tui — Credential Lifecycle

tui — Credential Lifecycle A lifecycle diagram generated by Archify. 01 / Resolution 02 / Waiting + Recovery loop 03 / Terminal exits No Credential · resolve called · Resolution · entry 01 No Credential resolve called entry OAuth Valid · token + fresh · Resolution · preferred 02 OAuth Valid token + fresh preferred API-Key Fallback · env key · Resolution · degraded 03 API-Key Fallback env key degraded Served · request sent · Resolution · done 04 Served request sent done Expired · past expires_at · Waiting · wait Expired past expires_at wait Corrupt File · unparseable, degrades to env · Recovery loop · retryable Corrupt File unparseable, degrades to env retryable Denied · nothing found · Terminal exits · terminal Denied nothing found terminal fresh env set no file no env past expiry env fallback bad JSON serve

Degrade, never expose

  • • Corrupt files degrade to the env fallback (see corrupt state)
  • • Every failure path ends at fallback or clean denial

Brittleness note

  • • Token-file shape is not contractual; accept known variants
  • • Upstream format changes land here first — watch this state