swastik-oai 9552906b2b Protect the guardian decisions API key from environment forwarding (#50019) ...

## What changed

Add `CODEX_GUARDIAN_DECISIONS_API_KEY` to the non-inheritable environment variables and the HTTP header environment denylist. Case-insensitive filtering removes it from child process environments, including explicit shell policy and command overrides, and rejects its use through `http/request` header `value_env_var`.

## Testing

Extend regression coverage for inherited and overridden variables, mixed-case names, and HTTP header rejection before any network request is sent.

GitOrigin-RevId: 1adeef814fdccb2d6c77dd68f7a5dfcec0b41cc6

2026-10-01 15:57:53 +00:00

..

models

Preserve live tool-call metadata across request windows (#49401)

2026-09-29 23:24:37 +00:00

openai_models

Support Daybreak selection in codex exec (#49856)

2026-10-01 04:16:43 +00:00

permissions

Preserve filesystem denials when preparing approved commands (#48155)

2026-09-25 18:06:57 +00:00

prompts/base_instructions

chore(core) rm AskForApproval::OnFailure (#28418)

2026-06-23 12:13:54 -07:00

account.rs

Add Pro Max plan support and update Pro display names (#47971)

2026-09-25 00:20:02 +00:00

agent_path.rs

chore: morpheus to path (#18353)

2026-04-20 10:32:20 +01:00

approvals.rs

Preserve metadata in native user verification requests (#46952)

2026-09-21 07:01:52 +00:00

auth.rs

Add Pro Max plan support and update Pro display names (#47971)

2026-09-25 00:20:02 +00:00

capabilities_tests.rs

Make selected plugin roots URI-native (#28918)

2026-06-23 22:51:19 +01:00

capabilities.rs

Make selected plugin roots URI-native (#28918)

2026-06-23 22:51:19 +01:00

codex_error_info.rs

Add opt-in structured errors for Guardian circuit-breaker interruptions (#48796)

2026-09-27 22:05:19 +00:00

config_types.rs

Retire the personality feature flag and document deprecated settings (#45809)

2026-09-15 23:39:40 +00:00

dynamic_tools.rs

Add audio output support to dynamic tools and code mode (#34080)

2026-07-18 23:22:13 +00:00

environment.rs

Always use private desktops for legacy Windows sandboxes (#46554)

2026-09-19 01:21:32 +00:00

error_tests.rs

Point usage and credit links to ChatGPT settings (#49874)

2026-10-01 05:16:40 +00:00

error.rs

Point usage and credit links to ChatGPT settings (#49874)

2026-10-01 05:16:40 +00:00

exec_output_tests.rs

extract models manager and related ownership from core (#16508)

2026-04-02 23:00:02 -07:00

exec_output.rs

extract models manager and related ownership from core (#16508)

2026-04-02 23:00:02 -07:00

items.rs

Record sandbox backends in command execution analytics (#47568)

2026-09-23 15:05:59 +00:00

legacy_events.rs

Preserve MCP App UI metadata in tool-call events and history (#45805)

2026-09-15 22:52:56 +00:00

lib.rs

Handle unknown error classifications and configure gateway OAuth (#46482)

2026-09-18 22:29:16 +00:00

local_media_tests.rs

Support image references by file ID in inputs and tool outputs (#45794)

2026-09-15 21:19:08 +00:00

local_media.rs

Support image references by file ID in inputs and tool outputs (#45794)

2026-09-15 21:19:08 +00:00

mcp_approval_meta.rs

Keep MCP user interaction on the root thread (#46066)

2026-09-17 01:18:37 +00:00

mcp_policy.rs

Enforce environment MCP policies (#39335)

2026-08-19 01:26:16 +00:00

mcp.rs

Discover and validate MCP authorization servers before ID-JAG exchange (#49478)

2026-09-30 04:30:01 +00:00

memory_citation.rs

feat: add memory citation to agent message (#14821)

2026-03-18 10:03:38 +00:00

memory_version.rs

Add configurable memory versions with isolated storage (#43797)

2026-09-08 10:55:48 +00:00

models.rs

Truncate input text in protocol debug output (#49415)

2026-09-30 00:51:15 +00:00

network_policy.rs

extract models manager and related ownership from core (#16508)

2026-04-02 23:00:02 -07:00

num_format.rs

Remove unused Rust helpers (#34345)

2026-07-20 13:45:29 +00:00

openai_models.rs

Add conversation mode to Guardian v2 async classification (#49793)

2026-10-01 01:11:33 +00:00

parse_command.rs

[app-server] remove serde(skip_serializing_if = "Option::is_none") annotations (#5939)

2025-10-30 18:18:53 +00:00

permission_profile_intersection_tests.rs

Protect .aws directories under sandbox writable roots (#48176)

2026-09-25 19:14:31 +00:00

permission_profile_intersection.rs

Preserve target-native paths in command approvals (#42577)

2026-09-03 16:21:10 +00:00

permission_profile_snapshot_tests.rs

Preserve executor path URIs in permission profile workspace roots (#45863)

2026-09-16 04:23:46 +00:00

permission_profile_snapshot.rs

Preserve executor path URIs in permission profile workspace roots (#45863)

2026-09-16 04:23:46 +00:00

permissions.rs

Protect .aws directories under sandbox writable roots (#48176)

2026-09-25 19:14:31 +00:00

plan_tool.rs

Plan mode: stream proposed plans, emit plan items, and render in TUI (#9786)

2026-01-30 18:59:30 +00:00

protocol.rs

Add opt-in structured errors for Guardian circuit-breaker interruptions (#48796)

2026-09-27 22:05:19 +00:00

realtime.rs

Persist realtime events in the thread timeline (#40508)

2026-08-25 01:03:20 +00:00

request_permissions.rs

Preserve target-native cwd in permission approval requests (#42314)

2026-09-02 17:27:50 +00:00

request_user_input_tests.rs

Make user input blocking behavior explicit (#36410)

2026-08-01 00:38:10 +00:00

request_user_input.rs

Make user input blocking behavior explicit (#36410)

2026-08-01 00:38:10 +00:00

response_item_id_tests.rs

Require prefixes for outbound response item IDs (#32312)

2026-07-11 02:29:14 +00:00

response_item_id.rs

Require prefixes for outbound response item IDs (#32312)

2026-07-11 02:29:14 +00:00

response_usage.rs

Preserve raw response usage metadata (#41980)

2026-09-01 05:17:11 +00:00

review_format.rs

feat(core): emit canonical review mode items (#31473)

2026-07-08 09:59:50 -07:00

sandbox.rs

Enable MXC selection through Windows sandbox configuration (#46271)

2026-09-17 18:20:28 +00:00

sanitized_git_url_tests.rs

Sanitize credentials from Git remote metadata (#40713)

2026-08-25 21:34:05 +00:00

sanitized_git_url.rs

Sanitize credentials from Git remote metadata (#40713)

2026-08-25 21:34:05 +00:00

security_risk.rs

Record reviewed actions with security risk scores (#40901)

2026-08-26 15:02:21 +00:00

session_id.rs

feat: add session_id (#20437)

2026-05-06 10:48:37 +02:00

shell_environment_tests.rs

Protect the guardian decisions API key from environment forwarding (#50019)

2026-10-01 15:57:53 +00:00

shell_environment.rs

Protect the guardian decisions API key from environment forwarding (#50019)

2026-10-01 15:57:53 +00:00

thread_id.rs

Distinguish rollout IDs from thread IDs (#38127)

2026-08-12 05:20:32 +00:00

tool_name.rs

Canonicalize default tools under the functions namespace (#37022)

2026-08-05 04:07:59 +00:00

turn_input.rs

Support explicit cyber access programs with OpenAI API keys (#49406)

2026-09-30 00:08:55 +00:00

user_input.rs

Truncate input text in protocol debug output (#49415)

2026-09-30 00:51:15 +00:00