George Token Broker
repo: ~/Projects/george-token-broker · 4 commits · 0 in last 24h, 0 in last 7d ·
Skills used
- /npm1
- /npx1
- /homebrew1
- /error1
- /account1
- /day1
Creative ideas + design notes
Commits with substantial prose (≥120 chars) — the rationale behind each move.
a14768c · 2026-07-01 · george-token-broker: add pre-emptive 6-day token-age WARN before the ~7d Testing-mode expiry
Broker previously only alerted AFTER invalid_grant (token already dead, pipeline already
silently broken). Now tracks first_good_ts per account (reset on any dead/error->ok
transition = a re-consent minted a fresh token) and emits a CNCP WARN once a live token
crosses warn_days (6), throttled to 1/account/day. Health state + exit code unchanged
(a pre-emptive warn is not a FAIL). SA/DWD-backed accounts skip via cfg.sa_backed, so the
Workspace pair auto-drops out once domain-wide delegation lands. Verified in DRY_RUN:
8.7d token WARNs w/ re-consent URL, 3d stays quiet, second run throttled, overall=ok.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
File tree
6 files tracked. Click any to browse the source at HEAD.
rendered in 0ms