mirror of
https://github.com/NeuralNomadsAI/CodeNomad.git
synced 2026-10-22 06:11:33 +00:00
db1f552afd
## Summary I replaced Codex Usage's legacy auth-file reads with the connected OpenCode V2 daemon's selected ChatGPT OAuth credential. This addresses the stale-file mismatch described in #808 without guessing WSL credential paths or substituting another account. - Resolve the provider integration in the owned session's native location; use only its selected active credential and native accountID. - Keep credentials server-only, OAuth refresh native-owned, and credential export/generic RPC blocked through the browser proxy. - Fence warm and pending quota results on account changes, reconnects and session movement; scope the visible panel to its instance/session. - Bound quota HTTP, reject redirects and sanitize errors. No SQLite access or legacy/Codex CLI fallback. The credential-list API requires OpenCode 2.0.20 for this feature only. Older runtimes, expired native tokens and non-ChatGPT connections fail closed; the global application minimum is unchanged. Other providers' credential integrations are outside this focused fix. ## Validation - Server/UI typechecks; 85 server tests; five UI unit tests; three rendered browser scenarios; UI build and diff checks passed. - A fresh native 2.0.20 Windows daemon with synthetic credentials exercises the production adapter: selected OAuth/accountID, key-account switch invalidating a warm snapshot, and recovery despite stale auth.json. Quota HTTP is mocked; no shared daemon or real credentials are used. - This fixes the confirmed integration mismatch, but I have not reproduced the author's real WSL/live account failure. Closes #808. Maintenance: existing `packages/server/src/server/http-server.ts` (~2,317 lines) and `packages/ui/src/lib/api-client.ts` (~613 lines) exceed the source-size guideline; their wiring changes remain small. |
||
|---|---|---|
| .. | ||
| ui-harmonization-demo | ||
| architecture.md | ||
| ATTACHMENT_UX_PLAN.md | ||
| BROWSER_AUTOMATION.md | ||
| CACHE_REFRESH_CONVENTIONS.md | ||
| DEV_V2_CODE_REDUCTION.md | ||
| DEVELOPER_MODE.md | ||
| INDEX.md | ||
| MVP-PRINCIPLES.md | ||
| OPENCODE_FIRST_INSTALL_RECOVERY.md | ||
| OPENCODE_V2_COMPATIBILITY.md | ||
| OPENCODE_V2_POST_BETA.md | ||
| PALETTE_REVIEW_2026-09-08.md | ||
| PALETTE_SOURCES.md | ||
| PLUGIN_ACTIVATION_CONTROLS.md | ||
| pr724-go-to-destinations.png | ||
| pr724-go-to-filtered.png | ||
| pr729-attachments-fr-narrow.png | ||
| pr729-attachments-he-wide.png | ||
| SAVED_PALETTE_CALIBRATION_2026-09-11.md | ||
| SESSION_ENVIRONMENT.md | ||
| SESSION_HISTORY_NAVIGATION.md | ||
| SESSION_HISTORY_QUERIES.md | ||
| SESSION_HISTORY_STRESS_REVIEW.md | ||
| SESSION_PRUNING_DEPLOYMENT.md | ||
| SESSION_PRUNING_RPC.md | ||
| SESSION_PRUNING_SAFETY.md | ||
| solidjs-llms.txt | ||
| SUMMARY.md | ||
| TAB_CHROME_REVIEW_2026-09-10.md | ||
| TAURI_WINDOWS_INPUT_DEADLOCK.md | ||
| technical-implementation.md | ||
| TOOL_CALL_IMPLEMENTATION.md | ||
| UI_MOTION_PROFILING.md | ||
| user-interface.md | ||
| WORKTREE_SESSION_PLACEMENT.md | ||
