Andrei Eternal fe15bd38de Report the local command working directory in PreToolUse hooks (#57198) ...

## Why

`PreToolUse` hooks receive the host working directory even when a local
`exec_command` call specifies a different `workdir`. This prevents hooks from
seeing the directory in which the command will execute.

## What changed

- Share working-directory resolution between command execution and hook input,
  using the selected environment and the command's `workdir`.
- Report the resolved local directory in the hook input's `cwd`. Keep hook
  processes in the host directory and retain the host `cwd` for remote commands.
- Reject invalid environment selections or paths before running hooks and record
  failures in tool-result telemetry.

## Testing

Add unit and integration coverage for default, empty, relative, and absolute
working directories; Windows path conventions; remote commands; hook denial and
input rewriting; and invalid arguments that fail without running hooks.

GitOrigin-RevId: 97f71f6d3e21a5d95a7abf5384f06f4993241797

2026-10-26 19:11:28 +00:00

..

skills_extension

Back off failed cloud skill and plugin catalog refreshes (#55968)

2026-10-21 19:22:57 +00:00

snapshots

Use conversations for all Guardian v2 async classification (#56556)

2026-10-23 18:48:10 +00:00

step_settings

Add configured thread environment inheritance for subagents (#55375)

2026-10-19 20:30:44 +00:00

abort_lifecycle.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

abort_tasks.rs

Allow root turn suspension with live descendants (#54414)

2026-10-15 20:57:39 +00:00

additional_context.rs

Add optional names to untrusted additional context (#57181)

2026-10-26 18:23:07 +00:00

agent_control_tests.rs

Extract shared message-board code into codex-message-board (#55970)

2026-10-21 19:34:51 +00:00

agent_eviction_tests.rs

Add direct replies for thread settings updates (#47937)

2026-09-24 20:59:51 +00:00

agent_execution.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

agent_mailbox.rs

Add lifecycle hooks for inter-agent messages (#55657)

2026-10-20 19:39:43 +00:00

agent_message_wake.rs

Make agent-message wakes respect interrupts and Plan mode (#56330)

2026-10-23 02:21:49 +00:00

agent_websocket.rs

Preserve tool declaration mode across resumed context windows (#51480)

2026-10-06 21:28:13 +00:00

agents_md_refresh.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

agents_md.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

app_tool_exposure_strict_tests.rs

Keep third-party tools deferred in strict Code Mode Only (#50687)

2026-10-03 18:15:13 +00:00

app_tool_exposure.rs

Keep third-party tools deferred in strict Code Mode Only (#50687)

2026-10-03 18:15:13 +00:00

apply_patch_cli.rs

Bind capability roots to environment selections (#51493)

2026-10-06 22:39:32 +00:00

apply_patch_serialization.rs

…

apply_patch_system_aliases.rs

Protect metadata writes through macOS case aliases (#54273)

2026-10-15 12:01:04 +00:00

approvals.rs

Allow unified exec to fall back when credential masking is unavailable (#55719)

2026-10-21 01:30:29 +00:00

audio_truncation.rs

…

auth_recovery_policy.rs

Enforce application network policy across app-server requests (#47407)

2026-09-23 00:47:07 +00:00

auto_review.rs

Add an optional JSON transcript format for Guardian (#51465)

2026-10-06 19:30:57 +00:00

base_instructions.rs

Refresh model instructions in incremental-tool context windows (#53872)

2026-10-14 05:36:44 +00:00

bedrock_multi_agent_tests.rs

Enable multi-agent V2 and Ultra reasoning on Amazon Bedrock (#49345)

2026-09-29 19:03:30 +00:00

bedrock_service_tier_tests.rs

Advertise Ultrafast for GPT-6.1 Sol on Amazon Bedrock (#51794)

2026-10-07 18:32:50 +00:00

canonical_plugin_connectors.rs

Honor canonical plugin disables for shared connectors (#45755)

2026-09-15 18:23:08 +00:00

catalog_permission_messages.rs

Support model-specific writable-root permission wording (#56309)

2026-10-23 00:40:04 +00:00

cli_stream.rs

Send base instructions as Responses input messages (#51156)

2026-10-05 18:52:51 +00:00

client_websockets_runtime_auth.rs

Integrate runtime authentication into model requests (#57171)

2026-10-26 18:06:07 +00:00

client_websockets.rs

Add a credential file override for GCP provider authentication (#57188)

2026-10-26 18:33:05 +00:00

client.rs

Add a credential file override for GCP provider authentication (#57188)

2026-10-26 18:33:05 +00:00

cloud_config.rs

Require managed configuration from the configured server (#56055)

2026-10-22 02:15:00 +00:00

code_mode_agent_message_tests.rs

Treat code-mode collaboration messages as plaintext (#55633)

2026-10-20 17:15:35 +00:00

code_mode_dynamic_tools_tests.rs

Allow dynamic tool calls to execute in parallel (#54654)

2026-10-16 16:28:53 +00:00

code_mode_elicitation.rs

…

code_mode_model_messages.rs

Support model-catalog overrides for Code Mode tool messages (#47118)

2026-09-21 22:49:17 +00:00

code_mode.rs

Make the code mode yield/resume test yield explicitly between phases (#56236)

2026-10-22 17:49:53 +00:00

codex_apps_protocol.rs

Share Apps tool catalogs without retaining unused snapshots (#45440)

2026-09-14 15:06:28 +00:00

codex_delegate.rs

Preserve MCP tool output as content items (#40737)

2026-08-25 23:42:50 +00:00

collaboration_instructions.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

command_lifecycle_tests.rs

Add a command-start callback for tool lifecycle extensions (#46539)

2026-09-19 00:46:06 +00:00

compact_program_tests.rs

Enable Cyber access programs for API-key sessions by default (#53717)

2026-10-13 16:57:54 +00:00

compact_remote_trimming.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

compact_remote.rs

Add a built-in Google Cloud Vertex AI provider (#56265)

2026-10-22 21:01:14 +00:00

compact_resume_fork.rs

Remove the long-thread accuracy warning after compaction (#55355)

2026-10-19 19:24:26 +00:00

compact.rs

Avoid double-counting retained reasoning in token usage (#55991)

2026-10-21 21:23:01 +00:00

context_annotations.rs

Allow advisory rollout budgets with optional limit enforcement (#57187)

2026-10-26 18:31:49 +00:00

current_time_reminder.rs

Make environment context date and timezone configurable (#52164)

2026-10-08 16:27:10 +00:00

cyber_access_program.rs

Expose and persist turn lineage across the app server (#51415)

2026-10-06 16:56:39 +00:00

cyber_exec_policy.rs

Remove the patched zsh shell execution backend (#52160)

2026-10-08 16:19:09 +00:00

daybreak_access.rs

Move the exec-server test fixture into shared test support (#52674)

2026-10-09 18:58:53 +00:00

deprecation_notice.rs

Remove the patched zsh shell execution backend (#52160)

2026-10-08 16:19:09 +00:00

direct_tool_metadata.rs

Track history initialization in Responses turn metadata (#52325)

2026-10-08 23:34:16 +00:00

dynamic_tool_cancellation.rs

Record truncation metrics for accepted Guardian review inputs (#53628)

2026-10-13 10:21:42 +00:00

exec_policy.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

exec.rs

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

executor_discovery_v2.rs

Gate capability discovery V2 on executor version (#57192)

2026-10-26 19:03:08 +00:00

extension_sandbox.rs

Store generated image items as attachment references (#54398)

2026-10-15 19:51:22 +00:00

external_auth.rs

Use descriptor-safe helpers for executable test fixtures (#50018)

2026-10-01 15:57:03 +00:00

fork_thread.rs

Box session metadata and compaction payloads in RolloutItem (#55733)

2026-10-21 02:41:05 +00:00

gateway_auth.rs

Compose gateway OAuth with primary provider authentication (#46490)

2026-09-18 22:42:46 +00:00

gcp.rs

Add a credential file override for GCP provider authentication (#57188)

2026-10-26 18:33:05 +00:00

git_enrichment.rs

Expose and persist turn lineage across the app server (#51415)

2026-10-06 16:56:39 +00:00

guardian_authorization_refresh.rs

Box session metadata and compaction payloads in RolloutItem (#55733)

2026-10-21 02:41:05 +00:00

guardian_authorization.rs

Box session metadata and compaction payloads in RolloutItem (#55733)

2026-10-21 02:41:05 +00:00

guardian_cached_score_tests.rs

Add Guardian retry metrics and preserve turn attribution (#55347)

2026-10-19 18:49:48 +00:00

guardian_checkpoint_migration_tests.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

guardian_connector_trust.rs

Run environment hooks on their owning executors (#56343)

2026-10-23 04:01:39 +00:00

guardian_context_budget.rs

Allow advisory rollout budgets with optional limit enforcement (#57187)

2026-10-26 18:31:49 +00:00

guardian_cyber_access_program_tests.rs

Forward per-turn Cyber access programs to Guardian (#52689)

2026-10-09 20:14:04 +00:00

guardian_environments_tests.rs

Roll back stale Guardian reviews before reusing reviewer history (#51683)

2026-10-07 13:05:06 +00:00

guardian_heartbeat_authorization.rs

Remove obsolete Guardian thread-context enables from tests (#51184)

2026-10-05 22:17:02 +00:00

guardian_history.rs

Deduplicate native agent messages in Guardian review context (#55391)

2026-10-19 22:01:41 +00:00

guardian_mcp_elicitation.rs

Measure Guardian approval blocking time per turn (#55591)

2026-10-20 14:43:08 +00:00

guardian_pending_root_delivery.rs

Refresh Guardian reviews when review context changes (#53797)

2026-10-13 23:29:53 +00:00

guardian_persistence_tests.rs

Load persisted sender context for Guardian reviews (#51734)

2026-10-07 15:47:21 +00:00

guardian_retained_context.rs

Track content provenance through prompt assembly and compaction (#53831)

2026-10-14 02:01:49 +00:00

guardian_retry.rs

Expose lifecycle timestamps on app-server thread items (#57172)

2026-10-26 18:13:00 +00:00

guardian_review_cancellation.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

guardian_review.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

guardian_root_handoff.rs

Box session metadata and compaction payloads in RolloutItem (#55733)

2026-10-21 02:41:05 +00:00

guardian_sandbox_retry.rs

Add regression coverage for Guardian sandbox retry approvals (#54265)

2026-10-15 11:24:07 +00:00

guardian_sender_messages_tests.rs

Capture sender context for codex_app.create_thread deliveries (#54590)

2026-10-16 12:37:14 +00:00

guardian_subagent_authorization.rs

Box session metadata and compaction payloads in RolloutItem (#55733)

2026-10-21 02:41:05 +00:00

guardian_subagent_notification_tests.rs

Notify parent agents when Guardian stops a subagent (#49312)

2026-09-29 16:53:11 +00:00

hooks_cwd_tests.rs

Report the local command working directory in PreToolUse hooks (#57198)

2026-10-26 19:11:28 +00:00

hooks_executor.rs

Include environment hooks in thread hook listings (#56553)

2026-10-23 18:39:28 +00:00

hooks_mcp.rs

Start dormant MCP servers for hook calls (#55263)

2026-10-19 11:40:15 +00:00

hooks_plugin_policy_refresh.rs

Add configurable default plugin activation policy (#52220)

2026-10-08 18:42:58 +00:00

hooks.rs

Report the local command working directory in PreToolUse hooks (#57198)

2026-10-26 19:11:28 +00:00

image_rollout.rs

Add opt-in output token replay for OpenAI requests (#52742)

2026-10-10 01:25:00 +00:00

injected_models_cache.rs

Scope model catalog caches to the current provider and auth identity (#43906)

2026-09-08 20:37:30 +00:00

interrupt_hooks.rs

Add hooks for interrupted turns (#40511)

2026-08-25 01:27:18 +00:00

items.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

json_result.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

live_cli.rs

…

managed_threads_tests.rs

Add local diagnostic ZIP exports to the app server (#55940)

2026-10-21 16:43:30 +00:00

mcp_auth_elicitation.rs

Expose and persist turn lineage across the app server (#51415)

2026-10-06 16:56:39 +00:00

mcp_auth_refresh.rs

Add negotiated network policy metadata support for MCP calls (#56278)

2026-10-22 22:33:07 +00:00

mcp_ema_config.rs

Restrict enterprise MCP auth and fail closed on config refresh (#49260)

2026-09-29 13:08:37 +00:00

mcp_executor_context_tests.rs

Add configurable persistent leader shortcuts to the TUI (#52273)

2026-10-08 21:01:06 +00:00

mcp_extension_protocol.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

mcp_oauth_refresh_tests.rs

Retire rejected MCP OAuth refresh tokens (#54079)

2026-10-14 20:00:52 +00:00

mcp_optional_startup_grace.rs

Restrict enterprise MCP auth and fail closed on config refresh (#49260)

2026-09-29 13:08:37 +00:00

mcp_refresh_cleanup.rs

Upgrade Windows bindings to windows-sys 0.61.2 (#50058)

2026-10-01 18:05:05 +00:00

mcp_sandbox_tests.rs

Separate MCP sandbox policy from launcher metadata (#53709)

2026-10-13 16:23:44 +00:00

mcp_startup_refresh_http_proxy.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

mcp_storage_telemetry_tests.rs

Box session metadata and compaction payloads in RolloutItem (#55733)

2026-10-21 02:41:05 +00:00

mcp_subagent_elicitation.rs

Signal abandonment of unanswered MCP elicitations (#51611)

2026-10-07 07:57:14 +00:00

mcp_tool_cache.rs

Start dormant MCP servers for hook calls (#55263)

2026-10-19 11:40:15 +00:00

mcp_tool_exposure.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

mcp_turn_metadata.rs

Move Guardian tool description preparation into context composition (#56493)

2026-10-23 14:58:20 +00:00

mcp_user_verification.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

mod.rs

Make agent-message wakes respect interrupts and Plan mode (#56330)

2026-10-23 02:21:49 +00:00

model_overrides.rs

…

model_provider_requirements_tests.rs

Remove the patched zsh shell execution backend (#52160)

2026-10-08 16:19:09 +00:00

model_request.rs

Add extension hooks for model requests and response streams (#47679)

2026-09-23 22:10:04 +00:00

model_runtime_selectors.rs

…

model_switching.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

model_visible_layout.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

models_cache_auth.rs

Preserve model catalog caches across header credential rotation (#54946)

2026-10-17 23:22:14 +00:00

models_cache_ttl.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

models_etag_responses.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

multi_agent_mode.rs

Source proactive multi-agent instructions from the model catalog (#41457)

2026-08-29 03:28:19 +00:00

multi_agent_restore_tests.rs

Reuse unchanged history snapshots when resuming threads (#49600)

2026-09-30 11:59:13 +00:00

multi_agent_resume.rs

Record initialization analytics for resumed subagents (#51206)

2026-10-06 00:16:18 +00:00

multi_agent_tool_descriptions.rs

Support model-specific descriptions for agent message board tools (#47670)

2026-09-23 21:34:11 +00:00

multi_exec_server_sandbox.rs

Move the exec-server test fixture into shared test support (#52674)

2026-10-09 18:58:53 +00:00

network_approval_completion.rs

Include environment hooks in thread hook listings (#56553)

2026-10-23 18:39:28 +00:00

network_approval.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

openai_file_mcp.rs

Include root turn IDs in host-owned Apps tool calls (#51421)

2026-10-06 17:10:43 +00:00

otel.rs

Remove GPT-5.4 from bundled catalogs and preserve migration prompts (#47932)

2026-09-24 20:28:31 +00:00

output_token_replay.rs

Add opt-in output token replay for OpenAI requests (#52742)

2026-10-10 01:25:00 +00:00

override_updates.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

pending_input_persistence.rs

Keep spawned children provisional until the spawn result returns (#53654)

2026-10-13 12:42:53 +00:00

pending_input.rs

Defer agent mail after empty final answers (#56133)

2026-10-22 10:03:05 +00:00

permissions_messages.rs

Support model-specific writable-root permission wording (#56309)

2026-10-23 00:40:04 +00:00

personality.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

plugins.rs

Enable app routing for remote curated Agent Plugins (#55667)

2026-10-20 20:27:32 +00:00

prompt_cache_key.rs

Allow callers to control prompt cache keys independently of session IDs (#55587)

2026-10-20 14:14:59 +00:00

prompt_caching.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

prompt_debug_tests.rs

Add opt-in output token replay for OpenAI requests (#52742)

2026-10-10 01:25:00 +00:00

quota_exceeded.rs

Fix retry classification for throttling and quota errors (#45602)

2026-09-15 04:20:38 +00:00

realtime_attachment.rs

Forward client voice session IDs in realtime requests (#53784)

2026-10-13 22:21:31 +00:00

realtime_conversation.rs

Expose lifecycle timestamps on app-server thread items (#57172)

2026-10-26 18:13:00 +00:00

realtime_initial_items.rs

Forward client voice session IDs in realtime requests (#53784)

2026-10-13 22:21:31 +00:00

realtime_misalignment.rs

Forward client voice session IDs in realtime requests (#53784)

2026-10-13 22:21:31 +00:00

realtime_sideband_endpoint.rs

Forward client voice session IDs in realtime requests (#53784)

2026-10-13 22:21:31 +00:00

realtime_system_proxy.rs

Forward client voice session IDs in realtime requests (#53784)

2026-10-13 22:21:31 +00:00

reasoning_effort_override.rs

Enable reasoning effort overrides by default (#56163)

2026-10-22 12:46:24 +00:00

remote_env_capability_roots_tests.rs

Box session metadata and compaction payloads in RolloutItem (#55733)

2026-10-21 02:41:05 +00:00

remote_env_failure_tests.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

remote_env_required_skills_tests.rs

Integrate discovery V2 with step-scoped skill catalogs (#55322)

2026-10-19 17:02:20 +00:00

remote_env_spawn_tests.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

remote_env.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

remote_models.rs

Preserve provider model catalogs when refreshes fail (#55958)

2026-10-21 18:43:15 +00:00

request_compression.rs

…

request_permissions_tool.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

request_permissions.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

request_plugin_install.rs

Restrict enterprise MCP auth and fail closed on config refresh (#49260)

2026-09-29 13:08:37 +00:00

request_user_input_async.rs

Honor the user input setting for asynchronous questions (#51908)

2026-10-08 02:06:58 +00:00

request_user_input.rs

Account for token usage from incomplete responses (#53670)

2026-10-13 13:36:24 +00:00

responses_api_proxy_headers.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

responses_lite.rs

Enable incremental tools by default for Responses Lite (#55368)

2026-10-19 20:01:37 +00:00

responses_system_proxy.rs

Add opt-in model discovery for OpenAI API keys (#44392)

2026-09-10 03:18:28 +00:00

resume_warning.rs

Remove obsolete fields from persisted turn context (#51492)

2026-10-06 22:39:06 +00:00

resume.rs

Support store-owned preparation when resuming threads (#54059)

2026-10-14 18:02:25 +00:00

retry_after.rs

Treat model-not-found provider errors as terminal failures (#56445)

2026-10-23 11:43:14 +00:00

review.rs

Add opt-in output token replay for OpenAI requests (#52742)

2026-10-10 01:25:00 +00:00

rmcp_client.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

rollout_budget.rs

Allow advisory rollout budgets with optional limit enforcement (#57187)

2026-10-26 18:31:49 +00:00

rollout_compression.rs

Reuse unchanged history snapshots when resuming threads (#49600)

2026-09-30 11:59:13 +00:00

rollout_list_find.rs

…

safety_buffering.rs

…

safety_check_downgrade.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

scenarios_agent_eviction_tests.rs

Add configured thread environment inheritance for subagents (#55375)

2026-10-19 20:30:44 +00:00

scenarios_agent_message_board_remote.rs

Expose message board permissions and structured denials (#52568)

2026-10-09 13:15:39 +00:00

scenarios_agent_message_board.rs

Defer agent mail after empty final answers (#56133)

2026-10-22 10:03:05 +00:00

scenarios_code_mode_settled_helpers_tests.rs

Add promise settlement streaming helpers to code mode (#51126)

2026-10-05 16:58:29 +00:00

scenarios_compaction_tests.rs

Add scenario coverage for remote /compact context preservation (#50516)

2026-10-03 04:24:52 +00:00

scenarios_content_filter.rs

Add recovery guidance to content-filter retries (#49119)

2026-09-29 01:14:41 +00:00

scenarios_context_management_tools.rs

Apply model catalog overrides to history, notes, and context tools (#56313)

2026-10-23 00:46:28 +00:00

scenarios_credential_masking.rs

Mark built-in dummy credentials and strengthen collision checks (#56297)

2026-10-22 23:48:20 +00:00

scenarios_frozen_cloud_skills.rs

Gate capability discovery V2 on executor version (#57192)

2026-10-26 19:03:08 +00:00

scenarios_guardian_agent_messages_tests.rs

Remove obsolete Guardian thread-context enables from tests (#51184)

2026-10-05 22:17:02 +00:00

scenarios_guardian_conversation_history_tests.rs

Restrict enterprise MCP auth and fail closed on config refresh (#49260)

2026-09-29 13:08:37 +00:00

scenarios_guardian_extra_policy.rs

Add an optional JSON transcript format for Guardian (#51465)

2026-10-06 19:30:57 +00:00

scenarios_guardian_handoff.rs

Preserve user restrictions in Guardian handoff context (#50026)

2026-10-01 16:14:27 +00:00

scenarios_guardian_heartbeat.rs

Enable instant interrupts by default (#51812)

2026-10-07 19:42:35 +00:00

scenarios_guardian_orchestrator_connector.rs

Use conversations for all Guardian v2 async classification (#56556)

2026-10-23 18:48:10 +00:00

scenarios_guardian_sender_context.rs

Load persisted sender context for Guardian reviews (#51734)

2026-10-07 15:47:21 +00:00

scenarios_incremental_tools_resume.rs

Emit one developer notice per incremental namespace update batch (#52295)

2026-10-08 22:01:24 +00:00

scenarios_incremental_tools.rs

Tag tool registration metrics with effective incremental tools mode (#55692)

2026-10-20 22:34:40 +00:00

scenarios_indirect_namespace_prefixes.rs

Support model-specific function description prefixes (#51930)

2026-10-08 03:20:54 +00:00

scenarios_mailbox_preemption_tests.rs

Drain WebSocket responses on mailbox preemption (#55969)

2026-10-21 19:29:08 +00:00

scenarios_mcp_ema.rs

Require managed configuration from the configured server (#56055)

2026-10-22 02:15:00 +00:00

scenarios_mcp_resource_messages.rs

Keep MCP resource helpers available in code mode (#50546)

2026-10-03 06:42:48 +00:00

scenarios_model_instructions.rs

Scope model catalogs and caches by thread originator (#56284)

2026-10-22 22:44:48 +00:00

scenarios_mxc.rs

Add an opt-in preference for the local MXC sandbox (#47375)

2026-09-22 21:57:52 +00:00

scenarios_partial_answers.rs

Preserve parent history by default in full agent forks (#55548)

2026-10-20 11:56:17 +00:00

scenarios_preparation.rs

Separate thread preparation from execution persistence (#47199)

2026-09-22 05:53:29 +00:00

scenarios_provider_capabilities.rs

Add capability overrides for custom model providers (#50459)

2026-10-02 23:26:27 +00:00

scenarios_read_only_mcp.rs

Add read-only policy support to MCP tool requests (#46042)

2026-09-16 22:25:54 +00:00

scenarios_retained_tool_outputs.rs

Close input admission while a turn finishes recording (#53452)

2026-10-12 18:54:22 +00:00

scenarios_shared_instructions.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

scenarios_skill_catalog_dedup.rs

Expose skill installations and stabilize package aliases (#55330)

2026-10-19 17:37:49 +00:00

scenarios_strict_3p_cache.rs

Keep third-party tools deferred in strict Code Mode Only (#50687)

2026-10-03 18:15:13 +00:00

scenarios_tools_namespace_budget.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

scenarios.rs

Gate capability discovery V2 on executor version (#57192)

2026-10-26 19:03:08 +00:00

search_tool.rs

Include root turn IDs in host-owned Apps tool calls (#51421)

2026-10-06 17:10:43 +00:00

settings_commits.rs

Restore thread-owned permissions on cold resume (#53150)

2026-10-11 15:48:35 +00:00

settings_constraints.rs

Support model-specific writable-root permission wording (#56309)

2026-10-23 00:40:04 +00:00

shell_snapshot.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

skills_extension.rs

Integrate discovery V2 with step-scoped skill catalogs (#55322)

2026-10-19 17:02:20 +00:00

skills.rs

Add opt-in output token replay for OpenAI requests (#52742)

2026-10-10 01:25:00 +00:00

spawn_agent_description.rs

Clarify V2 spawn model override guidance for context catalogs (#49786)

2026-10-01 00:57:53 +00:00

spawn_settings_tests.rs

Test spawn settings reporting after child removal (#47258)

2026-09-22 11:10:29 +00:00

sqlite_state.rs

Add experimental attached thread forks (#56351)

2026-10-23 04:52:47 +00:00

startup_cancellation.rs

Prepare skill catalogs before building step tools (#55357)

2026-10-19 19:33:11 +00:00

step_settings_compaction.rs

Remove obsolete fields from persisted turn context (#51492)

2026-10-06 22:39:06 +00:00

step_settings_snapshots.rs

Remove retired model entries while preserving migration prompts (#44250)

2026-09-09 17:56:33 +00:00

step_settings.rs

Enable incremental tools by default for Responses Lite (#55368)

2026-10-19 20:01:37 +00:00

stream_error_allows_next_turn.rs

Add a credential file override for GCP provider authentication (#57188)

2026-10-26 18:33:05 +00:00

stream_no_completed.rs

Add a credential file override for GCP provider authentication (#57188)

2026-10-26 18:33:05 +00:00

subagent_dynamic_tools.rs

Separate environment requests from runtime selections (#51221)

2026-10-06 01:39:50 +00:00

subagent_notifications.rs

Treat code-mode collaboration messages as plaintext (#55633)

2026-10-20 17:15:35 +00:00

subagent_service_tier.rs

Make subagents follow the root service tier (#41308)

2026-08-28 09:48:13 +00:00

token_budget.rs

Start dormant MCP servers for hook calls (#55263)

2026-10-19 11:40:15 +00:00

token_usage_rollout.rs

Route rollout reads through the canonical JSON decoder (#42378)

2026-09-02 22:45:19 +00:00

tool_harness.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

tool_lifecycle.rs

Include root turn IDs in host-owned Apps tool calls (#51421)

2026-10-06 17:10:43 +00:00

tool_observation_tests.rs

Expose tool dispatch and timing observations to extensions (#47662)

2026-09-23 20:49:48 +00:00

tool_parallelism.rs

Assert shell tool overlap directly in the parallelism test (#56006)

2026-10-21 22:48:29 +00:00

tool_registration_metrics.rs

Tag tool registration metrics with effective incremental tools mode (#55692)

2026-10-20 22:34:40 +00:00

tools.rs

Upgrade the Rust toolchain to 1.99.1 (#55677)

2026-10-20 21:28:45 +00:00

truncation.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

turn_error_details_tests.rs

Expose original error details to turn lifecycle contributors (#49138)

2026-09-29 02:40:51 +00:00

turn_input_submission.rs

Preserve running turn recovery across thread settings updates (#53879)

2026-10-14 06:03:02 +00:00

turn_phase_trace.rs

Add turn, tool, and skill attribution to traces (#56524)

2026-10-23 16:55:32 +00:00

turn_state.rs

Preserve Markdown formatting when copying TUI responses (#42847)

2026-09-04 20:38:08 +00:00

unified_exec_launch_failure_tests.rs

Expose lifecycle timestamps on app-server thread items (#57172)

2026-10-26 18:13:00 +00:00

unified_exec_mxc_powershell_tests.rs

Use a compatible PowerShell fallback for the Windows MXC sandbox (#49019)

2026-09-28 15:58:17 +00:00

unified_exec_process_events.rs

Read unified exec output directly from stdout and stderr (#57191)

2026-10-26 19:01:45 +00:00

unified_exec_stdin_approval.rs

Allow stdin review under active grants with sandbox prompts disabled (#54119)

2026-10-14 23:02:21 +00:00

unified_exec_stdin_review_size.rs

Reject NUL bytes in reviewed terminal input (#41354)

2026-08-28 15:44:48 +00:00

unified_exec.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

unstable_features_warning.rs

…

user_notification.rs

Use descriptor-safe helpers for executable test fixtures (#50018)

2026-10-01 15:57:03 +00:00

user_shell_cmd.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

view_image.rs

Bind capability roots to environment selections (#51493)

2026-10-06 22:39:32 +00:00

wake_reservation.rs

Prevent invalidated wakeups from starting a turn (#51427)

2026-10-06 17:26:19 +00:00

web_search_system_proxy_tests.rs

Resolve proxy routes for standalone web search redirects (#47204)

2026-09-22 06:24:49 +00:00

web_search.rs

Remove GPT-5.4 from bundled catalogs and preserve migration prompts (#47932)

2026-09-24 20:28:31 +00:00

websocket_fallback.rs

Accept environment requests at thread and turn settings boundaries (#51422)

2026-10-06 17:11:07 +00:00

window_headers.rs

Remove the long-thread accuracy warning after compaction (#55355)

2026-10-19 19:24:26 +00:00

workspace_roots.rs

Add hook configuration to environment attachments (#56302)

2026-10-23 00:02:29 +00:00

worktree_trust.rs

…