feat(cli): add encrypted token store to integration templates - #3310

Merged

kojiwakayama merged 27 commits into

mainfrom

feat/integration-token-store

Aug 3, 2026

Commits on Aug 3, 2026

feat(cli): add encrypted token store to integration templates
kojiwakayama
committed
8c5467a
chore: drop unused stringifyJsonValue imports to unblock pre-push lint
kojiwakayama
committed
bbdba82
Harden generated token row normalization
kojiwakayama
committed
5bd3b15
Keep generated integration manifest current
kojiwakayama
committed
211d76d
Keep generated OAuth storage fail closed under bad state
kojiwakayama
committed
a58a573
Reconcile encrypted storage with the current release baseline
kojiwakayama
committed
621d660
Harden generated OAuth token metadata validation
kojiwakayama
committed
c0e3ad0
Constrain OAuth state skew to future timestamps
kojiwakayama
committed
4e81376
fix(cli): harden generated OAuth token storage
kojiwakayama
committed
b3c9fbf
Prevent inherited serializers from shaping encrypted rows
kojiwakayama
committed
6e69f20
feat(cli): support key rotation and degraded reads in encrypted token store

kwakayama
and
claude
committed
55292cf
fix(cli): redact encrypted token row failures
kojiwakayama
committed
19aef36
fix(cli): bound encrypted token JSON snapshots
kojiwakayama
committed
88f9bf1
test(cli): use valid null prototype sentinel
kojiwakayama
committed
fcaefb0
Make encrypted OAuth rotation and state failures observable
kojiwakayama
committed
aa4dea7
feat(cli): re-seal rotated encrypted token rows on read

kwakayama
and
claude
committed
3c848a8
Keep rotation reports from trusting malformed encrypted rows
kojiwakayama
committed
cec8713
fix(cli): keep encrypted token storage keys distinct
kojiwakayama
committed
c3a3ba6
fix(cli): preserve OAuth refresh capabilities
kojiwakayama
committed
dabe464
test(cli): tighten encryption rotation checks
kojiwakayama
committed
f968a1e
test(cli): assert exact sanitized token-store warnings
kojiwakayama
committed
8fa1d4f
Keep generated token stores fail-closed without env access
kojiwakayama
committed
5a0c750
Keep stale OAuth state out of rotation gates
kojiwakayama
committed
d6f9b5e
Align token-store template guidance with test mode
kojiwakayama
committed
24ade64
Preserve refresh tokens omitted by OAuth providers
kojiwakayama
committed
6c974b2
Keep generated token stores fail-closed under process env denial
kojiwakayama
committed
67dc85d
Align generated memory-backend guidance with test mode
kojiwakayama
committed
aeafe66

Navigation Menu

Uh oh!

feat(cli): add encrypted token store to integration templates - #3310

feat(cli): add encrypted token store to integration templates#3310
kojiwakayama merged 27 commits into
mainfrom
feat/integration-token-store

Commits on Aug 3, 2026

feat(cli): add encrypted token store to integration templates

chore: drop unused stringifyJsonValue imports to unblock pre-push lint

Harden generated token row normalization

Keep generated integration manifest current

Keep generated OAuth storage fail closed under bad state

Reconcile encrypted storage with the current release baseline

Harden generated OAuth token metadata validation

Constrain OAuth state skew to future timestamps

fix(cli): harden generated OAuth token storage

Prevent inherited serializers from shaping encrypted rows

feat(cli): support key rotation and degraded reads in encrypted token store

fix(cli): redact encrypted token row failures

fix(cli): bound encrypted token JSON snapshots

test(cli): use valid null prototype sentinel

Make encrypted OAuth rotation and state failures observable

feat(cli): re-seal rotated encrypted token rows on read

Keep rotation reports from trusting malformed encrypted rows

fix(cli): keep encrypted token storage keys distinct

fix(cli): preserve OAuth refresh capabilities

test(cli): tighten encryption rotation checks

test(cli): assert exact sanitized token-store warnings

Keep generated token stores fail-closed without env access

Keep stale OAuth state out of rotation gates

Align token-store template guidance with test mode

Preserve refresh tokens omitted by OAuth providers

Keep generated token stores fail-closed under process env denial

Align generated memory-backend guidance with test mode