Keep shared Codex auth read-only during usage refresh - #2970

Merged

steipete merged 20 commits into

mainfrom

fix/2944-codex-auth-readonly

Aug 16, 2026

Commits on Aug 15, 2026

Harden Codex OAuth source and refresh lifecycle
Yuxin-Qiao
committed
08ff28a
Harden managed Codex account writes
Yuxin-Qiao
committed
e79d789
Recover Codex account identity from JWT claims
Yuxin-Qiao
committed
ca7486d
Cover direct Codex JWT account claims
Yuxin-Qiao
committed
032f224
Keep shared Codex auth read-only during refresh
Yuxin-Qiao
committed
4db8972
Preserve explicit OAuth recovery
Yuxin-Qiao
committed
921ac42
Gate native OAuth CLI recovery
Yuxin-Qiao
committed
666a72b
Merge remote-tracking branch 'origin/main' into codex/codex-oauth-hardening-pr
Yuxin-Qiao
committed
b56b052
Keep Codex OAuth refresh in memory
Yuxin-Qiao
committed
5cf3102
Keep shared OAuth refresh owner-safe
Yuxin-Qiao
committed
b0c62e8
Align OAuth guide with read-only auth
Yuxin-Qiao
committed
c7ab5e5
Skip blank JWT organization IDs
Yuxin-Qiao
committed
47d03be
Treat whitespace account IDs as absent
Yuxin-Qiao
committed
15acee5
Align OAuth guide with recovery flow
Yuxin-Qiao
committed
273c9a4

Commits on Aug 16, 2026

Remove stale OAuth refresh examples
Yuxin-Qiao
committed
87b2b36
Preserve OAuth snapshot across credit enrichment
Yuxin-Qiao
committed
d58b1be
Clarify private workspace metadata boundary
Yuxin-Qiao
committed
7204480
Fail closed CLI recovery for managed workspace scope
Yuxin-Qiao
committed
91ed021
fix: keep Codex auth read-only during refresh
steipete
committed
a29973f
Merge remote-tracking branch 'origin/main' into fix/2944-codex-auth-readonly
steipete
committed
04766fd