viyatb-oaiandCodex e4a3612f11 fix: add websocket capability token hash support (#17871) ...

## Summary
- Allow app-server websocket capability auth to accept a precomputed
SHA-256 digest via `--ws-token-sha256`.
- Keep token-file support and enforce exactly one capability token
source.
- Document the new auth flag.

## Testing
- `just fmt`
- `cargo test -p codex-app-server transport::auth::tests`
- `cargo test -p codex-app-server
websocket_capability_token_sha256_args_parse`
- `cargo test -p codex-cli app_server_capability_token_flags_parse`
- `cargo clippy -p codex-app-server --all-targets -- -D warnings`
- `just fix -p codex-cli`

---------

Co-authored-by: Codex <noreply@openai.com>

2026-04-14 22:06:39 -07:00

..

bin

Stabilize app-server notify initialize test (#13939)

2026-03-09 23:41:58 -07:00

codex_message_processor

[codex] reduce module visibility (#16978)

2026-04-07 08:03:35 -07:00

message_processor

app-server: prepare to run initialized rpcs concurrently (#17372)

2026-04-14 11:24:34 -07:00

transport

fix: add websocket capability token hash support (#17871)

2026-04-14 22:06:39 -07:00

app_server_tracing.rs

app-server: prepare to run initialized rpcs concurrently (#17372)

2026-04-14 11:24:34 -07:00

bespoke_event_handling.rs

Spread AbsolutePathBuf (#17792)

2026-04-14 14:26:10 -07:00

codex_message_processor.rs

Make skill loading filesystem-aware (#17720)

2026-04-14 15:40:40 -07:00

command_exec.rs

Use AbsolutePathBuf for exec cwd plumbing (#17063)

2026-04-08 10:54:12 -07:00

config_api.rs

fix: Revert danger-full-access denylist-only mode (#17732)

2026-04-14 09:50:14 -07:00

dynamic_tools.rs

app-server: Replay pending item requests on thread/resume (#12560)

2026-02-27 12:45:59 -08:00

error_code.rs

Enforce user input length cap (#12823)

2026-02-25 22:23:51 -08:00

external_agent_config_api.rs

support plugins in external agent config migration (#17855)

2026-04-14 19:39:10 -07:00

filters.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054)

2026-03-27 19:00:44 -07:00

fs_api.rs

[codex] Add symlink flag to fs metadata (#17719)

2026-04-13 17:46:56 -07:00

fs_watch.rs

Spread AbsolutePathBuf (#17792)

2026-04-14 14:26:10 -07:00

fuzzy_file_search.rs

Simple directory mentions (#14970)

2026-03-19 05:24:09 +00:00

in_process.rs

app-server: prepare to run initialized rpcs concurrently (#17372)

2026-04-14 11:24:34 -07:00

lib.rs

app-server: prepare to run initialized rpcs concurrently (#17372)

2026-04-14 11:24:34 -07:00

main.rs

[codex-analytics] enable general analytics by default (#17389)

2026-04-14 13:20:46 -07:00

message_processor.rs

[codex] Fix app-server initialized request analytics build (#17830)

2026-04-14 13:11:04 -07:00

models.rs

Use model metadata for Fast Mode status (#16949)

2026-04-07 17:55:40 -07:00

outgoing_message.rs

Revert "Option to Notify Workspace Owner When Usage Limit is Reached" (#17391)

2026-04-10 23:33:13 +00:00

server_request_error.rs

app-server: Replay pending item requests on thread/resume (#12560)

2026-02-27 12:45:59 -08:00

thread_state.rs

Spread AbsolutePathBuf (#17792)

2026-04-14 14:26:10 -07:00

thread_status.rs

Spread AbsolutePathBuf (#17792)

2026-04-14 14:26:10 -07:00