ioanbudea-OAI d3fc4a73b0 Compare resume sandbox overrides using permission profile labels (#61136) ...

## What changed

Use `legacy_sandbox_policy_label` from the active permission profile to check sandbox overrides when resuming a loaded thread. Continue accepting `external-sandbox` for `danger-full-access` requests, and construct the legacy sandbox policy only when reporting a mismatch.

GitOrigin-RevId: 0f923323394692d2e1f39bafe637c70ce305dc3d

2026-11-12 14:46:17 +00:00

..

account_processor

Keep same-named MCP servers separate across environments (#60905)

2026-11-11 23:36:19 +00:00

apps_processor

Keep same-named MCP servers separate across environments (#60905)

2026-11-11 23:36:19 +00:00

plugins

Extend runtime auth to account, plugin, and file requests (#59564)

2026-11-05 03:49:13 +00:00

remote_control_processor

feat(app-server): add remote control pairing status RPC (#26450)

2026-06-05 10:33:56 -07:00

thread_processor

Add experimental ChatGPT workspace switching to app-server (#57514)

2026-10-27 17:04:16 +00:00

account_processor.rs

Trace MCP refresh causes and plugin metadata changes (#60505)

2026-11-10 02:45:30 +00:00

apps_processor.rs

Use runtime authentication for OpenAI MCP and app requests (#59749)

2026-11-05 22:03:29 +00:00

bedrock_auth.rs

Add experimental GCP account setup to the app server (#57394)

2026-10-27 08:06:10 +00:00

catalog_processor.rs

Support credential export commands for gateway authentication (#59787)

2026-11-06 02:00:39 +00:00

command_exec_processor.rs

Run sandbox integrity checks before commands and filesystem operations (#51843)

2026-10-07 21:52:43 +00:00

config_errors.rs

Allow selecting a configured provider in model/list (#59776)

2026-11-06 01:10:49 +00:00

config_processor.rs

Capture saved Daybreak preferences for native helpers (#60749)

2026-11-11 07:39:04 +00:00

config_reload_tests.rs

Require managed configuration from the configured server (#56055)

2026-10-22 02:15:00 +00:00

daemon_continuation.rs

Normalize turn context permissions to a required profile (#59963)

2026-11-06 19:29:06 +00:00

daemon_snapshot.rs

Fix idle cleanup for disconnected multi-agent v2 children (#52081)

2026-10-08 11:52:25 +00:00

diagnostics.rs

Expose app-server diagnostics through the experimental API (#37470)

2026-08-07 16:57:47 +00:00

environment_processor.rs

Support request IDs in exec-server WebSocket handshakes (#52234)

2026-10-08 19:13:52 +00:00

feedback_doctor_report.rs

Suppress Windows console windows for background subprocesses (#49164)

2026-09-29 04:38:37 +00:00

feedback_log_snapshot_tests.rs

Route SQLite logs to an explicitly configured log_dir (#55978)

2026-10-21 19:53:00 +00:00

feedback_processor.rs

Normalize turn context permissions to a required profile (#59963)

2026-11-06 19:29:06 +00:00

feedback_rollout_history_tests.rs

Attach inherited rollout history to diagnostic reports (#47653)

2026-09-23 20:15:48 +00:00

feedback_rollout_history.rs

Attach inherited rollout history to diagnostic reports (#47653)

2026-09-23 20:15:48 +00:00

feedback_thread_index_tests.rs

Bundle rollout attachments into a gzip tar archive (#50446)

2026-10-02 22:47:52 +00:00

feedback_thread_index.rs

Include directly attached threads in diagnostic uploads (#57824)

2026-10-28 20:21:30 +00:00

fs_processor.rs

Harden unsandboxed patch filesystem access (#39659)

2026-08-20 08:10:08 +00:00

git_processor.rs

[codex] Split app-server request processors (#20940)

2026-05-04 09:34:11 -07:00

initialize_processor.rs

Add managed command checkpoints requiring fresh human approval (#58045)

2026-10-29 11:23:51 +00:00

marketplace_processor.rs

Trace MCP refresh causes and plugin metadata changes (#60505)

2026-11-10 02:45:30 +00:00

mcp_event_stream.rs

Add app-server MCP event streaming (#39761)

2026-08-20 17:49:35 +00:00

mcp_processor.rs

Keep same-named MCP servers separate across environments (#60905)

2026-11-11 23:36:19 +00:00

memory_status.rs

Default fresh memory profiles to v2 (#56211)

2026-10-22 16:26:03 +00:00

persisted_resume_settings_tests.rs

Normalize turn context permissions to a required profile (#59963)

2026-11-06 19:29:06 +00:00

persisted_resume_settings.rs

Preserve requested approval reviewers across policy overrides (#59272)

2026-11-04 00:31:24 +00:00

plugins.rs

Trace MCP refresh causes and plugin metadata changes (#60505)

2026-11-10 02:45:30 +00:00

process_exec_processor_tests.rs

Preserve process output and control replies under backpressure (#57569)

2026-10-27 21:51:50 +00:00

process_exec_processor.rs

Preserve process output and control replies under backpressure (#57569)

2026-10-27 21:51:50 +00:00

projects.rs

Add recency sorting to project/list (#41223)

2026-08-27 23:43:46 +00:00

remote_control_processor.rs

Persist remote-control RPC preferences in managed daemon settings (#52304)

2026-10-08 22:42:12 +00:00

request_errors.rs

Separate Codex error details from retry metadata (#34996)

2026-07-23 19:32:26 +00:00

rollout.rs

Tag rollout compression metrics by trigger (#46047)

2026-09-16 22:33:15 +00:00

search.rs

[codex] Use shared app-server JSON-RPC error helpers (#21221)

2026-05-05 12:13:59 -07:00

thread_attachments.rs

Distinguish retryable thread-store errors from unknown write outcomes (#54664)

2026-10-16 17:31:47 +00:00

thread_delete.rs

Add experimental attached thread forks (#56351)

2026-10-23 04:52:47 +00:00

thread_enrichment.rs

Extract per-thread enrichment into a dedicated async helper (#47083)

2026-09-21 18:27:29 +00:00

thread_fork_goal.rs

Preserve thread context when retrying or editing turns (#33211)

2026-07-15 02:35:49 +00:00

thread_goal_processor.rs

Keep threads on their saved model provider when defaults change (#59503)

2026-11-04 22:20:18 +00:00

thread_goal_user_context.rs

Persist explicit user goal edits in model history (#49598)

2026-09-30 11:58:03 +00:00

thread_input.rs

Enforce subagent ownership across app-server inputs (#40464)

2026-08-24 19:44:14 +00:00

thread_lifecycle.rs

Release superseded assistant text from live paginated history (#58751)

2026-11-01 20:10:33 +00:00

thread_listener_shutdown_tests.rs

Preserve active recovery turns when clients reconnect (#61014)

2026-11-12 04:17:58 +00:00

thread_memory.rs

Add experimental thread memory summary reads (#56465)

2026-10-23 12:35:58 +00:00

thread_processor_tests.rs

Allow searching persisted attached threads (#60574)

2026-11-10 11:17:06 +00:00

thread_processor.rs

Compare resume sandbox overrides using permission profile labels (#61136)

2026-11-12 14:46:17 +00:00

thread_queue_processor.rs

Preserve client metadata through queued submissions (#59826)

2026-11-06 05:10:44 +00:00

thread_read_state.rs

Expose lifecycle timestamps on app-server thread items (#57172)

2026-10-26 18:13:00 +00:00

thread_resume_account.rs

Add a feature-gated account check for CLI thread resume (#58890)

2026-11-02 13:51:49 +00:00

thread_resume_redaction.rs

Allow searching persisted attached threads (#60574)

2026-11-10 11:17:06 +00:00

thread_sections.rs

Distinguish retryable thread-store errors from unknown write outcomes (#54664)

2026-10-16 17:31:47 +00:00

thread_summary_tests.rs

feat(rollout): persist TurnItems for paginated thread rollouts (#30188)

2026-07-08 19:55:03 -07:00

thread_summary.rs

Support environment updates in app-server settings APIs (#60655)

2026-11-10 20:35:28 +00:00

token_usage_replay.rs

Carry targeted moderation decisions on final-answer messages (#59842)

2026-11-06 07:43:44 +00:00

turn_processor.rs

Hand off approved plans through attachments in fresh sessions (#60763)

2026-11-11 09:01:04 +00:00

windows_sandbox_processor.rs

Log Windows sandbox availability and backend selection (#51974)

2026-10-08 06:31:56 +00:00

windows_sandbox_setup_config_tests.rs

Preserve executor path URIs in permission profile workspace roots (#45863)

2026-09-16 04:23:46 +00:00