Commit Graph

250 Commits

Author SHA1 Message Date
Peter Steinberger
0e586bb48a fix(agents): improve fallback failure observability 2026-04-27 13:10:12 +01:00
Peter Steinberger
7f3f108521 refactor(config): migrate plugin config access 2026-04-27 12:35:58 +01:00
Roman Godz
150f3e472b fix: sync Claude CLI OAuth credentials (#70902) (thanks @starvex) 2026-04-25 17:07:27 +05:30
Gforce10-design
5a202f6f90 fix(auth): bootstrap codex cli credential without clobbering local (#71310)
* fix(auth): bootstrap codex cli credential without clobbering local

readCodexCliCredentialsCached was imported but never registered in
EXTERNAL_CLI_SYNC_PROVIDERS, so overlayExternalAuthProfiles could not
seed openai-codex:default on fresh agents and runtime surfaced
"No API key found for provider openai-codex" even after a successful
codex login.

Register the provider with a new bootstrapOnly flag. Providers flagged
bootstrapOnly are adopted only to fill an empty slot: the overlay skips
them when a local OAuth credential already exists for the profile, and
readExternalCliBootstrapCredential returns null so the refresh path
never replaces the locally stored canonical refresh token with stale
CLI state. Minimax keeps its existing replace-on-expiry behavior.

* test(auth): cover codex cli bootstrap

---------

Co-authored-by: sudol <sudol@A8Max.localdomain>
Co-authored-by: Peter Steinberger <steipete@gmail.com>
2026-04-25 01:50:01 +01:00
Peter Steinberger
320d52a23e test: narrow oauth lock timeout coverage 2026-04-24 11:43:22 +01:00
EVA
40be5ad581 fix: harden GPT-5 runtime paths
Co-authored-by: EVA <100yenadmin@users.noreply.github.com>
2026-04-24 08:55:52 +01:00
Peter Steinberger
0a3da5cd8a perf: slim auth profile test imports 2026-04-24 08:45:26 +01:00
Peter Steinberger
4e4aeacae4 perf: slim hot test imports 2026-04-24 08:13:51 +01:00
Peter Steinberger
02a8c13501 fix(codex): stop materializing auth bridges 2026-04-23 22:23:21 +01:00
Peter Steinberger
596b88986d chore: apply core lint cleanups 2026-04-23 05:30:49 +01:00
Peter Steinberger
9937452405 build: enable more zero-baseline oxlint rules 2026-04-23 05:03:58 +01:00
Peter Steinberger
1e8564cb13 fix(auth-profiles): repair stale codex oauth profiles 2026-04-23 04:03:47 +01:00
Gustavo Madeira Santana
24db09a19b fix(cli): keep channel status checks off plugin runtimes (#69479)
Merged via squash.

Prepared head SHA: 63f6e416a9
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
2026-04-21 13:53:08 -04:00
Peter Steinberger
510fe8b95d perf(test): speed up reply trigger hotspots 2026-04-20 14:14:55 +01:00
Peter Steinberger
57326feb8d test: share oauth mock setup 2026-04-18 23:48:26 +01:00
Peter Steinberger
7bc3019691 test: share oauth workspace helpers 2026-04-18 23:32:28 +01:00
Peter Steinberger
a4a34edd21 test: reuse codex refresh helpers 2026-04-18 22:52:32 +01:00
Peter Steinberger
f48c91ac2f test: share oauth fuzz utilities 2026-04-18 22:49:54 +01:00
Peter Steinberger
e89e214516 test: share oauth test helpers 2026-04-18 22:46:49 +01:00
Peter Steinberger
f60c3bf6e0 test: fix oauth rebase conflict 2026-04-18 21:44:27 +01:00
Peter Steinberger
46d6f500f3 test: reduce oauth concurrency fixture fanout 2026-04-18 21:44:27 +01:00
Peter Steinberger
c6784493fc test: split oauth effective credential policy 2026-04-18 21:44:27 +01:00
Peter Steinberger
4db3c5145f test: trim oauth adoption branch coverage 2026-04-18 21:44:27 +01:00
Peter Steinberger
cc8f4e98a6 test: split oauth mirror policy coverage 2026-04-18 21:44:27 +01:00
Peter Steinberger
eed0a93c59 test: narrow auth usage store mock 2026-04-18 21:44:27 +01:00
Peter Steinberger
2fc429dfbf fix: keep codex oauth bridge extension-owned (#68284) (thanks @vincentkoc) 2026-04-18 21:27:27 +01:00
Vincent Koc
4a4f52b097 fix(auth): restore codex oauth error and resume handling 2026-04-18 21:27:27 +01:00
Vincent Koc
a018257487 fix(auth): harden codex oauth bridge security 2026-04-18 21:27:27 +01:00
Vincent Koc
f6921fd733 refactor(auth): break oauth helper import cycle 2026-04-18 21:27:27 +01:00
Vincent Koc
20debfab90 test(auth): align codex bootstrap expectations 2026-04-18 21:27:27 +01:00
Vincent Koc
78288e37ed fix(auth): close codex review gaps 2026-04-18 21:27:27 +01:00
Vincent Koc
859eb06662 refactor(auth): route codex runtimes through canonical oauth 2026-04-18 21:27:27 +01:00
Vincent Koc
f98e98ab66 fix(auth): keep oauth fallback recovery consistent 2026-04-18 21:27:27 +01:00
Vincent Koc
d97d5c04f0 fix(auth): harden oauth bootstrap identity checks 2026-04-18 21:27:27 +01:00
Vincent Koc
6f450c2d1f refactor(auth): reuse shared oauth policy helpers 2026-04-18 21:27:27 +01:00
Vincent Koc
5f2e77a6e1 refactor(auth): centralize oauth lifecycle manager 2026-04-18 21:27:27 +01:00
Peter Steinberger
93a6c93865 test: reuse oauth lock timeout setup 2026-04-18 20:57:17 +01:00
Peter Steinberger
b928f360a1 test: reduce auth and subagent control hotspots 2026-04-18 20:47:47 +01:00
Peter Steinberger
0c245c35c5 test: trim auth and skill install setup 2026-04-18 20:37:04 +01:00
Peter Steinberger
ab1e091e39 test: reduce agents test hotspots 2026-04-18 20:31:02 +01:00
Peter Steinberger
f168a62068 test: speed up auth profile session override 2026-04-18 19:57:45 +01:00
Peter Steinberger
aa73df571d perf: narrow auth test mocks 2026-04-18 16:23:00 +01:00
Val Alexander
f45bc09206 [codex] fix(auth): harden OAuth refresh and Codex CLI bootstrap flows (#68396)
* Harden OAuth refresh and Codex CLI bootstrap flows

- Treat near-expiry OAuth credentials as unusable for bootstrap and refresh
- Add clearer timeout and callback validation handling for OpenAI Codex OAuth
- Tighten file lock retry behavior for stale OAuth refresh contention

* fix(auth): address PR review threads

* fix(auth): adopt fresher imported refresh tokens

* test(auth): align oauth expiry fixtures with refresh margin

* fix(auth): tighten Codex OAuth bootstrap and local fallback

* Keep explicit local auth over CLI bootstrap

- Preserve existing non-OAuth local profiles during external CLI OAuth sync
- Add regression coverage for OpenAI Codex and generic external OAuth overlays

* fix(auth): distinguish oauth lock timeout sources

* fix(auth): reject cross-account external oauth bootstrap

* fix(auth): narrow refresh contention classification
2026-04-18 01:02:29 -05:00
Vincent Koc
d834d270df fix(test): preserve new module exports in mocks 2026-04-17 14:28:16 -07:00
Vincent Koc
30895f7135 fix(auth): restore cli bootstrap split on rebase 2026-04-17 14:19:45 -07:00
Vincent Koc
5edf876a5e test(auth): add codex oauth red-blue coverage 2026-04-17 14:14:03 -07:00
Vincent Koc
1e7c7dd02f refactor(auth): polish external oauth bootstrap flow 2026-04-17 14:11:41 -07:00
Vincent Koc
f61712437f refactor(auth): tighten external oauth bootstrap policy 2026-04-17 14:05:26 -07:00
Peter Steinberger
8dde0acbae test: trim agent test hot spots 2026-04-17 21:53:08 +01:00
Vincent Koc
ff55cd5c16 refactor(auth): drop legacy external cli oauth sync path 2026-04-17 13:52:37 -07:00