Files

Jeremy Rose 97000c6e6d core: correct sandboxed shell tool description (reads allowed anywhere) (#3069 )

Correct the `shell` tool description for sandboxed runs and add targeted
tests.

- Fix the WorkspaceWrite description to clearly state that writes
outside the writable roots require escalated permissions; reads are not
restricted. The previous wording/formatting could be read as restricting
reads outside the workspace.
- Render the writable roots list on its own lines under a newline after
"writable roots:" for clarity.
- Show the "Commands that require network access" note only in
WorkspaceWrite when network is disabled.
- Add focused tests that call `create_shell_tool_for_sandbox` directly
and assert the exact description text for WorkspaceWrite, ReadOnly, and
DangerFullAccess.
- Update AGENTS.md to note that `just fmt` can be run automatically
without asking.

2025-09-03 10:02:34 -07:00

src

core: correct sandboxed shell tool description (reads allowed anywhere) (#3069 )

2025-09-03 10:02:34 -07:00

tests

Improve gpt-oss compatibility (#2461 )

2025-09-02 19:49:03 -07:00

Cargo.toml

core(rollout): extract rollout module, add listing API, and return file heads (#1634 )

2025-09-03 07:39:19 +00:00

prompt.md

feat: decrease testing when running interactively (#2707 )

2025-08-26 19:57:04 -07:00

README.md

fix: support special --codex-run-as-apply-patch arg (#1702 )

2025-07-28 09:26:44 -07:00

README.md

codex-core

This crate implements the business logic for Codex. It is designed to be used by the various Codex UIs written in Rust.

Dependencies

Note that codex-core makes some assumptions about certain helper utilities being available in the environment. Currently, this

macOS

Expects /usr/bin/sandbox-exec to be present.

Linux

Expects the binary containing codex-core to run the equivalent of codex debug landlock when arg0 is codex-linux-sandbox. See the codex-arg0 crate for details.

All Platforms

Expects the binary containing codex-core to simulate the virtual apply_patch CLI when arg1 is --codex-run-as-apply-patch. See the codex-arg0 crate for details.