Siddharth Balyan 7f16d66f07 fix(auth): a token refresh no longer replaces a guest in the shared Nous store ...

Every write of the shared Nous store recorded a guest-to-account move,
including routine token refreshes. When one profile logged out and then
minted a free-tier guest, another profile's keepalive refresh of the
account overwrote that guest, recorded a move of the guest's apps into
the account, and left the account in the store for the logged-out
profile to adopt again.

Each caller of _write_shared_nous_state now declares renewal. A
renewal (a token refresh) writes only over the identity the store
already holds, compared by the guest's anon_ credential or the
account's JWT sub, which survives a refresh. Sign-ins and mints still
replace whatever the store holds, so only a sign-in can record a move.
An empty store still takes a refresh, so profiles sharing one account
keep their rotating refresh token in step.

2026-10-23 17:52:26 +05:30

..

adapters

fix(auth): a token refresh no longer replaces a guest in the shared Nous store

2026-10-23 17:52:26 +05:30

__init__.py

…

cli.py

…

server.py

ci: ruff UP037 fixes

2026-10-09 17:34:38 +02:00

sse_done.py

…