ioanbudea-OAI 400a1e1e82 Use native permission profiles for diagnostics and sandbox checks (#61369) ...

## What changed

- Derive sampling diagnostic and rollout trace labels directly from permission profiles instead of constructing legacy sandbox policies. Rename the trace metadata field from `sandbox_policy` to `permissions_profile`.
- Extract `with_workspace_write_cwd` to share default workspace metadata protections between legacy policy conversion and the TUI's sandbox-mode compatibility check. Build the check's workspace-write profile from filesystem and network permissions directly.

## Testing

Add a regression test confirming that the sandbox-mode compatibility check accepts standard workspace metadata protections and rejects a profile with an additional writable `.git` root.

GitOrigin-RevId: f20d23afd80dff6347865df3d6a94d6f5e90e1e0

2026-11-13 20:22:45 +00:00

..

items

Version answer display instructions and restrict unsupported payloads (#60904)

2026-11-11 23:35:05 +00:00

models

Preserve file-backed audio in tool outputs (#60735)

2026-11-11 06:41:15 +00:00

openai_models

Allow model overrides for incremental Code Mode tool messages (#60188)

2026-11-08 01:13:32 +00:00

permissions

Remove redundant legacy permission helpers (#61194)

2026-11-12 22:14:30 +00:00

prompts/base_instructions

…

account.rs

Add a built-in Google Cloud Vertex AI provider (#56265)

2026-10-22 21:01:14 +00:00

agent_error.rs

Add bounded diagnostics for agent spawn failures (#51355)

2026-10-06 12:32:27 +00:00

agent_path.rs

…

approvals.rs

Preserve MCP registration scope across client operations (#61257)

2026-11-13 04:51:06 +00:00

auth.rs

Add support for Academic Researchers plans (#55387)

2026-10-19 21:43:19 +00:00

capabilities_tests.rs

…

capabilities.rs

Bind capability roots to environment selections (#51493)

2026-10-06 22:39:32 +00:00

codex_error_info.rs

Treat inference hook denials as terminal errors (#60511)

2026-11-10 03:21:26 +00:00

config_types.rs

Retire the personality feature flag and document deprecated settings (#45809)

2026-09-15 23:39:40 +00:00

context_window_id_tests.rs

Preserve model-facing ID allocations in saved history (#60771)

2026-11-11 09:58:13 +00:00

context_window_id.rs

Preserve model-facing ID allocations in saved history (#60771)

2026-11-11 09:58:13 +00:00

conversation_start_params_tests.rs

Forward client voice session IDs in realtime requests (#53784)

2026-10-13 22:21:31 +00:00

dynamic_tools.rs

…

environment.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

error_tests.rs

Point usage and credit links to ChatGPT settings (#49874)

2026-10-01 05:16:40 +00:00

error.rs

Honor advertised WebSocket message size limits (#60841)

2026-11-11 18:58:56 +00:00

exec_output_tests.rs

…

exec_output.rs

…

guardian_transcript.rs

Add an optional JSON transcript format for Guardian (#51465)

2026-10-06 19:30:57 +00:00

hooks.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

item_id_generator.rs

Preserve thread-local model ID state across replay and compaction (#60942)

2026-11-12 00:27:01 +00:00

items.rs

Preserve MCP registration scope across client operations (#61257)

2026-11-13 04:51:06 +00:00

legacy_events.rs

Preserve MCP registration scope across client operations (#61257)

2026-11-13 04:51:06 +00:00

lib.rs

Preserve model-facing ID allocations in saved history (#60771)

2026-11-11 09:58:13 +00:00

local_media_tests.rs

Add audio file references with explicit runtime rejection (#58430)

2026-10-30 20:53:25 +00:00

local_media.rs

Add audio file references with explicit runtime rejection (#58430)

2026-10-30 20:53:25 +00:00

mcp_approval_meta.rs

Include tool names and annotation hints in MCP approval metadata (#58161)

2026-10-29 19:34:46 +00:00

mcp_policy.rs

…

mcp.rs

Allow deferring plain-text MCP output in thread item listings (#60390)

2026-11-09 12:54:12 +00:00

memory_citation.rs

…

memory_version.rs

…

models.rs

Add opt-in prompt image sanitization (#61341)

2026-11-13 18:44:31 +00:00

network_policy.rs

…

num_format.rs

…

openai_models.rs

Support model catalog Apps usage instructions (#61213)

2026-11-13 00:29:24 +00:00

parse_command.rs

…

permission_profile_intersection_tests.rs

Protect .aws directories under sandbox writable roots (#48176)

2026-09-25 19:14:31 +00:00

permission_profile_intersection.rs

…

permission_profile_snapshot_tests.rs

Preserve executor path URIs in permission profile workspace roots (#45863)

2026-09-16 04:23:46 +00:00

permission_profile_snapshot.rs

Preserve executor path URIs in permission profile workspace roots (#45863)

2026-09-16 04:23:46 +00:00

permissions_tests.rs

Remove redundant legacy permission helpers (#61194)

2026-11-12 22:14:30 +00:00

permissions.rs

Use native permission profiles for diagnostics and sandbox checks (#61369)

2026-11-13 20:22:45 +00:00

plan_tool.rs

…

protocol.rs

Update realtime model and honor provider-specific voice defaults (#61259)

2026-11-13 05:04:45 +00:00

realtime.rs

…

request_permissions.rs

…

request_user_input_tests.rs

…

request_user_input.rs

…

response_item_id_tests.rs

Preserve model-facing ID allocations in saved history (#60771)

2026-11-11 09:58:13 +00:00

response_item_id.rs

Preserve allocated response item IDs in requests (#60977)

2026-11-12 02:43:37 +00:00

response_usage.rs

…

review_format.rs

…

sandbox.rs

Preserve sandbox overrides across execution requests (#51786)

2026-10-07 17:59:22 +00:00

sanitized_git_url_tests.rs

Start cloud threads with the local GitHub project (#60007)

2026-11-06 23:00:38 +00:00

sanitized_git_url.rs

Start cloud threads with the local GitHub project (#60007)

2026-11-06 23:00:38 +00:00

security_risk.rs

…

session_id.rs

…

shell_environment_tests.rs

Add SPIFFE JWT-SVID support for workload identity authentication (#61207)

2026-11-12 23:53:50 +00:00

shell_environment.rs

Add SPIFFE JWT-SVID support for workload identity authentication (#61207)

2026-11-12 23:53:50 +00:00

thread_id.rs

…

tool_name.rs

…

turn_input.rs

Add per-item retention policies for injected history (#61344)

2026-11-13 18:46:13 +00:00

user_input.rs

Add audio file references with explicit runtime rejection (#58430)

2026-10-30 20:53:25 +00:00