Eric Traut ca2b076fff Add safe diagnostics to workspace routing configuration errors (#53805) ...

## Why

Workspace routing reported generic requirements load and reload failures, hiding the cause. Raw configuration errors can contain secrets, so exposing their messages directly is unsafe.

## What changed

Include a safe reason in configuration load and reload errors: file locations or non-file line and column numbers, cloud error categories and HTTP status codes, known network policy denials, or OS error details. Exclude raw parser messages, configuration contents, and backend-supplied policy names and IDs.

## Testing

Add regression coverage for configuration locations, cloud failures, and network policy denials. Verify that malformed local and cloud configuration reports useful errors without exposing secret values or policy identifiers, and still prevents workspace routing from falling back to startup configuration.

GitOrigin-RevId: a71484c700d32662ced9e19041dbedda5d1da8a5

2026-10-13 23:59:56 +00:00

..

mcp_resource

Use PathUri for skill identity and path matching (#51482)

2026-10-06 21:29:35 +00:00

account_enterprise_tests.rs

Enable enterprise MCP sign-in and account-scoped grant cleanup (#49276)

2026-09-29 14:46:33 +00:00

account_system_proxy_tests.rs

Apply shared network policy throughout embedded Codex startup (#47411)

2026-09-23 00:49:19 +00:00

account_thread_usage.rs

Enforce application network policy across app-server requests (#47407)

2026-09-23 00:47:07 +00:00

account.rs

Enforce managed MXC requirements on Windows (#52193)

2026-10-08 17:48:32 +00:00

agent_message_board.rs

Align message-board tools with the multi-agent namespace (#47028)

2026-09-21 13:27:39 +00:00

analytics.rs

Honor custom OTLP metrics exporters when analytics is disabled (#52278)

2026-10-08 21:18:24 +00:00

app_installed.rs

Upgrade rmcp to 3.5.1 and harden lifecycle tests (#52972)

2026-10-10 19:43:24 +00:00

app_list.rs

Upgrade rmcp to 3.5.1 and harden lifecycle tests (#52972)

2026-10-10 19:43:24 +00:00

app_read.rs

Preserve account network policy for ChatGPT backend requests (#47703)

2026-09-24 00:50:02 +00:00

application_network.rs

Enforce application network policy across app-server requests (#47407)

2026-09-23 00:47:07 +00:00

attestation.rs

Fix attestation routing during thread startup (#47912)

2026-09-24 18:38:00 +00:00

auth_storage_originator_tests.rs

Track credential storage outcomes and redact sensitive errors (#49384)

2026-09-29 22:24:09 +00:00

auto_env.rs

test: add delayed exec-server transport (#31427)

2026-07-09 00:17:38 +00:00

bedrock_gov_cloud_tests.rs

Add an advisory Bedrock GovCloud requirements check (#49817)

2026-10-01 02:06:05 +00:00

bedrock_service_tier_tests.rs

Advertise Ultrafast for GPT-6.1 Sol on Amazon Bedrock (#51794)

2026-10-07 18:32:50 +00:00

bedrock_setup.rs

Add AWS credential export commands for Amazon Bedrock (#44028)

2026-09-09 03:17:48 +00:00

client_metadata.rs

Preserve review targets and scope misalignment continuation metadata (#51217)

2026-10-06 01:26:11 +00:00

code_mode_host.rs

Finish idle thread unloads after slow shutdown (#51420)

2026-10-06 17:10:19 +00:00

collaboration_mode_list.rs

test: migrate TestAppServer callers to builder (#31451)

2026-07-08 00:15:49 +00:00

command_exec.rs

Make apply_patch preserve line endings unconditionally (#51203)

2026-10-05 23:52:06 +00:00

compaction.rs

Preserve inherited context in prediction forks (#53678)

2026-10-13 14:17:41 +00:00

config_model_provider_requirements_tests.rs

Enforce managed model provider selection and definitions (#44650)

2026-09-10 21:41:39 +00:00

config_requirements_application.rs

Enforce Fast and Ultra Fast policies independently (#51253)

2026-10-06 03:35:55 +00:00

config_requirements_browser_use_tests.rs

Enforce Fast and Ultra Fast policies independently (#51253)

2026-10-06 03:35:55 +00:00

config_requirements_exec_tests.rs

Test approved command execution with managed unified exec disabled (#44814)

2026-09-11 12:37:04 +00:00

config_requirements_in_app_browser.rs

Enforce Fast and Ultra Fast policies independently (#51253)

2026-10-06 03:35:55 +00:00

config_requirements_login.rs

Enforce Fast and Ultra Fast policies independently (#51253)

2026-10-06 03:35:55 +00:00

config_rpc.rs

Enforce Fast and Ultra Fast policies independently (#51253)

2026-10-06 03:35:55 +00:00

connection_handling_stdio_tests.rs

Bound app-server stdio shutdown and handle Unix SIGTERM gracefully (#44523)

2026-09-10 13:02:57 +00:00

connection_handling_websocket_unix.rs

Explain session creation failures during server shutdown (#52721)

2026-10-09 23:16:46 +00:00

connection_handling_websocket.rs

Track credential storage outcomes and redact sensitive errors (#49384)

2026-09-29 22:24:09 +00:00

curated_mcp_sync.rs

Use descriptor-safe helpers for executable test fixtures (#50018)

2026-10-01 15:57:03 +00:00

current_time.rs

Tag current time reminders in model context (#38443)

2026-08-13 21:53:52 +00:00

cyber_access_program.rs

Decouple API-key cyber access programs from model discovery (#49714)

2026-09-30 19:21:02 +00:00

daemon_update_recovery.rs

Restore thread-owned permissions on cold resume (#53150)

2026-10-11 15:48:35 +00:00

daybreak_access.rs

Attach verified access context to eligible plugin MCP calls (#41005)

2026-08-27 00:02:26 +00:00

dynamic_tools.rs

Refactor image content to use a shared ImageReference type (#45543)

2026-09-14 23:25:09 +00:00

environment_add.rs

Report selected environment connection transitions (#33251)

2026-07-15 05:21:13 +00:00

environment_info.rs

Support request IDs in exec-server WebSocket handshakes (#52234)

2026-10-08 19:13:52 +00:00

environment_status.rs

Support request IDs in exec-server WebSocket handshakes (#52234)

2026-10-08 19:13:52 +00:00

exec_server_test_support.rs

[app-server] expose environment info RPC (#30291)

2026-06-27 19:34:10 +00:00

executor_mcp.rs

Upgrade rmcp to 3.5.1 and harden lifecycle tests (#52972)

2026-10-10 19:43:24 +00:00

executor_skills_spawn_tests.rs

Preserve subagent capabilities independently of forked history (#52241)

2026-10-08 19:21:57 +00:00

executor_skills.rs

Suppress warnings when skill descriptions are shortened (#46070)

2026-09-17 01:28:24 +00:00

experimental_api.rs

Forward client voice session IDs in realtime requests (#53784)

2026-10-13 22:21:31 +00:00

experimental_feature_list.rs

Keep global app-server config independent of the launch directory (#51872)

2026-10-07 23:19:26 +00:00

external_agent_config.rs

Preserve URLs and email addresses during external agent migration (#53706)

2026-10-13 16:15:41 +00:00

external_agent_import_sync.rs

Sync updates to imported external agent sessions (#36356)

2026-07-31 16:17:44 +00:00

feedback.rs

Persist Guardian review failures for reports across restarts (#51651)

2026-10-07 11:18:05 +00:00

fs.rs

test: migrate TestAppServer callers to builder (#31451)

2026-07-08 00:15:49 +00:00

gateway_oauth_tests.rs

Add explicit gateway OAuth sign-in to app-server (#47207)

2026-09-22 06:36:09 +00:00

git_attribution.rs

Remove the deprecated thread/rollback API (#44915)

2026-09-11 21:32:04 +00:00

guardian_action_budget_tests.rs

Preserve complete actions in Guardian approval reviews (#44569)

2026-09-10 16:01:02 +00:00

guardian_code_mode_tests.rs

Make Code Mode wrappers transparent to Guardian model policies (#45915)

2026-09-16 10:11:26 +00:00

guardian_goal_tests.rs

Persist explicit user goal edits in model history (#49598)

2026-09-30 11:58:03 +00:00

guardian_pending_score_tests.rs

Run Guardian conversation classifiers concurrently and preserve action order (#52061)

2026-10-08 10:42:28 +00:00

guardian_policy_tests.rs

Scope model catalog caches to the current provider and auth identity (#43906)

2026-09-08 20:37:30 +00:00

guardian_stateful_async_tests.rs

Avoid duplicate sync reviews in Guardian classifier continuations (#49795)

2026-10-01 01:13:29 +00:00

guardian_sync_session_tests.rs

Add opt-in structured errors for Guardian circuit-breaker interruptions (#48796)

2026-09-27 22:05:19 +00:00

guardian_v2_history_tests.rs

Preserve independent Guardian history across parent compaction (#48779)

2026-09-27 20:15:23 +00:00

guardian_v2_model_tests.rs

Forward per-turn Cyber access programs to Guardian (#52689)

2026-10-09 20:14:04 +00:00

guardian_v2.rs

Default Guardian v2 async classification to conversation mode (#53733)

2026-10-13 18:08:10 +00:00

history_notes_extension.rs

Remove per-content source attribution metadata (#52329)

2026-10-08 23:57:36 +00:00

hooks_list.rs

Use descriptor-safe helpers for executable test fixtures (#50018)

2026-10-01 15:57:03 +00:00

host_skills.rs

Refresh host skill catalogs through world state (#33425)

2026-07-15 20:59:21 +00:00

imagegen_extension.rs

Add explicit background control to image generation (#47484)

2026-09-23 07:15:30 +00:00

initialize.rs

Add explicit gateway OAuth sign-in to app-server (#47207)

2026-09-22 06:36:09 +00:00

luna_reserve.rs

Extend rate limit reads with usage capabilities (#42358)

2026-09-02 21:01:04 +00:00

marketplace_add.rs

Handle @ in local marketplace paths (#34959)

2026-07-23 15:32:36 +00:00

marketplace_remove.rs

Keep global app-server config independent of the launch directory (#51872)

2026-10-07 23:19:26 +00:00

marketplace_upgrade.rs

Upgrade Git marketplaces from merged configuration (#42149)

2026-09-01 22:37:26 +00:00

mcp_event_stream.rs

Add app-server MCP event streaming (#39761)

2026-08-20 17:49:35 +00:00

mcp_protocol_default.rs

Give hosted Codex Apps an independent MCP protocol opt-in (#44318)

2026-09-09 22:22:08 +00:00

mcp_resource_origin.rs

Add explicit app and account targets to MCP resource reads (#47248)

2026-09-22 10:42:50 +00:00

mcp_resource.rs

Upgrade rmcp to 3.5.1 and harden lifecycle tests (#52972)

2026-10-10 19:43:24 +00:00

mcp_server_elicitation.rs

Upgrade rmcp to 3.5.1 and harden lifecycle tests (#52972)

2026-10-10 19:43:24 +00:00

mcp_server_status.rs

Upgrade rmcp to 3.5.1 and harden lifecycle tests (#52972)

2026-10-10 19:43:24 +00:00

mcp_tool.rs

Upgrade rmcp to 3.5.1 and harden lifecycle tests (#52972)

2026-10-10 19:43:24 +00:00

memory_read.rs

Add dedicated memory v2 consolidation and read prompts (#43813)

2026-09-08 12:58:11 +00:00

memory_reset.rs

Add memory dual writing and v2 readiness reporting (#43827)

2026-09-08 14:23:23 +00:00

misalignment_policy.rs

Preserve review targets and scope misalignment continuation metadata (#51217)

2026-10-06 01:26:11 +00:00

mod.rs

Expose experimental durable thread read state in the app server (#52350)

2026-10-09 01:22:30 +00:00

model_auto_review.rs

Restore permission profiles when resuming threads (#39153)

2026-08-18 06:22:04 +00:00

model_list_requirements_tests.rs

Enforce current provider requirements for the model catalog (#46917)

2026-09-21 01:19:40 +00:00

model_list.rs

Remove legacy personality template metadata (#51223)

2026-10-06 01:46:33 +00:00

model_provider_capabilities_read.rs

Remove the provider capability gate for tool namespaces (#50447)

2026-10-02 22:55:08 +00:00

model_provider_enforcement_tests.rs

Apply shared network policy throughout embedded Codex startup (#47411)

2026-09-23 00:49:19 +00:00

multi_agent_v2_developer_instructions.rs

Remove partial-history subagent forks (#51329)

2026-10-06 10:39:16 +00:00

otel.rs

Honor custom OTLP metrics exporters when analytics is disabled (#52278)

2026-10-08 21:18:24 +00:00

output_schema.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

permission_profile_list.rs

Resolve permission profiles with explicit execution-host path context (#44676)

2026-09-11 00:03:40 +00:00

plan_item.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

plugin_install.rs

Upgrade rmcp to 3.5.1 and harden lifecycle tests (#52972)

2026-10-10 19:43:24 +00:00

plugin_list.rs

Add configurable default plugin activation policy (#52220)

2026-10-08 18:42:58 +00:00

plugin_manifest_cache.rs

Cache parsed plugin manifests across plugin workflows (#49099)

2026-09-28 23:32:45 +00:00

plugin_read.rs

Add configurable default plugin activation policy (#52220)

2026-10-08 18:42:58 +00:00

plugin_reconcile.rs

Record active plugin inventory in turn analytics (#46323)

2026-09-17 23:47:06 +00:00

plugin_search.rs

Replace Sites migration state with a runtime compatibility guard (#46108)

2026-09-17 04:23:45 +00:00

plugin_share.rs

Remove plugin extension metadata from discovery and summaries (#48035)

2026-09-25 08:25:37 +00:00

plugin_uninstall.rs

Run plugin app-server tests in automatic environments (#38189)

2026-08-12 13:33:01 +00:00

process_exec.rs

Launch Linux pipe processes through a fresh setup helper (#47612)

2026-09-23 18:25:07 +00:00

projects.rs

Add thread ID exclusions to thread/list (#51595)

2026-10-07 06:07:47 +00:00

rate_limit_reset_credits.rs

Expose selected workspace routing in app-server account reads (#45529)

2026-09-14 22:31:32 +00:00

rate_limits_identity_tests.rs

Enforce application network policy across app-server requests (#47407)

2026-09-23 00:47:07 +00:00

rate_limits.rs

Add Pro Max plan support and update Pro display names (#47971)

2026-09-25 00:20:02 +00:00

realtime_conversation.rs

Forward client voice session IDs in realtime requests (#53784)

2026-10-13 22:21:31 +00:00

realtime_transcript_tests.rs

Fix realtime V3 transcript reconciliation for handoffs (#46922)

2026-09-21 02:02:41 +00:00

recommended_plugins.rs

Wait for login completion in recommended plugin tests (#47828)

2026-09-24 12:26:05 +00:00

remote_control_auth.rs

Enforce application network policy across app-server requests (#47407)

2026-09-23 00:47:07 +00:00

remote_control.rs

Persist remote-control RPC preferences in managed daemon settings (#52304)

2026-10-08 22:42:12 +00:00

remote_thread_store.rs

Log Windows sandbox availability and backend selection (#51974)

2026-10-08 06:31:56 +00:00

request_permissions.rs

Bind permission grants to the originating turn (#49880)

2026-10-01 05:33:36 +00:00

request_user_input.rs

Retire the untrusted approval policy (#39630)

2026-08-20 07:03:02 +00:00

request_validation.rs

Refactor image content to use a shared ImageReference type (#45543)

2026-09-14 23:25:09 +00:00

residency.rs

Scope model catalog caches to the current provider and auth identity (#43906)

2026-09-08 20:37:30 +00:00

review.rs

Enforce managed provider requirements on existing app-server threads (#44944)

2026-09-12 00:12:26 +00:00

rollout_compress_tests.rs

Add an experimental rollout compression endpoint (#46020)

2026-09-16 20:39:18 +00:00

rollout_migration.rs

Expose experimental durable thread read state in the app server (#52350)

2026-10-09 01:22:30 +00:00

safety_check_downgrade.rs

Remove GPT-5.4 from bundled catalogs and preserve migration prompts (#47932)

2026-09-24 20:28:31 +00:00

selected_capability_stack.rs

Restrict capability roots to captured turn environments (#49280)

2026-09-29 15:10:17 +00:00

selected_environment.rs

Harden unsandboxed patch filesystem access (#39659)

2026-08-20 08:10:08 +00:00

server_diagnostics.rs

Keep app-server thread RPCs active until delegated work completes (#43950)

2026-09-09 00:25:02 +00:00

session_end.rs

Bound app-server stdio shutdown and handle Unix SIGTERM gracefully (#44523)

2026-09-10 13:02:57 +00:00

skills_list.rs

Use PathUri for skill identity and path matching (#51482)

2026-10-06 21:29:35 +00:00

sleep.rs

Add opt-in nonfatal handling for clock read failures (#45825)

2026-09-16 01:16:35 +00:00

sqlite_recovery.rs

Add thread ID exclusions to thread/list (#51595)

2026-10-07 06:07:47 +00:00

thread_archive.rs

Expose experimental durable thread read state in the app server (#52350)

2026-10-09 01:22:30 +00:00

thread_attachments.rs

Add attachment owner lookup to the app-server (#50094)

2026-10-01 20:47:05 +00:00

thread_delete.rs

Subscribe authors to message-board channels created by posting (#47259)

2026-09-22 11:10:53 +00:00

thread_environments.rs

Expose loaded thread environments in app-server responses (#42386)

2026-09-02 23:41:14 +00:00

thread_fork_multi_agent_tests.rs

Scope model catalog caches to the current provider and auth identity (#43906)

2026-09-08 20:37:30 +00:00

thread_fork.rs

Add opt-in output token replay for OpenAI requests (#52742)

2026-10-10 01:25:00 +00:00

thread_goal_empty_responses.rs

Count interrupted goal continuations toward the no-activity limit (#52640)

2026-10-09 16:58:24 +00:00

thread_inject_items.rs

Add opt-in output token replay for OpenAI requests (#52742)

2026-10-10 01:25:00 +00:00

thread_list.rs

Expose experimental durable thread read state in the app server (#52350)

2026-10-09 01:22:30 +00:00

thread_loaded_list.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

thread_memory_mode_set.rs

Honor the configured SQLite home across state consumers (#34994)

2026-07-23 19:19:35 +00:00

thread_metadata_update.rs

Add thread ID exclusions to thread/list (#51595)

2026-10-07 06:07:47 +00:00

thread_name_persistence.rs

Persist empty paginated threads when naming them (#49785)

2026-10-01 00:57:29 +00:00

thread_name_websocket.rs

Restore app-server websocket listener with auth guard (#22404)

2026-05-12 18:40:53 -07:00

thread_queue.rs

Expose and persist turn lineage across the app server (#51415)

2026-10-06 16:56:39 +00:00

thread_read_state.rs

Add experimental app-server thread read-state updates (#52395)

2026-10-09 03:42:19 +00:00

thread_read.rs

Add experimental thread item lookup by ID (#52637)

2026-10-09 16:50:24 +00:00

thread_resume_network_tests.rs

Add regression coverage for network grants on cold thread resume (#53424)

2026-10-12 16:49:29 +00:00

thread_resume.rs

Add regression coverage for network grants on cold thread resume (#53424)

2026-10-12 16:49:29 +00:00

thread_revert.rs

Add item anchors to thread/items/list pagination (#48151)

2026-09-25 17:57:32 +00:00

thread_sections.rs

Add appearance metadata to thread sections (#37898)

2026-08-10 23:32:42 +00:00

thread_settings_update.rs

Preserve session config when switching thread permission profiles (#45981)

2026-09-16 16:46:34 +00:00

thread_shell_command.rs

Support configurable timeouts for thread shell commands (#41384)

2026-08-28 18:07:40 +00:00

thread_start.rs

Add GPT-6.1 Sol to Bedrock catalogs and make it the default (#49339)

2026-09-29 18:50:36 +00:00

thread_status.rs

Add explicit gateway OAuth sign-in to app-server (#47207)

2026-09-22 06:36:09 +00:00

thread_timeline.rs

Expose and persist turn lineage across the app server (#51415)

2026-10-06 16:56:39 +00:00

thread_unarchive.rs

Expose experimental durable thread read state in the app server (#52350)

2026-10-09 01:22:30 +00:00

thread_unload.rs

Finish idle thread unloads after slow shutdown (#51420)

2026-10-06 17:10:19 +00:00

thread_unsubscribe.rs

Preserve agent state when unloading idle multi-agent v2 children (#52034)

2026-10-08 09:39:33 +00:00

turn_cost_otel.rs

Apply shared network policy throughout embedded Codex startup (#47411)

2026-09-23 00:49:19 +00:00

turn_interrupt.rs

Avoid cloning turn items for app-server active turn lookups (#46305)

2026-09-17 21:25:34 +00:00

turn_settings_update.rs

Remove retired model entries while preserving migration prompts (#44250)

2026-09-09 17:56:33 +00:00

turn_start.rs

Remove the patched zsh shell execution backend (#52160)

2026-10-08 16:19:09 +00:00

turn_steer.rs

Standardize shell execution on unified exec (#39757)

2026-08-20 17:46:05 +00:00

user_verification_mcp.rs

Upgrade rmcp to 3.5.1 and harden lifecycle tests (#52972)

2026-10-10 19:43:24 +00:00

user_verification.rs

Add cancellation for native user-verification RPCs (#43925)

2026-09-08 21:48:53 +00:00

view_image.rs

Scope model catalog caches to the current provider and auth identity (#43906)

2026-09-08 20:37:30 +00:00

web_search.rs

Allow custom providers to opt into standalone web search (#34846)

2026-07-23 00:02:15 +00:00

windows_sandbox_setup.rs

Allow full-access Windows setup to provision through registered Core (#47922)

2026-09-24 19:29:53 +00:00

workspace_routing.rs

Add safe diagnostics to workspace routing configuration errors (#53805)

2026-10-13 23:59:56 +00:00