codex

mirror of https://github.com/pchuan98/codex.git synced 2026-07-01 00:31:56 +08:00

Files

T

Celia Chen 0bb152b01d chore: remove SkillMetadata.permissions and derive skill sandboxing from permission_profile (#13061 )

## Summary

This change removes the compiled permissions field from skill metadata
and keeps permission_profile as the single source of truth.

Skill loading no longer compiles skill permissions eagerly. Instead, the
zsh-fork skill escalation path compiles `skill.permission_profile` when
it needs to determine the sandbox to apply for a skill script.

  ## Behavior change

  For skills that declare:
```
  permissions: {}
```
we now treat that the same as having no skill permissions override,
instead of creating and using a default readonly sandbox. This change
makes the behavior more intuitive:

  - only non-empty skill permission profiles affect sandboxing
- omitting permissions and writing permissions: {} now mean the same
thing
- skill metadata keeps a single permissions representation instead of
storing derived state too

Overall, this makes skill sandbox behavior easier to understand and more
predictable.

0bb152b01d · 2026-03-03 01:29:53 +00:00

History

common

Update realtime websocket API (#13265 )

2026-03-02 16:05:40 -08:00

fixtures

Update tests to stop using sse_completed fixture (#10638 )

2026-02-04 08:38:06 -08:00

suite

chore: remove SkillMetadata.permissions and derive skill sandboxing from permission_profile (#13061 )

2026-03-03 01:29:53 +00:00

all.rs