Alex Zamoshchin c78911e37f [ez][codex-rs] Support apps._default.default_tools_approval_mode (#27965) ...

[from codex]

## Summary

- add `default_tools_approval_mode` to `[apps._default]` and expose it
through app-server v2 `config/read`
- apply it after managed, per-tool, and per-app approval settings,
before the built-in `auto` fallback
- document the precedence, regenerate config/app-server schemas, and add
unit plus end-to-end approval coverage

## Configuration

```toml
[apps._default]
default_tools_approval_mode = "prompt"
```

The effective precedence is managed requirements, tool-specific
`approval_mode`, app-specific `default_tools_approval_mode`,
`apps._default.default_tools_approval_mode`, then `auto`.

## Test plan

- `just write-config-schema`
- `just write-app-server-schema`
- `just write-app-server-schema --experimental`
- `just test -p codex-core app_tool_policy`
- `just test -p codex-core mcp_turn_metadata`
- `just test -p codex-config`
- `just test -p codex-app-server-protocol`
- `just test -p codex-app-server config_read_includes_apps`
- `just fix -p codex-config -p codex-core -p codex-app-server-protocol
-p codex-app-server`
- `just fmt`

2026-06-17 08:50:39 -07:00

..

loader

PAC 1 - Add system proxy feature config surface (#26706)

2026-06-16 16:54:37 -07:00

requirements_layers

perf(config): defer remote sandbox hostname lookup (#28542)

2026-06-16 11:17:41 -04:00

thread_config

[codex] Remove async_trait from first-party code (#27475)

2026-06-11 18:16:39 -07:00

cloud_config_bundle_tests.rs

Switch runtime to cloud config bundle (#24622)

2026-06-02 13:18:59 -07:00

cloud_config_bundle.rs

Switch runtime to cloud config bundle (#24622)

2026-06-02 13:18:59 -07:00

cloud_config_layers_tests.rs

Switch runtime to cloud config bundle (#24622)

2026-06-02 13:18:59 -07:00

cloud_config_layers.rs

Switch runtime to cloud config bundle (#24622)

2026-06-02 13:18:59 -07:00

config_layer_source.rs

Add cloud-managed config layer support (#24620)

2026-05-31 15:54:31 -07:00

config_requirements.rs

feat(app-server): enforce managed remote control disable (#27961)

2026-06-12 20:10:12 -07:00

config_toml.rs

realtime: add AVAS architecture override (#27720)

2026-06-12 18:11:13 +00:00

constraint.rs

feat(config): support managed deny-read requirements (#17740)

2026-04-17 08:40:09 -07:00

diagnostics.rs

Add cloud-managed config layer support (#24620)

2026-05-31 15:54:31 -07:00

fingerprint.rs

Extract codex-config from codex-core (#11389)

2026-02-11 10:02:49 -08:00

hook_config.rs

Warn when hooks.json has unsupported top-level fields (#26426)

2026-06-11 23:08:07 +00:00

hooks_tests.rs

Warn when hooks.json has unsupported top-level fields (#26426)

2026-06-11 23:08:07 +00:00

host_name.rs

perf(config): defer remote sandbox hostname lookup (#28542)

2026-06-16 11:17:41 -04:00

key_aliases.rs

multi_agent_v2: move thread cap into feature config (#19792)

2026-04-27 13:31:56 +02:00

lib.rs

[codex] Remove async_trait from first-party code (#27475)

2026-06-11 18:16:39 -07:00

marketplace_edit.rs

[codex] Add marketplace remove command and shared logic (#17752)

2026-04-17 21:44:47 -07:00

mcp_edit_tests.rs

Route MCP servers through explicit environments (#23583)

2026-05-21 17:19:54 +02:00

mcp_edit.rs

Uprev Rust toolchain pins to 1.95.0 (#24684)

2026-05-26 20:59:47 -07:00

mcp_types_tests.rs

Route MCP servers through explicit environments (#23583)

2026-05-21 17:19:54 +02:00

mcp_types.rs

Route MCP servers through explicit environments (#23583)

2026-05-21 17:19:54 +02:00

merge_tests.rs

feat(permissions): resolve permission profile inheritance (#22270)

2026-05-20 20:12:07 +00:00

merge.rs

feat(permissions): resolve permission profile inheritance (#22270)

2026-05-20 20:12:07 +00:00

overrides.rs

Extract codex-config from codex-core (#11389)

2026-02-11 10:02:49 -08:00

permissions_toml.rs

core: derive built-in permission profiles from raw policies (#25739)

2026-06-02 10:57:35 -07:00

plugin_edit.rs

Move plugin out of core. (#20348)

2026-04-30 14:26:14 -07:00

profile_toml.rs

package: include zsh fork in Codex package (#23756)

2026-05-22 17:54:07 -07:00

project_root_markers.rs

Extract codex-core-skills crate (#15749)

2026-03-25 12:57:42 -07:00

requirements_exec_policy.rs

feat: single app-server bootstrap in TUI (#16582)

2026-04-08 13:49:06 +01:00

schema.rs

Use plugin-service MCP as the hosted plugin runtime (#27198)

2026-06-10 12:54:21 +02:00

skills_config.rs

chore(multiagent) skills instructions toggle (#18596)

2026-04-19 21:11:52 -07:00

state_tests.rs

feat: add layered --profile-v2 config files (#17141)

2026-05-14 15:16:15 +02:00

state.rs

feat(app-server): enforce managed remote control disable (#27961)

2026-06-12 20:10:12 -07:00

strict_config_tests.rs

[codex] Add opaque desktop config namespace (#22584)

2026-05-15 02:34:21 +00:00

strict_config.rs

Switch runtime to cloud config bundle (#24622)

2026-06-02 13:18:59 -07:00

test_support_tests.rs

Switch runtime to cloud config bundle (#24622)

2026-06-02 13:18:59 -07:00

test_support.rs

Switch runtime to cloud config bundle (#24622)

2026-06-02 13:18:59 -07:00

thread_config.rs

[codex] Remove async_trait from first-party code (#27475)

2026-06-11 18:16:39 -07:00

tui_keymap.rs

feat(tui): allow function keys through f24 in keymaps (#25329)

2026-05-31 15:42:39 -03:00

types_tests.rs

feat: skip memory startup when Codex rate limits are low (#19990)

2026-04-28 17:07:16 +02:00

types.rs

[ez][codex-rs] Support apps._default.default_tools_approval_mode (#27965)

2026-06-17 08:50:39 -07:00