fix: support explicitly authorized Codex deployment without sandbox

Production agents repeatedly failed before SSH because the launcher only accepted workspace-write profiles. Accept the explicit Codex danger-full-access profile through the same validated plan and receipt path, and cover profile, argv and receipt validation with regression tests.
2026-10-13 23:47:34 +08:00
parent af6e139d30
commit 95946d4278
8 changed files with 55 additions and 18 deletions
@@ -59,13 +59,14 @@
      "type": "object",
      "required": ["role", "cli", "tier", "model", "reasoningEffort", "permissionMode"],
      "additionalProperties": false,
+      "allOf": [{"if": {"properties": {"permissionMode": {"const": "danger-full-access"}}, "required": ["permissionMode"]}, "then": {"properties": {"cli": {"const": "codex"}}, "required": ["cli"]}}],
      "properties": {
        "role": {"type": "string", "enum": ["developer", "test"]},
        "cli": {"type": "string", "enum": ["codex", "cursor-agent", "grok", "omp", "pi"]},
        "tier": {"type": "string", "enum": ["standard", "strong"]},
        "model": {"$ref": "#/definitions/model"},
        "reasoningEffort": {"type": ["string", "null"], "enum": ["low", "medium", "high", "xhigh", null]},
-        "permissionMode": {"type": "string", "enum": ["read-only", "workspace-write"]}
+        "permissionMode": {"type": "string", "enum": ["read-only", "workspace-write", "danger-full-access"]}
      }
    },
    "defaults": {