agentshim 0.15.2__tar.gz → 0.15.3__tar.gz

{agentshim-0.15.2 → agentshim-0.15.3}/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## 0.15.3 (2026-10-09)
+
+### Added
+
+- `ProviderProfile.credential_files` (default empty): the subset of `auth_files`
+  that holds refreshable login credentials, as opposed to settings. A caller that
+  lends a login to another process shares these files writable so a token
+  refresh there reaches the original login. Claude `.claude/.credentials.json`,
+  Codex `.codex/auth.json`, Gemini `.gemini/oauth_creds.json`, opencode
+  `.local/share/opencode/auth.json`, Copilot `.copilot/config.json`.
+
 ## 0.15.2 (2026-10-09)
 
 ### Added

{agentshim-0.15.2 → agentshim-0.15.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: agentshim
-Version: 0.15.2
+Version: 0.15.3
 Summary: Provider-agnostic coding-agent CLI shims
 License-Expression: MIT
 License-File: LICENSE

{agentshim-0.15.2 → agentshim-0.15.3}/agentshim/__init__.py

@@ -156,7 +156,7 @@ from .providers.opencode import OpencodeProvider
 from .runtime import Agent
 from .session import Session, Turn, TurnTicket, map_mcp_servers
 
-__version__ = "0.15.2"
+__version__ = "0.15.3"
 
 __all__ = [
     "Agent",

{agentshim-0.15.2 → agentshim-0.15.3}/agentshim/core/profile.py

@@ -152,7 +152,9 @@ class ProviderProfile:
     ``state_root_env`` is the documented variable that relocates
     ``state_dirs[0]``, or ``None`` when the CLI names none. ``auth_files`` are
     the home-relative paths, each inside a ``state_dirs`` entry, whose
-    contents are the minimal set to copy so the CLI is logged in elsewhere.
+    contents are the minimal set to copy so the CLI is logged in elsewhere;
+    ``credential_files`` (0.15.3+, default empty) is the subset of them that
+    holds refreshable login credentials rather than settings.
     ``mcp_config_file`` is the workspace-relative path a ``CONFIG_FILE``
     provider writes its MCP config to for a turn, and ``None`` for
     ``CLI_FLAGS``/``NONE`` providers.
@@ -174,6 +176,12 @@ class ProviderProfile:
     container_env: Mapping[str, str] = field(default_factory=_no_container_env)
     state_root_env: str | None = None
     auth_files: tuple[str, ...] = ()
+    #: The subset of ``auth_files`` that holds login credentials (OAuth tokens
+    #: the CLI itself refreshes and rewrites), as opposed to settings. A caller
+    #: that lends a login to another process shares exactly these files
+    #: writable so a token refresh there is not lost, and keeps the rest of
+    #: ``auth_files`` read-only. Every entry is also in ``auth_files``.
+    credential_files: tuple[str, ...] = ()
     mcp_config_file: str | None = None
     #: Whether the stream lists the skills offered (``SkillsDiscovered``).
     skill_discovery: SkillSignal = SkillSignal.NONE

{agentshim-0.15.2 → agentshim-0.15.3}/agentshim/providers/claude/provider.py

@@ -102,6 +102,7 @@ PROFILE = ProviderProfile(
         ".claude/settings.local.json",
         ".claude.json",
     ),
+    credential_files=(".claude/.credentials.json",),
     mcp_config_file=MCP_CONFIG_FILENAME,
 )
 

{agentshim-0.15.2 → agentshim-0.15.3}/agentshim/providers/codex/provider.py

@@ -101,6 +101,7 @@ PROFILE = ProviderProfile(
     # policy and preferences, so consumers that copy or mount auth state must
     # not needlessly expose it to an agent process.
     auth_files=(".codex/auth.json",),
+    credential_files=(".codex/auth.json",),
     # CLI_FLAGS: Codex takes MCP servers as --config overrides, never a file.
     mcp_config_file=None,
     # A long Codex thread slows down and costs more per turn, so a session

{agentshim-0.15.2 → agentshim-0.15.3}/agentshim/providers/copilot/provider.py

@@ -58,6 +58,9 @@ PROFILE = ProviderProfile(
     # install held only ``versions.json``, which is not credential-bearing,
     # so it is left out.
     auth_files=(".copilot/config.json", ".copilot/settings.json"),
+    # config.json carries the logged-in users and, without a keychain, the
+    # tokens; the CLI rewrites it in place on login and refresh.
+    credential_files=(".copilot/config.json",),
     # CLI_FLAGS: Copilot takes MCP servers as one --additional-mcp-config
     # flag, never a file.
     mcp_config_file=None,

{agentshim-0.15.2 → agentshim-0.15.3}/agentshim/providers/gemini/provider.py

@@ -80,6 +80,7 @@ PROFILE = ProviderProfile(
         ".gemini/settings.json",
         ".gemini/.env",
     ),
+    credential_files=(".gemini/oauth_creds.json",),
     mcp_config_file=MCP_CONFIG_FILENAME,
 )
 

{agentshim-0.15.2 → agentshim-0.15.3}/agentshim/providers/opencode/provider.py

@@ -81,6 +81,7 @@ PROFILE = ProviderProfile(
         ".config/opencode/config.jsonc",
         ".config/opencode/.env",
     ),
+    credential_files=(".local/share/opencode/auth.json",),
     mcp_config_file=MCP_CONFIG_FILENAME,
 )
 

{agentshim-0.15.2 → agentshim-0.15.3}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "agentshim"
-version = "0.15.2"
+version = "0.15.3"
 description = "Provider-agnostic coding-agent CLI shims"
 readme = "README.md"
 license = "MIT"