auth/types.ts

TypeScript interfaces defining the shape of authentication state and profile data.

// Source: https://github.com/ruvnet/ruflo | License: MIT | Copyright 2024-2026 ruvnet
// Provided via justclaw.it.com; keep this notice with the code.
/**
 * `ruflo auth` state shapes (ADR-306).
 *
 * `auth.json` holds identity metadata ONLY — never token material. The
 * access token lives exclusively in a process-lifetime in-memory singleton
 * (session.ts); the refresh token goes to the OS keychain (keychainRef set)
 * or nowhere at all when no keychain backend is reachable (keychainRef:
 * null — session-only mode, ADR-306's accepted usability cost, not a bug).
 */

export interface ProfileAuthState {
  accountId: string;
  scopes: string[];
  /** ISO timestamp — the access token's own expiry, not tracked beyond this. */
  accessTokenExpiresAt: string;
  /** OS-keychain account identi

... (truncated -- full source via MCP)