Feature request: allow explicitly approved account-tile selection without credential entry

What version of the Codex App are you using?

Desktop app version was not available through the local package query. Bundled Computer Use plugin: 26.803.41515.

What subscription do you have?

Not included; the request is about the Computer Use interaction policy rather than entitlement.

What platform is your computer?

Windows 10 Home 22H2, build 19045, 64-bit.

What feature would you like to see?

Allow Computer Use to select a known account tile in an operating-system or browser authentication account picker when the user explicitly names and approves that exact account in the current conversation.

Keep the existing hard prohibition on:

• entering or reading passwords
• entering or reading MFA/OTP/device codes
• approving OAuth or tenant consent
• interacting with password managers
• bypassing authentication or security warnings

Problem

A workflow launched an official CLI sign-in and Windows displayed an account picker containing three already-signed-in accounts. The user explicitly identified which work account to select and authorized Computer Use, but the agent had to stop because all authentication-dialog interaction is prohibited.

The user still had to perform a low-risk account-tile click manually even though:

• no password or secret needed to be entered
• no MFA or OTP needed to be entered
• no consent screen was being approved
• the exact account had been named by the user
• selecting the wrong personal or sandbox account was the larger practical risk

This makes otherwise automated local setup frustrating, especially on machines with deliberate work, test, and personal account separation.

Desired behavior

Treat account-tile selection as a separately permissioned action rather than treating it identically to credential entry.

A safe implementation could require all of the following:

1. The user names the exact account in their own current-turn instruction.
2. Computer Use shows an action-time confirmation identifying the account to be selected.
3. The tool clicks only the matching account tile.
4. It stops immediately if the next screen requests a password, MFA/OTP/device code, consent, permissions, or another security decision.
5. The action is shown in the Computer Use audit trail.
6. If the account cannot be matched exactly, it fails closed.

Account addresses, tenant names, and repository details from the original workflow are intentionally omitted.

Reproduction

1. Sign into Windows with multiple Microsoft identities available.
2. Start a workflow that opens an official Microsoft sign-in account picker.
3. Explicitly tell Codex which already-signed-in account tile to select.
4. Give Computer Use permission to operate the UI.
5. Observe that the agent must still refuse to click the account tile because the entire authentication dialog is prohibited.

Expected behavior

With exact user authorization and an action-time confirmation, Computer Use can select the named account tile but cannot enter credentials, handle MFA/OTP, approve consent, or continue through any security-sensitive prompt.