Function markRefreshGrantDead

packages/core/sdk/src/executor.ts:2245–2289

(
      row: ConnectionRow,
      detail: string,
      // The mechanism that killed the grant. An admin-policy denial is a dead
      // grant too, but stamping it `credential_refresh_rejected` would bury
      // the one classification that says "reconnecting cannot help".
      reason: HealthCheckReason,
    )

     *  which is what re-arms refresh. Best-effort: a bookkeeping write failure
     *  must not mask the refresh failure being reported. */
    const markRefreshGrantDead = (
      row: ConnectionRow,
      detail: string,
      // The mechanism that killed the grant. An admin-policy denial is a dead
      // grant too, but stamping it `credential_refresh_rejected` would bury
      // the one classification that says "reconnecting cannot help".
      reason: HealthCheckReason,
    ): Effect.Effect<void, never> => {
      const existingState = decodeJsonColumn(row.provider_state);
      const mergedState =
        existingState != null && typeof existingState === "object" && !Array.isArray(existingState)
          ? (existingState as Record<string, unknown>)
          : {};
      const health: HealthCheckResult = {
        status: "expired",
        checkedAt: Date.now(),
        detail,
        reason,
      };
      return core
        .updateMany("connection", {
          where: (b: AnyCb) =>
            b.and(
              byOwner(row.owner as Owner)(b),
              b("integration", "=", String(row.integration)),
              b("name", "=", String(row.name)),
            ),
          set: {
            provider_state: {
              ...mergedState,
              oauthReauthRequiredAt: Date.now(),
              oauthReauthRequiredDetail: detail,
              // Recorded beside the dead grant, not only in `last_health`: the
              // verdict is best-effort and buryable, while this record is the
              // authority every later read reconstructs from — without it, an
              // admin-policy denial degrades to a generic refresh rejection on
              // the second and every later read.
              oauthReauthRequiredReason: reason,
            },
            last_health: health,
            updated_at: new Date(),
          },
        })
        .pipe(Effect.ignore);
    };

    /** Write a re-minted token back: a ROTATED refresh token into the refresh
     *  item, the access token into the connection's primary provider item, and