@mandujs/core 0.41.0 → 0.41.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mandujs/core",
-  "version": "0.41.0",
+  "version": "0.41.2",
   "description": "Mandu Framework Core - Spec, Generator, Guard, Runtime",
   "type": "module",
   "main": "./src/index.ts",

package/src/brain/adapters/__tests__/resolver.test.ts

@@ -32,6 +32,7 @@ describe("resolveBrainAdapter — priority order", () => {
       adapter: "auto",
       credentialStore: store,
       probeOllama: async () => true,
+      probeChatGPTAuth: () => ({ authenticated: false, path: null }),
     });
     expect(res.resolved).toBe("openai");
     expect(res.adapter.name).toBe("openai-oauth");
@@ -43,6 +44,7 @@ describe("resolveBrainAdapter — priority order", () => {
       adapter: "auto",
       credentialStore: store,
       probeOllama: async () => true,
+      probeChatGPTAuth: () => ({ authenticated: false, path: null }),
     });
     expect(res.resolved).toBe("anthropic");
     expect(res.adapter.name).toBe("anthropic-oauth");
@@ -54,6 +56,7 @@ describe("resolveBrainAdapter — priority order", () => {
       adapter: "auto",
       credentialStore: store,
       probeOllama: async () => true,
+      probeChatGPTAuth: () => ({ authenticated: false, path: null }),
     });
     expect(res.resolved).toBe("ollama");
     expect(res.adapter.name).toBe("ollama");
@@ -65,6 +68,7 @@ describe("resolveBrainAdapter — priority order", () => {
       adapter: "auto",
       credentialStore: store,
       probeOllama: async () => false,
+      probeChatGPTAuth: () => ({ authenticated: false, path: null }),
     });
     expect(res.resolved).toBe("template");
     expect(res.adapter.name).toBe("noop");
@@ -104,6 +108,7 @@ describe("resolveBrainAdapter — explicit pins degrade gracefully", () => {
     const res = await resolveBrainAdapter({
       adapter: "openai",
       credentialStore: store,
+      probeChatGPTAuth: () => ({ authenticated: false, path: null }),
     });
     expect(res.resolved).toBe("template");
     expect(res.reason).toContain("no token");

package/src/brain/adapters/index.ts

@@ -34,6 +34,7 @@ import {
   createOpenAIOAuthAdapter,
   type OpenAIOAuthAdapterOptions,
 } from "./openai-oauth";
+import { ChatGPTAuth } from "./chatgpt-auth";
 import {
   AnthropicOAuthAdapter,
   createAnthropicOAuthAdapter,
@@ -82,6 +83,13 @@ export interface BrainAdapterConfig {
    * default consults `credentialStore.load(provider)`.
    */
   probeToken?: (provider: "openai" | "anthropic") => Promise<StoredToken | null>;
+  /**
+   * Override the ChatGPT session-token probe. Default: instantiate
+   * `new ChatGPTAuth()` and check its on-disk auth.json. Tests inject
+   * a stub returning `false` so the developer's real `~/.codex/auth.json`
+   * doesn't leak into unit-test expectations.
+   */
+  probeChatGPTAuth?: () => { authenticated: boolean; path: string | null };
 }
 
 /**
@@ -122,6 +130,13 @@ export async function resolveBrainAdapter(
     config.probeOllama ??
     (async (ollama: OllamaAdapter) => ollama.isServerRunning());
 
+  const probeChatGPTAuth =
+    config.probeChatGPTAuth ??
+    (() => {
+      const c = new ChatGPTAuth();
+      return { authenticated: c.isAuthenticated(), path: c.locateAuthFile() };
+    });
+
   // Explicit template — skip every other check.
   if (requested === "template") {
     return {
@@ -145,14 +160,17 @@ export async function resolveBrainAdapter(
           "adapter: 'openai' requested but telemetryOptOut=true — forcing template",
       };
     }
-    const token = await probeToken("openai");
-    if (!token) {
+    // Primary: ChatGPT session token (written by `@openai/codex login`).
+    const cg = probeChatGPTAuth();
+    const hasChatGPT = cg.authenticated;
+    const token = hasChatGPT ? null : await probeToken("openai");
+    if (!hasChatGPT && !token) {
       return {
         adapter: new NoopAdapter(),
         resolved: "template",
         requested,
         reason:
-          "adapter: 'openai' requested but no token in keychain — run `mandu brain login --provider=openai`",
+          "adapter: 'openai' requested but no token found — run `mandu brain login --provider=openai`",
       };
     }
     return {
@@ -164,7 +182,9 @@ export async function resolveBrainAdapter(
       }),
       resolved: "openai",
       requested,
-      reason: "Explicit adapter: 'openai' + token present",
+      reason: hasChatGPT
+        ? "Explicit adapter: 'openai' + ChatGPT session token present"
+        : "Explicit adapter: 'openai' + keychain token present",
     };
   }
 
@@ -217,6 +237,21 @@ export async function resolveBrainAdapter(
   // Auto — try cloud providers first (when allowed), then ollama,
   // then template.
   if (!telemetryOptOut) {
+    // Primary: ChatGPT session token (managed by `@openai/codex`).
+    const cg2 = probeChatGPTAuth();
+    if (cg2.authenticated) {
+      return {
+        adapter: createOpenAIOAuthAdapter({
+          ...(config.openaiOptions ?? {}),
+          model: config.openai?.model ?? config.openaiOptions?.model,
+          credentialStore: store,
+          projectRoot,
+        }),
+        resolved: "openai",
+        requested,
+        reason: `auto: ChatGPT session token at ${cg2.path ?? "(unknown)"}`,
+      };
+    }
     const openaiToken = await probeToken("openai");
     if (openaiToken) {
       return {

package/src/index.ts

@@ -1,3 +1,26 @@
+/**
+ * Version marker — consumers (notably `@mandujs/mcp`) use this to detect
+ * that a stale nested copy of `@mandujs/core` was resolved and produce
+ * a helpful error instead of a cryptic "X is not a function". See #236.
+ *
+ * Read directly from the package's own `package.json` at module load
+ * time so the value can NEVER drift from the real published version.
+ * Best-effort — falls back to "unknown" if the file cannot be read
+ * (e.g. when the bundler strips `package.json` from the tree; we never
+ * strip it but keep this defensive).
+ */
+export const __MANDU_CORE_VERSION__: string = (() => {
+  try {
+    // `import.meta.dir` → `<install>/src`; package.json is one level up.
+    const pkgPath = `${import.meta.dir}/../package.json`;
+    const raw = require("node:fs").readFileSync(pkgPath, "utf-8") as string;
+    const parsed = JSON.parse(raw) as { version?: string };
+    return typeof parsed.version === "string" ? parsed.version : "unknown";
+  } catch {
+    return "unknown";
+  }
+})();
+
 export * from "./spec";
 export * from "./runtime";
 export * from "./generator";