Allow permission profiles to extend multiple profiles

Open 💬 0 comments Opened Jul 31, 2026 by TyceHerrman

What variant of Codex are you using?

app

What feature would you like to see?

Problem

Permission profiles currently support only one parent:

extends = "profile-a"

This limits reuse when a profile needs permissions from several independent profiles. Users must duplicate rules or create artificial inheritance chains.

Proposal

Allow extends to accept an array:

extends = ["profile-a", "profile-b"]

The existing scalar syntax should remain supported.

The implementation should define:

  • merge order and conflict handling;
  • recursive inheritance;
  • cycle detection; and
  • duplicate-parent behavior.

An alternative would be a separate composition field such as:

includes = ["profile-a", "profile-b"]

Related work

  • #22270 introduced single-parent profile inheritance.
  • #23705 applied inherited profiles at runtime.
  • #13496 demonstrates additive permission composition internally for skills.

This would make permission profiles more modular and avoid maintaining separate profiles for every combination of permissions.

Additional information

_No response_

View original on GitHub ↗