codex: keep full access justification requirements-only

Remove the app-server protocol and schema exposure for require_full_access_justification so the flag stays internal to requirements.toml loading and runtime enforcement.

Co-authored-by: Codex <noreply@openai.com>

codex-rs/app-server-protocol/schema/json/codex_app_server_protocol.schemas.json

@@ -6871,12 +6871,6 @@
               "object",
               "null"
             ]
-          },
-          "requireFullAccessJustification": {
-            "type": [
-              "boolean",
-              "null"
-            ]
           }
         },
         "type": "object"

codex-rs/app-server-protocol/schema/json/codex_app_server_protocol.v2.schemas.json

@@ -3431,12 +3431,6 @@
             "object",
             "null"
           ]
-        },
-        "requireFullAccessJustification": {
-          "type": [
-            "boolean",
-            "null"
-          ]
         }
       },
       "type": "object"

codex-rs/app-server-protocol/schema/json/v2/ConfigRequirementsReadResponse.json

@@ -98,12 +98,6 @@
             "object",
             "null"
           ]
-        },
-        "requireFullAccessJustification": {
-          "type": [
-            "boolean",
-            "null"
-          ]
         }
       },
       "type": "object"

codex-rs/app-server-protocol/schema/typescript/v2/ConfigRequirements.ts

@@ -6,4 +6,4 @@ import type { AskForApproval } from "./AskForApproval";
 import type { ResidencyRequirement } from "./ResidencyRequirement";
 import type { SandboxMode } from "./SandboxMode";
 
-export type ConfigRequirements = {allowedApprovalPolicies: Array<AskForApproval> | null, allowedSandboxModes: Array<SandboxMode> | null, allowedWebSearchModes: Array<WebSearchMode> | null, requireFullAccessJustification: boolean | null, featureRequirements: { [key in string]?: boolean } | null, enforceResidency: ResidencyRequirement | null};
+export type ConfigRequirements = {allowedApprovalPolicies: Array<AskForApproval> | null, allowedSandboxModes: Array<SandboxMode> | null, allowedWebSearchModes: Array<WebSearchMode> | null, featureRequirements: { [key in string]?: boolean } | null, enforceResidency: ResidencyRequirement | null};

codex-rs/app-server-protocol/src/protocol/v2.rs

@@ -855,7 +855,6 @@ pub struct ConfigRequirements {
     pub allowed_approval_policies: Option<Vec<AskForApproval>>,
     pub allowed_sandbox_modes: Option<Vec<SandboxMode>>,
     pub allowed_web_search_modes: Option<Vec<WebSearchMode>>,
-    pub require_full_access_justification: Option<bool>,
     pub feature_requirements: Option<BTreeMap<String, bool>>,
     pub enforce_residency: Option<ResidencyRequirement>,
     #[experimental("configRequirements/read.network")]
@@ -7240,7 +7239,6 @@ mod tests {
                 }]),
                 allowed_sandbox_modes: None,
                 allowed_web_search_modes: None,
-                require_full_access_justification: None,
                 feature_requirements: None,
                 enforce_residency: None,
                 network: None,