codex

mirror of https://github.com/openai/codex.git synced 2026-10-31 19:28:49 +00:00

Files

T

Eric Traut 09bc28f348 Restrict Windows IDE pipe client impersonation (#39020 )

## Why

Windows named pipe servers can impersonate connected clients. IDE context
connections only require the server to identify the client, so they should not
grant broader impersonation rights.

## What changed

Open Windows IDE context pipes with `SECURITY_SQOS_PRESENT` and
`SECURITY_IDENTIFICATION`, limiting the server's impersonation token to the
identification level.

## Testing

Add a Windows regression test that connects to a named pipe, asks the server to
impersonate the client, and verifies that the resulting token has the
`SecurityIdentification` level.

GitOrigin-RevId: 51ef080f3367857987e03b0113a476040ea40e56

2026-08-17 16:34:21 +00:00

app

Add experimental app-server project APIs (#38940 )

2026-08-17 04:01:37 +00:00

app_server_session

Avoid paginated resume requests for verified legacy rollouts (#38604 )

2026-08-14 16:33:28 +00:00

bin

…

bottom_pane

Edit queued messages with Vim history-up (#38907 )

2026-08-16 21:48:41 +00:00

chatwidget

Add experimental app-server project APIs (#38940 )

2026-08-17 04:01:37 +00:00

exec_cell

Compact successful command activity in the TUI (#38921 )

2026-08-17 00:32:09 +00:00

external_agent_config_migration

Harden TUI startup input handling (#38641 )

2026-08-14 20:23:49 +00:00

history_cell

Compact successful command activity in the TUI (#38921 )

2026-08-17 00:32:09 +00:00

ide_context

Restrict Windows IDE pipe client impersonation (#39020 )

2026-08-17 16:34:21 +00:00

inline_visualization

Protect inline visualization viewers from sandbox writes (#38306 )

2026-08-13 04:08:23 +00:00

keymap

Share editor keymaps across TUI composer components (#38837 )

2026-08-16 05:59:34 +00:00

keymap_setup

Support two-stroke TUI key chords (#36511 )

2026-08-01 17:43:03 +00:00

markdown_render

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00

notifications

…

onboarding

Harden TUI startup input handling (#38641 )

2026-08-14 20:23:49 +00:00

pets

Route pet asset downloads through the shared HTTP client (#36008 )

2026-07-29 18:40:38 +00:00

public_widgets

…

render

Stop rendering columns after filling their area (#38913 )

2026-08-16 23:05:11 +00:00

resume_picker

Avoid paginated resume requests for verified legacy rollouts (#38604 )

2026-08-14 16:33:28 +00:00

snapshots

Isolate external editor buffers from sandbox-writable paths (#38830 )

2026-08-16 03:14:17 +00:00

status

Add thread usage to TUI status surfaces (#38282 )

2026-08-13 00:34:39 +00:00

streaming

Support content references for inline visualizations (#37341 )

2026-08-07 00:37:50 +00:00

terminal_probe

Harden TUI startup input handling (#38641 )

2026-08-14 20:23:49 +00:00

tui

Keep the composer editable during TUI startup (#38642 )

2026-08-14 20:30:30 +00:00

additional_dirs.rs

Skip missing paths in filesystem sandbox entries (#34598 )

2026-07-21 19:17:18 +00:00

app_backtrack.rs

Show estimated thread usage in /status (#38281 )

2026-08-13 00:30:08 +00:00

app_command.rs

Remove the unused TUI shutdown app command (#34553 )

2026-07-21 14:25:18 +00:00

app_event_sender.rs

Keep interrupted prompts in conversation history (#33198 )

2026-07-15 01:07:29 +00:00

app_event.rs

Add working-directory commands to the TUI (#38894 )

2026-08-16 19:48:07 +00:00

app_info.rs

Remove first-party type from app metadata (#34844 )

2026-07-22 23:45:45 +00:00

app_server_approval_conversions.rs

Use ApiPathString in app-server filesystem permission paths (#28367 )

2026-06-15 19:25:54 -07:00

app_server_session.rs

Add experimental app-server project APIs (#38940 )

2026-08-17 04:01:37 +00:00

app.rs

Add working-directory commands to the TUI (#38894 )

2026-08-16 19:48:07 +00:00

approval_events.rs

Scope command approvals by execution environment (#28738 )

2026-06-17 19:52:43 +02:00

ascii_animation.rs

…

auto_review_denials.rs

Preserve plugin attribution across command approvals (#35029 )

2026-07-23 23:13:59 +00:00

branch_summary.rs

Reject implicitly discovered bare Git repositories (#36924 )

2026-08-04 16:53:33 +00:00

chatwidget.rs

Compact successful command activity in the TUI (#38921 )

2026-08-17 00:32:09 +00:00

cli.rs

Configure PSP routing through the feature system (#38056 )

2026-08-11 19:16:15 +00:00

clipboard_copy.rs

…

clipboard_paste.rs

…

collaboration_modes.rs

…

color.rs

…

config_update_tests.rs

…

config_update.rs

…

custom_terminal.rs

Fully repaint inline viewports after history overlap (#37335 )

2026-08-07 00:05:41 +00:00

cwd_prompt.rs

Harden TUI startup input handling (#38641 )

2026-08-14 20:23:49 +00:00

debug_config.rs

Support packaged defaults in config layering (#37810 )

2026-08-10 11:22:55 +00:00

diff_model.rs

…

diff_render.rs

Respect rendered width when adding TUI history (#38075 )

2026-08-11 21:12:23 +00:00

exec_command.rs

…

external_editor_tests.rs

Isolate external editor buffers from sandbox-writable paths (#38830 )

2026-08-16 03:14:17 +00:00

external_editor.rs

Isolate external editor buffers from sandbox-writable paths (#38830 )

2026-08-16 03:14:17 +00:00

file_search.rs

…

frames.rs

…

get_git_diff.rs

Reject implicitly discovered bare Git repositories (#36924 )

2026-08-04 16:53:33 +00:00

git_action_directives.rs

…

goal_display.rs

Show blocked goals as stalled in the TUI (#35886 )

2026-07-29 03:50:00 +00:00

goal_files.rs

[3 of 3] Support images in TUI goals (#27510 )

2026-06-12 17:14:27 -07:00

hooks_rpc.rs

…

ide_context.rs

…

inline_visualization_tests.rs

Protect inline visualization viewers from sandbox writes (#38306 )

2026-08-13 04:08:23 +00:00

inline_visualization.rs

Protect inline visualization viewers from sandbox writes (#38306 )

2026-08-13 04:08:23 +00:00

insert_history.rs

Avoid cloning TUI history span content (#38822 )

2026-08-16 01:31:22 +00:00

key_hint.rs

Support two-stroke TUI key chords (#36511 )

2026-08-01 17:43:03 +00:00

keymap_setup.rs

Support two-stroke TUI key chords (#36511 )

2026-08-01 17:43:03 +00:00

keymap.rs

Share editor keymaps across TUI composer components (#38837 )

2026-08-16 05:59:34 +00:00

lib.rs

Add experimental app-server project APIs (#38940 )

2026-08-17 04:01:37 +00:00

line_truncation_tests.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00

line_truncation.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00

live_wrap.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00

local_chatgpt_auth.rs

auth: move domain mode below app wire types (#29721 )

2026-06-24 03:10:20 +00:00

main.rs

Configure PSP routing through the feature system (#38056 )

2026-08-11 19:16:15 +00:00

managed_new_thread_defaults_tests.rs

[codex] Use managed defaults for TUI threads (#30147 )

2026-06-26 19:27:31 +00:00

managed_new_thread_defaults.rs

[codex] Use managed defaults for TUI threads (#30147 )

2026-06-26 19:27:31 +00:00

markdown_render_tests.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00

markdown_render.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00

markdown_stream.rs

Use the Markdown collector as the streaming source of truth (#34197 )

2026-07-19 16:50:54 +00:00

markdown_text_merge.rs

…

markdown.rs

Render streamed Markdown incrementally (#34045 )

2026-07-18 18:00:51 +00:00

mention_codec.rs

Improve composer completion target resolution (#32628 )

2026-07-12 19:18:37 +00:00

model_catalog.rs

…

model_migration.rs

Harden TUI startup input handling (#38641 )

2026-08-14 20:23:49 +00:00

motion.rs

…

multi_agents.rs

Preserve sub-agent liveness in the agent picker (#33921 )

2026-07-17 23:07:40 +00:00

named_session_lookup_tests.rs

Harden named session lookup in the TUI (#37157 )

2026-08-05 20:44:03 +00:00

named_session_lookup.rs

Add experimental app-server project APIs (#38940 )

2026-08-17 04:01:37 +00:00

npm_registry.rs

…

oss_selection.rs

Keep the composer editable during TUI startup (#38642 )

2026-08-14 20:30:30 +00:00

pager_overlay.rs

Paginate TUI transcript history (#36950 )

2026-08-04 19:12:46 +00:00

permission_compat.rs

Skip missing paths in filesystem sandbox entries (#34598 )

2026-07-21 19:17:18 +00:00

resize_reflow_cap.rs

…

resume_picker_transcript_preview_tests.rs

Fix resume transcript preview line selection (#38605 )

2026-08-14 16:37:40 +00:00

resume_picker_transcript_preview.rs

Fix resume transcript preview line selection (#38605 )

2026-08-14 16:37:40 +00:00

resume_picker.rs

Add experimental app-server project APIs (#38940 )

2026-08-17 04:01:37 +00:00

selection_list.rs

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

service_tier_resolution.rs

…

session_archive_commands_tests.rs

Prefer SQLite names for local session archive commands (#36808 )

2026-08-03 23:05:35 +00:00

session_archive_commands.rs

Fail closed when workload identity initialization fails (#38424 )

2026-08-13 19:35:22 +00:00

session_log.rs

Allow naming sessions with /new and /clear (#34605 )

2026-07-21 20:13:08 +00:00

session_resume.rs

Reuse the TUI startup account response during bootstrap (#38649 )

2026-08-14 20:59:34 +00:00

session_state.rs

core: load AGENTS.md from foreign environments (#28958 )

2026-06-18 15:06:23 -07:00

shimmer.rs

…

skills_helpers.rs

Use app-server skill metadata directly in the TUI (#34368 )

2026-07-20 15:44:37 +00:00

slash_command.rs

Add working-directory commands to the TUI (#38894 )

2026-08-16 19:48:07 +00:00

startup_draft_tests.rs

Share editor keymaps across TUI composer components (#38837 )

2026-08-16 05:59:34 +00:00

startup_draft.rs

Show resume and fork status during TUI startup (#38788 )

2026-08-15 17:30:13 +00:00

startup_error.rs

…

startup_hooks_review.rs

Add MCP tool handler support to the hooks engine (#38705 )

2026-08-15 05:53:54 +00:00

startup_orchestration.rs

Show resume and fork status during TUI startup (#38788 )

2026-08-15 17:30:13 +00:00

startup_preflight_tests.rs

Show onboarding when Codex home lacks authentication state (#38644 )

2026-08-14 20:38:52 +00:00

startup_preflight.rs

Show onboarding when Codex home lacks authentication state (#38644 )

2026-08-14 20:38:52 +00:00

status_indicator_widget.rs

Support two-stroke TUI key chords (#36511 )

2026-08-01 17:43:03 +00:00

style.rs

Upgrade Ratatui to 0.30.2 (#35959 )

2026-07-29 13:53:15 +00:00

table_detect.rs

…

terminal_hyperlinks.rs

Avoid allocating per character when decorating hyperlinks (#38823 )

2026-08-16 01:34:51 +00:00

terminal_palette.rs

Preserve TUI input when terminal focus returns (#35649 )

2026-07-27 17:59:06 +00:00

terminal_probe.rs

Harden TUI startup input handling (#38641 )

2026-08-14 20:23:49 +00:00

terminal_title.rs

…

terminal_visualization_instructions.rs

…

test_backend.rs

Show estimated thread usage in /status (#38281 )

2026-08-13 00:30:08 +00:00

test_support.rs

Remove TUI legacy core test_support dependencies (#27484 )

2026-06-10 17:55:49 -07:00

text_formatting.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00

theme_picker.rs

…

thread_transcript.rs

Protect inline visualization viewers from sandbox writes (#38306 )

2026-08-13 04:08:23 +00:00

token_usage.rs

…

tooltips.rs

Use the shared HTTP client for announcement tips (#35825 )

2026-07-28 20:12:13 +00:00

transcript_reflow.rs

Improve paginated TUI history loading (#36949 )

2026-08-04 19:05:45 +00:00

tui_startup_tests.rs

Show resume and fork status during TUI startup (#38788 )

2026-08-15 17:30:13 +00:00

tui.rs

Keep the composer editable during TUI startup (#38642 )

2026-08-14 20:30:30 +00:00

ui_consts.rs

[tui] Truncate hook context in conversation history (#31252 )

2026-07-06 16:33:13 -04:00

update_action.rs

Detect Codex installs managed by pnpm (#31503 )

2026-07-08 12:17:58 -04:00

update_prompt.rs

Harden TUI startup input handling (#38641 )

2026-08-14 20:23:49 +00:00

update_versions.rs

…

updates_cache_tests.rs

Persist update dismissal without cache (#27783 )

2026-06-12 09:26:08 -07:00

updates_cache.rs

Persist update dismissal without cache (#27783 )

2026-06-12 09:26:08 -07:00

updates.rs

Use the shared HTTP client for TUI network checks (#35821 )

2026-07-28 19:58:25 +00:00

version.rs

…

width.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00

windows_sandbox.rs

Remove TUI legacy Windows sandbox dependency (#27490 )

2026-06-11 09:23:08 -07:00

workspace_command.rs

[codex] Remove async_trait from first-party code (#27475 )

2026-06-11 18:16:39 -07:00

workspace_messages_tests.rs

Add workspace messages app-server API (#29001 )

2026-06-22 04:25:07 -07:00

workspace_messages.rs

Add workspace messages app-server API (#29001 )

2026-06-22 04:25:07 -07:00

wrapping.rs

Fix TUI layout for halfwidth Japanese sound marks (#35962 )

2026-07-29 14:01:31 +00:00