codex

bin

feat(sandbox): add Windows deny-read parity (#18202 )

2026-05-11 23:04:28 -07:00

conpty

Fix Windows PTY teardown by preserving ConPTY ownership (#20685 )

2026-05-04 18:40:00 +00:00

elevated

Enable --deny-warnings for cargo shear (#21616 )

2026-05-08 20:29:00 +00:00

unified_exec

feat(sandbox): add Windows deny-read parity (#18202 )

2026-05-11 23:04:28 -07:00

wfp

Enable --deny-warnings for cargo shear (#21616 )

2026-05-08 20:29:00 +00:00

acl.rs

feat(sandbox): add Windows deny-read parity (#18202 )

2026-05-11 23:04:28 -07:00

allow.rs

Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads no longer accept arbitrary PermissionProfile or SandboxPolicy replacements; permissions requests select a server-known profile id and apply the resolved server-owned profile together with active profile metadata. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots.

2026-05-11 23:15:10 -07:00

audit.rs

Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads no longer accept arbitrary PermissionProfile or SandboxPolicy replacements; permissions requests select a server-known profile id and apply the resolved server-owned profile together with active profile metadata. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots.

2026-05-11 23:15:10 -07:00

cap.rs

Enable --deny-warnings for cargo shear (#21616 )

2026-05-08 20:29:00 +00:00

deny_read_acl.rs

feat(sandbox): add Windows deny-read parity (#18202 )

2026-05-11 23:04:28 -07:00

deny_read_resolver.rs

feat(sandbox): add Windows deny-read parity (#18202 )

2026-05-11 23:04:28 -07:00

deny_read_state.rs

feat(sandbox): add Windows deny-read parity (#18202 )

2026-05-11 23:04:28 -07:00

desktop.rs

Enable --deny-warnings for cargo shear (#21616 )

2026-05-08 20:29:00 +00:00

dpapi.rs

Enable --deny-warnings for cargo shear (#21616 )

2026-05-08 20:29:00 +00:00

elevated_impl.rs

Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads no longer accept arbitrary PermissionProfile or SandboxPolicy replacements; permissions requests select a server-known profile id and apply the resolved server-owned profile together with active profile metadata. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots.

2026-05-11 23:15:10 -07:00

env.rs

Enable --deny-warnings for cargo shear (#21616 )

2026-05-08 20:29:00 +00:00

helper_materialization.rs

Enable --deny-warnings for cargo shear (#21616 )

2026-05-08 20:29:00 +00:00

hide_users.rs

Enable --deny-warnings for cargo shear (#21616 )

2026-05-08 20:29:00 +00:00

identity.rs

feat(sandbox): add Windows deny-read parity (#18202 )

2026-05-11 23:04:28 -07:00

lib.rs

Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads no longer accept arbitrary PermissionProfile or SandboxPolicy replacements; permissions requests select a server-known profile id and apply the resolved server-owned profile together with active profile metadata. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots.

2026-05-11 23:15:10 -07:00

logging.rs

chore: move pty and windows sandbox to Rust 2024 (#15954 )

2026-03-27 02:31:08 -07:00

path_normalization.rs

Enable --deny-warnings for cargo shear (#21616 )

2026-05-08 20:29:00 +00:00

policy.rs

Enable --deny-warnings for cargo shear (#21616 )

2026-05-08 20:29:00 +00:00

proc_thread_attr.rs

Fix Windows pseudoconsole attribute handling for sandboxed PTY sessions (#20042 )

2026-04-29 11:59:45 +02:00

process.rs

Enable --deny-warnings for cargo shear (#21616 )

2026-05-08 20:29:00 +00:00

sandbox_utils.rs

[codex] Fix Windows sandbox git safe.directory for worktrees (#21409 )

2026-05-06 14:08:45 -07:00

setup_error.rs

chore: move pty and windows sandbox to Rust 2024 (#15954 )

2026-03-27 02:31:08 -07:00

setup.rs

Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads no longer accept arbitrary PermissionProfile or SandboxPolicy replacements; permissions requests select a server-known profile id and apply the resolved server-owned profile together with active profile metadata. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots.

2026-05-11 23:15:10 -07:00

spawn_prep.rs

Move workspace roots onto thread/session state and stop using active permission profile modifications as an overlay for writable roots. Existing app-server threads no longer accept arbitrary PermissionProfile or SandboxPolicy replacements; permissions requests select a server-known profile id and apply the resolved server-owned profile together with active profile metadata. Workspace roots can be updated independently, and SandboxPolicy::WorkspaceWrite no longer stores its own writable_roots.

2026-05-11 23:15:10 -07:00

ssh_config_dependencies.rs

Filter Windows sandbox roots from SSH config dependencies (#18493 )

2026-04-19 14:58:33 -07:00

token.rs

Enable --deny-warnings for cargo shear (#21616 )

2026-05-08 20:29:00 +00:00

wfp_setup.rs

Enable --deny-warnings for cargo shear (#21616 )

2026-05-08 20:29:00 +00:00

wfp.rs

Enable --deny-warnings for cargo shear (#21616 )

2026-05-08 20:29:00 +00:00

winutil.rs

Enable --deny-warnings for cargo shear (#21616 )

2026-05-08 20:29:00 +00:00

workspace_acl.rs

Add Windows sandbox unified exec runtime support (#15578 )

2026-04-21 10:44:49 -07:00