fix(oauth): rebind continuation replay scope after generic OAuth 429 failover - #436

Draft

luvs01 wants to merge 76 commits into

Devfrom

codex/fix-oauth-continuation-failover-vulnerability

Commits on Sep 6, 2026

chore(release): open dev at 2.46.0 before releasing 2.45.0 (#3812)
github-actions[bot]
authored
137d6a7
docs: plan platform validation follow-up
t
committed
e963aa6
docs: plan axis1 bounded bug fixes [skip ci]
t
committed
eabe7ce
fix(claude): preserve reasoning and tool result envelopes

committed
58fcb09
fix(grok): filter Codex control frames for strict Responses clients

lidge-jun
and
dt418
committed
b2703f8
docs(plan): define axis five display and CLI delivery

committed
0d42efa
docs: describe BigModel and Raycast integration contracts

t
and
hiddenest
committed
ef54e82
test(oauth): drain ACL flights before fixture teardown [skip ci]

t
and
x3M3x
committed
6a51f04
fix(grok): honor SSE event order and empty resets

lidge-jun
and
dt418
committed
336c621
test(responses): cover established task delivery and compaction
lidge-jun
committed
9cde6e7
fix(diagnostics): distinguish inbound size measurement provenance [skip ci]
t
committed
cb8ac02
feat(providers): carry static BigModel Responses preset from #3641

t
and
jamespan
committed
c7f6ba7
feat(catalog): carry native display labels with normalization contract [skip ci]

t
and
everton-dgn
committed
130be8d
feat(cli): carry provider list JSONL output [skip ci]

t
and
turin-dev
committed
1ee829d
test(container): verify build startup and volume recreation [skip ci]

t
and
Ingwannu
committed
e00d5c3
feat(gui): carry discovered model name editor with recoverable saves

t
and
zigzag-007
committed
92c95fa
fix(anthropic): attribute quota headers and honor measured reset deadlines [skip ci]

t
and
everton-dgn
committed
f215f79
fix(claude): preserve signed and opaque replay block boundaries

committed
12b174e
docs(devlog): record axis three protocol delivery plan
lidge-jun
committed
8f8790e
fix(gui): preserve display name receipts across recovery failures

t
and
zigzag-007
committed
9d775fa
fix(providers): repair static BigModel login and Responses effort

t
and
jamespan
committed
d523990
test(providers): distinguish BigModel upstream and bridge modalities

t
and
jamespan
committed
9336a27
fix(gui): balance name editor helper text on narrow screens

t
and
zigzag-007
committed
e352ede
fix(claude): report terminal closure buffer overflow once

committed
c721b94
test(container): isolate synthetic inference without internal networking [skip ci]

t
and
Ingwannu
committed
513391e
test(responses): account for ordinary tool catalog guidance
lidge-jun
committed
76e667f
test(claude): correct replay and closure overflow oracles

committed
9b5b670
test(container): declare the synthetic loopback destination [skip ci]

t
and
Ingwannu
committed
619f7a7
fix(gui): reconcile display name draft during snapshot render

t
and
zigzag-007
committed
4c1d9af
feat(integrations): carry Raycast client from #3733

t
and
hiddenest
committed
d6cf876
fix(integrations): repair Raycast #3733 ownership and plan guidance

t
and
hiddenest
committed
ea3d03a
fix(raycast): honor live export admission and defer ensure refresh (#3733)

t
and
hiddenest
committed
387d787
test(responses): exercise empty effort ladder through valid ingress

t
and
jamespan
committed
22f39ff
fix(export): preserve live CLI destination despite saved listener drift (#3733)

t
and
hiddenest
committed
95edd0a
test(container): verify first-start migrations before persistence baseline [skip ci]

t
and
Ingwannu
committed
d175335
Merge pull request #3828 from lidge-jun/codex/axis2-bigmodel-stack-11fe
lidge-jun
authored
ab2bbc6
Merge pull request #3829 from lidge-jun/codex/axis2-raycast-stack-11fe
lidge-jun
authored
b65b9d8
docs(claude): describe redacted reasoning replay

committed
68d90aa
Merge pull request #3830 from lidge-jun/codex/axis3-protocol-foundation
lidge-jun
authored
2269e07
Merge pull request #3831 from lidge-jun/codex/axis3-grok-control-frames
lidge-jun
authored
07f8d70
Merge pull request #3832 from lidge-jun/codex/axis3-protocol-combined
lidge-jun
authored
4349cf3
docs(devlog): record verified protocol delivery and remainders
lidge-jun
committed
e873008
merge verified runtime landing into documentation closeout
lidge-jun
committed
943e5a7
Merge current dev into axis five native labels [skip ci]

t
and
everton-dgn
committed
e337374
Merge refreshed native label base into JSONL layer [skip ci]

t
and
turin-dev
committed
e862b86
Merge refreshed axis five base for final integrated validation

t
and
zigzag-007
committed
f51ec24
Merge pull request #3834 from lidge-jun/codex/axis3-protocol-docs
lidge-jun
authored
a5f9c34
ci: gate source-build Docker lifecycle verification [skip ci]

t
and
Ingwannu
committed
91fba4b
fix(container): retain routed catalog across managed recreation [skip ci]

t
and
Ingwannu
committed
15fa571
ci: select explicit-file typecheck mode for TypeScript 7 [skip ci]

t
and
Ingwannu
committed
6f2ad1e

Commits on Sep 7, 2026

fix(anthropic): expire retained quota measurements at known resets [skip ci]
t
committed
a3c2eb5
test(anthropic): keep probe fixtures inside live reset windows [skip ci]
t
committed
54fcc68
fix(anthropic): normalize retained quota metadata and guard test transport [skip ci]
t
committed
d3c70f9
fix(cli): explain which side of a version mismatch is older [skip ci]
t
committed
872f0e5
fix(responses): classify encrypted task recovery failures
t
committed
2e8ef03
Merge pull request #3818 from lidge-jun/codex/platform-lane4-oauth
lidge-jun
authored
6388ec7
Merge pull request #3819 from lidge-jun/codex/platform-lane4-body
lidge-jun
authored
da18da4
Merge pull request #3822 from lidge-jun/codex/platform-lane4-docker
lidge-jun
authored
5dee8cf
Merge pull request #3823 from lidge-jun/codex/platform-lane4-final
lidge-jun
authored
7fdb0e9
Merge axis five native display names (#3820)

lidge-jun
and
everton-dgn
authored
1e16fe4
Merge axis five provider JSONL output (#3821)

lidge-jun
and
turin-dev
authored
be24986
Merge axis five discovered model name editor (#3824)

lidge-jun
and
zigzag-007
authored
44c69fd
docs(devlog): close axis five display and CLI delivery

committed
2c8ec0b
Close axis five delivery record (#3835)

authored
e894dcb
docs: keep delivery attribution without contact addresses [skip ci]
t
committed
0ccc6bd
Merge PR #3836: repair delivery-note privacy scan [skip ci]
lidge-jun
authored
bf85e67
fix(clients): preserve exact Aside file identities [skip ci]
t
committed
b29bbb4
Merge pull request #3825: verified axis1 bug fix [skip ci]
lidge-jun
authored
85fbdb5
Merge pull request #3826: verified axis1 bug fix [skip ci]
lidge-jun
authored
860baaf
Merge pull request #3827: verified axis1 bug fix [skip ci]
lidge-jun
authored
5a97db9
Merge pull request #3842: verified axis1 bug fix [skip ci]
lidge-jun
authored
5fdf9bb
docs: close axis1 bug-fix delivery record [skip ci]
t
committed
be112e4
Merge PR #3847: close axis1 delivery record [skip ci]
lidge-jun
authored
0d8b0cd
chore(release): prepare 2.46.0 stable promotion
t
committed
3970601
Merge pull request #3851 from lidge-jun/codex/release-246-main
lidge-jun
authored
bba6322
fix(oauth): rebind continuation scope after failover
luvs01
committed
6361c87