Repository navigation
Integrate OAuth authority and bounded Range fixes on current main - #195
Merged
Merged
Conversation
LIghtJUNction
marked this pull request as ready for review
September 30, 2026 10:15
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
Contributor
Author
|
Verified #196 supersedes this integration: its current head 5954ff2 retains 4488343 as a parent, and all 11 changed file blobs here (including the workflow) match exactly. Its unchanged source tree 196cc764 also adds the bounty acceptance coverage and delivery documentation. Use #196 as the single merge path and validate its current-head CI; keep this PR as evidence until the equivalent fixes are actually on main. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Current main 9f4806d contains #189 but not the complete #192 follow-up, and oversized hosted/raw Range numbers still bypass the intended 416 response. This integrates the complete validated #192 change set at c92135b and the independent #194 Range changes at 0f057bf on that main baseline.
OAuth/API bindings recheck current source authority while preserving custodial login against live policy, grantless vault keys, and the actual three-field API binding shape. Userinfo stays read-only. Hosted/raw readers bound numeric Range parsing before conversion, retaining normal ranges and If-Range behavior.
All 11 changed file blobs exactly match their respective previously validated PR versions; existing main/TUI changes are retained. This is the new main-targeted integration for closed #192 and includes #194 without duplicating its implementation. Refs #76, #78, #79, #83.
Local combined validation: 20 focused pure regressions pass; Ruff check/format (601 files) and Python 3.15 warnings-as-errors compile pass. The real PostgreSQL HTTP flows, dual-locale integration, eight-shard contracts and installed deployment rehearsal must pass for this exact combined tree 92d878ce296083b7c83f4afe86e047770371cf83. Previous separate green runs are supporting evidence, not final combined validation.
Repository workflows were inspected: their deployment workflow is a disposable installed-wheel rehearsal with read-only repository permissions and artifact output. No production deployment or release is part of this PR.