GenarrativeAI/Genarrative
11
0
Fork 0
Code Issues 21 Pull Requests 4 Actions 9 Packages Projects 3 Releases Wiki Activity

放开 DirectProject Codex 沙箱权限 #347

Merged
kdletters merged 2 commits from codex/codex-full-access-20260914 into master 2026-09-14 13:19:45 +08:00
Conversation 0 Commits 2 Files Changed 5
+79 -250
kdletters commented 2026-09-14 12:53:17 +08:00
Member
Copy Link
Copy Source

变更内容

  • DirectProject Codex app-server 使用 danger-full-access sandbox。
  • 移除 workspaceWrite / writableRoots 与文件变更审批根白名单。
  • DirectProject app-server 交互请求不再按 grant root 裁剪；首页只读对话、AGC 受控 MCP、凭据隔离和 Runtime 审计边界保持不变。
  • 同步更新 DirectProject 提示词、技术方案和决策记录。

验证

  • Rust 定向测试：49 passed，1 ignored。
  • npm run check:encoding 通过。
  • npm run check:doc-index 通过。
  • git diff --check 通过。
  • pre-push-master 门禁通过。
## 变更内容 - DirectProject Codex app-server 使用 danger-full-access sandbox。 - 移除 workspaceWrite / writableRoots 与文件变更审批根白名单。 - DirectProject app-server 交互请求不再按 grant root 裁剪；首页只读对话、AGC 受控 MCP、凭据隔离和 Runtime 审计边界保持不变。 - 同步更新 DirectProject 提示词、技术方案和决策记录。 ## 验证 - Rust 定向测试：49 passed，1 ignored。 - npm run check:encoding 通过。 - npm run check:doc-index 通过。 - git diff --check 通过。 - pre-push-master 门禁通过。
kdletters added 1 commit 2026-09-14 12:53:17 +08:00
放开 DirectProject Codex 沙箱权限
Project CI / Repository checks (pull_request) Successful in 2m49s
Details
Project CI / Frontend tests (pull_request) Successful in 3m27s
Details
Project CI / Backend tests (pull_request) Successful in 7m8s
Details
Project CI / Native shell tests (pull_request) Successful in 20m49s
Details
5ae8f35aaa 
DirectProject 使用 danger-full-access sandbox

移除 Codex 文件审批根白名单与路径提示约束

同步更新 AGC 技术方案和项目决策记录
kdletters added 1 commit 2026-09-14 13:19:38 +08:00
Merge branch 'master' into codex/codex-full-access-20260914
Project CI / Frontend tests (pull_request) Successful in 3m19s
Details
Project CI / Repository checks (pull_request) Successful in 2m31s
Details
Project CI / Backend tests (pull_request) Successful in 6m34s
Details
Project CI / Native shell tests (pull_request) Successful in 21m1s
Details
da76097997
kdletters merged commit 86c1187ddc into master 2026-09-14 13:19:45 +08:00
kdletters deleted branch codex/codex-full-access-20260914 2026-09-14 13:19:45 +08:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
Compat/Breaking
Breaking change that won't be backward compatible
 Kind/Bug
Something is not working
 Kind/Documentation
Documentation changes
 Kind/Enhancement
Improve existing functionality
 Kind/Feature
New functionality
 Kind/Security
This is security issue
 Kind/Testing
Issue or pull request related to testing
Priority
Critical
1
The priority is critical
Priority
High
2
The priority is high
Priority
Low
4
The priority is low
Priority
Medium
3
The priority is medium
Reviewed
Confirmed
1
Issue has been confirmed
Reviewed
Duplicate
2
This issue or pull request already exists
Reviewed
Invalid
3
Invalid issue
Reviewed
Won't Fix
3
This issue won't be fixed
Status
Abandoned
3
Somebody has started to work on this but abandoned work
Status
Blocked
1
Something is blocking this issue or pull request
Status
Need More Info
2
Feedback is required to reproduce issue or to continue work
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
HuangJiaJia JenkenB k88936 (王德宇) kdletters (段舒康) laura2008 (王乐) lhk229 (孔令弘) Loer (农洛儿) loong suzmii (董羽秦) taobaisu (叶东旭) wuxiangwanzi (王子民) YixuanLiu ziyu
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: GenarrativeAI/Genarrative#347
Delete Branch "codex/codex-full-access-20260914"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?