@mnemonik/cli 7.131.0 → 7.132.0

package/dist/auth/claudeCodeSignIn.d.ts

@@ -0,0 +1,54 @@
+import { type StoredAuthorization } from './storedAuthorization.js';
+/**
+ * What Claude Code itself holds for Mnemonik's MCP server on this computer.
+ *
+ * On 2026-10-12 a network outage emptied Claude Code's stored Mnemonik
+ * authorization while the server still held a valid grant, and status said
+ * signed in. The server's grant says an authorization exists; only Claude
+ * Code's own store says whether Claude Code can use it. Read the way Claude
+ * Code 2.1.296 reads it:
+ *
+ * - The entry is `mcpOAuth["mnemonik|" + sha256(JSON.stringify({type, url,
+ *   headers}))[0..16]]`, keyed by the declaration in ~/.claude.json, so an
+ *   authorization stored for an older declaration (other headers) is not this one's.
+ * - Linux and Windows keep the document in ~/.claude/.credentials.json; a
+ *   missing file means Claude Code holds nothing.
+ * - macOS keeps it in the login Keychain, generic password service
+ *   `Claude Code-credentials`, account $USER, written and read with
+ *   /usr/bin/security; the file is read only when that item does not exist.
+ *   Over SSH the Keychain is locked and `security` exits 36
+ *   (errSecInteractionNotAllowed); that is said as such, never as "missing".
+ * - Windows uses Credential Manager instead when CLAUDE_CODE_FORCE_WINDOWS_CREDMAN
+ *   is 1 or ~/.claude.json caches `tengu_windows_credman: true`; that store is
+ *   not read here.
+ *
+ * Only key names, presence and `expiresAt` are looked at (storedAuthorization.ts).
+ */
+export type { StoredAuthorization } from './storedAuthorization.js';
+export declare const CLAUDE_CODE_KEYCHAIN_SERVICE = "Claude Code-credentials";
+export type KeychainRead = (service: string, account: string) => Promise<{
+    code: number | null;
+    stdout: string;
+}>;
+export interface ClaudeCodeStoreOptions {
+    home: string;
+    platform?: NodeJS.Platform;
+    env?: NodeJS.ProcessEnv;
+    now?: () => number;
+    /** The macOS Keychain read; /usr/bin/security by default. */
+    keychain?: KeychainRead;
+}
+/** Claude Code's key for a server's stored sign-in (its `zl(name, config)`). */
+export declare function claudeCodeCredentialKey(name: string, declaration: {
+    type: string;
+    url: string;
+    headers?: unknown;
+}): string;
+/** One stored entry, judged as Claude Code judges it when it connects. */
+export declare function claudeCodeEntryState(entry: unknown, now: number): StoredAuthorization;
+/**
+ * Claude Code's stored Mnemonik authorization on this computer, or undefined
+ * when Claude Code has no Mnemonik HTTP declaration that authorizes with OAuth here.
+ */
+export declare function claudeCodeStoredAuthorization(options: ClaudeCodeStoreOptions): Promise<StoredAuthorization | undefined>;
+//# sourceMappingURL=claudeCodeSignIn.d.ts.map

package/dist/auth/claudeCodeSignIn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claudeCodeSignIn.d.ts","sourceRoot":"","sources":["../../src/auth/claudeCodeSignIn.ts"],"names":[],"mappings":"AAKA,OAAO,EAIL,KAAK,mBAAmB,EACzB,MAAM,0BAA0B,CAAC;AAElC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,YAAY,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAMpE,eAAO,MAAM,4BAA4B,4BAA4B,CAAC;AAEtE,MAAM,MAAM,YAAY,GAAG,CACzB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,KACZ,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEtD,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,YAAY,CAAC;CACzB;AAqED,gFAAgF;AAChF,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAC5D,MAAM,CAMR;AAKD,0EAA0E;AAC1E,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,mBAAmB,CAYrF;AAED;;;GAGG;AACH,wBAAsB,6BAA6B,CACjD,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAwC1C"}

package/dist/auth/claudeCodeSignIn.js

@@ -0,0 +1,108 @@
+import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
+
+// packages/cli/src/auth/claudeCodeSignIn.ts
+import { execFile } from "node:child_process";
+import { createHash } from "node:crypto";
+import { readFile } from "node:fs/promises";
+import { userInfo } from "node:os";
+import { join } from "node:path";
+import {
+  object,
+  parseObject as parse,
+  unreadable
+} from "./storedAuthorization.js";
+var KEYCHAIN_ITEM_NOT_FOUND = 44;
+var KEYCHAIN_LOCKED = 36;
+var CLAUDE_CODE_KEYCHAIN_SERVICE = "Claude Code-credentials";
+var readKeychain = (service, account) => new Promise((resolve) => {
+  execFile(
+    "/usr/bin/security",
+    ["find-generic-password", "-a", account, "-w", "-s", service],
+    { encoding: "utf8", timeout: 2e3, maxBuffer: 1024 * 1024, windowsHide: true },
+    (error, stdout) => resolve(
+      error ? { code: typeof error.code === "number" ? error.code : null, stdout: "" } : { code: 0, stdout }
+    )
+  );
+});
+function keychainAccount(env) {
+  let name;
+  try {
+    name = env.USER || userInfo().username;
+  } catch {
+    name = void 0;
+  }
+  return name && /^[a-zA-Z0-9._-]+$/u.test(name) ? name : "claude-code-user";
+}
+async function credentialDocument(options, config) {
+  const { env, home, platform } = options;
+  const parsed = (text2, failure) => {
+    const document = parse(text2);
+    return document ? { document } : { unreadable: failure };
+  };
+  if (platform === "darwin") {
+    const item = await options.keychain(CLAUDE_CODE_KEYCHAIN_SERVICE, keychainAccount(env)).catch(() => void 0);
+    if (item?.code === 0) return parsed(item.stdout.trim(), unreadable("keychain_unreadable"));
+    if (item?.code === KEYCHAIN_LOCKED) return { unreadable: unreadable("keychain_locked") };
+    if (item?.code !== KEYCHAIN_ITEM_NOT_FOUND)
+      return { unreadable: unreadable("keychain_unreadable") };
+  }
+  if (platform === "win32" && (env.CLAUDE_CODE_FORCE_WINDOWS_CREDMAN === "1" || object(config.cachedGrowthBookFeatures) && config.cachedGrowthBookFeatures.tengu_windows_credman === true))
+    return { unreadable: unreadable("credential_manager") };
+  let text;
+  try {
+    text = await readFile(join(home, ".claude", ".credentials.json"), "utf8");
+  } catch (error) {
+    return error.code === "ENOENT" ? { document: null } : { unreadable: unreadable("file_unreadable") };
+  }
+  return parsed(text, unreadable("file_unreadable"));
+}
+function claudeCodeCredentialKey(name, declaration) {
+  const type = declaration.type === "streamable-http" ? "http" : declaration.type;
+  const digest = createHash("sha256").update(JSON.stringify({ type, url: declaration.url, headers: declaration.headers || {} })).digest("hex");
+  return `${name}|${digest.slice(0, 16)}`;
+}
+var token = (value) => typeof value === "string" && value.length > 0;
+function claudeCodeEntryState(entry, now) {
+  if (!object(entry) || !token(entry.accessToken) && !token(entry.refreshToken))
+    return { state: "missing", expiresAt: null };
+  const expires = typeof entry.expiresAt === "number" && Number.isFinite(entry.expiresAt) ? entry.expiresAt : void 0;
+  const expiresAt = expires === void 0 ? null : new Date(expires).toISOString();
+  if (token(entry.accessToken) && (expires === void 0 || expires > now))
+    return { state: "authorized", expiresAt };
+  return { state: token(entry.refreshToken) ? "renewable" : "missing", expiresAt };
+}
+async function claudeCodeStoredAuthorization(options) {
+  const env = options.env ?? process.env;
+  const raw = await readFile(join(options.home, ".claude.json"), "utf8").catch(() => void 0);
+  const config = raw === void 0 ? void 0 : parse(raw);
+  const declaration = object(config?.mcpServers) ? config.mcpServers.mnemonik : void 0;
+  if (!config || !object(declaration) || typeof declaration.url !== "string" || typeof declaration.type !== "string" || !["http", "streamable-http", "sse"].includes(declaration.type))
+    return void 0;
+  if (declaration.headersHelper !== void 0 || object(declaration.headers) && Object.keys(declaration.headers).some((name) => name.toLowerCase() === "authorization"))
+    return void 0;
+  if (env.CLAUDE_CONFIG_DIR || env.CLAUDE_SECURESTORAGE_CONFIG_DIR !== void 0)
+    return unreadable("custom_folder");
+  const document = await credentialDocument(
+    {
+      home: options.home,
+      env,
+      platform: options.platform ?? process.platform,
+      keychain: options.keychain ?? readKeychain
+    },
+    config
+  );
+  if ("unreadable" in document) return document.unreadable;
+  const entries = object(document.document?.mcpOAuth) ? document.document.mcpOAuth : {};
+  const key = claudeCodeCredentialKey("mnemonik", {
+    type: declaration.type,
+    url: declaration.url,
+    headers: declaration.headers
+  });
+  return claudeCodeEntryState(entries[key], (options.now ?? Date.now)());
+}
+export {
+  CLAUDE_CODE_KEYCHAIN_SERVICE,
+  claudeCodeCredentialKey,
+  claudeCodeEntryState,
+  claudeCodeStoredAuthorization
+};

package/dist/auth/claudeCodeSignIn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claudeCodeSignIn.js","sourceRoot":"","sources":["../../src/auth/claudeCodeSignIn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,MAAM,EACN,WAAW,IAAI,KAAK,EACpB,UAAU,GAEX,MAAM,0BAA0B,CAAC;AA6BlC,uGAAuG;AACvG,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,wGAAwG;AACxG,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,CAAC,MAAM,4BAA4B,GAAG,yBAAyB,CAAC;AAgBtE,MAAM,YAAY,GAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CACtD,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;IACtB,QAAQ,CACN,mBAAmB,EACnB,CAAC,uBAAuB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,EAC7D,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,EAC9E,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAChB,OAAO,CACL,KAAK;QACH,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QAC1E,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CACxB,CACJ,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,yFAAyF;AACzF,SAAS,eAAe,CAAC,GAAsB;IAC7C,IAAI,IAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC,QAAQ,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC;AAC7E,CAAC;AAKD,+FAA+F;AAC/F,KAAK,UAAU,kBAAkB,CAC/B,OAAsD,EACtD,MAA+B;IAE/B,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACxC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,OAA4B,EAAsB,EAAE;QAChF,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IAC3D,CAAC,CAAC;IACF,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,OAAO;aACvB,QAAQ,CAAC,4BAA4B,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC;aAC5D,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1B,IAAI,IAAI,EAAE,IAAI,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,UAAU,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC3F,qEAAqE;QACrE,IAAI,IAAI,EAAE,IAAI,KAAK,eAAe;YAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACzF,IAAI,IAAI,EAAE,IAAI,KAAK,uBAAuB;YACxC,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;IAC7D,CAAC;IACD,IACE,QAAQ,KAAK,OAAO;QACpB,CAAC,GAAG,CAAC,iCAAiC,KAAK,GAAG;YAC5C,CAAC,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC;gBACtC,MAAM,CAAC,wBAAwB,CAAC,qBAAqB,KAAK,IAAI,CAAC,CAAC;QAEpE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;IAC1D,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,QAAQ;YACvD,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;YACpB,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;IACpD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,uBAAuB,CACrC,IAAY,EACZ,WAA6D;IAE7D,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC;IAChF,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;SAChC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;SAC1F,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,GAAG,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED,oEAAoE;AACpE,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AAEhF,0EAA0E;AAC1E,MAAM,UAAU,oBAAoB,CAAC,KAAc,EAAE,GAAW;IAC9D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC7E,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC/C,MAAM,OAAO,GACX,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;QACrE,CAAC,CAAC,KAAK,CAAC,SAAS;QACjB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,SAAS,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IACjF,IAAI,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,GAAG,GAAG,CAAC;QACtE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;IAC5C,uFAAuF;IACvF,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC;AACnF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAA+B;IAE/B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC9F,MAAM,MAAM,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,IACE,CAAC,MAAM;QACP,CAAC,MAAM,CAAC,WAAW,CAAC;QACpB,OAAO,WAAW,CAAC,GAAG,KAAK,QAAQ;QACnC,OAAO,WAAW,CAAC,IAAI,KAAK,QAAQ;QACpC,CAAC,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC;QAE9D,OAAO,SAAS,CAAC;IACnB,yFAAyF;IACzF,IACE,WAAW,CAAC,aAAa,KAAK,SAAS;QACvC,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC,CAAC;QAE1F,OAAO,SAAS,CAAC;IACnB,4EAA4E;IAC5E,IAAI,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,+BAA+B,KAAK,SAAS;QAC5E,OAAO,UAAU,CAAC,eAAe,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CACvC;QACE,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG;QACH,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;QAC9C,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,YAAY;KAC3C,EACD,MAAM,CACP,CAAC;IACF,IAAI,YAAY,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,UAAU,CAAC;IACzD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,MAAM,GAAG,GAAG,uBAAuB,CAAC,UAAU,EAAE;QAC9C,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,GAAG,EAAE,WAAW,CAAC,GAAG;QACpB,OAAO,EAAE,WAAW,CAAC,OAAO;KAC7B,CAAC,CAAC;IACH,OAAO,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACzE,CAAC"}

package/dist/auth/codexAuthorization.d.ts

@@ -0,0 +1,47 @@
+import { type StoredAuthorization } from './storedAuthorization.js';
+/**
+ * What Codex itself holds for Mnemonik's MCP server on this computer.
+ *
+ * Until 2026-10-13 Codex's authorization came from the server's record alone,
+ * so the false "authorized" seen for Claude Code on 2026-10-12 could happen for
+ * Codex too. Read the way Codex 0.162.1 reads it (codex-rs/rmcp-client/src/oauth.rs,
+ * resolved_store.rs; codex-rs/config/src/types.rs):
+ *
+ * - Where: `mcp_oauth_credentials_store` at the top of $CODEX_HOME/config.toml
+ *   (CODEX_HOME defaults to ~/.codex): `auto` (the default) tries the
+ *   operating system's keyring first and falls back to the file; `file` uses
+ *   $CODEX_HOME/.credentials.json only; `keyring` uses the keyring only. The
+ *   keyring (macOS Keychain, Windows Credential Manager, the Secret Service on
+ *   Linux) is never read here: that store is said to be unchecked.
+ * - The file is a JSON object of entries keyed `mnemonik|` and the first 16
+ *   hex characters of the SHA-256 of `{"type":"http","url":<url>,"headers":{}}`
+ *   (codexCredentialKey; headers are always empty in the key, whatever the
+ *   declaration sends). For a plain server name Codex finds the entry by its
+ *   `server_name` and `server_url`, in key order, skipping executor-owned ones.
+ * - `auto` with an entry in the file: Codex wrote it there because its keyring
+ *   failed, and it removes the file entry whenever a keyring save succeeds, so
+ *   the file entry is the one it uses. `auto` with nothing in the file: on macOS
+ *   and Windows the keyring holds it (unchecked); on Linux it can only be in a
+ *   Secret Service keyring, so when this user has none, Codex holds nothing.
+ * - Usable as Codex judges it (oauth_tokens_are_usable): a client id; then an
+ *   access token that does not expire within 30 seconds, or else a refresh
+ *   token together with the issuer it is bound to.
+ *
+ * Only key names, presence and `expires_at` are looked at.
+ */
+export interface CodexStoreOptions {
+    home: string;
+    platform?: NodeJS.Platform;
+    env?: NodeJS.ProcessEnv;
+    now?: () => number;
+}
+/** Codex's key for a server's stored authorization (compute_store_key). */
+export declare function codexCredentialKey(name: string, url: string): string;
+/** One file entry, judged as Codex judges it when it connects. */
+export declare function codexEntryState(entry: Record<string, unknown>, now: number): StoredAuthorization;
+/**
+ * Codex's stored Mnemonik authorization on this computer, or undefined when
+ * Codex has no Mnemonik HTTP declaration that authorizes with OAuth here.
+ */
+export declare function codexStoredAuthorization(options: CodexStoreOptions): Promise<StoredAuthorization | undefined>;
+//# sourceMappingURL=codexAuthorization.d.ts.map

package/dist/auth/codexAuthorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexAuthorization.d.ts","sourceRoot":"","sources":["../../src/auth/codexAuthorization.ts"],"names":[],"mappings":"AAIA,OAAO,EAKL,KAAK,mBAAmB,EACzB,MAAM,0BAA0B,CAAC;AAElC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAKD,2EAA2E;AAC3E,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAKpE;AAED,kEAAkE;AAClE,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,mBAAmB,CAahG;AAgBD;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAyD1C"}