Skip to content

Codex YMT v0.0.2

Choose a tag to compare

@MelnixDev MelnixDev released this 17 Jul 21:54

Codex YMT v0.0.2 is a focused safety and reliability release.

Highlights

  • Protects YouTube localization writes with video ETags and an If-Match precondition.
  • Validates descriptions against YouTube's 5,000 UTF-8 byte limit and rejects < or > in localized metadata.
  • Adds a two-phase Google disconnect flow with explicit approval, remote token revocation, and local token cleanup.
  • Binds disconnect previews to the exact stored token so a changed connection cannot be revoked by an older confirmation.
  • Rejects Web OAuth clients and accepts only a local Desktop OAuth JSON path through MCP.
  • Clears an incompatible token when the configured OAuth client changes while preserving tokens for the same client.
  • Redacts absolute local paths from JSON read errors.
  • Corrects MCP safety annotations for OAuth, local overwrites, YouTube writes, and disconnect operations.
  • Expands the offline test suite from 8 to 25 tests.

Breaking change for v0.0.1 users

youtube_configure_oauth no longer accepts client_id or client_secret tool arguments. Provide client_json_path, or set YOUTUBE_CLIENT_ID and YOUTUBE_CLIENT_SECRET in the MCP process environment for headless use.

Update

codex plugin marketplace upgrade codex-ymt
codex plugin add codex-ymt@codex-ymt

Restart the desktop app and begin a new task after updating.