feat: lk impersonate (mint/use/revoke buyer-scoped Access Token) — LIN-5921#4

Merged

djalmaaraujo merged 17 commits into

mainfrom

djalma/lk-impersonate

Jul 14, 2026

Commits on Jun 22, 2026

docs(impersonate): design spec for lk impersonate (LIN-5921)
djalmaaraujo
committed
docs(impersonate): implementation plan (LIN-5921)
djalmaaraujo
committed
feat(client): Post/Delete + StartImpersonation/StopImpersonation
djalmaaraujo
committed
feat(auth): persist per-origin impersonation context
djalmaaraujo
committed
feat(commands): sticky impersonation-aware credential resolution
djalmaaraujo
committed
fix(auth): impersonation context takes precedence over LK_TOKEN
djalmaaraujo
committed
feat(commands): lk impersonate start|stop|status
djalmaaraujo
committed
fix(commands): warn when impersonator identity lookup fails
djalmaaraujo
committed
feat(commands): surface active impersonation in whoami and auth status
djalmaaraujo
committed
style(commands): satisfy errcheck/revive in impersonation visibility
djalmaaraujo
committed
docs(cli): document impersonation flow and backend repo pointers
djalmaaraujo
committed
fix(commands): valid JSON in auth status + revoke prior token on re-impersonate
djalmaaraujo
committed
chore(docs): remove design specs from repo
djalmaaraujo
committed
chore(docs): add CLAUDE.local.md rule barring specs/plans commits
djalmaaraujo
committed
fix(commands): valid JSON output for impersonate status/stop and auth status; round sub-second TTL
djalmaaraujo
committed
fix(commands): auth status resolves format via the view (auto+pipe stays JSON)
djalmaaraujo
committed

Commits on Jun 30, 2026

fix(impersonate): reject negative ttl + derive auth status from impersonation
djalmaaraujo
committed