rtmx-ai / rtmx / 23648961646

79%

push

github

feat: OIDC auth + cross-repo move/clone (REQ-GO-040, REQ-GO-075)

REQ-GO-040: Generic OIDC client with PKCE
- rtmx auth login/status/logout commands
- Provider-agnostic: works with Zitadel, Okta, Auth0, any OIDC provider
- PKCE flow with browser redirect and local callback server
- Token storage at ~/.rtmx/auth/tokens.json (0600 permissions)
- Auto-refresh expired tokens
- 27 tests + fuzz test (80.8% coverage)

REQ-GO-075: Cross-repo requirement move and clone
- rtmx move REQ-ID --to PATH (transfer with provenance)
- rtmx clone REQ-ID --to PATH (fork with bidirectional links)
- Bidirectional external_id links in both databases
- Spec file copying, --dry-run, --id override
- 20 behavioral tests with real temp directories

Unblocks REQ-GO-041 (OpenZiti) and REQ-GO-076/077 (PR workflow).
107 complete, 19 missing (84.9%)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

463 of 733 new or added lines in 4 files covered. (63.17%)

7610 of 9691 relevant lines covered (78.53%)

23.53 hits per line