NeilandEilon Goldberg dfab4a89c9 feat(codex): opt-in to use default ~/.codex config dir, stopping auth revocation war ...

Fixes #5370.

Orca injects a private managed CODEX_HOME into Codex processes. For a single
OpenAI/ChatGPT account, OAuth enforces one active session, so two independently
refreshing homes (Orca's managed home and the user's ~/.codex) revoke each
other's single-use refresh tokens — silently breaking non-Orca Codex usage.
The refresh is driven both by interactive Codex and by Orca's BACKGROUND quota
poller, which spawns the real codex binary against the managed home.

Adds an opt-in "Use default Codex config directory" setting (Settings >
Accounts > Codex). When enabled:
- PTY launches inject no CODEX_HOME (all three buildPtyHostEnv sites OR in
  isCodexDefaultHomeEnabled), so terminals resolve ~/.codex.
- The background quota poller and host Codex launches resolve the system
  ~/.codex home instead of spawning codex against the managed home — closing
  the revocation gap that persisted even after the ~/.zshenv workaround.

Supersedes community PR #5594: re-derives the locale changes (drops the
out-of-scope "Create PR" status-message block, keeps only the new Codex keys),
closes the background-revocation gap left unaddressed by the original PR, and
sharpens the setting description to state it also disables the managed-home
quota refresh.

Co-authored-by: Eilon Goldberg <eilon@onyx.security>

2026-06-27 23:24:53 -07:00

..

agent-hooks

feat(codex): opt-in to use default ~/.codex config dir, stopping auth revocation war

2026-06-27 23:24:53 -07:00

ai-vault

fix(ai-vault): surface a workspace's own sessions past the recency cap (#6273)

2026-06-24 22:03:35 -07:00

amp

Preserve agent settings when sleeping sessions resume (#5916)

2026-06-21 16:44:58 -07:00

antigravity

Harden Windows hook command resolution (#6409)

2026-06-25 22:43:25 -07:00

attribution

Add project Windows runtime selection (#5519)

2026-06-17 16:08:14 -07:00

automations

Fix automation run terminal targeting (#6374)

2026-06-25 20:51:34 -07:00

azure-devops

Add project Windows runtime selection (#5519)

2026-06-17 16:08:14 -07:00

bitbucket

Add project Windows runtime selection (#5519)

2026-06-17 16:08:14 -07:00

browser

Fix browser pane stuck in HTML fullscreen (#6442) (#6451)

2026-06-26 20:05:47 -07:00

claude

Harden Windows hook command resolution (#6409)

2026-06-25 22:43:25 -07:00

claude-accounts

Add project Windows runtime selection (#5519)

2026-06-17 16:08:14 -07:00

claude-usage

fix: default future Claude Opus pricing (#4687)

2026-06-04 23:51:44 -07:00

cli

Fix Orca CLI path resolution and improve registration UI (#6484)

2026-06-27 02:05:23 -07:00

codex

Harden Windows hook command resolution (#6409)

2026-06-25 22:43:25 -07:00

codex-accounts

feat(codex): opt-in to use default ~/.codex config dir, stopping auth revocation war

2026-06-27 23:24:53 -07:00

codex-cli

fix: detect agents via install-dir resolver when which misses on GUI launch (#4880)

2026-06-08 19:23:32 -04:00

codex-usage

Keep Codex terminals responsive during startup (#5301)

2026-06-15 16:40:45 -07:00

command-code

Harden Windows hook command resolution (#6409)

2026-06-25 22:43:25 -07:00

computer

Fix paste ownership, input bounds, and IPC validation

2026-06-19 17:14:55 -07:00

copilot

Preserve agent settings when sleeping sessions resume (#5916)

2026-06-21 16:44:58 -07:00

crash-reporting

Coalesce renderer process-gone crash bursts (#6202)

2026-06-23 20:59:06 -07:00

cursor

Harden Windows hook command resolution (#6409)

2026-06-25 22:43:25 -07:00

daemon

Show the correct agent icon for terminal helpers (#6455)

2026-06-26 15:51:50 -07:00

devin

Prevent managed agent hooks from hanging (#6148)

2026-06-23 17:22:10 -07:00

dock

Simplify dev Dock instance naming (#2111)

2026-05-16 14:36:46 -07:00

droid

Harden Windows hook command resolution (#6409)

2026-06-25 22:43:25 -07:00

emulator

Fix paste ownership, input bounds, and IPC validation

2026-06-19 17:14:55 -07:00

gemini

Harden Windows hook command resolution (#6409)

2026-06-25 22:43:25 -07:00

ghostty

Add project Windows runtime selection (#5519)

2026-06-17 16:08:14 -07:00

git

Import linked worktrees under one project (#6441)

2026-06-26 13:26:58 -07:00

gitea

Add project Windows runtime selection (#5519)

2026-06-17 16:08:14 -07:00

github

Fix fork PR detection for same-name upstreams (#6446)

2026-06-26 14:49:19 -07:00

gitlab

Accept merged fallback PRs during branch lookup (#5908)

2026-06-20 03:30:18 -07:00

grok

Harden Windows hook command resolution (#6409)

2026-06-25 22:43:25 -07:00

hermes

Preserve agent settings when sleeping sessions resume (#5916)

2026-06-21 16:44:58 -07:00

i18n

fix: address review findings (#5088)

2026-06-10 01:22:11 -07:00

ipc

feat(codex): opt-in to use default ~/.codex config dir, stopping auth revocation war

2026-06-27 23:24:53 -07:00

jira

fix(jira): surface issue-search failures instead of a misleading empty list (#5958)

2026-06-22 20:27:38 -07:00

keybindings

Add customizable keyboard shortcuts (#2581)

2026-05-21 19:10:16 -07:00

kimi

Prevent managed agent hooks from hanging (#6148)

2026-06-23 17:22:10 -07:00

lib

feat(editor): export active markdown to PDF (#882)

2026-04-20 19:41:12 -07:00

linear

Fix paste ownership, input bounds, and IPC validation

2026-06-19 17:14:55 -07:00

memory

Fix paste ownership, input bounds, and IPC validation

2026-06-19 17:14:55 -07:00

menu

Fix paste ownership, input bounds, and IPC validation

2026-06-19 17:14:55 -07:00

mimo

feat(agents): native Xiaomi MiMo Code support (#6239)

2026-06-24 00:17:49 -07:00

network

Add explicit proxy settings

2026-05-31 05:55:04 -07:00

observability

Reduce git trace and branch compare polling churn (#6002)

2026-06-22 19:13:32 -07:00

openclaude

Add OpenClaude agent support

2026-05-30 02:46:28 -07:00

opencode

feat(agents): native Xiaomi MiMo Code support (#6239)

2026-06-24 00:17:49 -07:00

opencode-usage

feat(ai-vault): support OpenCode SQLite session storage (#5925)

2026-06-23 11:18:17 -07:00

pi

Preserve agent settings when sleeping sessions resume (#5916)

2026-06-21 16:44:58 -07:00

ports

fix(ports): stop cursor-move redraws corrupting advertised dev-server hosts (#6371)

2026-06-25 18:36:37 -07:00

project-groups

Import linked worktrees under one project (#6441)

2026-06-26 13:26:58 -07:00

providers

Fix p10k wizard blocking terminal startup

2026-06-26 12:22:42 -07:00

pty

Fix p10k wizard blocking terminal startup

2026-06-26 12:22:42 -07:00

rate-limits

Scope Claude Keychain lookup and disable PTY fallback for system auth (#6180)

2026-06-23 10:38:37 -07:00

runtime

Materialize mobile-only pending session terminals (#6465)

2026-06-26 20:16:52 -07:00

skills

Fix WSL account and skill setup issues (#4412)

2026-06-01 20:01:03 -04:00

source-control

Prevent review lookup failures from blocking PR preparation (#6490)

2026-06-27 02:37:59 -07:00

speech

Allow deleting downloaded speech models on desktop and mobile (#5794)

2026-06-19 12:31:11 -07:00

sqlite

chore: update Electron to 42 (#3919)

2026-05-30 13:26:48 -07:00

ssh

Fix remote Node.js detection for nvm, mise, asdf, and volta (#6037)

2026-06-22 16:46:47 -07:00

star-nag

Celebrate onboarding and agent wins with GitHub star prompts (#5642)

2026-06-17 22:21:32 -07:00

startup

Support browser panes on headless remote Orca servers (#5412)

2026-06-18 22:50:11 -07:00

stats

Fix paste ownership, input bounds, and IPC validation

2026-06-19 17:14:55 -07:00

telemetry

Make the GitHub star prompt clearer (#5538)

2026-06-16 18:12:55 -07:00

text-generation

Fix paste ownership, input bounds, and IPC validation

2026-06-19 17:14:55 -07:00

tray

feat(tray): Windows system tray with minimize-to-tray on close

2026-06-18 22:30:44 -07:00

warp-themes

Add project Windows runtime selection (#5519)

2026-06-17 16:08:14 -07:00

window

Fix browser pane stuck in HTML fullscreen (#6442) (#6451)

2026-06-26 20:05:47 -07:00

agent-auth-restart-preservation.test.ts

Keep Codex and Claude signed in across Orca restarts (#5639)

2026-06-17 16:20:37 -07:00

agent-auth-restart-preservation.ts

Keep Codex and Claude signed in across Orca restarts (#5639)

2026-06-17 16:20:37 -07:00

agent-awake-service-platform-assertions.test.ts

Keep Mac awake while agents run (#2227)

2026-05-18 14:09:21 -07:00

agent-awake-service.test.ts

Keep Mac awake while agents run (#2227)

2026-05-18 14:09:21 -07:00

agent-awake-service.ts

Keep Mac awake while agents run (#2227)

2026-05-18 14:09:21 -07:00

agent-trust-presets.test.ts

Add project Windows runtime selection (#5519)

2026-06-17 16:08:14 -07:00

agent-trust-presets.ts

Add project Windows runtime selection (#5519)

2026-06-17 16:08:14 -07:00

app-icon.test.ts

fix: Persist custom macOS dock icon (#6088)

2026-06-22 18:01:37 -07:00

app-icon.ts

fix: Persist custom macOS dock icon (#6088)

2026-06-22 18:01:37 -07:00

e2e-config.ts

feat: add idempotent E2E test suite with headless Electron support (#671)

2026-04-19 12:09:32 -07:00

electron-updater-loader.ts

ci: shard electron e2e workflow (#2070)

2026-05-15 23:52:37 -07:00

external-editor-launch.test.ts

Fix open-in launcher path classification (#6098)

2026-06-22 13:49:08 -07:00

external-editor-launch.ts

Fix open-in launcher path classification (#6098)

2026-06-22 13:49:08 -07:00

git-bash.test.ts

Add Git Bash Windows terminal option (#3209)

2026-05-30 15:26:11 -04:00

git-bash.ts

Add Git Bash Windows terminal option (#3209)

2026-05-30 15:26:11 -04:00

headless-automation-dispatcher-source-boundary.test.ts

Fix paste ownership, input bounds, and IPC validation

2026-06-19 17:14:55 -07:00

hooks-runner.test.ts

Add local setup commands in repo settings (#2270)

2026-05-18 14:43:24 -07:00

hooks.test.ts

Fix paste ownership, input bounds, and IPC validation

2026-06-19 17:14:55 -07:00

hooks.ts

Fix paste ownership, input bounds, and IPC validation

2026-06-19 17:14:55 -07:00

index.ts

Fix automation run terminal targeting (#6374)

2026-06-25 20:51:34 -07:00

integration-credential-file.ts

Handle integration credential decrypt failures (#4683)

2026-06-10 13:08:09 -07:00

linux-lid-sleep-assertion.test.ts

fix: clean up sleep assertion listeners (#3758)

2026-05-30 09:04:52 -07:00

linux-lid-sleep-assertion.ts

fix: clean up sleep assertion listeners (#3758)

2026-05-30 09:04:52 -07:00

local-project-runtime-resolution.ts

Add project Windows runtime selection (#5519)

2026-06-17 16:08:14 -07:00

local-worktree-filesystem.test.ts

Recover Windows worktree deletes from long paths (#6433)

2026-06-26 13:28:10 -07:00

local-worktree-filesystem.ts

Recover Windows worktree deletes from long paths (#6433)

2026-06-26 13:28:10 -07:00

local-worktree-removal-recovery.ts

Recover Windows worktree deletes from long paths (#6433)

2026-06-26 13:28:10 -07:00

macos-system-sleep-assertion.test.ts

fix: clean up sleep assertion listeners (#3758)

2026-05-30 09:04:52 -07:00

macos-system-sleep-assertion.ts

fix: clean up sleep assertion listeners (#3758)

2026-05-30 09:04:52 -07:00

persistence.test.ts

Fix automation run terminal targeting (#6374)

2026-06-25 20:51:34 -07:00

persistence.ts

Fix automation run terminal targeting (#6374)

2026-06-25 20:51:34 -07:00

powershell-osc133-bootstrap.test.ts

feat(agents): native Xiaomi MiMo Code support (#6239)

2026-06-24 00:17:49 -07:00

powershell-osc133-bootstrap.ts

feat(agents): native Xiaomi MiMo Code support (#6239)

2026-06-24 00:17:49 -07:00

project-runtime-git-options.test.ts

Add project Windows runtime selection (#5519)

2026-06-17 16:08:14 -07:00

project-runtime-git-options.ts

Add project Windows runtime selection (#5519)

2026-06-17 16:08:14 -07:00

pwsh.test.ts

Fix pwsh availability cold-start cache (#6313)

2026-06-24 21:07:15 -04:00

pwsh.ts

Fix pwsh availability cold-start cache (#6313)

2026-06-24 21:07:15 -04:00

remote-agent-trust-presets.test.ts

Keep linked workspace prompts as editable drafts (#5734)

2026-06-18 16:24:22 -07:00

remote-agent-trust-presets.ts

Prevent Codex hook trust prompts on Windows upgrades (#6388)

2026-06-25 17:24:09 -07:00

repo-git-remote-identity-enrichment.test.ts

fix: group multi-host projects by git remote identity (#6309)

2026-06-24 19:19:31 -07:00

repo-git-remote-identity-enrichment.ts

fix: group multi-host projects by git remote identity (#6309)

2026-06-24 19:19:31 -07:00

repo-git-remote-identity.ts

fix: group multi-host projects by git remote identity (#6309)

2026-06-24 19:19:31 -07:00

repo-icon-autodetect.test.ts

fix: group multi-host projects by git remote identity (#6309)

2026-06-24 19:19:31 -07:00

repo-icon-autodetect.ts

fix: group multi-host projects by git remote identity (#6309)

2026-06-24 19:19:31 -07:00

repo-icon-href-candidates.ts

fix: resolve nested repo icon hrefs (#4305)

2026-05-31 11:46:24 -07:00

repo-worktrees.test.ts

Match Windows repo roots case-insensitively

2026-05-31 02:21:17 -07:00

repo-worktrees.ts

Add project Windows runtime selection (#5519)

2026-06-17 16:08:14 -07:00

shell-ready-marker-scanner.ts

Prevent duplicate startup command echoes (#6023)

2026-06-21 18:51:44 -07:00

shell-templates.ts

Fix agent tabs opening as a bare shell with oh-my-zsh vi-mode (#5315)

2026-06-13 14:16:05 -07:00

synthetic-title-spinner.test.ts

perf: share synthetic title spinner timer (#2596)

2026-05-21 21:52:26 -07:00

synthetic-title-spinner.ts

perf: share synthetic title spinner timer (#2596)

2026-05-21 21:52:26 -07:00

synthetic-title-visibility.test.ts

perf: share synthetic title spinner timer (#2596)

2026-05-21 21:52:26 -07:00

synthetic-title-visibility.ts

perf: share synthetic title spinner timer (#2596)

2026-05-21 21:52:26 -07:00

system-fonts.test.ts

fix: time out system font listing (#3786)

2026-05-30 10:11:48 -07:00

system-fonts.ts

fix: time out system font listing (#3786)

2026-05-30 10:11:48 -07:00

terminal-history.test.ts

Add project Windows runtime selection (#5519)

2026-06-17 16:08:14 -07:00

terminal-history.ts

Add project Windows runtime selection (#5519)

2026-06-17 16:08:14 -07:00

terminal-scrollback-snapshots.ts

Persist terminal scrollback outside session JSON

2026-06-04 01:31:38 -07:00

updater-changelog.test.ts

fix: improve rich card display logic for current and unlisted versions (#634)

2026-04-14 10:25:55 -07:00

updater-changelog.ts

fix: use >= in compareVersions fallback to handle equal/unparseable versions (#635)

2026-04-14 10:33:25 -07:00

updater-events.ts

Track update check attempts and handle stalls (#5904)

2026-06-20 16:39:42 -07:00

updater-fallback.ts

Preserve update nudges during release publishing (#2878)

2026-05-26 20:56:11 -07:00

updater-mac-install.ts

Keep Codex and Claude signed in across Orca restarts (#5639)

2026-06-17 16:20:37 -07:00

updater-nudge.test.ts

Update oxlint and oxfmt

2026-05-30 13:09:17 -07:00

updater-nudge.ts

Update oxlint and oxfmt

2026-05-30 13:09:17 -07:00

updater-prerelease-feed-readiness.test.ts

Fix update checks during release publishing (#2898)

2026-05-27 00:47:01 -07:00

updater-prerelease-feed.test.ts

Fix update checks during release publishing (#2898)

2026-05-27 00:47:01 -07:00

updater-prerelease-feed.ts

Fix update checks during release publishing (#2898)

2026-05-27 00:47:01 -07:00

updater.check-failure.test.ts

ci: shard electron e2e workflow (#2070)

2026-05-15 23:52:37 -07:00

updater.fallback.test.ts

Preserve update nudges during release publishing (#2878)

2026-05-26 20:56:11 -07:00

updater.mac-install.test.ts

Track update check attempts and handle stalls (#5904)

2026-06-20 16:39:42 -07:00

updater.test.ts

Improve Claude usage refresh fallback behavior (#5995)

2026-06-21 13:10:25 -07:00

updater.ts

Track update check attempts and handle stalls (#5904)

2026-06-20 16:39:42 -07:00

usage-worktree-canonicalizer.test.ts

perf: cap usage worktree canonicalization (#4263)

2026-05-31 10:11:51 -07:00

usage-worktree-canonicalizer.ts

perf: cap usage worktree canonicalization (#4263)

2026-05-31 10:11:51 -07:00

usage-worktree-metadata.test.ts

fix: avoid repeated macOS privacy prompts (#1524)

2026-05-06 23:30:03 -07:00

usage-worktree-metadata.ts

fix: address review findings (#2695)

2026-05-23 12:33:49 -07:00

win32-utils.test.ts

Squashed commits (#2485)

2026-05-20 22:09:35 -07:00

win32-utils.ts

perf(windows): fix 60s startup ACL walk and OpenCode streaming freeze, with benchmark harnesses (#5124)

2026-06-10 16:41:22 -04:00

workspace-space-analysis-du-timeout.test.ts

fix: time out workspace space du scan (#3808)

2026-05-30 11:01:09 -07:00

workspace-space-analysis.test.ts

Remove package manager cache cleanup (#2550)

2026-05-21 13:22:37 -07:00

workspace-space-analysis.ts

fix: time out workspace space du scan (#3808)

2026-05-30 11:01:09 -07:00

worktree-create-base-prefetch.ts

Skip broad fetch for PR SHA worktree bases

2026-06-16 14:57:39 -07:00

worktree-create-timing.test.ts

Fix new workspace shortcut terminal focus (#4565)

2026-06-03 12:25:54 -07:00

worktree-create-timing.ts

Fix new workspace shortcut terminal focus (#4565)

2026-06-03 12:25:54 -07:00

worktree-orphan-gitdir-proof.ts

fix: handle dotdot-prefixed worktree child paths (#3644)

2026-05-30 12:53:34 -07:00

worktree-removal-authority.test.ts

Show and Filter Automation-Created Workspaces (#5697)

2026-06-18 13:05:57 -07:00

worktree-removal-safety.test.ts

fix: handle dotdot-prefixed worktree child paths (#3644)

2026-05-30 12:53:34 -07:00

worktree-removal-safety.ts

Show and Filter Automation-Created Workspaces (#5697)

2026-06-18 13:05:57 -07:00

worktree-root-preparation.test.ts

fix: Fix macOS worktree permission scoping (#5407)

2026-06-15 14:54:50 -07:00

worktree-root-preparation.ts

fix: Fix macOS worktree permission scoping (#5407)

2026-06-15 14:54:50 -07:00

wsl-bash-command.test.ts

Make WSL first-class for local agents and provider accounts (#2649)

2026-05-29 16:06:33 -07:00

wsl-bash-command.ts

Make WSL first-class for local agents and provider accounts (#2649)

2026-05-29 16:06:33 -07:00

wsl-env.ts

Make WSL first-class for local agents and provider accounts (#2649)

2026-05-29 16:06:33 -07:00

wsl.test.ts

feat: add WSL support for repos on WSL filesystems (#375)

2026-04-07 21:02:36 -04:00

wsl.ts

Fix WSL agent session history (#6010)

2026-06-21 17:23:42 -07:00