Skip to content

checkpoint: into wallentx/termux-target from release/0.144.5 @ 112a2b5196bc#302

Merged
unemployabot[bot] merged 10 commits into
wallentx/termux-targetfrom
checkpoint/wallentx_termux-target_from_release_0.144.5_112a2b5196bc
Jul 17, 2026
Merged

checkpoint: into wallentx/termux-target from release/0.144.5 @ 112a2b5196bc#302
unemployabot[bot] merged 10 commits into
wallentx/termux-targetfrom
checkpoint/wallentx_termux-target_from_release_0.144.5_112a2b5196bc

Conversation

@unemployabot

@unemployabot unemployabot Bot commented Jul 17, 2026

Copy link
Copy Markdown

Termux release checkpoint

  • Source branch: release/0.144.5
  • Source hash: 112a2b5196bcbf9dcd05dfcd7305577f76e53020
  • Destination branch: wallentx/termux-target
  • Remaining first-parent commits on source: 0

This PR carries release-train conflict fixes and follow-up changes back into the reusable Termux patch branch.

Release-only workflow files and metadata under .github were restored to the destination branch versions before opening this PR.

dylan-hurd-oai and others added 10 commits July 12, 2026 20:13
## Summary

- Revert c27a909508e09105c80cc162e250e623a96a8f82 ("Update auto review
prompting") in full on the `release/0.144` branch.
- Restore the prior Guardian policy template, review request layout, and
tool specifications.
- Restore the corresponding Guardian tests and snapshots.

## Why

The auto-review prompting update needs to be rolled back from the 0.144
release line. This PR contains the direct, conflict-free Git cherry-pick
with no additional product changes.

## Validation

- `just fmt`
- `just test -p codex-core guardian::tests` (58 passed)
- `just test -p codex-core` (2,806 passed; 137 environment-sensitive
failures caused by sandbox restrictions on local ports and process
operations)
- `git show --check`
- Add an `auto_review.policy` field to model catalog messages.
- Use the selected Guardian model's catalog policy for review-session instructions, while preserving the precedence of `guardian_policy_config` and falling back to the built-in policy when neither is present.
- Preserve auto-review messages when model instruction overrides remove catalog instruction templates.

- Cover configured-policy precedence, explicit empty catalog policies, catalog-message preservation, and propagation of the catalog policy into a prewarmed Guardian session.

GitOrigin-RevId: 26b61ae2958ea8325a64834dcf91f47e140d74b3
## Summary

Cherry-picks the seven commits from
[openai/codex-internal#1942](openai/codex-internal#1942)
onto `release/0.144`.

This backport:

1. enables dangerous-command detection in danger-full-access mode
2. expands literal Bash parsing so additional forced `rm` forms are
detected
3. returns a specific rejection reason to the model when a dangerous
command is denied

The commits applied without conflicts or release-only changes. `git
range-diff` confirms every cherry-picked patch matches the source PR
exactly.

## Validation

- `just test -p codex-shell-command` (141 passed)
- `just test -p codex-core exec_policy` (107 passed)
- `just test -p codex-core` outside the sandbox (2,947 passed; 4
unrelated environment/setup failures)
- 3 RMCP tests could not locate the test-only `test_stdio_server` binary
- 1 user-shell environment test observed the tool runner's mandated
`CODEX_SANDBOX_NETWORK_DISABLED=1`
- `just fix -p codex-core`
- `just fix -p codex-shell-command`
- `just fmt`
- `git diff --check`
- Improved dangerous-command detection, including more forced `rm` forms, and provides clearer rejection reasons when commands are denied. (openai#33455)

## Changelog

Full Changelog: openai/codex@rust-v0.144.4...rust-v0.144.5

- openai#33455 [release/0.144] fix(core) expand is_dangerous_command @dylan-hurd-oai
…ust-v0.144.5

# Conflicts:
#	codex-rs/tui/src/update_action.rs
…nt/wallentx_termux-target_from_release_0.144.5_112a2b5196bc
@unemployabot
unemployabot Bot requested a review from wallentx July 17, 2026 07:26
@unemployabot unemployabot Bot added checkpoint Checkpoint merge termux-release Termux release automation labels Jul 17, 2026
@unemployabot
unemployabot Bot merged commit a076df2 into wallentx/termux-target Jul 17, 2026
@unemployabot
unemployabot Bot deleted the checkpoint/wallentx_termux-target_from_release_0.144.5_112a2b5196bc branch July 17, 2026 07:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

checkpoint Checkpoint merge termux-release Termux release automation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants