mirror of
https://github.com/openai/codex.git
synced 2026-10-27 18:48:37 +00:00
viyatb-oai
208f05b233
## What changed - Add the managed `auto_review.required_on_models` requirement, unioning model slugs across requirement layers and exposing the result through `configRequirements/read`. - Force listed models to use `on-request` approvals with the `auto_review` reviewer. Downgrade Full Access to workspace-write when starting a protected session, and reject incompatible runtime overrides or use when automatic review is disabled. - Preserve these protections across thread starts, resumes, forks, model changes, turn overrides, MCP approvals, and TUI session attachment. ## Testing - Add coverage for layered model requirements and exact provider-alias matching. - Add app-server tests for protected thread lifecycle operations, unsafe setting overrides, legacy thread upgrades, disabled automatic review, and requirements API output. GitOrigin-RevId: c4b1d52c3b5b75e86880725412b8f0812e0dfcd9
109 lines
2.3 KiB
Rust
109 lines
2.3 KiB
Rust
mod account;
|
|
mod analytics;
|
|
mod app_installed;
|
|
mod app_list;
|
|
mod app_read;
|
|
mod attestation;
|
|
mod auto_env;
|
|
mod client_metadata;
|
|
mod code_mode_host;
|
|
mod collaboration_mode_list;
|
|
#[cfg(unix)]
|
|
mod command_exec;
|
|
mod compaction;
|
|
mod config_rpc;
|
|
mod connection_handling_websocket;
|
|
#[cfg(unix)]
|
|
mod connection_handling_websocket_unix;
|
|
#[cfg(unix)]
|
|
mod curated_mcp_sync;
|
|
mod current_time;
|
|
mod dynamic_tools;
|
|
mod environment_add;
|
|
mod environment_info;
|
|
mod environment_status;
|
|
mod exec_server_test_support;
|
|
#[cfg(not(target_os = "windows"))]
|
|
mod executor_mcp;
|
|
mod executor_skills;
|
|
mod experimental_api;
|
|
mod experimental_feature_list;
|
|
mod external_agent_config;
|
|
mod external_agent_import_sync;
|
|
mod fs;
|
|
mod git_attribution;
|
|
mod hooks_list;
|
|
mod host_skills;
|
|
mod imagegen_extension;
|
|
mod initialize;
|
|
mod marketplace_add;
|
|
mod marketplace_remove;
|
|
mod marketplace_upgrade;
|
|
mod mcp_resource;
|
|
mod mcp_server_elicitation;
|
|
mod mcp_server_status;
|
|
mod mcp_tool;
|
|
mod memory_reset;
|
|
mod model_auto_review;
|
|
mod model_list;
|
|
mod model_provider_capabilities_read;
|
|
mod multi_agent_v2_developer_instructions;
|
|
mod otel;
|
|
mod output_schema;
|
|
mod permission_profile_list;
|
|
mod plan_item;
|
|
mod plugin_install;
|
|
mod plugin_list;
|
|
mod plugin_read;
|
|
mod plugin_search;
|
|
mod plugin_share;
|
|
mod plugin_uninstall;
|
|
mod process_exec;
|
|
mod rate_limit_reset_credits;
|
|
mod rate_limits;
|
|
mod realtime_conversation;
|
|
mod recommended_plugins;
|
|
mod remote_control;
|
|
#[cfg(debug_assertions)]
|
|
mod remote_thread_store;
|
|
mod request_permissions;
|
|
mod request_user_input;
|
|
mod request_validation;
|
|
mod review;
|
|
mod rollout_migration;
|
|
mod safety_check_downgrade;
|
|
#[cfg(not(target_os = "windows"))]
|
|
mod selected_capability_stack;
|
|
mod selected_environment;
|
|
mod server_diagnostics;
|
|
#[cfg(not(target_os = "windows"))]
|
|
mod session_end;
|
|
mod skills_list;
|
|
mod sleep;
|
|
mod thread_archive;
|
|
mod thread_delete;
|
|
mod thread_fork;
|
|
mod thread_inject_items;
|
|
mod thread_list;
|
|
mod thread_loaded_list;
|
|
mod thread_memory_mode_set;
|
|
mod thread_metadata_update;
|
|
mod thread_name_websocket;
|
|
mod thread_read;
|
|
mod thread_resume;
|
|
mod thread_rollback;
|
|
mod thread_sections;
|
|
mod thread_settings_update;
|
|
mod thread_shell_command;
|
|
mod thread_start;
|
|
mod thread_status;
|
|
mod thread_unarchive;
|
|
mod thread_unsubscribe;
|
|
mod turn_interrupt;
|
|
mod turn_start;
|
|
mod turn_start_zsh_fork;
|
|
mod turn_steer;
|
|
mod view_image;
|
|
mod web_search;
|
|
mod windows_sandbox_setup;
|