Skip to content

[#141]: Add v0.140.0 compat tests for encrypted credential storage#152

Open
delexw wants to merge 1 commit into
mainfrom
fix-issue-141
Open

[#141]: Add v0.140.0 compat tests for encrypted credential storage#152
delexw wants to merge 1 commit into
mainfrom
fix-issue-141

Conversation

@delexw

@delexw delexw commented Jun 20, 2026

Copy link
Copy Markdown
Contributor

Summary

Codex v0.140.0 (PRs #27504, #27535, #27539, #27541) migrated CLI auth tokens and MCP OAuth credentials from plaintext files to an encrypted secret store, adding the secret_auth_storage_configuration config option.

codex-trace is not affected — it reads only JSONL session files at ~/.codex/sessions/ and never reads credential files, auth token files, or Codex CLI config files from the Codex home directory. The encrypted credential storage change is therefore invisible to the parser; unknown fields in session_meta are silently ignored by the serde_json::Value-based loosely-typed parser.

Changes

Added three compatibility tests to document and regression-guard this behaviour:

  • entry.rs: v0140_all_standard_entry_types_parse_correctly — verifies all standard JSONL entry types from a v0.140.0 session parse without errors
  • entry.rs: v0140_session_meta_with_secret_auth_storage_configuration_does_not_panic — verifies a session_meta carrying the new secret_auth_storage_configuration and mcp_oauth_storage fields is parsed without errors (unknown fields are gracefully ignored)
  • discover.rs: v0140_discover_sessions_with_secret_auth_storage_configuration_in_session_meta — verifies discover_sessions correctly scans v0.140.0 sessions that include auth config fields in session_meta

Test Results

All 264 Rust unit tests pass. All 135 frontend tests pass.

Fixes #141

Codex v0.140.0 (PRs #27504, #27535, #27539, #27541) migrated CLI auth
and MCP OAuth tokens from plaintext files to an encrypted secret store,
adding the `secret_auth_storage_configuration` config option.

codex-trace reads only JSONL session files at ~/.codex/sessions/ and
never reads credential files, auth token files, or Codex CLI config.
The encrypted storage change is therefore invisible to the parser.

Add three tests to document and guard this:
- entry.rs: v0140_all_standard_entry_types_parse_correctly
- entry.rs: v0140_session_meta_with_secret_auth_storage_configuration_does_not_panic
- discover.rs: v0140_discover_sessions_with_secret_auth_storage_configuration_in_session_meta

Fixes #141
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Compat] Codex v0.140.0: CLI auth and MCP OAuth credentials now stored encrypted

1 participant