pantograph.git/libpanto/src/auth.zig, branch main

Move libpanto projects to libpantograph dependency

2026-07-07T18:15:28Z

Remove the in-repo libpanto sources and binding projects from pantograph. Consume libpantograph through the Zig package URL at code.tjp.lol/libpantograph.git, including the Lua module artifact used by CLI extensions.

ponytail simplifications to panto cli and lua extensiosn

2026-06-23T16:53:26Z

libpanto ponytail-audit simplifications

2026-06-23T15:34:55Z

auth: flatten [auth.] config + ${...} substitution

2026-06-15T21:08:32Z

Collapse the auth schema: infer `type` from keys, replace key/key_env_var with a single `key` (resolved via substitution), flatten the exchange to flat `exchange_*` keys, and drop the auth-level headers tables in favor of reusing the provider's `extra_headers` on the auth HTTP calls. Add `${sibling}` and `${env:VAR}` substitution over auth values (GitHub Enterprise = set `domain`). Restore api_key-empty → provider-drop. Update default config, docs, and tests.

auth: OAuth device flows, refresh, and Copilot exchange (C5)

2026-06-15T21:08:32Z

Implement the device-authorization flow for both dialects (GitHub `token` direct-poll; Codex `codex` poll→authorization-code→PKCE exchange), refresh_token grant, Copilot secondary token exchange, JWT exp parsing, Codex account-id extraction, and pure credential-building/refresh predicates. Adds a Presenter hook for rendering the device-code prompt. Exported from public.zig.

auth: HTTP helper + token storage (C3, C4)

2026-06-15T21:08:32Z

Add libpanto http_helper (non-streaming request/response over the global client, plus dotted-JSON-path readers) and token persistence in auth.zig (load/save/delete TokenSet under an embedder-chosen auth dir, owner-only files). Add $PANTO_HOME/auth to the panto_home layout.

auth: clean-break named [auth.] sessions + extra_headers

2026-06-15T21:08:32Z

Replace provider-level api_key/api_key_env_var with named auth sessions: providers now reference `auth = ""` and credentials live under `[auth.]`. Adds the libpanto auth type surface (AuthConfig, TokenSet, ResolvedCredential), a Header type and provider `extra_headers`, and rewires the CLI config loader (parse [auth.], require auth=, providers always survive, eager api_key resolution). Updates the shipped default config.