Celia Chen b6d20748e0 Revert "Ensure shell command skills trigger approval (#12697)" (#12721) ...

This reverts commit daf0f03ac8.

# External (non-OpenAI) Pull Request Requirements

Before opening this Pull Request, please read the dedicated
"Contributing" markdown file or your PR may be closed:
https://github.com/openai/codex/blob/main/docs/contributing.md

If your PR conforms to our contribution guidelines, replace this text
with a detailed and high quality description of your changes.

Include a link to a bug report or enhancement request.

2026-02-25 22:49:53 +00:00

..

agent

chore: unify max depth parameter (#12770)

2026-02-25 15:20:24 +00:00

apps

[apps] Fix app mention syntax. (#11894)

2026-02-16 22:01:49 +00:00

auth

fix(app-server): for external auth, replace id_token with chatgpt_acc… (#11240)

2026-02-09 20:48:58 -08:00

bin

…

config

feat(network-proxy): add embedded OTEL policy audit logging (#12046)

2026-02-25 11:46:37 -05:00

config_loader

chore: move config diagnostics out of codex-core (#12427)

2026-02-20 23:19:29 -08:00

context_manager

Raise image byte estimate for compaction token accounting (#12717)

2026-02-24 16:11:38 -08:00

features

chore: rename memory feature flag (#12580)

2026-02-23 15:37:12 +00:00

instructions

chore: add phase to message responseitem (#10455)

2026-02-03 02:52:26 +00:00

mcp

Surface skill permission profiles in zsh-fork exec approvals (#12753)

2026-02-25 01:23:10 -08:00

memories

Revert "fix(bazel): replace askama templates with include_str! in memories" (#12795)

2026-02-25 18:06:17 +00:00

models_manager

chore: change catalog mode to enum (#12656)

2026-02-24 19:33:32 -08:00

rollout

feat(app-server): add ThreadItem::DynamicToolCall (#12732)

2026-02-25 12:00:10 -08:00

sandboxing

chore: migrate additional permissions to PermissionProfile (#12731)

2026-02-25 03:35:28 +00:00

skills

Revert "Ensure shell command skills trigger approval (#12697)" (#12721)

2026-02-25 22:49:53 +00:00

state

feat: record whether a skill script is approved for the session (#12756)

2026-02-25 10:17:22 +00:00

tasks

feat(core) Introduce Feature::RequestPermissions (#11871)

2026-02-24 09:48:57 -08:00

tools

Revert "Ensure shell command skills trigger approval (#12697)" (#12721)

2026-02-25 22:49:53 +00:00

unified_exec

chore: migrate additional permissions to PermissionProfile (#12731)

2026-02-25 03:35:28 +00:00

analytics_client.rs

Support implicit skill invocation analytics events (#12049)

2026-02-23 21:55:49 -08:00

api_bridge.rs

Better error message for model limit hit. (#11636)

2026-02-12 14:10:30 -08:00

apply_patch.rs

core: preserve constrained approval/sandbox policies in TurnContext (#12473)

2026-02-21 14:40:24 -08:00

auth.rs

Fixed a hole in token refresh logic for app server (#11802)

2026-02-18 09:27:04 -08:00

client_common.rs

Remove ApiPrompt (#11265)

2026-02-10 16:12:31 +00:00

client.rs

Propagate session ID when compacting (#12802)

2026-02-25 19:17:38 +00:00

codex_delegate.rs

feat: add service name to app-server (#12319)

2026-02-25 09:51:42 +00:00

codex_thread.rs

feat: sub-agent injection (#12152)

2026-02-19 11:32:10 +00:00

codex.rs

Revert "Ensure shell command skills trigger approval (#12697)" (#12721)

2026-02-25 22:49:53 +00:00

command_canonicalization.rs

fix(core): canonicalize wrapper approvals and support heredoc prefix … (#10941)

2026-02-10 11:46:40 -08:00

commit_attribution.rs

Use prompt-based co-author attribution with config override (#11617)

2026-02-17 20:15:54 +00:00

compact_remote.rs

Fix compaction context reinjection and model baselines (#12252)

2026-02-20 23:13:08 -08:00

compact.rs

Fix compaction context reinjection and model baselines (#12252)

2026-02-20 23:13:08 -08:00

connectors.rs

[apps] Implement apps configs. (#12086)

2026-02-20 12:05:21 -08:00

custom_prompts.rs

…

default_client.rs

[apps] Update apps allowlist. (#12211)

2026-02-18 23:21:32 -08:00

env.rs

…

environment_context.rs

Move previous turn context tracking into ContextManager history (#12179)

2026-02-19 09:56:20 -08:00

error.rs

feat(core): add structured network approval plumbing and policy decision model (#11672)

2026-02-14 04:18:12 +00:00

event_mapping.rs

fix(tui): conditionally restore status indicator using message phase (#10947)

2026-02-07 02:39:52 +00:00

exec_env.rs

Inject CODEX_THREAD_ID into the terminal environment (#10096)

2026-02-03 11:31:12 -08:00

exec_policy.rs

feat(core) Introduce Feature::RequestPermissions (#11871)

2026-02-24 09:48:57 -08:00

exec.rs

Revert "Ensure shell command skills trigger approval (#12697)" (#12721)

2026-02-25 22:49:53 +00:00

external_agent_config.rs

Support external agent config detect and import (#12660)

2026-02-25 02:11:51 -08:00

features.rs

Promote js_repl to experimental with Node requirement (#12712)

2026-02-25 09:44:52 -08:00

file_watcher.rs

fix: file watcher (#12105)

2026-02-18 18:28:34 +00:00

flags.rs

…

function_tool.rs

…

git_info.rs

turn metadata: per-turn non-blocking (#11677)

2026-02-13 12:48:29 -08:00

landlock.rs

feat: make sandbox read access configurable with ReadOnlyAccess (#11387)

2026-02-11 18:31:14 -08:00

lib.rs

feat: adding stream parser (#12666)

2026-02-25 13:27:58 +00:00

mcp_connection_manager.rs

[apps] Bump MCP tool call timeout. (#12405)

2026-02-20 17:35:07 -08:00

mcp_tool_call.rs

Support implicit skill invocation analytics events (#12049)

2026-02-23 21:55:49 -08:00

memory_trace.rs

memories: add extraction and prompt module foundation (#11200)

2026-02-10 10:10:24 +00:00

mentions.rs

fix: clarify the value of SkillMetadata.path (#12729)

2026-02-24 17:15:54 -08:00

message_history.rs

…

model_provider_info.rs

Fix: update parallel tool call exec approval to approve on request id (#11162)

2026-02-10 09:38:00 -08:00

network_policy_decision.rs

feat(core): persist network approvals in execpolicy (#12357)

2026-02-23 21:37:46 -08:00

network_proxy_loader.rs

feat(core): persist network approvals in execpolicy (#12357)

2026-02-23 21:37:46 -08:00

otel_init.rs

feat: show runtime metrics in console (#10278)

2026-01-30 22:20:02 -08:00

path_utils.rs

Fixed symlink support for config.toml (#9445)

2026-01-18 19:22:28 -08:00

personality_migration.rs

feat: add nick name to sub-agents (#12320)

2026-02-20 14:39:49 +00:00

project_doc.rs

Honor project_root_markers when discovering AGENTS.md (#12639)

2026-02-24 12:55:48 -08:00

realtime_conversation.rs

Add simple realtime text logs (#12807)

2026-02-25 12:01:48 -08:00

review_format.rs

…

review_prompts.rs

…

safety.rs

feat: add Reject approval policy with granular prompt rejection controls (#12087)

2026-02-19 11:41:49 -08:00

sandbox_tags.rs

fix(core): add linux bubblewrap sandbox tag (#11767)

2026-02-14 19:00:01 +00:00

seatbelt_base_policy.sbpl

[feat] add seatbelt permission files (#11639)

2026-02-12 23:30:22 +00:00

seatbelt_network_policy.sbpl

feat(sandbox): enforce proxy-aware network routing in sandbox (#11113)

2026-02-10 07:44:21 +00:00

seatbelt_permissions.rs

feat(skills): add permission profiles from openai.yaml metadata (#11658)

2026-02-14 01:43:44 +00:00

seatbelt_platform_defaults.sbpl

fix: Restricted Read: /System is too permissive for macOS platform de… (#11798)

2026-02-17 23:56:35 -08:00

seatbelt.rs

refactor: remove unused seatbelt unix socket arg (#12707)

2026-02-24 12:30:26 -08:00

session_prefix.rs

feat: sub-agent injection (#12152)

2026-02-19 11:32:10 +00:00

shell_detect.rs

chore: rename codex-command to codex-shell-command (#11378)

2026-02-10 17:03:46 -08:00

shell_snapshot.rs

Agent jobs (spawn_agents_on_csv) + progress UI (#10935)

2026-02-24 21:00:19 +00:00

shell.rs

Make shell detection tests

2026-02-21 20:08:02 -08:00

spawn.rs

feat(sandbox): enforce proxy-aware network routing in sandbox (#11113)

2026-02-10 07:44:21 +00:00

state_db.rs

feat: add search term to thread list (#12578)

2026-02-25 09:59:41 +00:00

stream_events_utils.rs

feat: record memory usage (#12761)

2026-02-25 13:48:40 +00:00

terminal.rs

[codex-tui] exit when terminal is dumb (#9293)

2026-01-20 16:17:38 -08:00

test_support.rs

chore: rm hardcoded PRESETS list (#12650)

2026-02-23 22:35:51 -08:00

text_encoding.rs

…

thread_manager.rs

feat: add service name to app-server (#12319)

2026-02-25 09:51:42 +00:00

token_data.rs

fix(app-server): for external auth, replace id_token with chatgpt_acc… (#11240)

2026-02-09 20:48:58 -08:00

truncate.rs

core: add focused diagnostics for remote compaction overflows (#11133)

2026-02-09 12:42:20 -08:00

turn_diff_tracker.rs

…

turn_metadata.rs

fix(core): add linux bubblewrap sandbox tag (#11767)

2026-02-14 19:00:01 +00:00

user_shell_command.rs

chore: add phase to message responseitem (#10455)

2026-02-03 02:52:26 +00:00

util.rs

Cloud Requirements: increase timeout and retries (#10631)

2026-02-05 01:52:12 +00:00

web_search.rs

add missing fields to WebSearchAction and update app-server types (#10276)

2026-01-30 16:37:56 -08:00

windows_sandbox_read_grants.rs

add a slash command to grant sandbox read access to inaccessible directories (#11512)

2026-02-12 12:48:36 -08:00

windows_sandbox.rs

app-server support for Windows sandbox setup. (#12025)

2026-02-18 13:03:16 -08:00