jif 683716cee9 Use effective permissions when trusting app-server projects (#38390) ...

## Why

Project-local configuration can launch host processes. Requested write access may be reduced to read-only by managed constraints or platform support, so the request alone must not cause the app server to trust a project and load its configuration.

## What changed

- Base automatic project trust on the effective permission profile after configuration is loaded.
- Trust managed profiles only when their effective filesystem policy allows writes to the working directory.
- Continue resolving trusted nested working directories to the repository root.

## Testing

- Verify that managed read-only permissions neither persist project trust nor load a project-local MCP server when workspace-write access was requested.
- Cover effective read-only fallback for workspace-write requests and nested repository working directories.

GitOrigin-RevId: e548fd9c4552c328f779cc0365fe86f37d4a9b71

2026-08-13 14:55:00 +00:00

..

account_processor

Route backend requests through the HTTP client factory (#34490)

2026-07-21 08:28:51 +00:00

apps_processor

Use thread configuration for app/read (#37891)

2026-08-10 22:39:29 +00:00

plugins

Merge local plugins into plugin search results (#36919)

2026-08-04 16:16:30 +00:00

remote_control_processor

feat(app-server): add remote control pairing status RPC (#26450)

2026-06-05 10:33:56 -07:00

account_processor.rs

Show estimated thread usage in /status (#38281)

2026-08-13 00:30:08 +00:00

apps_processor.rs

Use thread configuration for app/read (#37891)

2026-08-10 22:39:29 +00:00

bedrock_auth.rs

Clarify config layer iteration APIs (#36774)

2026-08-03 17:29:42 +00:00

catalog_processor.rs

Stop re-exporting skill APIs from codex-core (#37984)

2026-08-11 10:43:11 +00:00

command_exec_processor.rs

Add a feature flag to preserve apply_patch line endings (#37758)

2026-08-10 01:44:30 +00:00

config_errors.rs

Switch runtime to cloud config bundle (#24622)

2026-06-02 13:18:59 -07:00

config_processor.rs

Expose auto-review ignore rules in config requirements (#37519)

2026-08-08 01:37:02 +00:00

diagnostics.rs

Expose app-server diagnostics through the experimental API (#37470)

2026-08-07 16:57:47 +00:00

environment_processor.rs

Expose environment status through app-server (#32920)

2026-07-14 01:49:16 +00:00

feedback_doctor_report.rs

Detach non-interactive subprocesses from stdin (#34612)

2026-07-21 20:55:56 +00:00

feedback_processor.rs

Extract persisted history types into a dedicated crate (#37871)

2026-08-10 19:26:52 +00:00

fs_processor.rs

[codex] make PathUri::from_abs_path infallible (#27976)

2026-06-12 16:58:42 -07:00

git_processor.rs

[codex] Split app-server request processors (#20940)

2026-05-04 09:34:11 -07:00

initialize_processor.rs

Negotiate MCP extensions per app-server session (#36910)

2026-08-04 15:23:43 +00:00

marketplace_processor.rs

[plugins] Enforce marketplace source admission requirements (#29753)

2026-06-23 20:13:11 -07:00

mcp_processor.rs

Add CIMD support to MCP OAuth registration (#38089)

2026-08-12 00:01:01 +00:00

plugins.rs

Add per-login MCP OAuth client registration selection (#38052)

2026-08-11 18:35:03 +00:00

process_exec_processor.rs

Prevent launch context from reaching child processes (#37607)

2026-08-08 16:58:26 +00:00

remote_control_processor.rs

feat(app-server): enforce managed remote control disable (#27961)

2026-06-12 20:10:12 -07:00

request_errors.rs

Separate Codex error details from retry metadata (#34996)

2026-07-23 19:32:26 +00:00

search.rs

[codex] Use shared app-server JSON-RPC error helpers (#21221)

2026-05-05 12:13:59 -07:00

thread_delete.rs

Enforce writer ownership for thread archive and deletion (#35031)

2026-07-23 23:18:06 +00:00

thread_enrichment.rs

Report direct input capability for listed subagents (#35944)

2026-07-29 12:13:14 +00:00

thread_fork_goal.rs

Preserve thread context when retrying or editing turns (#33211)

2026-07-15 02:35:49 +00:00

thread_goal_processor.rs

Add configurable goal token budget limits (#37878)

2026-08-10 21:00:00 +00:00

thread_lifecycle.rs

Add durable user-message queue dispatch (#37204)

2026-08-06 03:11:42 +00:00

thread_processor_tests.rs

Use effective permissions when trusting app-server projects (#38390)

2026-08-13 14:55:00 +00:00

thread_processor.rs

Use effective permissions when trusting app-server projects (#38390)

2026-08-13 14:55:00 +00:00

thread_resume_redaction.rs

Expose image generation usage-limit failures (#38024)

2026-08-11 15:40:52 +00:00

thread_sections.rs

Add appearance metadata to thread sections (#37898)

2026-08-10 23:32:42 +00:00

thread_summary_tests.rs

feat(rollout): persist TurnItems for paginated thread rollouts (#30188)

2026-07-08 19:55:03 -07:00

thread_summary.rs

Add persisted manual ordering for thread sections (#36007)

2026-07-29 18:37:22 +00:00

token_usage_replay.rs

Extract persisted history types into a dedicated crate (#37871)

2026-08-10 19:26:52 +00:00

turn_processor.rs

Unify turn input submission and routing (#38275)

2026-08-13 00:00:16 +00:00

windows_sandbox_processor.rs

Select the elevated Windows sandbox for network proxies (#33445)

2026-07-15 23:19:00 +00:00