@desplega.ai/agent-swarm 2.7.4 → 2.7.5

package/dist/{cli-a81qevyg.js → cli-7a42nfy0.js}

@@ -1,13 +1,13 @@
 import {
   contextBoundNoteThreshold,
   createContextBoundNote
-} from "./cli-h55y2bjc.js";
+} from "./cli-dhar9qay.js";
 import {
   SessionErrorTracker
-} from "./cli-bwty35gx.js";
+} from "./cli-mthwvjre.js";
 import {
   summarizeSession
-} from "./cli-j4kt1mpb.js";
+} from "./cli-a47xy8eq.js";
 import {
   resolveCodexPrompt
 } from "./cli-jc1g9ndz.js";
@@ -22,7 +22,7 @@ import {
 } from "./cli-98rwmcyc.js";
 import {
   applyReasoningEffort
-} from "./cli-vqgnyh76.js";
+} from "./cli-98rw5dt5.js";
 import {
   createSwarmEventHandler
 } from "./cli-4zsenjhy.js";
@@ -34,7 +34,7 @@ import {
   computeContextUsedUnified,
   clampContextPercent,
   init_context_window
-} from "./cli-rtk9g7av.js";
+} from "./cli-73jzwksr.js";
 import {
   getMemoryRaterNames,
   init_memory_raters,
@@ -52,10 +52,10 @@ import {
 import {
   credentialsToAuthJson,
   init_auth_json,
-  CodexOAuthRefreshError,
+  buildPoolRevalidationFailureReason,
   getValidCodexOAuth,
   init_storage
-} from "./cli-jg0nfda6.js";
+} from "./cli-75gkpjvw.js";
 import {
   swarmRuntimeInstanceId,
   init_multi_runtime2
@@ -63,7 +63,11 @@ import {
 import {
   DEFAULT_MODEL_TIER_MAP,
   init_types4
-} from "./cli-41z8xwj0.js";
+} from "./cli-7wspm5gm.js";
+import {
+  isCodexRejectedAccessError,
+  init_codex_auth_failure
+} from "./cli-fw2w0kva.js";
 import {
   routeCredentialStatus,
   CODEX_GATEWAY_API_KEY,
@@ -72,15 +76,15 @@ import {
   init_src,
   selectCredential,
   init_credentials2
-} from "./cli-aq58fk5m.js";
+} from "./cli-g83s9ewh.js";
 import {
   runtimeCatalogModel,
   init_runtime_model_catalog
-} from "./cli-a2jw6ee5.js";
+} from "./cli-1p89xny0.js";
 import {
   init_package,
   package_default
-} from "./cli-pe09p6dv.js";
+} from "./cli-tqgg40ek.js";
 import {
   isEnvFlagEnabled,
   isSessionSummarySkipped,
@@ -93,10 +97,10 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-a4btqqft.js";
+} from "./cli-1b7btd38.js";
 import {
   init_src2
-} from "./cli-4r12t6w6.js";
+} from "./cli-5c4hjzne.js";
 
 // src/providers/codex-oauth/home.ts
 import os from "node:os";
@@ -110,6 +114,7 @@ init_llm();
 import { existsSync as nodeExistsSync } from "node:fs";
 import { join as join3 } from "node:path";
 init_api_key();
+init_codex_auth_failure();
 init_context_window();
 init_credentials2();
 init_env_flag();
@@ -588,6 +593,7 @@ function createCodexSwarmEventHandler(opts) {
 }
 
 // src/providers/codex-adapter.ts
+init_storage();
 var CODEX_GATEWAY_PROVIDER_ID = "swarm-gateway";
 function codexGatewayConfig(route) {
   return {
@@ -703,16 +709,6 @@ async function resolveCodexAuthMode(config, emit, deps = {}) {
   }
   return currentMode;
 }
-function buildPoolRevalidationFailureReason(err, slot) {
-  if (err instanceof CodexOAuthRefreshError) {
-    if (err.reason === "lock_timeout") {
-      return `[auth-error] Codex pool slot ${slot} [...${err.keySuffix}] revalidation failed: timed out waiting for the refresh lock — transient, will retry on next task.`;
-    }
-    return `[auth-error] Codex pool slot ${slot} [...${err.keySuffix}] revalidation failed: refresh rejected (${err.status ?? "unknown status"} ${err.body ?? ""}) — credential likely revoked; re-run codex-login for this slot.`;
-  }
-  const message = err instanceof Error ? err.message : String(err);
-  return `[auth-error] Codex pool slot ${slot} revalidation failed (not a confirmed auth rejection, transient): ${message}`;
-}
 async function buildCodexConfig(config, model, emit) {
   const mcpServers = {};
   const runtimeInstanceId = swarmRuntimeInstanceId();
@@ -1535,19 +1531,7 @@ class CodexSession {
         category: "rate_limit"
       };
     }
-    const authPatterns = [
-      "unauthorized",
-      "http 401",
-      " 401 ",
-      "invalid api key",
-      "invalid_api_key",
-      "missing api key",
-      "no api key",
-      "authentication failed",
-      "failed to refresh token",
-      "invalid 'refresh_token'"
-    ];
-    if (authPatterns.some((p) => normalized.includes(p))) {
+    if (isCodexRejectedAccessError(normalized)) {
       const slot = this.config.codexSlot;
       const guidance = slot === undefined ? "Codex authentication failed — check OPENAI_API_KEY or ChatGPT login." : `Codex pool slot ${slot} authentication failed — re-run agent-swarm codex-login --slot ${slot}.`;
       return {

package/dist/{cli-0sbkss7h.js → cli-7wcyk2s5.js}

@@ -9,7 +9,7 @@ import {
   acquireOAuthRefreshLock,
   releaseOAuthRefreshLock,
   init_oauth
-} from "./cli-1s1dqn1j.js";
+} from "./cli-1ayk1eas.js";
 import {
   generateRandomCodeVerifier,
   generateRandomState,
@@ -20,7 +20,7 @@ import {
   scrubSecrets,
   registerVolatileSecret,
   init_secret_scrubber
-} from "./cli-a4btqqft.js";
+} from "./cli-1b7btd38.js";
 import {
   __esm
 } from "./cli-242037k3.js";

package/dist/{cli-41z8xwj0.js → cli-7wspm5gm.js}

@@ -1774,6 +1774,12 @@ var init_types4 = __esm(() => {
       smart: "grok-4.6",
       ultra: "grok-4.7"
     },
+    fx: {
+      smol: "openrouter/deepseek/deepseek-v4.1-flash",
+      regular: "openrouter/deepseek/deepseek-v4.1-flash",
+      smart: "openrouter/deepseek/deepseek-v4-pro-0813",
+      ultra: "openrouter/anthropic/claude-opus-5.5"
+    },
     acp: {
       smol: "",
       regular: "",
@@ -1856,7 +1862,8 @@ var init_types4 = __esm(() => {
     "dsh",
     "amp",
     "cursor",
-    "grok"
+    "grok",
+    "fx"
   ]);
   ModelProfileNameSchema = string2().trim().regex(/^[a-z0-9][a-z0-9._-]{0,99}$/, "lowercase letters, digits, '.', '_' or '-', max 100");
   ModelProfileSchema = object2({
@@ -1929,7 +1936,8 @@ var init_types4 = __esm(() => {
     dsh: [],
     amp: ["queue"],
     cursor: ["steer", "queue"],
-    grok: []
+    grok: [],
+    fx: ["steer"]
   };
   FollowUpConfigSchema = object2({
     disabled: boolean().optional(),
@@ -2976,7 +2984,8 @@ var init_types4 = __esm(() => {
   CooldownConfigSchema = object2({
     hours: number2().min(0).optional(),
     minutes: number2().min(0).optional(),
-    seconds: number2().min(0).optional()
+    seconds: number2().min(0).optional(),
+    from: _enum2(["finish", "start"]).optional()
   }).refine((v) => v.hours !== undefined || v.minutes !== undefined || v.seconds !== undefined, {
     message: "At least one of hours, minutes, or seconds is required"
   });
@@ -3647,7 +3656,8 @@ var init_types4 = __esm(() => {
     "dsh",
     "amp",
     "cursor",
-    "grok"
+    "grok",
+    "fx"
   ]);
   PricingTokenClassSchema = _enum2([
     "input",

package/dist/{cli-byqfbnjw.js → cli-82ae98pz.js}

@@ -2,16 +2,16 @@ import {
   contextStatePath,
   contextBoundNoteMarkerPath,
   recordContextState
-} from "./cli-h55y2bjc.js";
+} from "./cli-dhar9qay.js";
 import {
   runStopHookSessionSummarySubprocess
-} from "./cli-wndv9p7g.js";
+} from "./cli-0731hvbw.js";
 import {
   redactRateLimitEventLine,
   SessionErrorTracker,
   trackErrorFromJson,
   parseStderrForErrors
-} from "./cli-bwty35gx.js";
+} from "./cli-mthwvjre.js";
 import {
   resolveSlashSkillPrompt
 } from "./cli-jc1g9ndz.js";
@@ -24,7 +24,7 @@ import {
 } from "./cli-98rwmcyc.js";
 import {
   applyReasoningEffort
-} from "./cli-vqgnyh76.js";
+} from "./cli-98rw5dt5.js";
 import {
   fetchInstalledMcpServers
 } from "./cli-bst1vp7e.js";
@@ -34,7 +34,7 @@ import {
   computeContextUsedUnified,
   clampContextPercent,
   init_context_window
-} from "./cli-rtk9g7av.js";
+} from "./cli-73jzwksr.js";
 import {
   resolveClaudeTransport,
   isClaudeBridgeEffective
@@ -55,7 +55,7 @@ import {
 import {
   withFileLock,
   init_file_lock
-} from "./cli-ycm6180s.js";
+} from "./cli-a7v854rf.js";
 import {
   getOpenRouterAttributionHeaders,
   init_openrouter_base_url
@@ -68,7 +68,7 @@ import {
   CLAUDE_CREDENTIALS_HINT,
   validateClaudeCredentials,
   init_credentials2
-} from "./cli-aq58fk5m.js";
+} from "./cli-g83s9ewh.js";
 import {
   isEnvFlagEnabled,
   init_env_flag
@@ -76,7 +76,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-a4btqqft.js";
+} from "./cli-1b7btd38.js";
 import {
   __toESM
 } from "./cli-242037k3.js";
@@ -1263,7 +1263,7 @@ class ClaudeAdapter2 {
     if (transport === "sdk" && isClaudeBridgeEffective(sourceEnv)) {
       throw new Error("CLAUDE_TRANSPORT=sdk cannot run with an effective Claude Bridge configuration. Select CLI transport or disable the bridge.");
     }
-    const claudeSdk = transport === "sdk" ? await import("./claude-sdk-session-vj0c2azx.js") : undefined;
+    const claudeSdk = transport === "sdk" ? await import("./claude-sdk-session-q6wj5hmy.js") : undefined;
     claudeSdk?.validateClaudeSdkAdditionalArgs([
       ...claudeBinaryArgv.slice(1),
       ...config.additionalArgs ?? []

package/dist/{cli-bq2pcphn.js → cli-8hs41zy2.js}

@@ -4,7 +4,7 @@ import {
   invalidateTelemetryUserRole,
   init_telemetry_identity,
   init_db4
-} from "./cli-1s1dqn1j.js";
+} from "./cli-1ayk1eas.js";
 import {
   PermissionVerbSchema,
   init_rbac

package/dist/{cli-vqgnyh76.js → cli-98rw5dt5.js}

@@ -2,15 +2,17 @@ import {
   runtimeCatalogSection,
   runtimeCatalogModel,
   init_runtime_model_catalog
-} from "./cli-a2jw6ee5.js";
+} from "./cli-1p89xny0.js";
 import {
+  CHATGPT_SUBSCRIPTION_PROVIDER,
   dshCatalogRef,
   grokCatalogRef,
+  fxCatalogRef,
   cursorCatalogRef,
   reasoningLevelsFor,
   claudeCatalogModelId,
   init_src2
-} from "./cli-4r12t6w6.js";
+} from "./cli-5c4hjzne.js";
 
 // src/providers/reasoning-effort.ts
 init_src2();
@@ -38,10 +40,17 @@ function lookupModel(harness, model) {
     ({ providerId, modelId } = cursorCatalogRef(model));
   } else if (harness === "grok") {
     ({ providerId, modelId } = grokCatalogRef(model));
+  } else if (harness === "fx") {
+    const ref = fxCatalogRef(model);
+    if (!ref)
+      return;
+    ({ providerId, modelId } = ref);
   } else {
     ({ providerId, modelId } = splitProviderModel(model));
     if (!providerId)
       return;
+    if (providerId.toLowerCase() === CHATGPT_SUBSCRIPTION_PROVIDER)
+      providerId = "openai";
   }
   const facts = runtimeCatalogModel(providerId, modelId);
   return facts ? { id: modelId, facts } : undefined;
@@ -124,6 +133,8 @@ function applyReasoningEffort(harness, model, level) {
       return { kind: "cursor-effort", reasoningEffort: level };
     case "grok":
       return { kind: "grok-effort", reasoningEffort: level };
+    case "fx":
+      return { kind: "fx-effort", reasoningEffort: level };
     default: {
       const _exhaustive = harness;
       return _exhaustive;
@@ -138,7 +149,8 @@ var REASONING_HARNESSES = new Set([
   "dsh",
   "cursor",
   "amp",
-  "grok"
+  "grok",
+  "fx"
 ]);
 function supportedReasoningLevels(harness, model) {
   if (!REASONING_HARNESSES.has(harness))

package/dist/{cli-9cctx1tn.js → cli-a22h291q.js}

@@ -2,7 +2,7 @@ import {
   openAICompatibleKeyVars,
   openAICompatibleBaseUrlVars,
   init_src2
-} from "./cli-4r12t6w6.js";
+} from "./cli-5c4hjzne.js";
 
 // src/providers/acp-target-catalog.ts
 init_src2();

package/dist/{cli-j4kt1mpb.js → cli-a47xy8eq.js}

@@ -19,7 +19,7 @@ import {
   init_models,
   resolveCredential,
   init_credentials
-} from "./cli-wk9md5px.js";
+} from "./cli-qxnf8z2z.js";
 import {
   DEFAULT_OPENROUTER_BASE_URL,
   getOpenRouterBaseUrl,
@@ -29,7 +29,7 @@ import {
 import {
   selectCredential,
   init_credentials2
-} from "./cli-aq58fk5m.js";
+} from "./cli-g83s9ewh.js";
 import {
   init_zod
 } from "./cli-k5671be5.js";
@@ -39,7 +39,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-a4btqqft.js";
+} from "./cli-1b7btd38.js";
 
 // src/utils/internal-ai/complete-structured.ts
 init_compat();

package/dist/{cli-ycm6180s.js → cli-a7v854rf.js}

@@ -8,12 +8,12 @@ import {
 } from "./cli-4sydckyj.js";
 import {
   init_templates4
-} from "./cli-v726afdm.js";
+} from "./cli-2pnswgh8.js";
 import {
   resolveTemplateAsync,
   init_resolver,
   init_session_templates
-} from "./cli-j4kw3rsx.js";
+} from "./cli-cm5yqn35.js";
 import {
   MAX_PROFILE_FILE_LENGTH,
   getAppUrl,
@@ -26,7 +26,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-a4btqqft.js";
+} from "./cli-1b7btd38.js";
 import {
   __esm
 } from "./cli-242037k3.js";
@@ -262,6 +262,8 @@ function toolDiscoveryEvent(provider, hasToolSearch) {
   switch (provider) {
     case "amp":
       return "system.agent.tool_discovery.amp";
+    case "fx":
+      return "system.agent.tool_discovery.fx";
     case "codex":
       return "system.agent.tool_discovery.codex";
     case "opencode":

package/dist/{cli-98pke4vk.js → cli-ae7mrdf9.js}

@@ -6,12 +6,12 @@ import {
   isSensitiveKey,
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-a4btqqft.js";
+} from "./cli-1b7btd38.js";
 import {
   openAICompatibleKeyVars,
   openAICompatibleBaseUrlVars,
   init_src2
-} from "./cli-4r12t6w6.js";
+} from "./cli-5c4hjzne.js";
 import {
   __esm
 } from "./cli-242037k3.js";

package/dist/{cli-ahd90bwt.js → cli-afrrppsw.js}

@@ -1,24 +1,24 @@
 import {
   contextBoundNoteThreshold,
   createContextBoundNote
-} from "./cli-h55y2bjc.js";
+} from "./cli-dhar9qay.js";
 import {
   resolveSlashSkillPrompt
 } from "./cli-jc1g9ndz.js";
 import {
   applyReasoningEffort
-} from "./cli-vqgnyh76.js";
+} from "./cli-98rw5dt5.js";
 import {
   CONTEXT_FORMULA,
   computeContextUsedUnified,
   clampContextPercent,
   init_context_window
-} from "./cli-rtk9g7av.js";
+} from "./cli-73jzwksr.js";
 import {
   ampBillsCacheWrites,
   resolveAmpModel,
   init_amp_models
-} from "./cli-zn15c46z.js";
+} from "./cli-mjzynrse.js";
 import {
   detachedProcessGroup,
   registerProcessGroup,
@@ -36,7 +36,7 @@ import {
   scrubSecrets,
   registerVolatileSecret,
   init_secret_scrubber
-} from "./cli-a4btqqft.js";
+} from "./cli-1b7btd38.js";
 
 // src/providers/amp-adapter.ts
 import { existsSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
@@ -48,7 +48,7 @@ init_context_window();
 init_multi_runtime2();
 init_process_group();
 init_secret_scrubber();
-var AMP_PACKAGE = "@ampcode/cli@0.0.1793246451-g9e5ffe";
+var AMP_PACKAGE = "@ampcode/cli@0.0.1793275344-g17bf52";
 var AMP_MCP_SERVER_NAME = "agent-swarm";
 var AMP_PLUGIN_MODE_KEY = "agent-swarm";
 var AMP_LIVE_TEST_TIMEOUT_MS = 5000;

package/dist/{cli-8yy525ad.js → cli-bhjt02p8.js}

@@ -5,12 +5,12 @@ import {
   validateRuntimeTokenTtlHours,
   init_swarm_config_guard,
   init_db4
-} from "./cli-1s1dqn1j.js";
+} from "./cli-1ayk1eas.js";
 import {
   registerVolatileSecret,
   unregisterVolatileSecret,
   init_secret_scrubber
-} from "./cli-a4btqqft.js";
+} from "./cli-1b7btd38.js";
 import {
   __esm
 } from "./cli-242037k3.js";

package/dist/{cli-v1yw3wha.js → cli-bnz7a7qf.js}

@@ -4,13 +4,13 @@ import {
 import {
   reasoningCapability,
   applyReasoningEffort
-} from "./cli-vqgnyh76.js";
+} from "./cli-98rw5dt5.js";
 import {
   CONTEXT_FORMULA,
   getContextWindowSize,
   clampContextPercent,
   init_context_window
-} from "./cli-rtk9g7av.js";
+} from "./cli-73jzwksr.js";
 import {
   detachedProcessGroup,
   registerProcessGroup,
@@ -24,7 +24,7 @@ import {
 import {
   DEFAULT_MODEL_TIER_MAP,
   init_types4
-} from "./cli-41z8xwj0.js";
+} from "./cli-7wspm5gm.js";
 import {
   getOpenRouterBaseUrl,
   getOpenRouterAttributionHeaders,
@@ -34,7 +34,7 @@ import {
   scrubSecrets,
   registerVolatileSecret,
   init_secret_scrubber
-} from "./cli-a4btqqft.js";
+} from "./cli-1b7btd38.js";
 
 // src/providers/dsh-adapter.ts
 init_types4();

package/dist/{cli-j4kw3rsx.js → cli-cm5yqn35.js}

@@ -451,6 +451,7 @@ The engine posts the thread tree and the outcome card. You post at most one mess
 The outcome card publishes your \`output\` verbatim. Keep free-text \`output\` under 120 words by default, with the exceptions in How you write.
 A Slack task from an unknown user: register them with \`manage-user\` first.
 You MUST use the \`slack-interaction\` skill before you post to Slack.
+Call \`slack-leave-thread\` with your taskId when a thread no longer needs you: people are talking among themselves, someone tells you to stop or back off, or the thread's work is done. The swarm then ignores the thread until someone @mentions it. Leave quietly, with no goodbye message.
 `,
     variables: [],
     category: "system"
@@ -512,6 +513,15 @@ Task: {{task}}{{progressLine}}
     ],
     category: "system"
   });
+  registerTemplate({
+    eventType: "system.agent.fx.system_prompt_file",
+    header: "",
+    defaultBody: "These instructions are cut short. Read {{path}} before you start: it holds the complete swarm instructions, of which the text above is only the first part.",
+    variables: [
+      { name: "path", description: "Absolute path of the file with the full system prompt" }
+    ],
+    category: "system"
+  });
   registerTemplate({
     eventType: "system.agent.cursor.first_message",
     header: "",
@@ -547,6 +557,13 @@ Task: {{task}}{{progressLine}}
     variables: [],
     category: "system"
   });
+  registerTemplate({
+    eventType: "system.agent.tool_discovery.fx",
+    header: "",
+    defaultBody: "Most swarm tools are deferred behind `capability_search`. Each one is named `mcp_swarm_<tool>`, so `store-progress` is `mcp_swarm_store-progress`. Call a tool you know by that name directly. To find one, use `capability_search`.",
+    variables: [],
+    category: "system"
+  });
   registerTemplate({
     eventType: "system.agent.tool_discovery.codex",
     header: "",
@@ -657,6 +674,7 @@ Rules of the road:
 ## Slack (scripts-only)
 
 This task originated from Slack (channel: \`{{slackChannelId}}\`). The engine maintains the thread tree and publishes the top-level outcome card. Post at most one distinct agent-authored message per task, concrete, sized to what the user asked for. Progress, start, completion, failure, acknowledgment messages, and relayed raw task output stay out of Slack. Named Slack tools are not exposed in scripts-only mode, so use \`script-run\` with inline source calling \`ctx.swarm.slack_reply({ taskId, message })\` (your taskId carries the thread context).
+When the thread no longer needs you (people are talking among themselves, someone tells you to stop, or the work is done), call \`ctx.swarm.slack_leaveThread({ taskId })\` the same way. The swarm then ignores the thread until someone @mentions it. Leave quietly, with no goodbye message.
 The outcome card publishes your \`output\` verbatim. Keep free-text \`output\` under 120 words by default, with the exceptions in How you write.
 `,
     variables: [

package/dist/{cli-h55y2bjc.js → cli-dhar9qay.js}

@@ -2,13 +2,13 @@ import {
   getKnownContextWindowSize,
   clampContextPercent,
   init_context_window
-} from "./cli-rtk9g7av.js";
+} from "./cli-73jzwksr.js";
 import {
   resolveTemplateFromCode,
   resolveTemplateAsync,
   init_resolver,
   init_session_templates
-} from "./cli-j4kw3rsx.js";
+} from "./cli-cm5yqn35.js";
 
 // src/hooks/context-bound-note.ts
 import { renameSync, writeFileSync } from "node:fs";

package/dist/{cli-5gr1g711.js → cli-fqzx7gwa.js}

@@ -8,12 +8,12 @@ import {
   resolveConfigValueOrThrow,
   resolveHeadersOrThrow,
   FileAuthStorageBackend
-} from "./cli-edmm9d9y.js";
+} from "./cli-vqypxzh4.js";
 import {
   oauthSuccessHtml,
   oauthErrorHtml,
   init_oauth_page
-} from "./cli-wk9md5px.js";
+} from "./cli-qxnf8z2z.js";
 import {
   __toESM
 } from "./cli-242037k3.js";

package/dist/{cli-tzrpv5sc.js → cli-ftyxyspd.js}

@@ -2,7 +2,7 @@ import {
   resolveTemplateAsync,
   init_resolver,
   init_session_templates
-} from "./cli-j4kw3rsx.js";
+} from "./cli-cm5yqn35.js";
 
 // src/prompts/steering-delivery.ts
 init_session_templates();

package/dist/cli-fw2w0kva.js

@@ -0,0 +1,47 @@
+import {
+  __esm
+} from "./cli-242037k3.js";
+
+// src/utils/codex-auth-failure.ts
+function isCodexAuthFailureReason(failureReason) {
+  if (!failureReason || !failureReason.includes("[auth-error]"))
+    return false;
+  const lower = failureReason.toLowerCase();
+  return !TRANSIENT_AUTH_ERROR_MARKERS.some((m) => lower.includes(m));
+}
+function isCodexRejectedAccessError(text) {
+  const lower = text.toLowerCase();
+  return REJECTED_ACCESS_PATTERNS.some((p) => lower.includes(p));
+}
+var CODEX_AUTH_FAILURE_BENCH_THRESHOLD = 2, CODEX_AUTH_FAILURE_BENCH_MS, CODEX_AUTH_WATCH_NAMESPACE = "codex-auth-watch", codexAuthBenchMarkerKey = (keySuffix) => `bench:${keySuffix}`, TRANSIENT_AUTH_ERROR_MARKERS, REJECTED_ACCESS_PATTERNS;
+var init_codex_auth_failure = __esm(() => {
+  CODEX_AUTH_FAILURE_BENCH_MS = 365 * 24 * 60 * 60 * 1000;
+  TRANSIENT_AUTH_ERROR_MARKERS = [
+    "waiting for the refresh lock",
+    "refresh rejected (429",
+    "refresh rejected (5",
+    "refresh rejected (unknown status",
+    "out of credits",
+    "no credentials found in config store",
+    "not a confirmed auth rejection"
+  ];
+  REJECTED_ACCESS_PATTERNS = [
+    "unauthorized",
+    "http 401",
+    " 401 ",
+    "invalid api key",
+    "invalid_api_key",
+    "missing api key",
+    "no api key",
+    "authentication failed",
+    "failed to refresh token",
+    "invalid 'refresh_token'",
+    "token_invalidated",
+    "authentication token has been invalidated",
+    "authentication token is expired",
+    "refresh token was revoked",
+    "could not parse your authentication token"
+  ];
+});
+
+export { CODEX_AUTH_FAILURE_BENCH_THRESHOLD, CODEX_AUTH_FAILURE_BENCH_MS, CODEX_AUTH_WATCH_NAMESPACE, codexAuthBenchMarkerKey, isCodexAuthFailureReason, isCodexRejectedAccessError, init_codex_auth_failure };