# Generic OAuth connection settings. Only Codex is implemented for now.
codex:
  enabled: true

  # Empty means auto-discover CODEX_HOME/auth.json, ~/.codex/auth.json,
  # CHATGPT_LOCAL_HOME/auth.json, then ~/.chatgpt-local/auth.json.
  auth_file_path: ""

  issuer: "https://auth.openai.com"
  token_url: "https://auth.openai.com/oauth/token"
  client_id: "app_EMoamEEZ73f0CkXaXp7hrann"
  scopes:
    - openid
    - profile
    - email
    - offline_access
    - api.connectors.read
    - api.connectors.invoke

  open_browser_from_server: false
  forced_workspace_id: ""

  upstream_base_url: "https://chatgpt.com/backend-api/codex"
  codex_version: ""
  models: []
  request_timeout_seconds: 120

  # The OpenAI-compatible wrapper is mounted at /oauth/codex/v1.
  # It is loopback-only by default and does not emit CORS headers.
  proxy_base_path: "/oauth/codex"
  callback_path: "/auth/callback"
  require_proxy_token: false
  proxy_token: ""
