2 Commits

Include renames

Author	SHA1	Message	Date
dev_agentandClaude Opus 5.5	0dccf87b06	Make login state single-use on the server ... A saved copy of the signed login cookie verified until it expired, so the callback accepted it again with a second valid authorization code. The login now records its state as pending and the callback consumes it, refusing a replay with the same 400 as a state mismatch. The pending-state set moves from gcal into auth as PendingStates, so login and the Google Calendar connect share one mechanism. It is in memory, so a flow started before a restart fails closed after it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-11 01:31:24 -04:00
orchestrator-agent	7003ff92ec	Feature 16: Google Calendar Sync (#130) ... Co-authored-by: orchestrator-agent <20+orchestrator-agent@code.cubecraftcreations.com>	2026-10-08 03:13:21 -04:00