Shijie Rao 539a09cb28 Restore permission profiles when resuming threads (#39153) ...

## Why

Cold resumes and forks could lose the thread's active permission profile and
fall back to the current configured default.

## What changed

- Restore the latest persisted approval policy, approvals reviewer, and active
  permission-profile ID when resuming or forking a thread.
- Re-resolve persisted profile IDs through current configuration and
  requirements. Missing or invalid profiles fall back to the configured
  default, while threads without a persisted profile continue to use current
  configuration.
- Keep explicit permission and approval overrides ahead of persisted settings.

## Testing

Added coverage for legacy and paginated histories, settings updates, explicit
overrides, removed or changed profiles, requirement fallbacks, and forks.

GitOrigin-RevId: 2289af2f3206bf131a6ffe0e8447e8d402e76c47

2026-08-18 06:22:04 +00:00

..

bin

Route exec-server HTTP through configured proxy policy (#35023)

2026-07-23 22:39:28 +00:00

external_agent_migration

Read plugin authentication state from AuthManager (#39087)

2026-08-17 22:26:27 +00:00

request_processors

Restore permission profiles when resuming threads (#39153)

2026-08-18 06:22:04 +00:00

analytics_utils.rs

[codex-analytics] ingest server requests and responses (#17088)

2026-04-29 19:56:41 +00:00

app_info.rs

Use batch metadata for plugin app summaries (#34851)

2026-07-23 01:00:35 +00:00

app_server_tracing.rs

Reduce app-server JSON serialization overhead (#34761)

2026-07-22 14:16:51 +00:00

attestation.rs

fix(app-server): speed up shutdown (#23578)

2026-05-20 17:30:19 +00:00

auth_mode.rs

[codex] Add externally provided Codex auth (#31274)

2026-07-07 17:43:19 -07:00

bespoke_event_handling.rs

Add experimental app-server project APIs (#38940)

2026-08-17 04:01:37 +00:00

code_mode_host_tests.rs

Support gRPC code-mode hosts in app server (#38288)

2026-08-13 01:32:42 +00:00

code_mode_host.rs

Support gRPC code-mode hosts in app server (#38288)

2026-08-13 01:32:42 +00:00

command_exec.rs

Reduce response serialization and rollout scan overhead (#36006)

2026-07-29 18:29:26 +00:00

config_layer.rs

Support packaged defaults in config layering (#37810)

2026-08-10 11:22:55 +00:00

config_manager_service_tests.rs

Make Guardian v2 risk classification configurable (#38628)

2026-08-14 19:11:41 +00:00

config_manager_service.rs

Embed defaults in the packaged config layer (#38179)

2026-08-12 12:15:47 +00:00

config_manager.rs

Remove the experimental thread config endpoint (#39115)

2026-08-18 00:45:00 +00:00

connection_cleanup.rs

fix(app-server): avoid blocking connection cleanup (#26852)

2026-06-08 10:20:54 -07:00

connection_rpc_gate.rs

fix(app-server): avoid blocking connection cleanup (#26852)

2026-06-08 10:20:54 -07:00

current_time.rs

[app-server] increase currentTime/read timeout (#30384)

2026-06-27 16:42:03 -07:00

dynamic_tools.rs

Add audio output support to dynamic tools and code mode (#34080)

2026-07-18 23:22:13 +00:00

effective_plugin_change_tests.rs

Trust hooks from materialized workspace plugins (#32301)

2026-07-11 01:11:37 +00:00

effective_plugin_change.rs

Refresh hook runtimes after plugin changes (#38703)

2026-08-15 05:28:53 +00:00

error_code.rs

feat(app-server, threadstore): Thread pagination APIs and ThreadStore contract (#21566)

2026-05-07 15:44:43 -07:00

extensions.rs

Add a configurable skill catalog token budget (#38978)

2026-08-17 10:01:59 +00:00

external_auth.rs

refactor: unify external auth resolution (#31421)

2026-07-07 17:05:05 -07:00

filters.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054)

2026-03-27 19:00:44 -07:00

fs_watch.rs

Fix fs/watch debounce batching (#24716)

2026-05-28 23:09:55 -07:00

fuzzy_file_search.rs

Simple directory mentions (#14970)

2026-03-19 05:24:09 +00:00

image_url.rs

[codex] reject remote images at app-server ingress (#29419)

2026-06-23 00:43:56 +00:00

in_process.rs

Add experimental thread queue APIs to app server (#38456)

2026-08-13 23:38:02 +00:00

lib.rs

Remove the experimental thread config endpoint (#39115)

2026-08-18 00:45:00 +00:00

main_tests.rs

Support gRPC code-mode hosts in app server (#38288)

2026-08-13 01:32:42 +00:00

main.rs

Configure PSP routing through the feature system (#38056)

2026-08-11 19:16:15 +00:00

mcp_refresh.rs

Add experimental thread queue APIs to app server (#38456)

2026-08-13 23:38:02 +00:00

message_processor_tracing_tests.rs

Fail closed when workload identity initialization fails (#38424)

2026-08-13 19:35:22 +00:00

message_processor.rs

Redact auth tokens from app-server response logs (#39141)

2026-08-18 05:25:22 +00:00

models_refresh_worker_tests.rs

model-provider: route model discovery through HTTP client factory (#31361)

2026-07-09 02:32:10 +00:00

models_refresh_worker.rs

model-provider: route model discovery through HTTP client factory (#31361)

2026-07-09 02:32:10 +00:00

models.rs

Expose model upgrade retirement times (#38449)

2026-08-13 22:59:54 +00:00

otel_reloader.rs

Reload app-server telemetry after account changes (#37339)

2026-08-07 00:28:32 +00:00

outgoing_message.rs

Redact auth tokens from app-server response logs (#39141)

2026-08-18 05:25:22 +00:00

request_processors.rs

Centralize persisted resume settings lookup (#39147)

2026-08-18 06:00:00 +00:00

request_serialization.rs

Allow config reads to join active app-server read batches (#39036)

2026-08-17 17:28:37 +00:00

server_request_error.rs

app-server: Replay pending item requests on thread/resume (#12560)

2026-02-27 12:45:59 -08:00

skills_watcher.rs

Stop re-exporting skill APIs from codex-core (#37984)

2026-08-11 10:43:11 +00:00

thread_state.rs

Add experimental thread queue APIs to app server (#38456)

2026-08-13 23:38:02 +00:00

thread_status.rs

Notify running turn watchers only on count changes (#38170)

2026-08-12 11:07:46 +00:00

transport_tests.rs

Timestamp app-server notifications at emission (#32905)

2026-07-14 00:38:04 +00:00

transport.rs

Exit the stdio app-server when its connection closes (#36035)

2026-07-29 22:00:20 +00:00

turn_cost_worker_tests.rs

Emit API-key turn cost telemetry from app-server (#39006)

2026-08-17 13:20:58 +00:00

turn_cost_worker.rs

Emit API-key turn cost telemetry from app-server (#39006)

2026-08-17 13:20:58 +00:00