Struct AuthStorage 

pub struct AuthStorage { /* private fields */ }

Auth storage wrapper with file locking.

Implementations

impl AuthStorage

pub fn load(path: PathBuf) -> Result<Self>

Load auth.json (creates empty if missing).

pub async fn load_async(path: PathBuf) -> Result<Self>

Load auth.json asynchronously (creates empty if missing).

pub fn save(&self) -> Result<()>

Persist auth.json (atomic write + permissions).

pub async fn save_async(&self) -> Result<()>

Persist auth.json asynchronously.

pub fn get(&self, provider: &str) -> Option<&AuthCredential>

Get raw credential.

pub fn set(&mut self, provider: impl Into<String>, credential: AuthCredential)

Insert or replace a credential for a provider.

pub fn remove(&mut self, provider: &str) -> bool

Remove a credential for a provider.

pub fn api_key(&self, provider: &str) -> Option<String>

Get API key for provider from auth.json.

For ApiKey and BearerToken variants the key/token is returned directly. For OAuth the access token is returned only when not expired. For AwsCredentials the access key ID is returned (callers needing the full credential set should use [get] instead). For ServiceKey this returns None because a token exchange is required first.

pub fn provider_names(&self) -> Vec<String>

Return the names of all providers that have stored credentials.

pub fn credential_status(&self, provider: &str) -> CredentialStatus

Return stored credential status for a provider, including canonical alias fallback.

pub fn remove_provider_aliases(&mut self, provider: &str) -> bool

Remove stored credentials for provider and any known aliases/canonical IDs.

Matching is case-insensitive to clean up legacy mixed-case auth entries.

pub fn has_stored_credential(&self, provider: &str) -> bool

Returns true when auth.json contains a credential for provider (including canonical alias fallback).

pub fn external_setup_source(&self, provider: &str) -> Option<&'static str>

Return a human-readable source label when credentials can be auto-detected from other locally-installed coding CLIs.

pub fn resolve_api_key( &self, provider: &str, override_key: Option<&str>, ) -> Option<String>

Resolve API key with precedence.

pub async fn refresh_expired_oauth_tokens(&mut self) -> Result<()>

Refresh any expired OAuth tokens that this binary knows how to refresh.

This keeps startup behavior predictable: models that rely on OAuth credentials remain available after restart without requiring the user to re-login.

pub async fn refresh_expired_oauth_tokens_with_client( &mut self, client: &Client, ) -> Result<()>

Refresh any expired OAuth tokens using the provided HTTP client.

This is primarily intended for tests and deterministic harnesses (e.g. VCR playback), but is also useful for callers that want to supply a custom HTTP implementation.

pub async fn refresh_expired_extension_oauth_tokens( &mut self, client: &Client, extension_configs: &HashMap<String, OAuthConfig>, ) -> Result<()>

Refresh expired OAuth tokens for extension-registered providers.

extension_configs maps provider ID to its OAuthConfig. Providers already handled by refresh_expired_oauth_tokens_with_client (e.g. “anthropic”) are skipped.

pub fn prune_stale_credentials(&mut self, max_age_ms: i64) -> Vec<String>

Remove OAuth credentials that expired more than max_age_ms ago and whose refresh token is no longer usable (no stored token_url/client_id and no matching extension config).

Returns the list of pruned provider IDs.

Trait Implementations

impl Clone for AuthStorage

fn clone(&self) -> AuthStorage

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthStorage

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.