external-agent-migration
Restrict plugin migration to home scope (#39663)
2026-08-20 08:24:18 +00:00
features
Add credential brokering to network proxy feature config (#40466)
2026-08-24 19:52:27 +00:00
feedback
Report diagnostic upload failures (#39287)
2026-08-18 21:46:18 +00:00
file-search
Avoid redundant filesystem probes (#36393)
2026-07-31 21:37:56 +00:00
file-system
Require filesystem backends to implement directory walks (#39749)
2026-08-20 17:16:52 +00:00
file-watcher
…
git-utils
Harden unsandboxed patch filesystem access (#39659)
2026-08-20 08:10:08 +00:00
history
Preserve MCP resource origins across compaction (#39192)
2026-08-18 12:37:41 +00:00
hooks
Add end-to-end tests for executor Stop hooks (#40020)
2026-08-21 21:45:26 +00:00
http-client
Improve codex doctor network diagnostics (#38918)
2026-08-17 00:09:44 +00:00
install-context
Extend bundled package discovery and expose its version (#37886)
2026-08-10 22:12:14 +00:00
keyring-store
feat: add auth-specific encrypted secret namespaces (#27535)
2026-06-12 19:52:49 +00:00
linux-sandbox
Harden bubblewrap synthetic mount registry isolation (#40302)
2026-08-24 00:52:52 +00:00
lmstudio
Route LM Studio requests through the shared HTTP client (#34678)
2026-07-22 04:17:34 +00:00
login
Keep credentials out of app-server logs (#39993)
2026-08-21 19:04:32 +00:00
mcp-server
Standardize shell execution on unified exec (#39757)
2026-08-20 17:46:05 +00:00
memories
Gate content item kinds behind a feature flag (#40450)
2026-08-24 18:22:13 +00:00
message-history
Add bounded batch lookups for message history (#33902)
2026-07-17 20:52:42 +00:00
model-provider
Implement Amazon Bedrock setup in the app server (#40007)
2026-08-21 20:57:17 +00:00
model-provider-info
Keep credentials out of app-server logs (#39993)
2026-08-21 19:04:32 +00:00
models-manager
Standardize shell execution on unified exec (#39772)
2026-08-20 18:29:35 +00:00
network-proxy
Add credential brokering to network proxy feature config (#40466)
2026-08-24 19:52:27 +00:00
ollama
Route Ollama through the shared HTTP client (#36078)
2026-07-30 04:26:36 +00:00
otel
Make tool-result telemetry limits configurable (#39779)
2026-08-20 19:09:04 +00:00
plugin
Run allowlisted executor plugin stop hooks (#40009)
2026-08-21 21:01:59 +00:00
process-hardening
…
prompts
Classify permission instructions under the permissions namespace (#40295)
2026-08-23 23:38:12 +00:00
protocol
Add credential brokering to network proxy feature config (#40466)
2026-08-24 19:52:27 +00:00
response-debug-context
Surface misalignment policy violations as typed errors (#38682)
2026-08-15 01:34:33 +00:00
responses-api-proxy
Upgrade pnpm to 10.34.5 (#39967)
2026-08-21 16:45:05 +00:00
rmcp-client
Cache executor metadata from initialization (#40343)
2026-08-24 06:43:07 +00:00
rollout
Report completed sub-agent activity on parent turns (#40437)
2026-08-24 17:07:21 +00:00
rollout-trace
Report completed sub-agent activity on parent turns (#40437)
2026-08-24 17:07:21 +00:00
sandboxing
Allow semaphore limit queries in the macOS sandbox (#39976)
2026-08-21 17:16:51 +00:00
scripts
…
secrets
Speed up MCP OAuth credential reads (#37842)
2026-08-10 15:43:10 +00:00
shell-command
Cache shell snapshots in the exec server (#39756)
2026-08-20 17:39:06 +00:00
shell-escalation
Prevent launch context from reaching child processes (#37607)
2026-08-08 16:58:26 +00:00
skills
Harden skill installation against unsafe symlinks (#39608)
2026-08-20 06:10:03 +00:00
state
Prevent SQLx warnings from feeding back into SQLite logs (#39592)
2026-08-20 05:16:59 +00:00
stdio-to-uds
…
terminal-detection
Avoid requesting key-release events in Ghostty (#36834)
2026-08-04 03:49:53 +00:00
test-binary-support
…
thread-manager-sample
Standardize shell execution on unified exec (#39772)
2026-08-20 18:29:35 +00:00
thread-store
Optimize case-insensitive thread history matching (#39802)
2026-08-20 21:50:51 +00:00
tools
Expose invocation sources to extension tools (#40382)
2026-08-24 11:02:14 +00:00
tui
Render Markdown links as clickable labels in supported terminals (#40471)
2026-08-24 20:04:52 +00:00
uds
…
utils
Prevent Unix PTY I/O from blocking runtime shutdown (#40460)
2026-08-24 19:25:32 +00:00
v8-poc
Upgrade Bazel Rust and LLVM dependencies (#34781)
2026-07-22 16:18:08 +00:00
vendor
build: run buildifier from just fmt (#28125)
2026-06-13 21:43:39 -07:00
websocket-client
Box the WebSocket dial future (#39726)
2026-08-20 14:55:08 +00:00
windows-sandbox-rs
Request read control when updating Windows sandbox ACLs (#40475)
2026-08-24 20:34:13 +00:00
workload-identity
Forward workload identity context during token exchange (#38767)
2026-08-15 14:31:04 +00:00
.gitignore
…
BUILD.bazel
bench: add e2e benchmark entrypoints (#31428)
2026-07-09 17:31:44 -07:00
Cargo.lock
Add TUI tools for managing Codex tasks (#40308)
2026-08-24 01:50:53 +00:00
Cargo.toml
Keep credentials out of app-server logs (#39993)
2026-08-21 19:04:32 +00:00
clippy.toml
Enforce centralized SQLite connection creation (#35828)
2026-07-28 20:49:22 +00:00
config.md
Use canonical links in the moved config notice (#32326)
2026-07-11 03:27:51 +00:00
default.nix
Upgrade Ratatui to 0.30.2 (#35959)
2026-07-29 13:53:15 +00:00
deny.toml
Remove app-server's direct reqwest dependency (#39293)
2026-08-18 22:00:25 +00:00
README.md
…
rust-toolchain.toml
…
rustfmt.toml
…

README.md

Codex CLI

Codex CLI Documentation

Reference in New Issue View Git Blame Copy Permalink