@juspay/neurolink 10.4.3 → 10.4.4

package/CHANGELOG.md

@@ -1,3 +1,9 @@
+## [10.4.4](https://github.com/juspay/neurolink/compare/v10.4.3...v10.4.4) (2026-07-23)
+
+### Bug Fixes
+
+- **(proxy):** persist explainable terminal failures ([1684203](https://github.com/juspay/neurolink/commit/16842035e6199a3b1bdd1876a614d5ce869cf3fd))
+
 ## [10.4.3](https://github.com/juspay/neurolink/compare/v10.4.2...v10.4.3) (2026-07-22)
 
 ### Bug Fixes

package/dist/auth/tokenStore.d.ts

@@ -96,6 +96,8 @@ export declare class TokenStore {
      * @throws TokenStoreError if reading fails (other than file not found)
      */
     loadTokens(provider: string): Promise<StoredOAuthTokens | null>;
+    /** Reads tokens without updating access metadata or rewriting the store. */
+    peekTokens(provider: string): Promise<StoredOAuthTokens | null>;
     /**
      * Internal load without mutex — callers must already hold the mutex.
      */
@@ -179,6 +181,11 @@ export declare class TokenStore {
      * @param reason - Optional human-readable reason (e.g., "refresh_failed")
      */
     markDisabled(provider: string, reason?: string): Promise<void>;
+    /**
+     * Disables an account only when the persisted credentials still match the
+     * request that observed the authentication failure.
+     */
+    markDisabledIfCurrent(provider: string, expectedTokens: Pick<StoredOAuthTokens, "accessToken" | "refreshToken" | "expiresAt">, reason?: string): Promise<boolean>;
     /**
      * Re-enables a previously disabled provider (persisted to disk).
      *

package/dist/auth/tokenStore.js

@@ -213,6 +213,22 @@ export class TokenStore {
             return result;
         });
     }
+    /** Reads tokens without updating access metadata or rewriting the store. */
+    async peekTokens(provider) {
+        return this._mutex.runExclusive(async () => {
+            try {
+                const storageData = await this.loadStorageData();
+                const tokens = storageData.providers[provider]?.tokens;
+                return tokens ? { ...tokens } : null;
+            }
+            catch (error) {
+                if (error instanceof TokenStoreError && error.code === "NOT_FOUND") {
+                    return null;
+                }
+                throw error;
+            }
+        });
+    }
     /**
      * Internal load without mutex — callers must already hold the mutex.
      */
@@ -539,6 +555,44 @@ export class TokenStore {
             });
         });
     }
+    /**
+     * Disables an account only when the persisted credentials still match the
+     * request that observed the authentication failure.
+     */
+    async markDisabledIfCurrent(provider, expectedTokens, reason) {
+        return this._mutex.runExclusive(async () => {
+            let storageData;
+            try {
+                storageData = await this.loadStorageData();
+            }
+            catch (error) {
+                if (error instanceof TokenStoreError && error.code === "NOT_FOUND") {
+                    return false;
+                }
+                throw error;
+            }
+            const providerData = storageData.providers[provider];
+            if (!providerData) {
+                return false;
+            }
+            const current = providerData.tokens;
+            if (current.accessToken !== expectedTokens.accessToken ||
+                current.refreshToken !== expectedTokens.refreshToken ||
+                current.expiresAt !== expectedTokens.expiresAt) {
+                return false;
+            }
+            providerData.disabled = true;
+            providerData.disabledAt = Date.now();
+            providerData.disabledReason = reason;
+            storageData.lastModified = Date.now();
+            await this.saveStorageData(storageData);
+            logger.info("Provider marked as disabled", {
+                provider,
+                reason: reason ?? "unspecified",
+            });
+            return true;
+        });
+    }
     /**
      * Re-enables a previously disabled provider (persisted to disk).
      *