viyatb-oai 6fe8a05dcb fix: honor active permission profiles in sandbox debug (#14293) ... ## Summary - stop `codex sandbox` from forcing legacy `sandbox_mode` when active `[permissions]` profiles are configured - keep the legacy `read-only` / `workspace-write` fallback for legacy configs and reject `--full-auto` for profile-based configs - use split filesystem and network policies in the macOS/Linux debug sandbox helpers and add regressions for the config-loading behavior assuming "codex/docs/private/secret.txt" = "none" ``` codex -c 'default_permissions="limited-read-test"' sandbox macos -- <command> ... codex sandbox macos -- cat codex/docs/private/secret.txt >/dev/null; echo EXIT:$? cat: codex/docs/private/secret.txt: Operation not permitted EXIT:1 ``` --------- Co-authored-by: celia-oai <celia@openai.com>		2026-03-18 01:52:02 +00:00
..
src	fix: honor active permission profiles in sandbox debug (#14293)	2026-03-18 01:52:02 +00:00
tests	feat: simplify DB further (#13771)	2026-03-07 03:48:36 -08:00
BUILD.bazel	feat: add support for building with Bazel (#8875)	2026-01-09 11:09:43 -08:00
Cargo.toml	Move TUI on top of app server (parallel code) (#14717)	2026-03-16 10:49:19 -06:00