riley-oai 3715bf4100 Enable user verification for local Codex Desktop sessions (#44613) ...

## What changed

Allow app-server to advertise `openai/elicitation.userVerification` and route verification requests to local stdio clients named `Codex Desktop` when `experimentalApi` is enabled and the device supports verification. Preserve support for the in-process `codex-tui` client.

Document the experimental verification API, local credential lifecycle, transport restrictions, and GUI requirements for cancellation and late proofs.

## Testing

Extend activation tests to cover desktop capability advertisement and request eligibility, including rejection for other transports, unrecognized client names, missing opt-in, and unsupported devices.

GitOrigin-RevId: ba4fd4b83b9c24541df3a490396d6c715e7b7433

2026-09-10 18:32:38 +00:00

..

bin

Route exec-server HTTP through configured proxy policy (#35023)

2026-07-23 22:39:28 +00:00

external_agent_migration

Preserve runtime workspace roots across thread resume (#43848)

2026-09-08 16:24:38 +00:00

request_processors

Enable user verification for local Codex Desktop sessions (#44613)

2026-09-10 18:32:38 +00:00

analytics_utils.rs

[codex-analytics] ingest server requests and responses (#17088)

2026-04-29 19:56:41 +00:00

app_info.rs

Use batch metadata for plugin app summaries (#34851)

2026-07-23 01:00:35 +00:00

app_server_tracing.rs

Reduce app-server JSON serialization overhead (#34761)

2026-07-22 14:16:51 +00:00

attestation.rs

Keep credentials out of app-server logs (#39993)

2026-08-21 19:04:32 +00:00

auth_mode.rs

Support managed AWS access keys for Amazon Bedrock (#40481)

2026-08-24 21:39:48 +00:00

bespoke_event_handling.rs

Preserve root turn attribution in turn-start events (#44611)

2026-09-10 18:24:13 +00:00

code_mode_host_tests.rs

Remove WebSocket transport from code-mode hosts (#40692)

2026-08-25 20:37:15 +00:00

code_mode_host.rs

Remove WebSocket transport from code-mode hosts (#40692)

2026-08-25 20:37:15 +00:00

codex_home_metrics.rs

Limit app-server storage metrics to session directories (#43790)

2026-09-08 10:18:59 +00:00

command_exec.rs

Reduce response serialization and rollout scan overhead (#36006)

2026-07-29 18:29:26 +00:00

config_layer.rs

Support packaged defaults in config layering (#37810)

2026-08-10 11:22:55 +00:00

config_manager_service_credential_edits.rs

Handle credential provider source remapping across config layers (#44241)

2026-09-09 17:45:17 +00:00

config_manager_service_tests.rs

Handle credential provider source remapping across config layers (#44241)

2026-09-09 17:45:17 +00:00

config_manager_service.rs

Handle credential provider source remapping across config layers (#44241)

2026-09-09 17:45:17 +00:00

config_manager.rs

Honor layered configuration when loading plugins (#40954)

2026-08-26 19:02:02 +00:00

connection_cleanup.rs

fix(app-server): avoid blocking connection cleanup (#26852)

2026-06-08 10:20:54 -07:00

connection_rpc_gate.rs

Bind remote-control sessions to their authentication owner (#44341)

2026-09-09 23:59:14 +00:00

current_time.rs

[app-server] increase currentTime/read timeout (#30384)

2026-06-27 16:42:03 -07:00

daemon_thread_recovery.rs

Restore saved threads when the managed daemon restarts (#44314)

2026-09-09 22:04:47 +00:00

dynamic_tools.rs

Add audio output support to dynamic tools and code mode (#34080)

2026-07-18 23:22:13 +00:00

effective_plugin_change_tests.rs

Refresh runtimes for remote plugin state changes (#41396)

2026-08-28 19:12:34 +00:00

effective_plugin_change.rs

Add plugin reconciliation app-server API (#41949)

2026-09-01 00:50:11 +00:00

error_code.rs

Gate new turn submissions on host shutdown admission (#43943)

2026-09-08 23:45:10 +00:00

extensions.rs

Gate new app-server work during graceful shutdown (#43959)

2026-09-09 01:03:42 +00:00

external_auth.rs

Keep credentials out of app-server logs (#39993)

2026-08-21 19:04:32 +00:00

filters.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054)

2026-03-27 19:00:44 -07:00

fs_watch.rs

Fix fs/watch debounce batching (#24716)

2026-05-28 23:09:55 -07:00

fuzzy_file_search.rs

Simple directory mentions (#14970)

2026-03-19 05:24:09 +00:00

image_url.rs

[codex] reject remote images at app-server ingress (#29419)

2026-06-23 00:43:56 +00:00

in_process.rs

Add app-server APIs for stored thread attachments (#44564)

2026-09-10 15:52:09 +00:00

lib.rs

Bound app-server stdio shutdown and handle Unix SIGTERM gracefully (#44523)

2026-09-10 13:02:57 +00:00

main_tests.rs

Remove WebSocket transport from code-mode hosts (#40692)

2026-08-25 20:37:15 +00:00

main.rs

Persist loaded threads before managed daemon shutdown (#44283)

2026-09-09 19:22:22 +00:00

mcp_refresh.rs

Gate new app-server work during graceful shutdown (#43959)

2026-09-09 01:03:42 +00:00

message_processor_tracing_tests.rs

Wire app-server user verification RPCs to the native provider (#43568)

2026-09-07 19:34:23 +00:00

message_processor.rs

Add app-server APIs for stored thread attachments (#44564)

2026-09-10 15:52:09 +00:00

models_refresh_worker_tests.rs

Persist provider and auth identity with model catalog caches (#43897)

2026-09-08 19:48:37 +00:00

models_refresh_worker.rs

Increase the app-server model refresh interval (#40498)

2026-08-24 23:29:10 +00:00

models.rs

Expose model upgrade retirement times (#38449)

2026-08-13 22:59:54 +00:00

notification_media.rs

Add app-server APIs for stored thread attachments (#44564)

2026-09-10 15:52:09 +00:00

otel_reloader.rs

Reload app-server telemetry after account changes (#37339)

2026-08-07 00:28:32 +00:00

outgoing_message.rs

Add cancellation for native user-verification RPCs (#43925)

2026-09-08 21:48:53 +00:00

plugin_config_reload.rs

Upgrade Git marketplaces from merged configuration (#42149)

2026-09-01 22:37:26 +00:00

request_processors.rs

Add app-server APIs for stored thread attachments (#44564)

2026-09-10 15:52:09 +00:00

request_serialization.rs

Gate new app-server work during graceful shutdown (#43959)

2026-09-09 01:03:42 +00:00

server_request_error.rs

app-server: Replay pending item requests on thread/resume (#12560)

2026-02-27 12:45:59 -08:00

skills_watcher.rs

Stop re-exporting skill APIs from codex-core (#37984)

2026-08-11 10:43:11 +00:00

thread_state.rs

Keep app-server thread RPCs active until delegated work completes (#43950)

2026-09-09 00:25:02 +00:00

thread_status.rs

Notify running turn watchers only on count changes (#38170)

2026-08-12 11:07:46 +00:00

transport_tests.rs

Surface model provider authentication recovery progress (#41239)

2026-08-28 01:14:02 +00:00

transport.rs

Bind remote-control sessions to their authentication owner (#44341)

2026-09-09 23:59:14 +00:00

turn_admission_tests.rs

Gate new app-server work during graceful shutdown (#43959)

2026-09-09 01:03:42 +00:00

turn_admission.rs

Gate new app-server work during graceful shutdown (#43959)

2026-09-09 01:03:42 +00:00

turn_cost_worker_chatgpt_tests.rs

Emit turn cost telemetry for ChatGPT sessions (#41944)

2026-09-01 00:30:55 +00:00

turn_cost_worker_chatgpt.rs

Emit turn cost telemetry for ChatGPT sessions (#41944)

2026-09-01 00:30:55 +00:00

turn_cost_worker_tests.rs

Preserve root turn attribution in turn-start events (#44611)

2026-09-10 18:24:13 +00:00

turn_cost_worker.rs

Emit turn cost telemetry for ChatGPT sessions (#41944)

2026-09-01 00:30:55 +00:00

user_verification_activation_tests.rs

Enable user verification for local Codex Desktop sessions (#44613)

2026-09-10 18:32:38 +00:00

user_verification_adapter_tests.rs

Add user-verification provider abstractions and RPC adapters (#43547)

2026-09-07 18:43:20 +00:00

user_verification_adapter.rs

Add user-verification provider abstractions and RPC adapters (#43547)

2026-09-07 18:43:20 +00:00

user_verification_auth.rs

Enable user verification for the bundled TUI on supported devices (#43715)

2026-09-08 05:57:24 +00:00

user_verification_cancel_context_tests.rs

Add cancellation for native user-verification RPCs (#43925)

2026-09-08 21:48:53 +00:00

user_verification_cancel_tests.rs

Add cancellation for native user-verification RPCs (#43925)

2026-09-08 21:48:53 +00:00

user_verification_connection_tests.rs

Enable user verification for the bundled TUI on supported devices (#43715)

2026-09-08 05:57:24 +00:00

user_verification_ownership_tests.rs

Add opt-in MCP user-verification transport (#43352)

2026-09-07 04:33:22 +00:00

user_verification_response_tests.rs

Add opt-in MCP user-verification transport (#43352)

2026-09-07 04:33:22 +00:00

user_verification_response.rs

Add opt-in MCP user-verification transport (#43352)

2026-09-07 04:33:22 +00:00

user_verification_rpc_tests.rs

Wire app-server user verification RPCs to the native provider (#43568)

2026-09-07 19:34:23 +00:00

user_verification_test_support.rs

Add cancellation for native user-verification RPCs (#43925)

2026-09-08 21:48:53 +00:00

user_verification_tests.rs

Wire app-server user verification RPCs to the native provider (#43568)

2026-09-07 19:34:23 +00:00

user_verification.rs

Add cancellation for native user-verification RPCs (#43925)

2026-09-08 21:48:53 +00:00