axauth 2.0.0 → 2.1.0

package/dist/auth/is-token-expired.d.ts

@@ -1,5 +1,11 @@
 /**
- * Token and credential expiry check utilities.
+ * Token and credential expiry/refresh utilities.
+ *
+ * Provides field detection for common OAuth credential formats:
+ * - Google OAuth: expiry_date (ms), refresh_token
+ * - Generic OAuth: expires_at (s or ms), refresh_token
+ * - OpenCode: expires (ms), refresh
+ * - Claude: expiresAt (ms), refreshToken (camelCase)
  */
 /**
  * Check if a JWT token is expired.
@@ -23,4 +29,48 @@ declare function isTokenExpired(token: string, bufferSeconds?: number): boolean
  * @returns true if expired, false if valid, undefined if no expiry field found
  */
 declare function isCredentialExpired(data: Record<string, unknown>, bufferSeconds?: number): boolean | undefined;
-export { isCredentialExpired, isTokenExpired };
+/**
+ * Extract expiry timestamp in milliseconds from credential data.
+ *
+ * Checks common expiry field names in order of preference:
+ * - `expiry_date`: Google OAuth (milliseconds)
+ * - `expires_at`: Generic OAuth (seconds or milliseconds, auto-detected)
+ * - `expiresAt`: Claude (seconds or milliseconds, auto-detected)
+ * - `expires`: OpenCode (seconds or milliseconds, auto-detected)
+ */
+declare function extractExpiryTimestamp(data: Record<string, unknown>): number | undefined;
+/**
+ * Extract expiry date from credential data.
+ *
+ * Convenience wrapper around {@link extractExpiryTimestamp} that returns
+ * a Date object instead of milliseconds.
+ *
+ * @param data - The credential data object
+ * @returns Date if expiry field found, undefined otherwise
+ */
+declare function extractExpiryDate(data: Record<string, unknown>): Date | undefined;
+/**
+ * Credential data containing a refresh token.
+ *
+ * Union of all supported refresh token field naming conventions.
+ */
+type RefreshableCredentials = (Record<string, unknown> & {
+    refresh_token: string;
+}) | (Record<string, unknown> & {
+    refreshToken: string;
+}) | (Record<string, unknown> & {
+    refresh: string;
+});
+/**
+ * Check if credential data contains a refresh token.
+ *
+ * Supports multiple field naming conventions:
+ * - `refresh_token`: Standard OAuth / Google / Generic
+ * - `refreshToken`: Claude (camelCase)
+ * - `refresh`: OpenCode
+ *
+ * @param data - The credential data object (accepts unknown for safety)
+ * @returns true if a refresh token field exists with a string value
+ */
+declare function isRefreshable(data: unknown): data is RefreshableCredentials;
+export { extractExpiryDate, extractExpiryTimestamp, isCredentialExpired, isRefreshable, isTokenExpired, type RefreshableCredentials, };

package/dist/auth/is-token-expired.js

@@ -1,5 +1,11 @@
 /**
- * Token and credential expiry check utilities.
+ * Token and credential expiry/refresh utilities.
+ *
+ * Provides field detection for common OAuth credential formats:
+ * - Google OAuth: expiry_date (ms), refresh_token
+ * - Generic OAuth: expires_at (s or ms), refresh_token
+ * - OpenCode: expires (ms), refresh
+ * - Claude: expiresAt (ms), refreshToken (camelCase)
  */
 /**
  * Timestamp threshold to distinguish seconds from milliseconds.
@@ -65,7 +71,15 @@ function isCredentialExpired(data, bufferSeconds = 60) {
     const bufferMs = bufferSeconds * 1000;
     return nowMs > expiryTimestampMs - bufferMs;
 }
-/** Extract expiry timestamp in milliseconds from credential data. */
+/**
+ * Extract expiry timestamp in milliseconds from credential data.
+ *
+ * Checks common expiry field names in order of preference:
+ * - `expiry_date`: Google OAuth (milliseconds)
+ * - `expires_at`: Generic OAuth (seconds or milliseconds, auto-detected)
+ * - `expiresAt`: Claude (seconds or milliseconds, auto-detected)
+ * - `expires`: OpenCode (seconds or milliseconds, auto-detected)
+ */
 function extractExpiryTimestamp(data) {
     // Google OAuth uses expiry_date (milliseconds)
     if (typeof data.expiry_date === "number") {
@@ -77,10 +91,62 @@ function extractExpiryTimestamp(data) {
             ? data.expires_at * 1000
             : data.expires_at;
     }
-    // OpenCode uses expires (milliseconds)
+    // Claude uses expiresAt (milliseconds, camelCase)
+    if (typeof data.expiresAt === "number") {
+        return data.expiresAt < SECONDS_THRESHOLD
+            ? data.expiresAt * 1000
+            : data.expiresAt;
+    }
+    // OpenCode uses expires (milliseconds, but apply heuristic for safety)
     if (typeof data.expires === "number") {
-        return data.expires;
+        return data.expires < SECONDS_THRESHOLD
+            ? data.expires * 1000
+            : data.expires;
     }
     return undefined;
 }
-export { isCredentialExpired, isTokenExpired };
+/**
+ * Extract expiry date from credential data.
+ *
+ * Convenience wrapper around {@link extractExpiryTimestamp} that returns
+ * a Date object instead of milliseconds.
+ *
+ * @param data - The credential data object
+ * @returns Date if expiry field found, undefined otherwise
+ */
+function extractExpiryDate(data) {
+    const ts = extractExpiryTimestamp(data);
+    if (ts === undefined)
+        return undefined;
+    return new Date(ts);
+}
+/**
+ * Check if credential data contains a refresh token.
+ *
+ * Supports multiple field naming conventions:
+ * - `refresh_token`: Standard OAuth / Google / Generic
+ * - `refreshToken`: Claude (camelCase)
+ * - `refresh`: OpenCode
+ *
+ * @param data - The credential data object (accepts unknown for safety)
+ * @returns true if a refresh token field exists with a string value
+ */
+function isRefreshable(data) {
+    if (typeof data !== "object" || data === null)
+        return false;
+    const record = data;
+    // Standard OAuth field name
+    if ("refresh_token" in record && typeof record.refresh_token === "string") {
+        return true;
+    }
+    // Claude uses camelCase
+    if ("refreshToken" in record && typeof record.refreshToken === "string") {
+        return true;
+    }
+    // OpenCode uses 'refresh'
+    if ("refresh" in record && typeof record.refresh === "string") {
+        return true;
+    }
+    return false;
+}
+export { extractExpiryDate, extractExpiryTimestamp, isCredentialExpired, isRefreshable, isTokenExpired, };

package/dist/index.d.ts

@@ -37,5 +37,5 @@ export type { AuthStatus, Credentials } from "./auth/types.js";
 export { checkAllAuth, checkAuth, credentialsToEnvironment, extractRawCredentials, extractRawCredentialsFromDirectory, getAccessToken, getAgentAccessToken, getCredentialsEnvironmentVariableName, installCredentials, installCredentialsFromEnvironmentVariable, removeCredentials, getAdapter, getAllAdapters, getCapabilities, type ExtractOptions, type InstallFromEnvironmentOptions, } from "./auth/registry.js";
 export { getVaultConfig, isVaultConfigured, type VaultConfig, } from "./vault/vault-config.js";
 export { fetchVaultCredentials, type VaultFailureReason, type VaultFetchOptions, type VaultResult, } from "./vault/vault-client.js";
-export { isCredentialExpired, isTokenExpired, } from "./auth/is-token-expired.js";
+export { extractExpiryDate, extractExpiryTimestamp, isCredentialExpired, isRefreshable, isTokenExpired, type RefreshableCredentials, } from "./auth/is-token-expired.js";
 export { refreshAndPersist, refreshCredentials, type RefreshAndPersistResult, type RefreshOptions, type RefreshResult, } from "./auth/refresh-credentials.js";

package/dist/index.js

@@ -40,6 +40,6 @@ getAdapter, getAllAdapters, getCapabilities, } from "./auth/registry.js";
 // Vault utilities
 export { getVaultConfig, isVaultConfigured, } from "./vault/vault-config.js";
 export { fetchVaultCredentials, } from "./vault/vault-client.js";
-// Token refresh utilities
-export { isCredentialExpired, isTokenExpired, } from "./auth/is-token-expired.js";
+// Token/credential utilities
+export { extractExpiryDate, extractExpiryTimestamp, isCredentialExpired, isRefreshable, isTokenExpired, } from "./auth/is-token-expired.js";
 export { refreshAndPersist, refreshCredentials, } from "./auth/refresh-credentials.js";

package/package.json

@@ -2,7 +2,7 @@
   "name": "axauth",
   "author": "Łukasz Jerciński",
   "license": "MIT",
-  "version": "2.0.0",
+  "version": "2.1.0",
   "description": "Authentication management library and CLI for AI coding agents",
   "repository": {
     "type": "git",
@@ -68,25 +68,25 @@
   },
   "dependencies": {
     "@commander-js/extra-typings": "^14.0.0",
-    "@inquirer/password": "^5.0.3",
+    "@inquirer/password": "^5.0.4",
     "axconfig": "^3.6.0",
-    "axexec": "^1.1.0",
+    "axexec": "^1.1.6",
     "axshared": "^2.0.0",
     "commander": "^14.0.2",
     "zod": "^4.3.5"
   },
   "devDependencies": {
     "@total-typescript/ts-reset": "^0.6.1",
-    "@types/node": "^25.0.5",
-    "@vitest/coverage-v8": "^4.0.16",
+    "@types/node": "^25.0.9",
+    "@vitest/coverage-v8": "^4.0.17",
     "eslint": "^9.39.2",
     "eslint-config-axkit": "^1.0.0",
     "fta-check": "^1.5.1",
     "fta-cli": "^3.0.0",
-    "knip": "^5.80.2",
+    "knip": "^5.81.0",
     "prettier": "3.7.4",
     "semantic-release": "^25.0.2",
     "typescript": "^5.9.3",
-    "vitest": "^4.0.16"
+    "vitest": "^4.0.17"
   }
 }