@mulmoclaude/core 0.21.0 → 0.22.1

package/dist/google/tokenStore.d.ts

@@ -1,5 +1,13 @@
 import { Credentials } from 'google-auth-library';
-export declare function mergeGoogleTokens(existing: Credentials | null, incoming: Credentials): Credentials;
-export declare function loadGoogleTokens(home?: string): Promise<Credentials | null>;
-export declare function saveGoogleTokens(incoming: Credentials, home?: string): Promise<Credentials>;
+/** Which client minted the grant: `local` = the user's own client JSON in
+ *  `~/.secrets/`, `broker` = the mulmoserver broker. Renewal must use the same
+ *  path, since only that client's secret can refresh its tokens. Absent on
+ *  tokens written before the broker existed — those are all `local`. */
+export type IssuedVia = "local" | "broker";
+export interface StoredGoogleTokens extends Credentials {
+    issuedVia?: IssuedVia;
+}
+export declare function mergeGoogleTokens(existing: StoredGoogleTokens | null, incoming: StoredGoogleTokens): StoredGoogleTokens;
+export declare function loadGoogleTokens(home?: string): Promise<StoredGoogleTokens | null>;
+export declare function saveGoogleTokens(incoming: StoredGoogleTokens, home?: string): Promise<StoredGoogleTokens>;
 export declare function deleteGoogleTokens(home?: string): Promise<void>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mulmoclaude/core",
-  "version": "0.21.0",
+  "version": "0.22.1",
   "description": "Shared server-side core for MulmoClaude and MulmoTerminal — the always-shipped-together subsystems consolidated behind subpath exports so the two hosts can't drift. Server-only except the browser-safe ./whisper/client, ./workspace-setup/slug, ./translation/client, ./remote-view and ./remote-host entries. All host specifics are injected.",
   "type": "module",
   "exports": {