mirror of https://github.com/openai/codex.git synced 2026-11-06 20:20:34 +00:00

Files

T

ioanbudea-OAI c1c07853fe Use permission profiles for protected-model startup downgrades (#59933 )

## What changed

Check the effective permission profile directly when applying startup restrictions for models that require automatic review, instead of converting it to a legacy sandbox policy.

Preserve the downgrade to `workspace-write` for profiles with full disk write access and enabled network access, excluding external enforcement and writable paths that cannot be converted to local paths. Share writable-path conversion with the legacy sandbox adapter.

## Testing

Add startup regression coverage for profiles that are downgraded, preserved, or rejected, including read-only carveouts and writable paths that cannot be converted locally. Verify restored permissions, automatic review selection, and workspace settings.

GitOrigin-RevId: 256c949f23d84dfba185a45a01b638ff5f1df52e

2026-11-06 16:00:54 +00:00

src

Use permission profiles for protected-model startup downgrades (#59933 )

2026-11-06 16:00:54 +00:00

tests/support

Route response item IDs through a shared generator (#59312 )

2026-11-04 04:02:00 +00:00

BUILD.bazel

build: run buildifier from just fmt (#28125 )

2026-06-13 21:43:39 -07:00

Cargo.toml

Protect metadata writes through macOS case aliases (#54273 )

2026-10-15 12:01:04 +00:00

README.md

fix: separate codex mcp into codex mcp-server and codex app-server (#4471 )

2025-09-30 07:06:18 +00:00

README.md

codex-protocol

This crate defines the "types" for the protocol used by Codex CLI, which includes both "internal types" for communication between codex-core and codex-tui, as well as "external types" used with codex app-server.

This crate should have minimal dependencies.

Ideally, we should avoid "material business logic" in this crate, as we can always introduce Ext-style traits to add functionality to types in other crates.