app-server: accept permission profile overrides

This commit is contained in:
Michael Bolin
2026-04-20 17:45:14 -07:00
parent 11e76d0702
commit 929878c46e
44 changed files with 1844 additions and 17 deletions
+6
View File
@@ -8884,6 +8884,7 @@ mod tests {
approval_policy: Some(guardian_approvals.approval_policy),
approvals_reviewer: Some(guardian_approvals.approvals_reviewer),
sandbox_policy: Some(guardian_approvals.sandbox_policy.clone()),
permission_profile: None,
windows_sandbox_level: None,
model: None,
effort: None,
@@ -8975,6 +8976,7 @@ mod tests {
approval_policy: None,
approvals_reviewer: Some(ApprovalsReviewer::User),
sandbox_policy: None,
permission_profile: None,
windows_sandbox_level: None,
model: None,
effort: None,
@@ -9054,6 +9056,7 @@ mod tests {
approval_policy: Some(guardian_approvals.approval_policy),
approvals_reviewer: Some(guardian_approvals.approvals_reviewer),
sandbox_policy: Some(guardian_approvals.sandbox_policy.clone()),
permission_profile: None,
windows_sandbox_level: None,
model: None,
effort: None,
@@ -9111,6 +9114,7 @@ mod tests {
approval_policy: None,
approvals_reviewer: Some(ApprovalsReviewer::User),
sandbox_policy: None,
permission_profile: None,
windows_sandbox_level: None,
model: None,
effort: None,
@@ -9170,6 +9174,7 @@ mod tests {
approval_policy: Some(guardian_approvals.approval_policy),
approvals_reviewer: Some(guardian_approvals.approvals_reviewer),
sandbox_policy: Some(guardian_approvals.sandbox_policy.clone()),
permission_profile: None,
windows_sandbox_level: None,
model: None,
effort: None,
@@ -9257,6 +9262,7 @@ guardian_approval = true
approval_policy: None,
approvals_reviewer: Some(ApprovalsReviewer::User),
sandbox_policy: None,
permission_profile: None,
windows_sandbox_level: None,
model: None,
effort: None,
+2
View File
@@ -183,6 +183,7 @@ impl AppCommand {
approval_policy,
approvals_reviewer,
sandbox_policy,
permission_profile: None,
windows_sandbox_level,
model,
effort,
@@ -315,6 +316,7 @@ impl AppCommand {
approval_policy,
approvals_reviewer,
sandbox_policy,
permission_profile: _,
windows_sandbox_level,
model,
effort,
+7
View File
@@ -500,6 +500,7 @@ impl AppServerSession {
approval_policy: Some(approval_policy.into()),
approvals_reviewer: Some(approvals_reviewer.into()),
sandbox_policy: Some(sandbox_policy.into()),
permission_profile: None,
model: Some(model),
service_tier,
effort,
@@ -1466,6 +1467,12 @@ mod tests {
approval_policy: codex_protocol::protocol::AskForApproval::Never.into(),
approvals_reviewer: codex_app_server_protocol::ApprovalsReviewer::User,
sandbox: codex_protocol::protocol::SandboxPolicy::new_read_only_policy().into(),
permission_profile:
codex_protocol::models::PermissionProfile::from_legacy_sandbox_policy(
&codex_protocol::protocol::SandboxPolicy::new_read_only_policy(),
std::path::Path::new("/tmp/project"),
)
.into(),
reasoning_effort: None,
};
@@ -632,6 +632,7 @@ async fn permissions_selection_sends_approvals_reviewer_in_override_turn_context
approval_policy: Some(AskForApproval::OnRequest),
approvals_reviewer: Some(ApprovalsReviewer::GuardianSubagent),
sandbox_policy: Some(SandboxPolicy::new_workspace_write_policy()),
permission_profile: None,
windows_sandbox_level: None,
model: None,
effort: None,