jif 93beee910d Add conservative restriction helpers for tool policies (#38183) ...

## What changed

- Add `restrict_to` helpers that combine parent and requested `WebSearchMode`
  and `AppToolApproval` values without granting access beyond either policy.
- Treat `Auto` and `Writes` approval modes as incomparable, falling back to
  `Prompt` when they are combined.

## Testing

- Cover every pair of web search and app tool approval modes.

GitOrigin-RevId: 41b3da5ace2fbdaab667c4b834bc2051a8e5e9cf

2026-08-12 12:53:07 +00:00

..

examples

Add remote thread config loader protos (#18892)

2026-04-23 10:06:05 -07:00

scripts

Add remote thread config loader protos (#18892)

2026-04-23 10:06:05 -07:00

src

Add conservative restriction helpers for tool policies (#38183)

2026-08-12 12:53:07 +00:00

BUILD.bazel

Embed defaults in the packaged config layer (#38179)

2026-08-12 12:15:47 +00:00

Cargo.toml

[codex] Add managed MCP server matchers (#29648)

2026-06-25 22:15:50 +01:00

defaults.toml

Embed defaults in the packaged config layer (#38179)

2026-08-12 12:15:47 +00:00