viyatb-oai 208f05b233 Enforce automatic review for managed models (#37511) ...

## What changed

- Add the managed `auto_review.required_on_models` requirement, unioning model slugs across requirement layers and exposing the result through `configRequirements/read`.
- Force listed models to use `on-request` approvals with the `auto_review` reviewer. Downgrade Full Access to workspace-write when starting a protected session, and reject incompatible runtime overrides or use when automatic review is disabled.
- Preserve these protections across thread starts, resumes, forks, model changes, turn overrides, MCP approvals, and TUI session attachment.

## Testing

- Add coverage for layered model requirements and exact provider-alias matching.
- Add app-server tests for protected thread lifecycle operations, unsafe setting overrides, legacy thread upgrades, disabled automatic review, and requirements API output.

GitOrigin-RevId: c4b1d52c3b5b75e86880725412b8f0812e0dfcd9

2026-08-07 23:43:14 +00:00

..

account.rs

Enforce managed authentication requirements locally (#37132)

2026-08-05 18:09:26 +00:00

analytics.rs

[codex] Attribute app-server analytics by thread originator (#29935)

2026-06-25 18:15:48 -07:00

app_installed.rs

Upgrade rmcp to 3.0.0-beta.3 (#35720)

2026-07-28 05:17:25 +00:00

app_list.rs

Upgrade rmcp to 3.0.0 (#36001)

2026-07-29 17:38:20 +00:00

app_read.rs

Use batch metadata for plugin app summaries (#34851)

2026-07-23 01:00:35 +00:00

attestation.rs

Negotiate MCP extensions per app-server session (#36910)

2026-08-04 15:23:43 +00:00

auto_env.rs

test: add delayed exec-server transport (#31427)

2026-07-09 00:17:38 +00:00

client_metadata.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

code_mode_host.rs

Support remote code-mode hosts in app-server (#35098)

2026-07-24 04:37:01 +00:00

collaboration_mode_list.rs

test: migrate TestAppServer callers to builder (#31451)

2026-07-08 00:15:49 +00:00

command_exec.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

compaction.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

config_rpc.rs

Enforce automatic review for managed models (#37511)

2026-08-07 23:43:14 +00:00

connection_handling_websocket_unix.rs

[codex] Add user input client ids (#24653)

2026-05-28 14:54:39 -07:00

connection_handling_websocket.rs

Emit exec-policy warnings for freshly loaded thread config (#31253)

2026-07-06 10:17:15 -07:00

curated_mcp_sync.rs

Negotiate MCP extensions per app-server session (#36910)

2026-08-04 15:23:43 +00:00

current_time.rs

Refresh environment dates from the configured clock (#36187)

2026-07-30 16:44:18 +00:00

dynamic_tools.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

environment_add.rs

Report selected environment connection transitions (#33251)

2026-07-15 05:21:13 +00:00

environment_info.rs

test: migrate TestAppServer callers to builder (#31451)

2026-07-08 00:15:49 +00:00

environment_status.rs

Expose environment status through app-server (#32920)

2026-07-14 01:49:16 +00:00

exec_server_test_support.rs

[app-server] expose environment info RPC (#30291)

2026-06-27 19:34:10 +00:00

executor_mcp.rs

Isolate MCP OAuth credentials by environment (#36310)

2026-07-31 11:23:46 +00:00

executor_skills.rs

Alias resource-backed skill locators under context pressure (#37489)

2026-08-07 19:09:46 +00:00

experimental_api.rs

Negotiate MCP extensions per app-server session (#36910)

2026-08-04 15:23:43 +00:00

experimental_feature_list.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

external_agent_config.rs

Preserve working directories when importing external sessions (#36964)

2026-08-04 19:57:33 +00:00

external_agent_import_sync.rs

Sync updates to imported external agent sessions (#36356)

2026-07-31 16:17:44 +00:00

fs.rs

test: migrate TestAppServer callers to builder (#31451)

2026-07-08 00:15:49 +00:00

git_attribution.rs

Link Codex attribution in pull request bodies (#36963)

2026-08-04 19:52:09 +00:00

hooks_list.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

host_skills.rs

Refresh host skill catalogs through world state (#33425)

2026-07-15 20:59:21 +00:00

imagegen_extension.rs

Preserve image transparency metadata in app-server items (#37178)

2026-08-05 23:42:29 +00:00

initialize.rs

Negotiate MCP extensions per app-server session (#36910)

2026-08-04 15:23:43 +00:00

marketplace_add.rs

Handle @ in local marketplace paths (#34959)

2026-07-23 15:32:36 +00:00

marketplace_remove.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

marketplace_upgrade.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

mcp_resource.rs

Upgrade rmcp to 3.0.0 (#36001)

2026-07-29 17:38:20 +00:00

mcp_server_elicitation.rs

Negotiate MCP extensions per app-server session (#36910)

2026-08-04 15:23:43 +00:00

mcp_server_status.rs

Upgrade rmcp to 3.0.0-beta.3 (#35720)

2026-07-28 05:17:25 +00:00

mcp_tool.rs

Negotiate MCP extensions per app-server session (#36910)

2026-08-04 15:23:43 +00:00

memory_reset.rs

Honor the configured SQLite home across state consumers (#34994)

2026-07-23 19:19:35 +00:00

mod.rs

Enforce automatic review for managed models (#37511)

2026-08-07 23:43:14 +00:00

model_auto_review.rs

Enforce automatic review for managed models (#37511)

2026-08-07 23:43:14 +00:00

model_list.rs

Expose multi-agent versions in model/list (#37433)

2026-08-07 11:26:01 +00:00

model_provider_capabilities_read.rs

Enable cached web search for Amazon Bedrock (#36938)

2026-08-04 17:55:28 +00:00

multi_agent_v2_developer_instructions.rs

Allow agent roles on full-history forks (#37252)

2026-08-06 10:27:33 +00:00

otel.rs

Reload app-server telemetry after account changes (#37339)

2026-08-07 00:28:32 +00:00

output_schema.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

permission_profile_list.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

plan_item.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

plugin_install.rs

Enforce Agent Plugin runtime boundaries (#37027)

2026-08-05 04:54:33 +00:00

plugin_list.rs

Fetch remote installed plugins across all scopes (#37210)

2026-08-06 03:53:05 +00:00

plugin_read.rs

Unify plugin skill loading through the shared loader (#37452)

2026-08-07 14:35:42 +00:00

plugin_search.rs

Merge local plugins into plugin search results (#36919)

2026-08-04 16:16:30 +00:00

plugin_share.rs

Expose plugin installation timestamps in app-server summaries (#35859)

2026-07-29 01:16:29 +00:00

plugin_uninstall.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

process_exec.rs

test: migrate TestAppServer callers to builder (#31451)

2026-07-08 00:15:49 +00:00

rate_limit_reset_credits.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

rate_limits.rs

Support Enterprise automation account plans (#36228)

2026-07-30 21:49:53 +00:00

realtime_conversation.rs

Add a realtime delegation acknowledgement control (#36413)

2026-08-01 01:17:26 +00:00

recommended_plugins.rs

Decouple recommended plugins from tool suggestions (#35839)

2026-07-28 22:53:33 +00:00

remote_control.rs

Exit the stdio app-server when its connection closes (#36035)

2026-07-29 22:00:20 +00:00

remote_thread_store.rs

Add thread section management APIs (#36380)

2026-07-31 19:08:45 +00:00

request_permissions.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

request_user_input.rs

Make user input blocking behavior explicit (#36410)

2026-08-01 00:38:10 +00:00

request_validation.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

review.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

rollout_migration.rs

Add rollout migration tooling and background migration (#37348)

2026-08-07 01:26:42 +00:00

safety_check_downgrade.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

selected_capability_stack.rs

Gate plugin usage instructions by model capability (#36792)

2026-08-03 19:51:43 +00:00

selected_environment.rs

Preserve executor paths in read command actions (#36223)

2026-07-30 21:12:41 +00:00

server_diagnostics.rs

Expose runtime activity in server diagnostics (#37486)

2026-08-07 18:38:24 +00:00

session_end.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

skills_list.rs

Fetch remote installed plugins across all scopes (#37210)

2026-08-06 03:53:05 +00:00

sleep.rs

Refresh environment dates from the configured clock (#36187)

2026-07-30 16:44:18 +00:00

thread_archive.rs

Track thread archive analytics (#37199)

2026-08-06 02:30:18 +00:00

thread_delete.rs

Enforce writer ownership for thread archive and deletion (#35031)

2026-07-23 23:18:06 +00:00

thread_fork.rs

Harden paginated history handling in the TUI (#36951)

2026-08-04 19:18:03 +00:00

thread_inject_items.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

thread_list.rs

Add persisted manual ordering for thread sections (#36007)

2026-07-29 18:37:22 +00:00

thread_loaded_list.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

thread_memory_mode_set.rs

Honor the configured SQLite home across state consumers (#34994)

2026-07-23 19:19:35 +00:00

thread_metadata_update.rs

Add persisted manual ordering for thread sections (#36007)

2026-07-29 18:37:22 +00:00

thread_name_websocket.rs

Restore app-server websocket listener with auth guard (#22404)

2026-05-12 18:40:53 -07:00

thread_read.rs

Support includeTurns reads for paginated threads (#36993)

2026-08-04 23:19:41 +00:00

thread_resume.rs

Restore approval policy when resuming threads (#37368)

2026-08-07 03:44:24 +00:00

thread_rollback.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

thread_sections.rs

Add thread section management APIs (#36380)

2026-07-31 19:08:45 +00:00

thread_settings_update.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

thread_shell_command.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

thread_start.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

thread_status.rs

Negotiate MCP extensions per app-server session (#36910)

2026-08-04 15:23:43 +00:00

thread_unarchive.rs

Add persisted manual ordering for thread sections (#36007)

2026-07-29 18:37:22 +00:00

thread_unsubscribe.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

turn_interrupt.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

turn_start_zsh_fork.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

turn_start.rs

Redact secrets from app-server command execution items (#36893)

2026-08-04 13:16:58 +00:00

turn_steer.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

view_image.rs

Allow disabling the built-in image viewer (#36966)

2026-08-04 20:10:31 +00:00

web_search.rs

Allow custom providers to opt into standalone web search (#34846)

2026-07-23 00:02:15 +00:00

windows_sandbox_setup.rs

test: migrate TestAppServer callers to builder (#31451)

2026-07-08 00:15:49 +00:00