Celia Chen 8b81284975 fix(core): skip exec approval for permissionless skill scripts (#13791) ...

## Summary

- Treat skill scripts with no permission profile, or an explicitly empty
one, as permissionless and run them with the turn's existing sandbox
instead of forcing an exec approval prompt.
- Keep the approval flow unchanged for skills that do declare additional
permissions.
- Update the skill approval tests to assert that permissionless skill
scripts do not prompt on either the initial run or a rerun.

## Why

Permissionless skills should inherit the current turn sandbox directly.
Prompting for exec approval in that case adds friction without granting
any additional capability.

8b81284975 · 2026-03-06 16:40:41 -08:00

History

..

snapshots

Replay thread rollback from rollout history (#13615)

2026-03-05 16:40:09 -08:00

abort_tasks.rs

chore: remove codex-core public protocol/shell re-exports (#12432)

2026-02-20 23:45:35 -08:00

agent_jobs.rs

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00

agent_websocket.rs

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00

apply_patch_cli.rs

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00

approvals.rs

config: add initial support for the new permission profile config language in config.toml (#13434)

2026-03-06 15:39:13 -08:00

auth_refresh.rs

Fixed a hole in token refresh logic for app server (#11802)

2026-02-18 09:27:04 -08:00

cli_stream.rs

chore: remove codex-core public protocol/shell re-exports (#12432)

2026-02-20 23:45:35 -08:00

client_websockets.rs

chore(otel): rename OtelManager to SessionTelemetry (#13808)

2026-03-06 16:23:30 -08:00

client.rs

chore(otel): rename OtelManager to SessionTelemetry (#13808)

2026-03-06 16:23:30 -08:00

codex_delegate.rs

chore: remove codex-core public protocol/shell re-exports (#12432)

2026-02-20 23:45:35 -08:00

collaboration_instructions.rs

add fast mode toggle (#13212)

2026-03-02 20:29:33 -08:00

compact_remote.rs

add fast mode toggle (#13212)

2026-03-02 20:29:33 -08:00

compact_resume_fork.rs

Replay thread rollback from rollout history (#13615)

2026-03-05 16:40:09 -08:00

compact.rs

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00

deprecation_notice.rs

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00

exec_policy.rs

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00

exec.rs

Revert "Ensure shell command skills trigger approval (#12697)" (#12721)

2026-02-25 22:49:53 +00:00

fork_thread.rs

chore: remove codex-core public protocol/shell re-exports (#12432)

2026-02-20 23:45:35 -08:00

grep_files.rs

Use use_model (#7121)

2025-11-21 22:10:52 +00:00

hierarchical_agents.rs

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00

image_rollout.rs

add fast mode toggle (#13212)

2026-03-02 20:29:33 -08:00

items.rs

Enabling CWD Saving for Image-Gen (#13607)

2026-03-06 00:47:21 -08:00

js_repl.rs

Persist initialized js_repl bindings after failed cells (#13482)

2026-03-05 11:01:46 -08:00

json_result.rs

add fast mode toggle (#13212)

2026-03-02 20:29:33 -08:00

list_dir.rs

Promote shared helpers for suite tests (#6460)

2025-11-13 17:12:10 -08:00

live_cli.rs

feat: introduce codex-utils-cargo-bin as an alternative to assert_cmd::Command (#8496)

2025-12-23 19:29:32 -08:00

live_reload.rs

add fast mode toggle (#13212)

2026-03-02 20:29:33 -08:00

memories.rs

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00

mod.rs

feat: load from plugins (#12864)

2026-03-01 10:50:56 -08:00

model_info_overrides.rs

Enable request_user_input in Default mode (#12735)

2026-02-25 15:20:46 -08:00

model_overrides.rs

add fast mode toggle (#13212)

2026-03-02 20:29:33 -08:00

model_switching.rs

chore: add web_search_tool_type for image support (#13538)

2026-03-05 07:02:27 +00:00

model_visible_layout.rs

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00

models_cache_ttl.rs

chore: add web_search_tool_type for image support (#13538)

2026-03-05 07:02:27 +00:00

models_etag_responses.rs

add fast mode toggle (#13212)

2026-03-02 20:29:33 -08:00

otel.rs

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00

override_updates.rs

add fast mode toggle (#13212)

2026-03-02 20:29:33 -08:00

pending_input.rs

chore: remove codex-core public protocol/shell re-exports (#12432)

2026-02-20 23:45:35 -08:00

permissions_messages.rs

add fast mode toggle (#13212)

2026-03-02 20:29:33 -08:00

personality_migration.rs

feat: polluted memories (#13008)

2026-03-02 11:57:32 +00:00

personality.rs

chore: add web_search_tool_type for image support (#13538)

2026-03-05 07:02:27 +00:00

plugins.rs

feat: structured plugin parsing (#13711)

2026-03-06 11:08:36 -08:00

prompt_caching.rs

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00

quota_exceeded.rs

chore: remove codex-core public protocol/shell re-exports (#12432)

2026-02-20 23:45:35 -08:00

read_file.rs

Promote shared helpers for suite tests (#6460)

2025-11-13 17:12:10 -08:00

realtime_conversation.rs

Add realtime startup context override (#13796)

2026-03-06 16:00:30 -08:00

remote_models.rs

chore: add web_search_tool_type for image support (#13538)

2026-03-05 07:02:27 +00:00

request_compression.rs

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00

request_permissions.rs

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00

request_user_input.rs

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00

resume_warning.rs

feat(core): persist trace_id for turns in RolloutItem::TurnContext (#13602)

2026-03-05 13:26:48 -08:00

resume.rs

add fast mode toggle (#13212)

2026-03-02 20:29:33 -08:00

review.rs

add fast mode toggle (#13212)

2026-03-02 20:29:33 -08:00

rmcp_client.rs

chore: add web_search_tool_type for image support (#13538)

2026-03-05 07:02:27 +00:00

rollout_list_find.rs

chore: remove codex-core public protocol/shell re-exports (#12432)

2026-02-20 23:45:35 -08:00

safety_check_downgrade.rs

add fast mode toggle (#13212)

2026-03-02 20:29:33 -08:00

search_tool.rs

add @plugin mentions (#13510)

2026-03-06 00:03:39 +00:00

seatbelt.rs

chore: remove codex-core public protocol/shell re-exports (#12432)

2026-02-20 23:45:35 -08:00

shell_command.rs

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00

shell_serialization.rs

chore: remove codex-core public protocol/shell re-exports (#12432)

2026-02-20 23:45:35 -08:00

shell_snapshot.rs

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00

skill_approval.rs

fix(core): skip exec approval for permissionless skill scripts (#13791)

2026-03-06 16:40:41 -08:00

skills.rs

add fast mode toggle (#13212)

2026-03-02 20:29:33 -08:00

sqlite_state.rs

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00

stream_error_allows_next_turn.rs

chore: remove codex-core public protocol/shell re-exports (#12432)

2026-02-20 23:45:35 -08:00

stream_no_completed.rs

chore: remove codex-core public protocol/shell re-exports (#12432)

2026-02-20 23:45:35 -08:00

subagent_notifications.rs

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00

text_encoding_fix.rs

Fix: Improve text encoding for shell output in VSCode preview (#6178) (#6182)

2025-11-20 11:04:11 -08:00

tool_harness.rs

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00

tool_parallelism.rs

add fast mode toggle (#13212)

2026-03-02 20:29:33 -08:00

tools.rs

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00

truncation.rs

add fast mode toggle (#13212)

2026-03-02 20:29:33 -08:00

turn_state.rs

Remove Responses V1 websocket implementation (#13364)

2026-03-03 11:32:53 -07:00

undo.rs

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00

unified_exec.rs

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00

unstable_features_warning.rs

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00

user_notification.rs

fix: more stable notify script (#13011)

2026-02-27 16:05:44 +01:00

user_shell_cmd.rs

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00

view_image.rs

chore: add web_search_tool_type for image support (#13538)

2026-03-05 07:02:27 +00:00

web_search.rs

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00

websocket_fallback.rs

config: enforce enterprise feature requirements (#13388)

2026-03-04 04:40:22 +00:00