Skip to content

fix(login): native credential dot via a maintained reference - #7

Merged
TheStreamCode merged 1 commit into
mainfrom
fix/native-credential-dot
Oct 26, 2026
Merged

TheStreamCode merged 1 commit into
mainfrom
fix/native-credential-dot

Conversation

@TheStreamCode

Copy link
Copy Markdown
Owner

What

  • Native credential dot. The meta route now declares apiKeyEnv: MUSE_CODE_SUB_TOKEN, which is what makes DSH paint the standard red/green credential dot on the Muse Code row. Because an explicit reference is also DSH's highest-priority auth override, the plugin mirrors the OAuth record's minted key into that reference and re-mints it before Meta's ~24 h expiry (identity token preserved; concurrent re-sign-ins are not stamped over).
  • Live catalog fix. The Settings form projects an absent models array as []; the sync treated that as a user-owned list and skipped, which would have kept Muse Wonder out of the route. Only a non-empty list now counts as user-owned.
  • Docs. Prompt-cache behavior of the Meta API (prompt_cache_key = DSH session id; same key 1521/1600 cached, different/no key 0 in a live probe) and what the generic Edit/Delete row actions do — neither can be hidden by a plugin.

Verification

  • npm run typecheck, npm run build, 25 tests (host routes, credential mirror/refresh, model sync, client card harness), markdownlint 0 issues.
  • Isolated DSH boot with a seeded OAuth record: route profile persisted with apiKeyEnv, credential reference resolved, no activation warnings.
  • Live probe against api.meta.ai: cache reuse confirmed only with a matching prompt_cache_key; prompt_cache_retention: 24h accepted.

The Models row paints its credential dot only for a route that names a
credential reference, so the `meta` route now declares
`apiKeyEnv: MUSE_CODE_SUB_TOKEN`. An explicit reference is also DSH's
highest-priority auth override, so the plugin mirrors the OAuth record's
minted key into that reference and re-mints it ahead of Meta's ~24 h expiry
(preserving the non-renewable identity token when the record is replaced by a
fresh sign-in).

Also fixes the live catalog sync treating the empty `models` array that the
Settings form projects as a user-owned list, which would have kept Muse Wonder
out of the route; documents the Meta prompt-cache keying and the meaning of the
generic Edit/Delete row actions.
@TheStreamCode
TheStreamCode merged commit 66acfb1 into main Oct 26, 2026
8 checks passed
@TheStreamCode
TheStreamCode deleted the fix/native-credential-dot branch October 26, 2026 13:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant