swastik-oai a4b4082b5f Apply PreToolUse hooks before direct Guardian review policy checks (#58368) ...

## Why

Direct Guardian review checked recorded `exec_command` calls without applying `PreToolUse` hooks, so approval decisions could miss hook rewrites or denials.

## What changed

Run the shared `PreToolUse` hook handling before evaluating approval requirements. Use the rewritten arguments for policy checks and the Guardian approval request, and return an error when a hook blocks the call, even if policy would otherwise skip review.

## Testing

Add regression tests covering rewritten commands that require approval and hook denials for policy-allowed commands. Verify the rewritten approval request, hook events and recorded denial context, and that reviewed commands are not executed.

GitOrigin-RevId: 3ec7700f695e422ac59c903c285acc0cf633b915

2026-10-30 15:28:20 +00:00

..

skills_extension

Add an option to omit descriptions from skill catalogs (#57500)

2026-10-27 16:16:17 +00:00

snapshots

Apply PreToolUse hooks before direct Guardian review policy checks (#58368)

2026-10-30 15:28:20 +00:00

step_settings

Add configured thread environment inheritance for subagents (#55375)

2026-10-19 20:30:44 +00:00

abort_lifecycle.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

abort_tasks.rs

Allow root turn suspension with live descendants (#54414)

2026-10-15 20:57:39 +00:00

additional_context.rs

Record additional context counts, sizes, and truncation metrics (#58144)

2026-10-29 18:24:34 +00:00

agent_control_tests.rs

Add host-reserved V2 child creation APIs (#57586)

2026-10-27 23:02:27 +00:00

agent_eviction_tests.rs

Add direct replies for thread settings updates (#47937)

2026-09-24 20:59:51 +00:00

agent_execution.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

agent_mailbox.rs

Add lifecycle hooks for inter-agent messages (#55657)

2026-10-20 19:39:43 +00:00

agent_message_wake.rs

Make agent-message wakes respect interrupts and Plan mode (#56330)

2026-10-23 02:21:49 +00:00

agent_websocket.rs

Preserve tool declaration mode across resumed context windows (#51480)

2026-10-06 21:28:13 +00:00

agents_md_refresh.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

agents_md.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

app_tool_exposure_strict_tests.rs

Keep third-party tools deferred in strict Code Mode Only (#50687)

2026-10-03 18:15:13 +00:00

app_tool_exposure.rs

Keep third-party tools deferred in strict Code Mode Only (#50687)

2026-10-03 18:15:13 +00:00

apply_patch_cli.rs

Bind capability roots to environment selections (#51493)

2026-10-06 22:39:32 +00:00

apply_patch_serialization.rs

Standardize shell execution on unified exec (#39757)

2026-08-20 17:46:05 +00:00

apply_patch_system_aliases.rs

Protect metadata writes through macOS case aliases (#54273)

2026-10-15 12:01:04 +00:00

approvals.rs

Support catalog headings for saved command-prefix notices (#57599)

2026-10-27 23:53:34 +00:00

audio_truncation.rs

…

auth_recovery_policy.rs

Enforce application network policy across app-server requests (#47407)

2026-09-23 00:47:07 +00:00

auto_review.rs

Preserve model metadata origin through runtime resolution (#58361)

2026-10-30 15:11:02 +00:00

base_instructions.rs

Refresh model instructions in incremental-tool context windows (#53872)

2026-10-14 05:36:44 +00:00

bedrock_multi_agent_tests.rs

Enable multi-agent V2 and Ultra reasoning on Amazon Bedrock (#49345)

2026-09-29 19:03:30 +00:00

bedrock_service_tier_tests.rs

Advertise Ultrafast for GPT-6.1 Sol on Amazon Bedrock (#51794)

2026-10-07 18:32:50 +00:00

builtin_model_catalog.rs

Allow catalog URL overrides for the built-in OpenAI provider (#57567)

2026-10-27 21:50:08 +00:00

canonical_plugin_connectors.rs

Honor canonical plugin disables for shared connectors (#45755)

2026-09-15 18:23:08 +00:00

catalog_permission_messages.rs

Allow model catalogs to customize approval instruction headings (#57581)

2026-10-27 22:26:12 +00:00

cli_stream.rs

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

client_websockets_runtime_auth.rs

Add file-backed storage for gateway OAuth credentials (#58219)

2026-10-30 02:28:51 +00:00

client_websockets.rs

Add a credential file override for GCP provider authentication (#57188)

2026-10-26 18:33:05 +00:00

client.rs

Preserve reasoning token accounting across resume and fork (#57839)

2026-10-28 21:22:06 +00:00

cloud_config.rs

Require managed configuration from the configured server (#56055)

2026-10-22 02:15:00 +00:00

code_mode_agent_message_tests.rs

Treat code-mode collaboration messages as plaintext (#55633)

2026-10-20 17:15:35 +00:00

code_mode_dynamic_tools_tests.rs

Allow dynamic tool calls to execute in parallel (#54654)

2026-10-16 16:28:53 +00:00

code_mode_elicitation.rs

…

code_mode_host_recovery_tests.rs

Restrict code-mode host replacement to session admission (#57782)

2026-10-28 16:46:41 +00:00

code_mode_model_messages.rs

Support model-catalog overrides for Code Mode tool messages (#47118)

2026-09-21 22:49:17 +00:00

code_mode.rs

Resolve network approval prompts when their requests end (#58350)

2026-10-30 14:40:32 +00:00

codex_apps_protocol.rs

Share Apps tool catalogs without retaining unused snapshots (#45440)

2026-09-14 15:06:28 +00:00

codex_delegate.rs

Preserve MCP tool output as content items (#40737)

2026-08-25 23:42:50 +00:00

collaboration_instructions.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

command_lifecycle_tests.rs

Add a command-start callback for tool lifecycle extensions (#46539)

2026-09-19 00:46:06 +00:00

compact_program_tests.rs

Enable Cyber access programs for API-key sessions by default (#53717)

2026-10-13 16:57:54 +00:00

compact_remote_trimming.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

compact_remote.rs

Add a built-in Google Cloud Vertex AI provider (#56265)

2026-10-22 21:01:14 +00:00

compact_resume_fork.rs

Remove the long-thread accuracy warning after compaction (#55355)

2026-10-19 19:24:26 +00:00

compact.rs

Preserve reasoning token accounting across resume and fork (#57839)

2026-10-28 21:22:06 +00:00

context_annotations.rs

Allow advisory rollout budgets with optional limit enforcement (#57187)

2026-10-26 18:31:49 +00:00

critical_path_runtime.rs

Capture direct-tool critical paths behind a feature flag (#57201)

2026-10-26 19:19:10 +00:00

current_time_reminder.rs

Make environment context date and timezone configurable (#52164)

2026-10-08 16:27:10 +00:00

cyber_access_program.rs

Allow providers to opt into Cyber access programs (#58190)

2026-10-29 23:24:52 +00:00

cyber_exec_policy.rs

Support catalog headings for saved command-prefix notices (#57599)

2026-10-27 23:53:34 +00:00

daybreak_access.rs

Move the exec-server test fixture into shared test support (#52674)

2026-10-09 18:58:53 +00:00

deprecation_notice.rs

Remove the patched zsh shell execution backend (#52160)

2026-10-08 16:19:09 +00:00

direct_tool_metadata.rs

Track history initialization in Responses turn metadata (#52325)

2026-10-08 23:34:16 +00:00

dynamic_tool_cancellation.rs

Record truncation metrics for accepted Guardian review inputs (#53628)

2026-10-13 10:21:42 +00:00

exec_policy.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

exec.rs

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

executor_discovery_v2.rs

Preserve remote read compatibility with older executors (#58195)

2026-10-29 23:56:17 +00:00

extension_sandbox.rs

Store generated image items as attachment references (#54398)

2026-10-15 19:51:22 +00:00

external_auth.rs

Use descriptor-safe helpers for executable test fixtures (#50018)

2026-10-01 15:57:03 +00:00

fork_thread.rs

Box session metadata and compaction payloads in RolloutItem (#55733)

2026-10-21 02:41:05 +00:00

gateway_auth.rs

Default gateway OAuth delivery to Authorization bearer tokens (#57313)

2026-10-27 00:08:07 +00:00

gcp.rs

Add GPT-6.1 Terra to model catalogs (#57293)

2026-10-26 22:13:14 +00:00

git_enrichment.rs

Expose and persist turn lineage across the app server (#51415)

2026-10-06 16:56:39 +00:00

guardian_authorization_refresh.rs

Box session metadata and compaction payloads in RolloutItem (#55733)

2026-10-21 02:41:05 +00:00

guardian_authorization.rs

Box session metadata and compaction payloads in RolloutItem (#55733)

2026-10-21 02:41:05 +00:00

guardian_cached_score_tests.rs

Use serving assessments for adaptive Guardian review (#58075)

2026-10-29 12:54:39 +00:00

guardian_checkpoint_migration_tests.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

guardian_connector_trust.rs

Run environment hooks on their owning executors (#56343)

2026-10-23 04:01:39 +00:00

guardian_context_budget.rs

Share the Guardian context delivery token limit (#58071)

2026-10-29 12:37:59 +00:00

guardian_cyber_access_program_tests.rs

Forward per-turn Cyber access programs to Guardian (#52689)

2026-10-09 20:14:04 +00:00

guardian_environments_tests.rs

Add an option to omit descriptions from skill catalogs (#57500)

2026-10-27 16:16:17 +00:00

guardian_heartbeat_authorization.rs

Remove obsolete Guardian thread-context enables from tests (#51184)

2026-10-05 22:17:02 +00:00

guardian_history.rs

Deduplicate native agent messages in Guardian review context (#55391)

2026-10-19 22:01:41 +00:00

guardian_mcp_elicitation.rs

Measure Guardian approval blocking time per turn (#55591)

2026-10-20 14:43:08 +00:00

guardian_pending_root_delivery.rs

Refresh Guardian reviews when review context changes (#53797)

2026-10-13 23:29:53 +00:00

guardian_persistence_tests.rs

Load persisted sender context for Guardian reviews (#51734)

2026-10-07 15:47:21 +00:00

guardian_retained_context.rs

Track content provenance through prompt assembly and compaction (#53831)

2026-10-14 02:01:49 +00:00

guardian_retry.rs

Expose lifecycle timestamps on app-server thread items (#57172)

2026-10-26 18:13:00 +00:00

guardian_review_cancellation.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

guardian_review.rs

Preserve model metadata origin through runtime resolution (#58361)

2026-10-30 15:11:02 +00:00

guardian_root_handoff.rs

Fix guardian handoff mocks for native history tests (#57468)

2026-10-27 14:28:15 +00:00

guardian_sandbox_retry.rs

Add regression coverage for Guardian sandbox retry approvals (#54265)

2026-10-15 11:24:07 +00:00

guardian_sender_messages_tests.rs

Capture sender context for codex_app.create_thread deliveries (#54590)

2026-10-16 12:37:14 +00:00

guardian_subagent_authorization.rs

Respect model catalog origins when selecting Guardian reviewers (#57770)

2026-10-28 16:00:30 +00:00

guardian_subagent_notification_tests.rs

Notify parent agents when Guardian stops a subagent (#49312)

2026-09-29 16:53:11 +00:00

hooks_cwd_tests.rs

Preserve command cwd in permission and post-tool hooks (#57203)

2026-10-26 19:21:08 +00:00

hooks_executor.rs

Include environment hooks in thread hook listings (#56553)

2026-10-23 18:39:28 +00:00

hooks_mcp.rs

Start dormant MCP servers for hook calls (#55263)

2026-10-19 11:40:15 +00:00

hooks_plugin_policy_refresh.rs

Apply session plugin overrides during MCP config refresh (#57974)

2026-10-29 03:14:13 +00:00

hooks.rs

Apply PreToolUse hooks before direct Guardian review policy checks (#58368)

2026-10-30 15:28:20 +00:00

image_rollout.rs

Replace unavailable image references in model requests (#57585)

2026-10-27 22:59:22 +00:00

injected_models_cache.rs

Preserve model metadata origin through runtime resolution (#58361)

2026-10-30 15:11:02 +00:00

interrupt_hooks.rs

Add hooks for interrupted turns (#40511)

2026-08-25 01:27:18 +00:00

items.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

json_result.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

live_cli.rs

…

managed_threads_tests.rs

Add local diagnostic ZIP exports to the app server (#55940)

2026-10-21 16:43:30 +00:00

mcp_auth_elicitation.rs

Expose and persist turn lineage across the app server (#51415)

2026-10-06 16:56:39 +00:00

mcp_auth_refresh.rs

Add negotiated network policy metadata support for MCP calls (#56278)

2026-10-22 22:33:07 +00:00

mcp_ema_config.rs

Restrict enterprise MCP auth and fail closed on config refresh (#49260)

2026-09-29 13:08:37 +00:00

mcp_executor_context_tests.rs

Apply session plugin overrides during MCP config refresh (#57974)

2026-10-29 03:14:13 +00:00

mcp_extension_protocol.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

mcp_oauth_refresh_tests.rs

Retire rejected MCP OAuth refresh tokens (#54079)

2026-10-14 20:00:52 +00:00

mcp_optional_startup_grace.rs

Restrict enterprise MCP auth and fail closed on config refresh (#49260)

2026-09-29 13:08:37 +00:00

mcp_refresh_cleanup.rs

Upgrade Windows bindings to windows-sys 0.61.2 (#50058)

2026-10-01 18:05:05 +00:00

mcp_sandbox_tests.rs

Separate MCP sandbox policy from launcher metadata (#53709)

2026-10-13 16:23:44 +00:00

mcp_startup_refresh_http_proxy.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

mcp_storage_telemetry_tests.rs

Box session metadata and compaction payloads in RolloutItem (#55733)

2026-10-21 02:41:05 +00:00

mcp_subagent_elicitation.rs

Signal abandonment of unanswered MCP elicitations (#51611)

2026-10-07 07:57:14 +00:00

mcp_tool_cache.rs

Support Apps tool catalogs without shared snapshots (#57572)

2026-10-27 22:01:13 +00:00

mcp_tool_exposure.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

mcp_turn_metadata.rs

Include tool names and annotation hints in MCP approval metadata (#58161)

2026-10-29 19:34:46 +00:00

mcp_user_verification.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

mod.rs

Allow catalog URL overrides for the built-in OpenAI provider (#57567)

2026-10-27 21:50:08 +00:00

model_overrides.rs

…

model_provider_requirements_tests.rs

Remove the patched zsh shell execution backend (#52160)

2026-10-08 16:19:09 +00:00

model_request.rs

Allow upstream interruption when canceling Responses Lite turns (#57864)

2026-10-29 00:03:28 +00:00

model_runtime_selectors.rs

Preserve model metadata origin through runtime resolution (#58361)

2026-10-30 15:11:02 +00:00

model_switching.rs

Preserve model metadata origin through runtime resolution (#58361)

2026-10-30 15:11:02 +00:00

model_visible_layout.rs

Add an option to omit descriptions from skill catalogs (#57500)

2026-10-27 16:16:17 +00:00

models_cache_auth.rs

Preserve model catalog caches across header credential rotation (#54946)

2026-10-17 23:22:14 +00:00

models_cache_ttl.rs

Preserve model metadata origin through runtime resolution (#58361)

2026-10-30 15:11:02 +00:00

models_etag_responses.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

multi_agent_mode.rs

Source proactive multi-agent instructions from the model catalog (#41457)

2026-08-29 03:28:19 +00:00

multi_agent_restore_tests.rs

Reuse unchanged history snapshots when resuming threads (#49600)

2026-09-30 11:59:13 +00:00

multi_agent_resume.rs

Record initialization analytics for resumed subagents (#51206)

2026-10-06 00:16:18 +00:00

multi_agent_tool_descriptions.rs

Support model-specific descriptions for agent message board tools (#47670)

2026-09-23 21:34:11 +00:00

multi_exec_server_sandbox.rs

Move the exec-server test fixture into shared test support (#52674)

2026-10-09 18:58:53 +00:00

network_approval_completion.rs

Include environment hooks in thread hook listings (#56553)

2026-10-23 18:39:28 +00:00

network_approval.rs

Serialize manual network approval prompts per endpoint (#58351)

2026-10-30 14:40:59 +00:00

openai_file_mcp.rs

Format all Rust sources and clean up repository checks (#57314)

2026-10-27 00:23:39 +00:00

otel.rs

Add an option to disable successful SSE delta logs (#58034)

2026-10-29 10:34:17 +00:00

output_token_replay.rs

Add opt-in output token replay for OpenAI requests (#52742)

2026-10-10 01:25:00 +00:00

override_updates.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

pending_input_persistence.rs

Keep spawned children provisional until the spawn result returns (#53654)

2026-10-13 12:42:53 +00:00

pending_input.rs

Allow upstream interruption when canceling Responses Lite turns (#57864)

2026-10-29 00:03:28 +00:00

permissions_messages.rs

Allow model catalogs to customize approval instruction headings (#57581)

2026-10-27 22:26:12 +00:00

personality.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

plugins.rs

Add an option to omit descriptions from skill catalogs (#57500)

2026-10-27 16:16:17 +00:00

prompt_cache_key.rs

Allow callers to control prompt cache keys independently of session IDs (#55587)

2026-10-20 14:14:59 +00:00

prompt_caching.rs

Respect model catalog origins when selecting Guardian reviewers (#57770)

2026-10-28 16:00:30 +00:00

prompt_debug_tests.rs

Add opt-in output token replay for OpenAI requests (#52742)

2026-10-10 01:25:00 +00:00

quota_exceeded.rs

Fix retry classification for throttling and quota errors (#45602)

2026-09-15 04:20:38 +00:00

realtime_attachment.rs

Preserve realtime V3 transcripts in conversation history (#58221)

2026-10-30 02:43:02 +00:00

realtime_conversation.rs

Detach realtime sideband observers without ending the session (#57817)

2026-10-28 20:10:15 +00:00

realtime_initial_items.rs

Forward client voice session IDs in realtime requests (#53784)

2026-10-13 22:21:31 +00:00

realtime_misalignment.rs

Forward client voice session IDs in realtime requests (#53784)

2026-10-13 22:21:31 +00:00

realtime_sideband_endpoint.rs

Forward client voice session IDs in realtime requests (#53784)

2026-10-13 22:21:31 +00:00

realtime_system_proxy.rs

Forward client voice session IDs in realtime requests (#53784)

2026-10-13 22:21:31 +00:00

reasoning_effort_override.rs

Enable reasoning effort overrides by default (#56163)

2026-10-22 12:46:24 +00:00

remote_env_capability_roots_tests.rs

Box session metadata and compaction payloads in RolloutItem (#55733)

2026-10-21 02:41:05 +00:00

remote_env_failure_tests.rs

Retry transient environment startup failures on the next turn (#57866)

2026-10-29 00:42:21 +00:00

remote_env_required_skills_tests.rs

Add an option to omit descriptions from skill catalogs (#57500)

2026-10-27 16:16:17 +00:00

remote_env_spawn_tests.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

remote_env.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

remote_models.rs

Preserve model metadata origin through runtime resolution (#58361)

2026-10-30 15:11:02 +00:00

request_compression.rs

…

request_permissions_tool.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

request_permissions.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

request_plugin_install.rs

Avoid unnecessary connector directory work for tool suggestions (#57257)

2026-10-26 21:08:15 +00:00

request_user_input_async.rs

Honor the user input setting for asynchronous questions (#51908)

2026-10-08 02:06:58 +00:00

request_user_input.rs

Account for token usage from incomplete responses (#53670)

2026-10-13 13:36:24 +00:00

responses_api_proxy_headers.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

responses_lite.rs

Enable incremental tools by default for Responses Lite (#55368)

2026-10-19 20:01:37 +00:00

responses_system_proxy.rs

Expose system proxy support as an experimental setting (#58157)

2026-10-29 19:16:28 +00:00

resume_warning.rs

Remove obsolete fields from persisted turn context (#51492)

2026-10-06 22:39:06 +00:00

resume.rs

Support store-owned preparation when resuming threads (#54059)

2026-10-14 18:02:25 +00:00

retry_after.rs

Distinguish policy-restricted capacity failures from server overloads (#57452)

2026-10-27 13:31:38 +00:00

review.rs

Add opt-in output token replay for OpenAI requests (#52742)

2026-10-10 01:25:00 +00:00

rmcp_client.rs

Preserve model metadata origin through runtime resolution (#58361)

2026-10-30 15:11:02 +00:00

rollout_budget.rs

Allow advisory rollout budgets with optional limit enforcement (#57187)

2026-10-26 18:31:49 +00:00

rollout_compression.rs

Reuse unchanged history snapshots when resuming threads (#49600)

2026-09-30 11:59:13 +00:00

rollout_list_find.rs

…

safety_buffering.rs

…

safety_check_downgrade.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

scenarios_agent_eviction_tests.rs

Add configured thread environment inheritance for subagents (#55375)

2026-10-19 20:30:44 +00:00

scenarios_agent_message_board_remote.rs

Expose message board permissions and structured denials (#52568)

2026-10-09 13:15:39 +00:00

scenarios_agent_message_board.rs

Defer agent mail after empty final answers (#56133)

2026-10-22 10:03:05 +00:00

scenarios_catalog_approval_instructions_tests.rs

Allow model catalogs to customize approval instruction headings (#57581)

2026-10-27 22:26:12 +00:00

scenarios_code_mode_settled_helpers_tests.rs

Add promise settlement streaming helpers to code mode (#51126)

2026-10-05 16:58:29 +00:00

scenarios_compaction_tests.rs

Add scenario coverage for remote /compact context preservation (#50516)

2026-10-03 04:24:52 +00:00

scenarios_content_filter.rs

Add recovery guidance to content-filter retries (#49119)

2026-09-29 01:14:41 +00:00

scenarios_context_management_tools.rs

Apply model catalog overrides to history, notes, and context tools (#56313)

2026-10-23 00:46:28 +00:00

scenarios_credential_masking.rs

Mark built-in dummy credentials and strengthen collision checks (#56297)

2026-10-22 23:48:20 +00:00

scenarios_dynamic_tools.rs

Allow replacing dynamic tools between model steps (#57553)

2026-10-27 19:50:41 +00:00

scenarios_frozen_cloud_skills.rs

Add an option to omit descriptions from skill catalogs (#57500)

2026-10-27 16:16:17 +00:00

scenarios_guardian_agent_messages_tests.rs

Preserve native tool-call evidence through Guardian review (#58040)

2026-10-29 11:15:52 +00:00

scenarios_guardian_conversation_history_tests.rs

Restrict enterprise MCP auth and fail closed on config refresh (#49260)

2026-09-29 13:08:37 +00:00

scenarios_guardian_direct_review.rs

Apply PreToolUse hooks before direct Guardian review policy checks (#58368)

2026-10-30 15:28:20 +00:00

scenarios_guardian_extra_policy.rs

Add an optional JSON transcript format for Guardian (#51465)

2026-10-06 19:30:57 +00:00

scenarios_guardian_handoff.rs

Preserve native multi-agent calls in Guardian review history (#57448)

2026-10-27 13:02:57 +00:00

scenarios_guardian_heartbeat.rs

Enable instant interrupts by default (#51812)

2026-10-07 19:42:35 +00:00

scenarios_guardian_orchestrator_connector.rs

Use conversations for all Guardian v2 async classification (#56556)

2026-10-23 18:48:10 +00:00

scenarios_guardian_sender_context.rs

Load persisted sender context for Guardian reviews (#51734)

2026-10-07 15:47:21 +00:00

scenarios_incremental_tools_resume.rs

Emit one developer notice per incremental namespace update batch (#52295)

2026-10-08 22:01:24 +00:00

scenarios_incremental_tools.rs

Preserve parent tool declarations in prediction forks (#57287)

2026-10-26 22:05:23 +00:00

scenarios_indirect_namespace_prefixes.rs

Support model-specific function description prefixes (#51930)

2026-10-08 03:20:54 +00:00

scenarios_mailbox_preemption_tests.rs

Drain WebSocket responses on mailbox preemption (#55969)

2026-10-21 19:29:08 +00:00

scenarios_managed_human_approval_tests.rs

Add managed command checkpoints requiring fresh human approval (#58045)

2026-10-29 11:23:51 +00:00

scenarios_mcp_ema.rs

Require managed configuration from the configured server (#56055)

2026-10-22 02:15:00 +00:00

scenarios_mcp_resource_messages.rs

Keep MCP resource helpers available in code mode (#50546)

2026-10-03 06:42:48 +00:00

scenarios_mcp_sharing.rs

Share eligible local stdio MCP connections across chats (#57211)

2026-10-26 19:37:32 +00:00

scenarios_model_instructions.rs

Scope model catalogs and caches by thread originator (#56284)

2026-10-22 22:44:48 +00:00

scenarios_mxc.rs

Add an opt-in preference for the local MXC sandbox (#47375)

2026-09-22 21:57:52 +00:00

scenarios_partial_answers.rs

Preserve parent history by default in full agent forks (#55548)

2026-10-20 11:56:17 +00:00

scenarios_preparation.rs

Separate thread preparation from execution persistence (#47199)

2026-09-22 05:53:29 +00:00

scenarios_provider_capabilities.rs

Add capability overrides for custom model providers (#50459)

2026-10-02 23:26:27 +00:00

scenarios_reserved_spawn.rs

Add host-reserved V2 child creation APIs (#57586)

2026-10-27 23:02:27 +00:00

scenarios_retained_tool_outputs.rs

Close input admission while a turn finishes recording (#53452)

2026-10-12 18:54:22 +00:00

scenarios_shared_instructions.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

scenarios_skill_catalog_dedup.rs

Add an option to omit descriptions from skill catalogs (#57500)

2026-10-27 16:16:17 +00:00

scenarios_strict_3p_cache.rs

Keep third-party tools deferred in strict Code Mode Only (#50687)

2026-10-03 18:15:13 +00:00

scenarios_tools_namespace_budget.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

scenarios_web_search.rs

Add model-gated literature search to standalone web search (#57542)

2026-10-27 19:11:56 +00:00

scenarios_world_state_prefix_tests.rs

Support window prefixes for extension world-state sections (#57276)

2026-10-26 21:46:26 +00:00

scenarios.rs

Support negotiated server-side truncation in Code Mode clients (#58125)

2026-10-29 16:57:12 +00:00

search_tool.rs

Include root turn IDs in host-owned Apps tool calls (#51421)

2026-10-06 17:10:43 +00:00

settings_commits.rs

Restore thread-owned permissions on cold resume (#53150)

2026-10-11 15:48:35 +00:00

settings_constraints.rs

Allow model catalogs to customize approval instruction headings (#57581)

2026-10-27 22:26:12 +00:00

shell_snapshot.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

skills_extension.rs

Add host-reserved V2 child creation APIs (#57586)

2026-10-27 23:02:27 +00:00

skills.rs

Add an option to omit descriptions from skill catalogs (#57500)

2026-10-27 16:16:17 +00:00

spawn_agent_description.rs

Preserve model metadata origin through runtime resolution (#58361)

2026-10-30 15:11:02 +00:00

spawn_settings_tests.rs

Test spawn settings reporting after child removal (#47258)

2026-09-22 11:10:29 +00:00

sqlite_state.rs

Add experimental attached thread forks (#56351)

2026-10-23 04:52:47 +00:00

startup_cancellation.rs

Prepare skill catalogs before building step tools (#55357)

2026-10-19 19:33:11 +00:00

step_settings_compaction.rs

Remove obsolete fields from persisted turn context (#51492)

2026-10-06 22:39:06 +00:00

step_settings_snapshots.rs

Remove retired model entries while preserving migration prompts (#44250)

2026-09-09 17:56:33 +00:00

step_settings.rs

Allow model catalogs to customize approval instruction headings (#57581)

2026-10-27 22:26:12 +00:00

stream_error_allows_next_turn.rs

Add a credential file override for GCP provider authentication (#57188)

2026-10-26 18:33:05 +00:00

stream_no_completed.rs

Add a credential file override for GCP provider authentication (#57188)

2026-10-26 18:33:05 +00:00

subagent_dynamic_tools.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

subagent_notifications.rs

Persist subagent relationships before creating child storage (#58129)

2026-10-29 17:25:51 +00:00

subagent_service_tier.rs

Make subagents follow the root service tier (#41308)

2026-08-28 09:48:13 +00:00

token_budget.rs

Add an option to omit descriptions from skill catalogs (#57500)

2026-10-27 16:16:17 +00:00

token_usage_rollout.rs

Route rollout reads through the canonical JSON decoder (#42378)

2026-09-02 22:45:19 +00:00

tool_harness.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

tool_lifecycle.rs

Include root turn IDs in host-owned Apps tool calls (#51421)

2026-10-06 17:10:43 +00:00

tool_observation_tests.rs

Expose tool dispatch and timing observations to extensions (#47662)

2026-09-23 20:49:48 +00:00

tool_parallelism.rs

Add host-reserved V2 child creation APIs (#57586)

2026-10-27 23:02:27 +00:00

tool_registration_metrics.rs

Tag tool registration metrics with effective incremental tools mode (#55692)

2026-10-20 22:34:40 +00:00

tools.rs

Pin the Rust toolchain to 1.95.0 (#57373)

2026-10-27 05:52:01 +00:00

truncation.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

turn_error_details_tests.rs

Expose original error details to turn lifecycle contributors (#49138)

2026-09-29 02:40:51 +00:00

turn_input_submission.rs

Preserve running turn recovery across thread settings updates (#53879)

2026-10-14 06:03:02 +00:00

turn_phase_trace.rs

Wait for turn profiles before asserting sampling counts in trace tests (#57692)

2026-10-28 10:13:29 +00:00

turn_state.rs

Preserve Markdown formatting when copying TUI responses (#42847)

2026-09-04 20:38:08 +00:00

unified_exec_launch_failure_tests.rs

Expose lifecycle timestamps on app-server thread items (#57172)

2026-10-26 18:13:00 +00:00

unified_exec_mxc_powershell_tests.rs

Use a compatible PowerShell fallback for the Windows MXC sandbox (#49019)

2026-09-28 15:58:17 +00:00

unified_exec_process_events.rs

Read unified exec output directly from stdout and stderr (#57191)

2026-10-26 19:01:45 +00:00

unified_exec_stdin_approval.rs

Include terminal launch commands in Guardian stdin reviews (#57758)

2026-10-28 15:10:52 +00:00

unified_exec_stdin_review_size.rs

Reject NUL bytes in reviewed terminal input (#41354)

2026-08-28 15:44:48 +00:00

unified_exec.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

unstable_features_warning.rs

…

user_notification.rs

Release sampling prompts after stream setup (#57618)

2026-10-28 02:00:30 +00:00

user_shell_cmd.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

view_image.rs

Preserve model metadata origin through runtime resolution (#58361)

2026-10-30 15:11:02 +00:00

wake_reservation.rs

Preserve model metadata origin through runtime resolution (#58361)

2026-10-30 15:11:02 +00:00

web_search_system_proxy_tests.rs

Resolve proxy routes for standalone web search redirects (#47204)

2026-09-22 06:24:49 +00:00

web_search.rs

Remove GPT-5.4 from bundled catalogs and preserve migration prompts (#47932)

2026-09-24 20:28:31 +00:00

websocket_fallback.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

window_headers.rs

Remove the long-thread accuracy warning after compaction (#55355)

2026-10-19 19:24:26 +00:00

workspace_roots.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

worktree_trust.rs

Validate linked worktrees before inheriting project trust (#39616)

2026-08-20 06:29:32 +00:00