viyatb-oai 6fe8a05dcb fix: honor active permission profiles in sandbox debug (#14293) ...

## Summary
- stop `codex sandbox` from forcing legacy `sandbox_mode` when active
`[permissions]` profiles are configured
- keep the legacy `read-only` / `workspace-write` fallback for legacy
configs and reject `--full-auto` for profile-based configs
- use split filesystem and network policies in the macOS/Linux debug
sandbox helpers and add regressions for the config-loading behavior


assuming "codex/docs/private/secret.txt" = "none"
```
codex -c 'default_permissions="limited-read-test"' sandbox macos -- <command> ...

codex sandbox macos -- cat codex/docs/private/secret.txt >/dev/null; echo EXIT:$?
cat: codex/docs/private/secret.txt: Operation not permitted
EXIT:1
```

---------

Co-authored-by: celia-oai <celia@openai.com>

2026-03-18 01:52:02 +00:00

..

src

fix: honor active permission profiles in sandbox debug (#14293)

2026-03-18 01:52:02 +00:00

tests

feat: simplify DB further (#13771)

2026-03-07 03:48:36 -08:00

BUILD.bazel

feat: add support for building with Bazel (#8875)

2026-01-09 11:09:43 -08:00

Cargo.toml

Move TUI on top of app server (parallel code) (#14717)

2026-03-16 10:49:19 -06:00