feat: Claude /login subscription billing for claude_code (openlock-ndb)#67

Merged

vessux merged 24 commits into

mainfrom

feat/claude-subscription-billing-ndb

Jun 13, 2026

Commits on Jun 12, 2026

feat(policy): support cred_inject value_prefix; drop opencode+anthropic path
vessux
committed
feat(anthropic): host-side OAuth PKCE /login client
vessux
committed
feat(sandbox): provider sandboxFiles delivery + CLAUDE_CONFIG_DIR
vessux
committed
feat(anthropic): replace setup-token with OAuth subscription provider
vessux
committed
feat(ensure-provider): import OAuth profile, seed-once, configure gateway refresh
vessux
committed
chore: render value_prefix into default policy + document it
vessux
committed
chore: fix stale wire-proof comment + align test fixture token_url
vessux
committed
chore(sandbox): bump OPENSHELL_FORK_TAG to v0.6.5 (value_prefix)
vessux
committed

Commits on Jun 13, 2026

fix(anthropic): use console.anthropic.com OAuth endpoints + canonical 3-scope set
vessux
committed
fix(anthropic): match Claude Code subscription OAuth exactly (claude.com/cai authorize, platform.claude.com redirect/token, CLAUDE_AI scopes)
vessux
committed
feat(sandbox): OPENLOCK_OPENSHELL_BIN dev override for the openshell CLI
vessux
committed
feat(anthropic): parseClaudeOauthBlob — map CC credential to LoginResult
vessux
committed
feat(anthropic): claudeKeychainService — deterministic CC keychain item name
vessux
committed
feat(anthropic): importFromClaudeCode orchestration with injectable deps
vessux
committed
feat(anthropic): import token from Claude Code login; drop OAuth handshake
vessux
committed
feat(sandbox): --no-attach flag plumbing
vessux
committed
feat(sandbox): --no-attach detached create (skip harness attach), close openlock-dr9
vessux
committed
style(anthropic): biome format import module + test
vessux
committed
fix(anthropic,sandbox): macOS keychain→file harvest fallback; reset detached session meta (review)
vessux
committed
docs: README — first sandbox run runs 'openlock login' (subscription import), not setup-token
vessux
committed
fix(ensure-provider): profile import is not idempotent — probe via 'profile export', import only when absent (fixes reattach/re-seed crash)
vessux
committed
fix(sandbox): tether must not inherit stdout — detached create (--no-attach) hung any piped/CI stdout capture (sleep-infinity child held the pipe open)
vessux
committed
test(ensure-provider): extract fake-gateway responder to bound cognitive complexity
vessux
committed
refactor(sandbox): TETHER_STDIO const + tripwire test — standardise guard against outlives-CLI stdout-inherit hangs (openlock-sqw)
vessux
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: Claude /login subscription billing for claude_code (openlock-ndb)#67

feat: Claude /login subscription billing for claude_code (openlock-ndb)#67
vessux merged 24 commits into
mainfrom
feat/claude-subscription-billing-ndb

Commits on Jun 12, 2026

feat(policy): support cred_inject value_prefix; drop opencode+anthropic path

feat(anthropic): host-side OAuth PKCE /login client

feat(sandbox): provider sandboxFiles delivery + CLAUDE_CONFIG_DIR

feat(anthropic): replace setup-token with OAuth subscription provider

feat(ensure-provider): import OAuth profile, seed-once, configure gateway refresh

chore: render value_prefix into default policy + document it

chore: fix stale wire-proof comment + align test fixture token_url

chore(sandbox): bump OPENSHELL_FORK_TAG to v0.6.5 (value_prefix)

Commits on Jun 13, 2026

fix(anthropic): use console.anthropic.com OAuth endpoints + canonical 3-scope set

fix(anthropic): match Claude Code subscription OAuth exactly (claude.com/cai authorize, platform.claude.com redirect/token, CLAUDE_AI scopes)

feat(sandbox): OPENLOCK_OPENSHELL_BIN dev override for the openshell CLI

feat(anthropic): parseClaudeOauthBlob — map CC credential to LoginResult

feat(anthropic): claudeKeychainService — deterministic CC keychain item name

feat(anthropic): importFromClaudeCode orchestration with injectable deps

feat(anthropic): import token from Claude Code login; drop OAuth handshake

feat(sandbox): --no-attach flag plumbing

feat(sandbox): --no-attach detached create (skip harness attach), close openlock-dr9

style(anthropic): biome format import module + test

fix(anthropic,sandbox): macOS keychain→file harvest fallback; reset detached session meta (review)

docs: README — first sandbox run runs 'openlock login' (subscription import), not setup-token

fix(ensure-provider): profile import is not idempotent — probe via 'profile export', import only when absent (fixes reattach/re-seed crash)

fix(sandbox): tether must not inherit stdout — detached create (--no-attach) hung any piped/CI stdout capture (sleep-infinity child held the pipe open)

test(ensure-provider): extract fake-gateway responder to bound cognitive complexity

refactor(sandbox): TETHER_STDIO const + tripwire test — standardise guard against outlives-CLI stdout-inherit hangs (openlock-sqw)