Codex YMT v0.0.2
Codex YMT v0.0.2 is a focused safety and reliability release.
Highlights
- Protects YouTube localization writes with video ETags and an
If-Matchprecondition. - Validates descriptions against YouTube's 5,000 UTF-8 byte limit and rejects
<or>in localized metadata. - Adds a two-phase Google disconnect flow with explicit approval, remote token revocation, and local token cleanup.
- Binds disconnect previews to the exact stored token so a changed connection cannot be revoked by an older confirmation.
- Rejects Web OAuth clients and accepts only a local Desktop OAuth JSON path through MCP.
- Clears an incompatible token when the configured OAuth client changes while preserving tokens for the same client.
- Redacts absolute local paths from JSON read errors.
- Corrects MCP safety annotations for OAuth, local overwrites, YouTube writes, and disconnect operations.
- Expands the offline test suite from 8 to 25 tests.
Breaking change for v0.0.1 users
youtube_configure_oauth no longer accepts client_id or client_secret tool arguments. Provide client_json_path, or set YOUTUBE_CLIENT_ID and YOUTUBE_CLIENT_SECRET in the MCP process environment for headless use.
Update
codex plugin marketplace upgrade codex-ymt
codex plugin add codex-ymt@codex-ymtRestart the desktop app and begin a new task after updating.