Skip to content

fix: prevent codex-backend from stealing originator#22533

Merged
owenlin0 merged 1 commit into
mainfrom
owen/prevent_codex_backend_from_stealing_originator
May 13, 2026
Merged

fix: prevent codex-backend from stealing originator#22533
owenlin0 merged 1 commit into
mainfrom
owen/prevent_codex_backend_from_stealing_originator

Conversation

@owenlin0
Copy link
Copy Markdown
Collaborator

@owenlin0 owenlin0 commented May 13, 2026

Why

Remote control starts by letting codex-backend initialize against the app-server as an infrastructure health/proxy client before the real remote client connects. App-server initialization also sets the process-wide originator from client_info.name, so codex-backend could become the sticky originator for later model/API requests even after the real client initialized.

What changed

  • Treat codex-backend as a non-originating initialize client, alongside the existing codex_app_server_daemon probe client.
  • Preserve normal per-connection initialize behavior, including session metadata and initialize analytics.
  • Add regression coverage that verifies codex-backend initialize does not replace the default originator.

Testing

  • cargo test -p codex-app-server --test all initialize_codex_backend_does_not_override_originator

@owenlin0 owenlin0 force-pushed the owen/prevent_codex_backend_from_stealing_originator branch from f942829 to a590d76 Compare May 13, 2026 18:33
@owenlin0 owenlin0 force-pushed the owen/prevent_codex_backend_from_stealing_originator branch from a590d76 to 3d1ae5f Compare May 13, 2026 18:35
@owenlin0 owenlin0 marked this pull request as ready for review May 13, 2026 18:39
@owenlin0 owenlin0 merged commit fb7cfc8 into main May 13, 2026
27 checks passed
@owenlin0 owenlin0 deleted the owen/prevent_codex_backend_from_stealing_originator branch May 13, 2026 19:38
@github-actions github-actions Bot locked and limited conversation to collaborators May 13, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants