fix(oauth): store keyring tokens as one entry per provider - #668

Open

euxaristia wants to merge 17 commits into

Gitlawb:mainfrom

euxaristia:fix/keyring-oauth-per-provider-entries

Commits on Jul 22, 2026

fix(oauth): store keyring tokens as one entry per provider
euxaristia
committed
fix(oauth): lock keyring reads against concurrent Save/Delete
euxaristia
committed
fix(oauth): make the keyring token store bounded, recoverable, and mixed-version safe
euxaristia
committed
test(oauth): assert Status also stays lock-free behind a crashed writer's lock
euxaristia
committed
fix(oauth): recover legacy tokens across an interrupted keyring migration
euxaristia
committed
fix(oauth): lease the keyring lock with wall-clock time
euxaristia
committed
fix(oauth): bound the keyring index chunk count before reading
euxaristia
committed
fix(oauth): scope the keyring fallback lock to a per-user path
euxaristia
committed
fix(oauth): fail logout on legacy-blob delete failure; cap index chunks on write

euxaristia
and
claude
committed
fix(oauth): use wall clock for lock timeout and bound keyring index
euxaristia
committed
fix(oauth): refuse keyring indexes over the reader key cap on write
euxaristia
committed
fix(oauth): derive the keyring lock path from keyring identity, not file config
euxaristia
committed
fix(oauth): refuse to delete the legacy keyring blob on a transient read error
euxaristia
committed
fix(oauth): dedupe and validate the keyring index before fanning out lookups
euxaristia
committed
fix(oauth): anchor the keyring lock on home dir and honor the legacy lock
euxaristia
committed

Commits on Jul 23, 2026

fix(oauth): preserve token scopes across refresh and encode keyring lock file components
euxaristia
committed

Commits on Jul 24, 2026

fix(oauth): address review findings on legacy freshness, unindexed keys, lock path, and keyring key cap
euxaristia
committed