Commit Graph

278 Commits

Author SHA1 Message Date
Peter Steinberger
a571fcf041 test: tighten auth profile assertions 2026-05-08 15:58:11 +01:00
Peter Steinberger
1b9986952c test: tighten auth profile assertions 2026-05-08 14:47:55 +01:00
Peter Steinberger
52b0d14825 test: clarify sandbox auth assertions 2026-05-08 13:10:00 +01:00
pashpashpash
02fe0d8978 Keep OpenAI Codex migrations on automatic runtime routing (#79238)
* fix: keep migrated openai codex routes automatic

* scope runtime policy to providers and models

* fix runtime policy surfaces

* fix ci runtime policy checks

* fix doctor stale session runtime pins
2026-05-08 16:05:35 +09:00
Peter Steinberger
9ef37d1907 test: tighten assertions and harness coverage 2026-05-08 05:28:12 +01:00
Peter Steinberger
6ce1c98b61 fix: normalize auth profile inline secrets 2026-05-07 13:46:46 +01:00
pashpashpash
1c33990108 Route OpenAI agents through Codex by default (#78899)
* route openai agent runs through codex

* fix: load codex plugin for implicit openai runtime

* fix: preserve explicit OpenAI PI Codex auth routing

* fix: show codex auth for openai model listing

* fix: map codex auth into configured openai list rows

* fix: preserve explicit openai pi auth routes

* docs: keep openai model route examples canonical

* fix: clean openai codex test fixtures

* fix: scope codex auth status fallback

* fix: repair current ci boundary drift
2026-05-07 19:46:49 +09:00
Peter Steinberger
8e17910191 fix: treat aws sdk auth profiles as config metadata 2026-05-07 10:24:19 +01:00
Peter Steinberger
2e78fc57af fix: accept aws-sdk auth profiles 2026-05-07 08:09:55 +01:00
Peter Steinberger
35da7d2c99 refactor: remove legacy agent dir resolver 2026-05-05 20:07:49 +01:00
Val Alexander
626e078863 fix: refresh stale codex auth profile routing
Summary:
- Promotes fresh Codex OAuth relogin profiles ahead of stale per-agent auth order entries.
- Repairs invalidated per-agent Codex order and session overrides toward healthy relogin profiles.
- Adds focused regression coverage for auth order, invalidated profile repair, and session override re-resolution.

Verification:
- pnpm test src/agents/auth-profiles/profiles.test.ts src/agents/auth-profiles.ensureauthprofilestore.test.ts src/agents/auth-profiles/session-override.test.ts src/commands/models/auth.test.ts -- --reporter=verbose
- pnpm exec oxfmt --check --threads=1 CHANGELOG.md src/agents/auth-profiles.ensureauthprofilestore.test.ts src/agents/auth-profiles/persisted.ts src/agents/auth-profiles/profiles.test.ts src/agents/auth-profiles/profiles.ts src/agents/auth-profiles/session-override.test.ts src/agents/auth-profiles/session-override.ts src/commands/models/auth.test.ts src/commands/models/auth.ts
- git diff --check origin/main...HEAD
- pnpm check:changed via Blacksmith Testbox tbx_01kqscwvkywnt72qx1t8a07tp8
- GitHub CI on 1a6f93a372, with checks-node-core-runtime-infra-state rerun passing after an unrelated stale-lock timing failure
2026-05-04 06:56:02 -05:00
Peter Steinberger
61fc62ade7 fix(auth): avoid structuredClone for auth profile stores 2026-05-02 14:23:51 +01:00
Peter Steinberger
59fb9e5ca7 refactor: unify lazy import loaders 2026-05-02 10:55:59 +01:00
Peter Steinberger
5acfc89175 refactor: trim internal helper exports 2026-05-02 07:18:59 +01:00
Peter Steinberger
bc42952c31 refactor: hide acp auth internals 2026-05-02 06:56:40 +01:00
Peter Steinberger
e2a339027f refactor: keep auth profile helpers internal 2026-05-02 06:48:31 +01:00
Peter Steinberger
cd398a543d fix: restore agent tool prep typing 2026-05-02 06:35:29 +01:00
Shakker
854323a124 fix: reuse provider auth hook lookup context 2026-05-02 06:21:08 +01:00
Shakker
34b17c82da fix: keep oauth refresh on persisted auth stores 2026-05-02 06:21:08 +01:00
Peter Steinberger
90419df663 [codex] Make external CLI credential discovery explicit (#75209)
* refactor(auth): make external CLI discovery explicit

* test(auth): update external cli discovery mocks

* test(auth): cover scoped external cli auth mocks

* [codex] Make external CLI credential discovery explicit

---------

Co-authored-by: clawsweeper-repair <clawsweeper-repair@users.noreply.github.com>
2026-04-30 20:32:55 +00:00
Peter Steinberger
581fbea1d6 fix(auth): scope external CLI credential discovery 2026-04-30 19:38:18 +01:00
keshavbotagent
388019f5b6 fix: preserve OpenAI Codex OAuth transport (#75111)
Preserve the existing wrapped OpenAI Codex stream so PI OAuth bearer injection reaches ChatGPT/Codex Responses, and scope native Codex payload sanitization to the ChatGPT backend.\n\nThanks @keshavbotagent.
2026-04-30 18:00:12 +01:00
Peter Steinberger
6fcddbbd96 fix(auth): keep newer agent oauth credentials 2026-04-29 15:11:40 +01:00
Peter Steinberger
d1b2d81752 fix: send OpenClaw attribution to OpenAI 2026-04-29 13:54:07 +01:00
Peter Steinberger
f79553bef6 fix(auth): scope external CLI auth status overlays (#74156)
* fix(auth): scope external CLI auth status overlays

* fix: pass external auth config to overlays

* fix(auth): keep no-prompt CLI reads file-only

* docs: update clawsweeper app wording
2026-04-29 12:23:50 +01:00
Peter Steinberger
e6cd90e3fd fix(agents): keep OAuth auth read-through 2026-04-29 11:54:28 +01:00
Peter Steinberger
13757465ba fix(agents): scope external CLI auth discovery 2026-04-29 07:52:13 +01:00
Peter Steinberger
0bc8b9a95a test: add shared OpenClaw test-state harness 2026-04-28 10:52:47 +01:00
Peter Steinberger
0e586bb48a fix(agents): improve fallback failure observability 2026-04-27 13:10:12 +01:00
Peter Steinberger
7f3f108521 refactor(config): migrate plugin config access 2026-04-27 12:35:58 +01:00
Roman Godz
150f3e472b fix: sync Claude CLI OAuth credentials (#70902) (thanks @starvex) 2026-04-25 17:07:27 +05:30
Gforce10-design
5a202f6f90 fix(auth): bootstrap codex cli credential without clobbering local (#71310)
* fix(auth): bootstrap codex cli credential without clobbering local

readCodexCliCredentialsCached was imported but never registered in
EXTERNAL_CLI_SYNC_PROVIDERS, so overlayExternalAuthProfiles could not
seed openai-codex:default on fresh agents and runtime surfaced
"No API key found for provider openai-codex" even after a successful
codex login.

Register the provider with a new bootstrapOnly flag. Providers flagged
bootstrapOnly are adopted only to fill an empty slot: the overlay skips
them when a local OAuth credential already exists for the profile, and
readExternalCliBootstrapCredential returns null so the refresh path
never replaces the locally stored canonical refresh token with stale
CLI state. Minimax keeps its existing replace-on-expiry behavior.

* test(auth): cover codex cli bootstrap

---------

Co-authored-by: sudol <sudol@A8Max.localdomain>
Co-authored-by: Peter Steinberger <steipete@gmail.com>
2026-04-25 01:50:01 +01:00
Peter Steinberger
320d52a23e test: narrow oauth lock timeout coverage 2026-04-24 11:43:22 +01:00
EVA
40be5ad581 fix: harden GPT-5 runtime paths
Co-authored-by: EVA <100yenadmin@users.noreply.github.com>
2026-04-24 08:55:52 +01:00
Peter Steinberger
0a3da5cd8a perf: slim auth profile test imports 2026-04-24 08:45:26 +01:00
Peter Steinberger
4e4aeacae4 perf: slim hot test imports 2026-04-24 08:13:51 +01:00
Peter Steinberger
02a8c13501 fix(codex): stop materializing auth bridges 2026-04-23 22:23:21 +01:00
Peter Steinberger
596b88986d chore: apply core lint cleanups 2026-04-23 05:30:49 +01:00
Peter Steinberger
9937452405 build: enable more zero-baseline oxlint rules 2026-04-23 05:03:58 +01:00
Peter Steinberger
1e8564cb13 fix(auth-profiles): repair stale codex oauth profiles 2026-04-23 04:03:47 +01:00
Gustavo Madeira Santana
24db09a19b fix(cli): keep channel status checks off plugin runtimes (#69479)
Merged via squash.

Prepared head SHA: 63f6e416a9
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
2026-04-21 13:53:08 -04:00
Peter Steinberger
510fe8b95d perf(test): speed up reply trigger hotspots 2026-04-20 14:14:55 +01:00
Peter Steinberger
57326feb8d test: share oauth mock setup 2026-04-18 23:48:26 +01:00
Peter Steinberger
7bc3019691 test: share oauth workspace helpers 2026-04-18 23:32:28 +01:00
Peter Steinberger
a4a34edd21 test: reuse codex refresh helpers 2026-04-18 22:52:32 +01:00
Peter Steinberger
f48c91ac2f test: share oauth fuzz utilities 2026-04-18 22:49:54 +01:00
Peter Steinberger
e89e214516 test: share oauth test helpers 2026-04-18 22:46:49 +01:00
Peter Steinberger
f60c3bf6e0 test: fix oauth rebase conflict 2026-04-18 21:44:27 +01:00
Peter Steinberger
46d6f500f3 test: reduce oauth concurrency fixture fanout 2026-04-18 21:44:27 +01:00
Peter Steinberger
c6784493fc test: split oauth effective credential policy 2026-04-18 21:44:27 +01:00