Sean Huang 4fd2c460dd Extract Windows deny-read glob scan planning into protocol (#43903) ...

Move lexical scan-bound calculation into `codex_protocol::permissions` and
expose `windows_deny_read_glob_scan` with its `WindowsDenyReadGlobScan` result.
Have the Windows sandbox resolver use the shared helper, preserving literal
scan roots, glob suffixes, and traversal depth limits without filesystem access
in the planner.

GitOrigin-RevId: 748a12b45f89c6e045e9123c055453ec39c202b1

2026-09-08 20:23:20 +00:00

..

models

Support durable reasoning configuration updates (#42328)

2026-09-02 18:52:44 +00:00

openai_models

Record reasoning effort changes in conversation history behind a flag (#43110)

2026-09-05 21:56:43 +00:00

permissions

Extract Windows deny-read glob scan planning into protocol (#43903)

2026-09-08 20:23:20 +00:00

prompts/base_instructions

chore(core) rm AskForApproval::OnFailure (#28418)

2026-06-23 12:13:54 -07:00

account.rs

Support Edu Plus and Edu Pro account plans (#39316)

2026-08-18 23:47:00 +00:00

agent_path.rs

chore: morpheus to path (#18353)

2026-04-20 10:32:20 +01:00

approvals.rs

Route approvals through the extension decision API (#43432)

2026-09-07 11:07:28 +00:00

auth.rs

Support managed AWS access keys for Amazon Bedrock (#40481)

2026-08-24 21:39:48 +00:00

capabilities_tests.rs

Make selected plugin roots URI-native (#28918)

2026-06-23 22:51:19 +01:00

capabilities.rs

Make selected plugin roots URI-native (#28918)

2026-06-23 22:51:19 +01:00

config_types.rs

Keep credentials out of app-server logs (#39993)

2026-08-21 19:04:32 +00:00

dynamic_tools.rs

Add audio output support to dynamic tools and code mode (#34080)

2026-07-18 23:22:13 +00:00

environment.rs

Skip Guardian reviews in Full Access (#42147)

2026-09-01 22:16:54 +00:00

error_tests.rs

Add Luna Reserve usage fallback to the TUI (#42372)

2026-09-02 21:50:51 +00:00

error.rs

Add Luna Reserve usage fallback to the TUI (#42372)

2026-09-02 21:50:51 +00:00

exec_output_tests.rs

extract models manager and related ownership from core (#16508)

2026-04-02 23:00:02 -07:00

exec_output.rs

extract models manager and related ownership from core (#16508)

2026-04-02 23:00:02 -07:00

items.rs

Add structured asynchronous user input requests (#42178)

2026-09-02 02:09:35 +00:00

legacy_events.rs

Add structured asynchronous user input requests (#42178)

2026-09-02 02:09:35 +00:00

lib.rs

Add configurable memory versions with isolated storage (#43797)

2026-09-08 10:55:48 +00:00

local_media_tests.rs

Add durable user-message queue dispatch (#37204)

2026-08-06 03:11:42 +00:00

local_media.rs

Add durable user-message queue dispatch (#37204)

2026-08-06 03:11:42 +00:00

mcp_approval_meta.rs

Require synchronous review for sensitive MCP actions (#41094)

2026-08-27 08:44:54 +00:00

mcp_policy.rs

Enforce environment MCP policies (#39335)

2026-08-19 01:26:16 +00:00

mcp.rs

Support openai/elicitation form requests (#41447)

2026-08-29 02:43:10 +00:00

memory_citation.rs

feat: add memory citation to agent message (#14821)

2026-03-18 10:03:38 +00:00

memory_version.rs

Add configurable memory versions with isolated storage (#43797)

2026-09-08 10:55:48 +00:00

models.rs

Support durable reasoning configuration updates (#42328)

2026-09-02 18:52:44 +00:00

network_policy.rs

extract models manager and related ownership from core (#16508)

2026-04-02 23:00:02 -07:00

num_format.rs

Remove unused Rust helpers (#34345)

2026-07-20 13:45:29 +00:00

openai_models.rs

Gate experimental context by model capability at session startup (#43147)

2026-09-06 02:28:38 +00:00

parse_command.rs

[app-server] remove serde(skip_serializing_if = "Option::is_none") annotations (#5939)

2025-10-30 18:18:53 +00:00

permission_profile_intersection_tests.rs

Preserve target-native paths in command approvals (#42577)

2026-09-03 16:21:10 +00:00

permission_profile_intersection.rs

Preserve target-native paths in command approvals (#42577)

2026-09-03 16:21:10 +00:00

permission_profile_snapshot.rs

Move permission profile snapshots into the protocol (#38651)

2026-08-14 21:17:29 +00:00

permissions.rs

Extract Windows deny-read glob scan planning into protocol (#43903)

2026-09-08 20:23:20 +00:00

plan_tool.rs

Plan mode: stream proposed plans, emit plan items, and render in TUI (#9786)

2026-01-30 18:59:30 +00:00

protocol.rs

Preserve runtime workspace roots across thread resume (#43848)

2026-09-08 16:24:38 +00:00

realtime.rs

Persist realtime events in the thread timeline (#40508)

2026-08-25 01:03:20 +00:00

request_permissions.rs

Preserve target-native cwd in permission approval requests (#42314)

2026-09-02 17:27:50 +00:00

request_user_input_tests.rs

Make user input blocking behavior explicit (#36410)

2026-08-01 00:38:10 +00:00

request_user_input.rs

Make user input blocking behavior explicit (#36410)

2026-08-01 00:38:10 +00:00

response_item_id_tests.rs

Require prefixes for outbound response item IDs (#32312)

2026-07-11 02:29:14 +00:00

response_item_id.rs

Require prefixes for outbound response item IDs (#32312)

2026-07-11 02:29:14 +00:00

response_usage.rs

Preserve raw response usage metadata (#41980)

2026-09-01 05:17:11 +00:00

review_format.rs

feat(core): emit canonical review mode items (#31473)

2026-07-08 09:59:50 -07:00

sanitized_git_url_tests.rs

Sanitize credentials from Git remote metadata (#40713)

2026-08-25 21:34:05 +00:00

sanitized_git_url.rs

Sanitize credentials from Git remote metadata (#40713)

2026-08-25 21:34:05 +00:00

security_risk.rs

Record reviewed actions with security risk scores (#40901)

2026-08-26 15:02:21 +00:00

session_id.rs

feat: add session_id (#20437)

2026-05-06 10:48:37 +02:00

shell_environment_tests.rs

Prevent Node REPL auth tokens from reaching child processes (#39301)

2026-08-18 22:29:58 +00:00

shell_environment.rs

Add credential brokering to network proxy feature config (#40466)

2026-08-24 19:52:27 +00:00

thread_id.rs

Distinguish rollout IDs from thread IDs (#38127)

2026-08-12 05:20:32 +00:00

tool_name.rs

Canonicalize default tools under the functions namespace (#37022)

2026-08-05 04:07:59 +00:00

turn_input.rs

Replace Guardian tickets with parent response IDs (#43002)

2026-09-05 13:02:49 +00:00

user_input.rs

Forward audio inputs to the Responses API (#33932)

2026-07-18 00:26:24 +00:00