feat(auth): store acquired OAuth tokens in the secret store; clobber-safe oauth.json writes - #2482

Merged

BobDickinson merged 46 commits into

v2/feat/2481-oauth-tokens-secret-store

Sep 27, 2026

Commits on Sep 24, 2026

fix(auth): stop stale-snapshot writers from clobbering oauth.json

BobDickinson
and
Copilot
committed
cd4ccf9
feat(auth): move OAuth tokens and client secrets into the secret store

BobDickinson
and
Copilot
committed
8549ef0
docs: reflect that acquired OAuth tokens now live in the secret store

BobDickinson
and
Copilot
committed
e4a3df5
fix(auth): address review — colon-free store ids, non-durable preservation, locked removal

BobDickinson
and
Copilot
committed
65a31f4
fix(auth): address review round 2 — confirmed deletes, policy-aware compare, policy-free migration

BobDickinson
and
Copilot
committed
10bc31a
fix(auth): address review round 3 — file-store confirmed deletes, lock-error typing, route 503s

BobDickinson
and
Copilot
committed
a837158
fix(auth): roll back unindexed store secrets when the residue write fails

BobDickinson
and
Copilot
committed
a7cea03
fix(auth): restore prior store secrets when the OAuth residue write fails

BobDickinson
and
Copilot
committed
961cb16
fix(auth): enforce file/store consistency invariant across every combined writer

BobDickinson
and
Copilot
committed
6aba8d8
fix(auth): make deleteClientConfigStore all-or-nothing

BobDickinson
and
Copilot
committed
64e27b8
fix(auth): settle parallel store mutations before rollback; transactional server DELETE

BobDickinson
and
Copilot
committed
d6bee93

Commits on Sep 25, 2026

Commits on Sep 26, 2026

fix: split registration_access_token into the secret store

BobDickinson
and
Copilot
committed
581e387
fix(cli): surface secret-store failures instead of reporting no_stored_token

BobDickinson
and
Copilot
committed
6ebb203
fix(server): drive rename secret copy from strict reads; name the right locked file

BobDickinson
and
Copilot
committed
b43a5eb
fix(cli): classify auth errors by type, not message keywords; isolate smokes from host keychain

BobDickinson
and
Copilot
committed
c6baeba
docs(auth): correct StoredOAuthClientInformation provenance comment

BobDickinson
and
Copilot
committed
fe3872c
fix(storage): restore non-__proto__ Object.prototype names as valid store ids

BobDickinson
and
Copilot
committed
8d83c83
fix(cli): rethrow permanent read failures at the --wait-for-auth deadline

BobDickinson
and
Copilot
committed
752eea6
fix(auth): compensate partial secret-store commits before degrading

BobDickinson
and
Copilot
committed
2d85cea
fix(auth): keep prior residue on memory-only degrade; sweep rename destination

BobDickinson
and
Copilot
committed
1205d7d
Merge remote-tracking branch 'origin/v2/main' into v2/feat/2481-oauth-tokens-secret-store
BobDickinson
committed
67ea28a
test: update degrade expectation for entry-level all-or-nothing revert

BobDickinson
and
Copilot
committed
d45cb27
test: fix semantic merge conflict in unredacted-classification test

BobDickinson
and
Copilot
committed
cabb007
fix(cli): bound --wait-for-auth reads by the wait deadline

BobDickinson
and
Copilot
committed
bcaf4a2
fix(auth): reject non-string secret values before they poison the store

BobDickinson
and
Copilot
committed
944dc32
fix(auth): share load/persist coordination per path; pin remote backend store id

BobDickinson
and
Copilot
committed
ba3c5b5
fix(auth): verify OAuth sectioned writes converge, re-applying over interleaved writers

BobDickinson
and
Copilot
committed
3abec6a
fix(auth): restore to a fold-rule baseline on failed sectioned writes

BobDickinson
and
Copilot
committed
311c615
docs(spec): double-failure store/file mismatch persists, not self-heals

BobDickinson
and
Copilot
committed
ca122e3
fix(auth): unify failure reconciliation and validate persisted token payloads

BobDickinson
and
Copilot
committed
d542c83
fix: keep unservable token payloads plaintext; serve them as no tokens

BobDickinson
and
Copilot
committed
b560321
docs: residue is not unconditionally secret-free

BobDickinson
and
Copilot
committed
f5b232a
fix: store partial token payloads instead of keeping them plaintext

BobDickinson
and
Copilot
committed
6b7c8ea
fix: persist only changed secret fields on section saves

BobDickinson
and
Copilot
committed
a1914bc
fix: serialize client.json combined writers and make bulk reads proto-safe

BobDickinson
and
Copilot
committed
fc55e11