Anton Panasenko 89e297729e Prevent Noise auth tokens from reaching child processes (#38941) ...

## Why

`CODEX_EXEC_SERVER_NOISE_AUTH_TOKEN` is an execution-server credential and
must not be exposed to model-reachable commands or command hooks, including
when shell environment policy explicitly sets a case variant of the name.

## What changed

- Add `CODEX_EXEC_SERVER_NOISE_AUTH_TOKEN` to the shared list of
  non-inheritable environment variables.
- Keep the environment variable constant in `codex-protocol` so the exec
  server and environment scrubber use the same definition.
- Verify case-insensitive removal after policy overrides for shell commands
  and command hooks.

GitOrigin-RevId: 759b224b6a7fb4f56f7b1a6d94ffbb0b188c658f

2026-08-17 04:17:45 +00:00

..

client

Route executor policy audits through log-only telemetry (#38800)

2026-08-15 19:34:50 +00:00

noise_relay

Propagate request trace context through exec-server relays (#38690)

2026-08-15 03:00:35 +00:00

proto

Propagate request trace context through exec-server relays (#38690)

2026-08-15 03:00:35 +00:00

remote

Route environment registry requests through the shared HTTP client (#35034)

2026-07-23 23:25:53 +00:00

server

Collect plugin metrics from remote executors (#38283)

2026-08-13 00:39:04 +00:00

arg0_exec_helper.rs

Preserve custom arg0 for sandboxed exec-server processes (#34497)

2026-07-21 08:59:41 +00:00

capability_discovery_cache.rs

Recover capability discovery after executor disconnects (#38420)

2026-08-13 19:14:30 +00:00

capability_discovery.rs

Respect filesystem permissions during capability discovery (#36124)

2026-07-30 10:01:06 +00:00

client_api.rs

Track provisioned environment state across registration (#37147)

2026-08-05 20:08:41 +00:00

client_recovery_tests.rs

Recover capability discovery after executor disconnects (#38420)

2026-08-13 19:14:30 +00:00

client_recovery.rs

Forward executor network policy decisions for auditing (#38670)

2026-08-14 23:42:40 +00:00

client_transport_tests.rs

Route exec-server WebSockets through configured proxies (#35056)

2026-07-24 00:16:42 +00:00

client_transport.rs

Prevent launch context from reaching child processes (#37607)

2026-08-08 16:58:26 +00:00

client.rs

Forward executor network policy decisions for auditing (#38670)

2026-08-14 23:42:40 +00:00

connection.rs

Route exec-server WebSockets through configured proxies (#35056)

2026-07-24 00:16:42 +00:00

environment_bootstrap_tests.rs

Route exec-server WebSockets through configured proxies (#35056)

2026-07-24 00:16:42 +00:00

environment_bootstrap.rs

Route exec-server WebSockets through configured proxies (#35056)

2026-07-24 00:16:42 +00:00

environment_config.rs

Add executor-local config reads to the exec server (#37408)

2026-08-07 08:32:30 +00:00

environment_provider.rs

Route exec-server WebSockets through configured proxies (#35056)

2026-07-24 00:16:42 +00:00

environment_registry_tests.rs

feat(exec-server): add Noise rendezvous environment (#28774)

2026-06-17 17:20:53 -07:00

environment_registry.rs

feat(exec-server): add Noise rendezvous environment (#28774)

2026-06-17 17:20:53 -07:00

environment_toml.rs

Avoid redundant filesystem probes (#36393)

2026-07-31 21:37:56 +00:00

environment.rs

Prevent Noise auth tokens from reaching child processes (#38941)

2026-08-17 04:17:45 +00:00

file_read.rs

[codex] exec-server: stream files in chunks (#28354)

2026-06-16 09:50:55 -07:00

fs_helper_main.rs

Support sandboxed file streaming in exec-server (#38356)

2026-08-13 11:11:26 +00:00

fs_helper.rs

Support sandboxed file streaming in exec-server (#38356)

2026-08-13 11:11:26 +00:00

fs_sandbox.rs

Restrict filesystem helper sandbox access (#38561)

2026-08-14 11:47:12 +00:00

lib.rs

Prevent Noise auth tokens from reaching child processes (#38941)

2026-08-17 04:17:45 +00:00

local_file_system_path_uri_tests.rs

[codex] migrate ExecutorFileSystem paths to PathUri (#27424)

2026-06-11 18:44:18 +00:00

local_file_system.rs

Support sandboxed file streaming in exec-server (#38356)

2026-08-13 11:11:26 +00:00

local_process.rs

Forward executor network policy decisions for auditing (#38670)

2026-08-14 23:42:40 +00:00

network_policy_decisions_tests.rs

Handle exec-server network policy requests in the client (#35359)

2026-07-25 16:03:00 +00:00

network_policy_decisions.rs

Handle exec-server network policy requests in the client (#35359)

2026-07-25 16:03:00 +00:00

noise_channel_tests.rs

exec-server: default remote transport to Noise (#26245)

2026-06-15 17:39:00 -07:00

noise_channel.rs

Size Noise handshake buffers to their messages (#34544)

2026-07-21 13:39:33 +00:00

process_sandbox_tests.rs

Forward executor network policy decisions for auditing (#38670)

2026-08-14 23:42:40 +00:00

process_sandbox.rs

Forward executor network policy decisions for auditing (#38670)

2026-08-14 23:42:40 +00:00

process.rs

Record normalized sandbox violation events (#36207)

2026-07-30 19:23:33 +00:00

regular_file.rs

[codex] exec-server: stream files in chunks (#28354)

2026-06-16 09:50:55 -07:00

relay_noise_tests.rs

Propagate request trace context through exec-server relays (#38690)

2026-08-15 03:00:35 +00:00

relay_proto.rs

exec-server: default remote transport to Noise (#26245)

2026-06-15 17:39:00 -07:00

relay.rs

Propagate request trace context through exec-server relays (#38690)

2026-08-15 03:00:35 +00:00

remote_file_stream.rs

[codex] exec-server: stream files in chunks (#28354)

2026-06-16 09:50:55 -07:00

remote_file_system_path_uri_tests.rs

Coalesce concurrent remote metadata requests (#36184)

2026-07-30 16:35:20 +00:00

remote_file_system.rs

Support sandboxed file streaming in exec-server (#38356)

2026-08-13 11:11:26 +00:00

remote_process.rs

Record normalized sandbox violation events (#36207)

2026-07-30 19:23:33 +00:00

remote.rs

Support workload identity in remote exec-server auth (#38610)

2026-08-14 17:32:37 +00:00

resolved_capability.rs

Remove unused Rust helpers (#34345)

2026-07-20 13:45:29 +00:00

rpc_server_requests_tests.rs

Enable exec-server network policy callbacks (#34770)

2026-07-22 15:22:21 +00:00

rpc_server_requests.rs

Handle exec-server network policy requests in the client (#35359)

2026-07-25 16:03:00 +00:00

rpc.rs

Forward executor network policy decisions for auditing (#38670)

2026-08-14 23:42:40 +00:00

runtime_paths.rs

…

sandboxed_file_open.rs

Support sandboxed file streaming in exec-server (#38356)

2026-08-13 11:11:26 +00:00

sandboxed_file_system_path_uri_tests.rs

[codex] migrate ExecutorFileSystem paths to PathUri (#27424)

2026-06-11 18:44:18 +00:00

sandboxed_file_system.rs

Support sandboxed file streaming in exec-server (#38356)

2026-08-13 11:11:26 +00:00

server.rs

Add opt-in concurrent exec-server request dispatch (#36987)

2026-08-04 22:28:15 +00:00

telemetry.rs

[codex] Observe remote exec-server lifecycle (#27470)

2026-06-25 13:42:40 -07:00

trace_context_tests.rs

[codex] Observe remote exec-server lifecycle (#27470)

2026-06-25 13:42:40 -07:00

trace_context.rs

Decouple exec-server HTTP from reqwest types (#35059)

2026-07-24 00:53:05 +00:00

websocket_pong_watchdog_tests.rs

[codex] bound Rendezvous WebSocket liveness (#30643)

2026-07-01 14:15:34 -07:00

websocket_pong_watchdog.rs

[codex] bound Rendezvous WebSocket liveness (#30643)

2026-07-01 14:15:34 -07:00