@openacp/cli 2026.414.1 → 2026.414.2

package/dist/index.d.ts

@@ -3820,6 +3820,13 @@ interface StoredToken {
     revoked: boolean;
     /** User ID from identity system. Null until user completes /identity/setup. */
     userId?: string;
+    /**
+     * Per-token secret for identity re-linking on reconnect.
+     * Never embedded in the JWT — only returned at token creation/exchange time.
+     * The App stores this in its workspace store and uses it to silently re-link
+     * a new token to the same user after the old token's refresh deadline expires.
+     */
+    identitySecret: string;
 }
 interface CreateTokenOpts {
     role: string;
@@ -3900,6 +3907,14 @@ declare class TokenStore {
     setUserId(tokenId: string, userId: string): void;
     /** Get the user ID associated with a token. */
     getUserId(tokenId: string): string | undefined;
+    /**
+     * Looks up a non-revoked token by its identity secret.
+     *
+     * Used by the identity re-link flow: the App sends the old token's identitySecret
+     * to prove continuity of identity when reconnecting with a new JWT.
+     * Returns undefined if no match, or if the matching token is revoked.
+     */
+    getByIdentitySecret(secret: string): StoredToken | undefined;
     /**
      * Generates a one-time authorization code that can be exchanged for a JWT.
      *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openacp/cli",
-  "version": "2026.414.1",
+  "version": "2026.414.2",
   "description": "Self-hosted bridge for AI coding agents via ACP protocol",
   "type": "module",
   "bin": {