zm-oai fd59b42a09 Preserve Windows package identity for sandboxed descendants (#46575) ...

## Why

Package context propagation was limited to verified `codex-command-runner.exe` processes, preventing other packaged callers from passing their OS-assigned identity to sandboxed children.

## What changed

Use the current process's OS package identity to decide whether to preserve desktop app context in both regular and ConPTY sandbox launches. Remove executable-name and staged-runner verification from this decision.

Reject callers without package identity when `CODEX_WINDOWS_REGISTERED_CORE=1`; otherwise, unpackaged callers continue without preserving app context.

GitOrigin-RevId: 52eb2fe33c8746d898b5d7ebf53bd001a55b5506

2026-09-19 02:09:46 +00:00

..

bin

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

conpty

Preserve Windows package identity for sandboxed descendants (#46575)

2026-09-19 02:09:46 +00:00

elevated

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

helper_materialization

Refactor Windows sandbox setup and service helpers (#45455)

2026-09-14 16:05:40 +00:00

provisioning_client

Resume Windows sandbox registration refresh after service restarts (#45559)

2026-09-15 00:42:31 +00:00

setup_provisioning

Repair Windows sandbox access to existing runtime children (#46241)

2026-09-17 15:44:11 +00:00

unified_exec

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

uninstall_windows

Handle disabled Windows sandbox accounts during cleanup (#46333)

2026-09-18 00:36:07 +00:00

wfp

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

acl_tests.rs

Register Windows desktop uninstall ownership before sandbox setup (#45224)

2026-09-13 13:06:40 +00:00

acl.rs

Repair Windows sandbox access to existing runtime children (#46241)

2026-09-17 15:44:11 +00:00

allow.rs

windows-sandbox: pass workspace roots to runner (#24108)

2026-05-28 15:26:55 -07:00

app_package_tests.rs

Add opt-in registered package execution to the Windows sandbox (#45550)

2026-09-14 23:55:04 +00:00

app_package.rs

Preserve Windows package identity for sandboxed descendants (#46575)

2026-09-19 02:09:46 +00:00

audit.rs

Prevent filesystem-root read denies in the Windows sandbox (#44327)

2026-09-09 22:50:03 +00:00

cap.rs

[codex] Scope Windows sandbox write-root capability SIDs (#21479)

2026-05-13 18:28:52 +00:00

deny_read_acl.rs

Register Windows desktop uninstall ownership before sandbox setup (#45224)

2026-09-13 13:06:40 +00:00

deny_read_resolver_access_tests.rs

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

deny_read_resolver.rs

Extract Windows deny-read glob scan planning into protocol (#43903)

2026-09-08 20:23:20 +00:00

deny_read_state.rs

Register Windows desktop uninstall ownership before sandbox setup (#45224)

2026-09-13 13:06:40 +00:00

deny_read_walker_tests.rs

Improve sandboxing, MCP errors, and cached approvals (#41196)

2026-08-27 20:05:08 +00:00

deny_read_walker.rs

Preserve target-native paths in command approvals (#42577)

2026-09-03 16:21:10 +00:00

desktop_tests.rs

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

desktop.rs

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

dpapi.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

elevated_impl.rs

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

env.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

file_write_tests.rs

Harden Windows sandbox provisioning file handling (#42342)

2026-09-02 20:03:43 +00:00

file_write.rs

Harden Windows sandbox provisioning file handling (#42342)

2026-09-02 20:03:43 +00:00

framed_io.rs

Add an authenticated Windows sandbox provisioning client (#42337)

2026-09-02 19:33:34 +00:00

helper_materialization.rs

Add opt-in registered package execution to the Windows sandbox (#45550)

2026-09-14 23:55:04 +00:00

hide_users.rs

Clean up Windows sandbox resources on app uninstall (#42375)

2026-09-02 22:19:51 +00:00

identity_integration_tests.rs

Prefer the provisioning service for automatic Windows sandbox setup (#46239)

2026-09-17 15:35:39 +00:00

identity.rs

Prefer the provisioning service for automatic Windows sandbox setup (#46239)

2026-09-17 15:35:39 +00:00

installation_record.rs

Add service-managed package registration for Windows sandbox accounts (#45542)

2026-09-14 23:24:10 +00:00

lib.rs

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

logging.rs

Add service-managed package registration for Windows sandbox accounts (#45542)

2026-09-14 23:24:10 +00:00

no_reparse_dir_tests.rs

Harden Windows sandbox provisioning file handling (#42342)

2026-09-02 20:03:43 +00:00

no_reparse_dir.rs

Harden Windows sandbox provisioning file handling (#42342)

2026-09-02 20:03:43 +00:00

package_identity.rs

Harden and share Windows sandbox identity helpers (#45533)

2026-09-14 22:40:01 +00:00

path_normalization.rs

Enable --deny-warnings for cargo shear (#21616)

2026-05-08 20:29:00 +00:00

proc_thread_attr.rs

Add opt-in registered package execution to the Windows sandbox (#45550)

2026-09-14 23:55:04 +00:00

process.rs

Preserve Windows package identity for sandboxed descendants (#46575)

2026-09-19 02:09:46 +00:00

provisioning_client_tests.rs

Prefer the provisioning service for automatic Windows sandbox setup (#46239)

2026-09-17 15:35:39 +00:00

provisioning_client.rs

Prefer the provisioning service for automatic Windows sandbox setup (#46239)

2026-09-17 15:35:39 +00:00

provisioning_protocol.rs

Add service-managed package registration for Windows sandbox accounts (#45542)

2026-09-14 23:24:10 +00:00

resolved_permissions.rs

Prevent filesystem-root read denies in the Windows sandbox (#44327)

2026-09-09 22:50:03 +00:00

runtime_ownership_tests.rs

Handle disabled Windows sandbox accounts during cleanup (#46333)

2026-09-18 00:36:07 +00:00

runtime_ownership.rs

Handle disabled Windows sandbox accounts during cleanup (#46333)

2026-09-18 00:36:07 +00:00

sandbox_utils.rs

Allow nested Git repositories in the Windows sandbox (#38080)

2026-08-11 22:22:18 +00:00

service_identity_tests.rs

Add service-managed package registration for Windows sandbox accounts (#45542)

2026-09-14 23:24:10 +00:00

service_identity.rs

Add service-managed package registration for Windows sandbox accounts (#45542)

2026-09-14 23:24:10 +00:00

setup_error.rs

Improve Windows sandbox setup refresh diagnostics (#26471)

2026-06-04 16:52:10 -07:00

setup_launch_tests.rs

Enable authenticated Windows sandbox provisioning (#42351)

2026-09-02 20:27:05 +00:00

setup_launch.rs

Enable authenticated Windows sandbox provisioning (#42351)

2026-09-02 20:27:05 +00:00

setup_mutex.rs

Clean up Windows sandbox resources on app uninstall (#42375)

2026-09-02 22:19:51 +00:00

setup_provisioning.rs

Add opt-in registered package execution to the Windows sandbox (#45550)

2026-09-14 23:55:04 +00:00

setup.rs

Add opt-in registered package execution to the Windows sandbox (#45550)

2026-09-14 23:55:04 +00:00

spawn_prep.rs

Keep Windows sandbox private desktops alive across helper exits (#44658)

2026-09-10 22:17:03 +00:00

ssh_config_dependencies.rs

Filter Windows sandbox roots from SSH config dependencies (#18493)

2026-04-19 14:58:33 -07:00

stdio_bridge_tests.rs

Extract shared Windows sandbox session runner (#28357)

2026-06-15 18:30:48 +00:00

stdio_bridge.rs

Extract shared Windows sandbox session runner (#28357)

2026-06-15 18:30:48 +00:00

token_groups_tests.rs

Validate Windows sandbox token groups before copying SIDs (#45182)

2026-09-13 06:43:42 +00:00

token_tests.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

token_user_tests.rs

Harden and share Windows sandbox identity helpers (#45533)

2026-09-14 22:40:01 +00:00

token_user.rs

Harden and share Windows sandbox identity helpers (#45533)

2026-09-14 22:40:01 +00:00

token.rs

Add service-managed package registration for Windows sandbox accounts (#45542)

2026-09-14 23:24:10 +00:00

uninstall_windows.rs

Complete Windows sandbox uninstall cleanup (#45799)

2026-09-15 21:33:16 +00:00

wfp_setup.rs

Clean up Windows sandbox resources on app uninstall (#42375)

2026-09-02 22:19:51 +00:00

wfp.rs

Clean up Windows sandbox resources on app uninstall (#42375)

2026-09-02 22:19:51 +00:00

winutil.rs

Harden and share Windows sandbox identity helpers (#45533)

2026-09-14 22:40:01 +00:00

workspace_acl.rs

Add Windows sandbox unified exec runtime support (#15578)

2026-04-21 10:44:49 -07:00

wrapper_tests.rs

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

wrapper.rs

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00