mirror of
https://github.com/stablyai/orca.git
synced 2026-09-30 16:02:56 +00:00
Merge Sim
6fedc44026
Undoing a foreign in-pane login meant rewriting the CLI's own identity record, which Orca does not own. That write was lock-free and non-atomic against a file holding project entries, MCP servers and history; it also manufactured a record that would vouch for the foreign session's next rotation, and any later restoration of the foreign record re-armed the clobber it was meant to prevent. A login the home's record proves belongs to another account is now refused in both directions and surfaced, so no file Orca does not own is touched. The account is repaired by signing back in, which is the only party that can. Tools that do write an agent's config write their own store as its owner, with tmp-then-rename and a same-or-newer check; none rewrites another program's identity record. Claude-Session: https://claude.ai/code/session_012E63B2jhajtUbArQHhZjVQ