{"record":{"id":"8c65b7825691005b","repo":"openai/codex","slug":"default-permissions-refers-to-unknown-built-in-pro","errorCode":null,"errorMessage":"default_permissions refers to unknown built-in profile `{profile_name}`","messagePattern":"default_permissions refers to unknown built-in profile `(.+?)`","errorType":"validation","errorClass":"io::Error","httpStatus":null,"severity":"error","filePath":"codex-rs/core/src/config/permissions.rs","lineNumber":467,"sourceCode":"        policy_cwd,\n    ))\n}\n\nfn compile_workspace_roots(\n    workspace_roots: Option<&WorkspaceRootsToml>,\n    policy_cwd: &Path,\n) -> Vec<AbsolutePathBuf> {\n    workspace_roots.map_or_else(Vec::new, |workspace_roots| {\n        workspace_roots\n            .enabled_roots()\n            .map(|path| AbsolutePathBuf::resolve_path_against_base(path, policy_cwd))\n            .collect()\n    })\n}\n\npub(crate) fn reject_unknown_builtin_permission_profile(profile_name: &str) -> io::Result<()> {\n    if profile_name.starts_with(':') {\n        return Err(io::Error::new(\n            io::ErrorKind::InvalidInput,\n            format!(\"default_permissions refers to unknown built-in profile `{profile_name}`\"),\n        ));\n    }\n\n    Ok(())\n}\n\n/// Returns a list of paths that must be readable by shell tools in order\n/// for Codex to function. These should always be added to the\n/// `FileSystemSandboxPolicy` for a thread.\npub(crate) fn get_readable_roots_required_for_codex_runtime(\n    codex_home: &Path,\n    zsh_path: Option<&PathBuf>,\n    main_execve_wrapper_exe: Option<&PathBuf>,\n) -> Vec<AbsolutePathBuf> {\n    let arg0_root = AbsolutePathBuf::from_absolute_path(codex_home.join(\"tmp\").join(\"arg0\")).ok();\n    let zsh_path = zsh_path.and_then(|path| AbsolutePathBuf::from_absolute_path(path).ok());","sourceCodeStart":449,"sourceCodeEnd":485,"githubUrl":"https://github.com/openai/codex/blob/339751715c64496cb86246bfb3935f40e309dd3d/codex-rs/core/src/config/permissions.rs#L449-L485","documentation":"Error \"default_permissions refers to unknown built-in profile `{profile_name}`\" thrown in openai/codex.","triggerScenarios":"Thrown at codex-rs/core/src/config/permissions.rs:467 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Reference a valid built-in profile name in default_permissions."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"339751715c64496cb86246bfb3935f40e309dd3d","analyzedAt":"2026-08-25T05:35:09.876Z","schemaVersion":2},"datasetVersion":"2026-08-25T06:17:31.827Z"}