Alex ZamoshchinandGitHub c78911e37f [ez][codex-rs] Support apps._default.default_tools_approval_mode (#27965) ...

[from codex]

## Summary

- add `default_tools_approval_mode` to `[apps._default]` and expose it
through app-server v2 `config/read`
- apply it after managed, per-tool, and per-app approval settings,
before the built-in `auto` fallback
- document the precedence, regenerate config/app-server schemas, and add
unit plus end-to-end approval coverage

## Configuration

```toml
[apps._default]
default_tools_approval_mode = "prompt"
```

The effective precedence is managed requirements, tool-specific
`approval_mode`, app-specific `default_tools_approval_mode`,
`apps._default.default_tools_approval_mode`, then `auto`.

## Test plan

- `just write-config-schema`
- `just write-app-server-schema`
- `just write-app-server-schema --experimental`
- `just test -p codex-core app_tool_policy`
- `just test -p codex-core mcp_turn_metadata`
- `just test -p codex-config`
- `just test -p codex-app-server-protocol`
- `just test -p codex-app-server config_read_includes_apps`
- `just fix -p codex-config -p codex-core -p codex-app-server-protocol
-p codex-app-server`
- `just fmt`

2026-06-17 08:50:39 -07:00

..

account.rs

[codex] expose Bedrock credential source in account/read (#27751)

2026-06-16 07:14:53 +00:00

analytics.rs

[codex-analytics] emit goal lifecycle analytics (#27078)

2026-06-09 18:45:54 -07:00

app_list.rs

[codex] Preserve plugin apps in connector listings (#27602)

2026-06-15 13:50:08 +01:00

attestation.rs

app-server: keep the model cache warm (#28699)

2026-06-17 16:18:39 +02:00

client_metadata.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

collaboration_mode_list.rs

fix: rename McpServer to TestAppServer (#25701)

2026-06-01 21:49:38 +00:00

command_exec.rs

fix: rename McpServer to TestAppServer (#25701)

2026-06-01 21:49:38 +00:00

compaction.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

config_rpc.rs

[ez][codex-rs] Support apps._default.default_tools_approval_mode (#27965)

2026-06-17 08:50:39 -07:00

connection_handling_websocket_unix.rs

[codex] Add user input client ids (#24653)

2026-05-28 14:54:39 -07:00

connection_handling_websocket.rs

Uprev Rust toolchain pins to 1.95.0 (#24684)

2026-05-26 20:59:47 -07:00

dynamic_tools.rs

Expose explicit dynamic tool namespaces in thread start (#27371)

2026-06-15 15:35:57 +00:00

executor_mcp.rs

Activate selected executor plugin MCPs in app-server (#27893)

2026-06-15 16:23:37 +02:00

executor_skills.rs

Load selected executor skills through extensions (#27184)

2026-06-09 19:51:54 +02:00

experimental_api.rs

Add a toggle for realtime startup context (#28405)

2026-06-15 17:14:22 -07:00

experimental_feature_list.rs

Cleanup experimentalFeature/enablement/set (#26312)

2026-06-04 13:35:31 -07:00

external_agent_config.rs

[codex] exec-server: stream files in chunks (#28354)

2026-06-16 09:50:55 -07:00

fs.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

hooks_list.rs

Speed up TUI startup by reusing plugin discovery (#26469)

2026-06-05 15:32:43 -04:00

imagegen_extension.rs

Handle standalone image generation failures as terminal items (#27920)

2026-06-12 11:57:22 -07:00

initialize.rs

fix: rename McpServer to TestAppServer (#25701)

2026-06-01 21:49:38 +00:00

marketplace_add.rs

fix: rename McpServer to TestAppServer (#25701)

2026-06-01 21:49:38 +00:00

marketplace_remove.rs

fix: rename McpServer to TestAppServer (#25701)

2026-06-01 21:49:38 +00:00

marketplace_upgrade.rs

fix: rename McpServer to TestAppServer (#25701)

2026-06-01 21:49:38 +00:00

mcp_resource.rs

skills: cache orchestrator resources per thread (#28336)

2026-06-15 20:20:19 +02:00

mcp_server_elicitation.rs

Use plugin-service MCP as the hosted plugin runtime (#27198)

2026-06-10 12:54:21 +02:00

mcp_server_status.rs

fix: rename McpServer to TestAppServer (#25701)

2026-06-01 21:49:38 +00:00

mcp_tool.rs

fix: rename McpServer to TestAppServer (#25701)

2026-06-01 21:49:38 +00:00

memory_reset.rs

fix: rename McpServer to TestAppServer (#25701)

2026-06-01 21:49:38 +00:00

mod.rs

[codex] [3/4] Activate endpoint plugin recommendations (#27704)

2026-06-16 23:04:07 +00:00

model_list.rs

[codex] Use model-advertised reasoning effort order (#26446)

2026-06-04 14:01:14 -07:00

model_provider_capabilities_read.rs

fix: rename McpServer to TestAppServer (#25701)

2026-06-01 21:49:38 +00:00

output_schema.rs

fix: rename McpServer to TestAppServer (#25701)

2026-06-01 21:49:38 +00:00

permission_profile_list.rs

fix: rename McpServer to TestAppServer (#25701)

2026-06-01 21:49:38 +00:00

plan_item.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

plugin_install.rs

[codex] Skip plugin MCP OAuth for matching app routes (#27461)

2026-06-15 14:04:01 +01:00

plugin_list.rs

[codex] Load API curated marketplace by auth (#28383)

2026-06-16 01:16:11 +00:00

plugin_read.rs

[codex] Make plugin details capability aware (#27958)

2026-06-16 01:25:22 +00:00

plugin_share.rs

fix: rename McpServer to TestAppServer (#25701)

2026-06-01 21:49:38 +00:00

plugin_uninstall.rs

fix: use plugin service route for remote uninstall (#27223)

2026-06-09 12:52:05 -07:00

process_exec.rs

fix: rename McpServer to TestAppServer (#25701)

2026-06-01 21:49:38 +00:00

rate_limit_reset_credits.rs

feat(app-server): expose rate-limit reset credits (#28143)

2026-06-15 21:54:01 +00:00

rate_limits.rs

feat(app-server): expose rate-limit reset credits (#28143)

2026-06-15 21:54:01 +00:00

realtime_conversation.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

recommended_plugins.rs

[codex] [3/4] Activate endpoint plugin recommendations (#27704)

2026-06-16 23:04:07 +00:00

remote_control.rs

app-server: keep the model cache warm (#28699)

2026-06-17 16:18:39 +02:00

remote_thread_store.rs

feat(app-server): filter threads by parent (#26662)

2026-06-14 00:14:26 -07:00

request_permissions.rs

fix: rename McpServer to TestAppServer (#25701)

2026-06-01 21:49:38 +00:00

request_user_input.rs

Add request_user_input auto-resolution window contract (#27256)

2026-06-11 22:30:41 -07:00

review.rs

fix: rename McpServer to TestAppServer (#25701)

2026-06-01 21:49:38 +00:00

safety_check_downgrade.rs

[codex] Forward turn moderation metadata through app-server (#25710)

2026-06-05 02:41:06 -07:00

skills_list.rs

[codex] Add created-by-me remote plugin marketplace (#28203)

2026-06-15 22:07:07 +00:00

sleep.rs

[codex] Add interruptible sleep tool (#28429)

2026-06-15 21:39:21 -07:00

thread_archive.rs

fix: rename McpServer to TestAppServer (#25701)

2026-06-01 21:49:38 +00:00

thread_delete.rs

Add app-server thread/delete API (#25018)

2026-06-10 11:22:12 -07:00

thread_fork.rs

feat(app-server): filter threads by parent (#26662)

2026-06-14 00:14:26 -07:00

thread_inject_items.rs

feat(core): add metadata field to ResponseItem (#28355)

2026-06-15 15:05:28 -07:00

thread_list.rs

Revert thread recencyAt for sidebar ordering (#28655)

2026-06-16 21:39:30 -07:00

thread_loaded_list.rs

fix: rename McpServer to TestAppServer (#25701)

2026-06-01 21:49:38 +00:00

thread_memory_mode_set.rs

fix: rename McpServer to TestAppServer (#25701)

2026-06-01 21:49:38 +00:00

thread_metadata_update.rs

fix: rename McpServer to TestAppServer (#25701)

2026-06-01 21:49:38 +00:00

thread_name_websocket.rs

Restore app-server websocket listener with auth guard (#22404)

2026-05-12 18:40:53 -07:00

thread_read.rs

feat(app-server): filter threads by parent (#26662)

2026-06-14 00:14:26 -07:00

thread_resume.rs

Revert thread recencyAt for sidebar ordering (#28655)

2026-06-16 21:39:30 -07:00

thread_rollback.rs

fix: rename McpServer to TestAppServer (#25701)

2026-06-01 21:49:38 +00:00

thread_settings_update.rs

[codex] preserve explicit environment cwd (#27995)

2026-06-15 17:17:34 +00:00

thread_shell_command.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

thread_start.rs

app-server: preserve target-native environment cwd (#28146)

2026-06-16 21:42:28 +00:00

thread_status.rs

fix: rename McpServer to TestAppServer (#25701)

2026-06-01 21:49:38 +00:00

thread_unarchive.rs

Add extra config to StoredThread, leave empty for now (#27092)

2026-06-09 00:38:35 +00:00

thread_unsubscribe.rs

Expose explicit dynamic tool namespaces in thread start (#27371)

2026-06-15 15:35:57 +00:00

turn_interrupt.rs

fix: rename McpServer to TestAppServer (#25701)

2026-06-01 21:49:38 +00:00

turn_start_zsh_fork.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

turn_start.rs

app-server: preserve target-native environment cwd (#28146)

2026-06-16 21:42:28 +00:00

turn_steer.rs

fix: rename McpServer to TestAppServer (#25701)

2026-06-01 21:49:38 +00:00

web_search.rs

[codex] Enable standalone web search in code mode (#26719)

2026-06-07 23:18:23 -07:00

windows_sandbox_setup.rs

fix: rename McpServer to TestAppServer (#25701)

2026-06-01 21:49:38 +00:00