Repository navigation

Implement server auth bootstrap and pairing flow - #1768

Merged

juliusmarminge merged 60 commits into

mainfrom

t3code/remote-auth-pairing

Apr 9, 2026

Merged

Implement server auth bootstrap and pairing flow#1768
juliusmarminge merged 60 commits into
mainfrom
t3code/remote-auth-pairing

Commits on Apr 9, 2026
- Implement server auth bootstrap and pairing flow
  
  juliusmarminge
  and
  codex
  committed
  e244a63
- Address review comments on auth pairing
  
  juliusmarminge
  and
  codex
  committed
  15e85fa
- Fix bootstrap credential handling and secret cleanup
  juliusmarminge
  committed
  f89f0d1
- Resolve auth bootstrap URLs from HTTP origins
  juliusmarminge
  committed
  b7063db
- Handle secret removal failures explicitly
  juliusmarminge
  committed
  148127b
- Use Effect clock for session expiry verification
  
  juliusmarminge
  and
  codex
  committed
  06a2499
- Stub auth HTTP for browser app suites
  
  juliusmarminge
  and
  codex
  committed
  05370f6
- Invalidate cached auth gate after pairing
  
  juliusmarminge
  and
  codex
  committed
  d3e19e0
- Document server auth policies and pairing methods
  juliusmarminge
  committed
  cadcd3a
- Add remote auth pairing bootstrap flow
  juliusmarminge
  committed
  9ec9410
- Simplify startup and pairing bootstrap
  juliusmarminge
  committed
  f2f2186
- Harden auth bootstrap for remote pairing
  juliusmarminge
  committed
  4769f6b
- test: split server test layer pipeline
  
  juliusmarminge
  and
  codex
  committed
  0762645
- fix: restore verification after stacked rebase
  
  juliusmarminge
  and
  codex
  committed
  b619f66
- Add remote auth pairing for desktop backend
  juliusmarminge
  committed
  0582da5
- Add persistent auth pairing and session management
  juliusmarminge
  committed
  432717a
- Add remote auth pairing metadata and websocket tokens
  juliusmarminge
  committed
  ab98aa3
- Enable pairing link creation without endpoint guard
  juliusmarminge
  committed
  d4c00e9
- Add pairing fallback dialog for clipboard failures
  juliusmarminge
  committed
  2d302e3
- Centralize browser API CORS handling
  juliusmarminge
  committed
  ac02f15
- Consolidate remote environment connection management
  juliusmarminge
  committed
  2465a4e
- Rename websocket client key parameters to entryKey
  juliusmarminge
  committed
  6228c3f
- Add remote environment pairing to branch toolbar
  juliusmarminge
  committed
  13dd95b
- Resolve server environment labels from host metadata
  juliusmarminge
  committed
  4aaac11
- Harden web test imports against partial window mocks
  
  Julius Marminge
  authored and
  juliusmarminge
  committed
  a430dc3
- Fix browser CI suites
  
  Julius Marminge
  authored and
  juliusmarminge
  committed
  af0a97a
- [codex] Handle missing host-label commands safely (#1840)
  
  juliusmarminge
  and
  Julius Marminge
  committed
  820f3fe
- [codex] Preserve connected state after metadata refresh failures (#1841)
  
  juliusmarminge
  and
  Julius Marminge
  committed
  72404da
- [codex] Refresh grouped sidebar refs when membership changes (#1837)
  
  juliusmarminge
  and
  Julius Marminge
  committed
  c54293c
- [codex] Reject websocket tokens after session expiry (#1838)
  
  juliusmarminge
  and
  Julius Marminge
  committed
  1f33591
- [codex] Fix snapshot recovery across environment rebinds (#1839)
  
  juliusmarminge
  and
  Julius Marminge
  committed
  778af2c
- Add selectable desktop bind host for remote auth pairing
  juliusmarminge
  committed
  5d14893
- Update server exposure test to use paired host payload
  juliusmarminge
  committed
  c4e1914
- Add auth control plane for pairing and sessions
  juliusmarminge
  committed
  e1f3afa
- Quiet auth CLI logs in JSON mode
  juliusmarminge
  committed
  716b147
- Harden draft promotion routing in chat view tests
  juliusmarminge
  committed
  884a573
- Use short manual-entry pairing tokens
  juliusmarminge
  committed
  a59d3af
- nit
  juliusmarminge
  committed
  53327c7
- Move pairing tokens to URL fragments
  juliusmarminge
  committed
  a1d8197
- Increase pairing token length to 12 characters
  juliusmarminge
  committed
  932dc60
- Add session last-connected timestamps and pairing QR codes
  juliusmarminge
  committed
  4ebbed9
- fmt
  juliusmarminge
  committed
  53e7f00
- Fix 1768 replay lint warnings
  
  juliusmarminge
  and
  codex
  committed
  aad7243
- Harden desktop bootstrap and readiness polling
  juliusmarminge
  committed
  df2eb24
- Handle secret-store races and improve auth validation errors
  juliusmarminge
  committed
  807d623
- Preserve requested exposure through temporary fallback
  juliusmarminge
  committed
  b834685
- mv
  juliusmarminge
  committed
  2611ed1
- mv
  juliusmarminge
  committed
  16a5be7
- Separate stream failures from transport disconnect retries
  juliusmarminge
  committed
  853d447
- this sucks
  juliusmarminge
  committed
  26fb28c
- cleanup
  juliusmarminge
  committed
  f8cec10
- Fix Vitest mocks to preserve actual module exports
  juliusmarminge
  committed
  a77b157
- fix: use structured reason discriminant instead of fragile string comparison in credential consume flow
  cursoragent
  committed
  c521343
- fix: use structured reason discriminant instead of fragile string comparison in credential consume flow
  cursor[bot]
  authored
  63460ab
- fix: lowercase user-agent in inferBrowser and inferOs to match inferDeviceType
  cursoragent
  committed
  8b6a17e
- Polish remote pairing flow and theme surfaces
  juliusmarminge
  committed
  3540496
- Refine no-thread state and browser chrome theming
  juliusmarminge
  committed
  f8a544e
- mby?
  juliusmarminge
  committed
  d9e96fd
- mby
  juliusmarminge
  committed
  9daa4ec
- fix: stabilize browser CI test mocks
  
  juliusmarminge
  and
  codex
  committed
  21c748b

Commits

Commits on Apr 9, 2026