mirror of
https://github.com/openai/codex.git
synced 2026-10-20 17:38:45 +00:00
felixxia-oai
41ed72c32b
## Why The transcript supplied to Guardian may omit earlier user instructions, restrictions, or revoked permissions. History retrieval lets the reviewer check relevant authorization before approving actions with side effects. ## What changed - Add the disabled-by-default `guardian_conversation_history_tools` feature. With Apps enabled, expose `user_message.search_messages` and `user_message.read_messages` through the parent's live Apps connection and conversation identity. - Recheck the parent's current app and tool policy on each call, rejecting disabled tools and calls requiring approval. - Add retrieval instructions that distinguish user authorization from assistant context and account for later revocations and incomplete results. Allow overrides through `auto_review.experimental_conversation_history_prompt`. - Limit history responses to an estimated 4,000 tokens by default, configurable through `auto_review.conversation_history_max_output_tokens`, while preserving stricter parent and reviewer limits. - Allow explicit extension registries for isolated sessions and prevent those sessions from inheriting the implicit Apps connection. ## Testing Add scenarios covering history tool exposure, parent connection and identity reuse, custom prompts, output truncation, stricter reviewer budgets, and live permission changes on a reused reviewer. Extend configuration coverage for blank prompt overrides. GitOrigin-RevId: 055a69b113c8548bd58e7d5618ea026ba6d1ffb1
125 lines
4.8 KiB
Rust
125 lines
4.8 KiB
Rust
mod capabilities;
|
|
mod contributors;
|
|
mod registry;
|
|
mod session_isolation;
|
|
mod state;
|
|
mod tool_policy;
|
|
mod turn_admission;
|
|
mod user_instructions;
|
|
|
|
pub use session_isolation::IsolatedSessionExtensions;
|
|
pub use session_isolation::SessionIsolation;
|
|
pub use tool_policy::ToolPolicy;
|
|
|
|
pub use capabilities::ConversationHistorySnapshot;
|
|
pub use capabilities::ExtensionEventSink;
|
|
pub use capabilities::ExtensionMetrics;
|
|
pub use capabilities::ExtensionWarning;
|
|
pub use capabilities::NoopExtensionEventSink;
|
|
pub use capabilities::NoopResponseItemInjector;
|
|
pub use capabilities::ResponseItemInjectionFuture;
|
|
pub use capabilities::ResponseItemInjector;
|
|
pub use codex_context_fragments::ContextualUserFragment;
|
|
pub use codex_mcp::McpProtocolMode;
|
|
pub use codex_mcp::ToolInfo as McpToolInfo;
|
|
pub use codex_protocol::models::ContentItemKind;
|
|
pub use codex_protocol::models::ResponseItem;
|
|
pub use codex_protocol::security_risk::SecurityRiskScore;
|
|
pub use codex_tools::ConversationHistory;
|
|
pub use codex_tools::ExtensionTurnItem;
|
|
pub use codex_tools::FunctionCallError;
|
|
pub use codex_tools::JsonToolOutput;
|
|
pub use codex_tools::NoopTurnItemEmitter;
|
|
pub use codex_tools::ResponsesApiTool;
|
|
pub use codex_tools::ToolCall;
|
|
pub use codex_tools::ToolCallSource;
|
|
pub use codex_tools::ToolEnvironment;
|
|
pub use codex_tools::ToolExecutor;
|
|
pub use codex_tools::ToolExecutorFuture;
|
|
pub use codex_tools::ToolName;
|
|
pub use codex_tools::ToolOutput;
|
|
pub use codex_tools::ToolPayload;
|
|
pub use codex_tools::ToolSpec;
|
|
pub use codex_tools::TurnItemEmissionFuture;
|
|
pub use codex_tools::TurnItemEmitter;
|
|
pub use codex_tools::parse_tool_input_schema;
|
|
pub use codex_tools::parse_tool_input_schema_without_compaction;
|
|
pub use contributors::ApprovalDecision;
|
|
pub use contributors::ApprovalDecisionInput;
|
|
pub use contributors::ApprovalReviewContributor;
|
|
pub use contributors::CommandStartInput;
|
|
pub use contributors::ConfigContributor;
|
|
pub use contributors::ContextContributor;
|
|
pub use contributors::ExtensionFuture;
|
|
pub use contributors::GuardianV2Enabled;
|
|
pub use contributors::McpServerContribution;
|
|
pub use contributors::McpServerContributionContext;
|
|
pub use contributors::McpServerContributor;
|
|
pub use contributors::McpToolContext;
|
|
pub use contributors::McpToolResultInput;
|
|
pub use contributors::McpToolSource;
|
|
pub use contributors::PreviousWorldStateSection;
|
|
pub use contributors::PromptFragment;
|
|
pub use contributors::PromptSlot;
|
|
pub use contributors::RenderedWorldStateFragment;
|
|
pub use contributors::SelectedPlugin;
|
|
pub use contributors::SelectedPluginContribution;
|
|
pub use contributors::SelectedPluginIdentity;
|
|
pub use contributors::SelectedPluginSnapshot;
|
|
pub use contributors::SkillInvocationContributor;
|
|
pub use contributors::SkillInvocationInput;
|
|
pub use contributors::SkillInvocationKind;
|
|
pub use contributors::SynchronousApprovalReviewer;
|
|
pub use contributors::ThreadIdleCause;
|
|
pub use contributors::ThreadIdleInput;
|
|
pub use contributors::ThreadLifecycleContributor;
|
|
pub use contributors::ThreadOriginator;
|
|
pub use contributors::ThreadReadyInput;
|
|
pub use contributors::ThreadResumeInput;
|
|
pub use contributors::ThreadStartInput;
|
|
pub use contributors::ThreadStopInput;
|
|
pub use contributors::TokenUsageContributor;
|
|
pub use contributors::ToolCallOutcome;
|
|
pub use contributors::ToolContributor;
|
|
pub use contributors::ToolFinishInput;
|
|
pub use contributors::ToolLifecycleContributor;
|
|
pub use contributors::ToolLifecycleFuture;
|
|
pub use contributors::ToolStartInput;
|
|
pub use contributors::ToolTimingBoundary;
|
|
pub use contributors::ToolTimingInput;
|
|
pub use contributors::TurnAbortInput;
|
|
pub use contributors::TurnContextContributionInput;
|
|
pub use contributors::TurnErrorInput;
|
|
pub use contributors::TurnInputContext;
|
|
pub use contributors::TurnInputContributor;
|
|
pub use contributors::TurnInputEnvironment;
|
|
pub use contributors::TurnItemContributor;
|
|
pub use contributors::TurnLifecycleContributor;
|
|
pub use contributors::TurnStartInput;
|
|
pub use contributors::TurnStartPhase;
|
|
pub use contributors::TurnStopInput;
|
|
pub use contributors::WorldStateContributionInput;
|
|
pub use contributors::WorldStateSectionContribution;
|
|
pub use registry::ExtensionRegistry;
|
|
pub use registry::ExtensionRegistryBuilder;
|
|
pub use registry::empty_extension_registry;
|
|
pub use state::ExtensionData;
|
|
pub use state::ExtensionDataInit;
|
|
pub use turn_admission::TurnStartAdmission;
|
|
pub use user_instructions::Instructions;
|
|
pub use user_instructions::LoadInstructionsFuture;
|
|
pub use user_instructions::LoadedUserInstructions;
|
|
pub use user_instructions::ThreadInstructionsProvider;
|
|
pub use user_instructions::UserInstructionsProvider;
|
|
|
|
pub use contributors::ToolDispatchInput;
|
|
|
|
mod model_request;
|
|
pub use model_request::ModelRequestContributor;
|
|
pub use model_request::ModelRequestInput;
|
|
pub use model_request::ModelRequestKind;
|
|
pub use model_request::ModelResponseError;
|
|
pub use model_request::ModelResponseInterceptor;
|
|
pub use model_request::ModelResponseStream;
|
|
pub use model_request::ResponseEvent;
|