Rename reject approval policy to granular (#14516)

codex-rs/app-server/README.md

@@ -928,7 +928,7 @@ Only the granted subset matters on the wire. Any permissions omitted from `resul
 
 Within the same turn, granted permissions are sticky: later shell-like tool calls can automatically reuse the granted subset without reissuing a separate permission request.
 
-If the session approval policy uses `Reject` with `request_permissions: true`, standalone `request_permissions` tool calls are auto-denied and no `item/permissions/requestApproval` prompt is sent. Inline `with_additional_permissions` command requests remain controlled by `sandbox_approval`, and any previously granted permissions remain sticky for later shell-like calls in the same turn.
+If the session approval policy uses `Granular` with `request_permissions: false`, standalone `request_permissions` tool calls are auto-denied and no `item/permissions/requestApproval` prompt is sent. Inline `with_additional_permissions` command requests remain controlled by `sandbox_approval`, and any previously granted permissions remain sticky for later shell-like calls in the same turn.
 
 ### Dynamic tool calls (experimental)
 
@@ -1319,7 +1319,7 @@ Examples of descriptor strings:
 
 - `mock/experimentalMethod` (method-level gate)
 - `thread/start.mockExperimentalField` (field-level gate)
-- `askForApproval.reject` (enum-variant gate, for `approvalPolicy: { "reject": ... }`)
+- `askForApproval.granular` (enum-variant gate, for `approvalPolicy: { "granular": ... }`)
 
 ### For maintainers: Adding experimental fields and methods
 
@@ -1341,8 +1341,8 @@ Enum variants can be gated too:
 ```rust
 #[derive(ExperimentalApi)]
 enum AskForApproval {
-    #[experimental("askForApproval.reject")]
-    Reject { /* ... */ },
+    #[experimental("askForApproval.granular")]
+    Granular { /* ... */ },
 }
 ```
 

codex-rs/app-server/tests/suite/v2/experimental_api.rs

@@ -159,7 +159,8 @@ async fn thread_start_without_dynamic_tools_allows_without_experimental_api_capa
 }
 
 #[tokio::test]
-async fn thread_start_reject_approval_policy_requires_experimental_api_capability() -> Result<()> {
+async fn thread_start_granular_approval_policy_requires_experimental_api_capability() -> Result<()>
+{
     let server = create_mock_responses_server_sequence_unchecked(Vec::new()).await;
     let codex_home = TempDir::new()?;
     create_config_toml(codex_home.path(), &server.uri())?;
@@ -180,7 +181,7 @@ async fn thread_start_reject_approval_policy_requires_experimental_api_capabilit
 
     let request_id = mcp
         .send_thread_start_request(ThreadStartParams {
-            approval_policy: Some(AskForApproval::Reject {
+            approval_policy: Some(AskForApproval::Granular {
                 sandbox_approval: true,
                 rules: false,
                 skill_approval: false,
@@ -196,7 +197,7 @@ async fn thread_start_reject_approval_policy_requires_experimental_api_capabilit
         mcp.read_stream_until_error_message(RequestId::Integer(request_id)),
     )
     .await??;
-    assert_experimental_capability_error(error, "askForApproval.reject");
+    assert_experimental_capability_error(error, "askForApproval.granular");
     Ok(())
 }