Vivian Fang 7844815bd7 Add opt-in prompt image sanitization (#61341) ...

## What changed

- Add the disabled-by-default `safe_image_decoder` feature to decode and re-encode prompt images without source metadata, with byte and decoded-pixel limits.
- Apply JPEG orientation and supported ICC color conversion to sRGB, emitting PNG for PNG/GIF inputs and JPEG for JPEG/WebP inputs.
- Use the selected decoder for image preparation, `view_image` validation, and MCP image validation. Include the decoder in image cache keys.
- Preserve original inline images in history metadata so resume and fork can regenerate prepared images without repeated JPEG encoding changing their bytes.

## Testing

Add regression tests for identical JPEG replay after history serialization and for preventing legacy cache entries from bypassing sanitization.

GitOrigin-RevId: 718cd83d0a233e2eb8efd1a64c14d8944e44c350

2026-11-13 18:44:31 +00:00

..

absolute-path

Support Windows registry overrides for requirements.toml (#55456)

2026-10-20 04:49:25 +00:00

approval-presets

tui: pass active permission profiles through app commands (#22891)

2026-05-15 22:42:35 +00:00

audio

Preserve file-backed audio in tool outputs (#60735)

2026-11-11 06:41:15 +00:00

cache

Consolidate Rust unit tests under dedicated test modules (#56247)

2026-10-22 19:36:47 +00:00

cargo-bin

Use hermetic LLVM for Windows MSVC Bazel builds (#60507)

2026-11-10 03:02:25 +00:00

cli

Use permission profiles in sandbox tests and documentation (#61133)

2026-11-12 14:22:20 +00:00

critical-path

Track automatic review overhead in critical-path durations (#59251)

2026-11-03 23:01:57 +00:00

elapsed

…

fuzzy-match

Fix fuzzy match scoring within Unicode lowercase expansions (#45475)

2026-09-14 17:36:11 +00:00

git-discovery

Bound Git root discovery for metadata enrichment (#42132)

2026-09-01 20:41:32 +00:00

head-tail-buffer

Extract the head-tail buffer into a utility crate (#56535)

2026-10-23 17:35:25 +00:00

home-dir

…

image

Add opt-in prompt image sanitization (#61341)

2026-11-13 18:44:31 +00:00

json-to-toml

…

model-facing-id

Add session-scoped stores for stable model-facing IDs (#61339)

2026-11-13 18:43:58 +00:00

oss

Route Ollama through the shared HTTP client (#36078)

2026-07-30 04:26:36 +00:00

output-truncation

Preserve file-backed audio in tool outputs (#60735)

2026-11-11 06:41:15 +00:00

path-uri

Upgrade the Rust toolchain to 1.99.1 (#61205)

2026-11-12 23:51:52 +00:00

path-utils

Fix Windows atomic writes and refresh build maintenance (#60872)

2026-11-11 22:31:42 +00:00

plugins

Route skill discovery and loading through EnvironmentAccess (#46293)

2026-09-17 19:52:03 +00:00

process

Suppress Windows console windows for background subprocesses (#49164)

2026-09-29 04:38:37 +00:00

pty

Prevent idle Windows MCP pipes from blocking unrelated I/O (#59726)

2026-11-05 19:46:31 +00:00

readiness

[codex] Remove async_trait from first-party code (#27475)

2026-06-11 18:16:39 -07:00

redacted-string

Redact OTEL exporter headers in app-server config responses (#57654)

2026-10-28 05:46:04 +00:00

rustls-provider

Use aws-lc-rs for rustls crypto provider (#27706)

2026-06-15 11:32:13 -07:00

sandbox-summary

Remove the legacy sandbox policy summary helper (#59677)

2026-11-05 15:17:48 +00:00

sleep-inhibitor

Upgrade Windows bindings to windows-sys 0.61.2 (#50058)

2026-10-01 18:05:05 +00:00

stream-parser

Upgrade the Rust toolchain to 1.99.1 (#61205)

2026-11-12 23:51:52 +00:00

string

Preserve output boundaries through token truncation (#57584)

2026-10-27 22:56:23 +00:00

template

…