Devin FoleyandPaperclip 68e3a1a136 fix(codex-local): preserve resolved auth for secret-bound keys on reconcile ...

Startup reconciliation could not resolve a secret-bound OPENAI_API_KEY, so it
passed apiKey: null and re-seeded the home with the shared subscription
symlink — silently downgrading an already-resolved API-key auth.json on every
boot while reporting already_seeded.

Classify the persisted OPENAI_API_KEY binding into plain / secret / none and
pass apiKeySecretBound through to reconcileManagedCodexHome, which now preserves
existing usable auth when the key is secret-bound. Adds regression tests at the
adapter and server layers.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-06-20 14:42:57 -07:00

..

scripts

fix(server): use stable tsx/cli entry point in dev-watch

2026-03-28 06:42:03 +07:00

src

fix(codex-local): preserve resolved auth for secret-bound keys on reconcile

2026-06-20 14:42:57 -07:00

CHANGELOG.md

chore: release v0.3.1

2026-03-12 13:09:22 -05:00

package.json

fix(server): resolve published skills catalog package root and fallback (#8327)

2026-06-19 09:14:41 -07:00

tsconfig.json

Fix root TypeScript solution config

2026-03-09 14:09:30 -05:00

vitest.config.ts

refactor(deps-dev): bump vitest from 3.2.4 to 4.1.8 (#7581)

2026-06-05 21:11:32 -07:00