AI Coding Live News — Real-Time 𝕏/Twitter Updates & Breakthroughs

👀7

🔥83

Vercel Token Pass Credit Applies Automatically on AI Gateway via API Key, OIDC, or fx Login

On 2026-11-06 Vercel updated Token Pass so featured-model usage through AI Gateway draws credit automatically with a standard API key, OIDC token, or fx login. When credit runs out, those auth modes fall back to team AI Gateway credits; dedicated Token Pass keys still stop until the next billing period.

Key Takeaways

Official: Vercel changelog 2026-11-06 — Token Pass credit now applies automatically across AI Gateway
Behavior: standard API key, OIDC, or fx login can draw Token Pass credit; dedicated key optional
Fallback: when credit ends, standard key/OIDC use team AI Gateway credits; dedicated Token Pass keys still stop until next period
Product terms: ~$30/month for ~$80 featured open-weight credit on Pro; Token Pass path stays ZDR
Guidance: early Token Pass key users should switch to standard key/OIDC to enable fallback

Read full story

Linked Models & Agents:

⚡ Kimi K3 ⚡ GLM-5.3 ⚡ DeepSeek-V4.1-Flash 🌐 Vercel

#Vercel#Token Pass#AI Gateway#Pricing#OIDC#ZDR

Tibo@thsottiaux·Collected 29d ago

👀97

🔥86

View on 𝕏 ↗

OpenAI quietly re-ships Codex Cloud: cloud agents reach private services over Tailscale, with MagicDNS and OIDC short-lived credentials

Codex lead Tibo said on day 3 (encore) of OpenAI's ship weeks that Codex Cloud was silently re-shipped. Official cloud-environment docs now let an environment join a tailnet via Advanced > VPN (Tailscale is the only supported provider), so cloud tasks can reach private HTTP/HTTPS services, with IPv4 subnet routes, MagicDNS and split DNS; Enterprise workspaces can request OIDC for short-lived cloud credentials. Tailscale says it had no idea and published hardening advice such as tagging agent nodes tag:codex.

Key Takeaways

Traction: Tibo's re-ship post hit 2,300+ likes and ~179K views in ~1.5h; Tailscale's announcement has 3,900+ likes and 2,100+ bookmarks
Setup: Advanced > VPN > Tailscale with an auth key marked both Reusable and Ephemeral so task VMs join and are cleaned up automatically (docs)
Scope: HTTP/HTTPS only, private IPv4 subnet routes supported; destinations must be allowed in both Tailscale ACLs and the environment's internet-access policy
DNS: docs now list MagicDNS and split DNS support, while Tailscale's Oct 6 post said they did not work, so the re-ship changed behavior (Tailscale blog)
Identity: Enterprise can request OIDC so tasks get short-lived cloud credentials scoped to that identity, not the user's own permissions

Read full story

Linked Models & Agents:

⚡ GPT-6.1 Sol 🤖 Codex Cloud 🤖 Codex 🌐 OpenAI 🌐 Tailscale

#Codex Cloud#OpenAI#Tailscale#VPN#OIDC#Security

BerriAIBerriAI·Collected 37d ago

👀63

🔥88

LiteLLM 1.103.1: bind UI/CLI session tokens to their own AES-GCM context (1.103.x security backport)

LiteLLM v1.103.1 (PyPI ~2026-09-29T23:36Z; 5 commits ahead of 1.103.0) backports binding UI/CLI session tokens to their own AES-GCM encryption context (a80eaca), with e2e/OIDC and auth unit tests—security hardening for operators pinned on the 1.103.x stable line.

Key Takeaways

Release v1.103.1; 5 commits vs v1.103.0
Security: bind UI/CLI session tokens to dedicated AES-GCM context (a80eaca)
Tests: session-token e2e + OIDC Playwright login specs
Stable-line patch after 1.103.0; do not confuse with 1.104/1.105 pre-releases
pip install 'litellm==1.103.1'; https://docs.litellm.ai/docs/ ; https://pypi.org/project/litellm/1.103.1/

Read full story

Linked Models & Agents:

🤖 LiteLLM Proxy 🌐 BerriAI 🌐 LiteLLM

#Litellm#Proxy#Security#Aes gcm#Session token#Auth#Release#Gateway