jif bce96bcb43 Reject oversized reviewed terminal input (#41159) ...

## Why

Reviewing a shortened `write_stdin` action while sending the complete input could allow unreviewed bytes to reach an escalated terminal.

## What changed

- Require the fully formatted action and approval reason to fit within 8,000 bytes.
- Reject truncated or oversized actions before requesting approval or writing any bytes to the terminal.
- Document the reviewed stdin size limit in the app-server protocol.

## Testing

Add an integration test that uses JSON escaping to push a formatted action over the limit and verifies that it is neither offered for approval nor executed, while a subsequent valid write still succeeds.

GitOrigin-RevId: f6c96a78a65a136366c8119a7d242dfc2ec05fe6

2026-08-27 14:54:13 +00:00

..

code_mode

Track Code Mode tool call metadata completeness (#41058)

2026-08-27 06:03:29 +00:00

handlers

Clarify when to send asynchronous user messages (#41070)

2026-08-27 06:54:38 +00:00

runtimes

Require approval for input to escalated terminals (#40978)

2026-08-26 21:39:05 +00:00

approvals_tests.rs

Require approval for input to escalated terminals (#40978)

2026-08-26 21:39:05 +00:00

approvals.rs

Reject oversized reviewed terminal input (#41159)

2026-08-27 14:54:13 +00:00

context_tests.rs

Preserve MCP tool output as content items (#40737)

2026-08-25 23:42:50 +00:00

context.rs

Include originating item IDs in MCP request metadata (#40866)

2026-08-26 10:39:05 +00:00

control_tool_analytics.rs

Track history, notes, and async messages as control tools (#40496)

2026-08-24 23:19:03 +00:00

events.rs

Snapshot resolved settings for each model step (#40651)

2026-08-25 17:41:22 +00:00

executed_tool_calls_tests.rs

Track Code Mode tool call metadata completeness (#41058)

2026-08-27 06:03:29 +00:00

executed_tool_calls.rs

Track Code Mode tool call metadata completeness (#41058)

2026-08-27 06:03:29 +00:00

hook_names.rs

Default function tools into tool hooks (#23757)

2026-05-23 00:56:58 +00:00

hosted_spec_tests.rs

Use the image generation extension by default (#31596)

2026-07-09 12:25:19 +09:00

hosted_spec.rs

Use the image generation extension by default (#31596)

2026-07-09 12:25:19 +09:00

lifecycle.rs

Expose MCP provenance to tool lifecycle extensions (#40976)

2026-08-26 21:30:23 +00:00

mod.rs

Snapshot resolved settings for each model step (#40651)

2026-08-25 17:41:22 +00:00

network_approval_tests.rs

Make tool-result telemetry limits configurable (#39779)

2026-08-20 19:09:04 +00:00

network_approval.rs

Use issuing step settings for approval decisions (#40821)

2026-08-26 06:51:58 +00:00

orchestrator.rs

Use issuing step settings for approval decisions (#40821)

2026-08-26 06:51:58 +00:00

parallel.rs

Scope extension capabilities to invocation lifetimes (#41020)

2026-08-27 02:00:31 +00:00

registry_tests.rs

Scope extension capabilities to invocation lifetimes (#41020)

2026-08-27 02:00:31 +00:00

registry.rs

Expose MCP provenance to tool lifecycle extensions (#40976)

2026-08-26 21:30:23 +00:00

router_tests.rs

Scope extension capabilities to invocation lifetimes (#41020)

2026-08-27 02:00:31 +00:00

router.rs

Standardize shell execution on unified exec (#39772)

2026-08-20 18:29:35 +00:00

sandboxing_tests.rs

Require approval for input to escalated terminals (#40978)

2026-08-26 21:39:05 +00:00

sandboxing.rs

Require approval for input to escalated terminals (#40978)

2026-08-26 21:39:05 +00:00

spec_plan_tests.rs

Scope extension capabilities to invocation lifetimes (#41020)

2026-08-27 02:00:31 +00:00

spec_plan.rs

Scope extension capabilities to invocation lifetimes (#41020)

2026-08-27 02:00:31 +00:00

tool_dispatch_trace_tests.rs

Track Code Mode tool call metadata completeness (#41058)

2026-08-27 06:03:29 +00:00

tool_dispatch_trace.rs

Canonicalize default tools under the functions namespace (#37022)

2026-08-05 04:07:59 +00:00

tool_namespaces_info.rs

Include tool namespace inventory in turn metadata (#37492)

2026-08-07 19:32:15 +00:00