Keap's OAuth implementation issues access tokens with a 1-hour TTL. We previously refreshed on 401 failure; we now refresh proactively if the cached token is within 5 minutes of expiry.
Fix
Keap OAuth tokens now refresh proactively
Keap's 1-hour token expiry was silently breaking long-running workflows. Tokens now refresh 5 minutes before expiry, every time.