A stale stored login hides a parent checkout's good token for a subrepo issue #112 closed: completed andymccall opened this 21 days ago · 0 comments

Found 2026-10-14 (the R* agent's 404 on doomsdayone/rstar-api). A subrepo checkout with no token of its own borrows a token for its hub: the user's credential store first, then an enclosing checkout's remote on the same hub. When the store's token is stale (or another account's), it wins, and a private subrepo answers 404 although the parent's own token reads it.

Fix: when the token came from the store or an enclosing checkout (never from remote..token or $OXY_TOKEN, which are explicit), the other tokens enclosing checkouts hold for that hub are kept as fallbacks, and the HTTP remote tries the next one when a request is refused (401, 403 or 404), saying so once.