feat(server): add least-privilege GET /v1/catalog for remote Codex clients - #2979

Merged

lidge-jun merged 6 commits into

devfrom

codex/wp8-least-privilege-catalog

Aug 30, 2026

Commits on Aug 30, 2026

feat(server): add least-privilege GET/HEAD /v1/catalog for remote clients
lidge-jun
committed
2eb22f9
test(server): cover the /v1/catalog data-plane contract and plane separation
lidge-jun
committed
1d24cc7
test(server): bind non-loopback so the /v1/catalog auth assertions are real
lidge-jun
committed
9addd52
docs: point remote catalog fetch at the data-plane /v1/catalog route
lidge-jun
committed
51fb439
fix(server): scope the catalog size ceiling to the remote route
lidge-jun
committed
2afd769
docs: state the real catalog credential in the fr and zh-tw guides
lidge-jun
committed
6cc261d