sayan-oai 6c108912ee Honor per-environment shell variable policies (#38902) ...

## What changed

- Carry `ShellEnvironmentPolicy` in each resolved `EnvironmentConfig` and use
  the selected turn environment's policy for shell commands, user shell tasks,
  and unified exec.
- Infer the policy from the thread configuration when an environment does not
  provide its own resolved configuration.
- Redact the policy from `EnvironmentConfig` debug output because it can contain
  explicit environment variable values.

## Testing

- Verify shell handlers and unified exec filter inherited variables according
  to the selected environment while preserving its explicit overrides.

GitOrigin-RevId: 9f6a52aa4af60e5f17251a0e1b11e1926b779055

2026-08-16 20:35:05 +00:00

..

code_mode

Interrupt active code-mode cells with their turn (#37483)

2026-08-07 18:22:42 +00:00

handlers

Honor per-environment shell variable policies (#38902)

2026-08-16 20:35:05 +00:00

runtimes

Honor per-environment shell variable policies (#38902)

2026-08-16 20:35:05 +00:00

approvals_tests.rs

Use ReviewDecision for MCP tool approvals (#38081)

2026-08-11 22:25:14 +00:00

approvals.rs

Route permission requests through shared Guardian approvals (#38701)

2026-08-15 05:09:19 +00:00

context_tests.rs

Add per-surface MCP tool exposure controls (#36781)

2026-08-03 18:51:46 +00:00

context.rs

Add per-surface MCP tool exposure controls (#36781)

2026-08-03 18:51:46 +00:00

events.rs

Track artifact operations from trusted plugin markers (#38057)

2026-08-11 19:26:41 +00:00

executed_tool_calls_tests.rs

Retain attempted tool metadata across prompts (#36507)

2026-08-01 17:36:39 +00:00

executed_tool_calls.rs

Canonicalize default tools under the functions namespace (#37022)

2026-08-05 04:07:59 +00:00

hook_names.rs

Default function tools into tool hooks (#23757)

2026-05-23 00:56:58 +00:00

hosted_spec_tests.rs

Use the image generation extension by default (#31596)

2026-07-09 12:25:19 +09:00

hosted_spec.rs

Use the image generation extension by default (#31596)

2026-07-09 12:25:19 +09:00

lifecycle.rs

Give Guardian V2 full tool action context (#38441)

2026-08-13 21:49:32 +00:00

mod.rs

Route MCP tool calls through shared approval handling (#38108)

2026-08-12 03:00:47 +00:00

network_approval_tests.rs

Report the latest rejection from multiple network reviews (#38256)

2026-08-12 21:55:31 +00:00

network_approval.rs

Centralize turn environment selection state (#38461)

2026-08-14 00:22:54 +00:00

orchestrator.rs

Route network access through the shared approval pipeline (#38299)

2026-08-13 02:40:49 +00:00

parallel.rs

Canonicalize default tools under the functions namespace (#37022)

2026-08-05 04:07:59 +00:00

registry_tests.rs

Align registry tests with canonical tool names (#37035)

2026-08-05 06:07:53 +00:00

registry.rs

Run tool start callbacks after pre-tool hooks (#38568)

2026-08-14 12:21:08 +00:00

router_tests.rs

Stamp conversation history items with creation times (#38272)

2026-08-12 23:04:42 +00:00

router.rs

Share model-visible tool specs across prompts (#37807)

2026-08-10 10:50:49 +00:00

sandboxing_tests.rs

Enforce managed deny-read rules in the Windows sandbox (#38660)

2026-08-14 22:28:33 +00:00

sandboxing.rs

Enforce managed deny-read rules in the Windows sandbox (#38660)

2026-08-14 22:28:33 +00:00

spec_plan_tests.rs

Honor per-environment shell variable policies (#38902)

2026-08-16 20:35:05 +00:00

spec_plan.rs

Preserve environment configuration ownership (#38678)

2026-08-15 00:43:44 +00:00

tool_dispatch_trace_tests.rs

Configure the default code-mode exec yield timeout (#37352)

2026-08-07 01:41:54 +00:00

tool_dispatch_trace.rs

Canonicalize default tools under the functions namespace (#37022)

2026-08-05 04:07:59 +00:00

tool_namespaces_info.rs

Include tool namespace inventory in turn metadata (#37492)

2026-08-07 19:32:15 +00:00