feat(oauth): show credential age and keep provider status current

[darkspadez]

Overview

OAuth provider settings now show when an account was connected, when its key was last refreshed, and when it expires. The status updates while the provider form stays open, and completed logins appear only after their credentials are saved.

✨ New Features

• Credential age in provider settings: See connection, refresh, and expiration timing, with exact dates on hover.

🐛 Bug Fixes

• OAuth logins now report success only after credentials are saved; failed saves and cancellation during saving no longer leave a misleading connected status.
• Connecting or removing an OAuth account refreshes provider configuration so linked providers update without a restart.

🔧 Improvements

• Open provider forms refresh credential status every 10 seconds and retain the last known status during a temporary request failure.

Verification

• bun run test — 122 files, 1,017 tests passed
• bun run typecheck
• bun run lint:check
• bun run format:check
• Provider form rendering and status refresh verified in a browser

[github-actions]

🔍 OpenCodeReview found 1 issue(s) in this PR.

• ✅ Successfully posted inline: 1 comment(s)

[github-actions]

Race with delete: the new 10s poll can be in flight while handleDeleteOAuthCredential runs. When there's no active session, oauthStatus stays undefined, so the delete doesn't change any effect dependency and the effect never cancels. If a poll that started before the delete resolves after it, it sets ready: true and the old credential status again. The credential line and Delete button then come back for up to 10s after a successful delete. Before this change the check ran only once, so this couldn't happen. Fix: keep a request/generation counter in a ref, bump it in the delete handler, and drop any poll result whose generation is stale (or add a credentialVersion state to the effect deps and bump it on delete).

Suggestion:

Suggested change

	const result = await api.getOAuthCredentialStatus(providerId, accountId);
	if (cancelled) return;
	setOauthCredentialReady(!!result.ready);
	setOauthCredentialStatus(result.ready ? result : null);
	const gen = credentialGenRef.current;
	const result = await api.getOAuthCredentialStatus(providerId, accountId);
	if (cancelled || gen !== credentialGenRef.current) return;
	setOauthCredentialReady(!!result.ready);
	setOauthCredentialStatus(result.ready ? result : null);

[github-actions]

🔍 OpenCodeReview — detailed findings

✅ Passing — no critical/high findings.

Reviewed 14 file(s), 1 finding(s) total.

• medium — packages/frontend/src/hooks/useProviderForm.tsx:336-339: Race with delete: the new 10s poll can be in flight while handleDeleteOAuthCredential runs. When there's no active session, oauthStatus stays undefined, so the delete doesn't change any effect dependency and the effect never cancels. If a poll that started before the delete resolves after it, it sets ready: true and the old credential status again. The credential line and Delete button then come back for up to 10s after a successful delete. Before this change the check ran only once, so this couldn't happen. Fix: keep a request/generation counter in a ref, bump it in the delete handler, and drop any poll result whose generation is stale (or add a credentialVersion state to the effect deps and bump it on delete).

  Suggested change

          const gen = credentialGenRef.current;
        const result = await api.getOAuthCredentialStatus(providerId, accountId);
        if (cancelled || gen !== credentialGenRef.current) return;
        setOauthCredentialReady(!!result.ready);
        setOauthCredentialStatus(result.ready ? result : null);