Ankush Gupta 88235f881d Retain confirmed Code Mode messages for Guardian reviews (#48725) ...

## Why

Guardian needs the assistant's delivered question to interpret a user's reply. Messages sent through nested Code Mode tools must remain available as review context, and approvals based on earlier context must become stale when a new delivery is confirmed. Assistant messages do not themselves grant authorization.

## What changed

- Capture successful hosted User Messaging sends after input rewriting and before result callbacks or post-tool hooks.
- Retain bounded delivery text in acceptance order, persist it through cancellation and shutdown, and preserve it across compaction and resume with an older-client-compatible rollout encoding.
- Track assistant review context separately from user authorization, invalidating pending and cached approvals for both local and worker reviews when that context changes.
- Associate retained deliveries with the correct instruction or communication boundary during rollback.

## Testing

Add coverage for nested messaging review context, fast replies and communication ordering, shutdown persistence, stale local and worker approvals, rollout compatibility, and rollback retention.

GitOrigin-RevId: 1bc1ec9e8947560b99f4b39a42ddb9f2099f519b

2026-09-27 15:03:38 +00:00

..

context_snapshot

Add an opt-in preference for the local MXC sandbox (#47375)

2026-09-22 21:57:52 +00:00

apps_test_server.rs

Retain confirmed Code Mode messages for Guardian reviews (#48725)

2026-09-27 15:03:38 +00:00

BUILD.bazel

Unify context snapshots and group requests into windows (#44932)

2026-09-11 22:55:38 +00:00

Cargo.toml

Classify MCP auth and approval outcomes in analytics (#45716)

2026-09-15 15:03:29 +00:00

context_snapshot.rs

Make context snapshot text rendering consistent (#44976)

2026-09-12 05:04:11 +00:00

hooks.rs

Add keyed shell environment policy filters (#34590)

2026-07-21 18:23:26 +00:00

lib.rs

Add direct replies for thread settings updates (#47937)

2026-09-24 20:59:51 +00:00

process.rs

feat: close unified_exec at end of turn (#8052)

2025-12-16 12:16:43 +00:00

responses.rs

Retain confirmed Code Mode messages for Guardian reviews (#48725)

2026-09-27 15:03:38 +00:00

startup_tests.rs

Harden core test fixture startup assertions (#41194)

2026-08-27 19:58:09 +00:00

startup.rs

Harden core test fixture startup assertions (#41194)

2026-08-27 19:58:09 +00:00

streaming_sse.rs

Preserve Guardian parent response IDs across sampling requests (#45441)

2026-09-14 15:13:13 +00:00

test_codex_exec.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

test_codex.rs

Allow exec-server to proxy permitted private IPs upstream (#48568)

2026-09-26 23:17:41 +00:00

test_environment_tests.rs

test: branch on target OS instead of runner flavor (#29712)

2026-06-23 14:27:13 -07:00

test_environment.rs

test: branch on target OS instead of runner flavor (#29712)

2026-06-23 14:27:13 -07:00

tracing.rs

feat(core, tracing): create turn spans over websockets (#14632)

2026-03-19 03:41:06 +00:00

zsh_fork.rs

Deduplicate zsh fork test setup (#39790)

2026-08-20 19:43:54 +00:00