Skip to content

feat(gateway): rename the SSO provider to AIGW - #340

Merged
quickbeard merged 2 commits into
mainfrom
feat/rename-sso-provider
Aug 27, 2026
Merged

quickbeard merged 2 commits into
mainfrom
feat/rename-sso-provider

Conversation

@quickbeard

Copy link
Copy Markdown
Owner

What

The SSO-issued gateway identity is renamed from netgate / "netGate" to aigw / "AIGW". New sign-ins (TUI /configure, desktop sign-in, sandbox guest configs) write provider.aigw blocks labeled AIGW in the model picker.

Companion hub PR renames the same identity in codev-hub so hub-managed and self-configured installs stay indistinguishable.

Back-compat

Follows the established pattern from the previous identity rename (aigateway → netgate): the old id stays recognized, nothing writes it any more, and configs converge on the new id at their next full rewrite.

  • New export LEGACY_GATEWAY_PROVIDER_IDS = ["netgate"] in @codev/gateway.
  • Candidate sets updated to ["aigw", "netgate", "ai-gateway", "aigateway"]: the startup inline-key migration (gateway-key-migration.ts) and the upload readers (codev-upload/src/config.ts), mirroring the hub's probe set.
  • The upload sign-in nudge counts the legacy id as SSO-origin.
  • Silent key refresh heals legacy configs — this gap is new since the last rename (short-lived keys shipped after it): the desktop's ensureKey now returns providerIDs (current + legacy ids) and the renderer writes the re-minted key under each, so a pre-rename provider.netgate block keeps getting fresh credentials instead of 401ing when its short-lived key expires.

A user who re-runs a codev-code configure flow on a legacy install gets an aigw block merged beside the lingering netgate one (config PATCH is a deep merge and cannot delete); both keep working, and a hub-managed install converges fully on its next hub configure/refresh, which rewrites the file wholesale.

Tests that pin legacy recognition (upload base-URL readback, inline-key migration, the nudge) deliberately keep netgate fixtures; identity-pinning tests moved to aigw/AIGW.

Verification

  • bun typecheck clean in codev-gateway, codev-upload, desktop, app, opencode, tui
  • Tests: codev-gateway 52 pass, codev-upload 42 pass, desktop 152 pass, app 814 pass, opencode config+provider suites 526 pass, tui use-connected 3 pass (one unrelated 5s-timeout flake in provider.test.ts under suite load passed on re-run and reproduces without these changes)

🤖 Generated with Claude Code

quickbeard and others added 2 commits August 27, 2026 17:49
New SSO sign-ins write the gateway provider as aigw, labeled AIGW. The
pre-rename netgate id stays recognized everywhere (candidate sets, the
inline-key migration, the upload readers, the sign-in nudge), and the
desktop's silent key refresh now re-keys legacy ids too, so pre-rename
configs keep working and converge on the new id at their next full
config rewrite.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@quickbeard
quickbeard merged commit b098000 into main Aug 27, 2026
0 of 5 checks passed
@quickbeard
quickbeard deleted the feat/rename-sso-provider branch August 27, 2026 11:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant