# Token Gotchas

## `~/.config/agent-runtimes/tokens.json` uses flat structure

Symptom: code expecting a nested `{provider: {access_token, expires_at}}` shape fails to find the token.

Fix: the file is flat — `{"access_token": "...", "expires_at": <unix_seconds>}`. There is no provider key. Read it as a flat dict. When debugging "is my token expired?", compare `expires_at` against `int(time.time())` directly — both are Unix epoch seconds.