chore: enable autonomous MCP tool execution

This commit is contained in:
2026-06-07 10:45:10 -07:00
parent d8a0016dba
commit f3d3562cec
2 changed files with 27 additions and 0 deletions
+22
View File
@@ -23,6 +23,7 @@ workspace even when Codex cannot discover its Git metadata.
The profile: The profile:
- never pauses for approval - never pauses for approval
- automatically permits configured Playwright and OpenAI documentation MCP tools
- limits filesystem access to minimal runtime files plus this project - limits filesystem access to minimal runtime files plus this project
- allows writes in this project - allows writes in this project
- keeps `.codex` and `www.azinstitute4autism.com` read-only - keeps `.codex` and `www.azinstitute4autism.com` read-only
@@ -42,6 +43,21 @@ The profile is stored outside the workspace at:
Do not add `--sandbox`; legacy sandbox flags override the custom permission Do not add `--sandbox`; legacy sandbox flags override the custom permission
profile. Do not use `--dangerously-bypass-approvals-and-sandbox`. profile. Do not use `--dangerously-bypass-approvals-and-sandbox`.
The launcher also applies these session overrides:
```txt
approval_policy="never"
mcp_servers.playwright.default_tools_approval_mode="auto"
mcp_servers.playwright.tool_timeout_sec=300
mcp_servers.openaiDeveloperDocs.default_tools_approval_mode="auto"
mcp_servers.openaiDeveloperDocs.tool_timeout_sec=300
```
These settings allow MCP tools to run without approval prompts and give
long-running browser operations up to five minutes. An MCP server may still
fail or time out. MCP elicitations that inherently require user input are
rejected rather than shown as unattended prompts.
## Verification ## Verification
The nested setup smoke test confirmed that the project is readable and The nested setup smoke test confirmed that the project is readable and
@@ -79,3 +95,9 @@ Check the startup banner before assigning work. It should report:
approval: never approval: never
sandbox: workspace-write ... (network access enabled) sandbox: workspace-write ... (network access enabled)
``` ```
Then check the MCP configuration:
```txt
/mcp verbose
```
+5
View File
@@ -11,5 +11,10 @@ fi
exec codex \ exec codex \
--profile-v2 azi4a2-autonomous \ --profile-v2 azi4a2-autonomous \
--strict-config \ --strict-config \
--config 'approval_policy="never"' \
--config 'mcp_servers.playwright.default_tools_approval_mode="auto"' \
--config 'mcp_servers.playwright.tool_timeout_sec=300' \
--config 'mcp_servers.openaiDeveloperDocs.default_tools_approval_mode="auto"' \
--config 'mcp_servers.openaiDeveloperDocs.tool_timeout_sec=300' \
--cd "$repo_root" \ --cd "$repo_root" \
"$@" "$@"