You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Removes the legacy sandbox_policy field from the thread-store domain model.
StoredThread summaries no longer parse, carry, or re-serialize SandboxPolicy; the field was only being populated from legacy metadata defaults and was not read by production callers. The remote thread-store proto field remains in place as an ignored wire-compatibility field, but the Rust domain object stops exposing it.
Why
Thread metadata persistence still stores a legacy sandbox projection for older readers, but thread-store consumers should not treat that projection as canonical permission state. Removing it from StoredThread avoids carrying stale or lossy SandboxPolicy values through list/read paths while the migration continues around PermissionProfile.
This also reduces SandboxPolicy usage to zero under codex-rs/thread-store/src.
Verification
just fmt
cargo test -p codex-thread-store
cargo test -p codex-core realtime_context
cargo test -p codex-app-server summary_from_stored_thread_preserves_millisecond_precision
just fix -p codex-thread-store -p codex-core -p codex-app-server
Recover profile from sandbox when permissionProfile missing
When permissionProfile is absent in a thread/start|resume|fork response, this now always falls back to the local config profile. In remote mode, that can desynchronize the TUI from the server’s actual permissions (for example with older app-server versions that only send the legacy sandbox field), so the UI and subsequent turn behavior can reflect the wrong access level. The previous implementation reconstructed the profile from sandbox for remote sessions, which preserved server truth in that compatibility path.
Closing this pull request because it has had no updates for more than 14 days. If you plan to continue working on it, feel free to reopen or open a new PR.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Removes the legacy
sandbox_policyfield from the thread-store domain model.StoredThreadsummaries no longer parse, carry, or re-serializeSandboxPolicy; the field was only being populated from legacy metadata defaults and was not read by production callers. The remote thread-store proto field remains in place as an ignored wire-compatibility field, but the Rust domain object stops exposing it.Why
Thread metadata persistence still stores a legacy sandbox projection for older readers, but thread-store consumers should not treat that projection as canonical permission state. Removing it from
StoredThreadavoids carrying stale or lossySandboxPolicyvalues through list/read paths while the migration continues aroundPermissionProfile.This also reduces
SandboxPolicyusage to zero undercodex-rs/thread-store/src.Verification
just fmtcargo test -p codex-thread-storecargo test -p codex-core realtime_contextcargo test -p codex-app-server summary_from_stored_thread_preserves_millisecond_precisionjust fix -p codex-thread-store -p codex-core -p codex-app-serverStack created with Sapling. Best reviewed with ReviewStack.