8 Commits

Author	SHA1	Message	Date
Luis Pater	514d09f746	feat(codex): guide recovery when automatic credential renewal becomes impossible ... - Classify terminal Codex refresh grant failures (`refresh_token_reused`, `refresh_token_expired`, `refresh_token_invalidated`, `token_revoked`, `invalid_client`, `invalid_grant`, and HTTP 401) as non-retryable, track rejected outer and SIWC refresh tokens independently, and defer retry checks until `access_token` expiry while keeping valid access tokens available for inference. - Expose structured renewal states, recovery stages, sanitized refresh diagnostics, targeted account-matching OAuth re-authentication (`POST /v8/management/oauth/auth-url`), and pinned inference verification (`POST /v8/management/credentials/verify`) across Management API v8 and the TUI. - Add unit and workflow regression tests covering terminal vs. transient refresh handling, per-partition SIWC/outer isolation, incomplete stream rejection, quota cooldown preservation, and secret redaction. Closes: #5783	2026-10-30 07:06:33 +08:00
Luis Pater	06fd5b8bc2	feat(management): add read-only SIWC credential status endpoint ... - Persist the real SIWC token expiration time from expires_in and evaluate local SIWC status using real expiration (or JWT exp) and upstream 401 rejection state without triggering network requests. - Track SIWC token rejections independently from outer Codex OAuth refreshes, execution retries, and use_siwc toggles until the SIWC token is replaced. - Expose the read-only v8 management SIWC status endpoint and summary field for Codex credentials. Closes: #6819	2026-10-21 08:07:38 +08:00
Supra4E8C	d50a1995ce	feat(management): add v8 SIWC credential binding	2026-10-20 00:38:04 +08:00
hkfires	3be5fa44f9	fix(config): support historical v8 aliases ... Accept historical v8 config paths and request bodies while saving the latest canonical layout. Preserve comments on scalar updates and keep v0 saves from migrating legacy-only files unnecessarily.	2026-10-02 22:36:37 +08:00
hkfires	52d5507dd3	feat(config): add shared upstream provider settings ... Move shared Codex, Claude, and xAI provider options under upstream so they apply consistently to OAuth and API-key credentials. Migrate historical OAuth paths, preserve OAuth-only header scope, and expose the new upstream management API path.	2026-10-02 22:36:35 +08:00
Luis Pater	63c04b4bd4	feat(config): introduce client configuration section for codex settings ... - Add `ClientConfig` and `CodexClientConfig` structs to `SDKConfig` - Move `optimize-multi-agent-v2` and add `enable-apply-patch` under `client.codex`	2026-10-02 05:34:30 +08:00
Supra4E8C	097511b81f	fix(management): remove deprecated credential quota endpoints from v8 API	2026-09-30 22:52:07 +08:00
hkfires	b1a33b80dc	docs: prune obsolete management notes	2026-09-27 14:22:32 +08:00