mirror of https://github.com/openai/codex.git synced 2026-10-22 08:15:54 +00:00

Files

T

jif fa595fbab8 Route escalated approval retries through Guardian (#38616 )

## What changed

- Bypass extension approval contributors when an approval request includes a retry reason, ensuring the retry is reviewed by Guardian.
- Add coverage showing that Guardian can deny an escalated retry even when an extension contributor would approve it, and that the retry reason is included in the review request.

GitOrigin-RevId: c8f556623f26fea605898d4b8e89679cebd63e65

2026-08-14 17:56:38 +00:00

.cargo

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

.config

[codex] Speed up local nextest runs (#26479 )

2026-06-09 12:48:04 -07:00

agent-graph-store

Honor the configured SQLite home across state consumers (#34994 )

2026-07-23 19:19:35 +00:00

agent-identity

Migrate agent identity to the shared HTTP client (#34631 )

2026-07-21 22:44:43 +00:00

analytics

Stop generating accepted-line fingerprints (#38473 )

2026-08-14 01:44:33 +00:00

ansi-escape

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

app-server

Install Guardian V2 in the app server (#38597 )

2026-08-14 15:59:34 +00:00

app-server-client

Prevent unread events from blocking in-process requests (#38381 )

2026-08-13 13:57:25 +00:00

app-server-daemon

Honor system proxy settings in the daemon updater (#34495 )

2026-07-21 08:50:21 +00:00

app-server-protocol

Keep the latest Guardian risk score during concurrent sampling (#38580 )

2026-08-14 13:44:51 +00:00

app-server-protocol-noop-macros

Precompute app-server protocol exports (#36212 )

2026-07-30 19:47:30 +00:00

app-server-test-client

Forward install attempt IDs for remote plugins (#37773 )

2026-08-10 03:28:19 +00:00

app-server-transport

Reduce response serialization and rollout scan overhead (#36006 )

2026-07-29 18:29:26 +00:00

apply-patch

Reject duplicate resolved paths in apply_patch (#37867 )

2026-08-10 18:44:58 +00:00

arg0

Add a line-ending preservation mode to apply_patch (#37757 )

2026-08-10 01:39:55 +00:00

async-utils

[codex] Remove async_trait from first-party code (#27475 )

2026-06-11 18:16:39 -07:00

aws-auth

…

backend-client

Add per-thread usage queries to the backend client (#38270 )

2026-08-12 22:58:46 +00:00

build-info

Add shared runtime build information (#37929 )

2026-08-11 03:39:02 +00:00

bwrap

Verify bundled bwrap in Bazel builds (#38494 )

2026-08-14 05:03:39 +00:00

chatgpt

Fail closed when workload identity initialization fails (#38424 )

2026-08-13 19:35:22 +00:00

cli

Support workload identity in remote exec-server auth (#38610 )

2026-08-14 17:32:37 +00:00

cloud-config

Fail closed when workload identity initialization fails (#38424 )

2026-08-13 19:35:22 +00:00

cloud-tasks

Fail closed when workload identity initialization fails (#38424 )

2026-08-13 19:35:22 +00:00

cloud-tasks-client

Route backend requests through the HTTP client factory (#34490 )

2026-07-21 08:28:51 +00:00

cloud-tasks-mock-client

[codex] Remove async_trait from first-party code (#27475 )

2026-06-11 18:16:39 -07:00

code-mode

Support gRPC code-mode hosts in app server (#38288 )

2026-08-13 01:32:42 +00:00

code-mode-host

Remove the gRPC code-mode enabled tool limit (#38615 )

2026-08-14 17:50:01 +00:00

code-mode-protocol

Use protobuf's built-in Bazel proto rule (#38280 )

2026-08-13 00:26:06 +00:00

code-mode-runtime

Add per-session code-mode execution limits (#37114 )

2026-08-05 16:09:01 +00:00

codex-api

Support workload identity in remote exec-server auth (#38610 )

2026-08-14 17:32:37 +00:00

codex-backend-openapi-models

Support Enterprise automation account plans (#36228 )

2026-07-30 21:49:53 +00:00

codex-client

Add structured telemetry for response retries (#38452 )

2026-08-13 23:13:37 +00:00

codex-experimental-api-macros

…

codex-home

[codex] Bind shell snapshots to retained thread environments (#28421 )

2026-06-15 20:10:53 -07:00

codex-mcp

Reuse pending MCP startups during reconciliation (#38493 )

2026-08-14 04:49:14 +00:00

collaboration-mode-templates

Remove legacy collaboration mode variants (#36990 )

2026-08-04 22:58:02 +00:00

config

Add an Amazon Bedrock Runtime provider (#38470 )

2026-08-14 01:23:59 +00:00

connectors

Honor the configured ChatGPT origin in connector install URLs (#37338 )

2026-08-07 00:23:38 +00:00

context-fragments

Simplify contextual user fragment registration (#36742 )

2026-08-03 11:39:51 +00:00

core

Route escalated approval retries through Guardian (#38616 )

2026-08-14 17:56:38 +00:00

core-api

Carry environment config in turn selections (#38521 )

2026-08-14 07:52:38 +00:00

core-plugins

Parse model annotations from skill frontmatter (#38467 )

2026-08-14 00:54:45 +00:00

diagnostics

Add process diagnostics snapshots (#37434 )

2026-08-07 11:30:17 +00:00

docs

Unify turn input submission and routing (#38275 )

2026-08-13 00:00:16 +00:00

exec

Fail closed when workload identity initialization fails (#38424 )

2026-08-13 19:35:22 +00:00

exec-server

Support workload identity in remote exec-server auth (#38610 )

2026-08-14 17:32:37 +00:00

exec-server-protocol

Support sandboxed file streaming in exec-server (#38356 )

2026-08-13 11:11:26 +00:00

execpolicy

Migrate legacy exec policy allow rules (#34271 )

2026-07-20 06:13:29 +00:00

ext

Skip stale Guardian risk score persistence (#38612 )

2026-08-14 17:41:34 +00:00

external-agent-migration

Keep the latest Guardian risk score during concurrent sampling (#38580 )

2026-08-14 13:44:51 +00:00

features

Make unbounded connection retries configurable (#38601 )

2026-08-14 16:23:17 +00:00

feedback

Limit payload traces in diagnostic logs (#37497 )

2026-08-07 19:56:29 +00:00

file-search

Avoid redundant filesystem probes (#36393 )

2026-07-31 21:37:56 +00:00

file-system

Preserve Windows sandbox proxy settings in guardian sessions (#35036 )

2026-07-23 23:35:29 +00:00

file-watcher

…

git-utils

Use the shared environment scrubber in git-utils (#37843 )

2026-08-10 15:50:53 +00:00

history

Store security risk scores as a snapshot (#38567 )

2026-08-14 12:16:51 +00:00

hooks

Reject sessions with unloadable required managed hooks (#38394 )

2026-08-13 15:23:09 +00:00

http-client

Add rustls fallback for local MCP HTTP requests (#38436 )

2026-08-13 21:13:07 +00:00

install-context

Extend bundled package discovery and expose its version (#37886 )

2026-08-10 22:12:14 +00:00

keyring-store

feat: add auth-specific encrypted secret namespaces (#27535 )

2026-06-12 19:52:49 +00:00

linux-sandbox

Verify bundled bwrap in Bazel builds (#38494 )

2026-08-14 05:03:39 +00:00

lmstudio

Route LM Studio requests through the shared HTTP client (#34678 )

2026-07-22 04:17:34 +00:00

Protect workload identity auth in app-server account RPCs (#38426 )

2026-08-13 20:04:57 +00:00

mcp-server

Fail closed when workload identity initialization fails (#38424 )

2026-08-13 19:35:22 +00:00

memories

Keep the latest Guardian risk score during concurrent sampling (#38580 )

2026-08-14 13:44:51 +00:00

message-history

Add bounded batch lookups for message history (#33902 )

2026-07-17 20:52:42 +00:00

model-provider

Support workload identity in remote exec-server auth (#38610 )

2026-08-14 17:32:37 +00:00

model-provider-info

Add an Amazon Bedrock Runtime provider (#38470 )

2026-08-14 01:23:59 +00:00

models-manager

Enable parallel tool calls for all model prompts (#38499 )

2026-08-14 05:49:33 +00:00

network-proxy

Use bounded fallback ports for Windows managed proxies (#38265 )

2026-08-12 22:33:18 +00:00

ollama

Route Ollama through the shared HTTP client (#36078 )

2026-07-30 04:26:36 +00:00

otel

Route network access through the shared approval pipeline (#38299 )

2026-08-13 02:40:49 +00:00

plugin

Remove obsolete plugin skill discovery helpers (#37832 )

2026-08-10 14:25:13 +00:00

process-hardening

…

prompts

Remove unused apply_patch prompt fallback (#38291 )

2026-08-13 01:52:02 +00:00

protocol

Keep the latest Guardian risk score during concurrent sampling (#38580 )

2026-08-14 13:44:51 +00:00

response-debug-context

Keep response streams alive through connection failures (#37485 )

2026-08-07 18:33:46 +00:00

responses-api-proxy

…

rmcp-client

Include node_repl images in Guardian review evidence (#38454 )

2026-08-13 23:29:52 +00:00

rollout

Keep the latest Guardian risk score during concurrent sampling (#38580 )

2026-08-14 13:44:51 +00:00

rollout-trace

Add durable user-message queue dispatch (#37204 )

2026-08-06 03:11:42 +00:00

sandboxing

Restrict filesystem helper sandbox access (#38561 )

2026-08-14 11:47:12 +00:00

scripts

…

secrets

Speed up MCP OAuth credential reads (#37842 )

2026-08-10 15:43:10 +00:00

shell-command

Recognize PowerShell Get-Content file reads (#38415 )

2026-08-13 18:30:51 +00:00

shell-escalation

Prevent launch context from reaching child processes (#37607 )

2026-08-08 16:58:26 +00:00

skills

Add bounded skill model delegation instructions (#38475 )

2026-08-14 01:49:00 +00:00

state

Add experimental thread queue APIs to app server (#38456 )

2026-08-13 23:38:02 +00:00

stdio-to-uds

…

terminal-detection

Avoid requesting key-release events in Ghostty (#36834 )

2026-08-04 03:49:53 +00:00

test-binary-support

…

thread-manager-sample

Fail closed when workload identity initialization fails (#38424 )

2026-08-13 19:35:22 +00:00

thread-store

Add experimental thread queue APIs to app server (#38456 )

2026-08-13 23:38:02 +00:00

tools

Enable parallel tool calls for all model prompts (#38499 )

2026-08-14 05:49:33 +00:00

tui

Fix the missing resume picker history mode import (#38608 )

2026-08-14 17:18:26 +00:00

uds

…

utils

Include node_repl images in Guardian review evidence (#38454 )

2026-08-13 23:29:52 +00:00

v8-poc

Upgrade Bazel Rust and LLVM dependencies (#34781 )

2026-07-22 16:18:08 +00:00

vendor

build: run buildifier from just fmt (#28125 )

2026-06-13 21:43:39 -07:00

websocket-client

Route exec-server WebSockets through configured proxies (#35056 )

2026-07-24 00:16:42 +00:00

windows-sandbox-rs

Embed the Windows sandbox setup manifest in Bazel builds (#38450 )

2026-08-13 23:04:38 +00:00

workload-identity

Support workload identity in remote exec-server auth (#38610 )

2026-08-14 17:32:37 +00:00

.gitignore

…

BUILD.bazel

bench: add e2e benchmark entrypoints (#31428 )

2026-07-09 17:31:44 -07:00

Cargo.lock

Install Guardian V2 in the app server (#38597 )

2026-08-14 15:59:34 +00:00

Cargo.toml

Install Guardian V2 in the app server (#38597 )

2026-08-14 15:59:34 +00:00

clippy.toml

Enforce centralized SQLite connection creation (#35828 )

2026-07-28 20:49:22 +00:00

config.md

Use canonical links in the moved config notice (#32326 )

2026-07-11 03:27:51 +00:00

default.nix

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

deny.toml

Route gRPC code-mode sessions through the shared HTTP client (#38087 )

2026-08-11 23:40:07 +00:00

README.md

Simplify Codex CLI README (#26313 )

2026-06-04 09:16:03 -07:00

rust-toolchain.toml

…

rustfmt.toml

…

README.md

Codex CLI

Codex CLI Documentation