infra/scripts/claude-auth-sync@.timer

[Unit]
Description=Keep Claude OAuth credentials valid and recoverable for %i

[Timer]
OnBootSec=10m
OnUnitActiveSec=6h
Persistent=true
RandomizedDelaySec=10m
Unit=claude-auth-sync@%i.service

[Install]
WantedBy=timers.target
Add per-user Claude auth renewal Each workstation user needs a continuously valid Claude token under their own Enterprise identity. Store only that user's OAuth state in an isolated Vault path, renew and verify it automatically, recover from Vault when possible, and alert when interactive SSO is required. 2026-06-20 20:10:40 +00:00			`[Unit]`
			`Description=Keep Claude OAuth credentials valid and recoverable for %i`

			`[Timer]`
			`OnBootSec=10m`
			`OnUnitActiveSec=6h`
			`Persistent=true`
			`RandomizedDelaySec=10m`
			`Unit=claude-auth-sync@%i.service`

			`[Install]`
			`WantedBy=timers.target`