iceweasel-oai 6372ba9d5f Elevated sandbox NUX (#8789) ...

Elevated Sandbox NUX:

* prompt for elevated sandbox setup when agent mode is selected (via
/approvals or at startup)
* prompt for degraded sandbox if elevated setup is declined or fails
* introduce /elevate-sandbox command to upgrade from degraded
experience.

2026-01-08 16:23:06 -08:00

..

bin

Elevated Sandbox 3 (#7809)

2025-12-11 13:51:27 -08:00

acl.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

allow.rs

fix: introduce AbsolutePathBuf as part of sandbox config (#7856)

2025-12-12 15:25:22 -08:00

audit.rs

never let sandbox write to .codex/ or .codex/.sandbox/ (#8683)

2026-01-05 11:54:21 -08:00

cap.rs

bug fixes and perf improvements for elevated sandbox setup (#8094)

2025-12-16 09:48:29 -08:00

command_runner_win.rs

best effort to "hide" Sandbox users (#8492)

2026-01-05 12:29:10 -08:00

cwd_junction.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

dpapi.rs

Elevated Sandbox 2 (#7792)

2025-12-10 21:23:16 -08:00

elevated_impl.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

env.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

firewall.rs

better idempotency for creating/updating firewall rules during setup. (#8686)

2026-01-05 10:42:33 -08:00

hide_users.rs

best effort to "hide" Sandbox users (#8492)

2026-01-05 12:29:10 -08:00

identity.rs

Elevated sandbox NUX (#8789)

2026-01-08 16:23:06 -08:00

lib.rs

Elevated sandbox NUX (#8789)

2026-01-08 16:23:06 -08:00

logging.rs

Elevated Sandbox 1 (#7788)

2025-12-09 19:00:33 -08:00

policy.rs

feat: introduce ExternalSandbox policy (#8290)

2025-12-18 17:02:03 -08:00

process.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

read_acl_mutex.rs

speed and reliability improvements for setting reads ACLs (#8216)

2025-12-17 15:27:52 -08:00

sandbox_users.rs

use a SandboxUsers group for ACLs instead of granting to each sandbox user separately (#8483)

2026-01-02 10:47:26 -08:00

setup_main_win.rs

best effort to "hide" Sandbox users (#8492)

2026-01-05 12:29:10 -08:00

setup_orchestrator.rs

never let sandbox write to .codex/ or .codex/.sandbox/ (#8683)

2026-01-05 11:54:21 -08:00

token.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00

winutil.rs

use a junction for the cwd while read ACLs are being applied (#8444)

2025-12-22 12:23:13 -08:00