jif 54b8f112a3 Preserve parent sandbox enforcement for memory consolidation (#32441) ...

## What changed

- Pass the parent turn's effective permission profile to the memory consolidation agent, including thread-level permission and legacy sandbox overrides.
- Preserve disabled and externally enforced permission profiles instead of replacing them with a managed sandbox.
- Continue restricting consolidation to the memory root without network access when the parent uses Codex-managed permissions.

## Testing

- Add coverage for disabled, external, and managed parent permission profiles.

GitOrigin-RevId: 9ca3be0e41dc14d858053f6f70e33f4ae7c578e1

2026-07-11 15:20:49 +00:00

..

bin

test: add delayed exec-server transport (#31427)

2026-07-09 00:17:38 +00:00

config

Import enabled plugins from known marketplaces (#31672)

2026-07-09 12:16:15 -04:00

request_processors

Preserve parent sandbox enforcement for memory consolidation (#32441)

2026-07-11 15:20:49 +00:00

analytics_utils.rs

[codex-analytics] ingest server requests and responses (#17088)

2026-04-29 19:56:41 +00:00

app_info.rs

[apps] Thread structured icon assets through app list (#29889)

2026-06-24 13:25:44 -07:00

app_server_tracing.rs

Restore app-server websocket listener with auth guard (#22404)

2026-05-12 18:40:53 -07:00

attestation.rs

fix(app-server): speed up shutdown (#23578)

2026-05-20 17:30:19 +00:00

auth_mode.rs

[codex] Add externally provided Codex auth (#31274)

2026-07-07 17:43:19 -07:00

bespoke_event_handling.rs

Include terminal errors in turn completion events (#32280)

2026-07-10 22:04:03 +00:00

command_exec.rs

Add network environment ID plumbing (#28766)

2026-06-18 14:09:38 +02:00

config_layer.rs

config: own layer provenance types (#29722)

2026-06-24 04:03:04 +00:00

config_manager_service_tests.rs

config: own layer provenance types (#29722)

2026-06-24 04:03:04 +00:00

config_manager_service.rs

config: own layer provenance types (#29722)

2026-06-24 04:03:04 +00:00

config_manager.rs

[codex] add latency tracing spans (#27710)

2026-06-12 17:11:32 -07:00

connection_cleanup.rs

fix(app-server): avoid blocking connection cleanup (#26852)

2026-06-08 10:20:54 -07:00

connection_rpc_gate.rs

fix(app-server): avoid blocking connection cleanup (#26852)

2026-06-08 10:20:54 -07:00

current_time.rs

[app-server] increase currentTime/read timeout (#30384)

2026-06-27 16:42:03 -07:00

dynamic_tools.rs

[codex] reject remote images at app-server ingress (#29419)

2026-06-23 00:43:56 +00:00

effective_plugin_change_tests.rs

Trust hooks from materialized workspace plugins (#32301)

2026-07-11 01:11:37 +00:00

effective_plugin_change.rs

Trust hooks from materialized workspace plugins (#32301)

2026-07-11 01:11:37 +00:00

error_code.rs

feat(app-server, threadstore): Thread pagination APIs and ThreadStore contract (#21566)

2026-05-07 15:44:43 -07:00

extensions.rs

Let image generation extension hosts control output persistence (#29711)

2026-06-23 18:51:49 -07:00

external_auth.rs

refactor: unify external auth resolution (#31421)

2026-07-07 17:05:05 -07:00

filters.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054)

2026-03-27 19:00:44 -07:00

fs_watch.rs

Fix fs/watch debounce batching (#24716)

2026-05-28 23:09:55 -07:00

fuzzy_file_search.rs

Simple directory mentions (#14970)

2026-03-19 05:24:09 +00:00

image_url.rs

[codex] reject remote images at app-server ingress (#29419)

2026-06-23 00:43:56 +00:00

in_process.rs

Remove TUI exec-policy core exports (#31179)

2026-07-06 10:22:25 -07:00

lib.rs

Trust hooks from materialized workspace plugins (#32301)

2026-07-11 01:11:37 +00:00

main_tests.rs

app-server: support -c config overrides (#26436)

2026-06-04 18:05:54 +00:00

main.rs

feat(app-server): persist remote-control desired state (#27445)

2026-06-11 21:28:52 -07:00

mcp_refresh.rs

[codex] Inject agent graph store into ThreadManager (#29736)

2026-06-24 13:24:10 -07:00

message_processor_tracing_tests.rs

Add per-turn multi-agent mode (#28685)

2026-06-18 22:47:51 -07:00

message_processor.rs

Trust hooks from materialized workspace plugins (#32301)

2026-07-11 01:11:37 +00:00

models_refresh_worker_tests.rs

model-provider: route model discovery through HTTP client factory (#31361)

2026-07-09 02:32:10 +00:00

models_refresh_worker.rs

model-provider: route model discovery through HTTP client factory (#31361)

2026-07-09 02:32:10 +00:00

models.rs

model-provider: route model discovery through HTTP client factory (#31361)

2026-07-09 02:32:10 +00:00

outgoing_message.rs

[codex] Attribute app-server analytics by thread originator (#29935)

2026-06-25 18:15:48 -07:00

request_processors.rs

feat(rollout): persist TurnItems for paginated thread rollouts (#30188)

2026-07-08 19:55:03 -07:00

request_serialization.rs

Trust hooks from materialized workspace plugins (#32301)

2026-07-11 01:11:37 +00:00

server_request_error.rs

app-server: Replay pending item requests on thread/resume (#12560)

2026-02-27 12:45:59 -08:00

skills_watcher.rs

[codex] Reuse parsed plugin skills during session startup (#28844)

2026-06-18 16:45:58 -07:00

thread_state.rs

[codex] Add Ultra reasoning effort (#29899)

2026-06-24 20:13:52 -07:00

thread_status.rs

feat(app-server): add history_mode to thread (#29927)

2026-06-26 09:12:42 -07:00

transport_tests.rs

unified-exec: retain PathUri in command events (#28780)

2026-06-18 05:00:04 +00:00

transport.rs

feat(app-server): enforce managed remote control disable (#27961)

2026-06-12 20:10:12 -07:00