Won Park 757c151a0e Add safer TUI defaults for cyber models (#37055) ...

## What changed

- Propagate the optional `modelSpecialty` field through the model catalog and
  app-server `model/list` response.
- When a newly selected model has the `cyber` specialty, default an active TUI
  thread to workspace-write permissions with on-request approval. Use auto
  review when available, otherwise keep the user as reviewer, while respecting
  configured permission requirements.
- Show a notice when auto review is applied and strengthen the full-access
  warning for cyber models.
- Preserve explicitly selected permissions when only reasoning settings change.

## Testing

- Cover auto-review defaults, requirement-aware fallback behavior, permission
  preservation across reasoning changes, and the new warning notice.

GitOrigin-RevId: 8f25b0082d3051d9ff91f7355921236d0f82f758

2026-08-05 08:04:15 +00:00

..

AccountLoginCompletedNotification.json

Expose onboarding hints in login completion notifications (#36635)

2026-08-02 21:01:04 +00:00

AccountRateLimitsUpdatedNotification.json

Support Enterprise automation account plans (#36228)

2026-07-30 21:49:53 +00:00

AccountUpdatedNotification.json

Support Enterprise automation account plans (#36228)

2026-07-30 21:49:53 +00:00

AgentMessageDeltaNotification.json

…

AppListUpdatedNotification.json

Remove first-party type from app metadata (#34844)

2026-07-22 23:45:45 +00:00

AppsInstalledParams.json

Add an API for reading installed app runtime state (#33843)

2026-07-17 15:23:35 +00:00

AppsInstalledResponse.json

Add an API for reading installed app runtime state (#33843)

2026-07-17 15:23:35 +00:00

AppsListParams.json

…

AppsListResponse.json

Remove first-party type from app metadata (#34844)

2026-07-22 23:45:45 +00:00

AppsReadParams.json

Add an app-server API for reading app metadata (#33651)

2026-07-16 17:46:36 +00:00

AppsReadResponse.json

Use batch metadata for plugin app summaries (#34851)

2026-07-23 01:00:35 +00:00

CancelLoginAccountParams.json

…

CancelLoginAccountResponse.json

…

CommandExecOutputDeltaNotification.json

…

CommandExecParams.json

app-server: use profile ids in v2 permission params (#23360)

2026-05-18 17:28:50 -07:00

CommandExecResizeParams.json

…

CommandExecResizeResponse.json

…

CommandExecResponse.json

…

CommandExecTerminateParams.json

…

CommandExecTerminateResponse.json

…

CommandExecutionOutputDeltaNotification.json

…

CommandExecWriteParams.json

…

CommandExecWriteResponse.json

…

ConfigBatchWriteParams.json

Keep session defaults static during config batch writes (#34940)

2026-07-23 13:11:16 +00:00

ConfigReadParams.json

fix(app-server): fix optional bool annotations (#24099)

2026-05-22 16:52:53 +00:00

ConfigReadResponse.json

[codex-rs] Add writes app approval mode (#30482)

2026-07-07 13:13:59 -04:00

ConfigRequirementsReadResponse.json

Expose Browser Use requirements through the app server (#35033)

2026-07-23 23:21:33 +00:00

ConfigValueWriteParams.json

…

ConfigWarningNotification.json

…

ConfigWriteResponse.json

Add cloud-managed config layer support (#24620)

2026-05-31 15:54:31 -07:00

ConsumeAccountRateLimitResetCreditParams.json

[app-server] Include reset-credit details in rate limits (#30395)

2026-07-06 12:54:06 -07:00

ConsumeAccountRateLimitResetCreditResponse.json

feat(app-server): expose rate-limit reset credits (#28143)

2026-06-15 21:54:01 +00:00

ContextCompactedNotification.json

…

DeprecationNoticeNotification.json

…

EnvironmentConnectionNotification.json

Report selected environment connection transitions (#33251)

2026-07-15 05:21:13 +00:00

ErrorNotification.json

[codex] rename rollout budget error to session budget error (#29744)

2026-06-23 16:49:13 -07:00

ExperimentalFeatureEnablementSetParams.json

…

ExperimentalFeatureEnablementSetResponse.json

…

ExperimentalFeatureListParams.json

feat(app-server): add optional thread_id to experimentalFeature/list (#23335)

2026-05-18 12:12:14 -07:00

ExperimentalFeatureListResponse.json

…

ExternalAgentConfigDetectParams.json

Make external session detection limits configurable (#34449)

2026-07-21 02:55:11 +00:00

ExternalAgentConfigDetectResponse.json

Expose connector candidates in external agent detection (#36218)

2026-07-30 20:58:06 +00:00

ExternalAgentConfigImportCompletedNotification.json

Include session titles in external agent import history (#35870)

2026-07-29 02:45:55 +00:00

ExternalAgentConfigImportHistoriesReadResponse.json

Include session titles in external agent import history (#35870)

2026-07-29 02:45:55 +00:00

ExternalAgentConfigImportHistoryRecordParams.json

Include session titles in external agent import history (#35870)

2026-07-29 02:45:55 +00:00

ExternalAgentConfigImportHistoryRecordResponse.json

Record externally completed agent config imports (#34981)

2026-07-23 17:55:22 +00:00

ExternalAgentConfigImportParams.json

Record externally completed agent config imports (#34981)

2026-07-23 17:55:22 +00:00

ExternalAgentConfigImportProgressNotification.json

Include session titles in external agent import history (#35870)

2026-07-29 02:45:55 +00:00

ExternalAgentConfigImportResponse.json

[codex] Add external agent import result accounting (#28008)

2026-06-15 13:25:42 -07:00

FeedbackUploadParams.json

fix(app-server): fix optional bool annotations (#24099)

2026-05-22 16:52:53 +00:00

FeedbackUploadResponse.json

…

FileChangeOutputDeltaNotification.json

Stop emitting item/fileChange/outputDelta output delta notifications (#20471)

2026-04-30 11:42:07 -07:00

FileChangePatchUpdatedNotification.json

…

FsChangedNotification.json

…

FsCopyParams.json

…

FsCopyResponse.json

…

FsCreateDirectoryParams.json

…

FsCreateDirectoryResponse.json

…

FsGetMetadataParams.json

…

FsGetMetadataResponse.json

…

FsReadDirectoryParams.json

…

FsReadDirectoryResponse.json

…

FsReadFileParams.json

…

FsReadFileResponse.json

…

FsRemoveParams.json

…

FsRemoveResponse.json

…

FsUnwatchParams.json

…

FsUnwatchResponse.json

…

FsWatchParams.json

…

FsWatchResponse.json

…

FsWriteFileParams.json

…

FsWriteFileResponse.json

…

GetAccountParams.json

fix(app-server): fix optional bool annotations (#24099)

2026-05-22 16:52:53 +00:00

GetAccountRateLimitsResponse.json

Support Enterprise automation account plans (#36228)

2026-07-30 21:49:53 +00:00

GetAccountResponse.json

Support Enterprise automation account plans (#36228)

2026-07-30 21:49:53 +00:00

GetAccountTokenUsageResponse.json

feat(app-server): expose account token usage [1 of 2] (#25344)

2026-06-05 14:43:44 +00:00

GetWorkspaceMessagesResponse.json

Add workspace messages app-server API (#29001)

2026-06-22 04:25:07 -07:00

GuardianWarningNotification.json

…

HookCompletedNotification.json

Add SessionEnd hooks for thread teardown (#33895)

2026-07-17 19:58:56 +00:00

HooksListParams.json

Add hooks/list app-server RPC (#19778)

2026-04-29 23:39:57 +00:00

HooksListResponse.json

Add configurable hook context spill limits (#34393)

2026-07-20 18:46:02 +00:00

HookStartedNotification.json

Add SessionEnd hooks for thread teardown (#33895)

2026-07-17 19:58:56 +00:00

ItemCompletedNotification.json

Preserve executor paths in read command actions (#36223)

2026-07-30 21:12:41 +00:00

ItemGuardianApprovalReviewCompletedNotification.json

Preserve special filesystem subpaths as wire strings (#33107)

2026-07-14 16:40:13 +00:00

ItemGuardianApprovalReviewStartedNotification.json

Preserve special filesystem subpaths as wire strings (#33107)

2026-07-14 16:40:13 +00:00

ItemStartedNotification.json

Preserve executor paths in read command actions (#36223)

2026-07-30 21:12:41 +00:00

ListMcpServerStatusParams.json

Use thread config for TUI MCP inventory (#24532)

2026-05-26 07:44:04 -07:00

ListMcpServerStatusResponse.json

Distinguish unknown MCP authentication status (#36045)

2026-07-29 23:24:43 +00:00

LoginAccountParams.json

feat: add managed Bedrock login API (#31327)

2026-07-09 17:05:37 -07:00

LoginAccountResponse.json

feat: add managed Bedrock login API (#31327)

2026-07-09 17:05:37 -07:00

LogoutAccountResponse.json

…

MarketplaceAddParams.json

…

MarketplaceAddResponse.json

…

MarketplaceRemoveParams.json

…

MarketplaceRemoveResponse.json

…

MarketplaceUpgradeParams.json

…

MarketplaceUpgradeResponse.json

…

McpResourceReadParams.json

…

McpResourceReadResponse.json

…

McpServerOauthLoginCompletedNotification.json

Support OAuth for HTTP MCP servers from selected executor plugins (#28529)

2026-06-25 10:31:17 +01:00

McpServerOauthLoginParams.json

Support OAuth for HTTP MCP servers from selected executor plugins (#28529)

2026-06-25 10:31:17 +01:00

McpServerOauthLoginResponse.json

…

McpServerRefreshResponse.json

…

McpServerStatusUpdatedNotification.json

[codex] Surface MCP reauthentication-required startup failures (#29877)

2026-06-25 21:50:36 +00:00

McpServerToolCallParams.json

…

McpServerToolCallResponse.json

…

McpToolCallProgressNotification.json

…

ModelListParams.json

…

ModelListResponse.json

Add safer TUI defaults for cyber models (#37055)

2026-08-05 08:04:15 +00:00

ModelProviderCapabilitiesReadParams.json

feat: expose provider capability bounds to app server clients (#20049)

2026-04-29 01:36:19 +00:00

ModelProviderCapabilitiesReadResponse.json

feat: expose provider capability bounds to app server clients (#20049)

2026-04-29 01:36:19 +00:00

ModelReroutedNotification.json

…

ModelSafetyBufferingUpdatedNotification.json

Propagate safety buffering treatment metadata (#29473)

2026-06-22 19:51:03 -07:00

ModelVerificationNotification.json

…

PermissionProfileListParams.json

feat: add permission profile list api (#23412)

2026-05-20 02:42:56 +00:00

PermissionProfileListResponse.json

permission profiles: expose availability to clients (#26678)

2026-06-22 13:48:09 -07:00

PlanDeltaNotification.json

…

PluginInstalledParams.json

[codex] Add installed-plugin mention API (#22448)

2026-05-18 03:11:54 -07:00

PluginInstalledResponse.json

Expose plugin installation timestamps in app-server summaries (#35859)

2026-07-29 01:16:29 +00:00

PluginInstallParams.json

…

PluginInstallResponse.json

[codex] Propagate plugin app categories (#27420)

2026-06-11 10:34:41 -07:00

PluginListParams.json

Accept forceRefetch in plugin list requests (#34573)

2026-07-21 16:30:17 +00:00

PluginListResponse.json

Expose plugin installation timestamps in app-server summaries (#35859)

2026-07-29 01:16:29 +00:00

PluginReadParams.json

…

PluginReadResponse.json

Expose plugin installation timestamps in app-server summaries (#35859)

2026-07-29 01:16:29 +00:00

PluginShareCheckoutParams.json

feat: Add plugin share checkout (#22435)

2026-05-13 00:50:29 -07:00

PluginShareCheckoutResponse.json

feat: Add plugin share checkout (#22435)

2026-05-13 00:50:29 -07:00

PluginShareDeleteParams.json

feat: Add workspace plugin sharing APIs (#20278)

2026-04-29 23:49:20 -07:00

PluginShareDeleteResponse.json

feat: Add workspace plugin sharing APIs (#20278)

2026-04-29 23:49:20 -07:00

PluginShareListParams.json

feat: Add workspace plugin sharing APIs (#20278)

2026-04-29 23:49:20 -07:00

PluginShareListResponse.json

Expose plugin installation timestamps in app-server summaries (#35859)

2026-07-29 01:16:29 +00:00

PluginShareSaveParams.json

feat: Add role-aware plugin share context APIs (#21867)

2026-05-08 20:46:39 -07:00

PluginShareSaveResponse.json

Expose workspace plugin publish capability (#35254)

2026-07-24 22:14:12 +00:00

PluginShareUpdateTargetsParams.json

Allow publishing plugins through share updates (#33908)

2026-07-17 21:29:51 +00:00

PluginShareUpdateTargetsResponse.json

feat: Add role-aware plugin share context APIs (#21867)

2026-05-08 20:46:39 -07:00

PluginSkillReadParams.json

Add remote plugin skill read API (#20150)

2026-05-01 00:16:25 -07:00

PluginSkillReadResponse.json

Add remote plugin skill read API (#20150)

2026-05-01 00:16:25 -07:00

PluginUninstallParams.json

…

PluginUninstallResponse.json

…

ProcessExitedNotification.json

[codex] Add unsandboxed process exec API (#19040)

2026-05-04 16:43:58 -07:00

ProcessOutputDeltaNotification.json

[codex] Add unsandboxed process exec API (#19040)

2026-05-04 16:43:58 -07:00

RawResponseCompletedNotification.json

Add cache-write tokens to the raw response schema (#33500)

2026-07-16 04:45:05 +00:00

RawResponseItemCompletedNotification.json

Support plaintext collaboration tool messages (#35845)

2026-07-28 23:49:37 +00:00

ReasoningSummaryPartAddedNotification.json

…

ReasoningSummaryTextDeltaNotification.json

…

ReasoningTextDeltaNotification.json

…

RemoteControlStatusChangedNotification.json

feat(app-server): update remote control APIs for better UX (#22877)

2026-05-15 14:33:24 -07:00

ReviewStartParams.json

…

ReviewStartResponse.json

Preserve executor paths in read command actions (#36223)

2026-07-30 21:12:41 +00:00

SendAddCreditsNudgeEmailParams.json

…

SendAddCreditsNudgeEmailResponse.json

…

ServerRequestResolvedNotification.json

…

SkillsChangedNotification.json

…

SkillsConfigWriteParams.json

…

SkillsConfigWriteResponse.json

…

SkillsExtraRootsSetParams.json

Add runtime extra skill roots API (#24977)

2026-05-28 21:14:34 -07:00

SkillsExtraRootsSetResponse.json

Add runtime extra skill roots API (#24977)

2026-05-28 21:14:34 -07:00

SkillsListParams.json

Remove skills list extra roots (#21485)

2026-05-07 20:56:42 -07:00

SkillsListResponse.json

Expose remote skill icon URLs through app server (#35012)

2026-07-23 21:06:37 +00:00

TerminalInteractionNotification.json

…

ThreadApproveGuardianDeniedActionParams.json

…

ThreadApproveGuardianDeniedActionResponse.json

…

ThreadArchivedNotification.json

…

ThreadArchiveParams.json

…

ThreadArchiveResponse.json

…

ThreadClosedNotification.json

…

ThreadCompactStartParams.json

…

ThreadCompactStartResponse.json

…

ThreadDeletedNotification.json

Add app-server thread/delete API (#25018)

2026-06-10 11:22:12 -07:00

ThreadDeleteParams.json

Add app-server thread/delete API (#25018)

2026-06-10 11:22:12 -07:00

ThreadDeleteResponse.json

Add app-server thread/delete API (#25018)

2026-06-10 11:22:12 -07:00

ThreadForkParams.json

Preserve namespaces on custom tool calls (#30302)

2026-06-27 09:54:56 -07:00

ThreadForkResponse.json

Preserve executor paths in read command actions (#36223)

2026-07-30 21:12:41 +00:00

ThreadGoalClearedNotification.json

…

ThreadGoalClearParams.json

Make goals feature on by default and no longer experimental (#23732)

2026-05-20 15:07:35 -07:00

ThreadGoalClearResponse.json

Make goals feature on by default and no longer experimental (#23732)

2026-05-20 15:07:35 -07:00

ThreadGoalGetParams.json

Make goals feature on by default and no longer experimental (#23732)

2026-05-20 15:07:35 -07:00

ThreadGoalGetResponse.json

Make goals feature on by default and no longer experimental (#23732)

2026-05-20 15:07:35 -07:00

ThreadGoalSetParams.json

Make goals feature on by default and no longer experimental (#23732)

2026-05-20 15:07:35 -07:00

ThreadGoalSetResponse.json

Make goals feature on by default and no longer experimental (#23732)

2026-05-20 15:07:35 -07:00

ThreadGoalUpdatedNotification.json

goal: pause continuation loops on usage limits and blockers (#23094)

2026-05-18 11:28:53 -07:00

ThreadInjectItemsParams.json

…

ThreadInjectItemsResponse.json

…

ThreadListParams.json

Add persisted manual ordering for thread sections (#36007)

2026-07-29 18:37:22 +00:00

ThreadListResponse.json

Preserve executor paths in read command actions (#36223)

2026-07-30 21:12:41 +00:00

ThreadLoadedListParams.json

…

ThreadLoadedListResponse.json

…

ThreadMetadataUpdateParams.json

Add persisted manual ordering for thread sections (#36007)

2026-07-29 18:37:22 +00:00

ThreadMetadataUpdateResponse.json

Preserve executor paths in read command actions (#36223)

2026-07-30 21:12:41 +00:00

ThreadNameUpdatedNotification.json

…

ThreadReadParams.json

fix(app-server): fix optional bool annotations (#24099)

2026-05-22 16:52:53 +00:00

ThreadReadResponse.json

Preserve executor paths in read command actions (#36223)

2026-07-30 21:12:41 +00:00

ThreadRealtimeClosedNotification.json

…

ThreadRealtimeErrorNotification.json

…

ThreadRealtimeItemAddedNotification.json

…

ThreadRealtimeOutputAudioDeltaNotification.json

…

ThreadRealtimeSdpNotification.json

…

ThreadRealtimeStartedNotification.json

Add Frameless Bidi support for realtime conversations (#33261)

2026-07-15 05:59:37 +00:00

ThreadRealtimeTranscriptDeltaNotification.json

…

ThreadRealtimeTranscriptDoneNotification.json

…

ThreadResumeParams.json

Support plaintext collaboration tool messages (#35845)

2026-07-28 23:49:37 +00:00

ThreadResumeResponse.json

Preserve executor paths in read command actions (#36223)

2026-07-30 21:12:41 +00:00

ThreadRollbackParams.json

chore(app-server): mark thread/rollback as deprecated (#29928)

2026-06-25 17:15:46 +00:00

ThreadRollbackResponse.json

Preserve executor paths in read command actions (#36223)

2026-07-30 21:12:41 +00:00

ThreadSectionCreateParams.json

Add thread section management APIs (#36380)

2026-07-31 19:08:45 +00:00

ThreadSectionCreateResponse.json

Add thread section management APIs (#36380)

2026-07-31 19:08:45 +00:00

ThreadSectionDeleteParams.json

Add thread section management APIs (#36380)

2026-07-31 19:08:45 +00:00

ThreadSectionDeleteResponse.json

Add thread section management APIs (#36380)

2026-07-31 19:08:45 +00:00

ThreadSectionListParams.json

Add persisted sections for organizing threads (#35722)

2026-07-28 05:26:16 +00:00

ThreadSectionListResponse.json

Add persisted sections for organizing threads (#35722)

2026-07-28 05:26:16 +00:00

ThreadSectionMoveParams.json

Add persisted manual ordering for thread sections (#36007)

2026-07-29 18:37:22 +00:00

ThreadSectionMoveResponse.json

Add persisted manual ordering for thread sections (#36007)

2026-07-29 18:37:22 +00:00

ThreadSectionUpdateParams.json

Add thread section management APIs (#36380)

2026-07-31 19:08:45 +00:00

ThreadSectionUpdateResponse.json

Add thread section management APIs (#36380)

2026-07-31 19:08:45 +00:00

ThreadSetNameParams.json

…

ThreadSetNameResponse.json

…

ThreadSettingsUpdatedNotification.json

[codex] Add configurable multi-agent mode hint text (#30493)

2026-07-02 18:44:34 -07:00

ThreadShellCommandParams.json

…

ThreadShellCommandResponse.json

…

ThreadStartedNotification.json

Preserve executor paths in read command actions (#36223)

2026-07-30 21:12:41 +00:00

ThreadStartParams.json

Scope runtime workspace roots to execution environments (#32952)

2026-07-14 04:41:08 +00:00

ThreadStartResponse.json

Preserve executor paths in read command actions (#36223)

2026-07-30 21:12:41 +00:00

ThreadStatusChangedNotification.json

…

ThreadTokenUsageUpdatedNotification.json

Track prompt cache write token usage (#33454)

2026-07-16 00:22:53 +00:00

ThreadUnarchivedNotification.json

…

ThreadUnarchiveParams.json

…

ThreadUnarchiveResponse.json

Preserve executor paths in read command actions (#36223)

2026-07-30 21:12:41 +00:00

ThreadUnsubscribeParams.json

…

ThreadUnsubscribeResponse.json

…

TurnCompletedNotification.json

Preserve executor paths in read command actions (#36223)

2026-07-30 21:12:41 +00:00

TurnDiffUpdatedNotification.json

…

TurnInterruptParams.json

…

TurnInterruptResponse.json

…

TurnModerationMetadataNotification.json

[codex] Forward turn moderation metadata through app-server (#25710)

2026-06-05 02:41:06 -07:00

TurnPlanUpdatedNotification.json

…

TurnStartedNotification.json

Preserve executor paths in read command actions (#36223)

2026-07-30 21:12:41 +00:00

TurnStartParams.json

Add audio variants to user input protocols (#33923)

2026-07-17 23:14:37 +00:00

TurnStartResponse.json

Preserve executor paths in read command actions (#36223)

2026-07-30 21:12:41 +00:00

TurnSteerParams.json

Add audio variants to user input protocols (#33923)

2026-07-17 23:14:37 +00:00

TurnSteerResponse.json

…

WarningNotification.json

…

WindowsSandboxReadinessResponse.json

Add Windows sandbox readiness RPC (#20708)

2026-05-05 09:58:23 -07:00

WindowsSandboxSetupCompletedNotification.json

…

WindowsSandboxSetupStartParams.json

…

WindowsSandboxSetupStartResponse.json

…

WindowsWorldWritableWarningNotification.json

…