Skip to content

feat(sdk)!: move to Codex Security SDK 0.10.0 - #34

Merged
strantalis merged 1 commit into
mainfrom
chore/sdk-0.10.0
Nov 13, 2026
Merged

strantalis merged 1 commit into
mainfrom
chore/sdk-0.10.0

Conversation

@strantalis

Copy link
Copy Markdown
Owner

Moves @openai/codex-security from 0.9.1 to 0.10.0.

  • Resume follows the SDK's rule, not the depth. 0.10.0 resumes Standard scans too, but only a scan it left open (a dropped connection, or OpenCode stopping mid-scan). A scan the provider refused, or that failed, is closed. Resume is now offered on that basis.
  • Failure messages no longer carry the SDK's codex-security scans resume <id> CLI hint.

Checked against the real SDK with a local test gateway, Standard depth:

  • Gateway answers 403: the scan fails, and a resume is rejected with "Resume requires a running scan".
  • Gateway drops the connection: the SDK raises ScanInterruptedError, and a resume reopens the same session and sends the next request.

Not checked: a resume running to completion against a real model.

npm run check passes. npm run test:host could not run on my machine: 0.10.0 refuses a state directory whose parent is group-writable, which the checkout's volume is. CI runs it.

🤖 Generated with Claude Code

https://claude.ai/code/session_016LiHJtDpo3TEPnWZ78vM2X

The SDK now resumes Standard scans as well as Deep ones, but only scans it
left open: a dropped connection or a restart. A refused or failed scan is
closed and cannot resume. Offer Resume on that basis instead of by depth, and
drop the SDK's CLI resume hint from failure messages.

Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016LiHJtDpo3TEPnWZ78vM2X
@strantalis
strantalis merged commit 2937658 into main Nov 13, 2026
12 checks passed
@strantalis
strantalis deleted the chore/sdk-0.10.0 branch November 13, 2026 00:26
@strantalis strantalis mentioned this pull request Nov 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant