chore: enable autonomous MCP tool execution
This commit is contained in:
@@ -23,6 +23,7 @@ workspace even when Codex cannot discover its Git metadata.
|
|||||||
The profile:
|
The profile:
|
||||||
|
|
||||||
- never pauses for approval
|
- never pauses for approval
|
||||||
|
- automatically permits configured Playwright and OpenAI documentation MCP tools
|
||||||
- limits filesystem access to minimal runtime files plus this project
|
- limits filesystem access to minimal runtime files plus this project
|
||||||
- allows writes in this project
|
- allows writes in this project
|
||||||
- keeps `.codex` and `www.azinstitute4autism.com` read-only
|
- keeps `.codex` and `www.azinstitute4autism.com` read-only
|
||||||
@@ -42,6 +43,21 @@ The profile is stored outside the workspace at:
|
|||||||
Do not add `--sandbox`; legacy sandbox flags override the custom permission
|
Do not add `--sandbox`; legacy sandbox flags override the custom permission
|
||||||
profile. Do not use `--dangerously-bypass-approvals-and-sandbox`.
|
profile. Do not use `--dangerously-bypass-approvals-and-sandbox`.
|
||||||
|
|
||||||
|
The launcher also applies these session overrides:
|
||||||
|
|
||||||
|
```txt
|
||||||
|
approval_policy="never"
|
||||||
|
mcp_servers.playwright.default_tools_approval_mode="auto"
|
||||||
|
mcp_servers.playwright.tool_timeout_sec=300
|
||||||
|
mcp_servers.openaiDeveloperDocs.default_tools_approval_mode="auto"
|
||||||
|
mcp_servers.openaiDeveloperDocs.tool_timeout_sec=300
|
||||||
|
```
|
||||||
|
|
||||||
|
These settings allow MCP tools to run without approval prompts and give
|
||||||
|
long-running browser operations up to five minutes. An MCP server may still
|
||||||
|
fail or time out. MCP elicitations that inherently require user input are
|
||||||
|
rejected rather than shown as unattended prompts.
|
||||||
|
|
||||||
## Verification
|
## Verification
|
||||||
|
|
||||||
The nested setup smoke test confirmed that the project is readable and
|
The nested setup smoke test confirmed that the project is readable and
|
||||||
@@ -79,3 +95,9 @@ Check the startup banner before assigning work. It should report:
|
|||||||
approval: never
|
approval: never
|
||||||
sandbox: workspace-write ... (network access enabled)
|
sandbox: workspace-write ... (network access enabled)
|
||||||
```
|
```
|
||||||
|
|
||||||
|
Then check the MCP configuration:
|
||||||
|
|
||||||
|
```txt
|
||||||
|
/mcp verbose
|
||||||
|
```
|
||||||
|
|||||||
@@ -11,5 +11,10 @@ fi
|
|||||||
exec codex \
|
exec codex \
|
||||||
--profile-v2 azi4a2-autonomous \
|
--profile-v2 azi4a2-autonomous \
|
||||||
--strict-config \
|
--strict-config \
|
||||||
|
--config 'approval_policy="never"' \
|
||||||
|
--config 'mcp_servers.playwright.default_tools_approval_mode="auto"' \
|
||||||
|
--config 'mcp_servers.playwright.tool_timeout_sec=300' \
|
||||||
|
--config 'mcp_servers.openaiDeveloperDocs.default_tools_approval_mode="auto"' \
|
||||||
|
--config 'mcp_servers.openaiDeveloperDocs.tool_timeout_sec=300' \
|
||||||
--cd "$repo_root" \
|
--cd "$repo_root" \
|
||||||
"$@"
|
"$@"
|
||||||
|
|||||||
Reference in New Issue
Block a user