Skip to content

feat(attachments): gate host directives via confirmation flow#2285

Merged
siddseethepalli merged 1 commit into
mainfrom
codex/attachments-host-approval
Feb 15, 2026
Merged

feat(attachments): gate host directives via confirmation flow#2285
siddseethepalli merged 1 commit into
mainfrom
codex/attachments-host-approval

Conversation

@siddseethepalli
Copy link
Copy Markdown
Contributor

@siddseethepalli siddseethepalli commented Feb 15, 2026

Summary

  • wire attachment directives through the existing confirmation/trust flow instead of hard-denying
  • surface attachment resolution warnings in assistant output as warning deltas
  • bind runtime assistant IDs onto sessions so persisted assistant attachments use the correct attachment scope
  • add host-attachment session tests for allow and deny paths

Validation

  • bun test v1.3.9 (cf6cdbbb)

Open with Devin

@siddseethepalli siddseethepalli merged commit 8d2d919 into main Feb 15, 2026
1 check failed
@siddseethepalli siddseethepalli deleted the codex/attachments-host-approval branch February 15, 2026 05:49
Copy link
Copy Markdown
Contributor

@devin-ai-integration devin-ai-integration Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Devin Review found 1 potential issue.

View 5 additional findings in Devin Review.

Open in Devin Review

Comment thread assistant/src/daemon/server.ts
Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 647fe5880e

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread assistant/src/daemon/session.ts
Comment thread assistant/src/daemon/session.ts
siddseethepalli added a commit that referenced this pull request Feb 15, 2026
…n scoping

1. Move setAssistantId() after isProcessing() check in both
   persistAndProcessMessage and processMessage to prevent mid-flight
   assistantId mutation when a concurrent request is rejected.

2. Add hasNoClient flag to Session so approveHostAttachmentRead can
   fail fast for HTTP-created sessions instead of blocking for the
   full permission timeout with no client to respond.

3. Call session.setAssistantId(assistantId) in RunOrchestrator.startRun
   so run-generated attachments are scoped to the correct assistant
   instead of falling back to 'local-assistant'.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
siddseethepalli added a commit that referenced this pull request Feb 15, 2026
…n scoping (#2306)

1. Move setAssistantId() after isProcessing() check in both
   persistAndProcessMessage and processMessage to prevent mid-flight
   assistantId mutation when a concurrent request is rejected.

2. Add hasNoClient flag to Session so approveHostAttachmentRead can
   fail fast for HTTP-created sessions instead of blocking for the
   full permission timeout with no client to respond.

3. Call session.setAssistantId(assistantId) in RunOrchestrator.startRun
   so run-generated attachments are scoped to the correct assistant
   instead of falling back to 'local-assistant'.

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
@siddseethepalli
Copy link
Copy Markdown
Contributor Author

Addressed in #2306

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant