docs: warn about extended-agent OAuth - #25810
Conversation
The Claude extension example implied that proxy-managed OAuth works for a third-party child kit. Document the working API-key setup, explain that sbx generates the binding during first-run approval, and warn that the prompt's OAuth option does not activate interception. Co-Authored-By: Claude <noreply@anthropic.com>
✅ Deploy Preview for docsdocker ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
docker-agent
left a comment
docker-agent
left a comment
There was a problem hiding this comment.
Assessment: 🟢 APPROVE
The PR correctly documents that proxy-managed OAuth is not supported for third-party kits that extend built-in agents, and guides users to the API-key setup flow as the working alternative. The added content in both kit-examples.md and credentials.md is accurate, well-scoped, and consistent with the existing document style. No style violations, broken links, or structural issues were found in the changed lines.
docker-agent
left a comment
docker-agent
left a comment
There was a problem hiding this comment.
Assessment: 🟡 NEEDS ATTENTION
Two medium findings in the new content. No high-severity or style issues detected.
Tell users to review credential mechanisms individually and decline unsupported OAuth. Clarify the first-run behavior for third-party sandbox agents without removing OAuth binding coverage from the general documentation. Co-Authored-By: Claude <noreply@anthropic.com>
Keep the credential approval flow unchanged and state only that OAuth is ineffective for the extended agent. Restore the general first-run explanation for both API-key and OAuth bindings. Co-Authored-By: Claude <noreply@anthropic.com>
|
Merging this; note to self that this will be fixed in the next release so I'll open a follow-up PR to revert. |
3 participants
Summary
Explain that proxy-managed OAuth does not work for third-party kits that extend built-in agents, and document the working host-stored API-key flow and generated credential-binding approval.
Closes docker/sbx-releases#434
@netlify /ai/sandboxes/customize/kit-examples/
Generated by Codex
TODO: follow-up in v0.40, where this is fixed (via https://github.com/docker/sandboxes/pull/4985)