codex

mirror of https://github.com/openai/codex.git synced 2026-10-28 18:58:46 +00:00

Files

T

Charlie Marsh 3047741b63 Preserve acknowledged permissions when resuming and forking threads (#57227 )

## Why

A running turn can record stale permissions after the thread accepts a settings update. Resuming or forking from that history should preserve the accepted approval and permission settings.

## What changed

- Prefer settings snapshots owned by the source thread over stale turn contexts, including later legacy updates associated with that thread's checkpoint.
- Restore unnamed permission profiles from attributable settings updates while honoring explicit request overrides. Avoid restoring raw permission grants from history without an identifiable owner.
- Share permission restoration logic between resume and fork.

## Testing

Add regression coverage for stale turn contexts, legacy updates across thread ownership boundaries, and unnamed permission restoration on resume and fork.

GitOrigin-RevId: 450bc1688be78c7ec685f6dc56bcc5e5dd2d130a

2026-10-26 20:17:38 +00:00

mcp_resource

Use PathUri for skill identity and path matching (#51482 )

2026-10-06 21:29:35 +00:00

snapshots

Add experimental thread/sample requests to the app server (#55339 )

2026-10-19 18:25:07 +00:00

account_enterprise_tests.rs

Preserve safe enterprise MCP authentication error details (#56153 )

2026-10-22 11:51:23 +00:00

account_gcp.rs

Add a built-in Google Cloud Vertex AI provider (#56265 )

2026-10-22 21:01:14 +00:00

account_system_proxy_tests.rs

Apply shared network policy throughout embedded Codex startup (#47411 )

2026-09-23 00:49:19 +00:00

account_thread_usage.rs

Enforce application network policy across app-server requests (#47407 )

2026-09-23 00:47:07 +00:00

account.rs

Add support for Academic Researchers plans (#55387 )

2026-10-19 21:43:19 +00:00

agent_message_board.rs

Align message-board tools with the multi-agent namespace (#47028 )

2026-09-21 13:27:39 +00:00

analytics.rs

Expose lifecycle timestamps on app-server thread items (#57172 )

2026-10-26 18:13:00 +00:00

app_installed.rs

Add support for Academic Researchers plans (#55387 )

2026-10-19 21:43:19 +00:00

app_list.rs

Upgrade rmcp to 3.5.1 and harden lifecycle tests (#52972 )

2026-10-10 19:43:24 +00:00

app_read.rs

Preserve account network policy for ChatGPT backend requests (#47703 )

2026-09-24 00:50:02 +00:00

application_network.rs

Enforce application network policy across app-server requests (#47407 )

2026-09-23 00:47:07 +00:00

attached_thread_tests.rs

Add experimental attached thread forks (#56351 )

2026-10-23 04:52:47 +00:00

attestation.rs

Fix attestation routing during thread startup (#47912 )

2026-09-24 18:38:00 +00:00

auth_storage_originator_tests.rs

Track credential storage outcomes and redact sensitive errors (#49384 )

2026-09-29 22:24:09 +00:00

auto_env.rs

test: add delayed exec-server transport (#31427 )

2026-07-09 00:17:38 +00:00

bedrock_gov_cloud_tests.rs

Add an advisory Bedrock GovCloud requirements check (#49817 )

2026-10-01 02:06:05 +00:00

bedrock_service_tier_tests.rs

Advertise Ultrafast for GPT-6.1 Sol on Amazon Bedrock (#51794 )

2026-10-07 18:32:50 +00:00

bedrock_setup.rs

Add AWS credential export commands for Amazon Bedrock (#44028 )

2026-09-09 03:17:48 +00:00

client_metadata.rs

Add Responses API client metadata patches for turn start and steer (#54053 )

2026-10-14 17:39:43 +00:00

code_mode_host.rs

Finish idle thread unloads after slow shutdown (#51420 )

2026-10-06 17:10:19 +00:00

collaboration_mode_list.rs

test: migrate TestAppServer callers to builder (#31451 )

2026-07-08 00:15:49 +00:00

command_exec.rs

Make apply_patch preserve line endings unconditionally (#51203 )

2026-10-05 23:52:06 +00:00

compaction.rs

Expose lifecycle timestamps on app-server thread items (#57172 )

2026-10-26 18:13:00 +00:00

config_model_provider_requirements_tests.rs

Enforce managed model provider selection and definitions (#44650 )

2026-09-10 21:41:39 +00:00

config_requirements_application.rs

Add managed Desktop workspace storage requirements (#55965 )

2026-10-21 19:06:57 +00:00

config_requirements_browser_use_tests.rs

Enforce Fast and Ultra Fast policies independently (#51253 )

2026-10-06 03:35:55 +00:00

config_requirements_desktop.rs

Add managed Desktop workspace storage requirements (#55965 )

2026-10-21 19:06:57 +00:00

config_requirements_exec_tests.rs

Expose lifecycle timestamps on app-server thread items (#57172 )

2026-10-26 18:13:00 +00:00

config_requirements_in_app_browser.rs

Enforce Fast and Ultra Fast policies independently (#51253 )

2026-10-06 03:35:55 +00:00

config_requirements_login.rs

Enforce Fast and Ultra Fast policies independently (#51253 )

2026-10-06 03:35:55 +00:00

config_rpc.rs

Add managed network review domains before allow rules (#56154 )

2026-10-22 11:52:34 +00:00

config_server_tests.rs

Integrate config-server policies with startup and authentication (#57175 )

2026-10-26 18:14:57 +00:00

connection_handling_stdio_tests.rs

Bound app-server stdio shutdown and handle Unix SIGTERM gracefully (#44523 )

2026-09-10 13:02:57 +00:00

connection_handling_websocket_compression_tests.rs

Gate app-server WebSocket compression behind a feature flag (#54949 )

2026-10-17 23:34:04 +00:00

connection_handling_websocket_unix.rs

Explain session creation failures during server shutdown (#52721 )

2026-10-09 23:16:46 +00:00

connection_handling_websocket.rs

Track credential storage outcomes and redact sensitive errors (#49384 )

2026-09-29 22:24:09 +00:00

critical_path_analytics_tests.rs

Report turn critical-path timing in analytics (#57209 )

2026-10-26 19:35:31 +00:00

curated_mcp_sync.rs

Use descriptor-safe helpers for executable test fixtures (#50018 )

2026-10-01 15:57:03 +00:00

current_time.rs

Tag current time reminders in model context (#38443 )

2026-08-13 21:53:52 +00:00

cyber_access_program.rs

Decouple API-key cyber access programs from model discovery (#49714 )

2026-09-30 19:21:02 +00:00

daemon_update_recovery.rs

Restore thread-owned permissions on cold resume (#53150 )

2026-10-11 15:48:35 +00:00

daybreak_access.rs

Expose lifecycle timestamps on app-server thread items (#57172 )

2026-10-26 18:13:00 +00:00

dynamic_tools.rs

Expose lifecycle timestamps on app-server thread items (#57172 )

2026-10-26 18:13:00 +00:00

environment_add.rs

Defer environment disconnect notifications until recovery fails (#55401 )

2026-10-19 22:55:42 +00:00

environment_info.rs

Support request IDs in exec-server WebSocket handshakes (#52234 )

2026-10-08 19:13:52 +00:00

environment_status.rs

Support request IDs in exec-server WebSocket handshakes (#52234 )

2026-10-08 19:13:52 +00:00

exec_server_test_support.rs

[app-server] expose environment info RPC (#30291 )

2026-06-27 19:34:10 +00:00

executor_mcp.rs

Upgrade rmcp to 3.5.1 and harden lifecycle tests (#52972 )

2026-10-10 19:43:24 +00:00

executor_skills_spawn_tests.rs

Preserve subagent capabilities independently of forked history (#52241 )

2026-10-08 19:21:57 +00:00

executor_skills.rs

Suppress warnings when skill descriptions are shortened (#46070 )

2026-09-17 01:28:24 +00:00

experimental_api.rs

Forward client voice session IDs in realtime requests (#53784 )

2026-10-13 22:21:31 +00:00

experimental_feature_list.rs

Keep global app-server config independent of the launch directory (#51872 )

2026-10-07 23:19:26 +00:00

external_agent_config.rs

Expose lifecycle timestamps on app-server thread items (#57172 )

2026-10-26 18:13:00 +00:00

external_agent_import_sync.rs

Expose lifecycle timestamps on app-server thread items (#57172 )

2026-10-26 18:13:00 +00:00

external_agent_memory_concurrency.rs

Prevent memory imports from racing with consolidation (#56462 )

2026-10-23 12:23:10 +00:00

feedback.rs

Route SQLite logs to an explicitly configured log_dir (#55978 )

2026-10-21 19:53:00 +00:00

frozen_cloud_skills.rs

Add frozen cloud skill snapshots to the app server (#55631 )

2026-10-20 17:01:52 +00:00

fs.rs

test: migrate TestAppServer callers to builder (#31451 )

2026-07-08 00:15:49 +00:00

gateway_oauth_tests.rs

Reload the model catalog after account changes (#54169 )

2026-10-15 03:06:16 +00:00

git_attribution.rs

Remove the deprecated thread/rollback API (#44915 )

2026-09-11 21:32:04 +00:00

guardian_action_budget_tests.rs

Preserve complete actions in Guardian approval reviews (#44569 )

2026-09-10 16:01:02 +00:00

guardian_code_mode_tests.rs

Make Code Mode wrappers transparent to Guardian model policies (#45915 )

2026-09-16 10:11:26 +00:00

guardian_goal_tests.rs

Persist explicit user goal edits in model history (#49598 )

2026-09-30 11:58:03 +00:00

guardian_pending_score_tests.rs

Use conversations for all Guardian v2 async classification (#56556 )

2026-10-23 18:48:10 +00:00

guardian_policy_tests.rs

Scope model catalog caches to the current provider and auth identity (#43906 )

2026-09-08 20:37:30 +00:00

guardian_stateful_async_tests.rs

Use conversations for all Guardian v2 async classification (#56556 )

2026-10-23 18:48:10 +00:00

guardian_sync_session_tests.rs

Forward Guardian reviewer events to parent raw-event subscribers (#56124 )

2026-10-22 09:20:00 +00:00

guardian_v2_history_tests.rs

Preserve independent Guardian history across parent compaction (#48779 )

2026-09-27 20:15:23 +00:00

guardian_v2_model_tests.rs

Use conversations for all Guardian v2 async classification (#56556 )

2026-10-23 18:48:10 +00:00

guardian_v2.rs

Expose lifecycle timestamps on app-server thread items (#57172 )

2026-10-26 18:13:00 +00:00

history_notes_extension.rs

Track content provenance through prompt assembly and compaction (#53831 )

2026-10-14 02:01:49 +00:00

hooks_list.rs

Include environment hooks in thread hook listings (#56553 )

2026-10-23 18:39:28 +00:00

host_skills.rs

Refresh host skill catalogs through world state (#33425 )

2026-07-15 20:59:21 +00:00

imagegen_extension.rs

Expose lifecycle timestamps on app-server thread items (#57172 )

2026-10-26 18:13:00 +00:00

initialize.rs

Add explicit gateway OAuth sign-in to app-server (#47207 )

2026-09-22 06:36:09 +00:00

luna_reserve.rs

Extend rate limit reads with usage capabilities (#42358 )

2026-09-02 21:01:04 +00:00

marketplace_add.rs

Handle @ in local marketplace paths (#34959 )

2026-07-23 15:32:36 +00:00

marketplace_remove.rs

Keep global app-server config independent of the launch directory (#51872 )

2026-10-07 23:19:26 +00:00

marketplace_upgrade.rs

Clean up failed and abandoned marketplace staging directories (#55689 )

2026-10-20 22:25:54 +00:00

mcp_connection_sharing.rs

Share eligible local stdio MCP connections across chats (#57211 )

2026-10-26 19:37:32 +00:00

mcp_event_stream.rs

Add app-server MCP event streaming (#39761 )

2026-08-20 17:49:35 +00:00

mcp_protocol_default.rs

Give hosted Codex Apps an independent MCP protocol opt-in (#44318 )

2026-09-09 22:22:08 +00:00

mcp_resource_origin.rs

Add explicit app and account targets to MCP resource reads (#47248 )

2026-09-22 10:42:50 +00:00

mcp_resource.rs

Reuse current model context across paginated resume config loading (#56224 )

2026-10-22 17:15:06 +00:00

mcp_server_elicitation.rs

Upgrade rmcp to 3.5.1 and harden lifecycle tests (#52972 )

2026-10-10 19:43:24 +00:00

mcp_server_status.rs

Upgrade rmcp to 3.5.1 and harden lifecycle tests (#52972 )

2026-10-10 19:43:24 +00:00

mcp_tool.rs

Expose lifecycle timestamps on app-server thread items (#57172 )

2026-10-26 18:13:00 +00:00

memory_read.rs

Add experimental thread memory summary reads (#56465 )

2026-10-23 12:35:58 +00:00

memory_reset.rs

Support memory v2 in external-agent memory imports (#56414 )

2026-10-23 09:06:13 +00:00

misalignment_policy.rs

Preserve review targets and scope misalignment continuation metadata (#51217 )

2026-10-06 01:26:11 +00:00

mod.rs

Share eligible local stdio MCP connections across chats (#57211 )

2026-10-26 19:37:32 +00:00

model_auto_review.rs

Restore permission profiles when resuming threads (#39153 )

2026-08-18 06:22:04 +00:00

model_list_requirements_tests.rs

Allow configuring GCP project and location in provider settings (#56560 )

2026-10-23 18:50:54 +00:00

model_list.rs

Reload the model catalog after account changes (#54169 )

2026-10-15 03:06:16 +00:00

model_provider_capabilities_read.rs

Remove the provider capability gate for tool namespaces (#50447 )

2026-10-02 22:55:08 +00:00

model_provider_enforcement_tests.rs

Apply shared network policy throughout embedded Codex startup (#47411 )

2026-09-23 00:49:19 +00:00

multi_agent_v2_developer_instructions.rs

Preserve parent history by default in full agent forks (#55548 )

2026-10-20 11:56:17 +00:00

otel.rs

Honor custom OTLP metrics exporters when analytics is disabled (#52278 )

2026-10-08 21:18:24 +00:00

output_schema.rs

Simplify app-server integration test setup (#34786 )

2026-07-22 16:30:12 +00:00

permission_profile_list.rs

Resolve permission profiles with explicit execution-host path context (#44676 )

2026-09-11 00:03:40 +00:00

plan_item.rs

Expose lifecycle timestamps on app-server thread items (#57172 )

2026-10-26 18:13:00 +00:00

plugin_install.rs

Enable app routing for remote curated Agent Plugins (#55667 )

2026-10-20 20:27:32 +00:00

plugin_list.rs

Include environment hooks in thread hook listings (#56553 )

2026-10-23 18:39:28 +00:00

plugin_manifest_cache.rs

Cache parsed plugin manifests across plugin workflows (#49099 )

2026-09-28 23:32:45 +00:00

plugin_read.rs

Add configurable default plugin activation policy (#52220 )

2026-10-08 18:42:58 +00:00

plugin_reconcile.rs

Record active plugin inventory in turn analytics (#46323 )

2026-09-17 23:47:06 +00:00

plugin_search.rs

Replace Sites migration state with a runtime compatibility guard (#46108 )

2026-09-17 04:23:45 +00:00

plugin_share.rs

Remove plugin extension metadata from discovery and summaries (#48035 )

2026-09-25 08:25:37 +00:00

plugin_uninstall.rs

Run plugin app-server tests in automatic environments (#38189 )

2026-08-12 13:33:01 +00:00

process_exec.rs

Launch Linux pipe processes through a fresh setup helper (#47612 )

2026-09-23 18:25:07 +00:00

projects.rs

Add experimental attached thread forks (#56351 )

2026-10-23 04:52:47 +00:00

rate_limit_reset_credits.rs

Expose selected workspace routing in app-server account reads (#45529 )

2026-09-14 22:31:32 +00:00

rate_limits_identity_tests.rs

Enforce application network policy across app-server requests (#47407 )

2026-09-23 00:47:07 +00:00

rate_limits.rs

Add support for Academic Researchers plans (#55387 )

2026-10-19 21:43:19 +00:00

realtime_conversation.rs

Expose lifecycle timestamps on app-server thread items (#57172 )

2026-10-26 18:13:00 +00:00

realtime_transcript_tests.rs

Preserve recent speech when trimming realtime transcripts (#54257 )

2026-10-15 10:46:59 +00:00

recommended_plugins.rs

Wait for login completion in recommended plugin tests (#47828 )

2026-09-24 12:26:05 +00:00

remote_control_auth.rs

Enforce application network policy across app-server requests (#47407 )

2026-09-23 00:47:07 +00:00

remote_control.rs

Persist remote-control RPC preferences in managed daemon settings (#52304 )

2026-10-08 22:42:12 +00:00

remote_thread_store.rs

Add experimental attached thread forks (#56351 )

2026-10-23 04:52:47 +00:00

request_permissions.rs

Bind permission grants to the originating turn (#49880 )

2026-10-01 05:33:36 +00:00

request_user_input.rs

Retire the untrusted approval policy (#39630 )

2026-08-20 07:03:02 +00:00

request_validation.rs

Refactor image content to use a shared ImageReference type (#45543 )

2026-09-14 23:25:09 +00:00

residency.rs

Scope model catalog caches to the current provider and auth identity (#43906 )

2026-09-08 20:37:30 +00:00

review.rs

Expose lifecycle timestamps on app-server thread items (#57172 )

2026-10-26 18:13:00 +00:00

rollout_compress_tests.rs

Fix session lookup and resume after rollout compression (#54008 )

2026-10-14 15:22:02 +00:00

rollout_migration.rs

Expose experimental durable thread read state in the app server (#52350 )

2026-10-09 01:22:30 +00:00

safety_check_downgrade.rs

Expose lifecycle timestamps on app-server thread items (#57172 )

2026-10-26 18:13:00 +00:00

selected_capability_stack.rs

Restrict capability roots to captured turn environments (#49280 )

2026-09-29 15:10:17 +00:00

selected_environment.rs

Harden unsandboxed patch filesystem access (#39659 )

2026-08-20 08:10:08 +00:00

server_diagnostics.rs

Keep app-server thread RPCs active until delegated work completes (#43950 )

2026-09-09 00:25:02 +00:00

session_end.rs

Bound app-server stdio shutdown and handle Unix SIGTERM gracefully (#44523 )

2026-09-10 13:02:57 +00:00

skills_list.rs

Use PathUri for skill identity and path matching (#51482 )

2026-10-06 21:29:35 +00:00

sleep.rs

Expose lifecycle timestamps on app-server thread items (#57172 )

2026-10-26 18:13:00 +00:00

sqlite_recovery.rs

Add experimental attached thread forks (#56351 )

2026-10-23 04:52:47 +00:00

thread_archive.rs

Expose experimental durable thread read state in the app server (#52350 )

2026-10-09 01:22:30 +00:00

thread_attachments.rs

Add attachment owner lookup to the app-server (#50094 )

2026-10-01 20:47:05 +00:00

thread_delete.rs

Subscribe authors to message-board channels created by posting (#47259 )

2026-09-22 11:10:53 +00:00

thread_environments.rs

Expose loaded thread environments in app-server responses (#42386 )

2026-09-02 23:41:14 +00:00

thread_fork_multi_agent_tests.rs

Scope model catalog caches to the current provider and auth identity (#43906 )

2026-09-08 20:37:30 +00:00

thread_fork.rs

Preserve acknowledged permissions when resuming and forking threads (#57227 )

2026-10-26 20:17:38 +00:00

thread_goal_empty_responses.rs

Include environment hooks in thread hook listings (#56553 )

2026-10-23 18:39:28 +00:00

thread_inject_items.rs

Add optional names to untrusted additional context (#57181 )

2026-10-26 18:23:07 +00:00

thread_list.rs

Add experimental attached thread forks (#56351 )

2026-10-23 04:52:47 +00:00

thread_loaded_list.rs

Simplify app-server integration test setup (#34786 )

2026-07-22 16:30:12 +00:00

thread_memory_mode_set.rs

Honor the configured SQLite home across state consumers (#34994 )

2026-07-23 19:19:35 +00:00

thread_metadata_update.rs

Add experimental attached thread forks (#56351 )

2026-10-23 04:52:47 +00:00

thread_name_persistence.rs

Persist empty paginated threads when naming them (#49785 )

2026-10-01 00:57:29 +00:00

thread_name_websocket.rs

Restore app-server websocket listener with auth guard (#22404 )

2026-05-12 18:40:53 -07:00

thread_queue.rs

Expose lifecycle timestamps on app-server thread items (#57172 )

2026-10-26 18:13:00 +00:00

thread_read_state.rs

Add experimental app-server thread read-state updates (#52395 )

2026-10-09 03:42:19 +00:00

thread_read.rs

Expose lifecycle timestamps on app-server thread items (#57172 )

2026-10-26 18:13:00 +00:00

thread_resume_network_tests.rs

Add regression coverage for network grants on cold thread resume (#53424 )

2026-10-12 16:49:29 +00:00

thread_resume.rs

Preserve acknowledged permissions when resuming and forking threads (#57227 )

2026-10-26 20:17:38 +00:00

thread_revert.rs

Preserve thread model settings across resume and revert (#55923 )

2026-10-21 15:34:43 +00:00

thread_sample.rs

Include environment hooks in thread hook listings (#56553 )

2026-10-23 18:39:28 +00:00

thread_sections.rs

Add appearance metadata to thread sections (#37898 )

2026-08-10 23:32:42 +00:00

thread_settings_update.rs

Preserve thread model settings across resume and revert (#55923 )

2026-10-21 15:34:43 +00:00

thread_shell_command.rs

Expose lifecycle timestamps on app-server thread items (#57172 )

2026-10-26 18:13:00 +00:00

thread_start.rs

Add GPT-6.1 Sol to Bedrock catalogs and make it the default (#49339 )

2026-09-29 18:50:36 +00:00

thread_status.rs

Add explicit gateway OAuth sign-in to app-server (#47207 )

2026-09-22 06:36:09 +00:00

thread_timeline.rs

Expose lifecycle timestamps on app-server thread items (#57172 )

2026-10-26 18:13:00 +00:00

thread_unarchive.rs

Add experimental attached thread forks (#56351 )

2026-10-23 04:52:47 +00:00

thread_unload.rs

Finish idle thread unloads after slow shutdown (#51420 )

2026-10-06 17:10:19 +00:00

thread_unsubscribe.rs

Expose lifecycle timestamps on app-server thread items (#57172 )

2026-10-26 18:13:00 +00:00

turn_cost_otel.rs

Apply shared network policy throughout embedded Codex startup (#47411 )

2026-09-23 00:49:19 +00:00

turn_interrupt.rs

Avoid cloning turn items for app-server active turn lookups (#46305 )

2026-09-17 21:25:34 +00:00

turn_settings_update.rs

Remove retired model entries while preserving migration prompts (#44250 )

2026-09-09 17:56:33 +00:00

turn_start.rs

Add optional names to untrusted additional context (#57181 )

2026-10-26 18:23:07 +00:00

turn_steer.rs

Add optional names to untrusted additional context (#57181 )

2026-10-26 18:23:07 +00:00

user_verification_mcp.rs

Upgrade rmcp to 3.5.1 and harden lifecycle tests (#52972 )

2026-10-10 19:43:24 +00:00

user_verification.rs

Add cancellation for native user-verification RPCs (#43925 )

2026-09-08 21:48:53 +00:00

view_image.rs

Expose lifecycle timestamps on app-server thread items (#57172 )

2026-10-26 18:13:00 +00:00

web_search.rs

Expose lifecycle timestamps on app-server thread items (#57172 )

2026-10-26 18:13:00 +00:00

windows_sandbox_setup.rs

Allow full-access Windows setup to provision through registered Core (#47922 )

2026-09-24 19:29:53 +00:00

workspace_routing.rs

Add managed Desktop workspace storage requirements (#55965 )

2026-10-21 19:06:57 +00:00