Colin Young 9752e0e0bd Add a Git credential helper for existing Codex logins (#60746) ...

## What changed

Add the hidden `codex git-credential` command to supply an existing file-backed ChatGPT login as an ephemeral Bearer credential through Git's `authtype` protocol.

Restrict credentials to HTTPS requests under `backend-api/codex/sites/git/` on `chatgpt.com` or `chatgpt-staging.com`, matching the configured origin. Check managed workspace policy and reject expired or changed logins before returning credentials. Ignore repository configuration when selecting authentication settings.

The helper does not refresh tokens or modify the saved login; `store` and `erase` are no-ops. Return `quit=true` when authentication is unavailable or fails so Git does not fall back to prompting.

## Testing

Add coverage for capability advertisement before login, reading only the first credential record, and declining personal access tokens without an authentication API lookup.

GitOrigin-RevId: 2f96af1eeb7d05e3d893367137103a7adbc02742

2026-11-11 07:12:23 +00:00

..

app_server_daemon

Isolate daemon package tests to reduce disk contention (#53897)

2026-10-14 07:13:22 +00:00

exec_server

Reload remote executor credentials safely across token rotation (#58251)

2026-10-30 05:30:20 +00:00

snapshots

Keep the agents overview open when there is no chat to return to (#60271)

2026-11-08 17:26:39 +00:00

app_server_daemon_windows.rs

Support daemon installation from Windows WinGet packages (#53811)

2026-10-14 00:49:27 +00:00

app_server_daemon.rs

Honor feature overrides when starting the app-server daemon (#60489)

2026-11-10 01:31:19 +00:00

app_server.rs

Enable the agent command center in embedded mode (#58239)

2026-10-30 04:01:11 +00:00

cloud_auth.rs

Use runtime authentication across backend request paths (#59572)

2026-11-05 05:09:32 +00:00

cloud_config.rs

Add an OpenSSH ProxyCommand mode to codex tcp-tunnel (#60568)

2026-11-10 09:54:57 +00:00

daemon_startup.rs

Support cancellation and deadlines for realtime attachments (#60443)

2026-11-09 20:24:40 +00:00

daemon_telemetry.rs

Honor custom OTLP metrics exporters when analytics is disabled (#52278)

2026-10-08 21:18:24 +00:00

debug_clear_memories.rs

Add macOS voice runtime projection (#42204)

2026-09-02 04:52:32 +00:00

debug_models.rs

Add codex debug models to show model catalog (#18625)

2026-04-20 05:42:22 +00:00

delete.rs

Add session delete commands in CLI and TUI (#27476)

2026-06-10 18:04:02 -07:00

doctor_enterprise_network.rs

Add codex doctor --network-only for focused network diagnostics (#57606)

2026-10-28 00:37:15 +00:00

doctor_path_safety.rs

Stabilize cross-platform tests and directory-change fork permissions (#59369)

2026-11-04 09:51:28 +00:00

exec_server_websocket_auth.rs

Support bearer tokens for app-server executor connections (#47648)

2026-09-23 20:05:37 +00:00

exec_server.rs

Add ChatGPT token stdin authentication to exec-server (#59569)

2026-11-05 04:25:19 +00:00

execpolicy.rs

feat: add justification arg to prefix_rule() in *.rules (#8751)

2026-01-05 21:24:48 +00:00

features.rs

Enable the agent command center in embedded mode (#58239)

2026-10-30 04:01:11 +00:00

login.rs

Add a Git credential helper for existing Codex logins (#60746)

2026-11-11 07:12:23 +00:00

marketplace_add.rs

Clean up failed and abandoned marketplace staging directories (#55689)

2026-10-20 22:25:54 +00:00

marketplace_remove.rs

Respect config layers when removing plugin marketplaces (#40683)

2026-08-25 19:38:39 +00:00

marketplace_upgrade.rs

Clean up failed and abandoned marketplace staging directories (#55689)

2026-10-20 22:25:54 +00:00

mcp_add_remove.rs

Avoid nested CLI startup in the MCP OAuth persistence test (#56018)

2026-10-21 23:58:33 +00:00

mcp_list.rs

Add dynamic HTTP header helpers for MCP servers (#38245)

2026-08-12 20:36:32 +00:00

mcp_login.rs

Prefer resource-specific scopes during MCP OAuth discovery (#54653)

2026-10-16 16:23:55 +00:00

migrate_nfs_db.rs

Report when NFS database migration finds no databases (#57357)

2026-10-27 04:46:24 +00:00

plugin_cli.rs

Handle broken pipes gracefully in plugin list output (#53109)

2026-10-11 12:38:29 +00:00

queue.rs

Allow searching persisted attached threads (#60574)

2026-11-10 11:17:06 +00:00

rollout_trace.rs

Make rollout recording failures and completion explicit (#58166)

2026-10-29 19:56:26 +00:00

sandbox_cloud_config.rs

Load cloud config for sandbox and remote exec-server commands (#57270)

2026-10-26 21:31:28 +00:00

sandbox_network_proxy.rs

Route sandbox CLI launches through the shared sandbox manager (#60517)

2026-11-10 04:01:23 +00:00

sandbox_tty.rs

Support close-on-exec attachments without changing PTY semantics (#47797)

2026-09-24 09:25:19 +00:00

sandbox_uninstall.rs

Add a CLI command to uninstall the legacy Windows sandbox (#50437)

2026-10-02 21:51:46 +00:00

update.rs

Add codex update command (#19933)

2026-04-27 23:33:59 -07:00

worktree.rs

Restore the daemon auto-start feature flag (#59447)

2026-11-04 16:46:21 +00:00