security: minimize desktop renderer capabilities - #209

Merged

oratis merged 38 commits into

mainfrom

codex/minimize-desktop-capabilities

Aug 2, 2026

Commits on Aug 1, 2026

fix: enforce runtime safety and cancellation
t
committed
9a44a64
feat: read legacy session formats safely
t
committed
1bd5562
feat: distinguish model steps from user turns
t
committed
502a16e
Merge branch 'codex/codex-alignment-plan' into codex/runtime-safety
t
committed
e128e20
Merge branch 'codex/runtime-safety' into codex/session-compat
t
committed
0b64b7b
Merge branch 'codex/session-compat' into codex/lifecycle-events
t
committed
17cec62
feat: add shared runtime host boundary
t
committed
a123484
feat: normalize sessions to canonical v1
t
committed
2e32697
feat: define experimental runtime protocol
t
committed
38196c9
docs: decide desktop runtime packaging
t
committed
7a51ce0
feat: add experimental app server
t
committed
b3b7d82
chore: sync protocol workspace lockfile
t
committed
bd151b8
Merge branch 'codex/desktop-runtime-adr' into codex/app-server
t
committed
519f8f0
feat: package and supervise desktop app server
t
committed
0ae2f5c
ci: prepare desktop sidecar placeholder
t
committed
75d4b57
ci: stub desktop bundle resources for Rust checks
t
committed
1367119
feat: add interactive app server protocol
t
committed
580f9c8
feat: join protocol threads with canonical sessions
t
committed
033f7e6
feat: move desktop runtime behind app server
t
committed
e838092
test: automate desktop protocol journey
t
committed
10c7354
ci: build workspace before desktop journey
t
committed
a43c08e
refactor: share app server protocol client
t
committed
27d1a82
feat: move LSP behind app server
t
committed
b81da04
feat: move VS Code behind app server
t
committed
76a8528
feat: add trust-aware config diagnostics
t
committed
e80cbac
feat: surface config diagnostics in clients
t
committed
c0c7ed6
feat: compose app server runtime context
t
committed
f80bfe9
feat: compose MCP and plugin runtime resources
t
committed
7d9a5d6
feat: require exact project hook review
t
committed
a23e8c3
feat: add redacted structured tracing
t
committed
a7bcd40
feat: centralize workspace diff review
t
committed
a60f084
fix: use collision-resistant ipc ids
t
committed
abb1de0
feat: persist structured review findings
t
committed
360a214
feat: add canonical review action lifecycle
t
committed
a9dcdd3
feat: add conflict-safe review revert
t
committed
27b3d10
refactor: remove legacy desktop runtime facades
t
committed
654829f
ci: enforce app-server release gates
t
committed
40ceec4
security: minimize desktop renderer capabilities
t
committed
5ac7444