GitHub App credential: stop the refresh storm, coordinate renewal, tell the truth in the UI - #1137

Merged

arul28 merged 10 commits into

mainfrom

ade/github-app-credential-renewal

Aug 20, 2026

Commits on Aug 20, 2026

Stop the GitHub App credential refresh storm and tell the truth about auth state

arul28
and
claude
committed
4e62cf5
Apply /quality findings: guard stale refresh writes, soften dead-token policy, dedupe failure paths

arul28
and
claude
committed
f1c8b77
Apply /quality wave 2: clamp poisoned deadlines, honest failure kinds, typed relay failure

arul28
and
claude
committed
e121340
Apply /quality wave 3: one gate ladder, renewing copy on both axes, brain-side repair

arul28
and
claude
committed
192a719
Apply /quality wave 4: renewing failure kind, scoped trailing-edge repair, module-scope ladder

arul28
and
claude
committed
b6947bc
Apply /quality wave 5: fail-open repair reads, one ladder for key updates, guarded account writes

arul28
and
claude
committed
5e02c75
/test: consolidate suites, docs + CLI parity, renewing arm for the PR snapshot error

arul28
and
claude
committed
964dbd8
Ship revalidation: CLI formatter judges through the shared derivation

arul28
and
claude
committed
eea37e5
Ship iter 1: fix review findings from Cursor and CodeRabbit

arul28
and
claude
committed
36f8fbf
Ship iter 2: green CI teardown, lease shared per store, bounded refresh exchange

arul28
and
claude
committed
3e0de0c