Summary: 255 instances, 216 unique

Text	Count
// TODO(pakrym): Remove config from here	1
// TODO(ccunningham): Add an explicit non-interrupting live-turn snapshot once	1
// TODO(anp): Migrate extension ToolEnvironment and granted-permission lookup to PathUri	1
// TODO(anp): Carry PathUri through patch protocol events once app-server and rollout	1
// TODO: Remove after app-server migrates off of force_environment_info.	1
// TODO: Should arg0 be set on the ExecRequest that is returned?	1
// FIXME: Remove this temporary filter once executor plugin hooks can be trusted.	1
// Types for the TODO tool arguments matching codex-vscode/todo-mcp/src/main.rs	1
query: Some("TODO".to_string()),	21
// TODO: Remove this legacy-notify-only command builder when `notify` support is removed.	1
// TODO(anp): Remove this compatibility constructor once callers construct	1
// TODO: Emit interrupted request_user_input results (including committed answers)	1
// TODO(mbolin): ExecApprovalResponse does not conform to ElicitResult. See:	1
// TODO(starr): Unify local stdio MCP launch with	1
let inner = "rg -n \"BUG|FIXME|TODO|XXX|HACK\" -S | head -n 200";	1
cmd: "git grep TODO src".to_string(),	1
cmd: "grep -l TODO src".to_string(),	1
// TODO(stevenlee): Different processes can still resolve Auto to different stores	1
/// TODO(anp): Once `PathUri` carries an environment identifier, prefer the	1
&shlex_split_safe("grep --files-without-match TODO src"),	1
&shlex_split_safe("rg -L TODO src"),	1
&shlex_split_safe("grep -R TODO src"),	1
startup_timeout: Option<Duration>, // TODO: cancel_token should handle this.	1
// TODO: also forward signals over the super-exec socket	1
// TODO(anp): Remove this native-path localization error path once core permission	2
cmd: "rg -n 'BUG|FIXME|TODO|XXX|HACK' -S".to_string(),	1
// TODO(anp): Capture these Windows and Landlock settings from	1
cmd: "ack TODO src".to_string(),	1
// TODO(gt): Expand this debug output with detailed skills and rules display.	1
// TODO(anp): Keep PathUri through the zsh-fork sandbox policy boundary.	1
// TODO(anp): Keep PathUri through the local PTY/process launch boundary.	1
// TODO(anp): Reconcile these backend copies with the supplied sandbox context	1
// TODO: Add a bounded persistence retry only if telemetry shows this is common; never	1
&shlex_split_safe("fgrep -l TODO src"),	1
// TODO(jif) unify with structured schema	1
cmd: "git grep -l TODO src".to_string(),	1
// TODO: Remove this compatibility decoder after app-server versions that omitted	1
// TODO: pass in cli overrides once cloud tasks properly support them.	1
// TODO(celia-oai): Include provider identity in cache eligibility so switching	1
cmd: "ag TODO src".to_string(),	1
// TODO(anp): Reconcile this decision input with TurnEnvironment::sandbox_context	1
// TODO: Wire callers that already own an EnvironmentManager into	1
&shlex_split_safe("grep -l TODO src"),	1
// TODO(anp): Reconcile this private-desktop copy with the supplied sandbox context	1
cmd: "rg -L TODO src".to_string(),	1
// TODO: make private once we remove tests in lib.rs	1
// TODO: Remove this legacy remote-sync path once remote plugins have	1
// TODO: Remove this experiment-only delivery path after response-item testing is complete.	1
// TODO(anp): Reconcile Windows backend and desktop copies with the supplied sandbox	2
let inner = "less -p TODO README.md";	1
// TODO(jif): sqlite migration phase 1	1
cmd: "rg --files-with-matches TODO src".to_string(),	1
// TODO(anp): Keep PathUri through the zsh-fork executor boundary.	1
cmd: "rg -l TODO src".to_string(),	1
// TODO(sayan): Remove this compatibility field once handlers use `step_context.turn`.	1
&shlex_split_safe("pt TODO src"),	1
| UserInput::LocalAudio { .. } // TODO: Include audio inputs in the user message display.	1
// TODO(anp): Make permission matching operate on PathUri for remote environments.	1
| UserInput::LocalAudio { .. } // TODO: Include audio inputs in pending steer comparison.	1
// TODO(ccunningham): After TurnStarted, emit model-visible turn context diffs for	1
// TODO(anp): Reconcile these backend inputs with the supplied sandbox context	1
// TODO(anp): Remove this compatibility macro once callers construct	2
// TODO(anp): Make filesystem sandbox policies operate on PathUri.	1
cmd: "egrep -R TODO src".to_string(),	1
// TODO(anp): Keep PathUri through the local command launch boundary.	1
// TODO: Once legacy `notify` is removed, capture this snapshot in `CommandHookRuntime::new`	1
// TODO(rhan-oai): Populate once queued/default submission type is plumbed from	1
// TODO(anp): Resolve requested shells in remote environments instead of restricting	1
// TODO: We should add a new ToolError variant for user-declined approvals.	1
// TODO(jif): extract session to share between sub-agents	1
// TODO: Replace streamed output with the final plan item text if plan streaming is	1
// TODO(anp): Rationalize instruction-source summaries with the TUI's broader foreign-path	1
// TODO(anp): Rename this type to distinguish it from the protocol FileSystemPath.	1
// TODO(anp): Make sandbox policy path checks accept PathUri without host projection.	1
// TODO(anp): Keep PathUri through the local process launch boundary.	1
// TODO: Enforce product gating in Codex skill selection/injection instead of only parsing and	1
cmd: "ag -l TODO src".to_string(),	1
// TODO(anp): Derive this cached tag from TurnEnvironment::sandbox_context	1
// TODO (aibrahim): Consolidate config.model and config.model_reasoning_effort into config.collaboration_mode	1
UserInput::Audio { .. } // TODO: Include audio inputs in pending steer comparison.	1
//TODO: add a metric for this	1
cmd: "rga -l TODO src".to_string(),	1
// TODO(anp): Revisit this preparation type once this module's PathUri migration is complete.	1
&shlex_split_safe("rg --files-with-matches TODO src"),	1
// TODO(anp): Migrate user-shell events and execution plumbing to PathUri so this local-only	1
&shlex_split_safe("ack TODO src"),	1
// TODO(jif): Transport permissions before orchestrator-local paths are materialized,	1
// TODO(anp): Keep PathUri through the execve-wrapper boundary.	1
// TODO(iceweasel): Report executor filesystem sandbox backends like process/start so	1
// TODO(anp): Reconcile these tags with TurnEnvironment::sandbox_context	1
// TODO(anp): Reconcile these backend copies with TurnEnvironment::sandbox_context	1
// TODO(ccunningham): Pre-turn compaction runs before context updates and the	1
// TODO(anp): Replace the absolute path with a more general instruction-source	1
/// TODO: Remove this rollout knob once transcript-tail flushing is always enabled.	2
// TODO(celia-oai): Support AWS SigV4 signing for WebSocket	1
// TODO(remote plugins): download or update missing local bundles during remote	1
cmd: "pt TODO src".to_string(),	1
// TODO(anp): Reconcile this approval snapshot with TurnEnvironment::sandbox_context	1
/// TODO: Validation. When strict is set to true, the JSON schema,	1
// TODO(anp): Migrate request_permissions parsing and permission profiles to PathUri so	1
// TODO: Avoid hardcoding individual experimental fields here.	1
// TODO(remote plugins): Remove this once remote plugins are ready and vertical plugins are	1
&shlex_split_safe("grep -L TODO src"),	1
cmd: "pt -l TODO src".to_string(),	1
// TODO(anp): Present AGENTS.md discovery errors more clearly to the user.	1
// TODO(mbolin): cwd param should be AbsolutePathBuf.	1
// TODO(anp): Keep PathUri through the filesystem helper launch boundary.	1
// TODO(anp): Build this metadata from the server's captured	1
&shlex_split_safe("rga TODO src"),	1
// TODO(nornagon): is this supported on Windows?	2
// TODO(CDXENT-441): use the step scoped model	1
cmd: "fgrep -l TODO src".to_string(),	1
&shlex_split_safe("ag TODO src"),	1
// TODO(jif) delete after 22/11/2026.	1
// TODO(anp): Move PathUri conversion into the platform sandbox implementations.	1
// TODO: Make this required once all supported exec-server versions return environmentInfo.	1
cmd: "rg --files-without-match TODO src".to_string(),	1
query: Some("BUG|FIXME|TODO|XXX|HACK".to_string()),	1
// TODO(anp): Reconcile these launch settings with TurnEnvironment::sandbox_context	1
// TODO (pakrym): is this the right place for timeout?	1
// TODO(aibrahim): make this not optional	3
// TODO(anp): Reconcile this parallel turn snapshot with TurnEnvironment::sandbox_context	1
cmd: "grep --files-with-matches TODO src".to_string(),	1
// TODO(anp): Replace the marker with callback-scoped environment access.	3
cmd: "grep --files-without-match TODO src".to_string(),	1
// TODO(winston): Materialize policy-checked per-child bundles for readable	1
// TODO: we should defensively require only calling this once, since AsyncSocket will take ownership of the fd.	1
// TODO(anp): Reconcile these attempt settings with TurnEnvironment::sandbox_context	1
// TODO(anp) resolve duplicate startup warnings	1
// TODO(anp): Discover the standalone executable cwd as PathUri directly.	1
// TODO: Surface or enforce product gating at the Codex/plugin consumer boundary instead of	1
// TODO(anp): Keep PathUri through the Windows sandbox launch boundary.	1
// TODO(anp): Reconcile this runtime-wide copy with TurnEnvironment::sandbox_context	1
&shlex_split_safe("pt -l TODO src"),	1
// TODO(anp): Migrate guardian review thread settings to a PathUri fallback cwd so foreign	1
// TODO(aibrahim): Remove this and don't use config as a state object.	1
// TODO(anp): Migrate local-environment consumers to PathUri so this compatibility	1
// TODO(stevenlee): Add an RMCP adoption API that atomically updates credentials, client ID,	1
// TODO(anp): Support Windows sandbox updates through environment configuration;	1
// TODO(anp): Reconcile these legacy thread defaults with TurnEnvironment::sandbox_context;	1
// TODO(anp): Replace `TurnEnvironmentSelection` with `PathUri` once path URIs carry environment	1
/// TODO: With CCA, all hooks will be executor-scoped, so user visibility	1
/// TODO(sayan): See if we can find a way to model those as StepContext as well without holding	1
// TODO(anp): Migrate request_permissions to support paths from foreign environments.	1
&shlex_split_safe("egrep -R TODO src"),	1
// TODO: Validate the selected credentials against Bedrock ListModels once supported.	1
// TODO(owen): Once we remove support for CODEX_INTERNAL_ORIGINATOR_OVERRIDE,	1
//! TODO: These helpers inspect and modify the TUI host, so they do not support	1
// TODO(stevenlee): define that rendezvous before expanding this lock's scope.	1
"update_plan is a TODO/checklist tool and is not allowed in Plan mode".to_string(),	1
cmd: "grep -R TODO src".to_string(),	1
// TODO(anp): Keep this as PathUri once `tui::approval_events::ExecApprovalRequestEvent` and	1
// TODO(anp): Migrate request_permissions to support paths from foreign environments.	1
&shlex_split_safe("git grep TODO src"),	1
&shlex_split_safe("ag -l TODO src"),	1
// TODO(viyatb): Evaluate switching this to Option<Arc<NetworkProxy>>	1
// TODO(victor): Deprecate once migrated to `openai/elicitation/create`.	1
//TODO(gt): Add a macos_ prefix to this field and remove the target_os check.	1
// TODO: Remove this hook and its environment plumbing when legacy `notify` support is removed.	1
# TODO(anp) make it optional to specify this field	1
// TODO(maxj): Revisit capability scoping for `experimental_api_enabled`.	1
// TODO(aibrahim): Align the SIWC route with the API multipart shape and remove this branch.	1
// TODO(anp) pull startup_warnings out of Config	1
// TODO: check `text` for sensitive patterns	1
// TODO(aibrahim): Remove this temporary fallback once realtime auth no longer	1
// TODO: When core can correlate an elicitation with an MCP tool call, expose the associated	1
&shlex_split_safe("rg --files-without-match TODO src"),	1
// TODO(ruslan): Handle oversized results that core has already collapsed into a	1
// TODO: We'll improve the implementation/unit tests over time, as appropriate.	1
// TODO(anp) bound queued request bytes without blocking later responses or cleanup.	1
// TODO(anp) track better message fragment provenance in rollouts.	1
// TODO(anp) make this timeout configurable if 60 seconds is insufficient.	1
// TODO(anp): Migrate per-turn config and legacy TurnContext cwd consumers to PathUri so	1
// TODO(anp): Remove this conversion once core permission paths use PathUri.	7
// TODO: Emit interrupted request_user_input results (including committed answers)	2
#[ignore = "TODO: legacy ConPTY cmd.exe exits with STATUS_DLL_INIT_FAILED in CI"]	2
// TODO(mbolin): Perform the appropriate configuration for Windows.	1
&shlex_split_safe("grep --files-with-matches TODO src"),	1
// TODO: Remove after app-server migrates off this call.	1
// TODO: Revisit the split with StepSettings::validate, which does not	1
options: SpawnAgentOptions, // TODO(jif) drop with new fork.	1
// TODO: forward elicitation requests to the client?	1
cmd: "ack -l TODO src".to_string(),	1
// TODO: Remove this compatibility hack once Xcode 26.4 ages out.	2
&shlex_split_safe("rg -l TODO src"),	1
UserInput::Audio { .. } // TODO: Include audio inputs in the user message display.	1
// TODO(viyatb): Add websocket protocol variants when managed proxy policy	1
/// TODO(celia-oai): Make auth manager access internal to this crate so callers	1
// TODO(anp): Remove this native-path localization error path once core permission paths	2
cmd: "rga TODO src".to_string(),	1
// TODO: Use the parent session's auth when reviewer spawning is wired;	1
// TODO(anp): Keep PathUri through the Windows sandbox wrapper boundary.	1
// TODO: Emit this before compaction output validation so malformed completed	1
// TODO: Understand why we get an error on web_search although the API docs	1
// TODO: Remove this experiment-only prefix with `codex_responses_as_items`.	1
&shlex_split_safe("ack -l TODO src"),	1
// TODO(anp): Remove this duplicate validation once core permission paths remain	1
// TODO(jif) handle lag.	1
// TODO(ragona): I'm not sure this is actually correct? I believe in this case	1
// TODO(anp): Migrate shell snapshot creation to accept PathUri and defer native	1
// TODO(jif): drop this	1
// TODO(aibrahim): Remove once v2 clients no longer send the legacy	1
// TODO(anp): Reconcile this policy input with TurnEnvironment::sandbox_context	1
&shlex_split_safe("git grep -l TODO src"),	1
// TODO: think how we want to support this in the MCP	1
// TODO(rhan-oai): plumb nested Guardian review session tool-call counts.	1
cmd: "grep -L TODO src".to_string(),	1
// TODO(jif) merge with fork_agent	1
// TODO(ccunningham): if we drop support for None replacement_history compaction items,	1
// TODO(jif) add helper for drain	1
// TODO(ccunningham): Review turns currently rely on `spawn_task` for TurnComplete but do not	1
&shlex_split_safe("rga -l TODO src"),	1
// TODO(anp): Make permission matching operate on PathUri. Until then, foreign paths skip	1
// TODO(anp): Make shell snapshot lookup accept PathUri.	1
// TODO(ruslan): delete this fallback once all clients are updated to send stream_id.	1
// TODO: Follow same-origin redirects once later hops cannot leak helper headers.	1
