mirror of https://github.com/pchuan98/codex.git synced 2026-07-01 00:31:56 +08:00

Files

T

cooper-oaiandGitHub b5f1bb75d4 [codex-rs] enforce PAT workspace restrictions (#27450 )

## Summary

- validate a hydrated personal access token's workspace against
`forced_chatgpt_workspace_id` before persisting `codex login
--with-access-token`
- apply the same PAT-only check when restricted auth managers load
environment, ephemeral, or persisted credentials
- enforce PAT workspace restrictions in the existing central
login-restriction path
- leave Agent Identity and cloud bootstrap behavior unchanged

## Scope

This is intentionally the small PAT-only change. It does not attempt the
broader auth-manager/bootstrap unification; that needs separate design
work.

## Validation

- `CARGO_INCREMENTAL=0 CARGO_TARGET_DIR=/tmp/codex-pat-target just test
-p codex-login -p codex-cli` (410 passed)
- `CARGO_INCREMENTAL=0 CARGO_TARGET_DIR=/tmp/codex-pat-target just fix
-p codex-login -p codex-cli`
- `just fmt`
- `git diff --check`

Context: https://openai.slack.com/archives/D0AUPLV03RQ/p1781138331548269

2026-06-11 14:17:37 -07:00

.cargo

Ignore proc-macro-error2 advisory (#26974 )

2026-06-08 11:39:08 +02:00

.config

[codex] Speed up local nextest runs (#26479 )

2026-06-09 12:48:04 -07:00

.github/workflows

Uprev Rust toolchain pins to 1.95.0 (#24684 )

2026-05-26 20:59:47 -07:00

agent-graph-store

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

agent-identity

Load cloud requirements for agent identity (#19708 )

2026-04-28 12:35:00 -07:00

analytics

Emit plugin ID on MCP tool call analytics events (#27483 )

2026-06-11 09:55:53 -07:00

ansi-escape

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

app-server

core: Consolidate Responses API Codex metadata (#27122 )

2026-06-11 13:42:09 -07:00

app-server-client

Remove TUI legacy Windows sandbox dependency (#27490 )

2026-06-11 09:23:08 -07:00

app-server-daemon

Report app-server version in codex doctor (#24311 )

2026-05-25 09:41:12 -07:00

app-server-protocol

core: Consolidate Responses API Codex metadata (#27122 )

2026-06-11 13:42:09 -07:00

app-server-test-client

[codex] Add user input client ids (#24653 )

2026-05-28 14:54:39 -07:00

app-server-transport

feat: add Bedrock API key as a managed auth mode (#27443 )

2026-06-10 20:42:38 -07:00

apply-patch

[codex] migrate ExecutorFileSystem paths to PathUri (#27424 )

2026-06-11 18:44:18 +00:00

arg0

cli: add package path from install context (#26189 )

2026-06-03 19:08:19 -07:00

async-utils

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

aws-auth

feat: enable AWS login credentials for Bedrock auth (#21623 )

2026-05-08 04:07:59 +00:00

backend-client

feat(app-server): expose account token usage [1 of 2] (#25344 )

2026-06-05 14:43:44 +00:00

bwrap

fix(bwrap): emit libcap after standalone archive (#21285 )

2026-05-05 22:22:01 -07:00

chatgpt

Route hosted Apps MCP through extensions (#27191 )

2026-06-09 22:44:16 +02:00

cli

[codex-rs] enforce PAT workspace restrictions (#27450 )

2026-06-11 14:17:37 -07:00

cloud-config

[codex] Tune cloud config cache intervals (#26513 )

2026-06-10 23:42:15 -07:00

cloud-tasks

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

cloud-tasks-client

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

cloud-tasks-mock-client

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

code-mode

Add saved image path hint to standalone image generation (#25947 )

2026-06-04 09:39:20 -07:00

codex-api

[codex] Add comp_hash to model metadata (#27532 )

2026-06-10 20:42:55 -07:00

codex-backend-openapi-models

feat: show enterprise monthly credit limits in status (#24812 )

2026-06-01 21:25:42 -07:00

codex-client

Uprev Rust toolchain pins to 1.95.0 (#24684 )

2026-05-26 20:59:47 -07:00

codex-experimental-api-macros

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

codex-home

[codex] Load user instructions through an injected provider (#27101 )

2026-06-11 19:28:47 +00:00

codex-mcp

Resolve MCP server registrations through a catalog (#27634 )

2026-06-11 21:54:52 +02:00

collaboration-mode-templates

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

config

[codex] migrate ExecutorFileSystem paths to PathUri (#27424 )

2026-06-11 18:44:18 +00:00

connectors

Seed prompt history from resumed messages (#24298 )

2026-05-28 22:08:05 -07:00

context-fragments

skills: resolve per-turn catalogs from turn input context (#26106 )

2026-06-03 13:32:55 +02:00

core

core: Consolidate Responses API Codex metadata (#27122 )

2026-06-11 13:42:09 -07:00

core-api

[codex] Load user instructions through an injected provider (#27101 )

2026-06-11 19:28:47 +00:00

core-plugins

[codex] Propagate plugin app categories (#27420 )

2026-06-11 10:34:41 -07:00

core-skills

[codex] migrate ExecutorFileSystem paths to PathUri (#27424 )

2026-06-11 18:44:18 +00:00

docs

protocol: remove submission-side serde from Op (#26674 )

2026-06-05 15:41:13 -07:00

exec

[codex] Load user instructions through an injected provider (#27101 )

2026-06-11 19:28:47 +00:00

exec-server

[codex] migrate ExecutorFileSystem paths to PathUri (#27424 )

2026-06-11 18:44:18 +00:00

execpolicy

deps: update starlark to 0.14.2 (#24820 )

2026-06-07 17:35:33 -07:00

execpolicy-legacy

deps: update starlark to 0.14.2 (#24820 )

2026-06-07 17:35:33 -07:00

ext

Resolve MCP server registrations through a catalog (#27634 )

2026-06-11 21:54:52 +02:00

external-agent-migration

external-agent-migration: avoid mixed MCP transport configs (#26435 )

2026-06-04 14:16:03 -04:00

external-agent-sessions

[codex] Speed up external agent session imports (#26637 )

2026-06-08 14:16:32 -04:00

features

core: enable remote compaction v2 by default (#27573 )

2026-06-11 10:07:19 +00:00

feedback

Attach Windows sandbox log to feedback reports (#24623 )

2026-05-26 15:59:25 -07:00

file-search

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

file-system

[codex] migrate ExecutorFileSystem paths to PathUri (#27424 )

2026-06-11 18:44:18 +00:00

file-watcher

Fix fs/watch debounce batching (#24716 )

2026-05-28 23:09:55 -07:00

git-utils

[codex] migrate ExecutorFileSystem paths to PathUri (#27424 )

2026-06-11 18:44:18 +00:00

hooks

Switch runtime to cloud config bundle (#24622 )

2026-06-02 13:18:59 -07:00

install-context

cli: add package path from install context (#26189 )

2026-06-03 19:08:19 -07:00

keyring-store

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

linux-sandbox

[codex] Allow socketpair in proxy-routed Linux sandbox (#26625 )

2026-06-05 09:34:36 -07:00

lmstudio

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

[codex-rs] enforce PAT workspace restrictions (#27450 )

2026-06-11 14:17:37 -07:00

mcp-server

[codex] Load user instructions through an injected provider (#27101 )

2026-06-11 19:28:47 +00:00

memories

core: Consolidate Responses API Codex metadata (#27122 )

2026-06-11 13:42:09 -07:00

message-history

Optimize unbounded byte scans with memchr (#26265 )

2026-06-04 09:53:08 -04:00

model-provider

feat: add Bedrock API key as a managed auth mode (#27443 )

2026-06-10 20:42:38 -07:00

model-provider-info

[codex-rs] support v2 personal access tokens (#25731 )

2026-06-05 17:36:18 -07:00

models-manager

[codex] Add comp_hash to model metadata (#27532 )

2026-06-10 20:42:55 -07:00

network-proxy

Add SOCKS5 TCP MITM coverage (#22685 )

2026-06-09 13:08:01 -07:00

ollama

Optimize unbounded byte scans with memchr (#26265 )

2026-06-04 09:53:08 -04:00

otel

feat: add Bedrock API key as a managed auth mode (#27443 )

2026-06-10 20:42:38 -07:00

plugin

fix: Allow plugin skills to share plugin-level icon assets (#23776 )

2026-05-21 16:11:59 -07:00

process-hardening

fix(process-hardening): preserve macos malloc diagnostics (#24479 )

2026-05-25 17:26:10 -03:00

prompts

skills: resolve per-turn catalogs from turn input context (#26106 )

2026-06-03 13:32:55 +02:00

protocol

[codex] Compact when comp_hash changes (#27520 )

2026-06-11 04:11:26 +00:00

realtime-webrtc

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

response-debug-context

Add safety check notification and error handling (#19055 )

2026-04-22 22:24:12 -07:00

responses-api-proxy

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

rmcp-client

[codex] Retry streamable HTTP initialize failures (#25147 )

2026-06-09 15:49:48 -07:00

rollout

[codex] Compact when comp_hash changes (#27520 )

2026-06-11 04:11:26 +00:00

rollout-trace

multi-agent: add path-based v2 activity tracking (#27007 )

2026-06-09 12:14:48 +02:00

sandboxing

Enforce configured network proxy in codex sandbox (#27035 )

2026-06-08 14:03:37 -07:00

scripts

Uprev Rust toolchain pins to 1.95.0 (#24684 )

2026-05-26 20:59:47 -07:00

secrets

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

shell-command

[codex] Add /usr/bin/bash shell fallback (#26538 )

2026-06-05 09:38:26 -07:00

shell-escalation

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

skills

[codex] Propagate plugin app categories (#27420 )

2026-06-11 10:34:41 -07:00

state

[codex] Compact when comp_hash changes (#27520 )

2026-06-11 04:11:26 +00:00

stdio-to-uds

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

terminal-detection

feat(cli): add codex doctor diagnostics (#22336 )

2026-05-13 21:23:19 +00:00

test-binary-support

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

thread-manager-sample

[codex] Load user instructions through an injected provider (#27101 )

2026-06-11 19:28:47 +00:00

thread-store

Add app-server thread/delete API (#25018 )

2026-06-10 11:22:12 -07:00

tools

skills: expose remote skill resource tools (#27388 )

2026-06-11 12:38:04 +02:00

tui

[codex] Load user instructions through an injected provider (#27101 )

2026-06-11 19:28:47 +00:00

uds

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

utils

[codex] migrate ExecutorFileSystem paths to PathUri (#27424 )

2026-06-11 18:44:18 +00:00

v8-poc

CI: Customize v8 building (#22086 )

2026-05-18 21:33:05 -07:00

vendor

vendor: update bubblewrap to 0.11.2 (#21389 )

2026-05-06 18:10:30 +00:00

windows-sandbox-rs

Improve Windows sandbox setup refresh diagnostics (#26471 )

2026-06-04 16:52:10 -07:00

.gitignore

[MCP] Prefix MCP tools names with mcp__ (#5309 )

2025-10-19 20:41:55 -04:00

BUILD.bazel

Remove js_repl feature (#19410 )

2026-04-24 17:49:29 -07:00

Cargo.lock

[codex] Load user instructions through an injected provider (#27101 )

2026-06-11 19:28:47 +00:00

Cargo.toml

[codex] Load user instructions through an injected provider (#27101 )

2026-06-11 19:28:47 +00:00

clippy.toml

chore: document intentional await-holding cases (#18423 )

2026-04-20 22:41:54 -07:00

config.md

Fix link to MCP Servers config section (#5301 )

2025-10-17 14:58:27 -07:00

default.nix

fix(nix): include libcap dependency on linux builds (#12415 )

2026-02-20 19:32:15 -08:00

deny.toml

Ignore proc-macro-error2 advisory (#26974 )

2026-06-08 11:39:08 +02:00

README.md

Simplify Codex CLI README (#26313 )

2026-06-04 09:16:03 -07:00

rust-toolchain.toml

Uprev Rust toolchain pins to 1.95.0 (#24684 )

2026-05-26 20:59:47 -07:00

rustfmt.toml

…

README.md

Codex CLI

Codex CLI Documentation