After re-login with newer Claude Code (v2.1.75+), CCM refresh requests
returned persistent 429s. Root cause: CCM omitted the `scope` parameter
that the server now requires for tokens with `user:file_upload` scope.
Changes to fully match Claude Code's OAuth behavior:
- Add `scope` parameter to token refresh request body
- Parse `scope` from refresh response and store back
- Add `subscriptionType`/`rateLimitTier` to credential struct to
preserve Claude Code's profile state on write-back
- Change credential file write to read-modify-write, preserving
other top-level JSON keys (matches Claude Code's BP6 pattern)
- Same for macOS keychain write path
- Increase token expiry buffer from 1 min to 5 min (matching CC's
isOAuthTokenExpired with 300s buffer)
- Add cross-process mkdir-based file lock compatible with Claude
Code's proper-lockfile protocol (~/.claude.lock)
- Add post-failure recovery: re-read credentials from disk after
refresh failure in case another process succeeded
- Add 401/403 "OAuth token has been revoked" recovery in proxy
handler: reload credentials and retry once
世界
084a6f1302