Subscription auth: Codex ChatGPT OAuth + harness-carried model auth (supersedes #126, #128) - #690

Closed

ReganBell wants to merge 30 commits into

mainfrom

subscription-auth

Commits on Aug 2, 2026

feat: support Codex ChatGPT OAuth auth
open-swe
committed
ce2466f
test: use trusted Codex OAuth fixtures
open-swe
committed
9f1bae6
fix: persist rotated Codex OAuth tokens
open-swe
committed
a022662
style: format OAuth regression test
open-swe
committed
c33c558
fix: preserve OAuth state during runtime replacement
open-swe
committed
353904e
fix: release stale OAuth runtime locks
open-swe
committed
8c3fdd7
test: cover same-process stale OAuth locks
open-swe
committed
7a170cc
fix: bound Codex setup requests
open-swe
committed
5c54ed5
fix: bound OAuth runtime recovery
open-swe
committed
eaef487
fix: cancel timed out Codex requests
open-swe
committed
65f08bd
style: simplify request signal selection
open-swe
committed
e646e12
fix: harden Codex turn cancellation
open-swe
committed
191bf7c
fix: harden Codex turn cancellation
open-swe
committed
97ee905
fix: harden OAuth isolation and cleanup
open-swe
committed
7f9bda3
fix: fail closed on OAuth cleanup errors
open-swe
committed
7c23b77
test: stabilize Codex OAuth cancellation coverage
open-swe
committed
0b76b18
fix: bind Codex OAuth token updates to account
open-swe
committed
2d42657
fix: reject unverified Codex OAuth token rotation
open-swe
committed
cee71d4
fix: verify rotated Codex OAuth JWTs
open-swe
committed
978915a
fix: clean up Codex OAuth state on close failure
open-swe
committed
5599005
fix: allow Codex OAuth lock recovery after release errors
open-swe
committed
05f631a
fix: cancel timed out durable Codex records
open-swe
committed
0ed7431
fix: cancel PostgreSQL LLM records on timeout
open-swe
committed
f1e8cd6
fix: safely cancel queued Postgres records
open-swe
committed
420afb8
fix: count harness-carried model auth in surface config and admin onboarding
haramiya
committed
04d3506

Commits on Aug 26, 2026

Commits on Aug 27, 2026

refactor: simplify Codex OAuth lifecycle

16francej
and
qm-yc
committed
ce62720
Keychain custody for subscription harness auth
qm-yc
committed
c1dd286

Navigation Menu

Uh oh!

Subscription auth: Codex ChatGPT OAuth + harness-carried model auth (supersedes #126, #128) - #690

Subscription auth: Codex ChatGPT OAuth + harness-carried model auth (supersedes #126, #128)#690
ReganBell wants to merge 30 commits into
mainfrom
subscription-auth

Commits on Aug 2, 2026

feat: support Codex ChatGPT OAuth auth

test: use trusted Codex OAuth fixtures

fix: persist rotated Codex OAuth tokens

style: format OAuth regression test

fix: preserve OAuth state during runtime replacement

fix: release stale OAuth runtime locks

test: cover same-process stale OAuth locks

fix: bound Codex setup requests

fix: bound OAuth runtime recovery

fix: cancel timed out Codex requests

style: simplify request signal selection

fix: harden Codex turn cancellation

fix: harden Codex turn cancellation

fix: harden OAuth isolation and cleanup

fix: fail closed on OAuth cleanup errors

test: stabilize Codex OAuth cancellation coverage

fix: bind Codex OAuth token updates to account

fix: reject unverified Codex OAuth token rotation

fix: verify rotated Codex OAuth JWTs

fix: clean up Codex OAuth state on close failure

fix: allow Codex OAuth lock recovery after release errors

fix: cancel timed out durable Codex records

fix: cancel PostgreSQL LLM records on timeout

fix: safely cancel queued Postgres records

fix: count harness-carried model auth in surface config and admin onboarding

Commits on Aug 26, 2026

Merge pr-128 (harness-carried model auth) into pr-126 (Codex OAuth)

Merge public/main into subscription-auth branch (codex OAuth + harness-carried auth)

fix: restore lazy custom boot-default resolution in serverDeps (merge regression)

Commits on Aug 27, 2026

refactor: simplify Codex OAuth lifecycle

Keychain custody for subscription harness auth