@mnemonik/cli 7.131.0 → 7.132.0

package/dist/auth/codexAuthorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexAuthorization.js","sourceRoot":"","sources":["../../src/auth/codexAuthorization.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EACL,MAAM,EACN,WAAW,EACX,OAAO,EACP,UAAU,GAEX,MAAM,0BAA0B,CAAC;AAuClC,yFAAyF;AACzF,MAAM,eAAe,GAAG,MAAM,CAAC;AAE/B,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,GAAW;IAC1D,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;SAChC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;SAC1D,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,GAAG,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,eAAe,CAAC,KAA8B,EAAE,GAAW;IACzE,MAAM,OAAO,GACX,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;QACvE,CAAC,CAAC,KAAK,CAAC,UAAU;QAClB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,SAAS,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IACjF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IACtE,IAAI,OAAO,KAAK,SAAS,IAAI,GAAG,GAAG,eAAe,IAAI,OAAO;QAC3D,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YACtF,SAAS;SACV,CAAC;IACJ,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC;AACtF,CAAC;AAED,wFAAwF;AACxF,KAAK,UAAU,oBAAoB,CAAC,IAAY,EAAE,GAAsB;IACtE,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACnC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CACxB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,EAC9B,GAAG,EAAE,CAAC,KAAK,CACZ,CACF,CACF,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAA0B;IAE1B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1F,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,SAAS,CAAC,GAAG,CAA6B,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,OAAO,WAAW,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAClF,kFAAkF;IAClF,IACE,WAAW,CAAC,oBAAoB,KAAK,SAAS;QAC9C,WAAW,CAAC,YAAY,KAAK,SAAS;QACtC,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC,CAAC;QAE/F,OAAO,SAAS,CAAC;IACnB,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,2BAA2B,IAAI,MAAM,CAAC;IAC1D,gDAAgD;IAChD,MAAM,OAAO,GAAG,UAAU,CACxB,QAAQ,KAAK,QAAQ;QACnB,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,QAAQ,KAAK,OAAO;YACpB,CAAC,CAAC,oBAAoB;YACtB,CAAC,CAAC,gBAAgB,CACvB,CAAC;IACF,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IACvC,IAAI,IAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,UAAU,CAAC,iBAAiB,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI;QAAE,OAAO,UAAU,CAAC,iBAAiB,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;SAC5B,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;SACvB,IAAI,CACH,CAAC,SAAS,EAAwC,EAAE,CAClD,MAAM,CAAC,SAAS,CAAC;QACjB,SAAS,CAAC,cAAc,KAAK,IAAI;QACjC,SAAS,CAAC,UAAU,KAAK,GAAG;QAC5B,SAAS,CAAC,WAAW,KAAK,UAAU,CACvC,CAAC;IACJ,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACxC,IAAI,KAAK;QAAE,OAAO,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9C,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAClE,4DAA4D;IAC5D,IAAI,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,oBAAoB,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC1E,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC/C,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/auth/cursorAuthorization.d.ts

@@ -0,0 +1,47 @@
+import { type StoredAuthorization } from './storedAuthorization.js';
+/**
+ * What Cursor itself holds for Mnemonik's MCP server on this computer.
+ *
+ * Observed on 2026-10-13 with Cursor 3.21.16 on macOS (Cursor Settings,
+ * Customize, MCPs; Local, Authenticate and Logout), and read from its
+ * McpOAuthStoreMainService and cursor-mcp extension:
+ *
+ * - Cursor keeps MCP authorizations in its own settings database,
+ *   <user data>/User/globalStorage/state.vscdb (SQLite, table ItemTable), not in
+ *   ~/.cursor and not as Keychain items of their own. Each token set is one row,
+ *   `mcpOAuth.secret.` + base64url(`[<identifier>] mcp_tokens`), whose value is
+ *   encrypted with the key in the "Cursor Safe Storage" Keychain item. Authorize
+ *   adds the row; Logout deletes it; the Keychain does not change.
+ * - For ~/.cursor/mcp.json the identifier is `user-mnemonik`, scoped as
+ *   `user-mnemonik::mcpScope:profile:<base64url of the profile name>`. Cursor also
+ *   knows `identifier:v1:`/`raw-identifier:v1:` forms of the same identifier, a
+ *   `url:<base64url of the server URL>` form shared by URL, and an older copy in
+ *   its extension's secret storage (`secret://` and a JSON key naming the same row).
+ * - The expiry is inside the encrypted value. Decrypting it would mean reading
+ *   the Cursor Safe Storage key from the Keychain, which can prompt, so only the
+ *   presence of the row is read: a row means Cursor holds an authorization it
+ *   renews with its refresh token, and the server's record says whether that
+ *   authorization is still valid.
+ * - Cursor holds the database open in WAL mode while it runs; it is opened read
+ *   only, and immutable when no write-ahead log exists (Cursor is closed), so
+ *   nothing is ever written beside it (databaseKeys).
+ * - When Cursor opens this computer over SSH, its authorization lives on the
+ *   computer Cursor runs on, and this computer has none of its settings.
+ */
+export interface CursorStoreOptions {
+    home: string;
+    platform?: NodeJS.Platform;
+    env?: NodeJS.ProcessEnv;
+    /** Lists the database's MCP authorization key names; node:sqlite, read only, by default. */
+    listKeys?: (database: string) => Promise<string[]>;
+}
+/** Cursor's own user-data folder for this platform (Electron's appData plus "Cursor"). */
+export declare function cursorUserData(home: string, platform: NodeJS.Platform, env: NodeJS.ProcessEnv): string;
+/** Whether one storage key name holds Mnemonik's tokens for this declaration. */
+export declare function isMnemonikTokens(name: string, url: string): boolean;
+/**
+ * Cursor's stored Mnemonik authorization on this computer, or undefined when
+ * Cursor has no Mnemonik HTTP declaration that authorizes with OAuth here.
+ */
+export declare function cursorStoredAuthorization(options: CursorStoreOptions): Promise<StoredAuthorization | undefined>;
+//# sourceMappingURL=cursorAuthorization.d.ts.map

package/dist/auth/cursorAuthorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursorAuthorization.d.ts","sourceRoot":"","sources":["../../src/auth/cursorAuthorization.ts"],"names":[],"mappings":"AAGA,OAAO,EAIL,KAAK,mBAAmB,EACzB,MAAM,0BAA0B,CAAC;AAElC;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,4FAA4F;IAC5F,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CACpD;AAKD,0FAA0F;AAC1F,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,UAI7F;AAiBD,iFAAiF;AACjF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAUnE;AAoED;;;GAGG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAqC1C"}

package/dist/auth/cursorAuthorization.js

@@ -0,0 +1,116 @@
+import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
+
+// packages/cli/src/auth/cursorAuthorization.ts
+import { readFile, stat } from "node:fs/promises";
+import { join } from "node:path";
+import { pathToFileURL } from "node:url";
+import {
+  object,
+  parseObject,
+  unreadable
+} from "./storedAuthorization.js";
+var IDENTIFIER = "user-mnemonik";
+var TOKENS = "] mcp_tokens";
+function cursorUserData(home, platform, env) {
+  if (platform === "darwin") return join(home, "Library", "Application Support", "Cursor");
+  if (platform === "win32") return join(env.APPDATA || join(home, "AppData", "Roaming"), "Cursor");
+  return join(env.XDG_CONFIG_HOME || join(home, ".config"), "Cursor");
+}
+var base64url = (text) => Buffer.from(text, "base64url").toString("utf8");
+function sameServer(left, right) {
+  const normal = (value) => {
+    try {
+      const url = new URL(value);
+      return `${url.protocol}//${url.host}${url.pathname.replace(/\/+$/u, "")}${url.search}`;
+    } catch {
+      return value.replace(/\/+$/u, "");
+    }
+  };
+  return normal(left) === normal(right);
+}
+function isMnemonikTokens(name, url) {
+  const bare = name.replace(/^\[profile:[^\]]+\] /u, "");
+  if (!bare.startsWith("[") || !bare.endsWith(TOKENS)) return false;
+  let id = bare.slice(1, -TOKENS.length);
+  if (id.startsWith("identifier:v1:")) id = base64url(id.slice("identifier:v1:".length));
+  else if (id.startsWith("raw-identifier:v1:"))
+    id = base64url(id.slice("raw-identifier:v1:".length));
+  if (id.startsWith("url:")) return sameServer(base64url(id.slice("url:".length)), url);
+  return id === IDENTIFIER || id.startsWith(`${IDENTIFIER}::`);
+}
+function keyName(row) {
+  if (row.startsWith("mcpOAuth.secret.")) return base64url(row.slice("mcpOAuth.secret.".length));
+  if (row.startsWith("secret://")) {
+    const parsed = parseObject(row.slice("secret://".length));
+    return typeof parsed?.key === "string" ? parsed.key : void 0;
+  }
+  return void 0;
+}
+var SQLITE = "node:sqlite";
+async function sqlite() {
+  const emit = process.emitWarning;
+  process.emitWarning = ((warning, ...rest) => {
+    const text = typeof warning === "string" ? warning : warning.message;
+    if (/sqlite/iu.test(text)) return;
+    emit.call(process, warning, ...rest);
+  });
+  try {
+    return await import(SQLITE);
+  } finally {
+    process.emitWarning = emit;
+  }
+}
+var exists = (path) => stat(path).then(
+  () => true,
+  () => false
+);
+async function databaseKeys(database) {
+  const { DatabaseSync } = await sqlite();
+  const url = pathToFileURL(database);
+  url.searchParams.set("mode", "ro");
+  if (!await exists(`${database}-wal`)) url.searchParams.set("immutable", "1");
+  const db = new DatabaseSync(url, { readOnly: true });
+  try {
+    return db.prepare(
+      "SELECT key FROM ItemTable WHERE key LIKE 'mcpOAuth.secret.%' OR key LIKE 'secret://%'"
+    ).all().map((row) => String(row.key));
+  } finally {
+    db.close();
+  }
+}
+async function cursorStoredAuthorization(options) {
+  const env = options.env ?? process.env;
+  const platform = options.platform ?? process.platform;
+  const raw = await readFile(join(options.home, ".cursor", "mcp.json"), "utf8").catch(
+    () => void 0
+  );
+  const config = raw === void 0 ? void 0 : parseObject(raw);
+  const declaration = object(config?.mcpServers) ? config.mcpServers.mnemonik : void 0;
+  if (!object(declaration) || typeof declaration.url !== "string") return void 0;
+  if (object(declaration.headers) && Object.keys(declaration.headers).some((name) => name.toLowerCase() === "authorization"))
+    return void 0;
+  const userData = cursorUserData(options.home, platform, env);
+  const database = join(userData, "User", "globalStorage", "state.vscdb");
+  if (!await exists(database)) {
+    if (await exists(userData)) return { state: "missing", expiresAt: null };
+    return unreadable(
+      await exists(join(options.home, ".cursor-server")) ? "remote" : "not_on_this_computer"
+    );
+  }
+  let rows;
+  try {
+    rows = await (options.listKeys ?? databaseKeys)(database);
+  } catch {
+    return unreadable("database_unreadable");
+  }
+  const url = declaration.url;
+  return rows.some((row) => {
+    const name = keyName(row);
+    return name !== void 0 && isMnemonikTokens(name, url);
+  }) ? { state: "authorized", expiresAt: null } : { state: "missing", expiresAt: null };
+}
+export {
+  cursorStoredAuthorization,
+  cursorUserData,
+  isMnemonikTokens
+};

package/dist/auth/cursorAuthorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursorAuthorization.js","sourceRoot":"","sources":["../../src/auth/cursorAuthorization.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,MAAM,EACN,WAAW,EACX,UAAU,GAEX,MAAM,0BAA0B,CAAC;AAuClC,MAAM,UAAU,GAAG,eAAe,CAAC;AACnC,MAAM,MAAM,GAAG,cAAc,CAAC;AAE9B,0FAA0F;AAC1F,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,QAAyB,EAAE,GAAsB;IAC5F,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,QAAQ,CAAC,CAAC;IACzF,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC;IACjG,OAAO,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAEpF,gGAAgG;AAChG,SAAS,UAAU,CAAC,IAAY,EAAE,KAAa;IAC7C,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;YAC3B,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACzF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,GAAW;IACxD,wDAAwD;IACxD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC;QAAE,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;SAClF,IAAI,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC;QAC1C,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtF,OAAO,EAAE,KAAK,UAAU,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,UAAU,IAAI,CAAC,CAAC;AAC/D,CAAC;AAED,8FAA8F;AAC9F,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/F,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1D,OAAO,OAAO,MAAM,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAUD,MAAM,MAAM,GAAG,aAAa,CAAC;AAE7B,8FAA8F;AAC9F,KAAK,UAAU,MAAM;IACnB,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC;IACjC,OAAO,CAAC,WAAW,GAAG,CAAC,CAAC,OAAuB,EAAE,GAAG,IAAe,EAAE,EAAE;QACrE,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACrE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO;QACjC,IAAqC,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IACzE,CAAC,CAA+B,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,CAAW,CAAC;IAC1C,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAC9B,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CACb,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,KAAK,CACZ,CAAC;AAEJ;;;;;;GAMG;AACH,KAAK,UAAU,YAAY,CAAC,QAAgB;IAC1C,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,EAAE,CAAC;IACxC,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACpC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,QAAQ,MAAM,CAAC,CAAC;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAC/E,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC;QACH,OAAO,EAAE;aACN,OAAO,CACN,uFAAuF,CACxF;aACA,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAE,GAAwB,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAA2B;IAE3B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CACjF,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;IACF,MAAM,MAAM,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,OAAO,WAAW,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAClF,oFAAoF;IACpF,IACE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC;QAEvF,OAAO,SAAS,CAAC;IACnB,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;IACxE,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC9B,IAAI,MAAM,MAAM,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACzE,yEAAyE;QACzE,OAAO,UAAU,CACf,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CACzF,CAAC;IACJ,CAAC;IACD,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,CAAC,qBAAqB,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,OAAO,IAAI,KAAK,SAAS,IAAI,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3D,CAAC,CAAC;QACA,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE;QAC1C,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC5C,CAAC"}

package/dist/auth/status.d.ts

@@ -1,4 +1,5 @@
 import type { HostName } from '@mnemonik/shared';
+import type { StoredAuthorization } from './storedAuthorization.js';
 export interface AccountGrant {
     deviceInstallationId?: string | null;
     id: string;
@@ -42,27 +43,80 @@ export declare const validGrant: (grant: AccountGrant) => boolean;
  * rule). How long ago it was used says nothing about whether it is valid.
  */
 export declare function signedInElsewhere(status: GrantStatus, host: HostName): boolean;
-export type CodingToolSignInState = 'signed_in' | 'signed_in_elsewhere' | 'signed_out' | 'not_set_up';
 /**
- * One coding tool's sign-in on this machine, from the server's listing of this
- * installation's sign-ins (`?installation=current`, revoked ones included).
- * Signed out only when it had sign-ins here and none of them is valid; never
- * because of idle time. `everywhere`, the account-wide listing, is read only
- * for editors that can sign in on another machine.
+ * A coding tool's MCP authorization on this machine as the server records it.
+ * `authorized_elsewhere`: valid on another of the account's computers, for the
+ * tools that can run there while their hooks run here (Cursor over SSH).
  */
-export declare function codingToolSignIn(host: HostName, here: GrantStatus, everywhere?: GrantStatus): {
-    state: CodingToolSignInState;
+export type ServerAuthorizationState = 'authorized' | 'authorized_elsewhere' | 'revoked_or_expired' | 'never_authorized';
+/**
+ * One coding tool's MCP authorization on this machine, from the server's
+ * listing of this installation's grants (`?installation=current`, revoked ones
+ * included). Revoked or expired only when it had grants here and none of them
+ * is valid; never because of idle time. `everywhere`, the account-wide
+ * listing, is read only for tools that can run on another machine.
+ */
+export declare function serverAuthorization(host: HostName, here: GrantStatus, everywhere?: GrantStatus): {
+    state: ServerAuthorizationState;
     lastUsedAt: string | null;
 };
+/** Why the server's record could not be asked: the CLI's own sign-in (absent, or locked in the macOS Keychain), or the network. */
+export type ServerProblem = 'cli_not_signed_in' | 'cli_locked' | 'unreachable';
+/**
+ * A coding tool's MCP authorization on this computer, from both sides:
+ *
+ * - `authorized`: the server holds a valid grant and the tool's own store holds
+ *   a usable token (or the tool keeps nothing Mnemonik reads).
+ * - `authorized_elsewhere`: valid on the computer the tool runs on (Cursor over SSH).
+ * - `not_authorized`: nothing usable here; `reason` says which side decided.
+ * - `store_unchecked`: the server holds a valid grant; the tool's store on this
+ *   computer could not be read (`stored.reason` says why).
+ * - `server_unchecked`: the tool's store holds a usable token; the server could
+ *   not be asked (`serverProblem` says why).
+ * - `unchecked`: neither side could be read.
+ */
+export type McpState = 'authorized' | 'authorized_elsewhere' | 'not_authorized' | 'store_unchecked' | 'server_unchecked' | 'unchecked';
+/**
+ * Why a tool is not authorized: its grant here was revoked or expired; the
+ * server holds a valid grant the tool no longer has (2026-10-12); or it was
+ * never authorized on this computer.
+ */
+export type NotAuthorizedReason = 'revoked_or_expired' | 'not_held' | 'never_authorized';
+export interface McpAuthorization {
+    state: McpState;
+    reason?: NotAuthorizedReason;
+    /** The server's record; `unknown` when it could not be asked. */
+    server: ServerAuthorizationState | 'unknown';
+    serverProblem?: ServerProblem;
+    /** What the tool itself stores here; absent when it keeps nothing Mnemonik reads. */
+    stored?: StoredAuthorization;
+    /** When the tool last renewed its grant; dates use, never decides it. */
+    lastUsedAt: string | null;
+}
+/**
+ * The server decides revoked or expired; only the tool's own store can say the
+ * tool still holds what the server lists (2026-10-12 outage). A store that
+ * cannot be read, or a server that cannot be asked, vouches for nothing, and
+ * the state says which side was not checked.
+ */
+export declare function mcpAuthorization(server: {
+    state: ServerAuthorizationState;
+    lastUsedAt: string | null;
+} | undefined, stored: StoredAuthorization | undefined, serverProblem?: ServerProblem): McpAuthorization;
 /** "just now", "5 minutes ago", "1 hour ago", "3 days ago", or "never". */
 export declare function relativeTime(time: number | null, now: number): string;
+/** The CLI's own grants carry this client name; their rows are sign-ins, not authorizations. */
+export declare const CLI_CLIENT_NAME = "Mnemonik CLI";
 /**
- * One line per host for plain `auth status`: editors first, then the rest,
- * each by most recent use. Grant ids, dates and scopes are for --json.
+ * One row per part for plain `auth status`, across all of the account's
+ * computers: coding tools' MCP connections first ("Claude Code MCP"), then the
+ * rest, each by most recent use; the CLI's own grants are sign-ins ("CLI").
+ * Grant ids, dates and scopes are for --json. `onThisComputer` adds what the
+ * tool itself stores on this computer to its row.
  */
 export declare function grantSummaryLines(grants: readonly (AccountGrant & {
     host: string;
-})[], editors: Readonly<Record<string, string>>, now?: number): string[];
+})[], tools: Readonly<Record<string, string>>, now?: number, onThisComputer?: Readonly<Record<string, (summary: string) => string>>): string[];
 export declare function grantTransport(getBearer: () => Promise<string>, fetcher?: typeof fetch): {
     /** Every machine's unrevoked sign-ins, or with `here` every sign-in on this one. */
     list(options?: {

package/dist/auth/status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/auth/status.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEjD,MAAM,WAAW,YAAY;IAC3B,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;OAGG;IACH,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,2EAA2E;IAC3E,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,yEAAyE;IACzE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB;;;OAGG;IACH,MAAM,CAAC,EAAE,WAAW,GAAG,cAAc,GAAG,SAAS,GAAG,YAAY,CAAC;CAClE;AACD,MAAM,WAAW,WAAW;IAC1B,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,mFAAmF;IACnF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,YAAY,EAAE,CAAC;CACxB;AAED,eAAO,MAAM,SAAS,UAAW,YAAY,KAAG,QAAQ,GAAG,SAAsC,CAAC;AAElG,0FAA0F;AAC1F,eAAO,MAAM,UAAU,UAAW,YAAY,KAAG,OACyB,CAAC;AA4B3E;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,WAEpE;AAED,MAAM,MAAM,qBAAqB,GAC/B,WAAW,GAAG,qBAAqB,GAAG,YAAY,GAAG,YAAY,CAAC;AAEpE;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE,WAAW,EACjB,UAAU,CAAC,EAAE,WAAW,GACvB;IAAE,KAAK,EAAE,qBAAqB,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAe7D;AAED,2EAA2E;AAC3E,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAWrE;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,SAAS,CAAC,YAAY,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,EAAE,EACpD,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EACzC,GAAG,SAAa,GACf,MAAM,EAAE,CAyBV;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,GAAE,OAAO,KAAa;IAc1F,oFAAoF;IAC9E,IAAI,WAAU;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAQ,OAAO,CAAC,WAAW,CAAC;IA8B5D,MAAM,KAAK,MAAM;EAI1B;AACD,MAAM,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC"}
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/auth/status.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,MAAM,WAAW,YAAY;IAC3B,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;OAGG;IACH,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,2EAA2E;IAC3E,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,yEAAyE;IACzE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB;;;OAGG;IACH,MAAM,CAAC,EAAE,WAAW,GAAG,cAAc,GAAG,SAAS,GAAG,YAAY,CAAC;CAClE;AACD,MAAM,WAAW,WAAW;IAC1B,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,mFAAmF;IACnF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,YAAY,EAAE,CAAC;CACxB;AAED,eAAO,MAAM,SAAS,UAAW,YAAY,KAAG,QAAQ,GAAG,SAAsC,CAAC;AAElG,0FAA0F;AAC1F,eAAO,MAAM,UAAU,UAAW,YAAY,KAAG,OACyB,CAAC;AA4B3E;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,WAEpE;AAED;;;;GAIG;AACH,MAAM,MAAM,wBAAwB,GAClC,YAAY,GAAG,sBAAsB,GAAG,oBAAoB,GAAG,kBAAkB,CAAC;AAEpF;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE,WAAW,EACjB,UAAU,CAAC,EAAE,WAAW,GACvB;IAAE,KAAK,EAAE,wBAAwB,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAehE;AAED,mIAAmI;AACnI,MAAM,MAAM,aAAa,GAAG,mBAAmB,GAAG,YAAY,GAAG,aAAa,CAAC;AAE/E;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,QAAQ,GAChB,YAAY,GACZ,sBAAsB,GACtB,gBAAgB,GAChB,iBAAiB,GACjB,kBAAkB,GAClB,WAAW,CAAC;AAEhB;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,oBAAoB,GAAG,UAAU,GAAG,kBAAkB,CAAC;AAEzF,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,QAAQ,CAAC;IAChB,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,iEAAiE;IACjE,MAAM,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAC7C,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,qFAAqF;IACrF,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,yEAAyE;IACzE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAKD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE;IAAE,KAAK,EAAE,wBAAwB,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,SAAS,EAClF,MAAM,EAAE,mBAAmB,GAAG,SAAS,EACvC,aAAa,GAAE,aAA6B,GAC3C,gBAAgB,CAqBlB;AAED,2EAA2E;AAC3E,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAWrE;AAED,gGAAgG;AAChG,eAAO,MAAM,eAAe,iBAAiB,CAAC;AAE9C;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,SAAS,CAAC,YAAY,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,EAAE,EACpD,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EACvC,GAAG,SAAa,EAChB,cAAc,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC,CAAM,GACzE,MAAM,EAAE,CAiCV;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,GAAE,OAAO,KAAa;IAc1F,oFAAoF;IAC9E,IAAI,WAAU;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAQ,OAAO,CAAC,WAAW,CAAC;IA8B5D,MAAM,KAAK,MAAM;EAI1B;AACD,MAAM,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC"}

package/dist/auth/status.js

@@ -5180,15 +5180,38 @@ var elsewhereGrants = (status, host) => {
 function signedInElsewhere(status, host) {
   return elsewhereGrants(status, host).length > 0;
 }
-function codingToolSignIn(host, here, everywhere) {
+function serverAuthorization(host, here, everywhere) {
   const mine = here.grants.filter(
     (grant) => grantHost(grant) === host && (!here.deviceInstallationId || grant.deviceInstallationId === here.deviceInstallationId)
   );
   const valid = mine.filter(validGrant);
-  if (valid.length) return { state: "signed_in", lastUsedAt: newest(valid) };
+  if (valid.length) return { state: "authorized", lastUsedAt: newest(valid) };
   const remote = everywhere ? elsewhereGrants(everywhere, host) : [];
-  if (remote.length) return { state: "signed_in_elsewhere", lastUsedAt: newest(remote) };
-  return mine.some((grant) => grant.status !== "incomplete" && grant.activatedAt !== null) ? { state: "signed_out", lastUsedAt: null } : { state: "not_set_up", lastUsedAt: null };
+  if (remote.length) return { state: "authorized_elsewhere", lastUsedAt: newest(remote) };
+  return mine.some((grant) => grant.status !== "incomplete" && grant.activatedAt !== null) ? { state: "revoked_or_expired", lastUsedAt: null } : { state: "never_authorized", lastUsedAt: null };
+}
+var usable = (stored) => stored?.state === "authorized" || stored?.state === "renewable";
+function mcpAuthorization(server, stored, serverProblem = "unreachable") {
+  const evidence = {
+    server: server?.state ?? "unknown",
+    ...server ? {} : { serverProblem },
+    ...stored ? { stored } : {},
+    lastUsedAt: server?.lastUsedAt ?? null
+  };
+  const not = (reason) => ({
+    state: "not_authorized",
+    reason,
+    ...evidence,
+    lastUsedAt: null
+  });
+  if (server?.state === "revoked_or_expired") return not("revoked_or_expired");
+  if (server?.state === "never_authorized") return not("never_authorized");
+  if (stored?.state === "missing")
+    return not(server?.state === "authorized" ? "not_held" : "never_authorized");
+  if (!server) return { state: usable(stored) ? "server_unchecked" : "unchecked", ...evidence };
+  if (server.state === "authorized_elsewhere")
+    return { state: usable(stored) ? "authorized" : "authorized_elsewhere", ...evidence };
+  return { state: stored?.state === "unreadable" ? "store_unchecked" : "authorized", ...evidence };
 }
 function relativeTime(time, now) {
   if (time === null) return "never";
@@ -5197,12 +5220,14 @@ function relativeTime(time, now) {
   const [count, unit] = minutes < 60 ? [minutes, "minute"] : minutes < 1440 ? [Math.floor(minutes / 60), "hour"] : [Math.floor(minutes / 1440), "day"];
   return `${count} ${unit}${count === 1 ? "" : "s"} ago`;
 }
-function grantSummaryLines(grants, editors, now = Date.now()) {
+var CLI_CLIENT_NAME = "Mnemonik CLI";
+function grantSummaryLines(grants, tools, now = Date.now(), onThisComputer = {}) {
   const rows = /* @__PURE__ */ new Map();
   for (const grant of grants) {
     const row = rows.get(grant.host) ?? {
-      name: editors[grant.host] ?? grant.host,
-      editor: grant.host in editors,
+      host: grant.host,
+      name: grant.host in tools ? `${tools[grant.host]} MCP` : grant.host === CLI_CLIENT_NAME ? "CLI" : grant.host,
+      tool: grant.host in tools,
       last: null,
       count: 0
     };
@@ -5212,12 +5237,14 @@ function grantSummaryLines(grants, editors, now = Date.now()) {
     rows.set(grant.host, row);
   }
   const ordered = [...rows.values()].sort(
-    (a, b) => Number(b.editor) - Number(a.editor) || (b.last ?? 0) - (a.last ?? 0)
+    (a, b) => Number(b.tool) - Number(a.tool) || (b.last ?? 0) - (a.last ?? 0)
   );
   const width = Math.max(...ordered.map((row) => row.name.length)) + 2;
-  return ordered.map(
-    (row) => `${row.name.padEnd(width)}signed in, last used ${relativeTime(row.last, now)} (${row.count} sign-in${row.count === 1 ? "" : "s"})`
-  );
+  return ordered.map((row) => {
+    const [state, noun] = row.host === CLI_CLIENT_NAME ? ["signed in", "sign-in"] : ["authorized", "authorization"];
+    const summary = `${state}, last used ${relativeTime(row.last, now)} (${row.count} ${noun}${row.count === 1 ? "" : "s"})`;
+    return `${row.name.padEnd(width)}${onThisComputer[row.host]?.(summary) ?? summary}`;
+  });
 }
 function grantTransport(getBearer, fetcher = fetch) {
   const resource = apiOrigin();
@@ -5252,11 +5279,13 @@ function grantTransport(getBearer, fetcher = fetch) {
   };
 }
 export {
-  codingToolSignIn,
+  CLI_CLIENT_NAME,
   grantHost,
   grantSummaryLines,
   grantTransport,
+  mcpAuthorization,
   relativeTime,
+  serverAuthorization,
   signedInElsewhere,
   validGrant
 };

package/dist/auth/status.js.map

@@ -1 +1 @@
-{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/auth/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAmCjE,+FAA+F;AAC/F,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAmB,EAAwB,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;AAElG,0FAA0F;AAC1F,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAmB,EAAW,EAAE,CACzD,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC;AAE3E;;;;GAIG;AACH,MAAM,mBAAmB,GAA0B,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAEzF,MAAM,MAAM,GAAG,CAAC,MAA+B,EAAE,EAAE,CACjD,MAAM;KACH,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;KAChC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAE9D,MAAM,eAAe,GAAG,CAAC,MAAmB,EAAE,IAAc,EAAE,EAAE;IAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,oBAAoB,CAAC;IACzC,OAAO,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI;QAC1C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAClB,CAAC,KAAK,EAAE,EAAE,CACR,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI;YACzB,UAAU,CAAC,KAAK,CAAC;YACjB,CAAC,CAAC,KAAK,CAAC,oBAAoB;YAC5B,KAAK,CAAC,oBAAoB,KAAK,IAAI,CACtC;QACH,CAAC,CAAC,EAAE,CAAC;AACT,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAmB,EAAE,IAAc;IACnE,OAAO,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAClD,CAAC;AAKD;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAc,EACd,IAAiB,EACjB,UAAwB;IAExB,8EAA8E;IAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAC7B,CAAC,KAAK,EAAE,EAAE,CACR,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI;QACzB,CAAC,CAAC,IAAI,CAAC,oBAAoB,IAAI,KAAK,CAAC,oBAAoB,KAAK,IAAI,CAAC,oBAAoB,CAAC,CAC3F,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3E,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IACvF,8EAA8E;IAC9E,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,YAAY,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC;QACtF,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE;QAC3C,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAChD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,YAAY,CAAC,IAAmB,EAAE,GAAW;IAC3D,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;IAClD,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC;IACnC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GACjB,OAAO,GAAG,EAAE;QACV,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC;QACrB,CAAC,CAAC,OAAO,GAAG,KAAK;YACf,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,MAAM,CAAC;YACpC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7C,OAAO,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAoD,EACpD,OAAyC,EACzC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,MAAM,IAAI,GAAG,IAAI,GAAG,EAGjB,CAAC;IACJ,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI;YAClC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI;YACvC,MAAM,EAAE,KAAK,CAAC,IAAI,IAAI,OAAO;YAC7B,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,CAAC;SACT,CAAC;QACF,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpE,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAC7E,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC;QACf,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CACrC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAC/E,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;IACrE,OAAO,OAAO,CAAC,GAAG,CAChB,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,WAAW,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CACrI,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAgC,EAAE,OAAO,GAAiB,KAAK;IAC5F,MAAM,QAAQ,GAAG,SAAS,EAAE,CAAC;IAC7B,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,MAAM,GAAG,KAAK;QACjD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE;YACtD,MAAM;YACN,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,SAAS,EAAE,EAAE,EAAE;SAC1D,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAA8B,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,IAAI,sBAAsB,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,EAAsB,CAAC;IAC7C,CAAC;IACD,OAAO;QACL,oFAAoF;QACpF,KAAK,CAAC,IAAI,CAAC,OAAO,GAAuB,EAAE;YACzC,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC,CAAC,qBAAqB,CAClF,CAAgB,CAAC;YAClB,IACE,CAAC,IAAI;gBACL,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;gBAChC,CAAC,IAAI,CAAC,OAAO;gBACb,CAAC,IAAI,CAAC,oBAAoB,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,oBAAoB,KAAK,QAAQ,CAAC;gBACpF,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC;oBACF,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;oBACxB,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;oBAC9B,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;oBAC9B,CAAC,CAAC,CAAC,oBAAoB,IAAI,IAAI,IAAI,OAAO,CAAC,CAAC,oBAAoB,KAAK,QAAQ,CAAC;oBAC9E,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;oBACxB,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;oBAC7C,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;oBACzC,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,CAC9D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,CAC3C;oBACD,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS;wBACrB,CAAC,CAAC,WAAW,EAAE,cAAc,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAChF;gBAED,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,EAAU;YACrB,MAAM,OAAO,CAAC,uBAAuB,kBAAkB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAChF,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/auth/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAoCjE,+FAA+F;AAC/F,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAmB,EAAwB,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;AAElG,0FAA0F;AAC1F,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAmB,EAAW,EAAE,CACzD,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC;AAE3E;;;;GAIG;AACH,MAAM,mBAAmB,GAA0B,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAEzF,MAAM,MAAM,GAAG,CAAC,MAA+B,EAAE,EAAE,CACjD,MAAM;KACH,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;KAChC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAE9D,MAAM,eAAe,GAAG,CAAC,MAAmB,EAAE,IAAc,EAAE,EAAE;IAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,oBAAoB,CAAC;IACzC,OAAO,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI;QAC1C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAClB,CAAC,KAAK,EAAE,EAAE,CACR,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI;YACzB,UAAU,CAAC,KAAK,CAAC;YACjB,CAAC,CAAC,KAAK,CAAC,oBAAoB;YAC5B,KAAK,CAAC,oBAAoB,KAAK,IAAI,CACtC;QACH,CAAC,CAAC,EAAE,CAAC;AACT,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAmB,EAAE,IAAc;IACnE,OAAO,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAClD,CAAC;AAUD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAc,EACd,IAAiB,EACjB,UAAwB;IAExB,4EAA4E;IAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAC7B,CAAC,KAAK,EAAE,EAAE,CACR,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI;QACzB,CAAC,CAAC,IAAI,CAAC,oBAAoB,IAAI,KAAK,CAAC,oBAAoB,KAAK,IAAI,CAAC,oBAAoB,CAAC,CAC3F,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC5E,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IACxF,qFAAqF;IACrF,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,YAAY,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC;QACtF,CAAC,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,UAAU,EAAE,IAAI,EAAE;QACnD,CAAC,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AACtD,CAAC;AA6CD,MAAM,MAAM,GAAG,CAAC,MAAuC,EAAE,EAAE,CACzD,MAAM,EAAE,KAAK,KAAK,YAAY,IAAI,MAAM,EAAE,KAAK,KAAK,WAAW,CAAC;AAElE;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAkF,EAClF,MAAuC,EACvC,aAAa,GAAkB,aAAa;IAE5C,MAAM,QAAQ,GAAG;QACf,MAAM,EAAE,MAAM,EAAE,KAAK,IAAK,SAAmB;QAC7C,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;QACpC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,UAAU,EAAE,MAAM,EAAE,UAAU,IAAI,IAAI;KACvC,CAAC;IACF,MAAM,GAAG,GAAG,CAAC,MAA2B,EAAoB,EAAE,CAAC,CAAC;QAC9D,KAAK,EAAE,gBAAgB;QACvB,MAAM;QACN,GAAG,QAAQ;QACX,UAAU,EAAE,IAAI;KACjB,CAAC,CAAC;IACH,IAAI,MAAM,EAAE,KAAK,KAAK,oBAAoB;QAAE,OAAO,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC7E,IAAI,MAAM,EAAE,KAAK,KAAK,kBAAkB;QAAE,OAAO,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACzE,IAAI,MAAM,EAAE,KAAK,KAAK,SAAS;QAC7B,OAAO,GAAG,CAAC,MAAM,EAAE,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAC/E,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,QAAQ,EAAE,CAAC;IAC9F,IAAI,MAAM,CAAC,KAAK,KAAK,sBAAsB;QACzC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,sBAAsB,EAAE,GAAG,QAAQ,EAAE,CAAC;IACxF,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,YAAY,EAAE,GAAG,QAAQ,EAAE,CAAC;AACnG,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,YAAY,CAAC,IAAmB,EAAE,GAAW;IAC3D,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;IAClD,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC;IACnC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GACjB,OAAO,GAAG,EAAE;QACV,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC;QACrB,CAAC,CAAC,OAAO,GAAG,KAAK;YACf,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,MAAM,CAAC;YACpC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7C,OAAO,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC;AACzD,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,MAAM,eAAe,GAAG,cAAc,CAAC;AAE9C;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAoD,EACpD,KAAuC,EACvC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAChB,cAAc,GAA0D,EAAE;IAE1E,MAAM,IAAI,GAAG,IAAI,GAAG,EAGjB,CAAC;IACJ,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI;YAClC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EACF,KAAK,CAAC,IAAI,IAAI,KAAK;gBACjB,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM;gBAC5B,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,eAAe;oBAC9B,CAAC,CAAC,KAAK;oBACP,CAAC,CAAC,KAAK,CAAC,IAAI;YAClB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK;YACzB,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,CAAC;SACT,CAAC;QACF,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpE,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAC7E,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC;QACf,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CACrC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAC3E,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;IACrE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACzB,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GACjB,GAAG,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;QAC5F,MAAM,OAAO,GAAG,GAAG,KAAK,eAAe,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,IAAI,IAAI,GAAG,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;QACzH,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,CAAC;IACtF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAgC,EAAE,OAAO,GAAiB,KAAK;IAC5F,MAAM,QAAQ,GAAG,SAAS,EAAE,CAAC;IAC7B,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,MAAM,GAAG,KAAK;QACjD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE;YACtD,MAAM;YACN,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,SAAS,EAAE,EAAE,EAAE;SAC1D,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAA8B,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,IAAI,sBAAsB,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,EAAsB,CAAC;IAC7C,CAAC;IACD,OAAO;QACL,oFAAoF;QACpF,KAAK,CAAC,IAAI,CAAC,OAAO,GAAuB,EAAE;YACzC,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC,CAAC,qBAAqB,CAClF,CAAgB,CAAC;YAClB,IACE,CAAC,IAAI;gBACL,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;gBAChC,CAAC,IAAI,CAAC,OAAO;gBACb,CAAC,IAAI,CAAC,oBAAoB,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,oBAAoB,KAAK,QAAQ,CAAC;gBACpF,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC;oBACF,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;oBACxB,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;oBAC9B,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;oBAC9B,CAAC,CAAC,CAAC,oBAAoB,IAAI,IAAI,IAAI,OAAO,CAAC,CAAC,oBAAoB,KAAK,QAAQ,CAAC;oBAC9E,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;oBACxB,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;oBAC7C,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;oBACzC,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,CAC9D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,CAC3C;oBACD,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS;wBACrB,CAAC,CAAC,WAAW,EAAE,cAAc,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAChF;gBAED,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,EAAU;YACrB,MAAM,OAAO,CAAC,uBAAuB,kBAAkB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAChF,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/auth/storedAuthorization.d.ts

@@ -0,0 +1,50 @@
+/**
+ * What a coding tool itself keeps on this computer for Mnemonik's MCP server,
+ * read the way the tool reads it, by key names, presence and expiry only.
+ * Token values are never returned, printed or logged, and a parse error (whose
+ * message can quote the input) is never passed on.
+ *
+ * - `authorized`: an access token that has not expired, or (Cursor, whose
+ *   tokens are encrypted) a stored token whose expiry cannot be read.
+ * - `renewable`: the access token has expired or is gone, and the tool renews
+ *   it with its refresh token the next time it connects.
+ * - `missing`: nothing the tool can use; it asks for authorization again.
+ * - `unreadable`: the store could not be read; `reason` says why.
+ */
+export type StoredState = 'authorized' | 'renewable' | 'missing' | 'unreadable';
+/** Why a tool's store could not be read on this computer. */
+export type UnreadableReason = 
+/** macOS Keychain locked with no way to ask for it in this session (exit 36: over SSH). */
+'keychain_locked'
+/** macOS Keychain answered with anything else, or not at all. */
+ | 'keychain_unreadable'
+/** The tool keeps it in Windows Credential Manager (Claude Code when told to; Codex's keyring). */
+ | 'credential_manager'
+/** Codex keeps its MCP authorizations in the macOS Keychain (its keyring on macOS). */
+ | 'macos_keychain'
+/** Codex keeps them in a Secret Service keyring (its keyring on Linux). */
+ | 'system_keyring'
+/** CLAUDE_CONFIG_DIR or CLAUDE_SECURESTORAGE_CONFIG_DIR moves Claude Code's files. */
+ | 'custom_folder'
+/** The tool's credentials file exists but could not be read or parsed. */
+ | 'file_unreadable'
+/** Cursor's settings database could not be read. */
+ | 'database_unreadable'
+/** Cursor runs on another computer and opens this one remotely; its store is there. */
+ | 'remote'
+/** The tool's own settings are not on this computer. */
+ | 'not_on_this_computer';
+export interface StoredAuthorization {
+    state: StoredState;
+    /** When the stored access token expires or expired; null when unknown or unreadable. */
+    expiresAt: string | null;
+    /** Present when `state` is `unreadable`. */
+    reason?: UnreadableReason;
+}
+export declare const object: (value: unknown) => value is Record<string, unknown>;
+/** A non-empty string after trimming, the test each tool applies to a token field. */
+export declare const present: (value: unknown) => boolean;
+/** JSON text as an object, or undefined; the parse error is dropped because it can quote the input. */
+export declare function parseObject(text: string): Record<string, unknown> | undefined;
+export declare const unreadable: (reason: UnreadableReason) => StoredAuthorization;
+//# sourceMappingURL=storedAuthorization.d.ts.map

package/dist/auth/storedAuthorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storedAuthorization.d.ts","sourceRoot":"","sources":["../../src/auth/storedAuthorization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,WAAW,GAAG,SAAS,GAAG,YAAY,CAAC;AAEhF,6DAA6D;AAC7D,MAAM,MAAM,gBAAgB;AAC1B,2FAA2F;AACzF,iBAAiB;AACnB,iEAAiE;GAC/D,qBAAqB;AACvB,mGAAmG;GACjG,oBAAoB;AACtB,uFAAuF;GACrF,gBAAgB;AAClB,2EAA2E;GACzE,gBAAgB;AAClB,sFAAsF;GACpF,eAAe;AACjB,0EAA0E;GACxE,iBAAiB;AACnB,oDAAoD;GAClD,qBAAqB;AACvB,uFAAuF;GACrF,QAAQ;AACV,wDAAwD;GACtD,sBAAsB,CAAC;AAE3B,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,WAAW,CAAC;IACnB,wFAAwF;IACxF,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,gBAAgB,CAAC;CAC3B;AAED,eAAO,MAAM,MAAM,UAAW,OAAO,KAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CACR,CAAC;AAEhE,sFAAsF;AACtF,eAAO,MAAM,OAAO,UAAW,OAAO,KAAG,OACa,CAAC;AAEvD,uGAAuG;AACvG,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAO7E;AAED,eAAO,MAAM,UAAU,WAAY,gBAAgB,KAAG,mBAIpD,CAAC"}

package/dist/auth/storedAuthorization.js

@@ -0,0 +1,24 @@
+import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
+
+// packages/cli/src/auth/storedAuthorization.ts
+var object = (value) => !!value && typeof value === "object" && !Array.isArray(value);
+var present = (value) => typeof value === "string" && value.trim().length > 0;
+function parseObject(text) {
+  try {
+    const value = JSON.parse(text);
+    return object(value) ? value : void 0;
+  } catch {
+    return void 0;
+  }
+}
+var unreadable = (reason) => ({
+  state: "unreadable",
+  expiresAt: null,
+  reason
+});
+export {
+  object,
+  parseObject,
+  present,
+  unreadable
+};

package/dist/auth/storedAuthorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storedAuthorization.js","sourceRoot":"","sources":["../../src/auth/storedAuthorization.ts"],"names":[],"mappings":"AA8CA,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAc,EAAoC,EAAE,CACzE,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEhE,sFAAsF;AACtF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,KAAc,EAAW,EAAE,CACjD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAEvD,uGAAuG;AACvG,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAwB,EAAuB,EAAE,CAAC,CAAC;IAC5E,KAAK,EAAE,YAAY;IACnB,SAAS,EAAE,IAAI;IACf,MAAM;CACP,CAAC,CAAC"}

package/dist/authorizationWords.d.ts

@@ -0,0 +1,69 @@
+import type { McpAuthorization } from './auth/status.js';
+import type { StoredAuthorization, UnreadableReason } from './auth/storedAuthorization.js';
+/**
+ * The words for each separately authorized part of Mnemonik on a computer, so
+ * `status`, `connect` and `auth status` name the same part the same way:
+ *
+ * - "<Tool> MCP": the MCP connection inside the coding tool, authorized in the
+ *   tool itself (Claude Code: /mcp; Codex: codex mcp login; Cursor: Settings, MCPs).
+ * - "<Tool> hooks": the hooks the installer set up, with an authorization of their own.
+ * - "Scanner": background indexing, with an authorization of its own.
+ * - "CLI": the mnemonik command's own sign-in.
+ *
+ * Each line says the state, and when something was not checked, what was not
+ * and why, in words a person can act on.
+ */
+/** How the person authorizes a tool's MCP connection: the step inside the tool, or the command. */
+export declare function authorizeStep(host: string): string;
+/** Why a tool's own store could not be read, said after "because". */
+export declare function unreadableBecause(tool: string, reason: UnreadableReason | undefined): string;
+/**
+ * What a tool's own store on this computer adds to the server's record, as
+ * whole sentences: nothing when it holds a usable authorization, or keeps
+ * nothing Mnemonik reads.
+ */
+export declare function storeNote(tool: string, stored: StoredAuthorization | undefined): string;
+/**
+ * One coding tool's MCP authorization, as the line `status` and `connect`
+ * print. A tool never authorized here carries its step unless `step` is false
+ * (connect prints the steps below it); one whose authorization ended has its
+ * step in the installation's attention lines.
+ */
+export declare function mcpLine(tool: string, host: string, mcp: McpAuthorization, step?: boolean): string;
+/** The reason of the installation's attention line for a tool whose MCP authorization ended. */
+export declare const mcpNotAuthorizedReason: (tool: string) => string;
+/**
+ * The hooks' authorization on this computer: their own credential stored here
+ * (not expired), their declaration in the tool's settings, and for Codex its
+ * trust in them. The server's record of it is not asked.
+ */
+export type HooksState = 'authorized' | 'trust_pending' | 'not_authorized' | 'not_installed' | 'unchecked';
+/** The reason of the installation's attention line for hooks whose own authorization is gone. */
+export declare const hooksNotAuthorizedReason: (tool: string) => string;
+/**
+ * One coding tool's hooks, as the line `status` prints. `stepped`: the
+ * installation's attention lines already give the step, so the line says only
+ * what is wrong.
+ */
+export declare function hooksLine(tool: string, state: HooksState, stepped: boolean): string;
+/**
+ * Background indexing's own authorization: its credential stored here (not
+ * expired) and no refusal reported by the running scanner.
+ */
+export type ScannerAuthorizationState = 'authorized' | 'refused' | 'not_authorized' | 'unchecked' | 'not_set_up';
+export declare function scannerLine(state: ScannerAuthorizationState, stepped: boolean): string;
+/** The CLI's own sign-in on this computer. */
+export type CliSignIn = {
+    state: 'signed_in';
+    email: string | null;
+} | {
+    state: 'unconfirmed';
+} | {
+    state: 'not_signed_in';
+} | {
+    state: 'signed_out';
+} | {
+    state: 'locked';
+};
+export declare function cliLine(cli: CliSignIn): string;
+//# sourceMappingURL=authorizationWords.d.ts.map

package/dist/authorizationWords.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizationWords.d.ts","sourceRoot":"","sources":["../src/authorizationWords.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAiB,MAAM,kBAAkB,CAAC;AACxE,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAE3F;;;;;;;;;;;;GAYG;AAEH,mGAAmG;AACnG,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGlD;AAMD,sEAAsE;AACtE,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,SAAS,GAAG,MAAM,CAsB5F;AAWD;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,SAAS,GAAG,MAAM,CAQvF;AAED;;;;;GAKG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,UAAO,GAAG,MAAM,CAiC9F;AAED,gGAAgG;AAChG,eAAO,MAAM,sBAAsB,SAAU,MAAM,WACA,CAAC;AAEpD;;;;GAIG;AACH,MAAM,MAAM,UAAU,GACpB,YAAY,GAAG,eAAe,GAAG,gBAAgB,GAAG,eAAe,GAAG,WAAW,CAAC;AAEpF,iGAAiG;AACjG,eAAO,MAAM,wBAAwB,SAAU,MAAM,WACC,CAAC;AAEvD;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAcnF;AAED;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GACnC,YAAY,GAAG,SAAS,GAAG,gBAAgB,GAAG,WAAW,GAAG,YAAY,CAAC;AAE3E,wBAAgB,WAAW,CAAC,KAAK,EAAE,yBAAyB,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CActF;AAED,8CAA8C;AAC9C,MAAM,MAAM,SAAS,GACjB;IAAE,KAAK,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAC5C;IAAE,KAAK,EAAE,aAAa,CAAA;CAAE,GACxB;IAAE,KAAK,EAAE,eAAe,CAAA;CAAE,GAC1B;IAAE,KAAK,EAAE,YAAY,CAAA;CAAE,GACvB;IAAE,KAAK,EAAE,QAAQ,CAAA;CAAE,CAAC;AAExB,wBAAgB,OAAO,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAa9C"}