ioanbudea-OAI e52045f989 Move Guardian tool description preparation into context composition (#56493) ...

## What changed

Move `GuardianToolDescriptions` into `codex-guardian-context` and carry structured tool and connector descriptions in `PlannedAction` instead of pre-rendered text. Prepare them during synchronous context composition, escaping closing tags before applying the existing 400-token limit to each source and rendering the untrusted-description fragment.

Keep descriptions optional under the context budget and preserve the complete action JSON. Reject descriptions that reach rendering without preparation.

## Testing

Strengthen the MCP approval integration test to assert the exact rendered descriptions, including independent truncation and escaped closing markers. Adapt the budget enforcement test to use structured descriptions.

GitOrigin-RevId: 4a9f1855f2958758b4be711914c00e4d954cee39

2026-10-23 14:58:20 +00:00

..

world_state

Support model-specific writable-root permission wording (#56309)

2026-10-23 00:40:04 +00:00

agent_message_board_notification.rs

Extract shared message-board code into codex-message-board (#55970)

2026-10-21 19:34:51 +00:00

approved_command_prefix_saved.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

apps_instructions.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

available_plugins_instructions.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

base_instructions.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

compaction_summary.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

content_filter_guidance.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

contextual_user_message_tests.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

contextual_user_message.rs

Centralize context fragment kind constants (#54316)

2026-10-15 15:12:58 +00:00

current_time_reminder.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

developer_instructions.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

environment_context.rs

Honor environment-resolved workspace roots (#40912)

2026-08-26 16:28:35 +00:00

environments_instructions.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

guardian_approved_action.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

guardian_assistant_context.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

guardian_budget_omission.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

guardian_context_mode.rs

Record Guardian context mode in review and classification telemetry (#49294)

2026-09-29 16:09:48 +00:00

guardian_conversation_history.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

guardian_followup_review_reminder.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

guardian_node_repl_policy.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

guardian_policy.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

guardian_retained_instructions.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

guardian_review_evidence.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

guardian_sender_messages.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

hook_additional_context.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

image_resize_notice.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

inter_agent_completion_message.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

inter_agent_message.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

internal_model_context.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

legacy_apply_patch_exec_command_warning.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

legacy_model_mismatch_warning.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

legacy_unified_exec_process_limit_warning.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

memory.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

mod.rs

Move Guardian tool description preparation into context composition (#56493)

2026-10-23 14:58:20 +00:00

model_instructions.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

model_switch_instructions.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

multi_agent_mode_instructions.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

multi_agent_usage_hint.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

network_rule_saved.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

node_repl_review_evidence_tests.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

node_repl_review_evidence.rs

Support image references by file ID in inputs and tool outputs (#45794)

2026-09-15 21:19:08 +00:00

plugin_instructions.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

realtime_delegation.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

realtime_end_instructions.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

realtime_start_instructions.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

realtime_start_with_instructions.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

recommended_plugins_instructions.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

rollout_budget.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

subagent_notification.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

token_budget_context.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

turn_aborted.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

unsupported_media.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

user_goal.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

user_instructions.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

user_shell_command.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00

user_verification_notice.rs

Support typed content in contextual prompt fragments (#54776)

2026-10-17 04:02:21 +00:00