fix initial approval bug

2026-04-24 14:45:27 +00:00 · 2025-11-13 23:23:39 -05:00
parent 15ccd83d44
commit f64e4aa4f4
1 changed files with 6 additions and 1 deletions
--- a/codex-rs/core/src/tools/runtimes/unified_exec.rs
+++ b/codex-rs/core/src/tools/runtimes/unified_exec.rs
@@ -146,7 +146,12 @@ impl Approvable<UnifiedExecRequest> for UnifiedExecRuntime<'_> {
            && let Some(requirement) = evaluate_with_policy(exec_policy, &req.command, policy)
        {
            requirement
-        } else if requires_initial_appoval(policy, sandbox_policy, &req.command, false) {
+        } else if requires_initial_appoval(
+            policy,
+            sandbox_policy,
+            &req.command,
+            req.with_escalated_permissions.unwrap_or(false),
+        ) {
            ApprovalRequirement::NeedsApproval { reason: None }
        } else {
            ApprovalRequirement::Skip