feat(oauth): store OAuth credentials in the OS keychain by default by Brooooooklyn · Pull Request #748 · MoonshotAI/kimi-code

feat(oauth): add keychain-backed token storage with file fallback

Brooooooklyn

committed

fix(oauth): harden keyring migration, remove, and probe against races

Brooooooklyn

committed

feat(oauth): use keychain storage by default in the OAuth toolkit

Brooooooklyn

committed

build(kimi-code): collect @napi-rs/keyring in the native SEA build

Brooooooklyn

committed

fix(kimi-code): route @napi-rs/keyring through the native-asset module hook

Brooooooklyn

committed

build(nix): update fetchPnpmDeps hash for @napi-rs/keyring

Brooooooklyn

committed

fix(oauth): align keychain storage with file backend (per-profile namespace, safe migration delete)

Brooooooklyn

committed

fix(oauth): reconcile newer plaintext token on keychain hit (sequential fallback)

Brooooooklyn

committed

docs(oauth): clarify keychain reconcile comments + pin strict-newer tie test

Brooooooklyn

committed

fix(oauth): compare token issuance time, not expiry, in keychain reconcile

Brooooooklyn

committed

docs(oauth): note issuedAt graceful-degradation on rehydrated tokens

Brooooooklyn

committed

docs(oauth): document keychain-by-default storage and KIMI_DISABLE_KEYRING opt-out

Brooooooklyn

committed

test(oauth): use \x00 escape instead of literal NUL in fake keyring keys

Brooooooklyn

committed

fix(oauth): surface failed keychain deletes on logout (@napi-rs/keyring returns false, never throws)

Brooooooklyn

committed

fix(oauth): prune stale plaintext copy after keychain save (prevent fallback resurrection)

Brooooooklyn

committed

docs(oauth): clarify save() prune is a deliberate fail-closed choice for tombstones

Brooooooklyn

committed

fix(oauth): reject keyrings that cannot delete during capability probe

Brooooooklyn

committed

docs(oauth): document+test that a file tombstone never force-revokes a valid keychain token

Brooooooklyn

committed

fix(oauth): validate token name before keychain writes (file-backend fail-before-write parity)

Brooooooklyn

committed

fix(oauth): prove keychain credential absence via service listing on logout (don't treat false deletes as gone)

Brooooooklyn

committed

fix(oauth): confirm probe sentinel deletion via service listing (consistent with remove())

Brooooooklyn

committed

chore: add changeset for keychain credential storage

Brooooooklyn

committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(oauth): store OAuth credentials in the OS keychain by default#748

feat(oauth): store OAuth credentials in the OS keychain by default#748
Brooooooklyn wants to merge 22 commits into
MoonshotAI:mainfrom
Brooooooklyn:feat/keyring-credential-storage

Commits on Jun 17, 2026

feat(oauth): add keychain-backed token storage with file fallback

fix(oauth): harden keyring migration, remove, and probe against races

feat(oauth): use keychain storage by default in the OAuth toolkit

build(kimi-code): collect @napi-rs/keyring in the native SEA build

fix(kimi-code): route @napi-rs/keyring through the native-asset module hook

build(nix): update fetchPnpmDeps hash for @napi-rs/keyring

fix(oauth): align keychain storage with file backend (per-profile namespace, safe migration delete)

fix(oauth): reconcile newer plaintext token on keychain hit (sequential fallback)

docs(oauth): clarify keychain reconcile comments + pin strict-newer tie test

fix(oauth): compare token issuance time, not expiry, in keychain reconcile

docs(oauth): note issuedAt graceful-degradation on rehydrated tokens

docs(oauth): document keychain-by-default storage and KIMI_DISABLE_KEYRING opt-out

test(oauth): use \x00 escape instead of literal NUL in fake keyring keys

fix(oauth): surface failed keychain deletes on logout (@napi-rs/keyring returns false, never throws)

fix(oauth): prune stale plaintext copy after keychain save (prevent fallback resurrection)

docs(oauth): clarify save() prune is a deliberate fail-closed choice for tombstones

fix(oauth): reject keyrings that cannot delete during capability probe

docs(oauth): document+test that a file tombstone never force-revokes a valid keychain token

fix(oauth): validate token name before keychain writes (file-backend fail-before-write parity)

fix(oauth): prove keychain credential absence via service listing on logout (don't treat false deletes as gone)

fix(oauth): confirm probe sentinel deletion via service listing (consistent with remove())

chore: add changeset for keychain credential storage