{"record":{"id":"362ab415ca9b45d3","repo":"openai/codex","slug":"no-capability-sids-provided","errorCode":null,"errorMessage":"no capability SIDs provided","messagePattern":"no capability SIDs provided","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"codex-rs/windows-sandbox-rs/src/token.rs","lineNumber":454,"sourceCode":"    base_token: HANDLE,\n    psid_capabilities: &[*mut c_void],\n    additional_restricting_sids: &[*mut c_void],\n) -> Result<HANDLE> {\n    let mut user_sid_bytes = get_user_sid_bytes(base_token)?;\n    let psid_user = user_sid_bytes.as_mut_ptr() as *mut c_void;\n    let mut extra_restricting_sids = Vec::with_capacity(additional_restricting_sids.len() + 1);\n    extra_restricting_sids.push(psid_user);\n    extra_restricting_sids.extend_from_slice(additional_restricting_sids);\n    create_token_with_caps_from(base_token, psid_capabilities, &extra_restricting_sids)\n}\n\nunsafe fn create_token_with_caps_from(\n    base_token: HANDLE,\n    psid_capabilities: &[*mut c_void],\n    extra_restricting_sids: &[*mut c_void],\n) -> Result<HANDLE> {\n    if psid_capabilities.is_empty() {\n        return Err(anyhow!(\"no capability SIDs provided\"));\n    }\n    let mut logon_sid_bytes = get_logon_sid_bytes(base_token)?;\n    let psid_logon = logon_sid_bytes.as_mut_ptr() as *mut c_void;\n    let mut everyone = world_sid()?;\n    let psid_everyone = everyone.as_mut_ptr() as *mut c_void;\n\n    // Exact order: Capabilities..., ExtraRestricting..., Logon, Everyone\n    let mut entries: Vec<SID_AND_ATTRIBUTES> =\n        vec![std::mem::zeroed(); psid_capabilities.len() + extra_restricting_sids.len() + 2];\n    for (i, psid) in psid_capabilities.iter().enumerate() {\n        entries[i].Sid = *psid;\n        entries[i].Attributes = 0;\n    }\n    let extras_idx = psid_capabilities.len();\n    for (i, psid) in extra_restricting_sids.iter().enumerate() {\n        entries[extras_idx + i].Sid = *psid;\n        entries[extras_idx + i].Attributes = 0;\n    }","sourceCodeStart":436,"sourceCodeEnd":472,"githubUrl":"https://github.com/openai/codex/blob/339751715c64496cb86246bfb3935f40e309dd3d/codex-rs/windows-sandbox-rs/src/token.rs#L436-L472","documentation":"Error \"no capability SIDs provided\" thrown in openai/codex.","triggerScenarios":"Thrown at codex-rs/windows-sandbox-rs/src/token.rs:454 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"339751715c64496cb86246bfb3935f40e309dd3d","analyzedAt":"2026-08-25T05:35:09.876Z","schemaVersion":2},"datasetVersion":"2026-08-25T06:17:31.827Z"}