openai/codex · error · std::io::Error

requirements.toml default_permissions `{default_permissions}

Error message

requirements.toml default_permissions `{default_permissions}` must be allowed by allowed_permission_profiles

What it means

Error "requirements.toml default_permissions `{default_permissions}` must be allowed by allowed_permission_profiles" thrown in openai/codex.

Source

Thrown at codex-rs/core/src/config/mod.rs:4665

                format!(
                    "requirements.toml allowed_permission_profiles refers to undefined profile `{profile_id}`"
                ),
            ));
        }
    }

    let Some(default_permissions) = requirements_toml
        .default_permissions
        .as_deref()
        .or_else(|| implicit_default_permissions(allowed_permission_profiles))
    else {
        return Err(std::io::Error::new(
            ErrorKind::InvalidInput,
            "requirements.toml default_permissions must be set unless allowed_permission_profiles allows both `:workspace` and `:read-only`",
        ));
    };
    if !is_permission_allowed(allowed_permission_profiles, default_permissions) {
        return Err(std::io::Error::new(
            ErrorKind::InvalidInput,
            format!(
                "requirements.toml default_permissions `{default_permissions}` must be allowed by allowed_permission_profiles"
            ),
        ));
    }

    Ok(())
}

fn implicit_default_permissions(
    allowed_permission_profiles: &BTreeMap<String, bool>,
) -> Option<&'static str> {
    (is_permission_allowed(allowed_permission_profiles, BUILT_IN_WORKSPACE_PROFILE)
        && is_permission_allowed(allowed_permission_profiles, BUILT_IN_READ_ONLY_PROFILE))
    .then_some(BUILT_IN_WORKSPACE_PROFILE)
}

View on GitHub (pinned to 339751715c)

Solutions

1. Include the default_permissions value in allowed_permission_profiles.

When it happens

Trigger: Thrown at codex-rs/core/src/config/mod.rs:4665 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of openai/codex@339751715c (2026-08-25). Data as JSON: /api/errors/474b46c836fd2018. Report an issue: GitHub.