openai/codex
1
0
Fork 0
mirror of https://github.com/openai/codex.git synced 2026-09-07 15:40:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

tests: use permission profiles in small core fixtures

Browse Source
This commit is contained in:
Michael Bolin
2026-04-30 02:18:39 -07:00
parent 6d6fa47015
commit 31b3c228ca
2 changed files with 11 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
codex-rs/core/src/agent/role_tests.rs
View File

@@ -512,7 +512,8 @@ model_reasoning_effort = "high"
#[tokio::test]
#[cfg(not(windows))]
async fn apply_role_does_not_materialize_default_sandbox_workspace_write_fields() {
use codex_protocol::protocol::SandboxPolicy;
use codex_protocol::permissions::NetworkSandboxPolicy;
let (home, mut config) = test_config_with_cli_overrides(vec![
(
"sandbox_mode".to_string(),
@@ -574,12 +575,13 @@ writable_roots = ["./sandbox-root"]
false
);
match &config.legacy_sandbox_policy() {
SandboxPolicy::WorkspaceWrite { network_access, .. } => {
assert_eq!(*network_access, true);
}
other => panic!("expected workspace-write sandbox policy, got {other:?}"),
}
assert_eq!(
config
.permissions
.permission_profile()
.network_sandbox_policy(),
NetworkSandboxPolicy::Enabled,
);
}
#[tokio::test]

11
codex-rs/core/src/unified_exec/process_manager_tests.rs
View File

@@ -71,16 +71,9 @@ fn exec_server_params_use_env_policy_overlay_contract() {
.expect("current dir")
.try_into()
.expect("absolute path");
let sandbox_policy = codex_protocol::protocol::SandboxPolicy::DangerFullAccess;
let file_system_sandbox_policy =
codex_protocol::permissions::FileSystemSandboxPolicy::from(&sandbox_policy);
let permission_profile = codex_protocol::models::PermissionProfile::Disabled;
let file_system_sandbox_policy = permission_profile.file_system_sandbox_policy();
let network_sandbox_policy = codex_protocol::permissions::NetworkSandboxPolicy::Restricted;
let permission_profile =
codex_protocol::models::PermissionProfile::from_runtime_permissions_with_enforcement(
codex_protocol::models::SandboxEnforcement::from_legacy_sandbox_policy(&sandbox_policy),
&file_system_sandbox_policy,
network_sandbox_policy,
);
let request = ExecRequest {
command: vec!["bash".to_string(), "-lc".to_string(), "true".to_string()],
cwd: cwd.clone(),