fix(cli): Codex own-key routing, credential isolation and error reporting - #682

Merged

Harry19081 merged 9 commits into

org2AI:developfrom

Raymond8196:fix/cli-oauth-credential-guards

Aug 6, 2026

Commits on Aug 5, 2026

fix(key-vault): limit Codex own-key providers to Responses-capable ones
Raymond8196
committed
1b58550
refactor(cli-session): isolate Codex CLI profiles per account/session
Raymond8196
committed
9b51817
fix(cli-session): render Codex errors instead of dropping them
Raymond8196
committed
d9e89b0
fix(key-vault): gate OAuth refresh and CLI retry on native accounts
Raymond8196
committed
a1965c1
style(cli-session): move deduper tests below the parser trait
Raymond8196
committed
145dffd
fix(cli-session): drop suppressed notices from the stderr fallback too
Raymond8196
committed
cd41a7e
fix(agent-cli): create credential staging files owner-only
Raymond8196
committed
7576bad
fix(cli-session): keep the last retry notice as a failure fallback
Raymond8196
committed
c876942
fix(cli-session): drain the child's stderr before reading it
Raymond8196
committed
553894c