mirror of
https://github.com/openai/codex.git
synced 2026-09-06 15:29:32 +00:00
942af8447b
## What changed - Remove `untrusted` from the CLI, configuration schema, and MCP tool interface. Explicit `approval_policy = "untrusted"` settings now fail with an actionable error. - Remove the known-safe command allowlist. Projects marked untrusted now request approval for every command unless an explicit exec policy rule allows it. - Keep command parsing conservative by treating in-place `sed` forms as mutating and ignoring unrecognized commands when recording memory usage. ## Testing - Cover rejection of the retired configuration value and approval requests for commands in untrusted projects. GitOrigin-RevId: d6bf425edddfffbb325eee6acf383434af5fd33b
12 lines
252 B
Rust
12 lines
252 B
Rust
//! Command parsing and safety utilities shared across Codex crates.
|
|
|
|
pub mod shell_detect;
|
|
pub mod shell_snapshot;
|
|
|
|
pub mod bash;
|
|
pub(crate) mod command_safety;
|
|
pub mod parse_command;
|
|
pub mod powershell;
|
|
|
|
pub use command_safety::is_dangerous_command;
|