Avoid stale keychain refresh during OAuth login#21

Merged

dotCipher merged 1 commit into

mainfrom

fix/oauth-keychain-refresh-noise

May 30, 2026

Owner

dotCipher commented May 30, 2026

Summary

make Claude CLI keychain bootstrap read-only during startup, loader, and explicit OAuth login
prefer OpenCode stored OAuth refresh before falling back to expired Claude CLI keychain refresh
avoid retrying the same refresh token twice in one refresh attempt

Verification

npm run typecheck
npm test (109/109)
local read-only keychain check returns no-valid-cli-token without invalid_grant logging


          fix: avoid stale keychain refresh during oauth login

c37d163

dotCipher merged commit 32a2ccc into main

1 check passed

dotCipher deleted the fix/oauth-keychain-refresh-noise branch

May 30, 2026 23:30

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet