Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: hyperbrowserai/python-sdk
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: main
Choose a base ref
...
head repository: hyperbrowserai/python-sdk
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: use_hx_creds
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 4 commits
  • 19 files changed
  • 3 contributors

Commits on Aug 15, 2026

  1. Add ability to use hx creds if api key not provided 

    Fall back to a saved hx OAuth session when no API key is set, refresh tokens against the frontend host, and retry replayable 401s.
    @shrisukhani
    shrisukhani committed Aug 15, 2026
    Configuration menu
    Copy the full SHA
    c6eadc7 View commit details
    Browse the repository at this point in the history

  2. Fix OAuth auth review findings 

    Route sandbox control-plane calls through authenticated transport, stop re-reading env after config is resolved, and harden session refresh, lock handling, and ClientConfig compatibility.
    @shrisukhani
    shrisukhani committed Aug 15, 2026
    Configuration menu
    Copy the full SHA
    a172a16 View commit details
    Browse the repository at this point in the history

  3. Harden OAuth refresh and collapse duplicated auth plumbing 

    Always refresh on 401, cache tokens in memory, run async auth off the event loop, and stop deleting sessions or locks owned by another process.
    @shrisukhani
    shrisukhani committed Aug 15, 2026
    Configuration menu
    Copy the full SHA
    fa10ca2 View commit details
    Browse the repository at this point in the history

  4. Clear refresh token expiry when the token is rotated 

    A refresh response that issues a new refresh_token without
refresh_token_expires_in no longer inherits the previous token's
lifetime. That leftover expiry could make a still-valid session look
expired and force another hx auth login.

Co-authored-by: Shri Sukhani <shrisukhani@users.noreply.github.com>
    @cursoragent @shrisukhani
    cursoragent and shrisukhani committed Aug 15, 2026
    Configuration menu
    Copy the full SHA
    0d60c10 View commit details
    Browse the repository at this point in the history
Loading