mirror of https://github.com/openai/codex.git synced 2026-09-10 20:26:47 +00:00

Files

felixxia-oai 2554239561 Move trusted tool metadata into shared Guardian context (#43597 )

## What changed

Represent host-verified tool metadata as `TrustedTool` in `codex-guardian-context` and collect it through an async-only context section. Route Guardian v2 sampling through that section while preserving separate developer-message delivery and the 512-token rendering budget. Omit tool metadata from debug output.

## Testing

Move the rendering-budget test into the shared crate, extend registry coverage for async-only collection and debug redaction, and narrow the scoped approval test to messages tagged `guardian.trusted_tool`.

GitOrigin-RevId: ee7cb4e9b9ceced70438cb58060d1a2973e1dc6a

2026-09-07 21:29:31 +00:00

src

Manage synchronous Guardian reviewers through the thread manager (#43570 )

2026-09-07 19:43:10 +00:00

tests

Move trusted tool metadata into shared Guardian context (#43597 )

2026-09-07 21:29:31 +00:00

BUILD.bazel

Limit Bazel integration test threads on macOS (#39609 )

2026-08-20 06:13:28 +00:00

Cargo.toml

Add user-verification provider abstractions and RPC adapters (#43547 )

2026-09-07 18:43:20 +00:00

README.md

Manage synchronous Guardian reviewers through the thread manager (#43570 )

2026-09-07 19:43:10 +00:00

README.md

Thread removal

thread/archive and thread/delete reject attempts to remove a live internal worker with JSON-RPC error -32600. The worker's owner controls its shutdown. For example, a Guardian reviewer remains available to its parent conversation after a client tries to archive or delete it.

After the owner releases the worker, its saved conversation can be archived or deleted normally. Ordinary client-controlled threads keep their existing behavior.