jif a0dcfe2ada Skip Guardian scoring in User approval mode (#42256) ...

## What changed

- Skip Guardian prewarming and asynchronous scoring when `approvalsReviewer` is
  `"user"`, including when the reviewer changes during an active turn.
- Automatically accept ordinary `node_repl.js` execution confirmations in this
  mode while continuing to surface sensitive-action checks and requests for user
  input.
- Cover transitions between User approval, automatic review, and Full Access in
  the app-server integration tests.

GitOrigin-RevId: 599c8ebb672728b9bf3d64c34377ddec230325f8

2026-09-02 10:32:22 +00:00

..

account_thread_usage.rs

Show estimated thread usage in /status (#38281)

2026-08-13 00:30:08 +00:00

account.rs

Support managed AWS access keys for Amazon Bedrock (#40481)

2026-08-24 21:39:48 +00:00

analytics.rs

Add Guardian V2 analytics events (#42144)

2026-09-01 22:02:42 +00:00

app_installed.rs

Remove the workspace settings gate for apps and plugins (#38994)

2026-08-17 12:26:59 +00:00

app_list.rs

Support managed AWS access keys for Amazon Bedrock (#40481)

2026-08-24 21:39:48 +00:00

app_read.rs

Use thread configuration for app/read (#37891)

2026-08-10 22:39:29 +00:00

attestation.rs

Keep credentials out of app-server logs (#39993)

2026-08-21 19:04:32 +00:00

auto_env.rs

test: add delayed exec-server transport (#31427)

2026-07-09 00:17:38 +00:00

bedrock_setup.rs

Support managed AWS access keys for Amazon Bedrock (#40481)

2026-08-24 21:39:48 +00:00

client_metadata.rs

Report turn trigger and source in turn analytics (#42003)

2026-09-01 07:32:54 +00:00

code_mode_host.rs

Block goals after repeated execution host failures (#41454)

2026-08-29 03:04:26 +00:00

collaboration_mode_list.rs

test: migrate TestAppServer callers to builder (#31451)

2026-07-08 00:15:49 +00:00

command_exec.rs

Preserve managed deny-read rules across permission updates (#40004)

2026-08-21 20:15:23 +00:00

compaction.rs

Preserve raw response usage metadata (#41980)

2026-09-01 05:17:11 +00:00

config_requirements_in_app_browser.rs

Expose browser and computer-use requirements through app-server (#40000)

2026-08-21 19:56:52 +00:00

config_rpc.rs

Add per-account approval settings for apps (#42047)

2026-09-01 13:07:56 +00:00

connection_handling_websocket_unix.rs

[codex] Add user input client ids (#24653)

2026-05-28 14:54:39 -07:00

connection_handling_websocket.rs

Remove app-server's direct reqwest dependency (#39293)

2026-08-18 22:00:25 +00:00

curated_mcp_sync.rs

Require synchronous review for sensitive MCP actions (#41094)

2026-08-27 08:44:54 +00:00

current_time.rs

Tag current time reminders in model context (#38443)

2026-08-13 21:53:52 +00:00

cyber_access_program.rs

Add per-turn cyber access program selection (#40687)

2026-08-25 19:54:52 +00:00

daybreak_access.rs

Attach verified access context to eligible plugin MCP calls (#41005)

2026-08-27 00:02:26 +00:00

dynamic_tools.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

environment_add.rs

Report selected environment connection transitions (#33251)

2026-07-15 05:21:13 +00:00

environment_info.rs

Cache executor metadata from initialization (#40343)

2026-08-24 06:43:07 +00:00

environment_status.rs

Expose environment status through app-server (#32920)

2026-07-14 01:49:16 +00:00

exec_server_test_support.rs

[app-server] expose environment info RPC (#30291)

2026-06-27 19:34:10 +00:00

executor_mcp.rs

Cache executor metadata from initialization (#40343)

2026-08-24 06:43:07 +00:00

executor_skills.rs

Honor response budgets when reading skill resources (#40491)

2026-08-24 23:00:57 +00:00

experimental_api.rs

Add turn-scoped settings updates to the app server (#40656)

2026-08-25 17:55:50 +00:00

experimental_feature_list.rs

Remove the workspace settings gate for apps and plugins (#38994)

2026-08-17 12:26:59 +00:00

external_agent_config.rs

Add structured asynchronous user input requests (#42178)

2026-09-02 02:09:35 +00:00

external_agent_import_sync.rs

Sync updates to imported external agent sessions (#36356)

2026-07-31 16:17:44 +00:00

feedback.rs

Make diagnostic report uploads resilient to slow networks (#42096)

2026-09-01 16:49:16 +00:00

fs.rs

test: migrate TestAppServer callers to builder (#31451)

2026-07-08 00:15:49 +00:00

git_attribution.rs

Default durable threads to paginated history (#40677)

2026-08-25 19:10:35 +00:00

guardian_v2_history_tests.rs

Preserve Guardian review evidence across compaction (#41879)

2026-08-31 17:10:38 +00:00

guardian_v2.rs

Skip Guardian scoring in User approval mode (#42256)

2026-09-02 10:32:22 +00:00

history_notes_extension.rs

Track history notes thread hint outcomes (#42247)

2026-09-02 09:12:17 +00:00

hooks_list.rs

Treat bundled cleanup hooks as built-ins (#42110)

2026-09-01 18:02:27 +00:00

host_skills.rs

Refresh host skill catalogs through world state (#33425)

2026-07-15 20:59:21 +00:00

imagegen_extension.rs

Track image generation request IDs in analytics (#40714)

2026-08-25 21:38:10 +00:00

initialize.rs

Negotiate MCP extensions per app-server session (#36910)

2026-08-04 15:23:43 +00:00

marketplace_add.rs

Handle @ in local marketplace paths (#34959)

2026-07-23 15:32:36 +00:00

marketplace_remove.rs

Respect config layers when removing plugin marketplaces (#40683)

2026-08-25 19:38:39 +00:00

marketplace_upgrade.rs

Upgrade Git marketplaces from merged configuration (#42149)

2026-09-01 22:37:26 +00:00

mcp_event_stream.rs

Add app-server MCP event streaming (#39761)

2026-08-20 17:49:35 +00:00

mcp_resource_origin.rs

Scope MCP resource reads by connector (#39244)

2026-08-18 18:01:39 +00:00

mcp_resource.rs

Improve sandboxing, MCP errors, and cached approvals (#41196)

2026-08-27 20:05:08 +00:00

mcp_server_elicitation.rs

Skip Guardian reviews in Full Access (#42147)

2026-09-01 22:16:54 +00:00

mcp_server_status.rs

Harden MCP OAuth callback handling (#40691)

2026-08-25 20:26:23 +00:00

mcp_tool.rs

Skip Guardian scoring in User approval mode (#42256)

2026-09-02 10:32:22 +00:00

memory_reset.rs

Honor the configured SQLite home across state consumers (#34994)

2026-07-23 19:19:35 +00:00

misalignment_policy.rs

Expose resumable misalignment details through app server (#40952)

2026-08-26 18:42:44 +00:00

mod.rs

Add plugin reconciliation app-server API (#41949)

2026-09-01 00:50:11 +00:00

model_auto_review.rs

Restore permission profiles when resuming threads (#39153)

2026-08-18 06:22:04 +00:00

model_list.rs

Enable parallel tool calls for all model prompts (#38499)

2026-08-14 05:49:33 +00:00

model_provider_capabilities_read.rs

Add an Amazon Bedrock Runtime provider (#38470)

2026-08-14 01:23:59 +00:00

multi_agent_v2_developer_instructions.rs

Reload Multi-Agent V2 children through their parent (#40477)

2026-08-24 20:47:10 +00:00

otel.rs

Reload app-server telemetry after account changes (#37339)

2026-08-07 00:28:32 +00:00

output_schema.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

permission_profile_list.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

plan_item.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

plugin_install.rs

Harden MCP OAuth callback handling (#40691)

2026-08-25 20:26:23 +00:00

plugin_list.rs

Ignore non-JSON files in plugin catalog test helpers (#42126)

2026-09-01 20:18:10 +00:00

plugin_read.rs

Apply app routing policy to unauthenticated plugin reads (#41230)

2026-08-28 00:07:32 +00:00

plugin_reconcile.rs

Add plugin reconciliation app-server API (#41949)

2026-09-01 00:50:11 +00:00

plugin_search.rs

Prefer remote Sites over the bundled plugin (#42100)

2026-09-01 16:58:54 +00:00

plugin_share.rs

Expose plugin installation timestamps in app-server summaries (#35859)

2026-07-29 01:16:29 +00:00

plugin_uninstall.rs

Run plugin app-server tests in automatic environments (#38189)

2026-08-12 13:33:01 +00:00

process_exec.rs

Prevent launch context from reaching child processes (#37607)

2026-08-08 16:58:26 +00:00

projects.rs

Add recency sorting to project/list (#41223)

2026-08-27 23:43:46 +00:00

rate_limit_reset_credits.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

rate_limits.rs

Show actionable rate-limit banners in the TUI (#41742)

2026-08-31 00:20:06 +00:00

realtime_conversation.rs

Bound Git root discovery for metadata enrichment (#42132)

2026-09-01 20:41:32 +00:00

recommended_plugins.rs

Hydrate recommended plugin metadata on selection (#39143)

2026-08-18 05:42:39 +00:00

remote_control.rs

Exit the stdio app-server when its connection closes (#36035)

2026-07-29 22:00:20 +00:00

remote_thread_store.rs

Default durable threads to paginated history (#40677)

2026-08-25 19:10:35 +00:00

request_permissions.rs

Resolve permission requests in the executor context (#42146)

2026-09-01 22:08:08 +00:00

request_user_input.rs

Retire the untrusted approval policy (#39630)

2026-08-20 07:03:02 +00:00

request_validation.rs

Support standalone named function call outputs (#39782)

2026-08-20 19:19:41 +00:00

residency.rs

Enforce managed residency for model providers (#39645)

2026-08-20 07:33:27 +00:00

review.rs

Default durable threads to paginated history (#40677)

2026-08-25 19:10:35 +00:00

rollout_migration.rs

Start rollout migration after runtime feature enablement (#40668)

2026-08-25 18:14:32 +00:00

safety_check_downgrade.rs

Expose resumable misalignment details through app server (#40952)

2026-08-26 18:42:44 +00:00

selected_capability_stack.rs

Honor managed plugin disablement for executor capabilities (#40640)

2026-08-25 16:47:13 +00:00

selected_environment.rs

Harden unsandboxed patch filesystem access (#39659)

2026-08-20 08:10:08 +00:00

server_diagnostics.rs

Expose runtime activity in server diagnostics (#37486)

2026-08-07 18:38:24 +00:00

session_end.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

skills_list.rs

Honor layered configuration when loading plugins (#40954)

2026-08-26 19:02:02 +00:00

sleep.rs

Classify clock tools as built-in control tools (#41331)

2026-08-28 12:40:10 +00:00

thread_archive.rs

Shut down resumed descendants when archiving thread trees (#40179)

2026-08-23 03:25:56 +00:00

thread_delete.rs

Enforce writer ownership for thread archive and deletion (#35031)

2026-07-23 23:18:06 +00:00

thread_fork.rs

Support thread forks from symlinked session roots (#42135)

2026-09-01 21:03:30 +00:00

thread_inject_items.rs

Support standalone tool outputs in turn/start (#41002)

2026-08-26 23:58:10 +00:00

thread_list.rs

Expose model settings in app-server thread metadata (#42151)

2026-09-01 22:56:18 +00:00

thread_loaded_list.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

thread_memory_mode_set.rs

Honor the configured SQLite home across state consumers (#34994)

2026-07-23 19:19:35 +00:00

thread_metadata_update.rs

Expose model settings in app-server thread metadata (#42151)

2026-09-01 22:56:18 +00:00

thread_name_websocket.rs

Restore app-server websocket listener with auth guard (#22404)

2026-05-12 18:40:53 -07:00

thread_queue.rs

Expose model settings in app-server thread metadata (#42151)

2026-09-01 22:56:18 +00:00

thread_read.rs

Add structured asynchronous user input requests (#42178)

2026-09-02 02:09:35 +00:00

thread_resume.rs

Add structured asynchronous user input requests (#42178)

2026-09-02 02:09:35 +00:00

thread_revert.rs

Restore thread cwd from owned settings snapshots (#41567)

2026-08-29 19:57:06 +00:00

thread_rollback.rs

Expose model settings in app-server thread metadata (#42151)

2026-09-01 22:56:18 +00:00

thread_sections.rs

Add appearance metadata to thread sections (#37898)

2026-08-10 23:32:42 +00:00

thread_settings_update.rs

Expose model settings in app-server thread metadata (#42151)

2026-09-01 22:56:18 +00:00

thread_shell_command.rs

Support configurable timeouts for thread shell commands (#41384)

2026-08-28 18:07:40 +00:00

thread_start.rs

Expose model settings in app-server thread metadata (#42151)

2026-09-01 22:56:18 +00:00

thread_status.rs

Retire the untrusted approval policy (#39630)

2026-08-20 07:03:02 +00:00

thread_timeline.rs

Persist realtime events in the thread timeline (#40508)

2026-08-25 01:03:20 +00:00

thread_unarchive.rs

Add appearance metadata to thread sections (#37898)

2026-08-10 23:32:42 +00:00

thread_unsubscribe.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

turn_cost_otel.rs

Emit turn cost telemetry for ChatGPT sessions (#41944)

2026-09-01 00:30:55 +00:00

turn_interrupt.rs

Standardize shell execution on unified exec (#39757)

2026-08-20 17:46:05 +00:00

turn_settings_update.rs

Allow updating the approval reviewer for active turns (#42121)

2026-09-01 19:19:52 +00:00

turn_start_zsh_fork.rs

Standardize shell execution on unified exec (#39772)

2026-08-20 18:29:35 +00:00

turn_start.rs

Report turn trigger and source in turn analytics (#42003)

2026-09-01 07:32:54 +00:00

turn_steer.rs

Standardize shell execution on unified exec (#39757)

2026-08-20 17:46:05 +00:00

view_image.rs

Require synchronous review for sensitive MCP actions (#41094)

2026-08-27 08:44:54 +00:00

web_search.rs

Allow custom providers to opt into standalone web search (#34846)

2026-07-23 00:02:15 +00:00

windows_sandbox_setup.rs

test: migrate TestAppServer callers to builder (#31451)

2026-07-08 00:15:49 +00:00