cazhang-oai 057d9140a8 Honor read-only MCP tool hints in automatic approval (#60638) ...

## Why

MCP tools marked with `readOnlyHint: true` could still require approval in automatic mode when `destructiveHint` was also true.

## What changed

Give `readOnlyHint` precedence over `destructiveHint` and `openWorldHint` when deciding whether annotations require approval. Explicit prompt mode and strict automatic review continue to require their respective approval checks.

## Testing

Update unit tests for conflicting annotations, prompt mode, and strict automatic review. Extend app integration coverage to verify that read-only calls proceed while writes prompt in both automatic and writes approval modes.

GitOrigin-RevId: 11a930b857886bf41d09fd54c3a38607ae3d1b4e

2026-11-10 18:33:19 +00:00

..

common

Honor permission grant scopes in executor capability discovery (#60461)

2026-11-09 22:20:07 +00:00

remote_env_windows

Bind capability roots to environment selections (#51493)

2026-10-06 22:39:32 +00:00

suite

Honor read-only MCP tool hints in automatic approval (#60638)

2026-11-10 18:33:19 +00:00

windows_sandbox

Respect filesystem permissions when discovering repository skills (#59280)

2026-11-04 01:15:38 +00:00

all.rs

…

code_mode_tracing.rs

Add code-mode output truncation protocol contracts (#57272)

2026-10-26 21:36:35 +00:00

mcp_trace_propagation.rs

Add negotiated network policy metadata support for MCP calls (#56278)

2026-10-22 22:33:07 +00:00

responses_headers.rs

Route response item IDs through a shared generator (#59312)

2026-11-04 04:02:00 +00:00

windows_sandbox.rs

Resolve workspace permissions at the sandbox launch boundary (#59530)

2026-11-05 00:30:20 +00:00