Add codex-app-server-byo-auth research topic

codex-app-server-byo-auth/sources.md

@@ -0,0 +1,24 @@
+# Sources — Codex App Server: Embeddable Agent Protocol & BYO Auth
+
+> Part of [[codex-app-server-byo-auth/index|Codex App Server — Embeddable Agent Protocol & BYO Auth]]
+
+## Primary
+
+- [Codex App Server docs (learn.chatgpt.com)](https://learn.chatgpt.com/docs/app-server) — the authoritative protocol documentation: transports, message schema, lifecycle, core primitives, auth modes, account/rate-limit/usage APIs
+- [Codex GitHub repo — app-server source](https://github.com/openai/codex/tree/main/codex-rs/app-server) — open-source implementation (`openai/codex/codex-rs/app-server`)
+- [Codex CLI customization docs](https://learn.chatgpt.com/docs/guide/cli-customization) — related client-side config
+- [Codex logs reference (ChatGPT admin API)](https://chatgpt.com/admin/api-reference/Logs:-Codex) — Compliance Logs Platform context for `clientInfo.name`
+
+## Protocol / auth reference (verified 2026-08-10)
+
+- Transports: `stdio` (default, JSONL), `websocket` (`ws://IP:PORT`, experimental + unsupported for prod), `unix://`, `off`
+- Auth modes (`account/login/start`): `chatgpt` (browser flow), `chatgptDeviceCode` (device-code flow), `chatgptAuthTokens` (experimental — host-owned tokens), `apiKey`, plus Bedrock (`amazonBedrock`)
+- Core methods: `initialize`, `thread/start|resume|fork|read|list|archive|delete`, `turn/start|steer|interrupt`, `command/exec`, `review/start`, `account/read`, `account/rateLimits/read`, `account/usage/read`, `account/sendAddCreditsNudgeEmail`
+- Bindings: `codex app-server generate-ts` and `generate-json-schema` produce exact per-version schemas
+
+## Context / related
+
+- Workspace note: `RESEARCH/CODEX_APP_SERVER.md` — first-pass research with the full caveat set
+- Vault topic: `durable-agent-runtime` — harness libraries family (nanocodex, Codex, pi), code-as-tool-interface
+- OpenClaw — community tool that routes users' ChatGPT subscriptions through a Codex-shaped client (BYO-ChatGPT precedent)
+- Anthropic's ban of the Claude-equivalent BYO-subscription pattern — the gray-area precedent