Charlie Marsh 80f469ce8a Serialize manual network approval prompts per endpoint (#58351) ...

## Why

Concurrent executions accessing the same endpoint can produce duplicate network approval prompts before a session decision is recorded.

## What changed

- Queue manual prompts by environment, host, protocol, and port while keeping execution decisions separate.
- After a one-time approval or denial, let the next execution prompt. Reuse committed session grants and deny rules without another prompt.
- Keep tool results paused while requests are queued and attribute the wait to the triggering tool call.

## Testing

Extend coverage for concurrent requests, one-time and session decisions, independent ports, queued cancellation and timing, and isolation between local and remote environments.

GitOrigin-RevId: ebf580dddc39a9a9dc3b0d1acfa21438fbc6e100

2026-10-30 14:40:59 +00:00

..

code_mode

Support negotiated server-side truncation in Code Mode clients (#58125)

2026-10-29 16:57:12 +00:00

executed_tool_calls

Preserve native tool-call evidence through Guardian review (#58040)

2026-10-29 11:15:52 +00:00

handlers

Preserve native tool-call evidence through Guardian review (#58040)

2026-10-29 11:15:52 +00:00

runtimes

Carry prepared commands through unified execution (#57438)

2026-10-27 12:12:55 +00:00

approvals_tests.rs

Serialize manual network approval prompts per endpoint (#58351)

2026-10-30 14:40:59 +00:00

approvals.rs

Serialize manual network approval prompts per endpoint (#58351)

2026-10-30 14:40:59 +00:00

call_trace.rs

Add turn, tool, and skill attribution to traces (#56524)

2026-10-23 16:55:32 +00:00

context_tests.rs

Preserve command cwd in permission and post-tool hooks (#57203)

2026-10-26 19:21:08 +00:00

context.rs

Preserve native tool-call evidence through Guardian review (#58040)

2026-10-29 11:15:52 +00:00

control_tool_analytics.rs

Track history, notes, and async messages as control tools (#40496)

2026-08-24 23:19:03 +00:00

events.rs

Consolidate command execution output into aggregated_output (#50402)

2026-10-02 18:48:49 +00:00

executed_tool_calls_direct_tests.rs

Preserve native tool-call evidence through Guardian review (#58040)

2026-10-29 11:15:52 +00:00

executed_tool_calls.rs

Pin the Rust toolchain to 1.95.0 (#57373)

2026-10-27 05:52:01 +00:00

hook_names.rs

Default function tools into tool hooks (#23757)

2026-05-23 00:56:58 +00:00

hosted_spec_tests.rs

Use the image generation extension by default (#31596)

2026-07-09 12:25:19 +09:00

hosted_spec.rs

Use the image generation extension by default (#31596)

2026-07-09 12:25:19 +09:00

lifecycle.rs

Use serving assessments for adaptive Guardian review (#58075)

2026-10-29 12:54:39 +00:00

metadata_metrics_tests.rs

Preserve live tool-call metadata across request windows (#49401)

2026-09-29 23:24:37 +00:00

metadata_metrics.rs

Preserve live tool-call metadata across request windows (#49401)

2026-09-29 23:24:37 +00:00

mod.rs

Add opt-in synchronous Guardian review for native tool calls (#57433)

2026-10-27 11:37:24 +00:00

multi_agent_tool.rs

Preserve native tool-call evidence through Guardian review (#58040)

2026-10-29 11:15:52 +00:00

native_tool_review.rs

Preserve native tool-call evidence through Guardian review (#58040)

2026-10-29 11:15:52 +00:00

network_approval_tests.rs

Serialize manual network approval prompts per endpoint (#58351)

2026-10-30 14:40:59 +00:00

network_approval.rs

Serialize manual network approval prompts per endpoint (#58351)

2026-10-30 14:40:59 +00:00

orchestrator.rs

Add managed command checkpoints requiring fresh human approval (#58045)

2026-10-29 11:23:51 +00:00

parallel_observation_tests.rs

Preserve native tool-call evidence through Guardian review (#58040)

2026-10-29 11:15:52 +00:00

parallel_trace_tests.rs

Stabilize cancellation and tracing tests (#58171)

2026-10-29 20:39:04 +00:00

parallel.rs

Stabilize cancellation and tracing tests (#58171)

2026-10-29 20:39:04 +00:00

registry_tests.rs

Preserve native tool-call evidence through Guardian review (#58040)

2026-10-29 11:15:52 +00:00

registry.rs

Use serving assessments for adaptive Guardian review (#58075)

2026-10-29 12:54:39 +00:00

router_tests.rs

Preserve native tool-call evidence through Guardian review (#58040)

2026-10-29 11:15:52 +00:00

router.rs

Preserve native tool-call evidence through Guardian review (#58040)

2026-10-29 11:15:52 +00:00

sandboxing_tests.rs

Preserve command cwd in permission and post-tool hooks (#57203)

2026-10-26 19:21:08 +00:00

sandboxing.rs

Add managed command checkpoints requiring fresh human approval (#58045)

2026-10-29 11:23:51 +00:00

spec_plan_strict_third_party_tests.rs

Isolate tracing in the strict third-party tool deferral test (#50977)

2026-10-04 23:07:12 +00:00

spec_plan_tests.rs

Preserve native tool-call evidence through Guardian review (#58040)

2026-10-29 11:15:52 +00:00

spec_plan.rs

Preserve native tool-call evidence through Guardian review (#58040)

2026-10-29 11:15:52 +00:00

tool_dispatch_trace_tests.rs

Preserve native tool-call evidence through Guardian review (#58040)

2026-10-29 11:15:52 +00:00

tool_dispatch_trace.rs

Canonicalize default tools under the functions namespace (#37022)

2026-08-05 04:07:59 +00:00

tool_namespaces_info.rs

Include tool namespace inventory in turn metadata (#37492)

2026-08-07 19:32:15 +00:00

user_messaging_tests.rs

Preserve command cwd in permission and post-tool hooks (#57203)

2026-10-26 19:21:08 +00:00

user_messaging.rs

Retain confirmed Code Mode messages for Guardian reviews (#48725)

2026-09-27 15:03:38 +00:00