viyatb-oai f276325cdc refactor: centralize filesystem permissions precedence (#14174) ...

## Stack

   fix: fail closed for unsupported split windows sandboxing #14172
   fix: preserve split filesystem semantics in linux sandbox #14173
   fix: align core approvals with split sandbox policies #14171
-> refactor: centralize filesystem permissions precedence #14174

## Summary
- add a shared per-path split filesystem precedence helper in
`FileSystemSandboxPolicy`
- derive readable, writable, and unreadable roots from the same
most-specific resolution rules
- add regression coverage for nested `write` / `read` / `none` carveouts
and legacy bridge enforcement detection

## Testing
- cargo test -p codex-protocol
- cargo clippy -p codex-protocol --tests -- -D warnings

2026-03-12 01:35:44 +00:00

..

prompts

guardian initial feedback / tweaks (#13897)

2026-03-09 09:25:24 -07:00

account.rs

add error messages for the go plan type (#10181)

2026-01-30 01:17:25 +00:00

approvals.rs

app-server: include experimental skill metadata in exec approval requests (#13929)

2026-03-08 18:07:46 -07:00

config_types.rs

Allow full web search tool config (#13675)

2026-03-07 00:50:50 +00:00

custom_prompts.rs

[app-server] remove serde(skip_serializing_if = "Option::is_none") annotations (#5939)

2025-10-30 18:18:53 +00:00

dynamic_tools.rs

feat(app-server, core): allow text + image content items for dynamic tool outputs (#10567)

2026-02-04 16:12:47 -08:00

items.rs

Enabling CWD Saving for Image-Gen (#13607)

2026-03-06 00:47:21 -08:00

lib.rs

Add request permissions tool (#13092)

2026-03-08 20:23:06 -07:00

mcp.rs

feat: replace custom mcp-types crate with equivalents from rmcp (#10349)

2026-02-02 17:41:55 -08:00

message_history.rs

Generate JSON schema for app-server protocol (#5063)

2025-10-20 11:45:11 -07:00

models.rs

feat: search_tool migrate to bring you own tool of Responses API (#14274)

2026-03-11 17:51:51 -07:00

num_format.rs

Fix execpolicy parsing for multiline quoted args (#9565)

2026-01-22 22:16:53 -08:00

openai_models.rs

chore: add web_search_tool_type for image support (#13538)

2026-03-05 07:02:27 +00:00

parse_command.rs

[app-server] remove serde(skip_serializing_if = "Option::is_none") annotations (#5939)

2025-10-30 18:18:53 +00:00

permissions.rs

refactor: centralize filesystem permissions precedence (#14174)

2026-03-12 01:35:44 +00:00

plan_tool.rs

Plan mode: stream proposed plans, emit plan items, and render in TUI (#9786)

2026-01-30 18:59:30 +00:00

protocol.rs

Show spawned agent model and effort in TUI (#14273)

2026-03-11 12:33:09 -07:00

request_permissions.rs

feat(core) Persist request_permission data across turns (#14009)

2026-03-09 14:36:38 -07:00

request_user_input.rs

Better handling skill depdenencies on ENV VAR. (#9017)

2026-01-29 14:13:30 -05:00

thread_id.rs

feat: sqlite 1 (#10004)

2026-01-28 15:29:14 +01:00

user_input.rs

feat: structured plugin parsing (#13711)

2026-03-06 11:08:36 -08:00