smurching-oai df38cb3b2a Add device-code authorization for gateway OAuth (#59822) ...

## Why

Gateway sign-in needs an alternative for terminals that cannot open a browser.

## What changed

- Add optional `gateway_oauth.device_authorization_url` configuration and a `login_with_device_code` API that presents a verification URL and user code, polls for approval, and persists the resulting credentials.
- Use the configured proxy and network policy, validate verification URLs, and bound OAuth responses. Support cancellation and report denied or expired codes without exposing issuer error details.

## Testing

Add tests for successful authorization and credential persistence, unsafe verification URLs, network-policy denials, denied and expired codes, and cancellation during approval or credential storage.

GitOrigin-RevId: 96398578fb866d34929e85c04eadf468d8cd3255

2026-11-06 04:24:04 +00:00

..

context_snapshot

Render host-owned V2 subagent rosters in environment context (#59531)

2026-11-05 00:39:39 +00:00

apps_test_server.rs

Use runtime authentication for OpenAI MCP and app requests (#59749)

2026-11-05 22:03:29 +00:00

BUILD.bazel

Unify context snapshots and group requests into windows (#44932)

2026-09-11 22:55:38 +00:00

Cargo.toml

Extend runtime auth to account, plugin, and file requests (#59564)

2026-11-05 03:49:13 +00:00

code_mode_host.rs

Add opt-in gRPC over stdio for the code-mode host (#52723)

2026-10-09 23:26:34 +00:00

context_snapshot.rs

Render host-owned V2 subagent rosters in environment context (#59531)

2026-11-05 00:39:39 +00:00

exec_server.rs

Gate capability discovery V2 on executor version (#57192)

2026-10-26 19:03:08 +00:00

hooks.rs

Add keyed shell environment policy filters (#34590)

2026-07-21 18:23:26 +00:00

lib.rs

Add device-code authorization for gateway OAuth (#59822)

2026-11-06 04:24:04 +00:00

oauth.rs

Add device-code authorization for gateway OAuth (#59822)

2026-11-06 04:24:04 +00:00

process.rs

Add opt-in protocol discovery for local stdio MCP servers (#57210)

2026-10-26 19:37:06 +00:00

responses.rs

Budget retained file audio during remote compaction (#59237)

2026-11-03 21:53:26 +00:00

runtime_auth.rs

Extend runtime auth to account, plugin, and file requests (#59564)

2026-11-05 03:49:13 +00:00

startup_tests.rs

Harden core test fixture startup assertions (#41194)

2026-08-27 19:58:09 +00:00

startup.rs

Harden core test fixture startup assertions (#41194)

2026-08-27 19:58:09 +00:00

streaming_sse.rs

Preserve Guardian parent response IDs across sampling requests (#45441)

2026-09-14 15:13:13 +00:00

test_codex_exec.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

test_codex.rs

Extract agent message board hosting into a dedicated crate (#59473)

2026-11-04 19:10:59 +00:00

test_environment_tests.rs

test: branch on target OS instead of runner flavor (#29712)

2026-06-23 14:27:13 -07:00

test_environment.rs

test: branch on target OS instead of runner flavor (#29712)

2026-06-23 14:27:13 -07:00

tracing.rs

Serialize manual network approval prompts per endpoint (#58351)

2026-10-30 14:40:59 +00:00