codex

mirror of https://github.com/openai/codex.git synced 2026-05-15 00:32:51 +00:00

Files

Dylan Hurd e783dab44c fix(exec-policy) use is_known_safe_command less (#20305 )

## Summary
Restricts behavior of `is_known_safe_command` only to modes where it is
explicitly part of the documented behavior:
- when `environment_lacks_sandbox_protections`
- in `AskForApproval::UnlessTrusted`

Notably, as a result of this, escalations for commands that pass
`is_known_safe_commands` are no longer auto-approved in
AskForApproval::OnRequest or AskForApproval::Granular.

## Testing
- [x] Updated unit tests
- [x] Updated approvals scenario tests.

---------

Co-authored-by: Codex <noreply@openai.com>

2026-05-11 11:37:53 -07:00

common

extension: wire extension registries into sessions (#21737 )

2026-05-11 11:38:18 +02:00

fixtures

Update tests to stop using sse_completed fixture (#10638 )

2026-02-04 08:38:06 -08:00

suite

fix(exec-policy) use is_known_safe_command less (#20305 )

2026-05-11 11:37:53 -07:00

all.rs

remove temporary ownership re-exports (#16626 )