Skip to content

fix(ai): remove Radius authentication and access #290

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Pepps233 merged 3 commits into from
Oct 27, 2026
Merged

fix(ai): remove Radius authentication and access #290

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
3cd8496
fix(ai): remove Radius authentication and access
Pepps233 Oct 27, 2026
0ed872f
fix(ai): synchronize provider validation
Pepps233 Oct 27, 2026
c744465
fix(coding-agent): synchronize secure fixtures
Pepps233 Oct 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 3 additions & 2 deletions docs/release/provider-branding-validation.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,8 @@

Diffex controls the local callback presentation and default application attribution.
Registered OAuth client IDs, provider consent pages, authentication protocols, stored credentials, inference endpoints, and payloads remain unchanged.
The separate Diffex account feature and Radius implementation are excluded.
The separate Diffex account feature is excluded.
Radius was excluded from the original branding change and subsequently removed from the built-in provider and authentication integrations.

## Implemented defaults

Expand Down Expand Up @@ -37,7 +38,7 @@ Attribution tests cover enabled and disabled settings, environment overrides, co
A browser-bundled Codex stream also completed against a mock with `process` absent and the expected `diffex (browser)` User-Agent.

`npm run check` passes, including the runtime identity inventory and browser bundle smoke check.
The inventory retains four occurrences across three documented exceptions: the Radius client ID, the Radius gateway, and two occurrences in the original DOOM integration credit.
The inventory retains only two occurrences in one documented exception for the original DOOM integration credit.
The audit found no inherited Pi application labels in other built-in provider login implementations or shared login UI.
Provider protocol labels such as GitHub Copilot and Claude CLI headers remain unchanged.

Expand Down
10 changes: 0 additions & 10 deletions packages/ai/src/auth/oauth/load.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,6 @@ type OAuthFlowLoaders = {
openrouter: () => OAuthAuth | Promise<OAuthAuth>;
kimiCoding: () => OAuthAuth | Promise<OAuthAuth>;
xai: () => OAuthAuth | Promise<OAuthAuth>;
radius: (options: { name: string; gateway: string }) => OAuthAuth | Promise<OAuthAuth>;
};

let bundledLoaders: OAuthFlowLoaders | undefined;
Expand Down Expand Up @@ -57,12 +56,3 @@ export const loadXaiOAuth = async (): Promise<OAuthAuth> => {
if (bundledLoaders) return bundledLoaders.xai();
return ((await importOAuthModule("./xai.ts")) as { xaiOAuth: OAuthAuth }).xaiOAuth;
};

export const loadRadiusOAuth = async (options: { name: string; gateway: string }): Promise<OAuthAuth> => {
if (bundledLoaders) return bundledLoaders.radius(options);
return (
(await importOAuthModule("./radius.ts")) as {
createRadiusOAuth: (input: { name: string; gateway: string }) => OAuthAuth;
}
).createRadiusOAuth(options);
};
Loading
Loading