fix: extend intent token validity to 1 hour and flush WAL on shutdown#24
Open
Pulkit7070 wants to merge 1 commit into
Open
fix: extend intent token validity to 1 hour and flush WAL on shutdown#24Pulkit7070 wants to merge 1 commit into
Pulkit7070 wants to merge 1 commit into
Conversation
- validitySeconds: 600 -> 3600 to prevent mid-session token expiry - policy-mcp.mjs: drain remaining WAL rows on SIGTERM/SIGINT before exit so audit rows queued in the last flush window are not lost on shutdown. Mirrors armorClaude#52 fix for cross-product parity.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
validitySeconds: 600 → 3600— prevents mid-session token expiry blocks in long Codex sessionspolicy-mcp.mjsSIGTERM/SIGINT: drain remaining WAL rows to backend before clearing the flusher interval, so audit rows queued in the last 5s window before shutdown are never silently droppedWhy
The 10-minute default caused
ArmorCodex intent token expiredblocks mid-turn when a session ran longer than 600 seconds. The WAL shutdown gap was the same issue armorClaude had before PR #52.Cross-product parity
Mirrors armorClaude PR #52 — same two fixes applied to the equivalent files in armorCodex (
config.mjs,policy-mcp.mjs).Test plan
npm test)kill -TERM <mcp-pid>, verify remaining WAL rows are shipped before exit