codex

mirror of https://github.com/openai/codex.git synced 2026-11-05 20:10:33 +00:00

Files

T

rhan-oai 40cf168567 Allow hosts to restrict a thread's root-only capabilities (#58984 )

## Why

Hosts need to apply subagent-style capability restrictions without changing a thread's session attribution, agent lineage, or permission profile.

## What changed

Add the public `RestrictRootCapabilities` marker to thread startup extension data. Capture the restriction once at startup and apply it alongside the restrictions native subagents already receive. Hosts must supply the marker again when cold-resuming a restricted thread.

Use the restriction to gate user-input and plugin-install requests, async user messaging, legacy MCP tool approvals, and Full Access MCP form input. Exclude inherited user messages from Guardian's retained authorization context for restricted threads, including after cold resume.

## Testing

Add coverage for host-restricted tool registration, MCP approval rejection, Full Access form-input handling, and inherited instruction authorization after cold resume. Update handler tests to exercise the shared restriction flag.

GitOrigin-RevId: 4d6d7102a20dc747431c7511a74a204c773e8420

2026-11-02 21:09:37 +00:00

common

Add a thread-store builder with host cleanup support (#58954 )

2026-11-02 19:25:02 +00:00

remote_env_windows

Bind capability roots to environment selections (#51493 )

2026-10-06 22:39:32 +00:00

suite

Allow hosts to restrict a thread's root-only capabilities (#58984 )

2026-11-02 21:09:37 +00:00

all.rs

[codex] Use expect in integration tests (#28441 )