Eric Traut 15312c326c Select read-only permissions for temporary structured threads (#46844) ...

## Why

Managed permission profiles take precedence over the legacy sandbox override, so a managed `:workspace` default can prevent temporary structured threads from starting with the required read-only permissions.

## What changed

Set `default_permissions` to `:read-only` when starting a temporary structured thread without a custom permission profile. Preserve existing custom profile handling.

## Testing

Add coverage for a managed `:workspace` default, verifying read-only permissions when allowed and rejection when read-only is disallowed. Extend recap request assertions to check the read-only sandbox and permission configuration.

GitOrigin-RevId: 865a0f67d81a6729622cb1889c50f17c0ef7f531

2026-09-20 16:51:37 +00:00

..

assets

Add six bundled TUI themes and theme-aware accents (#46504)

2026-09-18 23:16:04 +00:00

src

Select read-only permissions for temporary structured threads (#46844)

2026-09-20 16:51:37 +00:00

tests

Refine the agent command center layout and metadata editing (#46838)

2026-09-20 16:43:41 +00:00

BUILD.bazel

Add an animated Codex logo to fresh conversations and onboarding (#46752)

2026-09-20 03:02:48 +00:00

Cargo.toml

Extend server version notices to prerelease and local clients (#46673)

2026-09-19 17:03:26 +00:00

styles.md

Improve TUI contrast, keyboard hints, and picker layouts (#46680)

2026-09-19 17:46:43 +00:00