codex

mirror of https://github.com/openai/codex.git synced 2026-05-13 15:52:40 +00:00

Files

Andrei Eternal 913aad4d3c Add allow_managed_hooks_only hook requirement (#20319 )

## Why

Enterprise-managed hook policy needs a narrow way to require Codex to
ignore user-controlled lifecycle hooks without adopting the broader
trust-precedence model from earlier hook work. This keeps the policy
anchored in `requirements.toml`, so admins can opt into managed hooks
only while normal `config.toml` files cannot enable the restriction
themselves.

## What changed

- Added `allow_managed_hooks_only` to the requirements data flow and
preserved explicit `false` values.
- Also adds it to /debug-config
- Marked MDM, system, and legacy managed config layers as managed for
hook discovery.
- Updated hook discovery so `allow_managed_hooks_only = true`:
  - keeps managed requirements hooks and managed config-layer hooks,
- skips user/project/session `hooks.json` and `[hooks]` entries with
concise startup warnings,
  - skips current unmanaged plugin hooks,
- ignores any `allow_managed_hooks_only` key placed in ordinary
`config.toml` layers.

2026-05-12 19:05:25 -07:00

agents_md.md

Rename hierarchical_agents to child_agents_md (#9215 )

2026-01-14 19:14:24 +00:00

authentication.md

Replaced user documentation with links to developers docs site (#8662 )

2026-01-02 13:01:53 -07:00

CLA.md

chore: subject docs/*.md to Prettier checks (#4645 )

2025-10-03 11:35:48 -07:00

config.md

Add allow_managed_hooks_only hook requirement (#20319 )