initial impl

codex/config.toml

@@ -0,0 +1,40 @@
+cli_auth_credentials_store = "file"
+approval_policy = "never"
+check_for_update_on_startup = false
+web_search = "disabled"
+default_permissions = "agentci-read"
+
+[shell_environment_policy]
+inherit = "core"
+exclude = ["*TOKEN*", "*SECRET*", "*KEY*", "AGENTCI_*", "GITEA_*"]
+
+[permissions.agentci-read]
+description = "Read a workflow repository without modifying it or using the network."
+
+[permissions.agentci-read.filesystem]
+":minimal" = "read"
+glob_scan_max_depth = 5
+
+[permissions.agentci-read.filesystem.":workspace_roots"]
+"." = "read"
+".git" = "read"
+"**/*.env" = "deny"
+
+[permissions.agentci-write]
+description = "Edit a workflow repository without changing Git metadata."
+
+[permissions.agentci-write.filesystem]
+":minimal" = "read"
+glob_scan_max_depth = 5
+
+[permissions.agentci-write.filesystem.":workspace_roots"]
+"." = "write"
+".git" = "read"
+"**/*.env" = "deny"
+
+[permissions.agentci-write.network]
+enabled = true
+allow_local_binding = false
+
+[permissions.agentci-write.network.domains]
+"*" = "allow"