jif 6b13dffc5e Reuse Codex account grants for enterprise MCP authentication (#55698) ...

## What changed

- Prefer stored enterprise credentials when available; otherwise use a validated Codex account OAuth grant whose issuer matches the enterprise MCP configuration.
- Pin each connection to its credential source and OAuth client, reject stale account grants, and hold the account refresh lease only during the IdP exchange.
- Report actionable sign-in and issuer configuration errors, and classify token failures by credential source.

GitOrigin-RevId: 26673f276a31e4ca5290f6b120f0ac44c77d7239

2026-10-20 23:27:33 +00:00

..

codex_apps

Upgrade rmcp to 3.0.0 (#36001)

2026-07-29 17:38:20 +00:00

connection_manager

Upgrade the Rust toolchain to 1.99.1 (#55677)

2026-10-20 21:28:45 +00:00

mcp

Preserve enterprise MCP authorization across runtime refreshes (#55696)

2026-10-20 23:03:56 +00:00

rmcp_client

Reconcile V2 executor plugins with cloud catalogs (#55301)

2026-10-19 15:15:17 +00:00

runtime

Use thread connections for enterprise MCP status listings (#55394)

2026-10-19 22:02:44 +00:00

snapshots

Support package-style MCP server names (#41700)

2026-08-30 16:45:34 +00:00

agent_plugin_config.rs

Add Agent Plugins MCP config parsing (#36796)

2026-08-03 20:36:59 +00:00

auth_changes_tests.rs

Notify opted-in stdio MCP servers of auth changes (#43428)

2026-09-07 10:37:46 +00:00

auth_changes.rs

Notify opted-in stdio MCP servers of auth changes (#43428)

2026-09-07 10:37:46 +00:00

auth_elicitation.rs

Add connector auth failure detection without an install URL (#44938)

2026-09-11 23:36:17 +00:00

binding_clients.rs

Limit MCP catalog pagination (#36039)

2026-07-29 22:37:09 +00:00

binding_tests.rs

Preserve MCP tool-list metadata in server status (#54686)

2026-10-16 19:26:46 +00:00

binding.rs

Preserve specific MCP failure codes in metrics and spans (#54094)

2026-10-14 20:53:59 +00:00

catalog_tests.rs

Restrict enterprise MCP auth and fail closed on config refresh (#49260)

2026-09-29 13:08:37 +00:00

catalog.rs

Restrict enterprise MCP auth and fail closed on config refresh (#49260)

2026-09-29 13:08:37 +00:00

client_capabilities_tests.rs

Allow hosted Apps MCP contributions to override the protocol mode (#46019)

2026-09-16 20:32:52 +00:00

client_capabilities.rs

Restrict MCP user verification and add workspace-scoped identity (#43524)

2026-09-07 17:26:10 +00:00

client_tool_catalog.rs

Preserve MCP tool-list metadata in server status (#54686)

2026-10-16 19:26:46 +00:00

codex_apps.rs

[codex-apps] Filter optional file fields by tool schema (#31686)

2026-07-09 14:32:23 -07:00

connection_manager_tests.rs

Preserve enterprise MCP authorization across runtime refreshes (#55696)

2026-10-20 23:03:56 +00:00

connection_manager.rs

Preserve enterprise MCP authorization across runtime refreshes (#55696)

2026-10-20 23:03:56 +00:00

elicitation_tests.rs

Preserve diagnostic reasons for MCP user verification failures (#51808)

2026-10-07 19:28:14 +00:00

elicitation.rs

Preserve diagnostic reasons for MCP user verification failures (#51808)

2026-10-07 19:28:14 +00:00

ema_account.rs

Reuse Codex account grants for enterprise MCP authentication (#55698)

2026-10-20 23:27:33 +00:00

ema_auth.rs

Reuse Codex account grants for enterprise MCP authentication (#55698)

2026-10-20 23:27:33 +00:00

ema_token_source.rs

Reuse Codex account grants for enterprise MCP authentication (#55698)

2026-10-20 23:27:33 +00:00

event_stream.rs

Enable enterprise-managed authorization for MCP connections (#55334)

2026-10-19 17:57:35 +00:00

executor_environment_http_client.rs

Resolve HTTP MCP bearer tokens in executor environments (#39926)

2026-08-21 12:50:15 +00:00

lib.rs

Reuse Codex account grants for enterprise MCP authentication (#55698)

2026-10-20 23:27:33 +00:00

openai_docs_source_attribution_tests.rs

Attribute OpenAI docs MCP requests to Codex (#33424)

2026-07-15 20:54:54 +00:00

openai_docs_source_attribution.rs

Attribute OpenAI docs MCP requests to Codex (#33424)

2026-07-15 20:54:54 +00:00

pagination_tests.rs

Limit MCP catalog pagination (#36039)

2026-07-29 22:37:09 +00:00

pagination.rs

Raise the host-owned Codex Apps catalog limit (#36772)

2026-08-03 17:06:46 +00:00

plugin_config_tests.rs

Reconcile V2 executor plugins with cloud catalogs (#55301)

2026-10-19 15:15:17 +00:00

plugin_config.rs

Reconcile V2 executor plugins with cloud catalogs (#55301)

2026-10-19 15:15:17 +00:00

resource_client.rs

Add turn-start cloud plugin discovery to the MCP extension (#46572)

2026-09-19 02:07:58 +00:00

resource_origin.rs

Honor app link settings for MCP tool approvals (#42056)

2026-09-01 13:43:27 +00:00

rmcp_client_credential_policy_tests.rs

Preserve executor MCP credential boundaries across reconnects (#48143)

2026-09-25 17:15:29 +00:00

rmcp_client.rs

Preserve enterprise MCP authorization across runtime refreshes (#55696)

2026-10-20 23:03:56 +00:00

runtime.rs

Preserve enterprise MCP authorization across runtime refreshes (#55696)

2026-10-20 23:03:56 +00:00

sandbox_executable.rs

Expose a verified sandbox launcher to local MCP servers (#52182)

2026-10-08 17:25:09 +00:00

sandbox_metadata_tests.rs

Separate MCP sandbox policy from launcher metadata (#53709)

2026-10-13 16:23:44 +00:00

sandbox_metadata.rs

Separate MCP sandbox policy from launcher metadata (#53709)

2026-10-13 16:23:44 +00:00

server_tests.rs

Preserve MCP tool-list metadata in server status (#54686)

2026-10-16 19:26:46 +00:00

server.rs

Preserve executor MCP credential boundaries across reconnects (#48143)

2026-09-25 17:15:29 +00:00

tool_catalog_cache.rs

Preserve MCP tool-list metadata in server status (#54686)

2026-10-16 19:26:46 +00:00

tools.rs

Propagate Apps tool refreshes to existing threads (#43900)

2026-09-08 19:56:25 +00:00

trusted_access_tests.rs

Share byte buffers across exec-server output chunks (#49972)

2026-10-01 12:41:39 +00:00

trusted_access.rs

Propagate authentication header failures before sending requests (#55607)

2026-10-20 15:43:19 +00:00

user_verification_elicitation.rs

Preserve diagnostic reasons for MCP user verification failures (#51808)

2026-10-07 19:28:14 +00:00