ciregenz
36626be089
[eric] backend: one-line comments + collapse blank runs across backend root + tests (AST-verified, 1 test skipped: embedded #-lines)
2026-06-25 03:04:16 -07:00
ciregenz
1bcc78567b
[eric] backend: leading-_ -> p_/P_/public for class methods + module conditional-block vars + _ReadyServer class + _pending_oauth import; promote cross-file (search_ddg)
2026-06-23 21:50:08 -07:00
ciregenz
517ca75a25
[eric] main+auth: leading-_ -> p_/public (module fns + locals + import aliases); promote cross-file (TOKEN/ws_auth_ok/etc.), fix qualified+string refs
2026-06-23 21:28:09 -07:00
eric
bcb88ebefb
[eric] auth: dev-only /api/dev/token so the split-port frontend can authenticate (404s when packaged)
2026-06-01 11:55:17 -07:00
ciregenz
5b0c6e1df3
defluff: strip em-dashes + shorten docstrings across backend (cosmetic only, no logic change)
2026-05-20 05:25:23 -07:00
ciregenz
178a6060eb
gmail: route OAuth refresh through cloud rotation-pool proxy
...
google-workspace-mcp's gauth.py hardcodes token_uri to oauth2.googleapis.com
and uses local CLIENT_ID/SECRET on every refresh. OAuth runs through a
rotation pool on the cloud side, so the refresh_token is bound to the
pool slot that minted it, not the single client baked into the DMG, and
direct refreshes return unauthorized_client. Redirect spawn through a
shim that monkey-patches get_credentials to point token_uri at a local
proxy (/api/tools/google-oauth-token), which forwards the refresh to
api.openswarm.com/api/oauth/google/refresh (pool-aware). Unblocks every
Gmail/Drive/Calendar query for users on the cloud OAuth pool.
2026-05-20 01:58:59 -07:00
ciregenz
c670033238
eric] fix app builder cross-agent chat leak via draftLaunchMap (drop activeSessionId fallback)
2026-05-11 11:28:48 -07:00
ciregenz
54be1e8ba1
[eric] onboarding 1.0.31 + Settings draft persistence + LM Studio fix
2026-05-10 17:57:01 -07:00
ciregenz
0c841bdad4
[eric] onboarding revamp — agentic cursor walks users through 8 setup steps, WIP fixes: Gemini schema scrub, OpenAI GPT-5 routing, websearch cascade, gpt-5 is still a bit flaky...
2026-05-09 01:40:37 -07:00
ciregenz
577501c19f
[eric] sign-in flow polish: localhost activate + auto-refresh + clean signout
2026-05-07 12:44:45 -07:00
ciregenz
c501b6340c
[eric] OAuth + MCP polish: more reliable connect flow, Discord shim,
...
connected MCPs sort to top, Haiku-overflow warning, misc fixes, security risks fixes
2026-04-26 15:14:16 -07:00
ciregenz
ee91092284
[eric] fix packaged Mac boot: splash icon path, ship OAuth-only .env, exempt tools oauth callback from auth
2026-04-26 01:17:01 -07:00
ciregenz
801268d6b7
[eric] fix: exempt /api/health/* (prefix) so packaged boot doesn't deadlock on 401, onboarding: mirror Settings' provider connect flow so Gemini works, fix packaged-mode boot + sync onboarding Gemini connect flow
2026-04-25 02:27:23 -07:00
ciregenz
2379dd92be
[eric] security: lock down the local websocket + http api with a per-install auth token
2026-04-25 02:26:13 -07:00
ciregenz