Skip to content

Recognize user_message tools in Guardian authorization context - #47624

Merged
copyberry[bot] merged 1 commit into
mainfrom
copyberry/codex-internal-to-codex-oss/68495642ef4b78eec71df4fee2bacfda407adc47
Sep 23, 2026
Merged

copyberry[bot] merged 1 commit into
mainfrom
copyberry/codex-internal-to-codex-oss/68495642ef4b78eec71df4fee2bacfda407adc47

Conversation

@copyberry

@copyberry copyberry Bot commented Sep 23, 2026 •

Copy link
Copy Markdown

Recognize user_message tools in Guardian authorization context

Why

Messages sent through the singular user_message connector were omitted from Guardian's delivered assistant message evidence because only user_messaging tool names were recognized.

What changed

Accept both namespaced and flat user_message forms of send_message alongside the existing user_messaging forms.

Testing

Extend Guardian subagent authorization tests to cover the singular connector and flat tool names, including blocked post-tool hooks and cancellation before confirmation. Add a negative case ensuring send_message_to_thread is not treated as delivered message evidence.

)

## Why

Messages sent through the singular `user_message` connector were omitted from Guardian's delivered assistant message evidence because only `user_messaging` tool names were recognized.

## What changed

Accept both namespaced and flat `user_message` forms of `send_message` alongside the existing `user_messaging` forms.

## Testing

Extend Guardian subagent authorization tests to cover the singular connector and flat tool names, including blocked post-tool hooks and cancellation before confirmation. Add a negative case ensuring `send_message_to_thread` is not treated as delivered message evidence.

GitOrigin-RevId: 68495642ef4b78eec71df4fee2bacfda407adc47
@copyberry
copyberry Bot force-pushed the copyberry/codex-internal-to-codex-oss/68495642ef4b78eec71df4fee2bacfda407adc47 branch from eddcd42 to f07b26c Compare September 23, 2026 18:53
@copyberry
copyberry Bot merged commit f07b26c into main Sep 23, 2026
1 check failed
@copyberry
copyberry Bot deleted the copyberry/codex-internal-to-codex-oss/68495642ef4b78eec71df4fee2bacfda407adc47 branch September 23, 2026 18:53
@github-actions

Copy link
Copy Markdown
Contributor


Thank you for your submission, we really appreciate it. Like many open-source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution. You can sign the CLA by just posting a Pull Request Comment same as the below format.


I have read the CLA Document and I hereby sign the CLA


You can retrigger this bot by commenting recheck in this Pull Request. Posted by the CLA Assistant Lite bot.

@github-actions github-actions Bot locked and limited conversation to collaborators Sep 23, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant