Dylan Hurd 090f4de37b Route blocked network requests to their owning calls (#32897) ...

## Why

Policy-blocked proxy requests must terminate the corresponding active tool call and preserve the correct approval result, including when multiple calls are running concurrently.

## What changed

- Resolve a blocked request's execution ID to its registered active network call before recording the policy denial.
- Preserve an outcome already recorded for that call, and cancel the owning call after storing a new denial.

## Testing

Expand network approval integration coverage for Guardian and user decisions, permission hooks, persisted policy amendments, concurrent calls, timeouts, cancellations, and unattributed proxy requests.

GitOrigin-RevId: 961901bbc07cc498309453ec78cda1a56ab00a4b

2026-07-13 23:33:58 +00:00

..

common

Route blocked network requests to their owning calls (#32897)

2026-07-13 23:33:58 +00:00

remote_env_windows

test: generalize exec-server fixture (#31422)

2026-07-07 11:21:56 -07:00

suite

Route blocked network requests to their owning calls (#32897)

2026-07-13 23:33:58 +00:00

all.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

responses_headers.rs

Always send reasoning parameters in Responses requests (#32206)

2026-07-10 16:11:58 +00:00