agentshim 0.6.2__tar.gz → 0.6.3__tar.gz

{agentshim-0.6.2 → agentshim-0.6.3}/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.6.3 (2026-09-26)
+
+- Narrow Codex `auth_files` to `.codex/auth.json`. User `config.toml` is not
+  authentication state and need not be copied or mounted into an isolated
+  agent process; per-turn settings continue to use CLI config overrides.
+
 ## 0.6.2 (2026-09-26)
 
 - Add optional positive finite `tool_timeout_s` to stdio and HTTP MCP server

{agentshim-0.6.2 → agentshim-0.6.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: agentshim
-Version: 0.6.2
+Version: 0.6.3
 Summary: Provider-agnostic coding-agent CLI shims
 Requires-Python: >=3.10
 Provides-Extra: test

{agentshim-0.6.2 → agentshim-0.6.3}/agentshim/__init__.py

@@ -84,7 +84,7 @@ from .providers.copilot import CopilotProvider
 from .providers.gemini import GeminiProvider
 from .providers.opencode import OpencodeProvider
 
-__version__ = "0.6.2"
+__version__ = "0.6.3"
 
 __all__ = [
     "AgentEvent",

{agentshim-0.6.2 → agentshim-0.6.3}/agentshim/providers/codex/provider.py

@@ -76,7 +76,10 @@ PROFILE = ProviderProfile(
     # "Layer $CODEX_HOME/<name>.config.toml on top of the base user config";
     # "auth still uses CODEX_HOME").
     state_root_env="CODEX_HOME",
-    auth_files=(".codex/auth.json", ".codex/config.toml"),
+    # Authentication is self-contained in auth.json.  config.toml is user
+    # policy and preferences, so consumers that copy or mount auth state must
+    # not needlessly expose it to an agent process.
+    auth_files=(".codex/auth.json",),
     # CLI_FLAGS: Codex takes MCP servers as --config overrides, never a file.
     mcp_config_file=None,
 )

{agentshim-0.6.2 → agentshim-0.6.3}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "agentshim"
-version = "0.6.2"
+version = "0.6.3"
 description = "Provider-agnostic coding-agent CLI shims"
 readme = "README.md"
 requires-python = ">=3.10"