Dylan Hurd 5e71da1424 feat(request-permissions) approve with strict review (#19050) ...

## Summary
Allow the user to approve a request_permissions_tool request with the
condition that all commands in the rest of the turn are reviewed by
guardian, regardless of sandbox status.

## Testing
- [x] Added unit tests
- [x] Ran locally

2026-04-23 01:56:32 +00:00

..

v1

app-server: Return codex home in initialize response (#15689)

2026-03-24 16:13:34 -07:00

v2

Rebrand approvals reviewer config to auto-review (#18504)

2026-04-22 15:45:35 -07:00

ApplyPatchApprovalParams.json

chore: remove codex-core public protocol/shell re-exports (#12432)

2026-02-20 23:45:35 -08:00

ApplyPatchApprovalResponse.json

representing guardian review timeouts in protocol types (#17381)

2026-04-10 20:02:33 -07:00

ChatgptAuthTokensRefreshParams.json

fix(app-server): for external auth, replace id_token with chatgpt_acc… (#11240)

2026-02-09 20:48:58 -08:00

ChatgptAuthTokensRefreshResponse.json

fix(app-server): for external auth, replace id_token with chatgpt_acc… (#11240)

2026-02-09 20:48:58 -08:00

ClientNotification.json

…

ClientRequest.json

Rebrand approvals reviewer config to auto-review (#18504)

2026-04-22 15:45:35 -07:00

codex_app_server_protocol.schemas.json

feat(request-permissions) approve with strict review (#19050)

2026-04-23 01:56:32 +00:00

codex_app_server_protocol.v2.schemas.json

Rebrand approvals reviewer config to auto-review (#18504)

2026-04-22 15:45:35 -07:00

CommandExecutionRequestApprovalParams.json

protocol: preserve glob scan depth in permission profiles (#18713)

2026-04-20 19:42:45 -07:00

CommandExecutionRequestApprovalResponse.json

feat: include available decisions in command approval requests (#12758)

2026-02-26 01:10:46 +00:00

DynamicToolCallParams.json

app-server: define device key v2 protocol (#18428)

2026-04-21 10:08:42 -07:00

DynamicToolCallResponse.json

feat(app-server, core): allow text + image content items for dynamic tool outputs (#10567)

2026-02-04 16:12:47 -08:00

ExecCommandApprovalParams.json

chore: remove codex-core public protocol/shell re-exports (#12432)

2026-02-20 23:45:35 -08:00

ExecCommandApprovalResponse.json

representing guardian review timeouts in protocol types (#17381)

2026-04-10 20:02:33 -07:00

FileChangeRequestApprovalParams.json

…

FileChangeRequestApprovalResponse.json

…

FuzzyFileSearchParams.json

…

FuzzyFileSearchResponse.json

Simple directory mentions (#14970)

2026-03-19 05:24:09 +00:00

FuzzyFileSearchSessionCompletedNotification.json

[app-server] add fuzzyFileSearch/sessionCompleted (#11773)

2026-02-13 15:08:14 -08:00

FuzzyFileSearchSessionUpdatedNotification.json

Simple directory mentions (#14970)

2026-03-19 05:24:09 +00:00

JSONRPCError.json

…

JSONRPCErrorError.json

…

JSONRPCMessage.json

feat(app-server): add tracing to all app-server APIs (#13285)

2026-03-02 16:01:41 -08:00

JSONRPCNotification.json

…

JSONRPCRequest.json

feat(app-server): add tracing to all app-server APIs (#13285)

2026-03-02 16:01:41 -08:00

JSONRPCResponse.json

…

McpServerElicitationRequestParams.json

[elicitations] Switch to use MCP style elicitation payload for mcp tool approvals. (#13621)

2026-03-06 01:50:26 -08:00

McpServerElicitationRequestResponse.json

[elicitations] Switch to use MCP style elicitation payload for mcp tool approvals. (#13621)

2026-03-06 01:50:26 -08:00

PermissionsRequestApprovalParams.json

sandboxing: intersect permission profiles semantically (#18275)

2026-04-21 10:23:01 -07:00

PermissionsRequestApprovalResponse.json

feat(request-permissions) approve with strict review (#19050)

2026-04-23 01:56:32 +00:00

RequestId.json

…

ServerNotification.json

feat(auto-review) short-circuit (#18890)

2026-04-22 20:34:15 +00:00

ServerRequest.json

sandboxing: intersect permission profiles semantically (#18275)

2026-04-21 10:23:01 -07:00

ToolRequestUserInputParams.json

…

ToolRequestUserInputResponse.json

…