Alex ZamoshchinandGitHub c78911e37f [ez][codex-rs] Support apps._default.default_tools_approval_mode (#27965) ...

[from codex]

## Summary

- add `default_tools_approval_mode` to `[apps._default]` and expose it
through app-server v2 `config/read`
- apply it after managed, per-tool, and per-app approval settings,
before the built-in `auto` fallback
- document the precedence, regenerate config/app-server schemas, and add
unit plus end-to-end approval coverage

## Configuration

```toml
[apps._default]
default_tools_approval_mode = "prompt"
```

The effective precedence is managed requirements, tool-specific
`approval_mode`, app-specific `default_tools_approval_mode`,
`apps._default.default_tools_approval_mode`, then `auto`.

## Test plan

- `just write-config-schema`
- `just write-app-server-schema`
- `just write-app-server-schema --experimental`
- `just test -p codex-core app_tool_policy`
- `just test -p codex-core mcp_turn_metadata`
- `just test -p codex-config`
- `just test -p codex-app-server-protocol`
- `just test -p codex-app-server config_read_includes_apps`
- `just fix -p codex-config -p codex-core -p codex-app-server-protocol
-p codex-app-server`
- `just fmt`

2026-06-17 08:50:39 -07:00

..

snapshots

Support plaintext agent messages (#27830)

2026-06-12 13:50:04 -07:00

abort_tasks.rs

Pair thread environment settings (#26687)

2026-06-08 13:55:15 -07:00

additional_context.rs

Pair thread environment settings (#26687)

2026-06-08 13:55:15 -07:00

agent_execution.rs

feat: count V2 concurrency by active execution (#26969)

2026-06-08 14:21:28 +02:00

agent_jobs.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

agent_websocket.rs

[codex] add compaction metadata to turn headers (#24368)

2026-05-27 11:09:33 -07:00

agents_md.rs

[codex] Bind shell snapshots to retained thread environments (#28421)

2026-06-15 20:10:53 -07:00

apply_patch_cli.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

approvals.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

auto_review.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

cli_stream.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

client_websockets.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

client.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

code_mode.rs

[codex] Test code-mode variable truncation (#28471)

2026-06-16 20:14:23 -07:00

codex_delegate.rs

chore(features) rm Feature::ApplyPatchFreeform (#22711)

2026-05-14 16:15:56 -07:00

collaboration_instructions.rs

Pair thread environment settings (#26687)

2026-06-08 13:55:15 -07:00

compact_remote_parity.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

compact_remote.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

compact_resume_fork.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

compact.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

deprecation_notice.rs

[codex] Remove experimental instructions file config (#22724)

2026-05-14 18:04:26 -07:00

exec_policy.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

exec.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

extension_sandbox.rs

Route image extension reads through turn environments v2 (#27498)

2026-06-11 16:32:52 -07:00

fork_thread.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

guardian_review.rs

Pair thread environment settings (#26687)

2026-06-08 13:55:15 -07:00

hierarchical_agents.rs

Run core integration tests against a Wine-backed Windows executor (#28401)

2026-06-16 00:38:41 +00:00

hooks_mcp.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

hooks.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

image_rollout.rs

feat(core): add metadata field to ResponseItem (#28355)

2026-06-15 15:05:28 -07:00

items.rs

[codex] Persist built-in image results reported as generating (#28656)

2026-06-17 06:03:00 +00:00

json_result.rs

Pair thread environment settings (#26687)

2026-06-08 13:55:15 -07:00

live_cli.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

mcp_turn_metadata.rs

[ez][codex-rs] Support apps._default.default_tools_approval_mode (#27965)

2026-06-17 08:50:39 -07:00

mod.rs

Route image extension reads through turn environments v2 (#27498)

2026-06-11 16:32:52 -07:00

model_overrides.rs

[5 of 7] Replace OverrideTurnContext with ThreadSettings (#22508)

2026-05-18 21:03:51 -07:00

model_runtime_selectors.rs

Keep request_user_input direct-model only (#27316)

2026-06-11 23:23:44 -07:00

model_switching.rs

[codex] Add comp_hash to model metadata (#27532)

2026-06-10 20:42:55 -07:00

model_visible_layout.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

models_cache_ttl.rs

[codex] Add comp_hash to model metadata (#27532)

2026-06-10 20:42:55 -07:00

models_etag_responses.rs

Pair thread environment settings (#26687)

2026-06-08 13:55:15 -07:00

openai_file_mcp.rs

[codex] Route MCP file uploads through environment filesystem (#27923)

2026-06-16 11:27:46 -07:00

otel.rs

Pair thread environment settings (#26687)

2026-06-08 13:55:15 -07:00

override_updates.rs

Pair thread environment settings (#26687)

2026-06-08 13:55:15 -07:00

pending_input.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

permissions_messages.rs

Pair thread environment settings (#26687)

2026-06-08 13:55:15 -07:00

personality_migration.rs

Add multi-agent runtime metadata types (#25720)

2026-06-02 12:10:14 +02:00

personality.rs

[codex] Add comp_hash to model metadata (#27532)

2026-06-10 20:42:55 -07:00

plugins.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

prompt_caching.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

prompt_debug_tests.rs

feat(core): add metadata field to ResponseItem (#28355)

2026-06-15 15:05:28 -07:00

quota_exceeded.rs

Pair thread environment settings (#26687)

2026-06-08 13:55:15 -07:00

realtime_conversation.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

remote_env.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

remote_models.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

request_compression.rs

Pair thread environment settings (#26687)

2026-06-08 13:55:15 -07:00

request_permissions_tool.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

request_permissions.rs

[codex] test exec relative additional permissions (#28587)

2026-06-16 20:45:57 +00:00

request_plugin_install.rs

[codex] [4/4] Simplify recommended plugin install schema (#28403)

2026-06-16 23:44:42 +00:00

request_user_input.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

responses_api_proxy_headers.rs

Pair thread environment settings (#26687)

2026-06-08 13:55:15 -07:00

responses_lite.rs

core: enable remote compaction v2 by default (#27573)

2026-06-11 10:07:19 +00:00

resume_warning.rs

[codex] core: restore absolute turn context cwd (#28629)

2026-06-16 19:05:26 -07:00

resume.rs

Pair thread environment settings (#26687)

2026-06-08 13:55:15 -07:00

review.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

rmcp_client.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

rollout_list_find.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

safety_check_downgrade.rs

Pair thread environment settings (#26687)

2026-06-08 13:55:15 -07:00

search_tool.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

shell_command.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

shell_serialization.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

shell_snapshot.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

skill_approval.rs

Pair thread environment settings (#26687)

2026-06-08 13:55:15 -07:00

skills.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

spawn_agent_description.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

sqlite_state.rs

Represent dynamic tools with explicit namespaces internally (#27365)

2026-06-15 08:06:14 -07:00

stream_error_allows_next_turn.rs

Pair thread environment settings (#26687)

2026-06-08 13:55:15 -07:00

stream_no_completed.rs

Pair thread environment settings (#26687)

2026-06-08 13:55:15 -07:00

subagent_notifications.rs

Add join key for MAv2 inter-agent messages (#28561)

2026-06-17 14:48:56 +02:00

token_budget.rs

Include thread id in token budget context (#27663)

2026-06-11 15:10:29 -07:00

tool_harness.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

tool_parallelism.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

tools.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

truncation.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

turn_state.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

unified_exec_zsh_fork_approvals.rs

Pair thread environment settings (#26687)

2026-06-08 13:55:15 -07:00

unified_exec.rs

[codex] re-enable absolute workdir integration test (#28581)

2026-06-16 20:19:41 +00:00

unstable_features_warning.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

user_notification.rs

Pair thread environment settings (#26687)

2026-06-08 13:55:15 -07:00

user_shell_cmd.rs

[codex] Warn clearly when code mode output is truncated (#28467)

2026-06-16 10:37:06 -07:00

view_image.rs

Run core integration tests against a Wine-backed Windows executor (#28401)

2026-06-16 00:38:41 +00:00

web_search.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

websocket_fallback.rs

Pair thread environment settings (#26687)

2026-06-08 13:55:15 -07:00

window_headers.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

windows_sandbox.rs

Use Windows setup marker as completion signal (#26074)

2026-06-03 15:33:34 -07:00