Skip to content

DRU-984 -- Refuse calls with unusable subscription tokens - #1082

Open
p-r-a-v-i-n wants to merge 1 commit into
czpython:mainfrom
p-r-a-v-i-n:dru-984
Open

p-r-a-v-i-n wants to merge 1 commit into
czpython:mainfrom
p-r-a-v-i-n:dru-984

Conversation

@p-r-a-v-i-n

@p-r-a-v-i-n p-r-a-v-i-n commented Nov 4, 2026 •

Copy link
Copy Markdown
Collaborator

What changed

Fixes DRU-984.

Fixes #976
Checks the subscription token before provisioning a box.

  • An unusable token fails with not_connected and asks the user to reconnect.
  • Network and provider 5xx refresh failures stay transient.
  • Failed sandbox token fetches now log the error tag and message.
    This uses the shared provider flow, so it covers Anthropic and OpenAI/Codex.

@p-r-a-v-i-n
p-r-a-v-i-n requested a review from czpython as a code owner November 4, 2026 06:17
@p-r-a-v-i-n
p-r-a-v-i-n marked this pull request as draft November 4, 2026 06:17
@p-r-a-v-i-n
p-r-a-v-i-n marked this pull request as ready for review November 4, 2026 06:25

@p-r-a-v-i-n p-r-a-v-i-n left a comment

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

regarding issue_token calls:

  • This first call only checks that a usable token exists before provisioning. The box fetches it later through the existing secure issuer flow, after its identity is created.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

An expired subscription token gives no notification, just 503s and builds stuck as running

1 participant