Eric Traut 11ca3f7531 Require explicit project trust in non-interactive runs (#60041) ...

## What changed

Keep untrusted project configuration and MCP servers disabled in exec runs, even with `--sandbox workspace-write`, and warn when project configuration is disabled.

Add `--trust` to `codex exec` and `codex review` to save project trust for the current and future chats, including MCP commands outside the sandbox. The grant persists with `--ephemeral`, refuses explicitly untrusted projects, and cannot be combined with `--ignore-user-config`.

Pass the working directory as a configuration default so embedded server startup does not implicitly grant trust. Preserve the selected `--oss` provider across configuration reloads.

## Testing

Extend CLI parsing and MCP integration coverage for explicit trust, persistence across ephemeral runs, disabled project configuration with write access, and rejection of conflicting or explicitly untrusted settings.

GitOrigin-RevId: b57f4f8829f98d77c5487fa8405c7f29b5d70d0c

2026-11-07 02:39:03 +00:00

..

e2e_benches

bench: add codex help e2e macrobenchmark (#31295)

2026-07-09 17:23:44 -07:00

src

Require explicit project trust in non-interactive runs (#60041)

2026-11-07 02:39:03 +00:00

tests

Configure the Opus Bazel patch and isolate auth tests (#59752)

2026-11-05 22:18:49 +00:00

BUILD.bazel

Isolate daemon package tests to reduce disk contention (#53897)

2026-10-14 07:13:22 +00:00

build.rs

Add WebRTC media transport to realtime TUI (#17058)

2026-04-08 10:26:55 -07:00

Cargo.toml

Add a standalone codex-exec-server executable (#57589)

2026-10-27 23:13:53 +00:00