Repository navigation
automation: a dispatch on a connection already marked reconnect required, and the onGrantRefused log, still say the authorization server refused the grant whatever the stored cause #28963
Description
domain:server#1 · os-project-manager · session_01R1q2xdtYgU6FKrZ7LgjPCC
Filing gate: ① two out-of-scope findings of the #28863 dev (PR #28955, os-dev-report on #28863), same class as that card. Filed by domain:server seat 1. ⛔ Not a claim. Graded by this seat p3 under 「定级你可以自己决定」 (Leehom, 2026-11-01): admin-facing text that names the wrong cause; no write or status is wrong.
Reach: an admin reading a dispatch refusal or the server log for a connection marked reconnect_required because no refresh token was issued or no client is kept.
What happens (read at PR #28955's head 7cf0294a)
PR #28955 makes the stored status_reason name the cause on each refresh path. Two places still say the authorization server refused the grant whatever happened:
- The dispatch refusal of a row already marked.
grant-handle.ts(select≈L238, andrefreshOnce's first check) and the plugin's hold-reason fallback (plugin.ts≈L3189) answer withreconnectRequiredReason's default'refused'sentence, not the row's storedstatusReason. So the first dispatch says "no refresh token was issued" and every later one says "refused". - The
onGrantRefusedwarn line (plugin.ts≈L3697) logs "the authorization server refused the grant" on all three refresh paths.
Wanted
The refusal of an already-marked row answers with the cause the row stores (its statusReason, or the cause it was marked with), and the log line names the cause. Same wording as PR #28955. ⛔ No new status value or error code.
Dedupe: searched reconnect required dispatch refusal stored statusReason, onGrantRefused log refused the grant. Related: #28863 / PR #28955. New.
Generated by Claude Code
Activity
objectstack-fleet commentedon Nov 2, 2026
domain:server#5 · os-project-manager · session_01FEkQ5oc56xChD6Wrc4cGSt
Claim: PM loop round 1 · card thread · 2026-11-02T05:21Z
Session:
session_01FEkQ5oc56xChD6Wrc4cGSt(the seat); the card thread issession_01FEkQ5nz6egXzQp6jxykFAmAccount:
os-project-manager(the seat's linked user; the card's assignee)Branch:
claude/project-thread-30pu5h(the card thread's harness-pinned branch; it names no issue, so this claim is the identity record)Worktree: the card thread's own container checkout
Domain:
domain:serverSeat:
domain:server#5Ruling-ref: 「定级你可以自己决定」 (Leehom, 2026-11-01T12:11Z) with the card's grade and this seat's rulings in the order; card assigned to seat 5 by seat 1's queue split after Leehom's 「队列进了很多任务，抓紧派发」 (2026-11-02T05:15Z).
File surface:
packages/services/service-automation/src/(the oauth2 grant handle, the connector plugin hold-reason andonGrantRefusedlog, their tests), changesets. ⛔ Nopackages/spec/**.Container & model:
S,mode:thread, model and effort as the thread was openedClause-②: no
Metadata-protocol: none
Responsibility: the code is the reconnect-required refusal and log wording · an already-marked connection answers and logs refused whatever cause it stores · reached by admins reading dispatch refusals and server logs
Thread-read: none
Premise: holds (read at
origin/main135054eb: measured by seat 1 at PR #28955 head7cf0294a; re-read by the dev after #28955 merges)Serial constraints cleared: waits for PR #28955 (#28863, seat 1) to merge: same grant-handle/plugin lines; the dev starts from
origin/mainafter it lands.Resume-from: none — fresh from
origin/mainState:
pm:queue→pm:dispatched, assigned toos-project-manager, recorded by this claim. Order:pm-orders/server/order-28963.mdin the project.objectstack-fleet commentedon Nov 2, 2026
domain:server#5 · os-project-manager · session_01FEkQ5nz6egXzQp6jxykFAm
os-dev-report
{
"issue": 28963,
"status": "done",
"branch": "claude/project-thread-30pu5h",
"pr": "#29065",
"session": "session_01FEkQ5nz6egXzQp6jxykFAm",
"premise_still_valid": true,
"summary": "Started after PR #28955 merged (07450b5), fresh from origin/main 00d0668. grant-handle.ts: select and refreshOnce's first check now refuse an already-marked row with its stored statusReason (new private markedReason), falling back to the default refused sentence only when none is stored (ruling 1). onGrantRefused now receives the stored reason and plugin.ts logs '[Automation] ' + that reason, so each of the three refresh paths logs its own cause in #28955's wording (ruling 2). The plugin's hold-reason fallback already read the row's statusReason on main and is unchanged (pinned by the new door case). No new status, code or published member (oauth2-grant is not re-exported from the package entry); patch changeset, Clause-② no, Metadata-protocol none.",
"tests": "Red on main (tests at 9ae5df9, before the fix): grant-handle.test.ts + connector-connection-door.test.ts 'Tests 6 failed | 40 passed (46)'; head 'Test Files 2 passed (2) Tests 46 passed (46)'. New: no-refresh-token row answers the stored sentence on the first and every later dispatch and from a second handle; replica-marked-under-lock row answers that replica's stored cause (refreshOnce first check); no-stored-cause row still answers refused (control, green both ways); each refresh path passes its own stored reason to onGrantRefused; door case: no refresh token issued, the log is '[Automation] REASON.' with no 'refused the grant', hold names the cause. Ablation, one per site via scripts/ablation-replace.mjs (anchor 1->0, blob moved, restored, git diff HEAD empty; tests import src so no build in the chain): select -> 1 failed; refreshOnce first check -> 1 failed; callback arg dropped -> 3 failed; old plugin log line -> 2 failed. Package suite at 543224b: Test Files 256 passed (256), Tests 3303 passed (3303), lock VERDICT command-exit 0. typecheck (tsc + test-typecheck) at d5ba4f7: VERDICT command-exit 0. Scoped lint (repo eslint command on packages/services/service-automation): exit 0.",
"gates": "dispatch-gates --commands (61 families) at 543224b: all 61 exit 0; --ran: '61 derived famil(ies) accounted for — 61 run, 0 NOT-MEASURED'. Record pm-orders/server/28963-gates-ran.txt. First pass at d5ba4f7: check:dual-build-cjs-loads exit 3 (prerequisite) and teardown self-test exit 3 until the pinned fixture commit was fetched; both exit 0 at 543224b. CI check-runs on PR #29065: in_progress at report time.",
"dogfood_battery": "n/a — no
!in the PR title and no (narrowing) arm","mcp_calls": "4 — pull_request_read x2 (get #28955, get #29065), issue_read x2 (get #28963, get_comments #28963); no write tool",
"api_writes": "2 — fleet-write relay pr_create (#29065, run 41401550177, body read back identical, no labels, no assignees); this os-dev-report comment via post-stamped.mjs on #28963. git push is not a REST write.",
"open_questions": [],
"out_of_scope_findings": [
"carrier: none · noted, not filed — onGrantRefused keeps its name although it now also fires on the two refresh paths that never ask the server (internal callback naming, PR acceptance notes)"
],
"line_budget": "158 insertions, 16 deletions over 5 files (2 source files +20/-11 net, 2 test files, 1 changeset)",
"deviations": "none — PR opened with no labels because the order names none and the diff carries a changeset",
"files_changed": [
".changeset/28963-reconnect-required-stored-cause.md",
"packages/services/service-automation/src/connector-connection-door.test.ts",
"packages/services/service-automation/src/oauth2-grant/grant-handle.test.ts",
"packages/services/service-automation/src/oauth2-grant/grant-handle.ts",
"packages/services/service-automation/src/plugin.ts"
]
}
Generated by Claude Code
objectstack-fleet commentedon Nov 2, 2026
domain:server#5 · os-project-manager · session_01FEkQ5oc56xChD6Wrc4cGSt
ACCEPT → PR #29065 comment 6570932020 · head
543224b1· 2026-11-02T06:46Z. No contract review owed. Landing:pr_ready+automerge_enablethrough the relay; the merge queue closes this card.objectstack-fleet commentedon Nov 2, 2026
domain:server#5 · os-project-manager · session_01FEkQ5oc56xChD6Wrc4cGSt
Release:
session_01FEkQ5oc56xChD6Wrc4cGSt· seat 5 signs off at the maintainer's wrap-up · back topm:queuefor the nextdomain:serverseatResume-from:
claude/project-thread-30pu5h@543224b1The maintainer's words, verbatim: 「尽快提交代码，然后收工」 (2026-11-02T07:10Z) and 「自动合并中的也交给下一任跟进」 (2026-11-02T07:23Z). This is the default hand-back; seat 5 keeps no stay-behind.
Next: PR #29065 is ACCEPTed (6570932020) and in the merge queue. The next seat posts Landed after merge, clears labels, and asks the coordinator to resolve the card thread.
objectstack-fleet commentedon Nov 2, 2026
domain:server#5 · os-steve · session_01ADHkmQKwKFCp1m6Pb6Q8c1
Claim: PM loop round 1 · take-over of the predecessor's hand-back · 2026-11-02T08:10Z
Session:
session_01ADHkmQKwKFCp1m6Pb6Q8c1(the seat; no new dev: PR #29065 is already written and ACCEPTed)Account:
os-steve(the seat's linked user; the card's assignee)Branch:
claude/project-thread-30pu5h(unchanged; the predecessor's card-thread branch)Worktree: none (landing watch only)
Domain:
domain:serverSeat:
domain:server#5Ruling-ref: the maintainer, in the
os-steveproject "objectstack spec": 「开 server 2、3、5 号席位, 前任已经下班，接手所有开发，包括跟进之前未完成的开发落地。」; the predecessor's Release 6571757343 names this card for the next seat-5 holder.File surface: as PR #29065's file list (unchanged: packages/services/service-automation/src/, changeset)
Container & model:
S, landing watch only, no dispatchClause-②: no
Metadata-protocol: none
Responsibility: as the predecessor's claim on this card (unchanged)
Thread-read: 6571757343
Premise: holds (PR #29065 is ACCEPTed on head
543224b1; nothing has moved the head since the Release)Serial constraints cleared: none new; the PR is past review.
Resume-from:
claude/project-thread-30pu5h@543224b1State:
pm:queue→pm:dispatched, assigned toos-steve, recorded by this claim. Next: PR #29065 is in the merge queue; the seat posts Landed after merge.objectstack-fleet commentedon Nov 2, 2026
domain:server#5 · os-steve · session_01ADHkmQKwKFCp1m6Pb6Q8c1
Landed · #28963 · 2026-11-02T08:17Z
2af0ae2aa1(head543224b1, ACCEPT 6570932020)completedby the PR'sFixeslineState:
pm:dispatchedremoved;domain:server,area:automationand the type labels stay. Nothing remains on this card.