zm-oai 5e3f0ee94b Avoid Windows sandbox setup for irrelevant proxy port changes (#43930) ...

## Why

When local binding is enabled, the Windows sandbox has no port-specific loopback rules. Changing proxy listeners therefore does not require an elevated firewall setup.

## What changed

Ignore proxy port differences when both stored and requested settings enable `allow_local_binding`. Continue refreshing ACLs, and still require full setup when local binding changes or proxy ports change with local binding disabled.

## Testing

Add credential orchestration coverage using real setup markers and DPAPI credentials with injected setup and account lookup callbacks. Verify refresh versus full setup selection, returned credentials, and preservation of the setup marker.

GitOrigin-RevId: ffb0c019f3931915b3c1cf522315565df37c582b

2026-09-08 22:13:38 +00:00

..

src

Avoid Windows sandbox setup for irrelevant proxy port changes (#43930)

2026-09-08 22:13:38 +00:00

tests

Embed the Windows sandbox setup manifest in Bazel builds (#38450)

2026-08-13 23:04:38 +00:00

BUILD.bazel

Embed the Windows sandbox setup manifest in Bazel builds (#38450)

2026-08-13 23:04:38 +00:00

build.rs

[codex] Fix Windows sandbox build script lint (#26445)

2026-06-04 13:03:47 -07:00

Cargo.toml

Preserve Windows managed deny reads in the sandbox CLI (#42835)

2026-09-04 19:40:01 +00:00

codex-windows-sandbox-setup.manifest

[codex] Restore setup helper UAC manifest (#25949)

2026-06-03 09:21:24 -07:00

sandbox_smoketests.py

Format Python scripts across the repository (#42109)

2026-09-01 17:47:29 +00:00