Commands that declare credentials: "child" (Composer deploy and destroy) hand the child an access token only, never the refresh token (spawnToken in packages/cli-engine/src/execution/spawn.ts). The needs check refreshes the token before the handler runs if it has less than 5 minutes left, but a deploy that runs longer than the token's remaining lifetime fails mid-run.
Recorded in the prisma-cli-v8 project ledger, which is being deleted at close-out:
|
- **Nothing bounds a child run to the token it was given.** A |
🤖 Generated with Claude Code
Commands that declare
credentials: "child"(Composerdeployanddestroy) hand the child an access token only, never the refresh token (spawnTokeninpackages/cli-engine/src/execution/spawn.ts). The needs check refreshes the token before the handler runs if it has less than 5 minutes left, but a deploy that runs longer than the token's remaining lifetime fails mid-run.Recorded in the prisma-cli-v8 project ledger, which is being deleted at close-out:
prisma-cli/.drive/projects/prisma-cli-v8/deferred.md
Line 177 in 4356b36
🤖 Generated with Claude Code