Skip to content

fix: qualify hidden console inheritance for background usage queries - #272

Closed
HemSoft wants to merge 11 commits into
mainfrom
t3/suppress-cli-descendant-windows
Closed

HemSoft wants to merge 11 commits into
mainfrom
t3/suppress-cli-descendant-windows

Conversation

@HemSoft

@HemSoft HemSoft commented Oct 25, 2026 •

Copy link
Copy Markdown
Collaborator

Change

Candidate for #271: Windows SystemCommandRunner creates a console hidden at startup for ordinary descendant inheritance. It preserves null stdin, separate bounded output pipes, an inherited-handle whitelist, suspended job assignment and retained process/thread ownership. Portable launch planning covers EXE/CMD selection and quoting. Production launcher bytes remain unchanged since 3973984; later commits are synthetic test/qualification support.

The comparison pins the original three-file production seam to 7bb492f, uses separate build directories, and restores/verifies candidate bytes before execution. The observer uses an independent WinEvent pump and desktop enumeration, separate visible controls excluded from original RED, retained identities, bounded runtime and explicit incomplete-coverage reporting.

Current head and reviews

Head ff165c25567ada3a56784de89705f6373b653927, base 7bb492fd3622727eee81b1e31f7256a15e71c3dd.

GitHub Codex review and independent fixed-head source review are clean. Zero unresolved review threads. Static review does not establish native qualification.

Current CI is terminal: nine checks pass and Windows fails. Metrics and aggregate build also passed; the CI workflow finished at 4:31 PM EDT on October 25, and Package passed. A fresh 7:39 PM EDT stall audit confirmed no queued/in-progress workflow runs, no new comments, clean current-head reviews and zero unresolved threads. GitHub reports no checks marked required; this does not waive the project's normal all-checks/native qualification gates. No failed-job rerun or duplicate dispatch was made.

Actual native failure and merge blocker

The Windows preflight failed at 4:19 PM EDT on October 25. The retained artifact reports candidate restoration confirmed, qualification unqualified, and owned lifecycle control deadline. No original/candidate comparison pair launched at this head.

READY, live identity/window registration and visible readback succeeded. The callback recorded the creator thread for both SHOW events; no distinct-notifier positive mapping was established. The receipt does not preserve notification-return ACK or the failing wait stage. Destroy and cleanup verification did not complete. This is neither infrastructure failure nor evidence of a production leak.

Microsoft's callback contract permits either the event-generating thread or window-owning thread. NotifyWinEvent returns no per-callback correlation token. The measured callbacks therefore cannot prove the notifier or window generation. No safe attribution repair is established; accepting this outcome as the required distinct-producer proof would weaken qualification.

The exact missing capability is an independently verifiable per-event producer/window-generation binding on a permitted inert Windows target. Establish that contract before another hosted experiment. Original visible RED is separately absent from all retained original-seam runs. Source merge remains blocked by these proof gaps, not by an approval requirement.

Retained evidence and local work

The last fully green engineering head, 448cfbf, still had an unqualified artifact: no original visible counterexample, hidden candidate console, and two unresolved DESTROY events (one historical-cache thread mismatch, one cache miss). Neither was proved to belong to the provider window.

The d62140f Windows run validated native arguments, capture/deadlines, inherited-pipe sentinel and retained abrupt-parent cleanup within the unchanged three-second budget. Earlier failures and no-reproduction artifacts remain retained. No metrics thresholds, exclusions, baselines or waivers changed.

Two guard-test files are preserved locally but not committed or pushed: seven Rust binding tests and 23 Python receipt tests pass, along with targeted Clippy/formatting. They demonstrate that owner-thread callbacks and even a hypothetical notification-return ACK cannot satisfy the unchanged missing-mapping gate. They are portable policy evidence, not native visibility RED/GREEN.

Keep draft. Autonomous guarded source merge is authorized only once all actual gates pass. No Home/Laptop execution, sync, relaunch, deployment, task reenable, release or account action is authorized. No held PR #270 diff is included. Do not close #271 or Chief #43 on clean reviews or engineering checks alone. Vendor/default-terminal/deployed-image parity and game-crash causality remain unproved.

@HemSoft

HemSoft commented Oct 25, 2026

Copy link
Copy Markdown
Collaborator Author

@codex review

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 25, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-25T20:17:32.246847Z ff165c2 Manual request
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. You're on a roll.

Reviewed commit: 0000dda1e5

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@HemSoft HemSoft changed the title fix: prevent ordinary background provider descendant consoles fix: qualify hidden console inheritance for background usage queries Oct 25, 2026
@HemSoft

HemSoft commented Oct 25, 2026

Copy link
Copy Markdown
Collaborator Author

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Delightful!

Reviewed commit: b132c8f823

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@HemSoft

HemSoft commented Oct 25, 2026

Copy link
Copy Markdown
Collaborator Author

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. What shall we delve into next?

Reviewed commit: 58a2ab24bb

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@HemSoft

HemSoft commented Oct 25, 2026

Copy link
Copy Markdown
Collaborator Author

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. 🎉

Reviewed commit: 39739840b1

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@HemSoft

HemSoft commented Oct 25, 2026

Copy link
Copy Markdown
Collaborator Author

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. 👍

Reviewed commit: 1e96a2b938

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@HemSoft

HemSoft commented Oct 25, 2026

Copy link
Copy Markdown
Collaborator Author

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. You're on a roll.

Reviewed commit: 21c85fe26e

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@HemSoft

HemSoft commented Oct 25, 2026

Copy link
Copy Markdown
Collaborator Author

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Breezy!

Reviewed commit: d62140f969

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@HemSoft

HemSoft commented Oct 25, 2026

Copy link
Copy Markdown
Collaborator Author

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. More of your lovely PRs please.

Reviewed commit: 448cfbf077

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@HemSoft

HemSoft commented Oct 25, 2026

Copy link
Copy Markdown
Collaborator Author

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. You're on a roll.

Reviewed commit: ff165c2556

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@HemSoft

HemSoft commented Oct 27, 2026

Copy link
Copy Markdown
Collaborator Author

Closing as superseded by #280, which takes over #271.

The Windows-native probe on windows-latest showed this launcher replacement isn't needed:

The branch stays for reference.

@HemSoft HemSoft closed this Oct 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Prevent background provider descendants from opening console windows

1 participant