Add trust-all projects flag

Author: lee101

codex-rs/cli/src/main.rs

@@ -2455,6 +2455,7 @@ fn merge_interactive_cli_flags(interactive: &mut TuiCli, subcommand_cli: TuiCli)
         strict_config,
         approval_policy,
         web_search,
+        trust_all_projects,
         prompt,
         config_overrides,
         ..
@@ -2468,6 +2469,9 @@ fn merge_interactive_cli_flags(interactive: &mut TuiCli, subcommand_cli: TuiCli)
     if web_search {
         interactive.web_search = true;
     }
+    if trust_all_projects {
+        interactive.trust_all_projects = true;
+    }
     if strict_config {
         interactive.strict_config = true;
     }
@@ -3289,6 +3293,7 @@ mod tests {
                 "resume",
                 "sid",
                 "--oss",
+                "--trust-all-projects",
                 "--search",
                 "--sandbox",
                 "workspace-write",
@@ -3323,6 +3328,7 @@ mod tests {
             Some(std::path::Path::new("/tmp"))
         );
         assert!(interactive.web_search);
+        assert!(interactive.trust_all_projects);
         assert!(interactive.strict_config);
         let has_a = interactive
             .images

codex-rs/config/src/config_toml.rs

@@ -199,6 +199,9 @@ pub struct ConfigToml {
     /// Sandbox mode to use.
     pub sandbox_mode: Option<SandboxMode>,
 
+    /// Treat every project directory as trusted.
+    pub trust_all_projects: Option<bool>,
+
     /// Sandbox configuration to apply if `sandbox` is `WorkspaceWrite`.
     pub sandbox_workspace_write: Option<SandboxWorkspaceWrite>,
 
@@ -826,6 +829,12 @@ impl ConfigToml {
         resolved_cwd: &Path,
         repo_root: Option<&Path>,
     ) -> Option<ProjectConfig> {
+        if self.trust_all_projects.unwrap_or(false) {
+            return Some(ProjectConfig {
+                trust_level: Some(TrustLevel::Trusted),
+            });
+        }
+
         let projects = self.projects.as_ref()?;
 
         for normalized_cwd in normalized_project_lookup_keys(resolved_cwd) {
@@ -1018,4 +1027,15 @@ mod tests {
         assert!(message.contains("TOML list of strings"));
         assert!(message.contains("comma-separated strings are not supported"));
     }
+
+    #[test]
+    fn trust_all_projects_marks_any_directory_trusted() {
+        let config: ConfigToml = toml::from_str("trust_all_projects = true")
+            .expect("trust_all_projects should deserialize");
+        let active_project = config
+            .get_active_project(Path::new("/tmp/anything"), None)
+            .expect("trust_all_projects should always resolve an active project");
+
+        assert_eq!(active_project.trust_level, Some(TrustLevel::Trusted));
+    }
 }

codex-rs/core/config.schema.json

@@ -5398,6 +5398,10 @@
       ],
       "description": "Nested tools section for feature toggles"
     },
+    "trust_all_projects": {
+      "description": "Treat every project directory as trusted.",
+      "type": "boolean"
+    },
     "tui": {
       "allOf": [
         {
@@ -5426,4 +5430,4 @@
   },
   "title": "ConfigToml",
   "type": "object"
-}
+}

codex-rs/tui/src/cli.rs

@@ -65,6 +65,10 @@ pub struct Cli {
     #[arg(long = "search", default_value_t = false)]
     pub web_search: bool,
 
+    /// Trust every project directory and skip directory trust prompts.
+    #[arg(long = "trust-all-projects", default_value_t = false)]
+    pub trust_all_projects: bool,
+
     /// After each Codex response, automatically ask it to continue with the natural next steps.
     #[arg(long = "auto-next-steps", default_value_t = false)]
     pub auto_next_steps: bool,

codex-rs/tui/src/lib.rs

@@ -869,6 +869,11 @@ pub async fn run_main(
             .raw_overrides
             .push("web_search=\"live\"".to_string());
     }
+    if cli.trust_all_projects {
+        cli.config_overrides
+            .raw_overrides
+            .push("trust_all_projects=true".to_string());
+    }
 
     // When using `--oss`, let the bootstrapper pick the model (defaulting to
     // gpt-oss:20b) and ensure it is present locally. Also, force the built‑in