[codex] add cloud gateway account management - #402

Open

jeremymcs wants to merge 48 commits into

mainfrom

codex/cloud-mcp-gateway-accounts-usage

Commits on Jul 25, 2026

feat: add cloud gateway account management

jeremymcs
authored and
codesmith-bot
committed
e82aa67
test(cloud-gateway): use scanner-safe auth fixtures

jeremymcs
authored and
codesmith-bot
committed
f064ea6
fix(mcp-server): avoid leaking HTTP errors

jeremymcs
authored and
codesmith-bot
committed
beae6a3
fix(cloud-gateway): declare clerk backend root dependency

jeremymcs
authored and
codesmith-bot
committed
1ad3628
ci: rerun swift codeql

jeremymcs
authored and
codesmith-bot
committed
d5b4d2a
fix(security): timing-safe auth token comparison and readLimit fractional sentinel

authored and
codesmith-bot
committed
4f2fe9e
fix: resolve cloud gateway rebase test conflict

jeremymcs
authored and
codesmith-bot
committed
29f6ba7
Apply PatchDeck fixes for PR #402

jeremymcs
authored and
codesmith-bot
committed
da539f6
fix(cloud-gateway): harden shutdown, tool results, and usage persistence

jeremymcs
and
codesmith-bot
committed
84ebe9a
fix(cloud-gateway): harden token add, /mcp routing, auth trimming, usage privacy

jeremymcs
and
codesmith-bot
committed
2756b27
fix(cloud-gateway): resolve sharp types build and harden gateway internals

jeremymcs
and
codesmith-bot
committed
8da04c5
fix(cloud-gateway): escape U+2028/U+2029 in account UI config script

jeremymcs
and
codesmith-bot
committed
8780556
fix(cloud-gateway): close per-request MCP server on abort and guard shutdown flush

jeremymcs
and
codesmith-bot
committed
b24766a
fix(cloud-gateway): return copies from auth/usage store snapshots

jeremymcs
and
codesmith-bot
committed
675fdbe
fix(daemon): keep unknown-tool executor test from spawning a real MCP server

jeremymcs
and
codesmith-bot
committed
a4d12f6
Merge origin/main; repair duplicated postcss@8.5.23 key in pnpm-lock.yaml

jeremymcs
and
codesmith-bot
committed
0f213a0
fix(daemon): guard parseArgsValue against malformed JSON array env values

jeremymcs
and
codesmith-bot
committed
afe31c0
fix(cloud-gateway): return 400 on malformed path encoding and swallow advertiseState rejection

jeremymcs
and
codesmith-bot
committed
e3117aa
fix(cloud-gateway): reserve billable quota, rate-limit unknown tools, clarify MCP servers parse error

jeremymcs
and
codesmith-bot
committed
8b35728
fix(cloud-gateway): index token auth lookups and accept trailing slash on /mcp

jeremymcs
and
codesmith-bot
committed
2a9bfb4
fix(cloud-gateway): report day/month usage and reject non-object JSON bodies

jeremymcs
and
codesmith-bot
committed
6bd270b
fix(cloud-gateway): reject server startup on listen errors

jeremymcs
and
codesmith-bot
committed
4251970
fix(cloud-gateway): surface minute reset time on accepted quota status

jeremymcs
and
codesmith-bot
committed
b5760e2
fix(cloud-gateway): broaden loopback detection and use sessionStorage for admin token

jeremymcs
and
codesmith-bot
committed
db09626
fix(cloud-gateway): read abort signal optionally in tool handler

jeremymcs
and
codesmith-bot
committed
fb5fc0e
fix(cloud-gateway): clamp fractional quota overrides to at least 1

jeremymcs
and
codesmith-bot
committed
d381aea

Commits on Jul 26, 2026

Merge remote-tracking branch 'origin/main' into codex/cloud-mcp-gateway-accounts-usage

jeremymcs
and
codesmith-bot
committed
c503c7e
fix(build): drop obsolete sharp paths override so build:core passes

jeremymcs
and
codesmith-bot
committed
8cd0cf2
fix(cloud-gateway): make debounced store persists non-fatal

jeremymcs
and
codesmith-bot
committed
f01803a
fix: guard usage reservation release across window rollover and wire gsd-mcp-server --http CLI

jeremymcs
and
codesmith-bot
committed
c5b2830
fix(mcp-server): bracket IPv6 hosts in the HTTP server URL

jeremymcs
and
codesmith-bot
committed
3988666
chore(security): allowlist dummy HTTP CLI test tokens in secret scan

jeremymcs
and
codesmith-bot
committed
09d5f9c
fix: skip runtime tool lookup for built-ins and validate CLI --port input

jeremymcs
and
codesmith-bot
committed
68d02f6
fix(cloud-gateway): throttle all calls but reserve day/month quota only for billable tools

jeremymcs
and
codesmith-bot
committed
30ffc96
fix(daemon): merge external MCP server env over default environment to keep PATH

jeremymcs
and
codesmith-bot
committed
02cdc23
fix(cloud-gateway): keep admin token in memory unless remember opt-in

jeremymcs
and
codesmith-bot
committed
a876839
fix(daemon): always close external MCP transport to avoid leaking stdio child

jeremymcs
and
codesmith-bot
committed
0246b58
fix(cloud-gateway): trim bearer tokens and handle CLI parse errors cleanly

jeremymcs
and
codesmith-bot
committed
f028f59
fix(cloud-gateway): require exact segment count on parameterized admin/account routes

jeremymcs
and
codesmith-bot
committed
42289bf
fix(cloud-gateway): boot account UI after DOMContentLoaded so deferred Clerk is loaded

jeremymcs
and
codesmith-bot
committed
6b37003
fix(mcp-server): reject a following flag as a CLI value instead of consuming it

jeremymcs
and
codesmith-bot
committed
761b370
fix(cloud-gateway): reject tokens for disabled users and clarify Clerk boot comment

jeremymcs
and
codesmith-bot
committed
d4125e0
fix(daemon): rate-limit external MCP route refresh on unknown tool names

jeremymcs
and
codesmith-bot
committed
51d9da4
fix(cloud-gateway): skip minute tracking when no minute limit applies

jeremymcs
and
codesmith-bot
committed
819bb75
fix(cloud-gateway): catch boot rejection and normalize parseBoolean input

jeremymcs
and
codesmith-bot
committed
db13f15
fix: strip brackets from IPv6 listen host and deep-copy quotaOverrides in snapshot

jeremymcs
and
codesmith-bot
committed
9dd1ac6
fix(cloud-gateway): harden normalizeInputSchema against malformed properties/required

jeremymcs
and
codesmith-bot
committed
8930bef
fix(daemon): trim explicit MCP command and close in-flight connections on shutdown

jeremymcs
and
codesmith-bot
committed
5dc62a7