Eric Traut fbc169827e Suppress Windows console windows for background subprocesses (#49164) ...

## Why

Background helpers launched from a detached Windows process can allocate console windows. Job Object launches and containment fallbacks need to preserve console suppression as well.

## What changed

- Add `codex_utils_process::background_command` to set `CREATE_NO_WINDOW` on Windows, and use it across background subprocess launches, including Git, plugins, authentication, diagnostics, and sandbox helpers.
- Centralize console suppression in Job Object launches. Keep `CREATE_NO_WINDOW` when retrying without containment, and clear `CREATE_SUSPENDED` so the fallback child can run.
- Preserve console inheritance for interactive shell launches and interactive AWS authentication refreshes.

## Testing

Add Windows regression tests covering console-free launches from detached parents through standard and Tokio commands, stdout/stderr capture, successful containment, Job Object creation and assignment failures, and sandbox setup refresh helpers.

GitOrigin-RevId: b2c238fa7d4f9fbd868e5adf7d4be9958ff01e6c

2026-09-29 04:38:37 +00:00

..

bin

Allow exec-server to proxy permitted private IPs upstream (#48568)

2026-09-26 23:17:41 +00:00

external_agent_migration

Persist thread creator identity in rollouts and SQLite (#47113)

2026-09-21 21:22:01 +00:00

request_processors

Suppress Windows console windows for background subprocesses (#49164)

2026-09-29 04:38:37 +00:00

account_notifications_tests.rs

Expose selected workspace routing in app-server account reads (#45529)

2026-09-14 22:31:32 +00:00

account_notifications.rs

Expose selected workspace routing in app-server account reads (#45529)

2026-09-14 22:31:32 +00:00

analytics_utils.rs

[codex-analytics] ingest server requests and responses (#17088)

2026-04-29 19:56:41 +00:00

app_info.rs

Use batch metadata for plugin app summaries (#34851)

2026-07-23 01:00:35 +00:00

app_server_tracing.rs

Reduce app-server JSON serialization overhead (#34761)

2026-07-22 14:16:51 +00:00

application_network_tests.rs

Apply shared network policy throughout embedded Codex startup (#47411)

2026-09-23 00:49:19 +00:00

application_network.rs

Apply shared network policy throughout embedded Codex startup (#47411)

2026-09-23 00:49:19 +00:00

attestation.rs

Keep credentials out of app-server logs (#39993)

2026-08-21 19:04:32 +00:00

auth_mode.rs

Support managed AWS access keys for Amazon Bedrock (#40481)

2026-08-24 21:39:48 +00:00

bespoke_event_handling.rs

Add opt-in structured errors for Guardian circuit-breaker interruptions (#48796)

2026-09-27 22:05:19 +00:00

code_mode_host_tests.rs

Remove WebSocket transport from code-mode hosts (#40692)

2026-08-25 20:37:15 +00:00

code_mode_host.rs

Remove WebSocket transport from code-mode hosts (#40692)

2026-08-25 20:37:15 +00:00

codex_home_metrics.rs

Limit app-server storage metrics to session directories (#43790)

2026-09-08 10:18:59 +00:00

command_exec.rs

Support close-on-exec attachments without changing PTY semantics (#47797)

2026-09-24 09:25:19 +00:00

config_layer.rs

Support packaged defaults in config layering (#37810)

2026-08-10 11:22:55 +00:00

config_manager_provider_tests.rs

Enforce application network policy across app-server requests (#47407)

2026-09-23 00:47:07 +00:00

config_manager_service_credential_edits.rs

Handle credential provider source remapping across config layers (#44241)

2026-09-09 17:45:17 +00:00

config_manager_service_tests.rs

Enforce application network policy across app-server requests (#47407)

2026-09-23 00:47:07 +00:00

config_manager_service.rs

Enforce managed model provider selection and definitions (#44650)

2026-09-10 21:41:39 +00:00

config_manager.rs

Apply shared network policy throughout embedded Codex startup (#47411)

2026-09-23 00:49:19 +00:00

connection_cleanup.rs

fix(app-server): avoid blocking connection cleanup (#26852)

2026-06-08 10:20:54 -07:00

connection_rpc_gate.rs

Bind remote-control sessions to their authentication owner (#44341)

2026-09-09 23:59:14 +00:00

current_time.rs

[app-server] increase currentTime/read timeout (#30384)

2026-06-27 16:42:03 -07:00

daemon_thread_recovery.rs

Continue interrupted work after managed daemon restarts (#45820)

2026-09-16 00:54:58 +00:00

dynamic_tools.rs

Add audio output support to dynamic tools and code mode (#34080)

2026-07-18 23:22:13 +00:00

effective_plugin_change_tests.rs

Refresh runtimes for remote plugin state changes (#41396)

2026-08-28 19:12:34 +00:00

effective_plugin_change.rs

Add plugin reconciliation app-server API (#41949)

2026-09-01 00:50:11 +00:00

error_code.rs

Gate new turn submissions on host shutdown admission (#43943)

2026-09-08 23:45:10 +00:00

extensions.rs

Refresh host-supplied cloud skills at turn startup (#47074)

2026-09-21 17:28:14 +00:00

external_auth.rs

Keep credentials out of app-server logs (#39993)

2026-08-21 19:04:32 +00:00

filters.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054)

2026-03-27 19:00:44 -07:00

fs_watch.rs

Fix fs/watch debounce batching (#24716)

2026-05-28 23:09:55 -07:00

fuzzy_file_search.rs

Simple directory mentions (#14970)

2026-03-19 05:24:09 +00:00

gateway_oauth_notifications.rs

Add explicit gateway OAuth sign-in to app-server (#47207)

2026-09-22 06:36:09 +00:00

image_url.rs

[codex] reject remote images at app-server ingress (#29419)

2026-06-23 00:43:56 +00:00

in_process_bootstrap_tests.rs

Apply shared network policy throughout embedded Codex startup (#47411)

2026-09-23 00:49:19 +00:00

in_process_bootstrap.rs

Apply shared network policy throughout embedded Codex startup (#47411)

2026-09-23 00:49:19 +00:00

in_process.rs

Warn users when SQLite diagnostic log writes fail (#47887)

2026-09-24 17:04:50 +00:00

lib.rs

Avoid SQLite stalls from connection setup and stderr span logging (#49032)

2026-09-28 17:00:25 +00:00

log_write_warning_tests.rs

Warn users when SQLite diagnostic log writes fail (#47887)

2026-09-24 17:04:50 +00:00

log_write_warning.rs

Warn users when SQLite diagnostic log writes fail (#47887)

2026-09-24 17:04:50 +00:00

main_tests.rs

Remove WebSocket transport from code-mode hosts (#40692)

2026-08-25 20:37:15 +00:00

main.rs

Extract WebSocket authentication into codex-websocket-auth (#47447)

2026-09-23 04:25:28 +00:00

mcp_refresh.rs

Add workspace routing support for Responses requests (#45812)

2026-09-16 00:20:40 +00:00

message_processor_gateway_oauth_tests.rs

Add explicit gateway OAuth sign-in to app-server (#47207)

2026-09-22 06:36:09 +00:00

message_processor_tracing_tests.rs

Add explicit gateway OAuth sign-in to app-server (#47207)

2026-09-22 06:36:09 +00:00

message_processor.rs

Add explicit gateway OAuth sign-in to app-server (#47207)

2026-09-22 06:36:09 +00:00

model_catalog.rs

Enforce current provider requirements for the model catalog (#46917)

2026-09-21 01:19:40 +00:00

models_refresh_worker_tests.rs

Enforce current provider requirements for the model catalog (#46917)

2026-09-21 01:19:40 +00:00

models_refresh_worker.rs

Enforce current provider requirements for the model catalog (#46917)

2026-09-21 01:19:40 +00:00

models.rs

Enforce current provider requirements for the model catalog (#46917)

2026-09-21 01:19:40 +00:00

notification_media.rs

Add explicit gateway OAuth sign-in to app-server (#47207)

2026-09-22 06:36:09 +00:00

otel_reloader.rs

Reload app-server telemetry after account changes (#37339)

2026-08-07 00:28:32 +00:00

outgoing_message.rs

Warn users when SQLite diagnostic log writes fail (#47887)

2026-09-24 17:04:50 +00:00

plugin_config_reload.rs

Upgrade Git marketplaces from merged configuration (#42149)

2026-09-01 22:37:26 +00:00

request_processors.rs

Add item anchors to thread/items/list pagination (#48151)

2026-09-25 17:57:32 +00:00

request_serialization.rs

Gate new app-server work during graceful shutdown (#43959)

2026-09-09 01:03:42 +00:00

server_request_error.rs

app-server: Replay pending item requests on thread/resume (#12560)

2026-02-27 12:45:59 -08:00

skills_watcher.rs

Stop re-exporting skill APIs from codex-core (#37984)

2026-08-11 10:43:11 +00:00

stderr_logging_tests.rs

Avoid SQLite stalls from connection setup and stderr span logging (#49032)

2026-09-28 17:00:25 +00:00

thread_state.rs

Avoid cloning excluded turn items during thread resume (#46511)

2026-09-18 23:37:11 +00:00

thread_status.rs

Track app-server running turns incrementally (#49084)

2026-09-28 21:33:00 +00:00

transport_tests.rs

Surface model provider authentication recovery progress (#41239)

2026-08-28 01:14:02 +00:00

transport.rs

Extract WebSocket authentication into codex-websocket-auth (#47447)

2026-09-23 04:25:28 +00:00

turn_admission_tests.rs

Gate new app-server work during graceful shutdown (#43959)

2026-09-09 01:03:42 +00:00

turn_admission.rs

Gate new app-server work during graceful shutdown (#43959)

2026-09-09 01:03:42 +00:00

turn_cost_worker_chatgpt_tests.rs

Emit turn cost telemetry for ChatGPT sessions (#41944)

2026-09-01 00:30:55 +00:00

turn_cost_worker_chatgpt.rs

Enforce application network policy across app-server requests (#47407)

2026-09-23 00:47:07 +00:00

turn_cost_worker_tests.rs

Preserve root turn attribution in turn-start events (#44611)

2026-09-10 18:24:13 +00:00

turn_cost_worker.rs

Enforce application network policy across app-server requests (#47407)

2026-09-23 00:47:07 +00:00

user_verification_activation_tests.rs

Preserve metadata in native user verification requests (#46952)

2026-09-21 07:01:52 +00:00

user_verification_adapter_tests.rs

Add user-verification provider abstractions and RPC adapters (#43547)

2026-09-07 18:43:20 +00:00

user_verification_adapter.rs

Add user-verification provider abstractions and RPC adapters (#43547)

2026-09-07 18:43:20 +00:00

user_verification_auth.rs

Enable user verification for the bundled TUI on supported devices (#43715)

2026-09-08 05:57:24 +00:00

user_verification_cancel_context_tests.rs

Add cancellation for native user-verification RPCs (#43925)

2026-09-08 21:48:53 +00:00

user_verification_cancel_tests.rs

Add cancellation for native user-verification RPCs (#43925)

2026-09-08 21:48:53 +00:00

user_verification_connection_tests.rs

Preserve metadata in native user verification requests (#46952)

2026-09-21 07:01:52 +00:00

user_verification_ownership_tests.rs

Preserve metadata in native user verification requests (#46952)

2026-09-21 07:01:52 +00:00

user_verification_response_tests.rs

Add opt-in MCP user-verification transport (#43352)

2026-09-07 04:33:22 +00:00

user_verification_response.rs

Add opt-in MCP user-verification transport (#43352)

2026-09-07 04:33:22 +00:00

user_verification_rpc_tests.rs

Return public key metadata from user verification enrollment (#44877)

2026-09-11 17:36:50 +00:00

user_verification_test_support.rs

Return public key metadata from user verification enrollment (#44877)

2026-09-11 17:36:50 +00:00

user_verification_tests.rs

Return public key metadata from user verification enrollment (#44877)

2026-09-11 17:36:50 +00:00

user_verification.rs

Return public key metadata from user verification enrollment (#44877)

2026-09-11 17:36:50 +00:00