felixxia-oai 7342991f0c Preserve delivered assistant messages in Guardian retained context (#47585) ...

## Why

Guardian authorization reviews need the assistant message that prompted a user’s approval, even when a post-tool hook blocks the messaging result or compaction removes the original tool call.

## What changed

Retain confirmed delivered assistant text from tool-output metadata at the original call’s position in thread-owned Guardian context. Recover these messages when restoring checkpoints and respect the call’s inherited-context status.

## Testing

Extend authorization coverage to verify that a delivered message remains in the Guardian root snapshot after a blocked tool result, compaction, and resume, and update checkpoint expectations to preserve assistant/approval ordering.

GitOrigin-RevId: df30ec8a3ef21443210a937ab6db119de8a5fd51

2026-09-23 16:16:54 +00:00

..

common

Allow environment selection updates during an active turn (#47435)

2026-09-23 03:12:33 +00:00

remote_env_windows

Apply remote platform semantics to exec safety checks (#42113)

2026-09-01 18:24:56 +00:00

suite

Preserve delivered assistant messages in Guardian retained context (#47585)

2026-09-23 16:16:54 +00:00

all.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

mcp_trace_propagation.rs

Preserve MCP request trace context across transport workers (#47212)

2026-09-22 06:47:07 +00:00

responses_headers.rs

Support explicit provider model catalog URLs (#46561)

2026-09-19 01:36:53 +00:00