[waleedlatif1]

Summary

• Add Apollo OAuth connections alongside existing saved and inline API keys.
• Support partner authorization, rotating refresh tokens, and self-hosted client setup; offer OAuth only when its client is configured and workspace policy permits it.
• Validate mixed credential pickers while preserving the existing API-key request path.

Type of Change

• New feature

Testing

• Apollo OAuth protocol and profile validation tests, including negative controls for URL encoding, provider identity, and response byte limits
• Saved-credential contract and sibling credential, block, and availability tests
• Live OAuth code exchange, profile verification, bearer-token API request, rotating refresh, and refreshed-token read (5/5 checks)
• Production app build and organization-search browser scenario (20 checks), plus redirect-classification negative controls
• Full repository lint, type-check, audits, tests, and block-registry checks

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing (new tests pass the test-audit authoring gate)
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Nov 12, 2026 5:31am UTC

[greptile-apps]

Confidence Score: 5/5

[Medium impact] The PR appears safe to merge; no actionable new issues were found.

Summary

Adds optional Apollo OAuth connections alongside saved and inline API keys.

• Apollo accounts can connect to workflows through OAuth.
• Apollo tools use the selected credential’s matching authentication header.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart LR
  Picker[Choose Apollo credential] --> OAuth[Saved OAuth account]
  Picker --> Key[Saved or inline API key]
  OAuth --> Refresh[Refresh token when needed]
  Refresh --> Bearer[Send Authorization header]
  Key --> ApiKey[Send X-Api-Key header]
  Bearer --> Apollo[Apollo API]
  ApiKey --> Apollo

Loading

_{Reviews (3) · Last reviewed commit: "fix(apollo): respect workspace policy fo..." · Reviewed by Greptile}

[cubic-dev-ai]

No issues found across 47 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Turn on auto-fix | Re-trigger cubic}

[waleedlatif1]

@greptile

[waleedlatif1]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

All reported issues were addressed across 49 files

<sub>Reply with feedback, questions, or to request a fix.

Turn on auto-fix | Re-trigger cubic</sub>

[waleedlatif1]

@greptile

[waleedlatif1]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

No issues found across 49 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Turn on auto-fix | Re-trigger cubic}