jif 9cc14e7988 Add managed command checkpoints requiring fresh human approval (#58045) ...

## Why

Managed command policies need to require a human decision independently of automatic review, hook allowances, and saved approvals.

## What changed

- Support `decision = "prompt-user"` in managed `requirements.toml` prefix rules, requiring a fresh, one-time human decision for matching commands.
- Add experimental `humanCommand` approval requests for clients advertising both `experimentalApi` and `requiredHumanApproval`. Accept only `accept`, `decline`, or `cancel`; reject commands when no capable client is available.
- Restrict responses to capable clients that received the request, and replay pending prompts to compatible clients on reconnect.
- Enable the capability in the TUI and update protocol schemas and client bindings.

## Testing

Add coverage for fresh decisions overriding saved allowances, hook allowances, and automatic review, plus child-thread approval routing and rejection of responses from incompatible or unrelated clients.

GitOrigin-RevId: 0b95ff6aab7f8a04b7298c8a4329d1fddf6a603e

2026-10-29 11:23:51 +00:00

..

app_server_daemon

Isolate daemon package tests to reduce disk contention (#53897)

2026-10-14 07:13:22 +00:00

exec_server

Load cloud config for sandbox and remote exec-server commands (#57270)

2026-10-26 21:31:28 +00:00

snapshots

Add codex doctor --network-only for focused network diagnostics (#57606)

2026-10-28 00:37:15 +00:00

app_server_daemon_windows.rs

Support daemon installation from Windows WinGet packages (#53811)

2026-10-14 00:49:27 +00:00

app_server_daemon.rs

Isolate daemon package tests to reduce disk contention (#53897)

2026-10-14 07:13:22 +00:00

app_server.rs

Preserve config overrides across CLI subcommand boundaries (#56022)

2026-10-22 00:07:50 +00:00

cloud_auth.rs

Restrict cloud task credentials to trusted origins (#41403)

2026-08-28 19:44:50 +00:00

cloud_config.rs

Load cloud config for sandbox and remote exec-server commands (#57270)

2026-10-26 21:31:28 +00:00

daemon_startup.rs

Add opt-in protocol discovery for local stdio MCP servers (#57210)

2026-10-26 19:37:06 +00:00

daemon_telemetry.rs

Honor custom OTLP metrics exporters when analytics is disabled (#52278)

2026-10-08 21:18:24 +00:00

debug_clear_memories.rs

Add macOS voice runtime projection (#42204)

2026-09-02 04:52:32 +00:00

debug_models.rs

Add codex debug models to show model catalog (#18625)

2026-04-20 05:42:22 +00:00

delete.rs

Add session delete commands in CLI and TUI (#27476)

2026-06-10 18:04:02 -07:00

doctor_enterprise_network.rs

Add codex doctor --network-only for focused network diagnostics (#57606)

2026-10-28 00:37:15 +00:00

doctor_path_safety.rs

Add managed enforcement of DELETE journaling on NFS (#57225)

2026-10-26 20:10:45 +00:00

exec_server_websocket_auth.rs

Support bearer tokens for app-server executor connections (#47648)

2026-09-23 20:05:37 +00:00

exec_server.rs

Refresh remote exec-server credentials after unauthorized responses (#55987)

2026-10-21 21:05:08 +00:00

execpolicy.rs

feat: add justification arg to prefix_rule() in *.rules (#8751)

2026-01-05 21:24:48 +00:00

features.rs

Reject unknown TUI keys in strict config validation (#50525)

2026-10-03 05:16:04 +00:00

login.rs

Clarify config loader APIs and share interactive login setup (#57169)

2026-10-26 18:05:05 +00:00

marketplace_add.rs

Clean up failed and abandoned marketplace staging directories (#55689)

2026-10-20 22:25:54 +00:00

marketplace_remove.rs

Respect config layers when removing plugin marketplaces (#40683)

2026-08-25 19:38:39 +00:00

marketplace_upgrade.rs

Clean up failed and abandoned marketplace staging directories (#55689)

2026-10-20 22:25:54 +00:00

mcp_add_remove.rs

Avoid nested CLI startup in the MCP OAuth persistence test (#56018)

2026-10-21 23:58:33 +00:00

mcp_list.rs

Add dynamic HTTP header helpers for MCP servers (#38245)

2026-08-12 20:36:32 +00:00

mcp_login.rs

Prefer resource-specific scopes during MCP OAuth discovery (#54653)

2026-10-16 16:23:55 +00:00

migrate_nfs_db.rs

Report when NFS database migration finds no databases (#57357)

2026-10-27 04:46:24 +00:00

plugin_cli.rs

Handle broken pipes gracefully in plugin list output (#53109)

2026-10-11 12:38:29 +00:00

queue.rs

Add managed command checkpoints requiring fresh human approval (#58045)

2026-10-29 11:23:51 +00:00

rollout_trace.rs

Track accepted conversation history in rollout traces (#56312)

2026-10-23 00:45:20 +00:00

sandbox_cloud_config.rs

Load cloud config for sandbox and remote exec-server commands (#57270)

2026-10-26 21:31:28 +00:00

sandbox_network_proxy.rs

Upgrade rmcp to 3.5.1 and harden lifecycle tests (#52972)

2026-10-10 19:43:24 +00:00

sandbox_tty.rs

Support close-on-exec attachments without changing PTY semantics (#47797)

2026-09-24 09:25:19 +00:00

sandbox_uninstall.rs

Add a CLI command to uninstall the legacy Windows sandbox (#50437)

2026-10-02 21:51:46 +00:00

update.rs

Add codex update command (#19933)

2026-04-27 23:33:59 -07:00

worktree.rs

Add managed enforcement of DELETE journaling on NFS (#57225)

2026-10-26 20:10:45 +00:00