iceweasel-oai a633ebc124 Always use private desktops for legacy Windows sandboxes (#46554) ...

## What changed

- Remove the private-desktop opt-out from elevated and unelevated Windows sandbox launches.
- Remove `windows.sandbox_private_desktop` and its managed requirement and API fields. Warn users to remove the obsolete setting.
- Require a private desktop name when launching through the Windows sandbox wrapper and command runner.

## Testing

Add coverage for the obsolete-setting migration warning and update wrapper tests to verify a live private desktop is passed and a missing desktop name is rejected.

GitOrigin-RevId: c7135f8d211aac8d812180691c2c1e433d77cde4

2026-09-19 01:21:32 +00:00

..

bin

Route exec-server HTTP through configured proxy policy (#35023)

2026-07-23 22:39:28 +00:00

external_agent_migration

Centralize model-message resolution and rendering in codex-prompts (#46026)

2026-09-16 21:01:13 +00:00

request_processors

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

account_notifications_tests.rs

Expose selected workspace routing in app-server account reads (#45529)

2026-09-14 22:31:32 +00:00

account_notifications.rs

Expose selected workspace routing in app-server account reads (#45529)

2026-09-14 22:31:32 +00:00

analytics_utils.rs

[codex-analytics] ingest server requests and responses (#17088)

2026-04-29 19:56:41 +00:00

app_info.rs

Use batch metadata for plugin app summaries (#34851)

2026-07-23 01:00:35 +00:00

app_server_tracing.rs

Reduce app-server JSON serialization overhead (#34761)

2026-07-22 14:16:51 +00:00

attestation.rs

Keep credentials out of app-server logs (#39993)

2026-08-21 19:04:32 +00:00

auth_mode.rs

Support managed AWS access keys for Amazon Bedrock (#40481)

2026-08-24 21:39:48 +00:00

bespoke_event_handling.rs

Avoid cloning turn items for app-server active turn lookups (#46305)

2026-09-17 21:25:34 +00:00

code_mode_host_tests.rs

Remove WebSocket transport from code-mode hosts (#40692)

2026-08-25 20:37:15 +00:00

code_mode_host.rs

Remove WebSocket transport from code-mode hosts (#40692)

2026-08-25 20:37:15 +00:00

codex_home_metrics.rs

Limit app-server storage metrics to session directories (#43790)

2026-09-08 10:18:59 +00:00

command_exec.rs

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

config_layer.rs

Support packaged defaults in config layering (#37810)

2026-08-10 11:22:55 +00:00

config_manager_provider_tests.rs

Connect app-server workspace discovery to model request routing (#46281)

2026-09-17 19:12:42 +00:00

config_manager_service_credential_edits.rs

Handle credential provider source remapping across config layers (#44241)

2026-09-09 17:45:17 +00:00

config_manager_service_tests.rs

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

config_manager_service.rs

Enforce managed model provider selection and definitions (#44650)

2026-09-10 21:41:39 +00:00

config_manager.rs

Connect app-server workspace discovery to model request routing (#46281)

2026-09-17 19:12:42 +00:00

connection_cleanup.rs

fix(app-server): avoid blocking connection cleanup (#26852)

2026-06-08 10:20:54 -07:00

connection_rpc_gate.rs

Bind remote-control sessions to their authentication owner (#44341)

2026-09-09 23:59:14 +00:00

current_time.rs

[app-server] increase currentTime/read timeout (#30384)

2026-06-27 16:42:03 -07:00

daemon_thread_recovery.rs

Continue interrupted work after managed daemon restarts (#45820)

2026-09-16 00:54:58 +00:00

dynamic_tools.rs

Add audio output support to dynamic tools and code mode (#34080)

2026-07-18 23:22:13 +00:00

effective_plugin_change_tests.rs

Refresh runtimes for remote plugin state changes (#41396)

2026-08-28 19:12:34 +00:00

effective_plugin_change.rs

Add plugin reconciliation app-server API (#41949)

2026-09-01 00:50:11 +00:00

error_code.rs

Gate new turn submissions on host shutdown admission (#43943)

2026-09-08 23:45:10 +00:00

extensions.rs

Remove Guardian subagent-spawner plumbing (#45491)

2026-09-14 18:56:43 +00:00

external_auth.rs

Keep credentials out of app-server logs (#39993)

2026-08-21 19:04:32 +00:00

filters.rs

…

fs_watch.rs

Fix fs/watch debounce batching (#24716)

2026-05-28 23:09:55 -07:00

fuzzy_file_search.rs

…

image_url.rs

[codex] reject remote images at app-server ingress (#29419)

2026-06-23 00:43:56 +00:00

in_process.rs

Add app-server APIs for stored thread attachments (#44564)

2026-09-10 15:52:09 +00:00

lib.rs

Isolate app-server Unix sockets from filesystem-restricted commands (#45984)

2026-09-16 16:56:41 +00:00

main_tests.rs

Remove WebSocket transport from code-mode hosts (#40692)

2026-08-25 20:37:15 +00:00

main.rs

Persist loaded threads before managed daemon shutdown (#44283)

2026-09-09 19:22:22 +00:00

mcp_refresh.rs

Add workspace routing support for Responses requests (#45812)

2026-09-16 00:20:40 +00:00

message_processor_tracing_tests.rs

Expose disabled plugin settings in the app-server API (#44905)

2026-09-11 20:27:37 +00:00

message_processor.rs

Connect app-server workspace discovery to model request routing (#46281)

2026-09-17 19:12:42 +00:00

models_refresh_worker_tests.rs

Persist provider and auth identity with model catalog caches (#43897)

2026-09-08 19:48:37 +00:00

models_refresh_worker.rs

Increase the app-server model refresh interval (#40498)

2026-08-24 23:29:10 +00:00

models.rs

Expose available access programs in model discovery (#44893)

2026-09-11 19:13:04 +00:00

notification_media.rs

Add app-server APIs for stored thread attachments (#44564)

2026-09-10 15:52:09 +00:00

otel_reloader.rs

Reload app-server telemetry after account changes (#37339)

2026-08-07 00:28:32 +00:00

outgoing_message.rs

Expose selected workspace routing in app-server account reads (#45529)

2026-09-14 22:31:32 +00:00

plugin_config_reload.rs

Upgrade Git marketplaces from merged configuration (#42149)

2026-09-01 22:37:26 +00:00

request_processors.rs

Add an experimental rollout compression endpoint (#46020)

2026-09-16 20:39:18 +00:00

request_serialization.rs

Gate new app-server work during graceful shutdown (#43959)

2026-09-09 01:03:42 +00:00

server_request_error.rs

…

skills_watcher.rs

Stop re-exporting skill APIs from codex-core (#37984)

2026-08-11 10:43:11 +00:00

thread_state.rs

Avoid cloning excluded turn items during thread resume (#46511)

2026-09-18 23:37:11 +00:00

thread_status.rs

Notify running turn watchers only on count changes (#38170)

2026-08-12 11:07:46 +00:00

transport_tests.rs

Surface model provider authentication recovery progress (#41239)

2026-08-28 01:14:02 +00:00

transport.rs

Isolate app-server Unix sockets from filesystem-restricted commands (#45984)

2026-09-16 16:56:41 +00:00

turn_admission_tests.rs

Gate new app-server work during graceful shutdown (#43959)

2026-09-09 01:03:42 +00:00

turn_admission.rs

Gate new app-server work during graceful shutdown (#43959)

2026-09-09 01:03:42 +00:00

turn_cost_worker_chatgpt_tests.rs

Emit turn cost telemetry for ChatGPT sessions (#41944)

2026-09-01 00:30:55 +00:00

turn_cost_worker_chatgpt.rs

Emit turn cost telemetry for ChatGPT sessions (#41944)

2026-09-01 00:30:55 +00:00

turn_cost_worker_tests.rs

Preserve root turn attribution in turn-start events (#44611)

2026-09-10 18:24:13 +00:00

turn_cost_worker.rs

Emit turn cost telemetry for ChatGPT sessions (#41944)

2026-09-01 00:30:55 +00:00

user_verification_activation_tests.rs

Enable user verification for local Codex Desktop sessions (#44613)

2026-09-10 18:32:38 +00:00

user_verification_adapter_tests.rs

Add user-verification provider abstractions and RPC adapters (#43547)

2026-09-07 18:43:20 +00:00

user_verification_adapter.rs

Add user-verification provider abstractions and RPC adapters (#43547)

2026-09-07 18:43:20 +00:00

user_verification_auth.rs

Enable user verification for the bundled TUI on supported devices (#43715)

2026-09-08 05:57:24 +00:00

user_verification_cancel_context_tests.rs

Add cancellation for native user-verification RPCs (#43925)

2026-09-08 21:48:53 +00:00

user_verification_cancel_tests.rs

Add cancellation for native user-verification RPCs (#43925)

2026-09-08 21:48:53 +00:00

user_verification_connection_tests.rs

Enable user verification for the bundled TUI on supported devices (#43715)

2026-09-08 05:57:24 +00:00

user_verification_ownership_tests.rs

Add opt-in MCP user-verification transport (#43352)

2026-09-07 04:33:22 +00:00

user_verification_response_tests.rs

Add opt-in MCP user-verification transport (#43352)

2026-09-07 04:33:22 +00:00

user_verification_response.rs

Add opt-in MCP user-verification transport (#43352)

2026-09-07 04:33:22 +00:00

user_verification_rpc_tests.rs

Return public key metadata from user verification enrollment (#44877)

2026-09-11 17:36:50 +00:00

user_verification_test_support.rs

Return public key metadata from user verification enrollment (#44877)

2026-09-11 17:36:50 +00:00

user_verification_tests.rs

Return public key metadata from user verification enrollment (#44877)

2026-09-11 17:36:50 +00:00

user_verification.rs

Return public key metadata from user verification enrollment (#44877)

2026-09-11 17:36:50 +00:00