fix(codex): disable unused codex_app.github connector

Set [apps.github] enabled = false in the managed Codex config so the
built-in codex_app.github connector is turned off. It is redundant inside
docker-git containers (repo clone + synced GitHub token + managed git
wrapper already provide GitHub access) and only adds noise.

Applied to both the defaultCodexConfig used by auth sync and the
entrypoint heredoc, with matching app-package mirrors and a test.

Fixes #410

Author: konard

.changeset/disable-codex-app-github.md

@@ -0,0 +1,13 @@
+---
+"@prover-coder-ai/docker-git": patch
+---
+
+Disable the unused `codex_app.github` connector in the managed Codex config.
+
+The generated `config.toml` enables `apps`, which surfaces the built-in
+`codex_app.github` connector. It is redundant inside docker-git because
+containers already get GitHub access through the cloned repository, the synced
+GitHub token, and the managed git wrapper, so the connector only adds noise.
+The default Codex config now sets `[apps.github] enabled = false` (both the
+`defaultCodexConfig` written by auth sync and the entrypoint heredoc), turning
+the connector off while keeping the rest of the `apps` feature intact.

packages/app/src/lib/core/templates-entrypoint/codex.ts

@@ -94,6 +94,10 @@ multi_agent = true
 apps = true
 shell_tool = true
 
+[apps.github]
+# docker-git: disable the unused codex_app.github connector (issue #410)
+enabled = false
+
 [profiles.longcontx]
 model = "gpt-5.5"
 model_context_window = 1050000

packages/app/src/lib/usecases/auth-sync-helpers.ts

@@ -57,6 +57,10 @@ export const defaultCodexConfig = [
   "apps = true",
   "shell_tool = true",
   "",
+  "[apps.github]",
+  "# docker-git: disable the unused codex_app.github connector (issue #410)",
+  "enabled = false",
+  "",
   "[profiles.longcontx]",
   "model = \"gpt-5.5\"",
   "model_context_window = 1050000",

packages/lib/src/core/templates-entrypoint/codex.ts

@@ -93,6 +93,10 @@ multi_agent = true
 apps = true
 shell_tool = true
 
+[apps.github]
+# docker-git: disable the unused codex_app.github connector (issue #410)
+enabled = false
+
 [profiles.longcontx]
 model = "gpt-5.5"
 model_context_window = 1050000

packages/lib/src/usecases/auth-sync-helpers.ts

@@ -56,6 +56,10 @@ export const defaultCodexConfig = [
   "apps = true",
   "shell_tool = true",
   "",
+  "[apps.github]",
+  "# docker-git: disable the unused codex_app.github connector (issue #410)",
+  "enabled = false",
+  "",
   "[profiles.longcontx]",
   "model = \"gpt-5.5\"",
   "model_context_window = 1050000",

packages/lib/tests/usecases/auth-sync.test.ts

@@ -102,6 +102,9 @@ describe("syncGithubAuthKeys", () => {
         expect(configText).toContain("model_auto_compact_token_limit = 945000")
         expect(configText).toContain("model_reasoning_effort = \"xhigh\"")
         expect(configText).toContain("plan_mode_reasoning_effort = \"xhigh\"")
+        // issue #410: the unused codex_app.github connector must be disabled
+        expect(configText).toContain("[apps.github]")
+        expect(configText).toContain("enabled = false")
       })
     ).pipe(Effect.provide(NodeContext.layer)))