@mnemonik/cli 7.131.1 → 7.133.0

package/dist/auth/claudeCodeSignIn.d.ts

@@ -1,39 +1,30 @@
+import { type StoredAuthorization } from './storedAuthorization.js';
 /**
  * What Claude Code itself holds for Mnemonik's MCP server on this computer.
  *
- * On 2026-10-12 a network outage emptied Claude Code's stored Mnemonik sign-in
- * while the server still held a valid grant, and status said signed in. The
- * server's grant says a sign-in exists; only Claude Code's own store says
- * whether Claude Code can use it. Read the way Claude Code 2.1.296 reads it:
+ * On 2026-10-12 a network outage emptied Claude Code's stored Mnemonik
+ * authorization while the server still held a valid grant, and status said
+ * signed in. The server's grant says an authorization exists; only Claude
+ * Code's own store says whether Claude Code can use it. Read the way Claude
+ * Code 2.1.296 reads it:
  *
  * - The entry is `mcpOAuth["mnemonik|" + sha256(JSON.stringify({type, url,
- *   headers}))[0..16]]`, keyed by the declaration in ~/.claude.json, so a sign-in
- *   stored for an older declaration (other headers) is not this one's.
+ *   headers}))[0..16]]`, keyed by the declaration in ~/.claude.json, so an
+ *   authorization stored for an older declaration (other headers) is not this one's.
  * - Linux and Windows keep the document in ~/.claude/.credentials.json; a
  *   missing file means Claude Code holds nothing.
  * - macOS keeps it in the login Keychain, generic password service
  *   `Claude Code-credentials`, account $USER, written and read with
  *   /usr/bin/security; the file is read only when that item does not exist.
+ *   Over SSH the Keychain is locked and `security` exits 36
+ *   (errSecInteractionNotAllowed); that is said as such, never as "missing".
  * - Windows uses Credential Manager instead when CLAUDE_CODE_FORCE_WINDOWS_CREDMAN
  *   is 1 or ~/.claude.json caches `tengu_windows_credman: true`; that store is
  *   not read here.
  *
- * Only key names, presence and `expiresAt` are looked at. Token values are never
- * returned, printed or logged, and a parse error (whose message can quote the
- * input) is never passed on.
+ * Only key names, presence and `expiresAt` are looked at (storedAuthorization.ts).
  */
-export type StoredSignInState = 'signed_in' | 'refreshable' | 'missing' | 'unreadable';
-export interface StoredSignIn {
-    /**
-     * `signed_in`: an access token that has not expired. `refreshable`: the access
-     * token has expired or is gone, and a refresh token renews it the next time
-     * Claude Code connects. `missing`: nothing Claude Code can use; it shows
-     * mnemonik as needing authentication. `unreadable`: it could not be read.
-     */
-    state: StoredSignInState;
-    /** When the stored access token expires or expired; null when unknown. */
-    expiresAt: string | null;
-}
+export type { StoredAuthorization } from './storedAuthorization.js';
 export declare const CLAUDE_CODE_KEYCHAIN_SERVICE = "Claude Code-credentials";
 export type KeychainRead = (service: string, account: string) => Promise<{
     code: number | null;
@@ -54,10 +45,10 @@ export declare function claudeCodeCredentialKey(name: string, declaration: {
     headers?: unknown;
 }): string;
 /** One stored entry, judged as Claude Code judges it when it connects. */
-export declare function storedSignInState(entry: unknown, now: number): StoredSignIn;
+export declare function claudeCodeEntryState(entry: unknown, now: number): StoredAuthorization;
 /**
- * Claude Code's stored Mnemonik sign-in on this computer, or undefined when
- * Claude Code has no Mnemonik HTTP declaration that signs in with OAuth here.
+ * Claude Code's stored Mnemonik authorization on this computer, or undefined
+ * when Claude Code has no Mnemonik HTTP declaration that authorizes with OAuth here.
  */
-export declare function claudeCodeStoredSignIn(options: ClaudeCodeStoreOptions): Promise<StoredSignIn | undefined>;
+export declare function claudeCodeStoredAuthorization(options: ClaudeCodeStoreOptions): Promise<StoredAuthorization | undefined>;
 //# sourceMappingURL=claudeCodeSignIn.d.ts.map

package/dist/auth/claudeCodeSignIn.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claudeCodeSignIn.d.ts","sourceRoot":"","sources":["../../src/auth/claudeCodeSignIn.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,aAAa,GAAG,SAAS,GAAG,YAAY,CAAC;AACvF,MAAM,WAAW,YAAY;IAC3B;;;;;OAKG;IACH,KAAK,EAAE,iBAAiB,CAAC;IACzB,0EAA0E;IAC1E,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAID,eAAO,MAAM,4BAA4B,4BAA4B,CAAC;AAEtE,MAAM,MAAM,YAAY,GAAG,CACzB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,KACZ,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEtD,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,YAAY,CAAC;CACzB;AAwED,gFAAgF;AAChF,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAC5D,MAAM,CAMR;AAED,0EAA0E;AAC1E,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,YAAY,CAY3E;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAwCnC"}
+{"version":3,"file":"claudeCodeSignIn.d.ts","sourceRoot":"","sources":["../../src/auth/claudeCodeSignIn.ts"],"names":[],"mappings":"AAKA,OAAO,EAIL,KAAK,mBAAmB,EACzB,MAAM,0BAA0B,CAAC;AAElC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,YAAY,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAMpE,eAAO,MAAM,4BAA4B,4BAA4B,CAAC;AAEtE,MAAM,MAAM,YAAY,GAAG,CACzB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,KACZ,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEtD,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,YAAY,CAAC;CACzB;AAqED,gFAAgF;AAChF,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAC5D,MAAM,CAMR;AAKD,0EAA0E;AAC1E,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,mBAAmB,CAYrF;AAED;;;GAGG;AACH,wBAAsB,6BAA6B,CACjD,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAwC1C"}

package/dist/auth/claudeCodeSignIn.js

@@ -6,10 +6,14 @@ import { createHash } from "node:crypto";
 import { readFile } from "node:fs/promises";
 import { userInfo } from "node:os";
 import { join } from "node:path";
+import {
+  object,
+  parseObject as parse,
+  unreadable
+} from "./storedAuthorization.js";
 var KEYCHAIN_ITEM_NOT_FOUND = 44;
+var KEYCHAIN_LOCKED = 36;
 var CLAUDE_CODE_KEYCHAIN_SERVICE = "Claude Code-credentials";
-var object = (value) => !!value && typeof value === "object" && !Array.isArray(value);
-var present = (value) => typeof value === "string" && value.length > 0;
 var readKeychain = (service, account) => new Promise((resolve) => {
   execFile(
     "/usr/bin/security",
@@ -29,47 +33,45 @@ function keychainAccount(env) {
   }
   return name && /^[a-zA-Z0-9._-]+$/u.test(name) ? name : "claude-code-user";
 }
-function parse(text) {
-  try {
-    const value = JSON.parse(text);
-    return object(value) ? value : void 0;
-  } catch {
-    return void 0;
-  }
-}
 async function credentialDocument(options, config) {
   const { env, home, platform } = options;
+  const parsed = (text2, failure) => {
+    const document = parse(text2);
+    return document ? { document } : { unreadable: failure };
+  };
   if (platform === "darwin") {
     const item = await options.keychain(CLAUDE_CODE_KEYCHAIN_SERVICE, keychainAccount(env)).catch(() => void 0);
-    if (!item) return void 0;
-    if (item.code === 0) return parse(item.stdout.trim());
-    if (item.code !== KEYCHAIN_ITEM_NOT_FOUND) return void 0;
+    if (item?.code === 0) return parsed(item.stdout.trim(), unreadable("keychain_unreadable"));
+    if (item?.code === KEYCHAIN_LOCKED) return { unreadable: unreadable("keychain_locked") };
+    if (item?.code !== KEYCHAIN_ITEM_NOT_FOUND)
+      return { unreadable: unreadable("keychain_unreadable") };
   }
   if (platform === "win32" && (env.CLAUDE_CODE_FORCE_WINDOWS_CREDMAN === "1" || object(config.cachedGrowthBookFeatures) && config.cachedGrowthBookFeatures.tengu_windows_credman === true))
-    return void 0;
+    return { unreadable: unreadable("credential_manager") };
   let text;
   try {
     text = await readFile(join(home, ".claude", ".credentials.json"), "utf8");
   } catch (error) {
-    return error.code === "ENOENT" ? null : void 0;
+    return error.code === "ENOENT" ? { document: null } : { unreadable: unreadable("file_unreadable") };
   }
-  return parse(text);
+  return parsed(text, unreadable("file_unreadable"));
 }
 function claudeCodeCredentialKey(name, declaration) {
   const type = declaration.type === "streamable-http" ? "http" : declaration.type;
   const digest = createHash("sha256").update(JSON.stringify({ type, url: declaration.url, headers: declaration.headers || {} })).digest("hex");
   return `${name}|${digest.slice(0, 16)}`;
 }
-function storedSignInState(entry, now) {
-  if (!object(entry) || !present(entry.accessToken) && !present(entry.refreshToken))
+var token = (value) => typeof value === "string" && value.length > 0;
+function claudeCodeEntryState(entry, now) {
+  if (!object(entry) || !token(entry.accessToken) && !token(entry.refreshToken))
     return { state: "missing", expiresAt: null };
   const expires = typeof entry.expiresAt === "number" && Number.isFinite(entry.expiresAt) ? entry.expiresAt : void 0;
   const expiresAt = expires === void 0 ? null : new Date(expires).toISOString();
-  if (present(entry.accessToken) && (expires === void 0 || expires > now))
-    return { state: "signed_in", expiresAt };
-  return { state: present(entry.refreshToken) ? "refreshable" : "missing", expiresAt };
+  if (token(entry.accessToken) && (expires === void 0 || expires > now))
+    return { state: "authorized", expiresAt };
+  return { state: token(entry.refreshToken) ? "renewable" : "missing", expiresAt };
 }
-async function claudeCodeStoredSignIn(options) {
+async function claudeCodeStoredAuthorization(options) {
   const env = options.env ?? process.env;
   const raw = await readFile(join(options.home, ".claude.json"), "utf8").catch(() => void 0);
   const config = raw === void 0 ? void 0 : parse(raw);
@@ -78,8 +80,8 @@ async function claudeCodeStoredSignIn(options) {
     return void 0;
   if (declaration.headersHelper !== void 0 || object(declaration.headers) && Object.keys(declaration.headers).some((name) => name.toLowerCase() === "authorization"))
     return void 0;
-  const unreadable = { state: "unreadable", expiresAt: null };
-  if (env.CLAUDE_CONFIG_DIR || env.CLAUDE_SECURESTORAGE_CONFIG_DIR !== void 0) return unreadable;
+  if (env.CLAUDE_CONFIG_DIR || env.CLAUDE_SECURESTORAGE_CONFIG_DIR !== void 0)
+    return unreadable("custom_folder");
   const document = await credentialDocument(
     {
       home: options.home,
@@ -89,18 +91,18 @@ async function claudeCodeStoredSignIn(options) {
     },
     config
   );
-  if (document === void 0) return unreadable;
-  const entries = object(document?.mcpOAuth) ? document.mcpOAuth : {};
+  if ("unreadable" in document) return document.unreadable;
+  const entries = object(document.document?.mcpOAuth) ? document.document.mcpOAuth : {};
   const key = claudeCodeCredentialKey("mnemonik", {
     type: declaration.type,
     url: declaration.url,
     headers: declaration.headers
   });
-  return storedSignInState(entries[key], (options.now ?? Date.now)());
+  return claudeCodeEntryState(entries[key], (options.now ?? Date.now)());
 }
 export {
   CLAUDE_CODE_KEYCHAIN_SERVICE,
   claudeCodeCredentialKey,
-  claudeCodeStoredSignIn,
-  storedSignInState
+  claudeCodeEntryState,
+  claudeCodeStoredAuthorization
 };

package/dist/auth/claudeCodeSignIn.js.map

@@ -1 +1 @@
-{"version":3,"file":"claudeCodeSignIn.js","sourceRoot":"","sources":["../../src/auth/claudeCodeSignIn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAuCjC,kFAAkF;AAClF,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,MAAM,CAAC,MAAM,4BAA4B,GAAG,yBAAyB,CAAC;AAgBtE,MAAM,MAAM,GAAG,CAAC,KAAc,EAAoC,EAAE,CAClE,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAChE,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AAElF,MAAM,YAAY,GAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CACtD,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;IACtB,QAAQ,CACN,mBAAmB,EACnB,CAAC,uBAAuB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,EAC7D,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,EAC9E,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAChB,OAAO,CACL,KAAK;QACH,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QAC1E,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CACxB,CACJ,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,yFAAyF;AACzF,SAAS,eAAe,CAAC,GAAsB;IAC7C,IAAI,IAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC,QAAQ,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC;AAC7E,CAAC;AAED,SAAS,KAAK,CAAC,IAAY;IACzB,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,KAAK,UAAU,kBAAkB,CAC/B,OAAsD,EACtD,MAA+B;IAE/B,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACxC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,OAAO;aACvB,QAAQ,CAAC,4BAA4B,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC;aAC5D,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,qEAAqE;QACrE,IAAI,IAAI,CAAC,IAAI,KAAK,uBAAuB;YAAE,OAAO,SAAS,CAAC;IAC9D,CAAC;IACD,IACE,QAAQ,KAAK,OAAO;QACpB,CAAC,GAAG,CAAC,iCAAiC,KAAK,GAAG;YAC5C,CAAC,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC;gBACtC,MAAM,CAAC,wBAAwB,CAAC,qBAAqB,KAAK,IAAI,CAAC,CAAC;QAEpE,OAAO,SAAS,CAAC;IACnB,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,uBAAuB,CACrC,IAAY,EACZ,WAA6D;IAE7D,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC;IAChF,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;SAChC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;SAC1F,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,GAAG,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAE,GAAW;IAC3D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACjF,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC/C,MAAM,OAAO,GACX,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;QACrE,CAAC,CAAC,KAAK,CAAC,SAAS;QACjB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,SAAS,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IACjF,IAAI,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,GAAG,GAAG,CAAC;QACxE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;IAC3C,uFAAuF;IACvF,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC;AACvF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAA+B;IAE/B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC9F,MAAM,MAAM,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,IACE,CAAC,MAAM;QACP,CAAC,MAAM,CAAC,WAAW,CAAC;QACpB,OAAO,WAAW,CAAC,GAAG,KAAK,QAAQ;QACnC,OAAO,WAAW,CAAC,IAAI,KAAK,QAAQ;QACpC,CAAC,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC;QAE9D,OAAO,SAAS,CAAC;IACnB,qFAAqF;IACrF,IACE,WAAW,CAAC,aAAa,KAAK,SAAS;QACvC,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC,CAAC;QAE1F,OAAO,SAAS,CAAC;IACnB,MAAM,UAAU,GAAiB,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC1E,4EAA4E;IAC5E,IAAI,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,+BAA+B,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAClG,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CACvC;QACE,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG;QACH,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;QAC9C,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,YAAY;KAC3C,EACD,MAAM,CACP,CAAC;IACF,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,MAAM,GAAG,GAAG,uBAAuB,CAAC,UAAU,EAAE;QAC9C,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,GAAG,EAAE,WAAW,CAAC,GAAG;QACpB,OAAO,EAAE,WAAW,CAAC,OAAO;KAC7B,CAAC,CAAC;IACH,OAAO,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACtE,CAAC"}
+{"version":3,"file":"claudeCodeSignIn.js","sourceRoot":"","sources":["../../src/auth/claudeCodeSignIn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,MAAM,EACN,WAAW,IAAI,KAAK,EACpB,UAAU,GAEX,MAAM,0BAA0B,CAAC;AA6BlC,uGAAuG;AACvG,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,wGAAwG;AACxG,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,CAAC,MAAM,4BAA4B,GAAG,yBAAyB,CAAC;AAgBtE,MAAM,YAAY,GAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CACtD,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;IACtB,QAAQ,CACN,mBAAmB,EACnB,CAAC,uBAAuB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,EAC7D,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,EAC9E,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAChB,OAAO,CACL,KAAK;QACH,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QAC1E,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CACxB,CACJ,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,yFAAyF;AACzF,SAAS,eAAe,CAAC,GAAsB;IAC7C,IAAI,IAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC,QAAQ,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC;AAC7E,CAAC;AAKD,+FAA+F;AAC/F,KAAK,UAAU,kBAAkB,CAC/B,OAAsD,EACtD,MAA+B;IAE/B,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACxC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,OAA4B,EAAsB,EAAE;QAChF,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IAC3D,CAAC,CAAC;IACF,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,OAAO;aACvB,QAAQ,CAAC,4BAA4B,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC;aAC5D,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1B,IAAI,IAAI,EAAE,IAAI,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,UAAU,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC3F,qEAAqE;QACrE,IAAI,IAAI,EAAE,IAAI,KAAK,eAAe;YAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACzF,IAAI,IAAI,EAAE,IAAI,KAAK,uBAAuB;YACxC,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;IAC7D,CAAC;IACD,IACE,QAAQ,KAAK,OAAO;QACpB,CAAC,GAAG,CAAC,iCAAiC,KAAK,GAAG;YAC5C,CAAC,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC;gBACtC,MAAM,CAAC,wBAAwB,CAAC,qBAAqB,KAAK,IAAI,CAAC,CAAC;QAEpE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;IAC1D,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,QAAQ;YACvD,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;YACpB,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;IACpD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,uBAAuB,CACrC,IAAY,EACZ,WAA6D;IAE7D,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC;IAChF,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;SAChC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;SAC1F,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,GAAG,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED,oEAAoE;AACpE,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AAEhF,0EAA0E;AAC1E,MAAM,UAAU,oBAAoB,CAAC,KAAc,EAAE,GAAW;IAC9D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC7E,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC/C,MAAM,OAAO,GACX,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;QACrE,CAAC,CAAC,KAAK,CAAC,SAAS;QACjB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,SAAS,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IACjF,IAAI,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,GAAG,GAAG,CAAC;QACtE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;IAC5C,uFAAuF;IACvF,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC;AACnF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAA+B;IAE/B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC9F,MAAM,MAAM,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,IACE,CAAC,MAAM;QACP,CAAC,MAAM,CAAC,WAAW,CAAC;QACpB,OAAO,WAAW,CAAC,GAAG,KAAK,QAAQ;QACnC,OAAO,WAAW,CAAC,IAAI,KAAK,QAAQ;QACpC,CAAC,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC;QAE9D,OAAO,SAAS,CAAC;IACnB,yFAAyF;IACzF,IACE,WAAW,CAAC,aAAa,KAAK,SAAS;QACvC,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC,CAAC;QAE1F,OAAO,SAAS,CAAC;IACnB,4EAA4E;IAC5E,IAAI,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,+BAA+B,KAAK,SAAS;QAC5E,OAAO,UAAU,CAAC,eAAe,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CACvC;QACE,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG;QACH,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;QAC9C,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,YAAY;KAC3C,EACD,MAAM,CACP,CAAC;IACF,IAAI,YAAY,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,UAAU,CAAC;IACzD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,MAAM,GAAG,GAAG,uBAAuB,CAAC,UAAU,EAAE;QAC9C,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,GAAG,EAAE,WAAW,CAAC,GAAG;QACpB,OAAO,EAAE,WAAW,CAAC,OAAO;KAC7B,CAAC,CAAC;IACH,OAAO,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACzE,CAAC"}

package/dist/auth/codexAuthorization.d.ts

@@ -0,0 +1,47 @@
+import { type StoredAuthorization } from './storedAuthorization.js';
+/**
+ * What Codex itself holds for Mnemonik's MCP server on this computer.
+ *
+ * Until 2026-10-13 Codex's authorization came from the server's record alone,
+ * so the false "authorized" seen for Claude Code on 2026-10-12 could happen for
+ * Codex too. Read the way Codex 0.162.1 reads it (codex-rs/rmcp-client/src/oauth.rs,
+ * resolved_store.rs; codex-rs/config/src/types.rs):
+ *
+ * - Where: `mcp_oauth_credentials_store` at the top of $CODEX_HOME/config.toml
+ *   (CODEX_HOME defaults to ~/.codex): `auto` (the default) tries the
+ *   operating system's keyring first and falls back to the file; `file` uses
+ *   $CODEX_HOME/.credentials.json only; `keyring` uses the keyring only. The
+ *   keyring (macOS Keychain, Windows Credential Manager, the Secret Service on
+ *   Linux) is never read here: that store is said to be unchecked.
+ * - The file is a JSON object of entries keyed `mnemonik|` and the first 16
+ *   hex characters of the SHA-256 of `{"type":"http","url":<url>,"headers":{}}`
+ *   (codexCredentialKey; headers are always empty in the key, whatever the
+ *   declaration sends). For a plain server name Codex finds the entry by its
+ *   `server_name` and `server_url`, in key order, skipping executor-owned ones.
+ * - `auto` with an entry in the file: Codex wrote it there because its keyring
+ *   failed, and it removes the file entry whenever a keyring save succeeds, so
+ *   the file entry is the one it uses. `auto` with nothing in the file: on macOS
+ *   and Windows the keyring holds it (unchecked); on Linux it can only be in a
+ *   Secret Service keyring, so when this user has none, Codex holds nothing.
+ * - Usable as Codex judges it (oauth_tokens_are_usable): a client id; then an
+ *   access token that does not expire within 30 seconds, or else a refresh
+ *   token together with the issuer it is bound to.
+ *
+ * Only key names, presence and `expires_at` are looked at.
+ */
+export interface CodexStoreOptions {
+    home: string;
+    platform?: NodeJS.Platform;
+    env?: NodeJS.ProcessEnv;
+    now?: () => number;
+}
+/** Codex's key for a server's stored authorization (compute_store_key). */
+export declare function codexCredentialKey(name: string, url: string): string;
+/** One file entry, judged as Codex judges it when it connects. */
+export declare function codexEntryState(entry: Record<string, unknown>, now: number): StoredAuthorization;
+/**
+ * Codex's stored Mnemonik authorization on this computer, or undefined when
+ * Codex has no Mnemonik HTTP declaration that authorizes with OAuth here.
+ */
+export declare function codexStoredAuthorization(options: CodexStoreOptions): Promise<StoredAuthorization | undefined>;
+//# sourceMappingURL=codexAuthorization.d.ts.map

package/dist/auth/codexAuthorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexAuthorization.d.ts","sourceRoot":"","sources":["../../src/auth/codexAuthorization.ts"],"names":[],"mappings":"AAIA,OAAO,EAKL,KAAK,mBAAmB,EACzB,MAAM,0BAA0B,CAAC;AAElC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAKD,2EAA2E;AAC3E,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAKpE;AAED,kEAAkE;AAClE,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,mBAAmB,CAahG;AAgBD;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAyD1C"}