Michael BolinandGitHub a2f5874b7a core: derive exec policy filesystem policy from profile (#26499) ...

## Why

`PermissionProfile` already owns the runtime filesystem sandbox policy
through `file_system_sandbox_policy()`. Keeping a separate
`FileSystemSandboxPolicy` on exec-policy fallback contexts made it
possible for callers and tests to construct split states that the
production permission model should not rely on.

## What changed

- Removed `file_system_sandbox_policy` from `UnmatchedCommandContext`,
`ExecApprovalRequest`, and the intercepted Unix exec-policy context.
- Derived filesystem sandbox policy inside unmatched-command decision
logic from `PermissionProfile::file_system_sandbox_policy()`.
- Simplified shell/unified-exec callers and tests that were only
plumbing the duplicate policy through.

## Testing

Local tests not run per request; relying on remote CI.

2026-06-04 21:48:45 -07:00

..

code_mode

code-mode: introduce durable session interface (#24180)

2026-05-29 11:42:52 -07:00

handlers

core: derive exec policy filesystem policy from profile (#26499)

2026-06-04 21:48:45 -07:00

runtimes

core: derive exec policy filesystem policy from profile (#26499)

2026-06-04 21:48:45 -07:00

context_tests.rs

[codex] Preserve raw code-mode exec output by default (#23564)

2026-05-20 04:02:14 +00:00

context.rs

[codex] Preserve raw code-mode exec output by default (#23564)

2026-05-20 04:02:14 +00:00

events.rs

[codex] Remove legacy shell output formatting paths (#22706)

2026-05-18 09:57:54 -07:00

hook_names.rs

Default function tools into tool hooks (#23757)

2026-05-23 00:56:58 +00:00

hosted_spec_tests.rs

[codex] Move tool specs into core handlers (#21416)

2026-05-06 15:40:50 -07:00

hosted_spec.rs

[codex] Move tool specs into core handlers (#21416)

2026-05-06 15:40:50 -07:00

lifecycle.rs

Add tool lifecycle extension contributor (#23309)

2026-05-18 21:55:57 +02:00

mod.rs

Move tool search metadata onto ToolExecutor (#25684)

2026-06-02 00:24:41 +02:00

network_approval_tests.rs

test: construct permission profiles directly (#23030)

2026-05-16 12:12:37 -07:00

network_approval.rs

[codex] Make active turn task singular (#24105)

2026-05-26 08:20:58 -07:00

orchestrator.rs

[codex] Emit sandbox outcome telemetry event (#25955)

2026-06-04 20:58:14 -04:00

parallel.rs

fix(linux-sandbox): preserve shell cleanup on interruption (#22729)

2026-05-27 12:59:11 -07:00

registry_tests.rs

Default function tools into tool hooks (#23757)

2026-05-23 00:56:58 +00:00

registry.rs

Move tool search metadata onto ToolExecutor (#25684)

2026-06-02 00:24:41 +02:00

router_tests.rs

[codex] Store pending response items directly (#24865)

2026-05-28 07:23:08 -07:00

router.rs

fix(linux-sandbox): preserve shell cleanup on interruption (#22729)

2026-05-27 12:59:11 -07:00

sandboxing_tests.rs

fix: preserve deny-read sandboxing for safe commands (#23943)

2026-05-28 22:49:37 -07:00

sandboxing.rs

fix: preserve deny-read sandboxing for safe commands (#23943)

2026-05-28 22:49:37 -07:00

spec_plan_tests.rs

core: allow excluding tool namespaces from code mode (#26320)

2026-06-04 18:40:18 +00:00

spec_plan.rs

core: allow excluding tool namespaces from code mode (#26320)

2026-06-04 18:40:18 +00:00

tool_dispatch_trace_tests.rs

chore: mechanical rename (#26156)

2026-06-03 15:38:30 +02:00

tool_dispatch_trace.rs

chore: mechanical rename (#26156)

2026-06-03 15:38:30 +02:00