Dylan Hurd e6e4c5fa3a chore(core) Restrict model-suggested rules (#11671) ...

## Summary
If the model suggests a bad rule, don't show it to the user. This does
not impact the parsing of existing rules, just the ones we show.

## Testing
- [x] Added unit tests
- [x] Ran locally

2026-02-12 23:57:53 -08:00

..

agent

feat: introduce Permissions (#11633)

2026-02-12 14:42:54 -08:00

apps

[apps] Add gated instructions for Apps. (#10924)

2026-02-09 14:48:09 -08:00

auth

fix(app-server): for external auth, replace id_token with chatgpt_acc… (#11240)

2026-02-09 20:48:58 -08:00

bin

add generated jsonschema for config.toml (#8956)

2026-01-13 10:22:51 -08:00

config

feat: introduce Permissions (#11633)

2026-02-12 14:42:54 -08:00

config_loader

Fix config test on macOS (#11579)

2026-02-12 15:56:48 +00:00

context_manager

Strip unsupported images from prompt history to guard against model switch (#11349)

2026-02-10 11:58:00 -08:00

features

[connectors] Support connectors part 2 - slash command and tui (#9728)

2026-01-28 19:51:58 -08:00

instructions

chore: add phase to message responseitem (#10455)

2026-02-03 02:52:26 +00:00

mcp

Add new apps_mcp_gateway (#11630)

2026-02-12 16:54:11 -08:00

memories

feat: introduce Permissions (#11633)

2026-02-12 14:42:54 -08:00

models_manager

fix(core) model_info preserves slug (#11602)

2026-02-12 09:43:32 -08:00

rollout

feat(app-server): experimental flag to persist extended history (#11227)

2026-02-12 19:34:22 +00:00

sandboxing

feat(sandbox): enforce proxy-aware network routing in sandbox (#11113)

2026-02-10 07:44:21 +00:00

skills

Extract tool building (#11337)

2026-02-10 11:45:23 -08:00

state

Parse first order skill/connector mentions (#11547)

2026-02-12 10:55:22 -08:00

tasks

feat: introduce Permissions (#11633)

2026-02-12 14:42:54 -08:00

tools

[apps] Add is_enabled to app info. (#11417)

2026-02-13 00:30:52 +00:00

unified_exec

Remove test-support feature from codex-core and replace it with explicit test toggles (#11405)

2026-02-10 22:44:02 -08:00

analytics_client.rs

feat: fire tracking events for skill invocation (#10120)

2026-01-31 18:06:26 -08:00

api_bridge.rs

Better error message for model limit hit. (#11636)

2026-02-12 14:10:30 -08:00

apply_patch.rs

remove sandbox globals. (#9797)

2026-01-27 11:04:23 -08:00

auth.rs

Remove test-support feature from codex-core and replace it with explicit test toggles (#11405)

2026-02-10 22:44:02 -08:00

client_common.rs

Remove ApiPrompt (#11265)

2026-02-10 16:12:31 +00:00

client.rs

Hide the first websocket retry (#11548)

2026-02-11 22:48:13 -08:00

codex_delegate.rs

feat(app-server): experimental flag to persist extended history (#11227)

2026-02-12 19:34:22 +00:00

codex_thread.rs

[apps] Add thread_id param to optionally load thread config for apps feature check. (#11279)

2026-02-09 23:10:26 -08:00

codex.rs

Persist complete TurnContextItem state via canonical conversion (#11656)

2026-02-12 17:22:44 -08:00

command_canonicalization.rs

fix(core): canonicalize wrapper approvals and support heredoc prefix … (#10941)

2026-02-10 11:46:40 -08:00

compact_remote.rs

chore: persist turn_id in rollout session and make turn_id uuid based (#11246)

2026-02-11 03:56:01 +00:00

compact.rs

Persist complete TurnContextItem state via canonical conversion (#11656)

2026-02-12 17:22:44 -08:00

connectors.rs

[apps] Fix app loading logic. (#11518)

2026-02-13 03:55:10 +00:00

custom_prompts.rs

…

default_client.rs

chore: inject originator/residency headers to ws client (#11506)

2026-02-11 16:43:36 -08:00

env.rs

…

environment_context.rs

feat: include [experimental_network] in <environment_context> (#11044)

2026-02-08 15:16:50 -08:00

error.rs

Better error message for model limit hit. (#11636)

2026-02-12 14:10:30 -08:00

event_mapping.rs

fix(tui): conditionally restore status indicator using message phase (#10947)

2026-02-07 02:39:52 +00:00

exec_env.rs

Inject CODEX_THREAD_ID into the terminal environment (#10096)

2026-02-03 11:31:12 -08:00

exec_policy.rs

chore(core) Restrict model-suggested rules (#11671)

2026-02-12 23:57:53 -08:00

exec.rs

feat: make sandbox read access configurable with ReadOnlyAccess (#11387)

2026-02-11 18:31:14 -08:00

features.rs

Added a test to verify that feature flags that are enabled by default are stable (#11275)

2026-02-12 17:53:15 -08:00

file_watcher.rs

Increased file watcher debounce duration from 1s to 10s (#11494)

2026-02-11 14:08:03 -08:00

flags.rs

…

function_tool.rs

…

git_info.rs

make codex better at git (#10145)

2026-02-02 16:57:29 -08:00

landlock.rs

feat: make sandbox read access configurable with ReadOnlyAccess (#11387)

2026-02-11 18:31:14 -08:00

lib.rs

[feat] add seatbelt permission files (#11639)

2026-02-12 23:30:22 +00:00

mcp_connection_manager.rs

Add new apps_mcp_gateway (#11630)

2026-02-12 16:54:11 -08:00

mcp_tool_call.rs

Sanitize MCP image output for text-only models (#11346)

2026-02-10 11:25:32 -08:00

memory_trace.rs

memories: add extraction and prompt module foundation (#11200)

2026-02-10 10:10:24 +00:00

mentions.rs

Extract tool building (#11337)

2026-02-10 11:45:23 -08:00

message_history.rs

…

model_provider_info.rs

Fix: update parallel tool call exec approval to approve on request id (#11162)

2026-02-10 09:38:00 -08:00

network_proxy_loader.rs

chore: change ConfigState so it no longer depends on a single config.toml file for reloading (#11262)

2026-02-09 19:26:39 -08:00

otel_init.rs

feat: show runtime metrics in console (#10278)

2026-01-30 22:20:02 -08:00

path_utils.rs

Fixed symlink support for config.toml (#9445)

2026-01-18 19:22:28 -08:00

personality_migration.rs

chore(config) Rename config setting to personality (#10314)

2026-01-31 19:38:06 -08:00

project_doc.rs

Add js_repl_tools_only model and routing restrictions (#10671)

2026-02-12 15:41:05 -08:00

proposed_plan_parser.rs

Plan mode: stream proposed plans, emit plan items, and render in TUI (#9786)

2026-01-30 18:59:30 +00:00

review_format.rs

…

review_prompts.rs

…

safety.rs

feat: make sandbox read access configurable with ReadOnlyAccess (#11387)

2026-02-11 18:31:14 -08:00

sandbox_tags.rs

include sandbox (seatbelt, elevated, etc.) as in turn metadata header (#10946)

2026-02-10 19:50:07 +00:00

seatbelt_base_policy.sbpl

[feat] add seatbelt permission files (#11639)

2026-02-12 23:30:22 +00:00

seatbelt_network_policy.sbpl

feat(sandbox): enforce proxy-aware network routing in sandbox (#11113)

2026-02-10 07:44:21 +00:00

seatbelt_permissions.rs

[feat] add seatbelt permission files (#11639)

2026-02-12 23:30:22 +00:00

seatbelt.rs

[feat] add seatbelt permission files (#11639)

2026-02-12 23:30:22 +00:00

session_prefix.rs

Leverage state DB metadata for thread summaries (#10621)

2026-02-05 16:39:11 +00:00

shell_detect.rs

chore: rename codex-command to codex-shell-command (#11378)

2026-02-10 17:03:46 -08:00

shell_snapshot.rs

feat: tie shell snapshot to cwd (#11231)

2026-02-09 22:14:39 +00:00

shell.rs

chore: rename codex-command to codex-shell-command (#11378)

2026-02-10 17:03:46 -08:00

spawn.rs

feat(sandbox): enforce proxy-aware network routing in sandbox (#11113)

2026-02-10 07:44:21 +00:00

state_db.rs

Ensure list_threads drops stale rollout files (#11572)

2026-02-12 12:49:31 +00:00

stream_events_utils.rs

feat(app-server, core): allow text + image content items for dynamic tool outputs (#10567)

2026-02-04 16:12:47 -08:00

tagged_block_parser.rs

Plan mode: stream proposed plans, emit plan items, and render in TUI (#9786)

2026-01-30 18:59:30 +00:00

terminal.rs

[codex-tui] exit when terminal is dumb (#9293)

2026-01-20 16:17:38 -08:00

test_support.rs

Remove test-support feature from codex-core and replace it with explicit test toggles (#11405)

2026-02-10 22:44:02 -08:00

text_encoding.rs

…

thread_manager.rs

feat(app-server): experimental flag to persist extended history (#11227)

2026-02-12 19:34:22 +00:00

token_data.rs

fix(app-server): for external auth, replace id_token with chatgpt_acc… (#11240)

2026-02-09 20:48:58 -08:00

truncate.rs

core: add focused diagnostics for remote compaction overflows (#11133)

2026-02-09 12:42:20 -08:00

turn_diff_tracker.rs

…

turn_metadata.rs

include sandbox (seatbelt, elevated, etc.) as in turn metadata header (#10946)

2026-02-10 19:50:07 +00:00

user_shell_command.rs

chore: add phase to message responseitem (#10455)

2026-02-03 02:52:26 +00:00

util.rs

Cloud Requirements: increase timeout and retries (#10631)

2026-02-05 01:52:12 +00:00

web_search.rs

add missing fields to WebSearchAction and update app-server types (#10276)

2026-01-30 16:37:56 -08:00

windows_sandbox_read_grants.rs

add a slash command to grant sandbox read access to inaccessible directories (#11512)

2026-02-12 12:48:36 -08:00

windows_sandbox.rs

feat: introduce Permissions (#11633)

2026-02-12 14:42:54 -08:00