Skip to main content

no-mixed-permission-models

Disallow mixing named permission profiles with legacy sandbox settings that take precedence.

Rule catalog ID: R013

Targeted pattern scope​

  • **/.codex/config.toml
  • standalone *.config.toml profiles where applicable

What this rule reports​

  • Named permissions and legacy sandbox settings do not compose; sandbox_mode or sandbox_workspace_write takes precedence. Choose one permission model.

Why this rule exists​

Disallow mixing named permission profiles with legacy sandbox settings that take precedence.

❌ Incorrect​

A file in the targeted scope that produces any diagnostic listed above is incorrect for this rule.

✅ Correct​

A file is correct when it uses the documented Codex structure and produces no diagnostic from this rule.

Behavior and migration notes​

Included in:

  • codex.configs.recommended
  • codex.configs.strict
  • codex.configs.all

ESLint flat config example​

The preset layers supply the correct Markdown, TOML, or JSON language configuration. Override the rule only in a later matching flat-config entry:

import codex from "@typpi/eslint-plugin-codex";

export default [
 ...codex.configs.recommended,
 {
  rules: { "codex/no-mixed-permission-models": "error" },
 },
];

Further reading​