@agentclientprotocol/codex-acp 2.5.1-preview.17 → 2.5.1-preview.18

package/README.md

@@ -9,7 +9,7 @@ Use [OpenAI Codex](https://github.com/openai/codex) from [Agent Client Protocol]
 ## Features
 
 - ChatGPT, API key, and client-provided custom gateway authentication.
-- Model, reasoning effort, fast mode, approval, and sandbox mode configuration.
+- Model, reasoning effort, fast mode, approval, sandbox mode, and configured [Codex permission profile](docs/permission-profiles.md) selection.
 - Concrete recommended model and reasoning-effort values through the opt-in [AIR recommended config values](docs/air-extensions.md#recommended-config-values) capability.
 - Text prompts, embedded context, images, resource links, and additional workspace directories.
 - Shell command, file change, [permission request](docs/air-extensions.md#permission-presentation), MCP tool call, terminal output, reasoning, plan, web search, image generation, image view, token usage, and review events.
@@ -73,7 +73,7 @@ The adapter advertises ACP auth methods during initialization. Clients can authe
 - `CODEX_CONFIG` - JSON object merged into the Codex session config.
 - `MODEL_PROVIDER` - model provider to pass to Codex for new sessions.
 - `DEFAULT_AUTH_REQUEST` - ACP auth request JSON used when Codex requires authentication.
-- `INITIAL_AGENT_MODE` - initial mode id: `read-only`, `workspace-write`, `agent`, or `agent-full-access`.
+- `INITIAL_AGENT_MODE` - initial mode id: `read-only`, `workspace-write`, `agent`, `agent-full-access`, or `permission-profile:<profile-id>`.
 - `NO_BROWSER` - hide browser-based ChatGPT auth when set.
 - `APP_SERVER_LOGS` - directory for adapter logs.
 

package/dist/index.js

@@ -41772,6 +41772,7 @@ var ModelId = class _ModelId {
 
 // src/AgentMode.ts
 var MODE_CONFIG_ID = "mode";
+var PERMISSION_PROFILE_MODE_PREFIX = "permission-profile:";
 var AgentMode = class _AgentMode {
   id;
   name;
@@ -41781,7 +41782,8 @@ var AgentMode = class _AgentMode {
   approvalsReviewer;
   sandboxPolicy;
   sandboxMode;
-  constructor(id, name, description, kind, approvalPolicy, approvalsReviewer, sandboxPolicy, sandboxMode) {
+  permissionProfileId;
+  constructor(id, name, description, kind, approvalPolicy, approvalsReviewer, sandboxPolicy, sandboxMode, permissionProfileId = null) {
     this.id = id;
     this.name = name;
     this.description = description;
@@ -41790,6 +41792,7 @@ var AgentMode = class _AgentMode {
     this.approvalsReviewer = approvalsReviewer;
     this.sandboxPolicy = sandboxPolicy;
     this.sandboxMode = sandboxMode;
+    this.permissionProfileId = permissionProfileId;
   }
   static ReadOnly = new _AgentMode(
     "read-only",
@@ -41849,7 +41852,7 @@ var AgentMode = class _AgentMode {
   static DEFAULT_AGENT_MODE = _AgentMode.Agent;
   /** Only AIR gets the mode kind, in `_meta.jetbrains.air.kind`. */
   toSessionMode(airClient) {
-    const meta3 = airOnlyMeta(airClient, AIR_KIND_KEY, this.kind);
+    const meta3 = this.kind === null ? void 0 : airOnlyMeta(airClient, AIR_KIND_KEY, this.kind);
     return {
       id: this.id,
       name: this.name,
@@ -41857,13 +41860,35 @@ var AgentMode = class _AgentMode {
       ...meta3 ? { _meta: meta3 } : {}
     };
   }
-  toSessionModeState(airClient) {
+  toSessionModeState(airClient, availableModes = _AgentMode.all()) {
     return {
-      availableModes: _AgentMode.all().map((mode) => mode.toSessionMode(airClient)),
+      availableModes: availableModes.map((mode) => mode.toSessionMode(airClient)),
       currentModeId: this.id
     };
   }
-  toConfigOption(airClient) {
+  toConfigOption(airClient, availableModes = _AgentMode.all()) {
+    const toOptions = (modes) => modes.map((mode) => {
+      const meta3 = mode.kind === null ? void 0 : airOnlyMeta(airClient, AIR_KIND_KEY, mode.kind);
+      return {
+        value: mode.id,
+        name: mode.name,
+        description: mode.description,
+        ...meta3 ? { _meta: meta3 } : {}
+      };
+    });
+    const permissionProfileModes = availableModes.filter((mode) => mode.permissionProfileId !== null);
+    const options = permissionProfileModes.length === 0 ? toOptions(availableModes) : [
+      {
+        group: "sandbox-modes",
+        name: "Sandbox Modes",
+        options: toOptions(availableModes.filter((mode) => mode.permissionProfileId === null))
+      },
+      {
+        group: "permission-profiles",
+        name: "Permission Profiles",
+        options: toOptions(permissionProfileModes)
+      }
+    ];
     return {
       id: MODE_CONFIG_ID,
       name: "Mode",
@@ -41871,31 +41896,45 @@ var AgentMode = class _AgentMode {
       category: "mode",
       type: "select",
       currentValue: this.id,
-      options: _AgentMode.all().map((mode) => {
-        const meta3 = airOnlyMeta(airClient, AIR_KIND_KEY, mode.kind);
-        return {
-          value: mode.id,
-          name: mode.name,
-          description: mode.description,
-          ...meta3 ? { _meta: meta3 } : {}
-        };
-      })
-    };
-  }
-  static all() {
-    return [_AgentMode.ReadOnly, _AgentMode.WorkspaceWrite, _AgentMode.Agent, _AgentMode.AgentFullAccess];
+      options
+    };
+  }
+  static all(permissionProfiles = [], permissionProfileApprovalPolicy = "on-request", permissionProfileApprovalsReviewer = "user") {
+    const profileModes = permissionProfiles.filter((profile) => profile.allowed && !profile.id.startsWith(":")).map((profile) => new _AgentMode(
+      `${PERMISSION_PROFILE_MODE_PREFIX}${profile.id}`,
+      profile.id,
+      profile.description ?? `Use the ${profile.id} Codex permission profile.`,
+      null,
+      permissionProfileApprovalPolicy,
+      permissionProfileApprovalsReviewer,
+      null,
+      null,
+      profile.id
+    ));
+    return [
+      _AgentMode.ReadOnly,
+      _AgentMode.WorkspaceWrite,
+      _AgentMode.Agent,
+      _AgentMode.AgentFullAccess,
+      ...profileModes
+    ];
   }
-  static find(modeId) {
-    const match = _AgentMode.all().find((m) => m.id === modeId);
+  static find(modeId, availableModes = _AgentMode.all()) {
+    const match = availableModes.find((m) => m.id === modeId);
     return match ?? null;
   }
-  static getInitialAgentMode() {
+  static getInitialAgentMode(availableModes = _AgentMode.all(), activePermissionProfileId = null) {
     const predefinedAgentMode = process.env["INITIAL_AGENT_MODE"];
     if (predefinedAgentMode) {
-      return _AgentMode.find(predefinedAgentMode) ?? _AgentMode.DEFAULT_AGENT_MODE;
-    } else {
-      return _AgentMode.DEFAULT_AGENT_MODE;
+      return _AgentMode.find(predefinedAgentMode, availableModes) ?? _AgentMode.DEFAULT_AGENT_MODE;
+    }
+    if (activePermissionProfileId !== null) {
+      const profileMode = availableModes.find((mode) => mode.permissionProfileId === activePermissionProfileId);
+      if (profileMode) {
+        return profileMode;
+      }
     }
+    return _AgentMode.DEFAULT_AGENT_MODE;
   }
 };
 
@@ -41909,7 +41948,7 @@ var package_default = {
   publishConfig: {
     access: "public"
   },
-  version: "2.5.1-preview.17",
+  version: "2.5.1-preview.18",
   description: "",
   main: "dist/index.js",
   bin: {
@@ -42202,14 +42241,14 @@ import { createHash } from "node:crypto";
 async function forkSession(request, additionalDirectories, dependencies, instructions) {
   await dependencies.refreshSkills(request.cwd, additionalDirectories);
   const lastTurnId = await resolveForkTurnId(request, dependencies.codexClient);
-  const sessionConfig = await dependencies.createSessionConfig(
+  const { config: config2, skippedMcpServers, defaultPermissionProfileId: _defaultPermissionProfileId, ...permissionProfileMetadata } = await dependencies.createSessionConfig(
     request.cwd,
     additionalDirectories,
     request.mcpServers ?? []
   );
   const response = await dependencies.codexClient.threadFork({
     excludeTurns: true,
-    config: sessionConfig.config,
+    config: config2,
     cwd: request.cwd,
     ...lastTurnId !== void 0 && { lastTurnId },
     modelProvider: await dependencies.getResumeModelProvider(),
@@ -42232,7 +42271,9 @@ async function forkSession(request, additionalDirectories, dependencies, instruc
     modelProvider: response.modelProvider,
     currentServiceTier: response.serviceTier ?? null,
     additionalDirectories,
-    skippedMcpServers: sessionConfig.skippedMcpServers,
+    skippedMcpServers,
+    activePermissionProfileId: response.activePermissionProfile?.id ?? null,
+    ...permissionProfileMetadata,
     ...instructions ? { instructions } : {}
   };
 }
@@ -42942,6 +42983,7 @@ var CodexAcpClient = class _CodexAcpClient {
         modelProvider: response.modelProvider,
         reasoningEffort: response.reasoningEffort,
         serviceTier: response.serviceTier,
+        activePermissionProfileId: response.activePermissionProfile?.id ?? null,
         itemsBackwardsCursor: response.itemsBackwardsCursor ?? null,
         materialized: true,
         collaborationMode: response.collaborationMode?.mode ?? null
@@ -42964,6 +43006,8 @@ var CodexAcpClient = class _CodexAcpClient {
         modelProvider: response.thread.modelProvider,
         reasoningEffort: response.thread.reasoningEffort,
         serviceTier: null,
+        // thread/read omits permissions; callers restore the config default before the first prompt.
+        activePermissionProfileId: null,
         // An unmaterialized thread has no persisted history to hydrate:
         // `thread/turns/list` rejects it outright ("not materialized
         // yet"), and there is nothing to list either way.
@@ -42977,10 +43021,10 @@ var CodexAcpClient = class _CodexAcpClient {
     const instructions = await this.resolveSessionInstructions(request, previousInstructions);
     const additionalDirectories = readAdditionalDirectories(request.cwd, request.additionalDirectories, request._meta);
     await this.refreshSkills(request.cwd, additionalDirectories);
-    const sessionConfig = await this.createSessionConfig(request.cwd, additionalDirectories, request.mcpServers ?? []);
+    const { config: config2, skippedMcpServers, defaultPermissionProfileId, ...permissionProfileMetadata } = await this.createSessionConfig(request.cwd, additionalDirectories, request.mcpServers ?? []);
     const response = await this.resumeThreadWithInstructions({
       excludeTurns: true,
-      config: sessionConfig.config,
+      config: config2,
       cwd: request.cwd,
       modelProvider: await this.getResumeModelProvider(),
       threadId: request.sessionId,
@@ -43000,8 +43044,10 @@ var CodexAcpClient = class _CodexAcpClient {
       modelProvider: response.modelProvider,
       currentServiceTier: response.serviceTier ?? null,
       additionalDirectories,
-      skippedMcpServers: sessionConfig.skippedMcpServers,
-      ...instructions ? { instructions } : {}
+      skippedMcpServers,
+      ...instructions ? { instructions } : {},
+      activePermissionProfileId: response.materialized ? response.activePermissionProfileId : defaultPermissionProfileId ?? null,
+      ...permissionProfileMetadata
     };
   }
   async forkSession(request, releaseFailedFork = (threadId) => this.closeSession(threadId), forkCreated = () => {
@@ -43024,10 +43070,10 @@ var CodexAcpClient = class _CodexAcpClient {
     const instructions = await this.resolveSessionInstructions(request, previousInstructions);
     const additionalDirectories = readAdditionalDirectories(request.cwd, request.additionalDirectories, request._meta);
     await this.refreshSkills(request.cwd, additionalDirectories);
-    const sessionConfig = await this.createSessionConfig(request.cwd, additionalDirectories, request.mcpServers ?? []);
+    const { config: config2, skippedMcpServers, defaultPermissionProfileId, ...permissionProfileMetadata } = await this.createSessionConfig(request.cwd, additionalDirectories, request.mcpServers ?? []);
     const response = await this.resumeThreadWithInstructions({
       excludeTurns: true,
-      config: sessionConfig.config,
+      config: config2,
       cwd: request.cwd,
       modelProvider: await this.getResumeModelProvider(),
       threadId: request.sessionId,
@@ -43066,8 +43112,10 @@ var CodexAcpClient = class _CodexAcpClient {
       thread,
       history,
       additionalDirectories,
-      skippedMcpServers: sessionConfig.skippedMcpServers,
-      ...instructions ? { instructions } : {}
+      skippedMcpServers,
+      ...instructions ? { instructions } : {},
+      activePermissionProfileId: response.materialized ? response.activePermissionProfileId : defaultPermissionProfileId ?? null,
+      ...permissionProfileMetadata
     };
   }
   /**
@@ -43121,9 +43169,9 @@ var CodexAcpClient = class _CodexAcpClient {
     const additionalDirectories = readAdditionalDirectories(request.cwd, request.additionalDirectories, request._meta);
     const developerInstructions = instructions?.developerInstructions;
     await this.refreshSkills(request.cwd, additionalDirectories);
-    const sessionConfig = await this.createSessionConfig(request.cwd, additionalDirectories, request.mcpServers ?? []);
+    const { config: config2, skippedMcpServers, defaultPermissionProfileId: _defaultPermissionProfileId, ...permissionProfileMetadata } = await this.createSessionConfig(request.cwd, additionalDirectories, request.mcpServers ?? []);
     const response = await this.codexClient.threadStart({
-      config: sessionConfig.config,
+      config: config2,
       modelProvider: this.getModelProvider(),
       cwd: request.cwd,
       ...developerInstructions !== void 0 && { developerInstructions }
@@ -43141,8 +43189,10 @@ var CodexAcpClient = class _CodexAcpClient {
       modelProvider: response.modelProvider,
       currentServiceTier: response.serviceTier ?? null,
       additionalDirectories,
-      skippedMcpServers: sessionConfig.skippedMcpServers,
-      ...instructions ? { instructions } : {}
+      skippedMcpServers,
+      ...instructions ? { instructions } : {},
+      activePermissionProfileId: response.activePermissionProfile?.id ?? null,
+      ...permissionProfileMetadata
     };
   }
   async resolveSessionInstructions(request, previous, creating = false) {
@@ -43344,13 +43394,22 @@ var CodexAcpClient = class _CodexAcpClient {
       }]))
     };
     const configWithWorkspaceRoots = mergeSandboxWorkspaceWriteRoots(mergedConfig, additionalDirectories);
+    const permissionProfiles = await this.fetchPermissionProfiles(projectPath);
+    const effectiveConfig = await this.codexClient.configRead({ includeLayers: true, cwd: projectPath });
+    const defaultPermissionProfileId = effectiveConfig?.config?.["default_permissions"];
+    const permissionProfileMetadata = {
+      permissionProfiles,
+      defaultPermissionProfileId: typeof defaultPermissionProfileId === "string" ? defaultPermissionProfileId : null,
+      ...effectiveConfig?.config?.approval_policy != null && { approvalPolicy: effectiveConfig.config.approval_policy },
+      ...effectiveConfig?.config?.approvals_reviewer != null && { approvalsReviewer: effectiveConfig.config.approvals_reviewer }
+    };
     if (mcpServers.length === 0) {
-      return { config: configWithWorkspaceRoots, skippedMcpServers: [] };
+      return { config: configWithWorkspaceRoots, skippedMcpServers: [], ...permissionProfileMetadata };
     }
     const requestedServers = normalizeMcpServers(mcpServers).map((server) => ({ name: server.name, server }));
     let serversToConfigure = requestedServers;
     if (shouldDeduplicateMcpConflicts()) {
-      const existingNames = await this.getConfigMcpServerNames(projectPath);
+      const existingNames = this.getConfigMcpServerNames(effectiveConfig);
       serversToConfigure = requestedServers.filter((mcp) => !existingNames.has(mcp.name));
     }
     const skippedMcpServers = requestedServers.filter((mcp) => !serversToConfigure.includes(mcp)).map((mcp) => mcp.name);
@@ -43361,18 +43420,18 @@ var CodexAcpClient = class _CodexAcpClient {
       });
     }
     if (serversToConfigure.length === 0) {
-      return { config: configWithWorkspaceRoots, skippedMcpServers };
+      return { config: configWithWorkspaceRoots, skippedMcpServers, ...permissionProfileMetadata };
     }
     return {
       config: {
         ...configWithWorkspaceRoots,
         "mcp_servers": Object.fromEntries(serversToConfigure.map((mcp) => [mcp.name, toCodexMcpServerConfig(mcp.server)]))
       },
-      skippedMcpServers
+      skippedMcpServers,
+      ...permissionProfileMetadata
     };
   }
-  async getConfigMcpServerNames(projectPath) {
-    const response = await this.codexClient.configRead({ includeLayers: true, cwd: projectPath });
+  getConfigMcpServerNames(response) {
     const effectiveMcpServers = response?.config?.["mcp_servers"];
     const configLayers = response?.layers ?? [];
     const layerMcpServers = configLayers.map((layer) => {
@@ -43384,6 +43443,16 @@ var CodexAcpClient = class _CodexAcpClient {
     }
     return new Set(configuredMcpServers.flatMap((server) => Object.keys(server)));
   }
+  async fetchPermissionProfiles(projectPath) {
+    const profiles = [];
+    let cursor = null;
+    do {
+      const response = await this.codexClient.listPermissionProfiles({ cwd: projectPath, cursor });
+      profiles.push(...response?.data ?? []);
+      cursor = response?.nextCursor ?? null;
+    } while (cursor !== null);
+    return profiles;
+  }
   getModelProvider() {
     return this.gatewayConfig?.modelProvider ?? this.modelProvider;
   }
@@ -43496,12 +43565,16 @@ var CodexAcpClient = class _CodexAcpClient {
     if (shouldCancel?.()) {
       return null;
     }
+    const permissionProfileId = agentMode.permissionProfileId;
     return await this.codexClient.runTurn({
       threadId: request.sessionId,
       input: input2,
       approvalPolicy: agentMode.approvalPolicy,
       approvalsReviewer: agentMode.approvalsReviewer,
-      sandboxPolicy: addAdditionalDirectoriesToSandboxPolicy(agentMode.sandboxPolicy, additionalDirectories),
+      ...permissionProfileId ? {
+        permissions: permissionProfileId,
+        runtimeWorkspaceRoots: [cwd, ...additionalDirectories]
+      } : { sandboxPolicy: addAdditionalDirectoriesToSandboxPolicy(agentMode.sandboxPolicy, additionalDirectories) },
       summary: disableSummary ? "none" : "auto",
       effort,
       model: modelId.model,
@@ -44894,6 +44967,9 @@ var CodexAppServerClient = class {
   async listModels(params) {
     return await this.sendRequest({ method: "model/list", params });
   }
+  async listPermissionProfiles(params) {
+    return await this.sendRequest({ method: "permissionProfile/list", params });
+  }
   async skillsExtraRootsSet(params) {
     return await this.sendRequest({ method: "skills/extraRoots/set", params });
   }
@@ -47127,11 +47203,12 @@ var CodexCommands = class {
       sessionState.lastTokenUsage,
       sessionState.modelContextWindow
     );
+    const permissionLine = agentMode.permissionProfileId ? `**Permission profile:** ${agentMode.permissionProfileId}` : `**Sandbox:** ${agentMode.sandboxMode}`;
     const lines = [
       `**Model:** ${sessionState.currentModelId}`,
       `**Directory:** ${sessionState.cwd}`,
       `**Approval:** ${agentMode.approvalPolicy}`,
-      `**Sandbox:** ${agentMode.sandboxMode}`,
+      permissionLine,
       `**Account:** ${accountText}`,
       `**Session:** \`${sessionState.sessionId}\``,
       ``,
@@ -51468,13 +51545,22 @@ You have been logged out. Please try again.`);
     const currentModel = this.findCurrentModel(models, currentModelId);
     const currentModelSupportsFast = modelSupportsFast(currentModel);
     if (this.setupResponseOrdering && operation !== "resume") this.clientDelivery.beginSessionSetup(sessionId);
+    const availableAgentModes = AgentMode.all(
+      sessionMetadata.permissionProfiles,
+      sessionMetadata.approvalPolicy,
+      sessionMetadata.approvalsReviewer
+    );
     const sessionState = {
       sessionId,
       currentModelId,
       availableModels: models,
       supportedReasoningEfforts: currentModel?.supportedReasoningEfforts ?? [],
       supportedInputModalities: currentModel?.inputModalities ?? ["text", "image"],
-      agentMode: AgentMode.getInitialAgentMode(),
+      agentMode: AgentMode.getInitialAgentMode(
+        availableAgentModes,
+        sessionMetadata.activePermissionProfileId
+      ),
+      availableAgentModes,
       collaborationMode: sessionMetadata.collaborationMode,
       currentTurnId: null,
       interruptTurnId: null,
@@ -51550,7 +51636,10 @@ You have been logged out. Please try again.`);
       this.publishAsyncTasksAsync(sessionState, sessionGeneration);
     }
     const sessionModelState = this.createModelState(models, currentModelId);
-    const sessionModeState = sessionState.agentMode.toSessionModeState(sessionState.clientCapabilities.airClient);
+    const sessionModeState = sessionState.agentMode.toSessionModeState(
+      sessionState.clientCapabilities.airClient,
+      sessionState.availableAgentModes
+    );
     return [sessionId, sessionModelState, sessionModeState];
   }
   /**
@@ -52747,7 +52836,7 @@ You have been logged out. Please try again.`);
     return params.value;
   }
   applyModeChange(sessionState, value) {
-    const newMode = AgentMode.find(value);
+    const newMode = AgentMode.find(value, sessionState.availableAgentModes);
     if (!newMode) {
       throw RequestError.invalidParams();
     }
@@ -53095,7 +53184,10 @@ You have been logged out. Please try again.`);
     const currentModel = this.findCurrentModel(sessionState.availableModels, sessionState.currentModelId);
     const recommendedModelId = useRecommendedValue ? sessionState.availableModels.find((model) => model.isDefault)?.id : void 0;
     const configOptions = [
-      sessionState.agentMode.toConfigOption(sessionState.clientCapabilities.airClient),
+      sessionState.agentMode.toConfigOption(
+        sessionState.clientCapabilities.airClient,
+        sessionState.availableAgentModes
+      ),
       createCollaborationModeConfigOption(sessionState.collaborationMode)
     ];
     if (sessionState.availableModels.length > 0) {
@@ -53305,13 +53397,22 @@ You have been logged out. Please try again.`);
     const sessionMcpServers = this.resolveSessionMcpServers(requestedMcpServers, true);
     const currentModel = this.findCurrentModel(models, currentModelId);
     const currentModelSupportsFast = modelSupportsFast(currentModel);
+    const availableAgentModes = AgentMode.all(
+      sessionMetadata.permissionProfiles,
+      sessionMetadata.approvalPolicy,
+      sessionMetadata.approvalsReviewer
+    );
     const sessionState = {
       sessionId,
       currentModelId,
       availableModels: models,
       supportedReasoningEfforts: currentModel?.supportedReasoningEfforts ?? [],
       supportedInputModalities: currentModel?.inputModalities ?? ["text", "image"],
-      agentMode: AgentMode.getInitialAgentMode(),
+      agentMode: AgentMode.getInitialAgentMode(
+        availableAgentModes,
+        sessionMetadata.activePermissionProfileId
+      ),
+      availableAgentModes,
       collaborationMode: sessionMetadata.collaborationMode,
       currentTurnId: null,
       interruptTurnId: null,
@@ -53370,7 +53471,10 @@ You have been logged out. Please try again.`);
     }
     await this.publishCurrentGoalBestEffort(sessionState, requestedSessionGeneration, true);
     const sessionModelState = this.createModelState(models, currentModelId);
-    const sessionModeState = sessionState.agentMode.toSessionModeState(sessionState.clientCapabilities.airClient);
+    const sessionModeState = sessionState.agentMode.toSessionModeState(
+      sessionState.clientCapabilities.airClient,
+      sessionState.availableAgentModes
+    );
     return {
       sessionId,
       modelState: sessionModelState,

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "2.5.1-preview.17",
+  "version": "2.5.1-preview.18",
   "description": "",
   "main": "dist/index.js",
   "bin": {