codex/auth.py

import os

AUTHORIZED_USERS = set(os.environ.get("AUTHORIZED_USERS", "").split(","))

def verify_user(username):
    if username not in AUTHORIZED_USERS:
        raise PermissionError("Unauthorized user")
    return True