Diego Rodrigues de Sa e Souza bdf63d2171 fix(security): harden codex app-server transport (#11205 post-merge review) (#11281) ...

TDD: 4 red-to-green tests reproducing the two review findings + 6 new cases; 30/30 in tests/unit/codex-app-server.test.ts; typecheck/eslint/env-doc-sync/file-size clean. Merged --admin over the inherited 2026-08-23 base-red cluster (#9985): the remaining reds (CLI catalog/registry tests, @testing-library allowlist) are proven tip failures unrelated to this diff — shard logs show only CLI-cluster failures, and this PR itself drains the mutation-test-coverage red (stryker registration for #11267's test). Behavior change for app-server deployments is documented in the PR body (sandbox default + binding refusal).

2026-08-23 16:49:19 -03:00

..

appServerAuthProbe.ts

feat(codex): self-contained codex app-server transport (executor + provider + sign-in) (#11205)

2026-08-23 10:20:06 -03:00

appServerClient.ts

fix(security): harden codex app-server transport (#11205 post-merge review) (#11281)

2026-08-23 16:49:19 -03:00

appServerConfig.ts

fix(security): harden codex app-server transport (#11205 post-merge review) (#11281)

2026-08-23 16:49:19 -03:00

appServerEvents.ts

feat(codex): self-contained codex app-server transport (executor + provider + sign-in) (#11205)

2026-08-23 10:20:06 -03:00

bodyTimeout.ts

fix(sse): bound Codex SSE peek read with per-read timeout (#8020) (#8043)

2026-07-21 21:41:58 -03:00

quota.ts

Release v3.8.44 (#5925)

2026-07-04 13:00:30 -03:00

reasoningSuffix.ts

feat(codex): accept parenthesized GPT-5.6 effort overrides (#9208)

2026-08-05 22:39:59 -03:00

toolCallRepair.ts

Fix custom tool output pairing during context compression (#8933)

2026-08-11 04:25:55 -03:00

tools.ts

fix(executors): strip redundant oneOf matching sibling enum (#9828)

2026-08-11 08:35:16 -03:00