swastik-oai 451787127c Support direct Guardian review of patches invoked through exec_command (#58931) ...

## Why

Direct Guardian review rejected recorded `exec_command` calls intercepted as `apply_patch`, even though normal execution could review those patches.

## What changed

Share intercepted patch preparation between execution and direct review so Guardian assesses the verified patch and its approval requirement without applying it.

## Testing

Extend the direct patch review scenario to cover `exec_command` heredocs alongside native `apply_patch` calls, asserting identical live and direct review inputs and no file writes after direct approval.

GitOrigin-RevId: af62cf66a3f01c65a65c15cfad3fc9cdd1f2bf19

2026-11-02 17:05:56 +00:00

..

src

Support direct Guardian review of patches invoked through exec_command (#58931)

2026-11-02 17:05:56 +00:00

tests

Make apply_patch preserve line endings unconditionally (#51203)

2026-10-05 23:52:06 +00:00

BUILD.bazel

[codex] Consolidate shared prompts in codex-prompts (#25151)

2026-06-01 18:45:07 +00:00

Cargo.toml

[codex] migrate ExecutorFileSystem paths to PathUri (#27424)

2026-06-11 18:44:18 +00:00