mirror of
https://github.com/openai/codex.git
synced 2026-10-30 19:18:49 +00:00
POC - Configurable ReadAcess in WorkspaceWrite SandboxPolicy
This commit is contained in:
Leo Shimonaka
@@ -1933,6 +1933,9 @@
|
||||
"default": false,
|
||||
"type": "boolean"
|
||||
},
|
||||
"readAccess": {
|
||||
"$ref": "#/definitions/WorkspaceReadAccess"
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"workspaceWrite"
|
||||
@@ -2037,6 +2040,14 @@
|
||||
"description": "When set to `true`, outbound network access is allowed. `false` by default.",
|
||||
"type": "boolean"
|
||||
},
|
||||
"read_access": {
|
||||
"allOf": [
|
||||
{
|
||||
"$ref": "#/definitions/WorkspaceReadAccess2"
|
||||
}
|
||||
],
|
||||
"description": "Controls whether the workspace-write policy has full read access or an explicit read allowlist."
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"workspace-write"
|
||||
@@ -3097,6 +3108,95 @@
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
},
|
||||
"WorkspaceReadAccess": {
|
||||
"oneOf": [
|
||||
{
|
||||
"properties": {
|
||||
"type": {
|
||||
"enum": [
|
||||
"fullReadAccess"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
},
|
||||
{
|
||||
"properties": {
|
||||
"readableRoots": {
|
||||
"default": [],
|
||||
"items": {
|
||||
"$ref": "#/definitions/AbsolutePathBuf"
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"restrictedReadAccess"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
},
|
||||
"WorkspaceReadAccess2": {
|
||||
"description": "Controls read access semantics for `workspace-write` sandbox policies.",
|
||||
"oneOf": [
|
||||
{
|
||||
"description": "Preserve current behavior where all file-system paths are readable.",
|
||||
"properties": {
|
||||
"type": {
|
||||
"enum": [
|
||||
"full-read-access"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccess2Type",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccess2",
|
||||
"type": "object"
|
||||
},
|
||||
{
|
||||
"description": "Restrict reads to an explicit allowlist plus implicitly readable paths.",
|
||||
"properties": {
|
||||
"readable_roots": {
|
||||
"description": "Additional folders that should be readable from inside the sandbox.",
|
||||
"items": {
|
||||
"$ref": "#/definitions/AbsolutePathBuf"
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"restricted-read-access"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccess2Type",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccess2",
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"description": "Request from the client to the server.",
|
||||
|
||||
@@ -4303,6 +4303,14 @@
|
||||
"description": "When set to `true`, outbound network access is allowed. `false` by default.",
|
||||
"type": "boolean"
|
||||
},
|
||||
"read_access": {
|
||||
"allOf": [
|
||||
{
|
||||
"$ref": "#/definitions/WorkspaceReadAccess"
|
||||
}
|
||||
],
|
||||
"description": "Controls whether the workspace-write policy has full read access or an explicit read allowlist."
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"workspace-write"
|
||||
@@ -5044,6 +5052,52 @@
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
},
|
||||
"WorkspaceReadAccess": {
|
||||
"description": "Controls read access semantics for `workspace-write` sandbox policies.",
|
||||
"oneOf": [
|
||||
{
|
||||
"description": "Preserve current behavior where all file-system paths are readable.",
|
||||
"properties": {
|
||||
"type": {
|
||||
"enum": [
|
||||
"full-read-access"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
},
|
||||
{
|
||||
"description": "Restrict reads to an explicit allowlist plus implicitly readable paths.",
|
||||
"properties": {
|
||||
"readable_roots": {
|
||||
"description": "Additional folders that should be readable from inside the sandbox.",
|
||||
"items": {
|
||||
"$ref": "#/definitions/AbsolutePathBuf"
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"restricted-read-access"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"description": "Response event from the agent NOTE: Make sure none of these values have optional types, as it will mess up the extension code-gen.",
|
||||
|
||||
@@ -5343,6 +5343,14 @@
|
||||
"description": "When set to `true`, outbound network access is allowed. `false` by default.",
|
||||
"type": "boolean"
|
||||
},
|
||||
"read_access": {
|
||||
"allOf": [
|
||||
{
|
||||
"$ref": "#/definitions/WorkspaceReadAccess"
|
||||
}
|
||||
],
|
||||
"description": "Controls whether the workspace-write policy has full read access or an explicit read allowlist."
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"workspace-write"
|
||||
@@ -7365,6 +7373,52 @@
|
||||
"samplePaths"
|
||||
],
|
||||
"type": "object"
|
||||
},
|
||||
"WorkspaceReadAccess": {
|
||||
"description": "Controls read access semantics for `workspace-write` sandbox policies.",
|
||||
"oneOf": [
|
||||
{
|
||||
"description": "Preserve current behavior where all file-system paths are readable.",
|
||||
"properties": {
|
||||
"type": {
|
||||
"enum": [
|
||||
"full-read-access"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
},
|
||||
{
|
||||
"description": "Restrict reads to an explicit allowlist plus implicitly readable paths.",
|
||||
"properties": {
|
||||
"readable_roots": {
|
||||
"description": "Additional folders that should be readable from inside the sandbox.",
|
||||
"items": {
|
||||
"$ref": "#/definitions/AbsolutePathBuf"
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"restricted-read-access"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"description": "Notification sent from the server to the client.",
|
||||
|
||||
@@ -7548,6 +7548,14 @@
|
||||
"description": "When set to `true`, outbound network access is allowed. `false` by default.",
|
||||
"type": "boolean"
|
||||
},
|
||||
"read_access": {
|
||||
"allOf": [
|
||||
{
|
||||
"$ref": "#/definitions/WorkspaceReadAccess"
|
||||
}
|
||||
],
|
||||
"description": "Controls whether the workspace-write policy has full read access or an explicit read allowlist."
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"workspace-write"
|
||||
@@ -9684,6 +9692,52 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"WorkspaceReadAccess": {
|
||||
"description": "Controls read access semantics for `workspace-write` sandbox policies.",
|
||||
"oneOf": [
|
||||
{
|
||||
"description": "Preserve current behavior where all file-system paths are readable.",
|
||||
"properties": {
|
||||
"type": {
|
||||
"enum": [
|
||||
"full-read-access"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
},
|
||||
{
|
||||
"description": "Restrict reads to an explicit allowlist plus implicitly readable paths.",
|
||||
"properties": {
|
||||
"readable_roots": {
|
||||
"description": "Additional folders that should be readable from inside the sandbox.",
|
||||
"items": {
|
||||
"$ref": "#/definitions/AbsolutePathBuf"
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"restricted-read-access"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
},
|
||||
"v2": {
|
||||
"AbsolutePathBuf": {
|
||||
"description": "A path that is guaranteed to be absolute and normalized (though it is not guaranteed to be canonicalized or exist on the filesystem).\n\nIMPORTANT: When deserializing an `AbsolutePathBuf`, a base path must be set using [AbsolutePathBufGuard::new]. If no base path is set, the deserialization will fail unless the path being deserialized is already absolute.",
|
||||
@@ -13464,6 +13518,9 @@
|
||||
"default": false,
|
||||
"type": "boolean"
|
||||
},
|
||||
"readAccess": {
|
||||
"$ref": "#/definitions/v2/WorkspaceReadAccess"
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"workspaceWrite"
|
||||
@@ -13501,6 +13558,9 @@
|
||||
"default": false,
|
||||
"type": "boolean"
|
||||
},
|
||||
"read_access": {
|
||||
"$ref": "#/definitions/v2/WorkspaceReadAccess"
|
||||
},
|
||||
"writable_roots": {
|
||||
"default": [],
|
||||
"items": {
|
||||
@@ -16055,6 +16115,49 @@
|
||||
"title": "WindowsWorldWritableWarningNotification",
|
||||
"type": "object"
|
||||
},
|
||||
"WorkspaceReadAccess": {
|
||||
"oneOf": [
|
||||
{
|
||||
"properties": {
|
||||
"type": {
|
||||
"enum": [
|
||||
"fullReadAccess"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
},
|
||||
{
|
||||
"properties": {
|
||||
"readableRoots": {
|
||||
"default": [],
|
||||
"items": {
|
||||
"$ref": "#/definitions/v2/AbsolutePathBuf"
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"restrictedReadAccess"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
},
|
||||
"WriteStatus": {
|
||||
"enum": [
|
||||
"ok",
|
||||
|
||||
@@ -94,6 +94,14 @@
|
||||
"description": "When set to `true`, outbound network access is allowed. `false` by default.",
|
||||
"type": "boolean"
|
||||
},
|
||||
"read_access": {
|
||||
"allOf": [
|
||||
{
|
||||
"$ref": "#/definitions/WorkspaceReadAccess"
|
||||
}
|
||||
],
|
||||
"description": "Controls whether the workspace-write policy has full read access or an explicit read allowlist."
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"workspace-write"
|
||||
@@ -116,6 +124,52 @@
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
},
|
||||
"WorkspaceReadAccess": {
|
||||
"description": "Controls read access semantics for `workspace-write` sandbox policies.",
|
||||
"oneOf": [
|
||||
{
|
||||
"description": "Preserve current behavior where all file-system paths are readable.",
|
||||
"properties": {
|
||||
"type": {
|
||||
"enum": [
|
||||
"full-read-access"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
},
|
||||
{
|
||||
"description": "Restrict reads to an explicit allowlist plus implicitly readable paths.",
|
||||
"properties": {
|
||||
"readable_roots": {
|
||||
"description": "Additional folders that should be readable from inside the sandbox.",
|
||||
"items": {
|
||||
"$ref": "#/definitions/AbsolutePathBuf"
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"restricted-read-access"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"properties": {
|
||||
|
||||
@@ -4303,6 +4303,14 @@
|
||||
"description": "When set to `true`, outbound network access is allowed. `false` by default.",
|
||||
"type": "boolean"
|
||||
},
|
||||
"read_access": {
|
||||
"allOf": [
|
||||
{
|
||||
"$ref": "#/definitions/WorkspaceReadAccess"
|
||||
}
|
||||
],
|
||||
"description": "Controls whether the workspace-write policy has full read access or an explicit read allowlist."
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"workspace-write"
|
||||
@@ -5044,6 +5052,52 @@
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
},
|
||||
"WorkspaceReadAccess": {
|
||||
"description": "Controls read access semantics for `workspace-write` sandbox policies.",
|
||||
"oneOf": [
|
||||
{
|
||||
"description": "Preserve current behavior where all file-system paths are readable.",
|
||||
"properties": {
|
||||
"type": {
|
||||
"enum": [
|
||||
"full-read-access"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
},
|
||||
{
|
||||
"description": "Restrict reads to an explicit allowlist plus implicitly readable paths.",
|
||||
"properties": {
|
||||
"readable_roots": {
|
||||
"description": "Additional folders that should be readable from inside the sandbox.",
|
||||
"items": {
|
||||
"$ref": "#/definitions/AbsolutePathBuf"
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"restricted-read-access"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"properties": {
|
||||
|
||||
@@ -4303,6 +4303,14 @@
|
||||
"description": "When set to `true`, outbound network access is allowed. `false` by default.",
|
||||
"type": "boolean"
|
||||
},
|
||||
"read_access": {
|
||||
"allOf": [
|
||||
{
|
||||
"$ref": "#/definitions/WorkspaceReadAccess"
|
||||
}
|
||||
],
|
||||
"description": "Controls whether the workspace-write policy has full read access or an explicit read allowlist."
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"workspace-write"
|
||||
@@ -5044,6 +5052,52 @@
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
},
|
||||
"WorkspaceReadAccess": {
|
||||
"description": "Controls read access semantics for `workspace-write` sandbox policies.",
|
||||
"oneOf": [
|
||||
{
|
||||
"description": "Preserve current behavior where all file-system paths are readable.",
|
||||
"properties": {
|
||||
"type": {
|
||||
"enum": [
|
||||
"full-read-access"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
},
|
||||
{
|
||||
"description": "Restrict reads to an explicit allowlist plus implicitly readable paths.",
|
||||
"properties": {
|
||||
"readable_roots": {
|
||||
"description": "Additional folders that should be readable from inside the sandbox.",
|
||||
"items": {
|
||||
"$ref": "#/definitions/AbsolutePathBuf"
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"restricted-read-access"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"properties": {
|
||||
|
||||
@@ -255,6 +255,14 @@
|
||||
"description": "When set to `true`, outbound network access is allowed. `false` by default.",
|
||||
"type": "boolean"
|
||||
},
|
||||
"read_access": {
|
||||
"allOf": [
|
||||
{
|
||||
"$ref": "#/definitions/WorkspaceReadAccess"
|
||||
}
|
||||
],
|
||||
"description": "Controls whether the workspace-write policy has full read access or an explicit read allowlist."
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"workspace-write"
|
||||
@@ -324,6 +332,52 @@
|
||||
"byteRange"
|
||||
],
|
||||
"type": "object"
|
||||
},
|
||||
"WorkspaceReadAccess": {
|
||||
"description": "Controls read access semantics for `workspace-write` sandbox policies.",
|
||||
"oneOf": [
|
||||
{
|
||||
"description": "Preserve current behavior where all file-system paths are readable.",
|
||||
"properties": {
|
||||
"type": {
|
||||
"enum": [
|
||||
"full-read-access"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
},
|
||||
{
|
||||
"description": "Restrict reads to an explicit allowlist plus implicitly readable paths.",
|
||||
"properties": {
|
||||
"readable_roots": {
|
||||
"description": "Additional folders that should be readable from inside the sandbox.",
|
||||
"items": {
|
||||
"$ref": "#/definitions/AbsolutePathBuf"
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"restricted-read-access"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"properties": {
|
||||
|
||||
@@ -4303,6 +4303,14 @@
|
||||
"description": "When set to `true`, outbound network access is allowed. `false` by default.",
|
||||
"type": "boolean"
|
||||
},
|
||||
"read_access": {
|
||||
"allOf": [
|
||||
{
|
||||
"$ref": "#/definitions/WorkspaceReadAccess"
|
||||
}
|
||||
],
|
||||
"description": "Controls whether the workspace-write policy has full read access or an explicit read allowlist."
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"workspace-write"
|
||||
@@ -5044,6 +5052,52 @@
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
},
|
||||
"WorkspaceReadAccess": {
|
||||
"description": "Controls read access semantics for `workspace-write` sandbox policies.",
|
||||
"oneOf": [
|
||||
{
|
||||
"description": "Preserve current behavior where all file-system paths are readable.",
|
||||
"properties": {
|
||||
"type": {
|
||||
"enum": [
|
||||
"full-read-access"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
},
|
||||
{
|
||||
"description": "Restrict reads to an explicit allowlist plus implicitly readable paths.",
|
||||
"properties": {
|
||||
"readable_roots": {
|
||||
"description": "Additional folders that should be readable from inside the sandbox.",
|
||||
"items": {
|
||||
"$ref": "#/definitions/AbsolutePathBuf"
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"restricted-read-access"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"properties": {
|
||||
|
||||
@@ -84,6 +84,9 @@
|
||||
"default": false,
|
||||
"type": "boolean"
|
||||
},
|
||||
"readAccess": {
|
||||
"$ref": "#/definitions/WorkspaceReadAccess"
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"workspaceWrite"
|
||||
@@ -106,6 +109,49 @@
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
},
|
||||
"WorkspaceReadAccess": {
|
||||
"oneOf": [
|
||||
{
|
||||
"properties": {
|
||||
"type": {
|
||||
"enum": [
|
||||
"fullReadAccess"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
},
|
||||
{
|
||||
"properties": {
|
||||
"readableRoots": {
|
||||
"default": [],
|
||||
"items": {
|
||||
"$ref": "#/definitions/AbsolutePathBuf"
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"restrictedReadAccess"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"properties": {
|
||||
|
||||
@@ -530,6 +530,9 @@
|
||||
"default": false,
|
||||
"type": "boolean"
|
||||
},
|
||||
"read_access": {
|
||||
"$ref": "#/definitions/WorkspaceReadAccess"
|
||||
},
|
||||
"writable_roots": {
|
||||
"default": [],
|
||||
"items": {
|
||||
@@ -573,6 +576,49 @@
|
||||
"live"
|
||||
],
|
||||
"type": "string"
|
||||
},
|
||||
"WorkspaceReadAccess": {
|
||||
"oneOf": [
|
||||
{
|
||||
"properties": {
|
||||
"type": {
|
||||
"enum": [
|
||||
"fullReadAccess"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
},
|
||||
{
|
||||
"properties": {
|
||||
"readableRoots": {
|
||||
"default": [],
|
||||
"items": {
|
||||
"$ref": "#/definitions/AbsolutePathBuf"
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"restrictedReadAccess"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"properties": {
|
||||
|
||||
@@ -571,6 +571,9 @@
|
||||
"default": false,
|
||||
"type": "boolean"
|
||||
},
|
||||
"readAccess": {
|
||||
"$ref": "#/definitions/WorkspaceReadAccess"
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"workspaceWrite"
|
||||
@@ -1538,6 +1541,49 @@
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
},
|
||||
"WorkspaceReadAccess": {
|
||||
"oneOf": [
|
||||
{
|
||||
"properties": {
|
||||
"type": {
|
||||
"enum": [
|
||||
"fullReadAccess"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
},
|
||||
{
|
||||
"properties": {
|
||||
"readableRoots": {
|
||||
"default": [],
|
||||
"items": {
|
||||
"$ref": "#/definitions/AbsolutePathBuf"
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"restrictedReadAccess"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"properties": {
|
||||
|
||||
@@ -571,6 +571,9 @@
|
||||
"default": false,
|
||||
"type": "boolean"
|
||||
},
|
||||
"readAccess": {
|
||||
"$ref": "#/definitions/WorkspaceReadAccess"
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"workspaceWrite"
|
||||
@@ -1538,6 +1541,49 @@
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
},
|
||||
"WorkspaceReadAccess": {
|
||||
"oneOf": [
|
||||
{
|
||||
"properties": {
|
||||
"type": {
|
||||
"enum": [
|
||||
"fullReadAccess"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
},
|
||||
{
|
||||
"properties": {
|
||||
"readableRoots": {
|
||||
"default": [],
|
||||
"items": {
|
||||
"$ref": "#/definitions/AbsolutePathBuf"
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"restrictedReadAccess"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"properties": {
|
||||
|
||||
@@ -571,6 +571,9 @@
|
||||
"default": false,
|
||||
"type": "boolean"
|
||||
},
|
||||
"readAccess": {
|
||||
"$ref": "#/definitions/WorkspaceReadAccess"
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"workspaceWrite"
|
||||
@@ -1538,6 +1541,49 @@
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
},
|
||||
"WorkspaceReadAccess": {
|
||||
"oneOf": [
|
||||
{
|
||||
"properties": {
|
||||
"type": {
|
||||
"enum": [
|
||||
"fullReadAccess"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
},
|
||||
{
|
||||
"properties": {
|
||||
"readableRoots": {
|
||||
"default": [],
|
||||
"items": {
|
||||
"$ref": "#/definitions/AbsolutePathBuf"
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"restrictedReadAccess"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"properties": {
|
||||
|
||||
@@ -176,6 +176,9 @@
|
||||
"default": false,
|
||||
"type": "boolean"
|
||||
},
|
||||
"readAccess": {
|
||||
"$ref": "#/definitions/WorkspaceReadAccess"
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"workspaceWrite"
|
||||
@@ -369,6 +372,49 @@
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
},
|
||||
"WorkspaceReadAccess": {
|
||||
"oneOf": [
|
||||
{
|
||||
"properties": {
|
||||
"type": {
|
||||
"enum": [
|
||||
"fullReadAccess"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "FullReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
},
|
||||
{
|
||||
"properties": {
|
||||
"readableRoots": {
|
||||
"default": [],
|
||||
"items": {
|
||||
"$ref": "#/definitions/AbsolutePathBuf"
|
||||
},
|
||||
"type": "array"
|
||||
},
|
||||
"type": {
|
||||
"enum": [
|
||||
"restrictedReadAccess"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccessType",
|
||||
"type": "string"
|
||||
}
|
||||
},
|
||||
"required": [
|
||||
"type"
|
||||
],
|
||||
"title": "RestrictedReadAccessWorkspaceReadAccess",
|
||||
"type": "object"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"properties": {
|
||||
|
||||
@@ -3,6 +3,7 @@
|
||||
// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
|
||||
import type { AbsolutePathBuf } from "./AbsolutePathBuf";
|
||||
import type { NetworkAccess } from "./NetworkAccess";
|
||||
import type { WorkspaceReadAccess } from "./WorkspaceReadAccess";
|
||||
|
||||
/**
|
||||
* Determines execution restrictions for model shell commands.
|
||||
@@ -32,4 +33,9 @@ exclude_tmpdir_env_var: boolean,
|
||||
* When set to `true`, will NOT include the `/tmp` among the default
|
||||
* writable roots on UNIX. Defaults to `false`.
|
||||
*/
|
||||
exclude_slash_tmp: boolean, };
|
||||
exclude_slash_tmp: boolean,
|
||||
/**
|
||||
* Controls whether the workspace-write policy has full read access or
|
||||
* an explicit read allowlist.
|
||||
*/
|
||||
read_access?: WorkspaceReadAccess, };
|
||||
|
||||
@@ -0,0 +1,13 @@
|
||||
// GENERATED CODE! DO NOT MODIFY BY HAND!
|
||||
|
||||
// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
|
||||
import type { AbsolutePathBuf } from "./AbsolutePathBuf";
|
||||
|
||||
/**
|
||||
* Controls read access semantics for `workspace-write` sandbox policies.
|
||||
*/
|
||||
export type WorkspaceReadAccess = { "type": "full-read-access" } | { "type": "restricted-read-access",
|
||||
/**
|
||||
* Additional folders that should be readable from inside the sandbox.
|
||||
*/
|
||||
readable_roots?: Array<AbsolutePathBuf>, };
|
||||
@@ -219,4 +219,5 @@ export type { WebSearchBeginEvent } from "./WebSearchBeginEvent";
|
||||
export type { WebSearchEndEvent } from "./WebSearchEndEvent";
|
||||
export type { WebSearchItem } from "./WebSearchItem";
|
||||
export type { WebSearchMode } from "./WebSearchMode";
|
||||
export type { WorkspaceReadAccess } from "./WorkspaceReadAccess";
|
||||
export * as v2 from "./v2";
|
||||
|
||||
@@ -3,5 +3,6 @@
|
||||
// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
|
||||
import type { AbsolutePathBuf } from "../AbsolutePathBuf";
|
||||
import type { NetworkAccess } from "./NetworkAccess";
|
||||
import type { WorkspaceReadAccess } from "./WorkspaceReadAccess";
|
||||
|
||||
export type SandboxPolicy = { "type": "dangerFullAccess" } | { "type": "readOnly" } | { "type": "externalSandbox", networkAccess: NetworkAccess, } | { "type": "workspaceWrite", writableRoots: Array<AbsolutePathBuf>, networkAccess: boolean, excludeTmpdirEnvVar: boolean, excludeSlashTmp: boolean, };
|
||||
export type SandboxPolicy = { "type": "dangerFullAccess" } | { "type": "readOnly" } | { "type": "externalSandbox", networkAccess: NetworkAccess, } | { "type": "workspaceWrite", writableRoots: Array<AbsolutePathBuf>, networkAccess: boolean, excludeTmpdirEnvVar: boolean, excludeSlashTmp: boolean, readAccess?: WorkspaceReadAccess, };
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
// GENERATED CODE! DO NOT MODIFY BY HAND!
|
||||
|
||||
// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
|
||||
import type { WorkspaceReadAccess } from "./WorkspaceReadAccess";
|
||||
|
||||
export type SandboxWorkspaceWrite = { writable_roots: Array<string>, network_access: boolean, exclude_tmpdir_env_var: boolean, exclude_slash_tmp: boolean, };
|
||||
export type SandboxWorkspaceWrite = { writable_roots: Array<string>, network_access: boolean, exclude_tmpdir_env_var: boolean, exclude_slash_tmp: boolean, read_access?: WorkspaceReadAccess, };
|
||||
|
||||
@@ -0,0 +1,6 @@
|
||||
// GENERATED CODE! DO NOT MODIFY BY HAND!
|
||||
|
||||
// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
|
||||
import type { AbsolutePathBuf } from "../AbsolutePathBuf";
|
||||
|
||||
export type WorkspaceReadAccess = { "type": "fullReadAccess" } | { "type": "restrictedReadAccess", readableRoots: Array<AbsolutePathBuf>, };
|
||||
@@ -185,4 +185,5 @@ export type { TurnSteerResponse } from "./TurnSteerResponse";
|
||||
export type { UserInput } from "./UserInput";
|
||||
export type { WebSearchAction } from "./WebSearchAction";
|
||||
export type { WindowsWorldWritableWarningNotification } from "./WindowsWorldWritableWarningNotification";
|
||||
export type { WorkspaceReadAccess } from "./WorkspaceReadAccess";
|
||||
export type { WriteStatus } from "./WriteStatus";
|
||||
|
||||
@@ -329,6 +329,8 @@ pub struct SandboxWorkspaceWrite {
|
||||
pub exclude_tmpdir_env_var: bool,
|
||||
#[serde(default)]
|
||||
pub exclude_slash_tmp: bool,
|
||||
#[serde(default, skip_serializing_if = "WorkspaceReadAccess::is_full")]
|
||||
pub read_access: WorkspaceReadAccess,
|
||||
}
|
||||
|
||||
#[derive(Serialize, Deserialize, Debug, Clone, PartialEq, JsonSchema, TS)]
|
||||
@@ -595,6 +597,27 @@ pub enum NetworkAccess {
|
||||
Enabled,
|
||||
}
|
||||
|
||||
#[derive(Serialize, Deserialize, Debug, Clone, PartialEq, Eq, JsonSchema, TS, Default)]
|
||||
#[serde(tag = "type", rename_all = "camelCase")]
|
||||
#[ts(tag = "type")]
|
||||
#[ts(export_to = "v2/")]
|
||||
pub enum WorkspaceReadAccess {
|
||||
#[default]
|
||||
FullReadAccess,
|
||||
#[serde(rename_all = "camelCase")]
|
||||
#[ts(rename_all = "camelCase")]
|
||||
RestrictedReadAccess {
|
||||
#[serde(default)]
|
||||
readable_roots: Vec<AbsolutePathBuf>,
|
||||
},
|
||||
}
|
||||
|
||||
impl WorkspaceReadAccess {
|
||||
pub fn is_full(&self) -> bool {
|
||||
matches!(self, WorkspaceReadAccess::FullReadAccess)
|
||||
}
|
||||
}
|
||||
|
||||
#[derive(Serialize, Deserialize, Debug, Clone, PartialEq, Eq, JsonSchema, TS)]
|
||||
#[serde(tag = "type", rename_all = "camelCase")]
|
||||
#[ts(tag = "type")]
|
||||
@@ -619,6 +642,8 @@ pub enum SandboxPolicy {
|
||||
exclude_tmpdir_env_var: bool,
|
||||
#[serde(default)]
|
||||
exclude_slash_tmp: bool,
|
||||
#[serde(default, skip_serializing_if = "WorkspaceReadAccess::is_full")]
|
||||
read_access: WorkspaceReadAccess,
|
||||
},
|
||||
}
|
||||
|
||||
@@ -642,11 +667,22 @@ impl SandboxPolicy {
|
||||
network_access,
|
||||
exclude_tmpdir_env_var,
|
||||
exclude_slash_tmp,
|
||||
read_access,
|
||||
} => codex_protocol::protocol::SandboxPolicy::WorkspaceWrite {
|
||||
writable_roots: writable_roots.clone(),
|
||||
network_access: *network_access,
|
||||
exclude_tmpdir_env_var: *exclude_tmpdir_env_var,
|
||||
exclude_slash_tmp: *exclude_slash_tmp,
|
||||
read_access: match read_access {
|
||||
WorkspaceReadAccess::FullReadAccess => {
|
||||
codex_protocol::protocol::WorkspaceReadAccess::FullReadAccess
|
||||
}
|
||||
WorkspaceReadAccess::RestrictedReadAccess { readable_roots } => {
|
||||
codex_protocol::protocol::WorkspaceReadAccess::RestrictedReadAccess {
|
||||
readable_roots: readable_roots.clone(),
|
||||
}
|
||||
}
|
||||
},
|
||||
},
|
||||
}
|
||||
}
|
||||
@@ -672,11 +708,20 @@ impl From<codex_protocol::protocol::SandboxPolicy> for SandboxPolicy {
|
||||
network_access,
|
||||
exclude_tmpdir_env_var,
|
||||
exclude_slash_tmp,
|
||||
read_access,
|
||||
} => SandboxPolicy::WorkspaceWrite {
|
||||
writable_roots,
|
||||
network_access,
|
||||
exclude_tmpdir_env_var,
|
||||
exclude_slash_tmp,
|
||||
read_access: match read_access {
|
||||
codex_protocol::protocol::WorkspaceReadAccess::FullReadAccess => {
|
||||
WorkspaceReadAccess::FullReadAccess
|
||||
}
|
||||
codex_protocol::protocol::WorkspaceReadAccess::RestrictedReadAccess {
|
||||
readable_roots,
|
||||
} => WorkspaceReadAccess::RestrictedReadAccess { readable_roots },
|
||||
},
|
||||
},
|
||||
}
|
||||
}
|
||||
@@ -3143,6 +3188,34 @@ mod tests {
|
||||
assert_eq!(back_to_v2, v2_policy);
|
||||
}
|
||||
|
||||
#[test]
|
||||
fn sandbox_policy_round_trips_workspace_write_restricted_read_access() {
|
||||
let readable_root = if cfg!(windows) {
|
||||
AbsolutePathBuf::from_absolute_path("C:\\repo\\readable").expect("absolute path")
|
||||
} else {
|
||||
AbsolutePathBuf::from_absolute_path("/repo/readable").expect("absolute path")
|
||||
};
|
||||
let writable_root = if cfg!(windows) {
|
||||
AbsolutePathBuf::from_absolute_path("C:\\repo\\writable").expect("absolute path")
|
||||
} else {
|
||||
AbsolutePathBuf::from_absolute_path("/repo/writable").expect("absolute path")
|
||||
};
|
||||
|
||||
let v2_policy = SandboxPolicy::WorkspaceWrite {
|
||||
writable_roots: vec![writable_root],
|
||||
network_access: false,
|
||||
exclude_tmpdir_env_var: true,
|
||||
exclude_slash_tmp: true,
|
||||
read_access: WorkspaceReadAccess::RestrictedReadAccess {
|
||||
readable_roots: vec![readable_root],
|
||||
},
|
||||
};
|
||||
|
||||
let core_policy = v2_policy.to_core();
|
||||
let back_to_v2 = SandboxPolicy::from(core_policy);
|
||||
assert_eq!(back_to_v2, v2_policy);
|
||||
}
|
||||
|
||||
#[test]
|
||||
fn core_turn_item_into_thread_item_converts_supported_variants() {
|
||||
let user_item = TurnItem::UserMessage(UserMessageItem {
|
||||
|
||||
Reference in New Issue
Block a user