Extract codex-auth from codex-core

[aibrahim-oai]

Summary

• extract auth storage, token data, and auth environment telemetry into codex-auth
• slim codex-core auth modules down to wrappers over the new crate
• update login to consume the extracted auth crate

Testing

• cargo test -p codex-auth
• cargo test -p codex-login --no-run
• cargo test -p codex-core --lib --no-run

[aibrahim-oai]

@codex review this

[chatgpt-codex-connector]

💡 Codex Review

codex/codex-rs/core/src/auth.rs

Line 1274 in 184fb02

AuthDotJson::from_external_tokens(&refreshed).map_err(RefreshTokenError::Transient)?;

Restore external-token constructor call

AuthDotJson::from_external_tokens is still called here after extraction, but codex-auth's AuthDotJson no longer defines that associated function (it only has from_external_access_token). This introduces a compile-time failure (E0599) in codex-core, blocking builds and the external-auth refresh path.

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".