Adam Perry @ OpenAI 76a6e55d5a Restore executor tool paths after login shell startup (#49467) ...

## Why

Login shell startup can reset `PATH`, preventing commands and their children from finding bundled tools such as `rg` in executor-reported directories.

## What changed

When `login_shell_package_path` is enabled, prepend missing executor-reported directories to `PATH` inside the POSIX login shell before running the requested command. Preserve existing entries and the order of newly added directories, and export `PATH` for child commands.

Respect explicit `PATH` overrides and preserve the requested login mode when directories are unusable or `PATH` is read-only. Keep shell diagnostics and `$LINENO` aligned with the original script, including when directory names contain newlines. The feature remains disabled by default.

## Testing

Add shell tests for nested tool lookup, existing entries, quoting, line numbers, and read-only `PATH`. Extend remote execution tests to cover feature gating, explicit overrides, unusable directories, and preservation of the original command in execution events.

GitOrigin-RevId: 301aa34e72cc6292293693250e190c19903f390a

2026-09-30 03:22:55 +00:00

..

code_mode

Add opt-in code-mode yielding on new user input (#48135)

2026-09-25 16:28:36 +00:00

executed_tool_calls

Compare tool call metadata in the recorder refresh test (#49408)

2026-09-30 00:23:07 +00:00

handlers

Restore executor tool paths after login shell startup (#49467)

2026-09-30 03:22:55 +00:00

runtimes

Restore executor tool paths after login shell startup (#49467)

2026-09-30 03:22:55 +00:00

approvals_tests.rs

Route approvals through the extension decision API (#43432)

2026-09-07 11:07:28 +00:00

approvals.rs

Bind Guardian reviews to the action's target environment (#47630)

2026-09-23 19:03:12 +00:00

call_trace.rs

Trace tool call receipt, result readiness, and code-mode dispatch (#44661)

2026-09-10 22:33:32 +00:00

catalog_parameters.rs

Support model-catalog overrides for Code Mode tool messages (#47118)

2026-09-21 22:49:17 +00:00

context_tests.rs

Refactor image content to use a shared ImageReference type (#45543)

2026-09-14 23:25:09 +00:00

context.rs

Preserve delivered messages through post-tool hook failures (#47039)

2026-09-21 14:14:21 +00:00

control_tool_analytics.rs

Track history, notes, and async messages as control tools (#40496)

2026-08-24 23:19:03 +00:00

events.rs

Record sandbox backends in command execution analytics (#47568)

2026-09-23 15:05:59 +00:00

executed_tool_calls_direct_tests.rs

Preserve live tool-call metadata across request windows (#49401)

2026-09-29 23:24:37 +00:00

executed_tool_calls.rs

Preserve live tool-call metadata across request windows (#49401)

2026-09-29 23:24:37 +00:00

hook_names.rs

Default function tools into tool hooks (#23757)

2026-05-23 00:56:58 +00:00

hosted_spec_tests.rs

Use the image generation extension by default (#31596)

2026-07-09 12:25:19 +09:00

hosted_spec.rs

Use the image generation extension by default (#31596)

2026-07-09 12:25:19 +09:00

lifecycle.rs

Bind Guardian async scores to target environment permissions (#47830)

2026-09-24 12:34:04 +00:00

metadata_metrics_tests.rs

Preserve live tool-call metadata across request windows (#49401)

2026-09-29 23:24:37 +00:00

metadata_metrics.rs

Preserve live tool-call metadata across request windows (#49401)

2026-09-29 23:24:37 +00:00

mod.rs

Retain confirmed Code Mode messages for Guardian reviews (#48725)

2026-09-27 15:03:38 +00:00

multi_agent_tool.rs

Support model-catalog overrides for Code Mode tool messages (#47118)

2026-09-21 22:49:17 +00:00

network_approval_tests.rs

Tie network approval reviews to their originating execution (#44575)

2026-09-10 16:17:49 +00:00

network_approval.rs

Allow environment selection updates during an active turn (#47435)

2026-09-23 03:12:33 +00:00

orchestrator.rs

Allow approved filesystem escalation while preserving denied reads (#49353)

2026-09-29 19:50:50 +00:00

parallel_observation_tests.rs

Expose tool dispatch and timing observations to extensions (#47662)

2026-09-23 20:49:48 +00:00

parallel.rs

Retain confirmed Code Mode messages for Guardian reviews (#48725)

2026-09-27 15:03:38 +00:00

registry_tests.rs

Refactor tool telemetry product SKU matching to use an allowlist (#47757)

2026-09-24 05:39:22 +00:00

registry.rs

Retain confirmed Code Mode messages for Guardian reviews (#48725)

2026-09-27 15:03:38 +00:00

router_tests.rs

Use the originating model when recording conversation history (#44243)

2026-09-09 17:46:00 +00:00

router.rs

Add model-specific prefixes to indirect tool descriptions (#47642)

2026-09-23 19:54:07 +00:00

sandboxing_tests.rs

Allow approved filesystem escalation while preserving denied reads (#49353)

2026-09-29 19:50:50 +00:00

sandboxing.rs

Allow approved filesystem escalation while preserving denied reads (#49353)

2026-09-29 19:50:50 +00:00

spec_plan_tests.rs

Decouple tool restrictions from session identity with ToolPolicy (#46999)

2026-09-21 10:40:40 +00:00

spec_plan.rs

Make MCP and Code Mode input schema budgets configurable (#47936)

2026-09-24 20:39:37 +00:00

tool_dispatch_trace_tests.rs

Add early yielding for code-mode observations (#48123)

2026-09-25 15:42:35 +00:00

tool_dispatch_trace.rs

Canonicalize default tools under the functions namespace (#37022)

2026-08-05 04:07:59 +00:00

tool_namespaces_info.rs

Include tool namespace inventory in turn metadata (#37492)

2026-08-07 19:32:15 +00:00

user_messaging_tests.rs

Retain confirmed Code Mode messages for Guardian reviews (#48725)

2026-09-27 15:03:38 +00:00

user_messaging.rs

Retain confirmed Code Mode messages for Guardian reviews (#48725)

2026-09-27 15:03:38 +00:00