openab-agent: multi-vendor OAuth ADR + cross-process auth.json locking (codex + MCP)#1190

Merged

thepagent merged 24 commits into

openabdev:mainfrom

brettchien:docs/adr-openab-agent-oauth

Jun 27, 2026

Commits on Jun 24, 2026

docs(adr): openab-agent multi-vendor OAuth & credential storage

brettchien
and
claude
committed
docs(adr): address review — prefer oauth2 crate, drop rollout, vendor names

brettchien
and
claude
committed
docs(adr): per-tenant refresh lock + per-user PKCE keying (Mira review r1)

brettchien
and
claude
committed
docs(adr): bundled-secret storage + pending-entry GC (Mira review r2)

brettchien
and
claude
committed
docs(adr): close §9 Q2/Q3 — env-injection default, vendor go/no-go (Brett decisions r3)

brettchien
and
claude
committed
docs(adr): confirm agy secret + ecosystem evidence (GitHub survey r4)

brettchien
and
claude
committed
docs(adr): agy-vendor vs agy-CLI/ACP clarification + MCP store revamp in scope (r5)

brettchien
and
claude
committed
docs(adr): fix stale §9 Q4 cross-reference

brettchien
and
claude
committed
docs(adr): §9 Q2 — encode-at-rest is the default, env is the alternative (Brett)

brettchien
and
claude
committed
feat(auth): cross-process locking for auth.json — codex + MCP (ADR §5.4)

brettchien
and
claude
committed
feat(auth): address Mira code review — pending GC + portable WouldBlock

brettchien
and
claude
committed
feat(auth): serialise MCP token refresh cross-process (close §5.4 (b) gap)

brettchien
and
claude
committed
refactor(auth): /simplify cleanups — dedup lock acquire, reuse refresh fd

brettchien
and
claude
committed
docs(auth): /code-review — harden GC + refresh-lock contract comments

brettchien
and
claude
committed
build(openab-agent): declare standalone [workspace] to fix CI

brettchien
and
claude
committed
Revert "build(openab-agent): declare standalone [workspace] to fix CI"
brettchien
committed
ci(openab-agent): append [workspace] in CI + harden ACP smoke test

brettchien
and
claude
committed
ci(openab-agent): surface ACP smoke-test stderr + exit code for diagnosis
brettchien
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

openab-agent: multi-vendor OAuth ADR + cross-process auth.json locking (codex + MCP)#1190

openab-agent: multi-vendor OAuth ADR + cross-process auth.json locking (codex + MCP)#1190
thepagent merged 24 commits into
openabdev:mainfrom
brettchien:docs/adr-openab-agent-oauth

Commits on Jun 24, 2026

docs(adr): openab-agent multi-vendor OAuth & credential storage

docs(adr): address review — prefer oauth2 crate, drop rollout, vendor names

docs(adr): per-tenant refresh lock + per-user PKCE keying (Mira review r1)

docs(adr): bundled-secret storage + pending-entry GC (Mira review r2)

docs(adr): close §9 Q2/Q3 — env-injection default, vendor go/no-go (Brett decisions r3)

docs(adr): confirm agy secret + ecosystem evidence (GitHub survey r4)

docs(adr): agy-vendor vs agy-CLI/ACP clarification + MCP store revamp in scope (r5)

docs(adr): fix stale §9 Q4 cross-reference

docs(adr): §9 Q2 — encode-at-rest is the default, env is the alternative (Brett)

feat(auth): cross-process locking for auth.json — codex + MCP (ADR §5.4)

feat(auth): address Mira code review — pending GC + portable WouldBlock

feat(auth): serialise MCP token refresh cross-process (close §5.4 (b) gap)

refactor(auth): /simplify cleanups — dedup lock acquire, reuse refresh fd

docs(auth): /code-review — harden GC + refresh-lock contract comments

build(openab-agent): declare standalone [workspace] to fix CI

Revert "build(openab-agent): declare standalone [workspace] to fix CI"

ci(openab-agent): append [workspace] in CI + harden ACP smoke test

ci(openab-agent): surface ACP smoke-test stderr + exit code for diagnosis

Commits on Jun 26, 2026

openab-agent: address review findings on OAuth ADR + auth.json locking

openab-agent: fail closed on a contended refresh lock (F6)

openab-agent: size lock timeout above worst-case multi-call refresh hold

Commits on Jun 27, 2026

Merge branch 'main' into docs/adr-openab-agent-oauth

Merge branch 'main' into docs/adr-openab-agent-oauth

Merge branch 'main' into docs/adr-openab-agent-oauth