diff --git a/.devcontainer/docker-compose.yml b/.devcontainer/docker-compose.yml
index faa2052..9d4f306 100644
--- a/.devcontainer/docker-compose.yml
+++ b/.devcontainer/docker-compose.yml
@@ -8,15 +8,12 @@ services:
     tty: true
     volumes:
       - ..:/workspace:cached
-      - docextractor-codex:${REMOTE_HOME:-/root}/.codex
-      - ${USERPROFILE}/.codex/auth.json:${REMOTE_HOME:-/root}/.codex/auth.json:ro
+      # Project-scoped Codex state: one login per project, isolated history.
+      - ./.codex:${REMOTE_HOME:-/root}/.codex
       - ${USERPROFILE}/.pypirc:${REMOTE_HOME:-/root}/.pypirc:ro
     environment:
       PIP_INDEX_URL: ${PIP_INDEX_URL}
       PIP_ROOT_USER_ACTION: ${PIP_ROOT_USER_ACTION}
       WORKSPACE_DIR: ${WORKSPACE_DIR}
       VENV_PATH: ${VENV_PATH}
-      REQUIREMENTS_FILE: ${REQUIREMENTS_FILE}
-
-volumes:
-  docextractor-codex:
\ No newline at end of file
+      REQUIREMENTS_FILE: ${REQUIREMENTS_FILE}
\ No newline at end of file
diff --git a/.gitignore b/.gitignore
index 28701c4..b9fd710 100644
--- a/.gitignore
+++ b/.gitignore
@@ -230,3 +230,5 @@ __marimo__/
 
 # Track devcontainer version source of truth
 !.devcontainer/.env
+
+.devcontainer/.codex