Adds a built-in `request_permissions` tool and wires it through the Codex core, protocol, and app-server layers so a running turn can ask the client for additional permissions instead of relying on a static session policy. The new flow emits a `RequestPermissions` event from core, tracks the pending request by call ID, forwards it through app-server v2 as an `item/permissions/requestApproval` request, and resumes the tool call once the client returns an approved subset of the requested permission profile. |
||
|---|---|---|
| .. | ||
| auth_fixtures.rs | ||
| BUILD.bazel | ||
| Cargo.toml | ||
| config.rs | ||
| lib.rs | ||
| mcp_process.rs | ||
| mock_model_server.rs | ||
| models_cache.rs | ||
| responses.rs | ||
| rollout.rs | ||