mirror of https://github.com/openai/codex.git synced 2026-08-23 13:09:46 +00:00

Files

cooper-oai 990218bbbd Fail closed when workload identity initialization fails (#38424 )

## What changed

- Treat workload identity environment markers as an explicit authentication selection, even when another process credential is present.
- Return initialization errors from `AuthManager` and propagate them through commands and services instead of continuing with an unusable authentication state.
- Make `codex login status` validate workload identity, keep the TUI on an embedded app server for local workload identity, and reject workload identity in `codex mcp-server`, where it is unsupported.

## Testing

- Cover workload identity precedence and partial configuration errors.
- Verify login status reports an unreadable identity assertion and app-server routing enforces the supported workload identity topology.

GitOrigin-RevId: efc6b6b4cd4d61652617de82aaa3d7ffc75d6618

2026-08-13 19:35:22 +00:00

src

Fail closed when workload identity initialization fails (#38424 )

2026-08-13 19:35:22 +00:00

BUILD.bazel

Add ThreadManager sample crate (#20141 )

2026-04-29 11:21:06 -07:00

Cargo.toml

Move item event mapping into app-server-protocol (#20299 )

2026-04-30 11:02:13 -07:00

README.md

Add codex-core public API listing (#20243 )

2026-04-29 22:58:08 +00:00

README.md

ThreadManager Sample

Small one-shot binary that starts a Codex thread with ThreadManager from codex-core-api, submits a single user turn, and prints the final assistant message.

cargo run -p codex-thread-manager-sample -- "Say hello"

Use --model to override the configured default model:

cargo run -p codex-thread-manager-sample -- --model gpt-5.2 "Say hello"

The prompt can also be piped through stdin:

printf 'Say hello\n' | cargo run -p codex-thread-manager-sample