viyatb-oai 7f571396c8 fix: sync split sandbox policies for spawned subagents (#14650) ...

## Summary
- reapply the live split filesystem and network sandbox policies when
building spawned subagent configs
- keep spawned child sessions aligned with the parent turn after
role-layer config reloads
- add regression coverage for both config construction and spawned
child-turn inheritance

2026-03-14 03:03:49 +00:00

..

agent

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

apps

chore: clarify plugin + app copy in model instructions (#14541)

2026-03-13 10:57:41 -07:00

auth

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

bin

…

codex

feat(core): persist trace_id for turns in RolloutItem::TurnContext (#13602)

2026-03-05 13:26:48 -08:00

config

fix: persist future network host approvals across sessions (#14619)

2026-03-14 02:46:10 +00:00

config_loader

Override local apps settings with requirements.toml settings (#14304)

2026-03-13 12:40:24 -07:00

context_manager

Improve granular approval policy prompt (#14553)

2026-03-13 10:42:17 -07:00

features

Rename reject approval policy to granular (#14516)

2026-03-12 16:38:04 -07:00

instructions

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

mcp

feat: support skill-scoped managed network domain overrides in skill config (#14522)

2026-03-13 04:45:14 +00:00

memories

refactor: make unified-exec zsh-fork state explicit (#14633)

2026-03-13 17:20:01 -07:00

models_manager

Add openai_base_url config override for built-in provider (#12031)

2026-03-13 20:12:25 -06:00

plugins

chore: clarify plugin + app copy in model instructions (#14541)

2026-03-13 10:57:41 -07:00

rollout

Add Smart Approvals guardian review across core, app-server, and TUI (#13860)

2026-03-13 15:27:00 -07:00

sandboxing

Use a private desktop for Windows sandbox instead of Winsta0\Default (#14400)

2026-03-13 10:13:39 -07:00

skills

feat: support skill-scoped managed network domain overrides in skill config (#14522)

2026-03-13 04:45:14 +00:00

snapshots

Add Smart Approvals guardian review across core, app-server, and TUI (#13860)

2026-03-13 15:27:00 -07:00

state

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

tasks

Use a private desktop for Windows sandbox instead of Winsta0\Default (#14400)

2026-03-13 10:13:39 -07:00

tools

fix: sync split sandbox policies for spawned subagents (#14650)

2026-03-14 03:03:49 +00:00

unified_exec

refactor: make unified-exec zsh-fork state explicit (#14633)

2026-03-13 17:20:01 -07:00

analytics_client_tests.rs

Add plugin usage telemetry (#14531)

2026-03-12 19:22:30 -07:00

analytics_client.rs

Add plugin usage telemetry (#14531)

2026-03-12 19:22:30 -07:00

api_bridge_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

api_bridge.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

apply_patch_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

apply_patch.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

arc_monitor_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

arc_monitor.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

auth_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

auth.rs

Start TUI on embedded app server (#14512)

2026-03-13 12:04:41 -06:00

client_common_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

client_common.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

client_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

client.rs

feat(app-server, core): add more spans (#14479)

2026-03-13 13:16:33 -07:00

codex_delegate_tests.rs

Add Smart Approvals guardian review across core, app-server, and TUI (#13860)

2026-03-13 15:27:00 -07:00

codex_delegate.rs

Add Smart Approvals guardian review across core, app-server, and TUI (#13860)

2026-03-13 15:27:00 -07:00

codex_tests_guardian.rs

Use a private desktop for Windows sandbox instead of Winsta0\Default (#14400)

2026-03-13 10:13:39 -07:00

codex_tests.rs

fix: persist future network host approvals across sessions (#14619)

2026-03-14 02:46:10 +00:00

codex_thread.rs

Add Smart Approvals guardian review across core, app-server, and TUI (#13860)

2026-03-13 15:27:00 -07:00

codex.rs

fix: persist future network host approvals across sessions (#14619)

2026-03-14 02:46:10 +00:00

command_canonicalization_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

command_canonicalization.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

commit_attribution_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

commit_attribution.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

compact_remote.rs

Add code_mode_only feature (#14617)

2026-03-13 13:30:19 -07:00

compact_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

compact.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

connectors_tests.rs

Override local apps settings with requirements.toml settings (#14304)

2026-03-13 12:40:24 -07:00

connectors.rs

Override local apps settings with requirements.toml settings (#14304)

2026-03-13 12:40:24 -07:00

consequential_tool_message_templates.json

[elicitation] User-friendly tool call messages. (#14403)

2026-03-12 00:35:21 -07:00

contextual_user_message_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

contextual_user_message.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

custom_prompts_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

custom_prompts.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

default_client_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

default_client.rs

client: extend custom CA handling across HTTPS and websocket clients (#14239)

2026-03-13 00:59:26 +00:00

env.rs

…

environment_context_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

environment_context.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

error_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

error.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

event_mapping_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

event_mapping.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

exec_env_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

exec_env.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

exec_policy_tests.rs

Rename reject approval policy to granular (#14516)

2026-03-12 16:38:04 -07:00

exec_policy.rs

feat(app-server, core): add more spans (#14479)

2026-03-13 13:16:33 -07:00

exec_tests.rs

Use a private desktop for Windows sandbox instead of Winsta0\Default (#14400)

2026-03-13 10:13:39 -07:00

exec.rs

Use a private desktop for Windows sandbox instead of Winsta0\Default (#14400)

2026-03-13 10:13:39 -07:00

external_agent_config_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

external_agent_config.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

features_tests.rs

Add Smart Approvals guardian review across core, app-server, and TUI (#13860)

2026-03-13 15:27:00 -07:00

features.rs

Add Smart Approvals guardian review across core, app-server, and TUI (#13860)

2026-03-13 15:27:00 -07:00

file_watcher_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

file_watcher.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

flags.rs

…

function_tool.rs

…

git_info_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

git_info.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

guardian_prompt.md

prompt changes to guardian (#14263)

2026-03-11 12:33:09 -07:00

guardian_tests.rs

Fix Windows CI assertions for guardian and Smart Approvals (#14645)

2026-03-14 02:15:58 +00:00

guardian.rs

Add Smart Approvals guardian review across core, app-server, and TUI (#13860)

2026-03-13 15:27:00 -07:00

landlock_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

landlock.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

lib.rs

Add openai_base_url config override for built-in provider (#12031)

2026-03-13 20:12:25 -06:00

mcp_connection_manager_tests.rs

Normalize MCP tool names to code-mode safe form (#14605)

2026-03-13 14:50:16 -07:00

mcp_connection_manager.rs

Normalize MCP tool names to code-mode safe form (#14605)

2026-03-13 14:50:16 -07:00

mcp_tool_approval_templates.rs

[elicitation] User-friendly tool call messages. (#14403)

2026-03-12 00:35:21 -07:00

mcp_tool_call_tests.rs

Add Smart Approvals guardian review across core, app-server, and TUI (#13860)

2026-03-13 15:27:00 -07:00

mcp_tool_call.rs

Add Smart Approvals guardian review across core, app-server, and TUI (#13860)

2026-03-13 15:27:00 -07:00

memory_trace_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

memory_trace.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

mention_syntax.rs

chore: use @plugin instead of $plugin for plaintext mentions (#13921)

2026-03-08 01:36:39 +00:00

mentions_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

mentions.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

message_history_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

message_history.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

model_provider_info_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

model_provider_info.rs

Add openai_base_url config override for built-in provider (#12031)

2026-03-13 20:12:25 -06:00

network_policy_decision_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

network_policy_decision.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

network_proxy_loader_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

network_proxy_loader.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

original_image_detail_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

original_image_detail.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

otel_init.rs

fix(otel): make HTTP trace export survive app-server runtimes (#14300)

2026-03-11 12:33:10 -07:00

path_utils_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

path_utils.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

personality_migration_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

personality_migration.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

project_doc_tests.rs

Persist js_repl codex helpers across cells (#14503)

2026-03-12 15:41:54 -07:00

project_doc.rs

feat(app-server, core): add more spans (#14479)

2026-03-13 13:16:33 -07:00

realtime_context_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

realtime_context.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

realtime_conversation_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

realtime_conversation.rs

Unify realtime v1/v2 session config (#14606)

2026-03-13 11:35:38 -07:00

restricted_read_only_platform_defaults.sbpl

feat: Add additional macOS Sandbox Permissions for Launch Services, Contacts, Reminders (#14155)

2026-03-11 12:33:09 -07:00

review_format.rs

…

review_prompts.rs

…

safety_tests.rs

Rename reject approval policy to granular (#14516)

2026-03-12 16:38:04 -07:00

safety.rs

Rename reject approval policy to granular (#14516)

2026-03-12 16:38:04 -07:00

sandbox_tags_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

sandbox_tags.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

seatbelt_base_policy.sbpl

[feat] add seatbelt permission files (#11639)

2026-02-12 23:30:22 +00:00

seatbelt_network_policy.sbpl

…

seatbelt_permissions_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

seatbelt_permissions.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

seatbelt_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

seatbelt.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

session_prefix.rs

feat: add post-compaction sub-agent infos (#12774)

2026-02-26 18:55:34 +00:00

shell_detect.rs

chore: rename codex-command to codex-shell-command (#11378)

2026-02-10 17:03:46 -08:00

shell_snapshot_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

shell_snapshot.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

shell_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

shell.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

spawn.rs

sandboxing: plumb split sandbox policies through runtime (#13439)

2026-03-07 02:30:21 +00:00

state_db_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

state_db.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

stream_events_utils_tests.rs

sending back imagaegencall response back to responseapi (#14558)

2026-03-13 17:29:19 +00:00

stream_events_utils.rs

sending back imagaegencall response back to responseapi (#14558)

2026-03-13 17:29:19 +00:00

terminal_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

terminal.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

test_support.rs

Enable request_user_input in Default mode (#12735)

2026-02-25 15:20:46 -08:00

text_encoding_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

text_encoding.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

thread_manager_tests.rs

Add openai_base_url config override for built-in provider (#12031)

2026-03-13 20:12:25 -06:00

thread_manager.rs

Add openai_base_url config override for built-in provider (#12031)

2026-03-13 20:12:25 -06:00

token_data_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

token_data.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

truncate_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

truncate.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

turn_diff_tracker_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

turn_diff_tracker.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

turn_metadata_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

turn_metadata.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

turn_timing_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

turn_timing.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

user_shell_command_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

user_shell_command.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

util_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

util.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

web_search.rs

…

windows_sandbox_read_grants_tests.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

windows_sandbox_read_grants.rs

fix: move inline codex-rs/core unit tests into sibling files (#14444)

2026-03-12 08:16:36 -07:00

windows_sandbox_tests.rs

Use a private desktop for Windows sandbox instead of Winsta0\Default (#14400)

2026-03-13 10:13:39 -07:00

windows_sandbox.rs

Use a private desktop for Windows sandbox instead of Winsta0\Default (#14400)

2026-03-13 10:13:39 -07:00