Eric Traut 11ca3f7531 Require explicit project trust in non-interactive runs (#60041) ...

## What changed

Keep untrusted project configuration and MCP servers disabled in exec runs, even with `--sandbox workspace-write`, and warn when project configuration is disabled.

Add `--trust` to `codex exec` and `codex review` to save project trust for the current and future chats, including MCP commands outside the sandbox. The grant persists with `--ephemeral`, refuses explicitly untrusted projects, and cannot be combined with `--ignore-user-config`.

Pass the working directory as a configuration default so embedded server startup does not implicitly grant trust. Preserve the selected `--oss` provider across configuration reloads.

## Testing

Extend CLI parsing and MCP integration coverage for explicit trust, persistence across ephemeral runs, disabled project configuration with write access, and rejection of conflicting or explicitly untrusted settings.

GitOrigin-RevId: b57f4f8829f98d77c5487fa8405c7f29b5d70d0c

2026-11-07 02:39:03 +00:00

..

add_dir.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

agents_md.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

apply_patch.rs

Record OAuth provenance and login identity for account tokens (#55397)

2026-10-19 22:21:13 +00:00

approval_policy.rs

Add an --approve-for-me CLI flag (#36373)

2026-07-31 18:26:04 +00:00

auth_env.rs

Apply shared network policy throughout embedded Codex startup (#47411)

2026-09-23 00:49:19 +00:00

completion_backfill_tests.rs

Backfill exec completion items through paginated history (#57800)

2026-10-28 18:03:57 +00:00

cyber_access_program_tests.rs

Add per-turn Cyber access program selection to exec and the SDK (#49939)

2026-10-01 08:57:53 +00:00

daybreak.rs

Allow providers to opt into Cyber access programs (#58190)

2026-10-29 23:24:52 +00:00

ephemeral.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

hooks.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

mcp_required_exit.rs

Require explicit project trust in non-interactive runs (#60041)

2026-11-07 02:39:03 +00:00

mod.rs

Bind final-message output before running sandboxed tools (#58974)

2026-11-02 20:36:39 +00:00

originator.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

output_last_message.rs

Bind final-message output before running sandboxed tools (#58974)

2026-11-02 20:36:39 +00:00

output_schema.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

prompt_stdin.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

resume.rs

Set explicit turn triggers for exec and TUI requests (#46569)

2026-09-19 01:58:19 +00:00

sandbox.rs

Remove the patched zsh shell execution backend (#52160)

2026-10-08 16:19:09 +00:00

seatbelt.rs

Allow trusted symlinks beneath CODEX_HOME on macOS (#42716)

2026-09-04 10:12:03 +00:00

server_error_exit.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

worktree.rs

Retire worktree and voice feature flags (#54175)

2026-10-15 03:48:33 +00:00