Tools
Switching accounts in Codex could reuse the previous account's WebSocket connection and response state
PR #44489, merged 2026-09-09, found that a Responses WebSocket session and its incremental response state survived an account switch, both within a turn and between turns. The fix tracks auth ownership on cached sessions and forces a reconnect when it changes, clearing incremental state and the `x-codex-turn-state` header so the next request sends full input without a stale `previous_response_id` or stale routing state. Prewarm requests now check ownership before building request metadata.
Source
↳ Follow the thread