revert #386 due to unsafe shell command parsing (#478)

Reverts https://github.com/openai/codex/pull/386 because:

* The parsing logic for shell commands was unsafe (`split(/\s+/)`
instead of something like `shell-quote`)
* We have a different plan for supporting auto-approved commands.

codex-cli/src/approvals.ts

@@ -4,7 +4,6 @@ import {
   identify_files_added,
   identify_files_needed,
 } from "./utils/agent/apply-patch";
-import { loadConfig } from "./utils/config";
 import * as path from "path";
 import { parse } from "shell-quote";
 
@@ -297,24 +296,6 @@ export function isSafeCommand(
 ): SafeCommandReason | null {
   const [cmd0, cmd1, cmd2, cmd3] = command;
 
-  const config = loadConfig();
-  if (config.safeCommands && Array.isArray(config.safeCommands)) {
-    for (const safe of config.safeCommands) {
-      // safe: "npm test" → ["npm", "test"]
-      const safeArr = typeof safe === "string" ? safe.trim().split(/\s+/) : [];
-      if (
-        safeArr.length > 0 &&
-        safeArr.length <= command.length &&
-        safeArr.every((v, i) => v === command[i])
-      ) {
-        return {
-          reason: "User-defined safe command",
-          group: "User config",
-        };
-      }
-    }
-  }
-
   switch (cmd0) {
     case "cd":
       return {

codex-cli/src/utils/config.ts

@@ -78,8 +78,6 @@ export type StoredConfig = {
     saveHistory?: boolean;
     sensitivePatterns?: Array<string>;
   };
-  /** User-defined safe commands */
-  safeCommands?: Array<string>;
 };
 
 // Minimal config written on first run.  An *empty* model string ensures that
@@ -113,8 +111,6 @@ export type AppConfig = {
     saveHistory: boolean;
     sensitivePatterns: Array<string>;
   };
-  /** User-defined safe commands */
-  safeCommands?: Array<string>;
 };
 
 // ---------------------------------------------------------------------------
@@ -297,7 +293,6 @@ export const loadConfig = (
     instructions: combinedInstructions,
     notify: storedConfig.notify === true,
     approvalMode: storedConfig.approvalMode,
-    safeCommands: storedConfig.safeCommands ?? [],
   };
 
   // -----------------------------------------------------------------------
@@ -375,13 +370,6 @@ export const loadConfig = (
     };
   }
 
-  // Load user-defined safe commands
-  if (Array.isArray(storedConfig.safeCommands)) {
-    config.safeCommands = storedConfig.safeCommands.map(String);
-  } else {
-    config.safeCommands = [];
-  }
-
   return config;
 };
 
@@ -425,10 +413,6 @@ export const saveConfig = (
       sensitivePatterns: config.history.sensitivePatterns,
     };
   }
-  // Save: User-defined safe commands
-  if (config.safeCommands && config.safeCommands.length > 0) {
-    configToSave.safeCommands = config.safeCommands;
-  }
 
   if (ext === ".yaml" || ext === ".yml") {
     writeFileSync(targetPath, dumpYaml(configToSave), "utf-8");