Kevin Le c233c7c8fc fix(codex): durable OAuth refresh lifecycle ...

Add shared OAuth credential lifecycle manager with provider-aware refresh
decisions. Implement CodexExecutor.refreshCredentials so 401/403 retry
refresh works for Codex, track lastRefreshAt and refresh before the
upstream stale-token window, preserve omitted idToken, and add
per-connection single-flight refresh to avoid refresh-token rotation races.

Merged from PR #1664.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-06-06 11:04:36 +07:00

6.4 KiB

Raw Blame History

View Raw