viyatb-oai 1c5ca2a979 Support remote credential masking with Zsh shell snapshots (#54432) ...

## Why

Remote credential masking previously supported only Bash commands without login startup or shell snapshots, leaving Zsh commands with unmasked credentials.

## What changed

- Enable masking for Zsh login commands using shell snapshots on Linux and macOS.
- Capture trusted startup profiles per launch, bind the credential broker to the resulting environment, and replace credentials and supported aliases with placeholders before snapshot replay.
- Preserve explicit environment overrides, credential unsets, and launcher-managed proxy settings during replay.
- Warn and fall back to unmasked startup when a snapshot cannot safely replay credentials; stop execution if protected snapshot restoration fails.

## Testing

Extend remote execution tests for inherited and profile-defined credentials, overrides, destination changes, and unsupported-profile fallback. Add a Zsh scenario snapshot showing a credential placeholder in command output.

GitOrigin-RevId: 83193d6cbc05f3deb0d6d0b9ae80974b353ce900

2026-10-15 22:25:58 +00:00

..

skills_extension

Enable parallel execution for read-only tools (#52245)

2026-10-08 19:29:47 +00:00

snapshots

Support remote credential masking with Zsh shell snapshots (#54432)

2026-10-15 22:25:58 +00:00

step_settings

Bind capability roots to environment selections (#51493)

2026-10-06 22:39:32 +00:00

abort_lifecycle.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

abort_tasks.rs

Allow root turn suspension with live descendants (#54414)

2026-10-15 20:57:39 +00:00

additional_context.rs

Unify context snapshots and group requests into windows (#44932)

2026-09-11 22:55:38 +00:00

agent_control_tests.rs

Preserve agent state when unloading idle multi-agent v2 children (#52034)

2026-10-08 09:39:33 +00:00

agent_eviction_tests.rs

Add direct replies for thread settings updates (#47937)

2026-09-24 20:59:51 +00:00

agent_execution.rs

Expose detailed agent tree shutdown failure reports (#51515)

2026-10-06 23:28:55 +00:00

agent_mailbox.rs

Preserve queued agent mail across session eviction (#50087)

2026-10-01 20:17:34 +00:00

agent_websocket.rs

Preserve tool declaration mode across resumed context windows (#51480)

2026-10-06 21:28:13 +00:00

agents_md_refresh.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

agents_md.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

app_tool_exposure_strict_tests.rs

Keep third-party tools deferred in strict Code Mode Only (#50687)

2026-10-03 18:15:13 +00:00

app_tool_exposure.rs

Keep third-party tools deferred in strict Code Mode Only (#50687)

2026-10-03 18:15:13 +00:00

apply_patch_cli.rs

Bind capability roots to environment selections (#51493)

2026-10-06 22:39:32 +00:00

apply_patch_serialization.rs

Standardize shell execution on unified exec (#39757)

2026-08-20 17:46:05 +00:00

apply_patch_system_aliases.rs

Protect metadata writes through macOS case aliases (#54273)

2026-10-15 12:01:04 +00:00

approvals.rs

Add opt-in credential masking for proxied sandboxed sessions (#52302)

2026-10-08 22:27:00 +00:00

audio_truncation.rs

Unify turn input submission and routing (#38275)

2026-08-13 00:00:16 +00:00

auth_recovery_policy.rs

Enforce application network policy across app-server requests (#47407)

2026-09-23 00:47:07 +00:00

auto_review.rs

Add an optional JSON transcript format for Guardian (#51465)

2026-10-06 19:30:57 +00:00

base_instructions.rs

Refresh model instructions in incremental-tool context windows (#53872)

2026-10-14 05:36:44 +00:00

bedrock_multi_agent_tests.rs

Enable multi-agent V2 and Ultra reasoning on Amazon Bedrock (#49345)

2026-09-29 19:03:30 +00:00

bedrock_service_tier_tests.rs

Advertise Ultrafast for GPT-6.1 Sol on Amazon Bedrock (#51794)

2026-10-07 18:32:50 +00:00

canonical_plugin_connectors.rs

Honor canonical plugin disables for shared connectors (#45755)

2026-09-15 18:23:08 +00:00

catalog_permission_messages.rs

Remove legacy personality template metadata (#51223)

2026-10-06 01:46:33 +00:00

cli_stream.rs

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

client_websockets.rs

Add opt-in output token replay for OpenAI requests (#52742)

2026-10-10 01:25:00 +00:00

client.rs

Account for token usage from incomplete responses (#53670)

2026-10-13 13:36:24 +00:00

cloud_config.rs

Allow managed requirements to disable the Windows MXC sandbox (#49642)

2026-09-30 14:37:56 +00:00

code_mode_elicitation.rs

Unify turn input submission and routing (#38275)

2026-08-13 00:00:16 +00:00

code_mode_model_messages.rs

Support model-catalog overrides for Code Mode tool messages (#47118)

2026-09-21 22:49:17 +00:00

code_mode.rs

Add opt-in gRPC over stdio for the code-mode host (#52723)

2026-10-09 23:26:34 +00:00

codex_apps_protocol.rs

Share Apps tool catalogs without retaining unused snapshots (#45440)

2026-09-14 15:06:28 +00:00

codex_delegate.rs

Preserve MCP tool output as content items (#40737)

2026-08-25 23:42:50 +00:00

collaboration_instructions.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

command_lifecycle_tests.rs

Add a command-start callback for tool lifecycle extensions (#46539)

2026-09-19 00:46:06 +00:00

compact_program_tests.rs

Enable Cyber access programs for API-key sessions by default (#53717)

2026-10-13 16:57:54 +00:00

compact_remote_trimming.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

compact_remote.rs

Forward client voice session IDs in realtime requests (#53784)

2026-10-13 22:21:31 +00:00

compact_resume_fork.rs

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

compact.rs

Preserve conversation history when compaction fails (#53932)

2026-10-14 09:44:24 +00:00

context_annotations.rs

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

current_time_reminder.rs

Make environment context date and timezone configurable (#52164)

2026-10-08 16:27:10 +00:00

cyber_access_program.rs

Expose and persist turn lineage across the app server (#51415)

2026-10-06 16:56:39 +00:00

cyber_exec_policy.rs

Remove the patched zsh shell execution backend (#52160)

2026-10-08 16:19:09 +00:00

daybreak_access.rs

Move the exec-server test fixture into shared test support (#52674)

2026-10-09 18:58:53 +00:00

deprecation_notice.rs

Remove the patched zsh shell execution backend (#52160)

2026-10-08 16:19:09 +00:00

direct_tool_metadata.rs

Track history initialization in Responses turn metadata (#52325)

2026-10-08 23:34:16 +00:00

dynamic_tool_cancellation.rs

Record truncation metrics for accepted Guardian review inputs (#53628)

2026-10-13 10:21:42 +00:00

exec_policy.rs

Avoid false URL-launch detections in literal PowerShell commands (#54076)

2026-10-14 19:47:50 +00:00

exec.rs

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

executor_discovery_v2.rs

Enrich V2 capability discovery with resolved plugin and skill metadata (#53763)

2026-10-13 20:40:38 +00:00

extension_sandbox.rs

Store generated image items as attachment references (#54398)

2026-10-15 19:51:22 +00:00

external_auth.rs

Use descriptor-safe helpers for executable test fixtures (#50018)

2026-10-01 15:57:03 +00:00

fork_thread.rs

Reuse unchanged history snapshots when resuming threads (#49600)

2026-09-30 11:59:13 +00:00

gateway_auth.rs

Compose gateway OAuth with primary provider authentication (#46490)

2026-09-18 22:42:46 +00:00

git_enrichment.rs

Expose and persist turn lineage across the app server (#51415)

2026-10-06 16:56:39 +00:00

guardian_authorization_refresh.rs

Retry Guardian reviews when authorization changes (#47819)

2026-09-24 11:19:16 +00:00

guardian_authorization.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

guardian_cached_score_tests.rs

Publish Guardian cached scores and coverage atomically (#46245)

2026-09-17 16:06:11 +00:00

guardian_checkpoint_migration_tests.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

guardian_connector_trust.rs

Add opt-in Guardian trust for orchestrator connector identities (#52250)

2026-10-08 20:04:38 +00:00

guardian_context_budget.rs

Account for replay caches in encrypted compaction budgets (#53691)

2026-10-13 15:05:16 +00:00

guardian_cyber_access_program_tests.rs

Forward per-turn Cyber access programs to Guardian (#52689)

2026-10-09 20:14:04 +00:00

guardian_environments_tests.rs

Roll back stale Guardian reviews before reusing reviewer history (#51683)

2026-10-07 13:05:06 +00:00

guardian_heartbeat_authorization.rs

Remove obsolete Guardian thread-context enables from tests (#51184)

2026-10-05 22:17:02 +00:00

guardian_history.rs

Attribute compaction summaries to the assistant in Guardian transcripts (#54281)

2026-10-15 12:56:39 +00:00

guardian_mcp_elicitation.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

guardian_pending_root_delivery.rs

Refresh Guardian reviews when review context changes (#53797)

2026-10-13 23:29:53 +00:00

guardian_persistence_tests.rs

Load persisted sender context for Guardian reviews (#51734)

2026-10-07 15:47:21 +00:00

guardian_retained_context.rs

Track content provenance through prompt assembly and compaction (#53831)

2026-10-14 02:01:49 +00:00

guardian_retry.rs

Track Guardian transcript admission across failed reviews (#54264)

2026-10-15 11:22:45 +00:00

guardian_review_cancellation.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

guardian_review.rs

Track Guardian transcript admission across failed reviews (#54264)

2026-10-15 11:22:45 +00:00

guardian_root_handoff.rs

Preserve user restrictions in Guardian handoff context (#50026)

2026-10-01 16:14:27 +00:00

guardian_sandbox_retry.rs

Add regression coverage for Guardian sandbox retry approvals (#54265)

2026-10-15 11:24:07 +00:00

guardian_sender_messages_tests.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

guardian_subagent_authorization.rs

Add opt-in output token replay for OpenAI requests (#52742)

2026-10-10 01:25:00 +00:00

guardian_subagent_notification_tests.rs

Notify parent agents when Guardian stops a subagent (#49312)

2026-09-29 16:53:11 +00:00

hooks_executor.rs

Add configurable default plugin activation policy (#52220)

2026-10-08 18:42:58 +00:00

hooks_mcp.rs

Make MCP and Code Mode input schema budgets configurable (#47936)

2026-09-24 20:39:37 +00:00

hooks_plugin_policy_refresh.rs

Add configurable default plugin activation policy (#52220)

2026-10-08 18:42:58 +00:00

hooks.rs

Add startup-only PID namespace inheritance to exec-server (#47989)

2026-09-25 03:12:10 +00:00

image_rollout.rs

Add opt-in output token replay for OpenAI requests (#52742)

2026-10-10 01:25:00 +00:00

injected_models_cache.rs

Scope model catalog caches to the current provider and auth identity (#43906)

2026-09-08 20:37:30 +00:00

interrupt_hooks.rs

Add hooks for interrupted turns (#40511)

2026-08-25 01:27:18 +00:00

items.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

json_result.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

live_cli.rs

…

managed_threads_tests.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

mcp_auth_elicitation.rs

Expose and persist turn lineage across the app server (#51415)

2026-10-06 16:56:39 +00:00

mcp_auth_refresh.rs

Track content provenance through prompt assembly and compaction (#53831)

2026-10-14 02:01:49 +00:00

mcp_ema_config.rs

Restrict enterprise MCP auth and fail closed on config refresh (#49260)

2026-09-29 13:08:37 +00:00

mcp_executor_context_tests.rs

Add configurable persistent leader shortcuts to the TUI (#52273)

2026-10-08 21:01:06 +00:00

mcp_extension_protocol.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

mcp_oauth_refresh_tests.rs

Retire rejected MCP OAuth refresh tokens (#54079)

2026-10-14 20:00:52 +00:00

mcp_optional_startup_grace.rs

Restrict enterprise MCP auth and fail closed on config refresh (#49260)

2026-09-29 13:08:37 +00:00

mcp_refresh_cleanup.rs

Upgrade Windows bindings to windows-sys 0.61.2 (#50058)

2026-10-01 18:05:05 +00:00

mcp_sandbox_tests.rs

Separate MCP sandbox policy from launcher metadata (#53709)

2026-10-13 16:23:44 +00:00

mcp_startup_refresh_http_proxy.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

mcp_storage_telemetry_tests.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

mcp_subagent_elicitation.rs

Signal abandonment of unanswered MCP elicitations (#51611)

2026-10-07 07:57:14 +00:00

mcp_tool_cache.rs

Allow hosted Apps MCP contributions to override the protocol mode (#46019)

2026-09-16 20:32:52 +00:00

mcp_tool_exposure.rs

Keep discovered Apps tools available during startup recovery (#53672)

2026-10-13 13:59:41 +00:00

mcp_turn_metadata.rs

Add an optional JSON transcript format for Guardian (#51465)

2026-10-06 19:30:57 +00:00

mcp_user_verification.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

mod.rs

Refresh model instructions in incremental-tool context windows (#53872)

2026-10-14 05:36:44 +00:00

model_overrides.rs

…

model_provider_requirements_tests.rs

Remove the patched zsh shell execution backend (#52160)

2026-10-08 16:19:09 +00:00

model_request.rs

Add extension hooks for model requests and response streams (#47679)

2026-09-23 22:10:04 +00:00

model_runtime_selectors.rs

Unify turn input submission and routing (#38275)

2026-08-13 00:00:16 +00:00

model_switching.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

model_visible_layout.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

models_cache_auth.rs

Support explicit provider model catalog URLs (#46561)

2026-09-19 01:36:53 +00:00

models_cache_ttl.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

models_etag_responses.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

multi_agent_mode.rs

Source proactive multi-agent instructions from the model catalog (#41457)

2026-08-29 03:28:19 +00:00

multi_agent_restore_tests.rs

Reuse unchanged history snapshots when resuming threads (#49600)

2026-09-30 11:59:13 +00:00

multi_agent_resume.rs

Record initialization analytics for resumed subagents (#51206)

2026-10-06 00:16:18 +00:00

multi_agent_tool_descriptions.rs

Support model-specific descriptions for agent message board tools (#47670)

2026-09-23 21:34:11 +00:00

multi_exec_server_sandbox.rs

Move the exec-server test fixture into shared test support (#52674)

2026-10-09 18:58:53 +00:00

network_approval_completion.rs

Add an opt-in preference for the local MXC sandbox (#47375)

2026-09-22 21:57:52 +00:00

network_approval.rs

Stabilize the Guardian network review timeout test (#54082)

2026-10-14 20:06:28 +00:00

openai_file_mcp.rs

Include root turn IDs in host-owned Apps tool calls (#51421)

2026-10-06 17:10:43 +00:00

otel.rs

Remove GPT-5.4 from bundled catalogs and preserve migration prompts (#47932)

2026-09-24 20:28:31 +00:00

output_token_replay.rs

Add opt-in output token replay for OpenAI requests (#52742)

2026-10-10 01:25:00 +00:00

override_updates.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

pending_input_persistence.rs

Keep spawned children provisional until the spawn result returns (#53654)

2026-10-13 12:42:53 +00:00

pending_input.rs

Interrupt and drain canceled classifier responses before socket reuse (#53698)

2026-10-13 15:24:00 +00:00

permissions_messages.rs

Default local threads to paginated history (#47900)

2026-09-24 18:07:37 +00:00

personality.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

plugins.rs

Prefer remote Visualize installs over the bundled plugin (#53747)

2026-10-13 19:28:21 +00:00

prompt_cache_key.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

prompt_caching.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

prompt_debug_tests.rs

Add opt-in output token replay for OpenAI requests (#52742)

2026-10-10 01:25:00 +00:00

quota_exceeded.rs

Fix retry classification for throttling and quota errors (#45602)

2026-09-15 04:20:38 +00:00

realtime_attachment.rs

Forward client voice session IDs in realtime requests (#53784)

2026-10-13 22:21:31 +00:00

realtime_conversation.rs

Forward client voice session IDs in realtime requests (#53784)

2026-10-13 22:21:31 +00:00

realtime_initial_items.rs

Forward client voice session IDs in realtime requests (#53784)

2026-10-13 22:21:31 +00:00

realtime_misalignment.rs

Forward client voice session IDs in realtime requests (#53784)

2026-10-13 22:21:31 +00:00

realtime_sideband_endpoint.rs

Forward client voice session IDs in realtime requests (#53784)

2026-10-13 22:21:31 +00:00

realtime_system_proxy.rs

Forward client voice session IDs in realtime requests (#53784)

2026-10-13 22:21:31 +00:00

reasoning_effort_override.rs

Add experimental prediction forks that inherit parent context (#51884)

2026-10-08 00:09:03 +00:00

remote_env_capability_roots_tests.rs

Bind capability roots to environment selections (#51493)

2026-10-06 22:39:32 +00:00

remote_env_failure_tests.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

remote_env_required_skills_tests.rs

Enforce required environment skills before model inference (#51157)

2026-10-05 18:54:17 +00:00

remote_env_spawn_tests.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

remote_env.rs

Keep environment tools stable across readiness changes (#54098)

2026-10-14 21:06:42 +00:00

remote_models.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

request_compression.rs

Unify turn input submission and routing (#38275)

2026-08-13 00:00:16 +00:00

request_permissions_tool.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

request_permissions.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

request_plugin_install.rs

Restrict enterprise MCP auth and fail closed on config refresh (#49260)

2026-09-29 13:08:37 +00:00

request_user_input_async.rs

Honor the user input setting for asynchronous questions (#51908)

2026-10-08 02:06:58 +00:00

request_user_input.rs

Account for token usage from incomplete responses (#53670)

2026-10-13 13:36:24 +00:00

responses_api_proxy_headers.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

responses_lite.rs

Track content provenance through prompt assembly and compaction (#53831)

2026-10-14 02:01:49 +00:00

responses_system_proxy.rs

Add opt-in model discovery for OpenAI API keys (#44392)

2026-09-10 03:18:28 +00:00

resume_warning.rs

Remove obsolete fields from persisted turn context (#51492)

2026-10-06 22:39:06 +00:00

resume.rs

Support store-owned preparation when resuming threads (#54059)

2026-10-14 18:02:25 +00:00

retry_after.rs

Honor Retry-After in WebSocket error events (#51440)

2026-10-06 18:17:48 +00:00

review.rs

Add opt-in output token replay for OpenAI requests (#52742)

2026-10-10 01:25:00 +00:00

rmcp_client.rs

Keep host MCP and plugin configuration local with remote environments (#53990)

2026-10-14 14:08:26 +00:00

rollout_budget.rs

Remove the deprecated thread/rollback API (#44915)

2026-09-11 21:32:04 +00:00

rollout_compression.rs

Reuse unchanged history snapshots when resuming threads (#49600)

2026-09-30 11:59:13 +00:00

rollout_list_find.rs

…

safety_buffering.rs

Unify turn input submission and routing (#38275)

2026-08-13 00:00:16 +00:00

safety_check_downgrade.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

scenarios_agent_eviction_tests.rs

Add scenario coverage for worker context across idle eviction (#52062)

2026-10-08 10:53:45 +00:00

scenarios_agent_message_board_remote.rs

Expose message board permissions and structured denials (#52568)

2026-10-09 13:15:39 +00:00

scenarios_agent_message_board.rs

Stabilize write ordering in the shared message board scenario (#53632)

2026-10-13 10:42:06 +00:00

scenarios_code_mode_settled_helpers_tests.rs

Add promise settlement streaming helpers to code mode (#51126)

2026-10-05 16:58:29 +00:00

scenarios_compaction_tests.rs

Add scenario coverage for remote /compact context preservation (#50516)

2026-10-03 04:24:52 +00:00

scenarios_content_filter.rs

Add recovery guidance to content-filter retries (#49119)

2026-09-29 01:14:41 +00:00

scenarios_credential_masking.rs

Support remote credential masking with Zsh shell snapshots (#54432)

2026-10-15 22:25:58 +00:00

scenarios_guardian_agent_messages_tests.rs

Remove obsolete Guardian thread-context enables from tests (#51184)

2026-10-05 22:17:02 +00:00

scenarios_guardian_conversation_history_tests.rs

Restrict enterprise MCP auth and fail closed on config refresh (#49260)

2026-09-29 13:08:37 +00:00

scenarios_guardian_extra_policy.rs

Add an optional JSON transcript format for Guardian (#51465)

2026-10-06 19:30:57 +00:00

scenarios_guardian_handoff.rs

Preserve user restrictions in Guardian handoff context (#50026)

2026-10-01 16:14:27 +00:00

scenarios_guardian_heartbeat.rs

Enable instant interrupts by default (#51812)

2026-10-07 19:42:35 +00:00

scenarios_guardian_orchestrator_connector.rs

Default Guardian v2 async classification to conversation mode (#53733)

2026-10-13 18:08:10 +00:00

scenarios_guardian_sender_context.rs

Load persisted sender context for Guardian reviews (#51734)

2026-10-07 15:47:21 +00:00

scenarios_incremental_tools_resume.rs

Emit one developer notice per incremental namespace update batch (#52295)

2026-10-08 22:01:24 +00:00

scenarios_incremental_tools.rs

Record per-tool incremental update and description size metrics (#54133)

2026-10-14 23:55:50 +00:00

scenarios_indirect_namespace_prefixes.rs

Support model-specific function description prefixes (#51930)

2026-10-08 03:20:54 +00:00

scenarios_mailbox_preemption_tests.rs

Handle partial answers consistently across agent workflows (#51249)

2026-10-06 03:27:04 +00:00

scenarios_mcp_resource_messages.rs

Keep MCP resource helpers available in code mode (#50546)

2026-10-03 06:42:48 +00:00

scenarios_model_instructions.rs

Refresh model instructions in incremental-tool context windows (#53872)

2026-10-14 05:36:44 +00:00

scenarios_mxc.rs

Add an opt-in preference for the local MXC sandbox (#47375)

2026-09-22 21:57:52 +00:00

scenarios_partial_answers.rs

Add opt-in history prefix preservation for full agent forks (#52535)

2026-10-09 11:08:24 +00:00

scenarios_preparation.rs

Separate thread preparation from execution persistence (#47199)

2026-09-22 05:53:29 +00:00

scenarios_provider_capabilities.rs

Add capability overrides for custom model providers (#50459)

2026-10-02 23:26:27 +00:00

scenarios_read_only_mcp.rs

Add read-only policy support to MCP tool requests (#46042)

2026-09-16 22:25:54 +00:00

scenarios_retained_tool_outputs.rs

Close input admission while a turn finishes recording (#53452)

2026-10-12 18:54:22 +00:00

scenarios_shared_instructions.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

scenarios_skill_catalog_dedup.rs

Deduplicate cloud and executor skill listings before budgeting (#49127)

2026-09-29 01:57:57 +00:00

scenarios_strict_3p_cache.rs

Keep third-party tools deferred in strict Code Mode Only (#50687)

2026-10-03 18:15:13 +00:00

scenarios_tools_namespace_budget.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

scenarios.rs

Enable credential masking for remote exec-server commands (#54309)

2026-10-15 14:41:16 +00:00

search_tool.rs

Include root turn IDs in host-owned Apps tool calls (#51421)

2026-10-06 17:10:43 +00:00

settings_commits.rs

Restore thread-owned permissions on cold resume (#53150)

2026-10-11 15:48:35 +00:00

settings_constraints.rs

Expose and persist turn lineage across the app server (#51415)

2026-10-06 16:56:39 +00:00

shell_snapshot.rs

Handle completion events in either order in shell snapshot tests (#52660)

2026-10-09 17:56:26 +00:00

skills_extension.rs

Keep environment tools stable across readiness changes (#54098)

2026-10-14 21:06:42 +00:00

skills.rs

Add opt-in output token replay for OpenAI requests (#52742)

2026-10-10 01:25:00 +00:00

spawn_agent_description.rs

Clarify V2 spawn model override guidance for context catalogs (#49786)

2026-10-01 00:57:53 +00:00

spawn_settings_tests.rs

Test spawn settings reporting after child removal (#47258)

2026-09-22 11:10:29 +00:00

sqlite_state.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

startup_cancellation.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

step_settings_compaction.rs

Remove obsolete fields from persisted turn context (#51492)

2026-10-06 22:39:06 +00:00

step_settings_snapshots.rs

Remove retired model entries while preserving migration prompts (#44250)

2026-09-09 17:56:33 +00:00

step_settings.rs

Remove legacy personality template metadata (#51223)

2026-10-06 01:46:33 +00:00

stream_error_allows_next_turn.rs

Add capability overrides for custom model providers (#50459)

2026-10-02 23:26:27 +00:00

stream_no_completed.rs

Add capability overrides for custom model providers (#50459)

2026-10-02 23:26:27 +00:00

subagent_dynamic_tools.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

subagent_notifications.rs

Record resolved model and reasoning effort in sub-agent activity (#51463)

2026-10-06 19:29:40 +00:00

subagent_service_tier.rs

Make subagents follow the root service tier (#41308)

2026-08-28 09:48:13 +00:00

token_budget.rs

Track content provenance through prompt assembly and compaction (#53831)

2026-10-14 02:01:49 +00:00

token_usage_rollout.rs

Route rollout reads through the canonical JSON decoder (#42378)

2026-09-02 22:45:19 +00:00

tool_harness.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

tool_lifecycle.rs

Include root turn IDs in host-owned Apps tool calls (#51421)

2026-10-06 17:10:43 +00:00

tool_observation_tests.rs

Expose tool dispatch and timing observations to extensions (#47662)

2026-09-23 20:49:48 +00:00

tool_parallelism.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

tool_registration_metrics.rs

Record tool registration metrics for each sampling request (#51868)

2026-10-07 23:11:18 +00:00

tools.rs

Keep environment tools stable across readiness changes (#54098)

2026-10-14 21:06:42 +00:00

truncation.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

turn_error_details_tests.rs

Expose original error details to turn lifecycle contributors (#49138)

2026-09-29 02:40:51 +00:00

turn_input_submission.rs

Preserve running turn recovery across thread settings updates (#53879)

2026-10-14 06:03:02 +00:00

turn_phase_trace.rs

Expose and persist turn lineage across the app server (#51415)

2026-10-06 16:56:39 +00:00

turn_state.rs

Preserve Markdown formatting when copying TUI responses (#42847)

2026-09-04 20:38:08 +00:00

unified_exec_launch_failure_tests.rs

Remove the patched zsh shell execution backend (#52160)

2026-10-08 16:19:09 +00:00

unified_exec_mxc_powershell_tests.rs

Use a compatible PowerShell fallback for the Windows MXC sandbox (#49019)

2026-09-28 15:58:17 +00:00

unified_exec_process_events.rs

Enable credential masking for remote exec-server commands (#54309)

2026-10-15 14:41:16 +00:00

unified_exec_stdin_approval.rs

Allow stdin review under active grants with sandbox prompts disabled (#54119)

2026-10-14 23:02:21 +00:00

unified_exec_stdin_review_size.rs

Reject NUL bytes in reviewed terminal input (#41354)

2026-08-28 15:44:48 +00:00

unified_exec.rs

Expose originating tool call metadata in command environments (#52119)

2026-10-08 13:45:19 +00:00

unstable_features_warning.rs

…

user_notification.rs

Use descriptor-safe helpers for executable test fixtures (#50018)

2026-10-01 15:57:03 +00:00

user_shell_cmd.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

view_image.rs

Bind capability roots to environment selections (#51493)

2026-10-06 22:39:32 +00:00

wake_reservation.rs

Prevent invalidated wakeups from starting a turn (#51427)

2026-10-06 17:26:19 +00:00

web_search_system_proxy_tests.rs

Resolve proxy routes for standalone web search redirects (#47204)

2026-09-22 06:24:49 +00:00

web_search.rs

Remove GPT-5.4 from bundled catalogs and preserve migration prompts (#47932)

2026-09-24 20:28:31 +00:00

websocket_fallback.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

window_headers.rs

Default local threads to paginated history (#47900)

2026-09-24 18:07:37 +00:00

workspace_roots.rs

Protect .aws directories under sandbox writable roots (#48176)

2026-09-25 19:14:31 +00:00

worktree_trust.rs

Validate linked worktrees before inheriting project trust (#39616)

2026-08-20 06:29:32 +00:00