Repository navigation
sdk: ✨ Add Codex bypass and isolate Claude API auth - #12
Merged
Merged
Conversation
yasyf
changed the title
yasyf
marked this pull request as ready for review
October 5, 2026 06:17
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Claude runs with
api_auth=Truestill seeded isolated homes from stored account and OAuth sources. Thread that existing choice through the Rust core and the Python, Go, and Rust hosts so API-only isolation skips stored account, credential-file, and Keychain sources. Python keeps API and non-API configuration homes separate.Also expose an explicit Codex approval and sandbox bypass option across all three SDKs, with the Rust planner selecting
--dangerously-bypass-approvals-and-sandboxwhen requested. The default stays false. Python rejects combining sandbox and bypass; Go and Rust retain bypass precedence.The candidate includes conformance vectors, the corrected wire expectation, and a negative-reader fixture for API isolation. All ten CI jobs, documentation, and Guides passed on these exact bytes. Independent security review is pending. The publisher ran no local builds, generator, or tests. This remains a draft; merge and release require root approval after validation. No runtime authentication or installation success is claimed.