openai/codex

mirror of https://github.com/openai/codex.git synced 2026-09-20 12:47:38 +00:00

Files

History

Eric Traut 76b0575c01 Instrument device auth requests with client identity

Problem: Device authorization requests omitted Codex client identity metadata, limiting detection and investigation of third-party device-flow reuse.

Solution: Send the existing originator, User-Agent, and trusted-path installation ID on both device-auth endpoints while withholding the durable ID from custom issuers. Manually verified production user-code issuance and repeated token polling with an isolated CODEX_HOME, then cancelled before authorization with no tokens persisted.

2026-07-08 14:15:39 -07:00

..

fix: address quick-xml security advisories (#30941 )

2026-07-02 10:59:00 -07:00

…

.github/workflows

…

agent-graph-store

[codex] Inject agent graph store into ThreadManager (#29736 )

2026-06-24 13:24:10 -07:00

Allow ChatGPT accounts without email (#28991 )

2026-06-22 13:19:40 -07:00

core: support extension-owned turn items (#31283 )

2026-07-08 03:55:13 +00:00

…

Instrument device auth requests with client identity

2026-07-08 14:15:39 -07:00

app-server-client

Remove TUI exec-policy core exports (#31179 )

2026-07-06 10:22:25 -07:00

app-server-daemon

feat(remote-control): add daemon pairing command (#29913 )

2026-06-24 18:00:06 -07:00

app-server-protocol

core: support extension-owned turn items (#31283 )

2026-07-08 03:55:13 +00:00

app-server-test-client

[login] support hosted success redirects (#28745 )

2026-07-07 19:48:05 +00:00

app-server-transport

fix(remote-control): avoid server token refresh retry storms (#30201 )

2026-06-26 17:34:52 -07:00

path-uri: clarify host-native path conversion (#29501 )

2026-06-23 00:02:33 +00:00

Revert "Conditional codex_home dotenv" (#31276 )

2026-07-06 12:17:16 -07:00

…

…

[1/5] [codex] sync managed-layer bundle schema (#31285 )

2026-07-07 13:00:44 -07:00

…

[apps] Thread structured icon assets through app list (#29889 )

2026-06-24 13:25:44 -07:00

Instrument device auth requests with client identity

2026-07-08 14:15:39 -07:00

refactor: unify external auth resolution (#31421 )

2026-07-07 17:05:05 -07:00

Migrate direct HTTP consumers to codex-http-client (#31331 )

2026-07-07 01:34:36 +00:00

cloud-tasks-client

…

cloud-tasks-mock-client

…

feat(code-mode): allow disabling V8 JIT (#31303 )

2026-07-06 15:32:24 -07:00

fix: update crossbeam-epoch for RUSTSEC-2026-0204 (#31308 )

2026-07-06 16:26:56 -07:00

code-mode-protocol

[codex] extend code-mode host IPC transport (#30108 )

2026-06-25 13:26:47 -07:00

Handle bio policy errors in Codex (#31439 )

2026-07-07 10:33:42 -07:00

codex-backend-openapi-models

[1/5] [codex] sync managed-layer bundle schema (#31285 )

2026-07-07 13:00:44 -07:00

Extract shared HTTP transport into codex-http-client (#31323 )

2026-07-07 01:12:24 +00:00

codex-experimental-api-macros

…

…

[codex] add connector runtime latency metrics (#31319 )

2026-07-07 10:49:06 -07:00

collaboration-mode-templates

[prompting] updated plan mode prompt (#29301 )

2026-06-21 13:35:25 -07:00

[codex-rs] Add writes app approval mode (#30482 )

2026-07-07 13:13:59 -04:00

Add a connector declaration snapshot (#29851 )

2026-06-24 23:24:01 +01:00

context-fragments

core: rename metadata -> internal_chat_message_metadata_passthrough (#28968 )

2026-06-22 11:11:25 -07:00

Stabilize shared rollout budget test (#31587 )

2026-07-08 16:10:28 +01:00

[codex] Add externally provided Codex auth (#31274 )

2026-07-07 17:43:19 -07:00

Log plugin install failure subtypes (#31518 )

2026-07-08 11:06:45 -04:00

fs: support pruning hidden directories during walks (#31570 )

2026-07-08 13:49:05 +01:00

…

feat(app-server): add history_mode to thread (#29927 )

2026-06-26 09:12:42 -07:00

fs: support pruning hidden directories during walks (#31570 )

2026-07-08 13:49:05 +01:00

exec-server-protocol

[codex] consume pushed exec-server process events (#30273 )

2026-06-26 18:05:52 -07:00

…

execpolicy-legacy

…

core: support extension-owned turn items (#31283 )

2026-07-08 03:55:13 +00:00

external-agent-migration

[codex] Preserve skill descriptions outside model context (#29006 )

2026-06-19 12:47:53 -07:00

external-agent-sessions

core: rename metadata -> internal_chat_message_metadata_passthrough (#28968 )

2026-06-22 11:11:25 -07:00

[codex] Enable auth elicitation by default (#28772 )

2026-07-07 11:48:27 -07:00

Fix MIME types for path-backed feedback attachments (#30796 )

2026-07-03 13:06:07 -07:00

…

fs: support pruning hidden directories during walks (#31570 )

2026-07-08 13:49:05 +01:00

…

Speed up review branch picker via for-each-ref (#31464 )

2026-07-07 20:01:03 -04:00

trace hook command execution (#31501 )

2026-07-07 18:00:35 -07:00

http-client: expose WebSocket proxy prerequisites (#31342 )

2026-07-07 15:37:50 -07:00

install-context

…

…

fix: attribut network requests to the exact exec on linux (#29697 )

2026-07-06 14:51:34 -07:00

…

Instrument device auth requests with client identity

2026-07-08 14:15:39 -07:00

[codex] Inject agent graph store into ThreadManager (#29736 )

2026-06-24 13:24:10 -07:00

core: route Responses API through system proxy (#31335 )

2026-07-07 03:49:53 +00:00

message-history

…

[codex] Add externally provided Codex auth (#31274 )

2026-07-07 17:43:19 -07:00

model-provider-info

[codex] Add externally provided Codex auth (#31274 )

2026-07-07 17:43:19 -07:00

refactor: unify external auth resolution (#31421 )

2026-07-07 17:05:05 -07:00

fix: attribut network requests to the exact exec on linux (#29697 )

2026-07-06 14:51:34 -07:00

…

[codex] Add externally provided Codex auth (#31274 )

2026-07-07 17:43:19 -07:00

Make selected plugin roots URI-native (#28918 )

2026-06-23 22:51:19 +01:00

process-hardening

…

Use model catalog approval messages (#31312 )

2026-07-07 10:52:38 -07:00

core: support extension-owned turn items (#31283 )

2026-07-08 03:55:13 +00:00

realtime-webrtc

…

response-debug-context

…

responses-api-proxy

…

Serialize shared MCP OAuth credential stores (#30292 )

2026-07-07 04:03:27 +00:00

core: support extension-owned turn items (#31283 )

2026-07-08 03:55:13 +00:00

fix: retry rejected previous-model compaction with selected model (#30319 )

2026-07-07 14:26:03 -07:00

[codex] Preserve proxy state for filesystem sandbox helpers (#29671 )

2026-06-23 12:29:46 -07:00

…

…

Handle mixed-case URLs in Windows command safety (#30879 )

2026-07-07 17:50:39 -04:00

shell-escalation

release: publish standalone zsh artifacts (#30114 )

2026-06-25 13:56:08 -07:00

[codex] Update bundled skill installer guidance (#29768 )

2026-06-23 19:36:17 -07:00

ensure thread.history_mode is immutable (#30261 )

2026-06-26 12:32:31 -07:00

…

terminal-detection

…

test-binary-support

…

thread-manager-sample

[codex] Inject agent graph store into ThreadManager (#29736 )

2026-06-24 13:24:10 -07:00

ensure thread.history_mode is immutable (#30261 )

2026-06-26 12:32:31 -07:00

core: support extension-owned turn items (#31283 )

2026-07-08 03:55:13 +00:00

Align empty branch list message with search (#31465 )

2026-07-08 08:57:25 -04:00

…

path-uri: normalize parent segments in absolute joins (#29903 )

2026-06-24 22:33:18 +00:00

…

…

windows-sandbox-rs

Skip credential refresh for WindowsApps launch failures (#29637 )

2026-06-24 20:59:53 +01:00

.gitignore

…

BUILD.bazel

…

Cargo.lock

core: support extension-owned turn items (#31283 )

2026-07-08 03:55:13 +00:00

Cargo.toml

core: support extension-owned turn items (#31283 )

2026-07-08 03:55:13 +00:00

clippy.toml

…

config.md

…

default.nix

…

deny.toml

fix: address quick-xml security advisories (#30941 )

2026-07-02 10:59:00 -07:00

README.md

…

rust-toolchain.toml

…

rustfmt.toml

…

README.md

Codex CLI

Codex CLI Documentation