Greg Brisebois 4bc746c94f Include tool names and annotation hints in MCP approval metadata (#58161) ...

## What changed

Include `tool_name` in MCP tool approval elicitation metadata and forward available `readOnlyHint`, `destructiveHint`, `idempotentHint`, and `openWorldHint` values under `tool_annotations`. Omit unspecified hints and the annotation title.

Reuse the stored tool approval metadata when available so annotation hints reach the approval request.

## Testing

Extend unit tests to cover tool names, annotation hints, and omission of unspecified hints. Update integration coverage to verify that the approval tool name matches the executed MCP call and that `readOnlyHint` is preserved.

GitOrigin-RevId: f082fe7fd87fde9f4895149e09210c7cb9d1e582

2026-10-29 19:34:46 +00:00

..

skills_extension

Add an option to omit descriptions from skill catalogs (#57500)

2026-10-27 16:16:17 +00:00

snapshots

Support negotiated server-side truncation in Code Mode clients (#58125)

2026-10-29 16:57:12 +00:00

step_settings

Add configured thread environment inheritance for subagents (#55375)

2026-10-19 20:30:44 +00:00

abort_lifecycle.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

abort_tasks.rs

Allow root turn suspension with live descendants (#54414)

2026-10-15 20:57:39 +00:00

additional_context.rs

Record additional context counts, sizes, and truncation metrics (#58144)

2026-10-29 18:24:34 +00:00

agent_control_tests.rs

Add host-reserved V2 child creation APIs (#57586)

2026-10-27 23:02:27 +00:00

agent_eviction_tests.rs

Add direct replies for thread settings updates (#47937)

2026-09-24 20:59:51 +00:00

agent_execution.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

agent_mailbox.rs

Add lifecycle hooks for inter-agent messages (#55657)

2026-10-20 19:39:43 +00:00

agent_message_wake.rs

Make agent-message wakes respect interrupts and Plan mode (#56330)

2026-10-23 02:21:49 +00:00

agent_websocket.rs

Preserve tool declaration mode across resumed context windows (#51480)

2026-10-06 21:28:13 +00:00

agents_md_refresh.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

agents_md.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

app_tool_exposure_strict_tests.rs

Keep third-party tools deferred in strict Code Mode Only (#50687)

2026-10-03 18:15:13 +00:00

app_tool_exposure.rs

Keep third-party tools deferred in strict Code Mode Only (#50687)

2026-10-03 18:15:13 +00:00

apply_patch_cli.rs

Bind capability roots to environment selections (#51493)

2026-10-06 22:39:32 +00:00

apply_patch_serialization.rs

Standardize shell execution on unified exec (#39757)

2026-08-20 17:46:05 +00:00

apply_patch_system_aliases.rs

Protect metadata writes through macOS case aliases (#54273)

2026-10-15 12:01:04 +00:00

approvals.rs

Support catalog headings for saved command-prefix notices (#57599)

2026-10-27 23:53:34 +00:00

audio_truncation.rs

Unify turn input submission and routing (#38275)

2026-08-13 00:00:16 +00:00

auth_recovery_policy.rs

Enforce application network policy across app-server requests (#47407)

2026-09-23 00:47:07 +00:00

auto_review.rs

Attribute approval waits to tool critical-path timing (#57207)

2026-10-26 19:28:51 +00:00

base_instructions.rs

Refresh model instructions in incremental-tool context windows (#53872)

2026-10-14 05:36:44 +00:00

bedrock_multi_agent_tests.rs

Enable multi-agent V2 and Ultra reasoning on Amazon Bedrock (#49345)

2026-09-29 19:03:30 +00:00

bedrock_service_tier_tests.rs

Advertise Ultrafast for GPT-6.1 Sol on Amazon Bedrock (#51794)

2026-10-07 18:32:50 +00:00

builtin_model_catalog.rs

Allow catalog URL overrides for the built-in OpenAI provider (#57567)

2026-10-27 21:50:08 +00:00

canonical_plugin_connectors.rs

Honor canonical plugin disables for shared connectors (#45755)

2026-09-15 18:23:08 +00:00

catalog_permission_messages.rs

Allow model catalogs to customize approval instruction headings (#57581)

2026-10-27 22:26:12 +00:00

cli_stream.rs

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

client_websockets_runtime_auth.rs

Share runtime authentication with model providers and catalogs (#57607)

2026-10-28 00:51:29 +00:00

client_websockets.rs

Add a credential file override for GCP provider authentication (#57188)

2026-10-26 18:33:05 +00:00

client.rs

Preserve reasoning token accounting across resume and fork (#57839)

2026-10-28 21:22:06 +00:00

cloud_config.rs

Require managed configuration from the configured server (#56055)

2026-10-22 02:15:00 +00:00

code_mode_agent_message_tests.rs

Treat code-mode collaboration messages as plaintext (#55633)

2026-10-20 17:15:35 +00:00

code_mode_dynamic_tools_tests.rs

Allow dynamic tool calls to execute in parallel (#54654)

2026-10-16 16:28:53 +00:00

code_mode_elicitation.rs

Unify turn input submission and routing (#38275)

2026-08-13 00:00:16 +00:00

code_mode_host_recovery_tests.rs

Restrict code-mode host replacement to session admission (#57782)

2026-10-28 16:46:41 +00:00

code_mode_model_messages.rs

Support model-catalog overrides for Code Mode tool messages (#47118)

2026-09-21 22:49:17 +00:00

code_mode.rs

Add a feature flag for code-mode host output truncation (#58159)

2026-10-29 19:29:05 +00:00

codex_apps_protocol.rs

Share Apps tool catalogs without retaining unused snapshots (#45440)

2026-09-14 15:06:28 +00:00

codex_delegate.rs

Preserve MCP tool output as content items (#40737)

2026-08-25 23:42:50 +00:00

collaboration_instructions.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

command_lifecycle_tests.rs

Add a command-start callback for tool lifecycle extensions (#46539)

2026-09-19 00:46:06 +00:00

compact_program_tests.rs

Enable Cyber access programs for API-key sessions by default (#53717)

2026-10-13 16:57:54 +00:00

compact_remote_trimming.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

compact_remote.rs

Add a built-in Google Cloud Vertex AI provider (#56265)

2026-10-22 21:01:14 +00:00

compact_resume_fork.rs

Remove the long-thread accuracy warning after compaction (#55355)

2026-10-19 19:24:26 +00:00

compact.rs

Preserve reasoning token accounting across resume and fork (#57839)

2026-10-28 21:22:06 +00:00

context_annotations.rs

Allow advisory rollout budgets with optional limit enforcement (#57187)

2026-10-26 18:31:49 +00:00

critical_path_runtime.rs

Capture direct-tool critical paths behind a feature flag (#57201)

2026-10-26 19:19:10 +00:00

current_time_reminder.rs

Make environment context date and timezone configurable (#52164)

2026-10-08 16:27:10 +00:00

cyber_access_program.rs

Expose and persist turn lineage across the app server (#51415)

2026-10-06 16:56:39 +00:00

cyber_exec_policy.rs

Support catalog headings for saved command-prefix notices (#57599)

2026-10-27 23:53:34 +00:00

daybreak_access.rs

Move the exec-server test fixture into shared test support (#52674)

2026-10-09 18:58:53 +00:00

deprecation_notice.rs

Remove the patched zsh shell execution backend (#52160)

2026-10-08 16:19:09 +00:00

direct_tool_metadata.rs

Track history initialization in Responses turn metadata (#52325)

2026-10-08 23:34:16 +00:00

dynamic_tool_cancellation.rs

Record truncation metrics for accepted Guardian review inputs (#53628)

2026-10-13 10:21:42 +00:00

exec_policy.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

exec.rs

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

executor_discovery_v2.rs

Add an option to omit descriptions from skill catalogs (#57500)

2026-10-27 16:16:17 +00:00

extension_sandbox.rs

Store generated image items as attachment references (#54398)

2026-10-15 19:51:22 +00:00

external_auth.rs

Use descriptor-safe helpers for executable test fixtures (#50018)

2026-10-01 15:57:03 +00:00

fork_thread.rs

Box session metadata and compaction payloads in RolloutItem (#55733)

2026-10-21 02:41:05 +00:00

gateway_auth.rs

Default gateway OAuth delivery to Authorization bearer tokens (#57313)

2026-10-27 00:08:07 +00:00

gcp.rs

Add GPT-6.1 Terra to model catalogs (#57293)

2026-10-26 22:13:14 +00:00

git_enrichment.rs

Expose and persist turn lineage across the app server (#51415)

2026-10-06 16:56:39 +00:00

guardian_authorization_refresh.rs

Box session metadata and compaction payloads in RolloutItem (#55733)

2026-10-21 02:41:05 +00:00

guardian_authorization.rs

Box session metadata and compaction payloads in RolloutItem (#55733)

2026-10-21 02:41:05 +00:00

guardian_cached_score_tests.rs

Use serving assessments for adaptive Guardian review (#58075)

2026-10-29 12:54:39 +00:00

guardian_checkpoint_migration_tests.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

guardian_connector_trust.rs

Run environment hooks on their owning executors (#56343)

2026-10-23 04:01:39 +00:00

guardian_context_budget.rs

Share the Guardian context delivery token limit (#58071)

2026-10-29 12:37:59 +00:00

guardian_cyber_access_program_tests.rs

Forward per-turn Cyber access programs to Guardian (#52689)

2026-10-09 20:14:04 +00:00

guardian_environments_tests.rs

Add an option to omit descriptions from skill catalogs (#57500)

2026-10-27 16:16:17 +00:00

guardian_heartbeat_authorization.rs

Remove obsolete Guardian thread-context enables from tests (#51184)

2026-10-05 22:17:02 +00:00

guardian_history.rs

Deduplicate native agent messages in Guardian review context (#55391)

2026-10-19 22:01:41 +00:00

guardian_mcp_elicitation.rs

Measure Guardian approval blocking time per turn (#55591)

2026-10-20 14:43:08 +00:00

guardian_pending_root_delivery.rs

Refresh Guardian reviews when review context changes (#53797)

2026-10-13 23:29:53 +00:00

guardian_persistence_tests.rs

Load persisted sender context for Guardian reviews (#51734)

2026-10-07 15:47:21 +00:00

guardian_retained_context.rs

Track content provenance through prompt assembly and compaction (#53831)

2026-10-14 02:01:49 +00:00

guardian_retry.rs

Expose lifecycle timestamps on app-server thread items (#57172)

2026-10-26 18:13:00 +00:00

guardian_review_cancellation.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

guardian_review.rs

Refresh the model catalog once when Guardian's default reviewer is missing (#57789)

2026-10-28 17:04:31 +00:00

guardian_root_handoff.rs

Fix guardian handoff mocks for native history tests (#57468)

2026-10-27 14:28:15 +00:00

guardian_sandbox_retry.rs

Add regression coverage for Guardian sandbox retry approvals (#54265)

2026-10-15 11:24:07 +00:00

guardian_sender_messages_tests.rs

Capture sender context for codex_app.create_thread deliveries (#54590)

2026-10-16 12:37:14 +00:00

guardian_subagent_authorization.rs

Respect model catalog origins when selecting Guardian reviewers (#57770)

2026-10-28 16:00:30 +00:00

guardian_subagent_notification_tests.rs

Notify parent agents when Guardian stops a subagent (#49312)

2026-09-29 16:53:11 +00:00

hooks_cwd_tests.rs

Preserve command cwd in permission and post-tool hooks (#57203)

2026-10-26 19:21:08 +00:00

hooks_executor.rs

Include environment hooks in thread hook listings (#56553)

2026-10-23 18:39:28 +00:00

hooks_mcp.rs

Start dormant MCP servers for hook calls (#55263)

2026-10-19 11:40:15 +00:00

hooks_plugin_policy_refresh.rs

Apply session plugin overrides during MCP config refresh (#57974)

2026-10-29 03:14:13 +00:00

hooks.rs

Use serving assessments for adaptive Guardian review (#58075)

2026-10-29 12:54:39 +00:00

image_rollout.rs

Replace unavailable image references in model requests (#57585)

2026-10-27 22:59:22 +00:00

injected_models_cache.rs

Scope model catalog caches to the current provider and auth identity (#43906)

2026-09-08 20:37:30 +00:00

interrupt_hooks.rs

Add hooks for interrupted turns (#40511)

2026-08-25 01:27:18 +00:00

items.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

json_result.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

live_cli.rs

…

managed_threads_tests.rs

Add local diagnostic ZIP exports to the app server (#55940)

2026-10-21 16:43:30 +00:00

mcp_auth_elicitation.rs

Expose and persist turn lineage across the app server (#51415)

2026-10-06 16:56:39 +00:00

mcp_auth_refresh.rs

Add negotiated network policy metadata support for MCP calls (#56278)

2026-10-22 22:33:07 +00:00

mcp_ema_config.rs

Restrict enterprise MCP auth and fail closed on config refresh (#49260)

2026-09-29 13:08:37 +00:00

mcp_executor_context_tests.rs

Apply session plugin overrides during MCP config refresh (#57974)

2026-10-29 03:14:13 +00:00

mcp_extension_protocol.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

mcp_oauth_refresh_tests.rs

Retire rejected MCP OAuth refresh tokens (#54079)

2026-10-14 20:00:52 +00:00

mcp_optional_startup_grace.rs

Restrict enterprise MCP auth and fail closed on config refresh (#49260)

2026-09-29 13:08:37 +00:00

mcp_refresh_cleanup.rs

Upgrade Windows bindings to windows-sys 0.61.2 (#50058)

2026-10-01 18:05:05 +00:00

mcp_sandbox_tests.rs

Separate MCP sandbox policy from launcher metadata (#53709)

2026-10-13 16:23:44 +00:00

mcp_startup_refresh_http_proxy.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

mcp_storage_telemetry_tests.rs

Box session metadata and compaction payloads in RolloutItem (#55733)

2026-10-21 02:41:05 +00:00

mcp_subagent_elicitation.rs

Signal abandonment of unanswered MCP elicitations (#51611)

2026-10-07 07:57:14 +00:00

mcp_tool_cache.rs

Support Apps tool catalogs without shared snapshots (#57572)

2026-10-27 22:01:13 +00:00

mcp_tool_exposure.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

mcp_turn_metadata.rs

Include tool names and annotation hints in MCP approval metadata (#58161)

2026-10-29 19:34:46 +00:00

mcp_user_verification.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

mod.rs

Allow catalog URL overrides for the built-in OpenAI provider (#57567)

2026-10-27 21:50:08 +00:00

model_overrides.rs

…

model_provider_requirements_tests.rs

Remove the patched zsh shell execution backend (#52160)

2026-10-08 16:19:09 +00:00

model_request.rs

Allow upstream interruption when canceling Responses Lite turns (#57864)

2026-10-29 00:03:28 +00:00

model_runtime_selectors.rs

Unify turn input submission and routing (#38275)

2026-08-13 00:00:16 +00:00

model_switching.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

model_visible_layout.rs

Add an option to omit descriptions from skill catalogs (#57500)

2026-10-27 16:16:17 +00:00

models_cache_auth.rs

Preserve model catalog caches across header credential rotation (#54946)

2026-10-17 23:22:14 +00:00

models_cache_ttl.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

models_etag_responses.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

multi_agent_mode.rs

Source proactive multi-agent instructions from the model catalog (#41457)

2026-08-29 03:28:19 +00:00

multi_agent_restore_tests.rs

Reuse unchanged history snapshots when resuming threads (#49600)

2026-09-30 11:59:13 +00:00

multi_agent_resume.rs

Record initialization analytics for resumed subagents (#51206)

2026-10-06 00:16:18 +00:00

multi_agent_tool_descriptions.rs

Support model-specific descriptions for agent message board tools (#47670)

2026-09-23 21:34:11 +00:00

multi_exec_server_sandbox.rs

Move the exec-server test fixture into shared test support (#52674)

2026-10-09 18:58:53 +00:00

network_approval_completion.rs

Include environment hooks in thread hook listings (#56553)

2026-10-23 18:39:28 +00:00

network_approval.rs

Support network_proxy in managed requirements (#57286)

2026-10-26 22:05:00 +00:00

openai_file_mcp.rs

Format all Rust sources and clean up repository checks (#57314)

2026-10-27 00:23:39 +00:00

otel.rs

Add an option to disable successful SSE delta logs (#58034)

2026-10-29 10:34:17 +00:00

output_token_replay.rs

Add opt-in output token replay for OpenAI requests (#52742)

2026-10-10 01:25:00 +00:00

override_updates.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

pending_input_persistence.rs

Keep spawned children provisional until the spawn result returns (#53654)

2026-10-13 12:42:53 +00:00

pending_input.rs

Allow upstream interruption when canceling Responses Lite turns (#57864)

2026-10-29 00:03:28 +00:00

permissions_messages.rs

Allow model catalogs to customize approval instruction headings (#57581)

2026-10-27 22:26:12 +00:00

personality.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

plugins.rs

Add an option to omit descriptions from skill catalogs (#57500)

2026-10-27 16:16:17 +00:00

prompt_cache_key.rs

Allow callers to control prompt cache keys independently of session IDs (#55587)

2026-10-20 14:14:59 +00:00

prompt_caching.rs

Respect model catalog origins when selecting Guardian reviewers (#57770)

2026-10-28 16:00:30 +00:00

prompt_debug_tests.rs

Add opt-in output token replay for OpenAI requests (#52742)

2026-10-10 01:25:00 +00:00

quota_exceeded.rs

Fix retry classification for throttling and quota errors (#45602)

2026-09-15 04:20:38 +00:00

realtime_attachment.rs

Forward client voice session IDs in realtime requests (#53784)

2026-10-13 22:21:31 +00:00

realtime_conversation.rs

Detach realtime sideband observers without ending the session (#57817)

2026-10-28 20:10:15 +00:00

realtime_initial_items.rs

Forward client voice session IDs in realtime requests (#53784)

2026-10-13 22:21:31 +00:00

realtime_misalignment.rs

Forward client voice session IDs in realtime requests (#53784)

2026-10-13 22:21:31 +00:00

realtime_sideband_endpoint.rs

Forward client voice session IDs in realtime requests (#53784)

2026-10-13 22:21:31 +00:00

realtime_system_proxy.rs

Forward client voice session IDs in realtime requests (#53784)

2026-10-13 22:21:31 +00:00

reasoning_effort_override.rs

Enable reasoning effort overrides by default (#56163)

2026-10-22 12:46:24 +00:00

remote_env_capability_roots_tests.rs

Box session metadata and compaction payloads in RolloutItem (#55733)

2026-10-21 02:41:05 +00:00

remote_env_failure_tests.rs

Retry transient environment startup failures on the next turn (#57866)

2026-10-29 00:42:21 +00:00

remote_env_required_skills_tests.rs

Add an option to omit descriptions from skill catalogs (#57500)

2026-10-27 16:16:17 +00:00

remote_env_spawn_tests.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

remote_env.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

remote_models.rs

Preserve provider model catalogs when refreshes fail (#55958)

2026-10-21 18:43:15 +00:00

request_compression.rs

Unify turn input submission and routing (#38275)

2026-08-13 00:00:16 +00:00

request_permissions_tool.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

request_permissions.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

request_plugin_install.rs

Avoid unnecessary connector directory work for tool suggestions (#57257)

2026-10-26 21:08:15 +00:00

request_user_input_async.rs

Honor the user input setting for asynchronous questions (#51908)

2026-10-08 02:06:58 +00:00

request_user_input.rs

Account for token usage from incomplete responses (#53670)

2026-10-13 13:36:24 +00:00

responses_api_proxy_headers.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

responses_lite.rs

Enable incremental tools by default for Responses Lite (#55368)

2026-10-19 20:01:37 +00:00

responses_system_proxy.rs

Expose system proxy support as an experimental setting (#58157)

2026-10-29 19:16:28 +00:00

resume_warning.rs

Remove obsolete fields from persisted turn context (#51492)

2026-10-06 22:39:06 +00:00

resume.rs

Support store-owned preparation when resuming threads (#54059)

2026-10-14 18:02:25 +00:00

retry_after.rs

Distinguish policy-restricted capacity failures from server overloads (#57452)

2026-10-27 13:31:38 +00:00

review.rs

Add opt-in output token replay for OpenAI requests (#52742)

2026-10-10 01:25:00 +00:00

rmcp_client.rs

Add an option to omit descriptions from skill catalogs (#57500)

2026-10-27 16:16:17 +00:00

rollout_budget.rs

Allow advisory rollout budgets with optional limit enforcement (#57187)

2026-10-26 18:31:49 +00:00

rollout_compression.rs

Reuse unchanged history snapshots when resuming threads (#49600)

2026-09-30 11:59:13 +00:00

rollout_list_find.rs

…

safety_buffering.rs

Unify turn input submission and routing (#38275)

2026-08-13 00:00:16 +00:00

safety_check_downgrade.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

scenarios_agent_eviction_tests.rs

Add configured thread environment inheritance for subagents (#55375)

2026-10-19 20:30:44 +00:00

scenarios_agent_message_board_remote.rs

Expose message board permissions and structured denials (#52568)

2026-10-09 13:15:39 +00:00

scenarios_agent_message_board.rs

Defer agent mail after empty final answers (#56133)

2026-10-22 10:03:05 +00:00

scenarios_catalog_approval_instructions_tests.rs

Allow model catalogs to customize approval instruction headings (#57581)

2026-10-27 22:26:12 +00:00

scenarios_code_mode_settled_helpers_tests.rs

Add promise settlement streaming helpers to code mode (#51126)

2026-10-05 16:58:29 +00:00

scenarios_compaction_tests.rs

Add scenario coverage for remote /compact context preservation (#50516)

2026-10-03 04:24:52 +00:00

scenarios_content_filter.rs

Add recovery guidance to content-filter retries (#49119)

2026-09-29 01:14:41 +00:00

scenarios_context_management_tools.rs

Apply model catalog overrides to history, notes, and context tools (#56313)

2026-10-23 00:46:28 +00:00

scenarios_credential_masking.rs

Mark built-in dummy credentials and strengthen collision checks (#56297)

2026-10-22 23:48:20 +00:00

scenarios_dynamic_tools.rs

Allow replacing dynamic tools between model steps (#57553)

2026-10-27 19:50:41 +00:00

scenarios_frozen_cloud_skills.rs

Add an option to omit descriptions from skill catalogs (#57500)

2026-10-27 16:16:17 +00:00

scenarios_guardian_agent_messages_tests.rs

Preserve native tool-call evidence through Guardian review (#58040)

2026-10-29 11:15:52 +00:00

scenarios_guardian_conversation_history_tests.rs

Restrict enterprise MCP auth and fail closed on config refresh (#49260)

2026-09-29 13:08:37 +00:00

scenarios_guardian_direct_review.rs

Add direct Guardian review of recorded exec calls (#58028)

2026-10-29 09:48:55 +00:00

scenarios_guardian_extra_policy.rs

Add an optional JSON transcript format for Guardian (#51465)

2026-10-06 19:30:57 +00:00

scenarios_guardian_handoff.rs

Preserve native multi-agent calls in Guardian review history (#57448)

2026-10-27 13:02:57 +00:00

scenarios_guardian_heartbeat.rs

Enable instant interrupts by default (#51812)

2026-10-07 19:42:35 +00:00

scenarios_guardian_orchestrator_connector.rs

Use conversations for all Guardian v2 async classification (#56556)

2026-10-23 18:48:10 +00:00

scenarios_guardian_sender_context.rs

Load persisted sender context for Guardian reviews (#51734)

2026-10-07 15:47:21 +00:00

scenarios_incremental_tools_resume.rs

Emit one developer notice per incremental namespace update batch (#52295)

2026-10-08 22:01:24 +00:00

scenarios_incremental_tools.rs

Preserve parent tool declarations in prediction forks (#57287)

2026-10-26 22:05:23 +00:00

scenarios_indirect_namespace_prefixes.rs

Support model-specific function description prefixes (#51930)

2026-10-08 03:20:54 +00:00

scenarios_mailbox_preemption_tests.rs

Drain WebSocket responses on mailbox preemption (#55969)

2026-10-21 19:29:08 +00:00

scenarios_managed_human_approval_tests.rs

Add managed command checkpoints requiring fresh human approval (#58045)

2026-10-29 11:23:51 +00:00

scenarios_mcp_ema.rs

Require managed configuration from the configured server (#56055)

2026-10-22 02:15:00 +00:00

scenarios_mcp_resource_messages.rs

Keep MCP resource helpers available in code mode (#50546)

2026-10-03 06:42:48 +00:00

scenarios_mcp_sharing.rs

Share eligible local stdio MCP connections across chats (#57211)

2026-10-26 19:37:32 +00:00

scenarios_model_instructions.rs

Scope model catalogs and caches by thread originator (#56284)

2026-10-22 22:44:48 +00:00

scenarios_mxc.rs

Add an opt-in preference for the local MXC sandbox (#47375)

2026-09-22 21:57:52 +00:00

scenarios_partial_answers.rs

Preserve parent history by default in full agent forks (#55548)

2026-10-20 11:56:17 +00:00

scenarios_preparation.rs

Separate thread preparation from execution persistence (#47199)

2026-09-22 05:53:29 +00:00

scenarios_provider_capabilities.rs

Add capability overrides for custom model providers (#50459)

2026-10-02 23:26:27 +00:00

scenarios_reserved_spawn.rs

Add host-reserved V2 child creation APIs (#57586)

2026-10-27 23:02:27 +00:00

scenarios_retained_tool_outputs.rs

Close input admission while a turn finishes recording (#53452)

2026-10-12 18:54:22 +00:00

scenarios_shared_instructions.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

scenarios_skill_catalog_dedup.rs

Add an option to omit descriptions from skill catalogs (#57500)

2026-10-27 16:16:17 +00:00

scenarios_strict_3p_cache.rs

Keep third-party tools deferred in strict Code Mode Only (#50687)

2026-10-03 18:15:13 +00:00

scenarios_tools_namespace_budget.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

scenarios_web_search.rs

Add model-gated literature search to standalone web search (#57542)

2026-10-27 19:11:56 +00:00

scenarios_world_state_prefix_tests.rs

Support window prefixes for extension world-state sections (#57276)

2026-10-26 21:46:26 +00:00

scenarios.rs

Support negotiated server-side truncation in Code Mode clients (#58125)

2026-10-29 16:57:12 +00:00

search_tool.rs

Include root turn IDs in host-owned Apps tool calls (#51421)

2026-10-06 17:10:43 +00:00

settings_commits.rs

Restore thread-owned permissions on cold resume (#53150)

2026-10-11 15:48:35 +00:00

settings_constraints.rs

Allow model catalogs to customize approval instruction headings (#57581)

2026-10-27 22:26:12 +00:00

shell_snapshot.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

skills_extension.rs

Add host-reserved V2 child creation APIs (#57586)

2026-10-27 23:02:27 +00:00

skills.rs

Add an option to omit descriptions from skill catalogs (#57500)

2026-10-27 16:16:17 +00:00

spawn_agent_description.rs

Clarify V2 spawn model override guidance for context catalogs (#49786)

2026-10-01 00:57:53 +00:00

spawn_settings_tests.rs

Test spawn settings reporting after child removal (#47258)

2026-09-22 11:10:29 +00:00

sqlite_state.rs

Add experimental attached thread forks (#56351)

2026-10-23 04:52:47 +00:00

startup_cancellation.rs

Prepare skill catalogs before building step tools (#55357)

2026-10-19 19:33:11 +00:00

step_settings_compaction.rs

Remove obsolete fields from persisted turn context (#51492)

2026-10-06 22:39:06 +00:00

step_settings_snapshots.rs

Remove retired model entries while preserving migration prompts (#44250)

2026-09-09 17:56:33 +00:00

step_settings.rs

Allow model catalogs to customize approval instruction headings (#57581)

2026-10-27 22:26:12 +00:00

stream_error_allows_next_turn.rs

Add a credential file override for GCP provider authentication (#57188)

2026-10-26 18:33:05 +00:00

stream_no_completed.rs

Add a credential file override for GCP provider authentication (#57188)

2026-10-26 18:33:05 +00:00

subagent_dynamic_tools.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

subagent_notifications.rs

Persist subagent relationships before creating child storage (#58129)

2026-10-29 17:25:51 +00:00

subagent_service_tier.rs

Make subagents follow the root service tier (#41308)

2026-08-28 09:48:13 +00:00

token_budget.rs

Add an option to omit descriptions from skill catalogs (#57500)

2026-10-27 16:16:17 +00:00

token_usage_rollout.rs

Route rollout reads through the canonical JSON decoder (#42378)

2026-09-02 22:45:19 +00:00

tool_harness.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

tool_lifecycle.rs

Include root turn IDs in host-owned Apps tool calls (#51421)

2026-10-06 17:10:43 +00:00

tool_observation_tests.rs

Expose tool dispatch and timing observations to extensions (#47662)

2026-09-23 20:49:48 +00:00

tool_parallelism.rs

Add host-reserved V2 child creation APIs (#57586)

2026-10-27 23:02:27 +00:00

tool_registration_metrics.rs

Tag tool registration metrics with effective incremental tools mode (#55692)

2026-10-20 22:34:40 +00:00

tools.rs

Pin the Rust toolchain to 1.95.0 (#57373)

2026-10-27 05:52:01 +00:00

truncation.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

turn_error_details_tests.rs

Expose original error details to turn lifecycle contributors (#49138)

2026-09-29 02:40:51 +00:00

turn_input_submission.rs

Preserve running turn recovery across thread settings updates (#53879)

2026-10-14 06:03:02 +00:00

turn_phase_trace.rs

Wait for turn profiles before asserting sampling counts in trace tests (#57692)

2026-10-28 10:13:29 +00:00

turn_state.rs

Preserve Markdown formatting when copying TUI responses (#42847)

2026-09-04 20:38:08 +00:00

unified_exec_launch_failure_tests.rs

Expose lifecycle timestamps on app-server thread items (#57172)

2026-10-26 18:13:00 +00:00

unified_exec_mxc_powershell_tests.rs

Use a compatible PowerShell fallback for the Windows MXC sandbox (#49019)

2026-09-28 15:58:17 +00:00

unified_exec_process_events.rs

Read unified exec output directly from stdout and stderr (#57191)

2026-10-26 19:01:45 +00:00

unified_exec_stdin_approval.rs

Include terminal launch commands in Guardian stdin reviews (#57758)

2026-10-28 15:10:52 +00:00

unified_exec_stdin_review_size.rs

Reject NUL bytes in reviewed terminal input (#41354)

2026-08-28 15:44:48 +00:00

unified_exec.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

unstable_features_warning.rs

Extract persisted history types into a dedicated crate (#37871)

2026-08-10 19:26:52 +00:00

user_notification.rs

Release sampling prompts after stream setup (#57618)

2026-10-28 02:00:30 +00:00

user_shell_cmd.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

view_image.rs

Bind capability roots to environment selections (#51493)

2026-10-06 22:39:32 +00:00

wake_reservation.rs

Respect model catalog origins when selecting Guardian reviewers (#57770)

2026-10-28 16:00:30 +00:00

web_search_system_proxy_tests.rs

Resolve proxy routes for standalone web search redirects (#47204)

2026-09-22 06:24:49 +00:00

web_search.rs

Remove GPT-5.4 from bundled catalogs and preserve migration prompts (#47932)

2026-09-24 20:28:31 +00:00

websocket_fallback.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

window_headers.rs

Remove the long-thread accuracy warning after compaction (#55355)

2026-10-19 19:24:26 +00:00

workspace_roots.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

worktree_trust.rs

Validate linked worktrees before inheriting project trust (#39616)

2026-08-20 06:29:32 +00:00