Eric Traut f2b5b81f39 Continue interrupted work after managed daemon restarts (#45820) ...

## Why

Daemon recovery reloads threads but leaves interrupted work unfinished. Resume eligible work automatically from the saved conversation, even without a connected client.

## What changed

- Attempt one new continuation turn immediately after restoration, including in Plan mode. Mark the old turn interrupted and supply recovery context without creating a user message or granting new authorization.
- Require an idle thread, matching permissions, and the same single local environment configured by the thread. Skip completed, aborted, or superseded work and snapshots without environment identity.
- Add `continue_turn_if_idle` with an atomic previous-turn check so newer tasks or standalone settings changes invalidate pending continuation.
- Preserve the output schema, service tier, and root turn ID, and emit a “Resuming interrupted work” warning when continuation starts.

## Testing

Add daemon restart coverage for continuation without a client, Plan mode, permission and environment mismatches, and legacy snapshots. Add core coverage for preserved continuation metadata, absence of user-message events, rejection of superseded continuations, and exclusion of remote execution from recovery snapshots.

GitOrigin-RevId: 2b290b75d9399fc58258bcda2e85c74e9b5b3b09

2026-09-16 00:54:58 +00:00

..

models

Bind direct tool-call metadata to invocation outputs (#45185)

2026-09-13 06:53:20 +00:00

openai_models

Expose available access programs in model discovery (#44893)

2026-09-11 19:13:04 +00:00

permissions

Resolve permission profiles with explicit execution-host path context (#44676)

2026-09-11 00:03:40 +00:00

prompts/base_instructions

…

account.rs

Support Edu Plus and Edu Pro account plans (#39316)

2026-08-18 23:47:00 +00:00

agent_path.rs

…

approvals.rs

Attribute command and plugin analytics to the invoking model (#45445)

2026-09-14 15:30:22 +00:00

auth.rs

Support managed AWS access keys for Amazon Bedrock (#40481)

2026-08-24 21:39:48 +00:00

capabilities_tests.rs

…

capabilities.rs

…

config_types.rs

Retire the personality feature flag and document deprecated settings (#45809)

2026-09-15 23:39:40 +00:00

dynamic_tools.rs

…

environment.rs

Skip Guardian reviews in Full Access (#42147)

2026-09-01 22:16:54 +00:00

error_tests.rs

Use curly apostrophes in protocol error messages (#43961)

2026-09-09 01:19:07 +00:00

error.rs

Use curly apostrophes in protocol error messages (#43961)

2026-09-09 01:19:07 +00:00

exec_output_tests.rs

…

exec_output.rs

…

items.rs

Preserve MCP App UI metadata in tool-call events and history (#45805)

2026-09-15 22:52:56 +00:00

legacy_events.rs

Preserve MCP App UI metadata in tool-call events and history (#45805)

2026-09-15 22:52:56 +00:00

lib.rs

Add configurable memory versions with isolated storage (#43797)

2026-09-08 10:55:48 +00:00

local_media_tests.rs

Support image references by file ID in inputs and tool outputs (#45794)

2026-09-15 21:19:08 +00:00

local_media.rs

Support image references by file ID in inputs and tool outputs (#45794)

2026-09-15 21:19:08 +00:00

mcp_approval_meta.rs

Require synchronous review for sensitive MCP actions (#41094)

2026-08-27 08:44:54 +00:00

mcp_policy.rs

Enforce environment MCP policies (#39335)

2026-08-19 01:26:16 +00:00

mcp.rs

Support openai/elicitation form requests (#41447)

2026-08-29 02:43:10 +00:00

memory_citation.rs

…

memory_version.rs

Add configurable memory versions with isolated storage (#43797)

2026-09-08 10:55:48 +00:00

models.rs

Support image references by file ID in inputs and tool outputs (#45794)

2026-09-15 21:19:08 +00:00

network_policy.rs

…

num_format.rs

…

openai_models.rs

Retire Friendly and Pragmatic personality selection (#44946)

2026-09-12 00:22:04 +00:00

parse_command.rs

…

permission_profile_intersection_tests.rs

Preserve target-native paths in command approvals (#42577)

2026-09-03 16:21:10 +00:00

permission_profile_intersection.rs

Preserve target-native paths in command approvals (#42577)

2026-09-03 16:21:10 +00:00

permission_profile_snapshot.rs

Move permission profile snapshots into the protocol (#38651)

2026-08-14 21:17:29 +00:00

permissions.rs

Resolve permission profiles with explicit execution-host path context (#44676)

2026-09-11 00:03:40 +00:00

plan_tool.rs

…

protocol.rs

Preserve MCP App UI metadata in tool-call events and history (#45805)

2026-09-15 22:52:56 +00:00

realtime.rs

Persist realtime events in the thread timeline (#40508)

2026-08-25 01:03:20 +00:00

request_permissions.rs

Preserve target-native cwd in permission approval requests (#42314)

2026-09-02 17:27:50 +00:00

request_user_input_tests.rs

Make user input blocking behavior explicit (#36410)

2026-08-01 00:38:10 +00:00

request_user_input.rs

Make user input blocking behavior explicit (#36410)

2026-08-01 00:38:10 +00:00

response_item_id_tests.rs

…

response_item_id.rs

…

response_usage.rs

Preserve raw response usage metadata (#41980)

2026-09-01 05:17:11 +00:00

review_format.rs

…

sanitized_git_url_tests.rs

Sanitize credentials from Git remote metadata (#40713)

2026-08-25 21:34:05 +00:00

sanitized_git_url.rs

Sanitize credentials from Git remote metadata (#40713)

2026-08-25 21:34:05 +00:00

security_risk.rs

Record reviewed actions with security risk scores (#40901)

2026-08-26 15:02:21 +00:00

session_id.rs

…

shell_environment_tests.rs

Prevent Node REPL auth tokens from reaching child processes (#39301)

2026-08-18 22:29:58 +00:00

shell_environment.rs

Add credential brokering to network proxy feature config (#40466)

2026-08-24 19:52:27 +00:00

thread_id.rs

Distinguish rollout IDs from thread IDs (#38127)

2026-08-12 05:20:32 +00:00

tool_name.rs

Canonicalize default tools under the functions namespace (#37022)

2026-08-05 04:07:59 +00:00

turn_input.rs

Continue interrupted work after managed daemon restarts (#45820)

2026-09-16 00:54:58 +00:00

user_input.rs

Support image references by file ID in inputs and tool outputs (#45794)

2026-09-15 21:19:08 +00:00