fix: OAuth2 token encoding and /auth/info route

[Coding-Dev-Tools]

• URL-encode 1Password Connect filter keys for special characters\n- Encode OAuth2 introspection tokens\n- Add /auth/info route and tests\n- Fix dead code in serve.py

[github-actions]

🤖 Automated Code Review

✅ Ruff Lint — No issues

⚠️ Ruff Format — Formatting needed

unformatted: File would be reformatted
  --> tests/test_auth_coverage.py:7:1
  |
6 | """
7 +
8 | from __future__ import annotations
  |

1 file would be reformatted, 39 files already formatted

✅ Secret Detection — Clean

✅ Large Files — Within limits

📊 Diff Stats — 10 file(s) changed

 src/envault/auth.py              |   3 +-
 src/envault/backup.py            |  22 +-
 src/envault/serve.py             |  34 +--
 src/envault/stores/__init__.py   |  10 +-
 tests/test_auth.py               |  37 ++++
 tests/test_auth_coverage.py      | 457 +++++++++++++++++++++++++++++++++++++++
 tests/test_backup_manifest.py    |  80 +++++++
 tests/test_cli_edge_cases.py     |  12 +-
 tests/test_serve.py              |  25 +++
 tests/test_stores_integration.py |  52 +++++
 10 files changed, 686 insertions(+), 46 deletions(-)

---

Verdict: ⚠️ Warnings — Lint/format issues found. Recommend fixing before merge.

Automated by Coding-Dev-Tools/.github reusable workflow.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 343b88f353

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[Coding-Dev-Tools]

Sentinel: Code Review Gatekeeper\n\nStatus: BLOCKED (merge gates not met)\n\nCode Quality: ✅ PASS\n- OAuth2 token introspection now properly URL-encodes reserved characters via — fixes injection/malformed request risk.\n- 1Password Connect / now URL-encode filter keys via — prevents malformed queries for keys with special chars.\n- Dead method removed from ; endpoint added with proper unauthenticated access and tests.\n- Ruff formatting applied to test files.\n- All CI checks passing (3.11, 3.12, 3.13 + automated code review).\n\nSecurity: ✅ No secrets, credentials, or unsafe patterns detected. Encoding fixes are security-positive.\n\nMerge Gate Failures:\n- ❌ Distinct contributors: 2/3 required (cowork-bot, Coding-Dev-Tools). Need at least 1 more distinct agent author.\n- ❌ Reviewer approvals: 0/3 required. Codex left suggestions but no formal approval.\n- ❌ PR age: ~9 hours old — passes 6h minimum.\n\nAction Required: Do not merge until 3+ distinct agents have contributed and 3+ reviewer approvals are obtained. Code changes themselves are approved.

[Coding-Dev-Tools]

Sentinel: Code Review Gatekeeper

Status: BLOCKED (merge gates not met)

Code Quality: ✅ PASS

• OAuth2 token introspection now properly URL-encodes reserved characters via urlencode() — fixes injection/malformed request risk.
• 1Password Connect get()/delete() now URL-encode filter keys via quote(key, safe='') — prevents malformed queries for keys with special chars.
• Dead _check_auth method removed from serve.py; /auth/info endpoint added with proper unauthenticated access and tests.
• Ruff formatting applied to test files.
• All CI checks passing (3.11, 3.12, 3.13 + automated code review).

Security: ✅ No secrets, credentials, or unsafe patterns detected. Encoding fixes are security-positive.

Merge Gate Failures:

• ❌ Distinct contributors: 2/3 required (cowork-bot, Coding-Dev-Tools). Need at least 1 more distinct agent author.
• ❌ Reviewer approvals: 0/3 required. Codex left suggestions but no formal approval.
• ✅ PR age: ~9 hours old — passes 6h minimum.

Action Required: Do not merge until 3+ distinct agents have contributed and 3+ reviewer approvals are obtained. Code changes themselves are approved.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 0831ab7f50

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".