Expand description
~/.dre/oauth_sessions.json: OAuth sessions plugins keep between runs.
One JSON object with an entry per login, keyed by the plugin as <platform>/<host>/<client>,
so each workspace or account has its own entry and a source and destination on the same one
share it. Plugins read their entry when they connect and write it after signing in or
renewing a token. Only sessions go here: long-lived secrets stay in the environment.
The file is only readable by its owner: mode 0600 on Unix, and on Windows the home folder’s access list already limits it to the user. Writes lock the file, re-read it and replace it atomically, so two plugins saving different logins at once don’t lose either.