## openai/codex-plugin-cc — v1.0.2…v1.0.3

_10 commits._

### Fixes
- **Prevent embedding oversized review diffs** — Fixed an issue where large or malicious code diffs could be embedded in adversarial review requests, which could cause performance problems. The system now checks diff sizes and handles buffer overflow errors gracefully. (bc8fa66)
- **Handle older Codex CLI gracefully** — Fixed an issue where thread naming would fail on older versions of Codex CLI that don't support the thread/name/set feature. The system now gracefully handles this unsupported method while still catching and reporting real errors like authentication or network failures. (4bd783b)
- **Fix environment variables in app server** — Fixed a bug where the app server process wasn't inheriting environment variables from the parent process, which broke integrations that rely on environment variables like DATABRICKS_TOKEN. The fix ensures that when no explicit environment is provided, the child process now inherits the parent's environment variables. (dd335cb)
- **Support Git Bash on Windows** — Fixed shell configuration on Windows to respect the SHELL environment variable, enabling proper support for Git Bash and other shell environments instead of always forcing the default Windows shell. (f17e7f8)
- **Fix review crashes on untracked directories** — The review tool now gracefully skips untracked directories and broken symlinks instead of crashing. This prevents the working-tree review feature from failing when encountering nested directories or broken symbolic links. (594fd1e)

### Backend
- **Release version 1.0.3** — Updated the Codex plugin to version 1.0.3 across all configuration files and added new version management scripts to automate future version bumps. (11a720b)
- **Cancel only targets current Claude session** — When canceling a Codex job without specifying a job ID, the cancel command now only considers active jobs from the current Claude session, ignoring jobs from other sessions. Jobs can still be explicitly canceled by ID even if they belong to a different session. (d216a5f)
- **Isolate task resumption by Claude session** — Tasks can now only be resumed within the same Claude session they were created in. The system now filters available tasks based on the current session ID, preventing tasks from one session from appearing as resume candidates in another session. (40d213d)
- **Codex auth status via app-server** — Changed Codex readiness checks to use app-server authentication status instead of local login status, and added support for reusing existing broker sessions during auth checks. (62c351a)
- **Increase test timing tolerances** — Extended timeouts and delays in background task tests to reduce flakiness caused by timing-sensitive operations. Changes include increasing a task completion delay from 400ms to 5000ms, a status check timeout from 5000ms to 15000ms, and adding a 15000ms timeout to a polling operation. (8e403f9)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/openai/codex-plugin-cc?utm_source=github-action)._