Charlie Marsh 80f469ce8a Serialize manual network approval prompts per endpoint (#58351) ...

## Why

Concurrent executions accessing the same endpoint can produce duplicate network approval prompts before a session decision is recorded.

## What changed

- Queue manual prompts by environment, host, protocol, and port while keeping execution decisions separate.
- After a one-time approval or denial, let the next execution prompt. Reuse committed session grants and deny rules without another prompt.
- Keep tool results paused while requests are queued and attribute the wait to the triggering tool call.

## Testing

Extend coverage for concurrent requests, one-time and session decisions, independent ports, queued cancellation and timing, and isolation between local and remote environments.

GitOrigin-RevId: ebf580dddc39a9a9dc3b0d1acfa21438fbc6e100

2026-10-30 14:40:59 +00:00

..

context_snapshot

Add an optional JSON transcript format for Guardian (#51465)

2026-10-06 19:30:57 +00:00

apps_test_server.rs

Pin the Rust toolchain to 1.95.0 (#57373)

2026-10-27 05:52:01 +00:00

BUILD.bazel

Unify context snapshots and group requests into windows (#44932)

2026-09-11 22:55:38 +00:00

Cargo.toml

Persist subagent relationships before creating child storage (#58129)

2026-10-29 17:25:51 +00:00

code_mode_host.rs

Add opt-in gRPC over stdio for the code-mode host (#52723)

2026-10-09 23:26:34 +00:00

context_snapshot.rs

Add opt-in Guardian trust for orchestrator connector identities (#52250)

2026-10-08 20:04:38 +00:00

exec_server.rs

Gate capability discovery V2 on executor version (#57192)

2026-10-26 19:03:08 +00:00

hooks.rs

Add keyed shell environment policy filters (#34590)

2026-07-21 18:23:26 +00:00

lib.rs

Add host-reserved V2 child creation APIs (#57586)

2026-10-27 23:02:27 +00:00

process.rs

Add opt-in protocol discovery for local stdio MCP servers (#57210)

2026-10-26 19:37:06 +00:00

responses.rs

Allow upstream interruption when canceling Responses Lite turns (#57864)

2026-10-29 00:03:28 +00:00

startup_tests.rs

Harden core test fixture startup assertions (#41194)

2026-08-27 19:58:09 +00:00

startup.rs

Harden core test fixture startup assertions (#41194)

2026-08-27 19:58:09 +00:00

streaming_sse.rs

Preserve Guardian parent response IDs across sampling requests (#45441)

2026-09-14 15:13:13 +00:00

test_codex_exec.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

test_codex.rs

Persist subagent relationships before creating child storage (#58129)

2026-10-29 17:25:51 +00:00

test_environment_tests.rs

test: branch on target OS instead of runner flavor (#29712)

2026-06-23 14:27:13 -07:00

test_environment.rs

test: branch on target OS instead of runner flavor (#29712)

2026-06-23 14:27:13 -07:00

tracing.rs

Serialize manual network approval prompts per endpoint (#58351)

2026-10-30 14:40:59 +00:00