@rynfar/meridian 1.40.0 → 1.41.0

package/dist/{cli-m9pfb7h9.js → cli-0eky480v.js}

@@ -1,7 +1,9 @@
 // src/proxy/tokenRefresh.ts
 import { execFile as execFileCb } from "child_process";
-import { existsSync, readFileSync, writeFileSync } from "fs";
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from "fs";
 import { homedir, platform, userInfo } from "os";
+import { join, dirname, resolve } from "path";
+import { createHash } from "crypto";
 import { promisify } from "util";
 
 // src/logger.ts
@@ -72,6 +74,17 @@ var OAUTH_TOKEN_URL = "https://platform.claude.com/v1/oauth/token";
 var OAUTH_CLIENT_ID = "9d1c250a-e61b-44d9-88ed-5944d1962f5e";
 var KEYCHAIN_SERVICE = "Claude Code-credentials";
 var CREDENTIALS_FILE = `${homedir()}/.claude/.credentials.json`;
+var DEFAULT_CLAUDE_DIR = `${homedir()}/.claude`;
+function configDirToKeychainService(claudeConfigDir) {
+  const abs = resolve(claudeConfigDir);
+  if (abs === resolve(DEFAULT_CLAUDE_DIR))
+    return KEYCHAIN_SERVICE;
+  const hash = createHash("sha256").update(abs).digest("hex").slice(0, 8);
+  return `${KEYCHAIN_SERVICE}-${hash}`;
+}
+function configDirToCredentialsFile(claudeConfigDir) {
+  return join(resolve(claudeConfigDir), ".credentials.json");
+}
 function parseKeychainValue(raw) {
   const trimmed = raw.trim();
   try {
@@ -83,57 +96,74 @@ function parseKeychainValue(raw) {
   } catch {}
   return null;
 }
-var keychainWasHex = false;
-var macosStore = {
-  async read() {
-    try {
-      const { stdout } = await execFile("/usr/bin/security", ["find-generic-password", "-s", KEYCHAIN_SERVICE, "-a", userInfo().username, "-w"], { timeout: 5000 });
-      const parsed = parseKeychainValue(stdout);
-      if (!parsed)
-        throw new Error("Could not parse keychain value as JSON or hex-encoded JSON");
-      keychainWasHex = parsed.wasHex;
-      return parsed.credentials;
-    } catch (err) {
-      claudeLog("token_refresh.keychain_read_failed", { error: String(err) });
-      return null;
-    }
-  },
-  async write(credentials) {
-    const json = JSON.stringify(credentials, null, 2);
-    const value = keychainWasHex ? Buffer.from(json).toString("hex") : json;
-    try {
-      await execFile("/usr/bin/security", ["add-generic-password", "-U", "-s", KEYCHAIN_SERVICE, "-a", userInfo().username, "-w", value], { timeout: 5000 });
-      return true;
-    } catch (err) {
-      claudeLog("token_refresh.keychain_write_failed", { error: String(err) });
-      return false;
+var keychainWasHexByService = new Map;
+function buildMacosStore(serviceName) {
+  return {
+    async read() {
+      try {
+        const { stdout } = await execFile("/usr/bin/security", ["find-generic-password", "-s", serviceName, "-a", userInfo().username, "-w"], { timeout: 5000 });
+        const parsed = parseKeychainValue(stdout);
+        if (!parsed)
+          throw new Error("Could not parse keychain value as JSON or hex-encoded JSON");
+        keychainWasHexByService.set(serviceName, parsed.wasHex);
+        return parsed.credentials;
+      } catch (err) {
+        claudeLog("token_refresh.keychain_read_failed", { service: serviceName, error: String(err) });
+        return null;
+      }
+    },
+    async write(credentials) {
+      const json = JSON.stringify(credentials, null, 2);
+      const wasHex = keychainWasHexByService.get(serviceName) ?? false;
+      const value = wasHex ? Buffer.from(json).toString("hex") : json;
+      try {
+        await execFile("/usr/bin/security", ["add-generic-password", "-U", "-s", serviceName, "-a", userInfo().username, "-w", value], { timeout: 5000 });
+        return true;
+      } catch (err) {
+        claudeLog("token_refresh.keychain_write_failed", { service: serviceName, error: String(err) });
+        return false;
+      }
     }
-  }
-};
-var fileStore = {
-  async read() {
-    try {
-      if (!existsSync(CREDENTIALS_FILE))
+  };
+}
+var macosStore = buildMacosStore(KEYCHAIN_SERVICE);
+function buildFileStore(filePath) {
+  return {
+    async read() {
+      try {
+        if (!existsSync(filePath))
+          return null;
+        return JSON.parse(readFileSync(filePath, "utf-8"));
+      } catch (err) {
+        claudeLog("token_refresh.file_read_failed", { path: filePath, error: String(err) });
         return null;
-      return JSON.parse(readFileSync(CREDENTIALS_FILE, "utf-8"));
-    } catch (err) {
-      claudeLog("token_refresh.file_read_failed", { error: String(err) });
-      return null;
+      }
+    },
+    async write(credentials) {
+      try {
+        mkdirSync(dirname(filePath), { recursive: true });
+        writeFileSync(filePath, JSON.stringify(credentials, null, 2), "utf-8");
+        return true;
+      } catch (err) {
+        claudeLog("token_refresh.file_write_failed", { path: filePath, error: String(err) });
+        return false;
+      }
     }
-  },
-  async write(credentials) {
-    try {
-      writeFileSync(CREDENTIALS_FILE, JSON.stringify(credentials, null, 2), "utf-8");
-      return true;
-    } catch (err) {
-      claudeLog("token_refresh.file_write_failed", { error: String(err) });
-      return false;
+  };
+}
+var fileStore = buildFileStore(CREDENTIALS_FILE);
+function createPlatformCredentialStore(opts) {
+  if (opts?.claudeConfigDir) {
+    if (platform() === "darwin") {
+      return buildMacosStore(configDirToKeychainService(opts.claudeConfigDir));
     }
+    return buildFileStore(configDirToCredentialsFile(opts.claudeConfigDir));
   }
-};
-function createPlatformCredentialStore() {
   return platform() === "darwin" ? macosStore : fileStore;
 }
+function credentialsFilePathForProfile(claudeConfigDir) {
+  return claudeConfigDir ? configDirToCredentialsFile(claudeConfigDir) : CREDENTIALS_FILE;
+}
 var inflightRefresh = null;
 async function refreshOAuthToken(store) {
   if (inflightRefresh)
@@ -200,4 +230,4 @@ function resetInflightRefresh() {
   inflightRefresh = null;
 }
 
-export { withClaudeLogContext, claudeLog, createPlatformCredentialStore, refreshOAuthToken, resetInflightRefresh };
+export { withClaudeLogContext, claudeLog, configDirToKeychainService, configDirToCredentialsFile, createPlatformCredentialStore, credentialsFilePathForProfile, refreshOAuthToken, resetInflightRefresh };