Claude cb26a6f7d2 ⏳ fix: Keep Elapsed Expiries Elapsed and Revoke the Superseded Session ... Two of the five findings from the Codex pass on fcdc15885 — the two that are defects in code this branch introduced rather than design questions about the bridge. `getSkewedTokenExpiresAtMs` floored every result at a second in the future, including an expiry the provider had already declared elapsed. An exchange answering `expires_in: 0` or a past `expires_at` was handed to the MCP connection stamped valid for another second, which only moves the failure downstream. The floor now applies to a lifetime that is still live, which is what it was for; an elapsed one stays elapsed so the caller rejects it. Same for the cache TTL, which falls back to the elapsed-credential floor. Bridge recovery left the stale token's durable Session behind. Only the token it recovered through was passed as `existingRefreshToken`, so that one's session was replaced while the token the browser actually presented kept its record until its original expiry. That record, with the marker cookie still bound to it, is what authorizes local image access for OpenID users — so a copy of the stale cookie outlived the rotation it had lost. Revoked explicitly on successful recovery. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01SxKWxwqxAGckYpRsYTqx3F		2026-08-29 17:29:39 +00:00
..
app	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session	2026-08-29 13:40:21 +00:00
cache	⚡ perf: Avoid Parallel Full and Paged Prompt Loading on Startup (#15031)	2026-08-25 21:21:17 -04:00
config	🫆 chore: Remove Published Credential Defaults (#14680)	2026-08-07 07:25:05 -04:00
db	🐇 refactor: Decouple Meilisearch From Document Saves (#15109)	2026-08-21 22:26:44 -04:00
models
server	⏳ fix: Keep Elapsed Expiries Elapsed and Revoke the Superseded Session	2026-08-29 17:29:39 +00:00
strategies	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session	2026-08-29 13:40:21 +00:00
test	🛑 fix: Separate Agent Event Backpressure From User Bans (#15200)	2026-08-25 09:27:35 -04:00
utils	⚡ feat: Add Gemini 3.7 Flash Support (#14818)	2026-08-14 01:12:42 -04:00
jest.config.js
jsconfig.json
package.json	🤖 feat: make Event Actor HITL durable (#15305)	2026-08-28 08:05:11 -04:00
typedefs.js