mirror of
https://github.com/openai/codex.git
synced 2026-10-19 17:28:46 +00:00
jif
942af8447b
## What changed - Remove `untrusted` from the CLI, configuration schema, and MCP tool interface. Explicit `approval_policy = "untrusted"` settings now fail with an actionable error. - Remove the known-safe command allowlist. Projects marked untrusted now request approval for every command unless an explicit exec policy rule allows it. - Keep command parsing conservative by treating in-place `sed` forms as mutating and ignoring unrecognized commands when recording memory usage. ## Testing - Cover rejection of the retired configuration value and approval requests for commands in untrusted projects. GitOrigin-RevId: d6bf425edddfffbb325eee6acf383434af5fd33b
10 lines
319 B
Rust
10 lines
319 B
Rust
// Keep the PowerShell subprocess parser available as a test oracle, but do not
|
|
// compile it into production command classification.
|
|
#[cfg(test)]
|
|
#[allow(dead_code)]
|
|
mod powershell_parser;
|
|
mod powershell_tree_sitter;
|
|
|
|
pub mod is_dangerous_command;
|
|
pub(crate) use powershell_tree_sitter::try_parse_powershell_commands;
|