@iam-brain/opencode-codex-auth 0.1.3

package/dist/lib/personalities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"personalities.js","sourceRoot":"","sources":["../../lib/personalities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,MAAM,eAAe,GAAG,eAAe,CAAA;AACvC,MAAM,wBAAwB,GAAG,qCAAqC,CAAA;AAEtE,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;AAC/E,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAa;IAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC7C,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAA;IACjC,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAA;IACvD,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,SAAS,sBAAsB,CAAC,SAAiB,EAAE,WAAmB;IACpE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAA;QACzC,MAAM,MAAM,GAAG,GAAG,WAAW,KAAK,CAAA;QAClC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAA;QACvE,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAA;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,wBAAwB,CAAC;YACtD,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE;YACxD,CAAC,CAAC,GAAG,CAAA;QACP,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAA;QAC9B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB;IACxB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAA;IACnD,IAAI,OAAO;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;IAClD,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAA;AACvD,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,WAAmB,EACnB,UAGI,EAAE;IAEN,MAAM,UAAU,GAAG,uBAAuB,CAAC,WAAW,CAAC,CAAA;IACvD,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAA;IAE5B,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;IACxD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,iBAAiB,EAAE,CAAA;IAE5D,MAAM,SAAS,GAAG,sBAAsB,CACtC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,eAAe,CAAC,EACpD,UAAU,CACX,CAAA;IACD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,eAAe,CAAC,SAAS,CAAC,CAAA;QACxC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;IACzB,CAAC;IAED,MAAM,UAAU,GAAG,sBAAsB,CACvC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,EACtC,UAAU,CACX,CAAA;IACD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,CAAC,CAAA;QAC1C,IAAI,MAAM;YAAE,OAAO,MAAM,CAAA;IAC3B,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/lib/proactive-refresh.d.ts

@@ -0,0 +1,11 @@
+export declare function runOneProactiveRefreshTick(input: {
+    authPath?: string;
+    now: () => number;
+    bufferMs: number;
+    refresh: (refreshToken: string) => Promise<{
+        access: string;
+        refresh: string;
+        expires: number;
+    }>;
+}): Promise<void>;
+//# sourceMappingURL=proactive-refresh.d.ts.map

package/dist/lib/proactive-refresh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proactive-refresh.d.ts","sourceRoot":"","sources":["../../lib/proactive-refresh.ts"],"names":[],"mappings":"AAqBA,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,GAAG,EAAE,MAAM,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACjG,GAAG,OAAO,CAAC,IAAI,CAAC,CAwGhB"}

package/dist/lib/proactive-refresh.js

@@ -0,0 +1,110 @@
+import { ensureOpenAIOAuthDomain, listOpenAIOAuthDomains, saveAuthStorage } from "./storage";
+const PROACTIVE_REFRESH_FAILURE_COOLDOWN_MS = 30_000;
+function isInvalidGrantError(error) {
+    const oauthCode = typeof error === "object" && error !== null && "oauthCode" in error
+        ? error.oauthCode
+        : undefined;
+    if (typeof oauthCode === "string" && oauthCode.toLowerCase() === "invalid_grant") {
+        return true;
+    }
+    if (error instanceof Error) {
+        return error.message.toLowerCase().includes("invalid_grant");
+    }
+    return false;
+}
+export async function runOneProactiveRefreshTick(input) {
+    const leaseMs = 120_000;
+    const processDomain = async (authMode) => {
+        while (true) {
+            let claimed;
+            await saveAuthStorage(input.authPath, (auth) => {
+                const domain = ensureOpenAIOAuthDomain(auth, authMode);
+                const now = input.now();
+                const dueCutoff = now + input.bufferMs;
+                const account = domain.accounts.find((candidate) => {
+                    if (candidate.enabled === false)
+                        return false;
+                    if (!candidate.identityKey || !candidate.refresh || candidate.expires === undefined) {
+                        return false;
+                    }
+                    if (candidate.expires > dueCutoff)
+                        return false;
+                    if (typeof candidate.cooldownUntil === "number" &&
+                        candidate.cooldownUntil > now) {
+                        return false;
+                    }
+                    if (typeof candidate.refreshLeaseUntil === "number" &&
+                        candidate.refreshLeaseUntil > now) {
+                        return false;
+                    }
+                    return true;
+                });
+                if (!account)
+                    return;
+                const identityKey = account.identityKey;
+                const refreshToken = account.refresh;
+                if (!identityKey || !refreshToken)
+                    return;
+                account.refreshLeaseUntil = now + leaseMs;
+                claimed = {
+                    identityKey,
+                    refresh: refreshToken
+                };
+            });
+            if (!claimed)
+                return;
+            const claimedAccount = claimed;
+            let tokens;
+            try {
+                tokens = await input.refresh(claimedAccount.refresh);
+            }
+            catch (error) {
+                const invalidGrant = isInvalidGrantError(error);
+                await saveAuthStorage(input.authPath, (auth) => {
+                    const domain = ensureOpenAIOAuthDomain(auth, authMode);
+                    const account = domain.accounts.find((candidate) => candidate.identityKey === claimedAccount.identityKey);
+                    if (!account)
+                        return;
+                    delete account.refreshLeaseUntil;
+                    if (invalidGrant) {
+                        account.enabled = false;
+                        delete account.cooldownUntil;
+                        return;
+                    }
+                    if (account.enabled === false)
+                        return;
+                    account.cooldownUntil = input.now() + PROACTIVE_REFRESH_FAILURE_COOLDOWN_MS;
+                });
+                continue;
+            }
+            await saveAuthStorage(input.authPath, (auth) => {
+                const domain = ensureOpenAIOAuthDomain(auth, authMode);
+                const account = domain.accounts.find((candidate) => candidate.identityKey === claimedAccount.identityKey);
+                if (!account)
+                    return;
+                if (account.enabled === false) {
+                    delete account.refreshLeaseUntil;
+                    return;
+                }
+                const now = input.now();
+                if (typeof account.refreshLeaseUntil === "number" &&
+                    account.refreshLeaseUntil > now) {
+                    account.access = tokens.access;
+                    account.refresh = tokens.refresh;
+                    account.expires = tokens.expires;
+                    delete account.refreshLeaseUntil;
+                    delete account.cooldownUntil;
+                }
+                else if (typeof account.refreshLeaseUntil === "number") {
+                    delete account.refreshLeaseUntil;
+                }
+            });
+        }
+    };
+    const initial = await saveAuthStorage(input.authPath, (auth) => auth);
+    const modes = listOpenAIOAuthDomains(initial).map((entry) => entry.mode);
+    for (const authMode of modes) {
+        await processDomain(authMode);
+    }
+}
+//# sourceMappingURL=proactive-refresh.js.map

package/dist/lib/proactive-refresh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proactive-refresh.js","sourceRoot":"","sources":["../../lib/proactive-refresh.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAG5F,MAAM,qCAAqC,GAAG,MAAM,CAAA;AAEpD,SAAS,mBAAmB,CAAC,KAAc;IACzC,MAAM,SAAS,GACb,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,WAAW,IAAI,KAAK;QACjE,CAAC,CAAE,KAAiC,CAAC,SAAS;QAC9C,CAAC,CAAC,SAAS,CAAA;IACf,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,WAAW,EAAE,KAAK,eAAe,EAAE,CAAC;QACjF,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAA;IAC9D,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAKhD;IACC,MAAM,OAAO,GAAG,OAAO,CAAA;IAEvB,MAAM,aAAa,GAAG,KAAK,EAAE,QAAwB,EAAiB,EAAE;QACtE,OAAO,IAAI,EAAE,CAAC;YACd,IAAI,OAA6D,CAAA;YAEjE,MAAM,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC7C,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;gBACtD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,CAAA;gBACvB,MAAM,SAAS,GAAG,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAA;gBACtC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;oBACjD,IAAI,SAAS,CAAC,OAAO,KAAK,KAAK;wBAAE,OAAO,KAAK,CAAA;oBAC7C,IAAI,CAAC,SAAS,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;wBACpF,OAAO,KAAK,CAAA;oBACd,CAAC;oBACD,IAAI,SAAS,CAAC,OAAO,GAAG,SAAS;wBAAE,OAAO,KAAK,CAAA;oBAC/C,IACE,OAAO,SAAS,CAAC,aAAa,KAAK,QAAQ;wBAC3C,SAAS,CAAC,aAAa,GAAG,GAAG,EAC7B,CAAC;wBACD,OAAO,KAAK,CAAA;oBACd,CAAC;oBACD,IACE,OAAO,SAAS,CAAC,iBAAiB,KAAK,QAAQ;wBAC/C,SAAS,CAAC,iBAAiB,GAAG,GAAG,EACjC,CAAC;wBACD,OAAO,KAAK,CAAA;oBACd,CAAC;oBACD,OAAO,IAAI,CAAA;gBACb,CAAC,CAAC,CAAA;gBAEF,IAAI,CAAC,OAAO;oBAAE,OAAM;gBAEpB,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;gBACvC,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAA;gBACpC,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY;oBAAE,OAAM;gBAEzC,OAAO,CAAC,iBAAiB,GAAG,GAAG,GAAG,OAAO,CAAA;gBACzC,OAAO,GAAG;oBACR,WAAW;oBACX,OAAO,EAAE,YAAY;iBACtB,CAAA;YACH,CAAC,CAAC,CAAA;YAEF,IAAI,CAAC,OAAO;gBAAE,OAAM;YACpB,MAAM,cAAc,GAAG,OAAO,CAAA;YAE9B,IAAI,MAA4D,CAAA;YAChE,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;YACtD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,YAAY,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAA;gBAC/C,MAAM,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;oBAC7C,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;oBACtD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAClC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,KAAK,cAAc,CAAC,WAAW,CACpE,CAAA;oBACD,IAAI,CAAC,OAAO;wBAAE,OAAM;oBACpB,OAAO,OAAO,CAAC,iBAAiB,CAAA;oBAChC,IAAI,YAAY,EAAE,CAAC;wBACjB,OAAO,CAAC,OAAO,GAAG,KAAK,CAAA;wBACvB,OAAO,OAAO,CAAC,aAAa,CAAA;wBAC5B,OAAM;oBACR,CAAC;oBACD,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK;wBAAE,OAAM;oBACrC,OAAO,CAAC,aAAa,GAAG,KAAK,CAAC,GAAG,EAAE,GAAG,qCAAqC,CAAA;gBAC7E,CAAC,CAAC,CAAA;gBACF,SAAQ;YACV,CAAC;YAED,MAAM,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC7C,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;gBACtD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAClC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,KAAK,cAAc,CAAC,WAAW,CACpE,CAAA;gBACD,IAAI,CAAC,OAAO;oBAAE,OAAM;gBACpB,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;oBAC9B,OAAO,OAAO,CAAC,iBAAiB,CAAA;oBAChC,OAAM;gBACR,CAAC;gBAED,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,CAAA;gBACvB,IACE,OAAO,OAAO,CAAC,iBAAiB,KAAK,QAAQ;oBAC7C,OAAO,CAAC,iBAAiB,GAAG,GAAG,EAC/B,CAAC;oBACD,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;oBAC9B,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;oBAChC,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;oBAChC,OAAO,OAAO,CAAC,iBAAiB,CAAA;oBAChC,OAAO,OAAO,CAAC,aAAa,CAAA;gBAC9B,CAAC;qBAAM,IAAI,OAAO,OAAO,CAAC,iBAAiB,KAAK,QAAQ,EAAE,CAAC;oBACzD,OAAO,OAAO,CAAC,iBAAiB,CAAA;gBAClC,CAAC;YACH,CAAC,CAAC,CAAA;QACJ,CAAC;IACD,CAAC,CAAA;IAED,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAA;IACrE,MAAM,KAAK,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACxE,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAA;IAC/B,CAAC;AACH,CAAC"}

package/dist/lib/quarantine.d.ts

@@ -0,0 +1,9 @@
+export declare function quarantineFile(input: {
+    sourcePath: string;
+    quarantineDir: string;
+    now: () => number;
+    keep?: number;
+}): Promise<{
+    quarantinedPath: string;
+}>;
+//# sourceMappingURL=quarantine.d.ts.map

package/dist/lib/quarantine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quarantine.d.ts","sourceRoot":"","sources":["../../lib/quarantine.ts"],"names":[],"mappings":"AAGA,wBAAsB,cAAc,CAAC,KAAK,EAAE;IAC1C,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,GAAG,EAAE,MAAM,MAAM,CAAA;IACjB,IAAI,CAAC,EAAE,MAAM,CAAA;CACd,GAAG,OAAO,CAAC;IAAE,eAAe,EAAE,MAAM,CAAA;CAAE,CAAC,CAsCvC"}

package/dist/lib/quarantine.js

@@ -0,0 +1,39 @@
+import fs from "node:fs/promises";
+import path from "node:path";
+export async function quarantineFile(input) {
+    const keep = typeof input.keep === "number" && Number.isFinite(input.keep) ? Math.max(1, Math.floor(input.keep)) : 5;
+    await fs.mkdir(input.quarantineDir, { recursive: true });
+    const base = path.basename(input.sourcePath);
+    const dest = path.join(input.quarantineDir, `${base}.${input.now()}.quarantine.json`);
+    // rename preferred; fallback to copy+unlink
+    try {
+        await fs.rename(input.sourcePath, dest);
+    }
+    catch {
+        await fs.copyFile(input.sourcePath, dest);
+        await fs.unlink(input.sourcePath);
+    }
+    // best-effort permissions
+    try {
+        await fs.chmod(dest, 0o600);
+    }
+    catch {
+        // ignore
+    }
+    // bounded retention
+    try {
+        const allFiles = await fs.readdir(input.quarantineDir);
+        const files = allFiles.filter((f) => f.startsWith(base + "."));
+        files.sort(); // timestamp in name -> lexical works for Date.now() values
+        const excess = files.length - keep;
+        for (let i = 0; i < excess; i++) {
+            const fp = path.join(input.quarantineDir, files[i]);
+            await fs.unlink(fp).catch(() => { });
+        }
+    }
+    catch {
+        // ignore readdir errors
+    }
+    return { quarantinedPath: dest };
+}
+//# sourceMappingURL=quarantine.js.map

package/dist/lib/quarantine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quarantine.js","sourceRoot":"","sources":["../../lib/quarantine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACjC,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAKpC;IACC,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACpH,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAExD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAA;IAErF,4CAA4C;IAC5C,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QACzC,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IACnC,CAAC;IAED,0BAA0B;IAC1B,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IAED,oBAAoB;IACpB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;QACtD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAA;QAC9D,KAAK,CAAC,IAAI,EAAE,CAAA,CAAC,2DAA2D;QAExE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,IAAI,CAAA;QAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAChC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,CAAA;YACpD,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;IAED,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,CAAA;AAClC,CAAC"}

package/dist/lib/rate-limit.d.ts

@@ -0,0 +1,9 @@
+export type HeaderMap = Record<string, string | undefined>;
+export declare function parseRetryAfterMs(headers: HeaderMap, nowMs: number): number | undefined;
+export declare function computeBackoffMs(input: {
+    attempt: number;
+    baseMs: number;
+    maxMs: number;
+    jitterMaxMs: number;
+}): number;
+//# sourceMappingURL=rate-limit.d.ts.map

package/dist/lib/rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../lib/rate-limit.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;AAE1D,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAyBvF;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;CACpB,GAAG,MAAM,CAMT"}

package/dist/lib/rate-limit.js

@@ -0,0 +1,32 @@
+export function parseRetryAfterMs(headers, nowMs) {
+    let raw;
+    for (const key in headers) {
+        if (key.toLowerCase() === "retry-after") {
+            raw = headers[key];
+            break;
+        }
+    }
+    if (raw === undefined)
+        return undefined;
+    const trimmed = raw.trim();
+    if (!trimmed)
+        return undefined;
+    if (/^[0-9]+$/.test(trimmed)) {
+        return parseInt(trimmed, 10) * 1000;
+    }
+    if (!isNaN(Number(trimmed))) {
+        return undefined;
+    }
+    const dateMs = Date.parse(trimmed);
+    if (!Number.isFinite(dateMs))
+        return undefined;
+    return Math.max(0, dateMs - nowMs);
+}
+export function computeBackoffMs(input) {
+    const attempt = Math.max(0, Math.floor(input.attempt));
+    const exp = input.baseMs * Math.pow(2, attempt);
+    const capped = Math.min(exp, input.maxMs);
+    const jitter = input.jitterMaxMs > 0 ? Math.floor(Math.random() * (input.jitterMaxMs + 1)) : 0;
+    return capped + jitter;
+}
+//# sourceMappingURL=rate-limit.js.map

package/dist/lib/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../lib/rate-limit.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,iBAAiB,CAAC,OAAkB,EAAE,KAAa;IACjE,IAAI,GAAuB,CAAA;IAC3B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,aAAa,EAAE,CAAC;YACxC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;YAClB,MAAK;QACP,CAAC;IACH,CAAC;IACD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAEvC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;IAC1B,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAA;IAE9B,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,OAAO,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,IAAI,CAAA;IACrC,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAA;IAE9C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,CAAA;AACpC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAKhC;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;IACtD,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IACzC,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC9F,OAAO,MAAM,GAAG,MAAM,CAAA;AACxB,CAAC"}

package/dist/lib/refresh-queue.d.ts

@@ -0,0 +1,30 @@
+export type RefreshTask = {
+    key: string;
+    expiresAt: number;
+};
+export declare class ProactiveRefreshQueue {
+    private tasks;
+    private bufferMs;
+    constructor(input: {
+        bufferMs: number;
+    });
+    enqueue(task: RefreshTask): void;
+    remove(key: string): void;
+    due(nowMs: number): RefreshTask[];
+}
+export type RefreshTaskRunner = {
+    key: string;
+    expiresAt: number;
+    refresh: () => Promise<void>;
+};
+export type RefreshScheduler = {
+    start: () => void;
+    stop: () => void;
+};
+export declare function createRefreshScheduler(input: {
+    intervalMs: number;
+    queue: ProactiveRefreshQueue;
+    now: () => number;
+    getTasks: () => RefreshTaskRunner[];
+}): RefreshScheduler;
+//# sourceMappingURL=refresh-queue.d.ts.map

package/dist/lib/refresh-queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-queue.d.ts","sourceRoot":"","sources":["../../lib/refresh-queue.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,GAAG;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,qBAAa,qBAAqB;IAChC,OAAO,CAAC,KAAK,CAAiC;IAC9C,OAAO,CAAC,QAAQ,CAAQ;gBAEZ,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE;IAIvC,OAAO,CAAC,IAAI,EAAE,WAAW;IAIzB,MAAM,CAAC,GAAG,EAAE,MAAM;IAIlB,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,EAAE;CAQlC;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,EAAE,MAAM,IAAI,CAAA;IACjB,IAAI,EAAE,MAAM,IAAI,CAAA;CACjB,CAAA;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,qBAAqB,CAAA;IAC5B,GAAG,EAAE,MAAM,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,iBAAiB,EAAE,CAAA;CACpC,GAAG,gBAAgB,CAuCnB"}

package/dist/lib/refresh-queue.js

@@ -0,0 +1,67 @@
+export class ProactiveRefreshQueue {
+    tasks = new Map();
+    bufferMs;
+    constructor(input) {
+        this.bufferMs = Math.max(0, Math.floor(input.bufferMs));
+    }
+    enqueue(task) {
+        this.tasks.set(task.key, task);
+    }
+    remove(key) {
+        this.tasks.delete(key);
+    }
+    due(nowMs) {
+        const due = [];
+        for (const t of this.tasks.values()) {
+            if (t.expiresAt <= nowMs + this.bufferMs)
+                due.push(t);
+        }
+        due.sort((a, b) => a.expiresAt - b.expiresAt);
+        return due;
+    }
+}
+export function createRefreshScheduler(input) {
+    const intervalMs = Math.max(1, Math.floor(input.intervalMs));
+    let timer;
+    let running = false;
+    async function tick() {
+        if (running)
+            return;
+        running = true;
+        try {
+            const now = input.now();
+            const due = input.queue.due(now);
+            if (due.length === 0)
+                return;
+            const runners = input.getTasks();
+            for (const task of due) {
+                const runner = runners.find(r => r.key === task.key);
+                if (!runner)
+                    continue;
+                try {
+                    await runner.refresh();
+                }
+                catch {
+                    // best-effort background work
+                }
+            }
+        }
+        finally {
+            running = false;
+        }
+    }
+    return {
+        start() {
+            if (timer)
+                return;
+            timer = setInterval(() => { tick().catch(() => { }); }, intervalMs);
+        },
+        stop() {
+            if (!timer)
+                return;
+            clearInterval(timer);
+            timer = undefined;
+        }
+    };
+}
+//# sourceMappingURL=refresh-queue.js.map

package/dist/lib/refresh-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-queue.js","sourceRoot":"","sources":["../../lib/refresh-queue.ts"],"names":[],"mappings":"AAKA,MAAM,OAAO,qBAAqB;IACxB,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAA;IACtC,QAAQ,CAAQ;IAExB,YAAY,KAA2B;QACrC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;IACzD,CAAC;IAED,OAAO,CAAC,IAAiB;QACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAChC,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACxB,CAAC;IAED,GAAG,CAAC,KAAa;QACf,MAAM,GAAG,GAAkB,EAAE,CAAA;QAC7B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACpC,IAAI,CAAC,CAAC,SAAS,IAAI,KAAK,GAAG,IAAI,CAAC,QAAQ;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACvD,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAA;QAC7C,OAAO,GAAG,CAAA;IACZ,CAAC;CACF;AAaD,MAAM,UAAU,sBAAsB,CAAC,KAKtC;IACC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAA;IAC5D,IAAI,KAAiC,CAAA;IACrC,IAAI,OAAO,GAAG,KAAK,CAAA;IAEnB,KAAK,UAAU,IAAI;QACjB,IAAI,OAAO;YAAE,OAAM;QACnB,OAAO,GAAG,IAAI,CAAA;QACd,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,CAAA;YACvB,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAChC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAM;YAE5B,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAA;YAChC,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;gBACvB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC,CAAA;gBACpD,IAAI,CAAC,MAAM;oBAAE,SAAQ;gBACrB,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAA;gBACxB,CAAC;gBAAC,MAAM,CAAC;oBACP,8BAA8B;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,OAAO,GAAG,KAAK,CAAA;QACjB,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK;YACH,IAAI,KAAK;gBAAE,OAAM;YACjB,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;QACnE,CAAC;QACD,IAAI;YACF,IAAI,CAAC,KAAK;gBAAE,OAAM;YAClB,aAAa,CAAC,KAAK,CAAC,CAAA;YACpB,KAAK,GAAG,SAAS,CAAA;QACnB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/lib/request-snapshots.d.ts

@@ -0,0 +1,14 @@
+import type { Logger } from "./logger";
+type SnapshotWriterInput = {
+    enabled: boolean;
+    dir?: string;
+    log?: Logger;
+};
+type SnapshotMeta = Record<string, unknown> | undefined;
+export type RequestSnapshots = {
+    captureRequest: (stage: string, request: Request, meta?: SnapshotMeta) => Promise<void>;
+    captureResponse: (stage: string, response: Response, meta?: SnapshotMeta) => Promise<void>;
+};
+export declare function createRequestSnapshots(input: SnapshotWriterInput): RequestSnapshots;
+export {};
+//# sourceMappingURL=request-snapshots.d.ts.map

package/dist/lib/request-snapshots.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-snapshots.d.ts","sourceRoot":"","sources":["../../lib/request-snapshots.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AAmDtC,KAAK,mBAAmB,GAAG;IACzB,OAAO,EAAE,OAAO,CAAA;IAChB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;CACb,CAAA;AAED,KAAK,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAA;AAQvD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACvF,eAAe,EAAE,CACf,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,QAAQ,EAClB,IAAI,CAAC,EAAE,YAAY,KAChB,OAAO,CAAC,IAAI,CAAC,CAAA;CACnB,CAAA;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,mBAAmB,GAAG,gBAAgB,CA0FnF"}

package/dist/lib/request-snapshots.js

@@ -0,0 +1,148 @@
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { randomUUID } from "node:crypto";
+const DEFAULT_LOG_DIR = path.join(os.homedir(), ".config", "opencode", "logs", "codex-plugin");
+const REDACTED = "[redacted]";
+const REDACTED_HEADERS = new Set(["authorization", "cookie", "set-cookie", "proxy-authorization"]);
+const REDACTED_BODY_KEYS = new Set(["access_token", "refresh_token", "id_token", "authorization"]);
+const LIVE_HEADERS_LOG_FILE = "live-headers.jsonl";
+function sanitizeHeaderValue(name, value) {
+    const lower = name.toLowerCase();
+    if (!REDACTED_HEADERS.has(lower))
+        return value;
+    if (lower === "authorization") {
+        const [scheme] = value.split(" ");
+        return scheme ? `${scheme} ${REDACTED}` : REDACTED;
+    }
+    return REDACTED;
+}
+function sanitizeHeaders(headers) {
+    const out = {};
+    for (const [name, value] of headers.entries()) {
+        out[name.toLowerCase()] = sanitizeHeaderValue(name, value);
+    }
+    return Object.fromEntries(Object.entries(out).sort(([a], [b]) => a.localeCompare(b)));
+}
+function sanitizeBodyValue(value) {
+    if (Array.isArray(value))
+        return value.map((entry) => sanitizeBodyValue(entry));
+    if (!value || typeof value !== "object")
+        return value;
+    const out = {};
+    for (const [key, entry] of Object.entries(value)) {
+        out[key] = REDACTED_BODY_KEYS.has(key.toLowerCase()) ? REDACTED : sanitizeBodyValue(entry);
+    }
+    return out;
+}
+async function serializeRequestBody(request) {
+    try {
+        const raw = await request.clone().text();
+        if (!raw)
+            return undefined;
+        try {
+            return sanitizeBodyValue(JSON.parse(raw));
+        }
+        catch {
+            return raw.length > 8000 ? `${raw.slice(0, 8000)}... [truncated]` : raw;
+        }
+    }
+    catch {
+        return undefined;
+    }
+}
+function getPromptCacheKey(body) {
+    if (!body || typeof body !== "object" || Array.isArray(body))
+        return undefined;
+    const candidate = body.prompt_cache_key;
+    return typeof candidate === "string" && candidate.length > 0 ? candidate : undefined;
+}
+export function createRequestSnapshots(input) {
+    if (!input.enabled) {
+        return {
+            captureRequest: async () => { },
+            captureResponse: async () => { }
+        };
+    }
+    const dir = input.dir ?? DEFAULT_LOG_DIR;
+    const runId = `${new Date().toISOString().replace(/[:.]/g, "-")}-${process.pid}-${randomUUID().slice(0, 8)}`;
+    let requestCounter = 0;
+    let responseCounter = 0;
+    const ensureDir = async () => {
+        await fs.mkdir(dir, { recursive: true });
+    };
+    const writeJson = async (fileName, payload) => {
+        try {
+            await ensureDir();
+            const filePath = path.join(dir, `${runId}-${fileName}`);
+            await fs.writeFile(filePath, `${JSON.stringify(payload, null, 2)}\n`, { mode: 0o600 });
+        }
+        catch (error) {
+            input.log?.warn("failed to write request snapshot", {
+                fileName,
+                error: error instanceof Error ? error.message : String(error)
+            });
+        }
+    };
+    const appendJsonl = async (fileName, payload) => {
+        try {
+            await ensureDir();
+            const filePath = path.join(dir, fileName);
+            await fs.appendFile(filePath, `${JSON.stringify(payload)}\n`, { mode: 0o600 });
+        }
+        catch (error) {
+            input.log?.warn("failed to append request snapshot line", {
+                fileName,
+                error: error instanceof Error ? error.message : String(error)
+            });
+        }
+    };
+    return {
+        captureRequest: async (stage, request, meta) => {
+            const requestId = ++requestCounter;
+            const timestamp = new Date().toISOString();
+            const body = await serializeRequestBody(request);
+            const headers = sanitizeHeaders(request.headers);
+            const payload = {
+                timestamp,
+                runId,
+                requestId,
+                stage,
+                method: request.method,
+                url: request.url,
+                headers,
+                body,
+                ...(meta ?? {})
+            };
+            await writeJson(`request-${requestId}-${stage}.json`, {
+                ...payload
+            });
+            await appendJsonl(LIVE_HEADERS_LOG_FILE, {
+                timestamp,
+                runId,
+                requestId,
+                stage,
+                method: request.method,
+                url: request.url,
+                headers,
+                prompt_cache_key: getPromptCacheKey(body),
+                ...(meta ?? {})
+            });
+        },
+        captureResponse: async (stage, response, meta) => {
+            const responseId = ++responseCounter;
+            const timestamp = new Date().toISOString();
+            await writeJson(`response-${responseId}-${stage}.json`, {
+                timestamp,
+                runId,
+                responseId,
+                stage,
+                status: response.status,
+                statusText: response.statusText,
+                headers: sanitizeHeaders(response.headers),
+                ...(meta ?? {})
+            });
+        }
+    };
+}
+//# sourceMappingURL=request-snapshots.js.map

package/dist/lib/request-snapshots.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-snapshots.js","sourceRoot":"","sources":["../../lib/request-snapshots.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACjC,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAIxC,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,CAAC,CAAA;AAC9F,MAAM,QAAQ,GAAG,YAAY,CAAA;AAC7B,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE,qBAAqB,CAAC,CAAC,CAAA;AAClG,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,eAAe,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC,CAAA;AAClG,MAAM,qBAAqB,GAAG,oBAAoB,CAAA;AAElD,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAa;IACtD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;IAChC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAC9C,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACjC,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAA;IACpD,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB;IACvC,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9C,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IAC5D,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AACvF,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAA;IAC/E,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAErD,MAAM,GAAG,GAA4B,EAAE,CAAA;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;IAC5F,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,OAAgB;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAA;QACxC,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAA;QAC1B,IAAI,CAAC;YACH,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAA;QACzE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAUD,SAAS,iBAAiB,CAAC,IAAa;IACtC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAA;IAC9E,MAAM,SAAS,GAAI,IAAgC,CAAC,gBAAgB,CAAA;IACpE,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;AACtF,CAAC;AAWD,MAAM,UAAU,sBAAsB,CAAC,KAA0B;IAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO;YACL,cAAc,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;YAC9B,eAAe,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;SAChC,CAAA;IACH,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,eAAe,CAAA;IACxC,MAAM,KAAK,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;IAC5G,IAAI,cAAc,GAAG,CAAC,CAAA;IACtB,IAAI,eAAe,GAAG,CAAC,CAAA;IAEvB,MAAM,SAAS,GAAG,KAAK,IAAmB,EAAE;QAC1C,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1C,CAAC,CAAA;IAED,MAAM,SAAS,GAAG,KAAK,EAAE,QAAgB,EAAE,OAAgC,EAAiB,EAAE;QAC5F,IAAI,CAAC;YACH,MAAM,SAAS,EAAE,CAAA;YACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,QAAQ,EAAE,CAAC,CAAA;YACvD,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACxF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,kCAAkC,EAAE;gBAClD,QAAQ;gBACR,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAA;QACJ,CAAC;IACH,CAAC,CAAA;IAED,MAAM,WAAW,GAAG,KAAK,EAAE,QAAgB,EAAE,OAAgC,EAAiB,EAAE;QAC9F,IAAI,CAAC;YACH,MAAM,SAAS,EAAE,CAAA;YACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;YACzC,MAAM,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAChF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,wCAAwC,EAAE;gBACxD,QAAQ;gBACR,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAA;QACJ,CAAC;IACH,CAAC,CAAA;IAED,OAAO;QACL,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAC7C,MAAM,SAAS,GAAG,EAAE,cAAc,CAAA;YAClC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;YAC1C,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAA;YAChD,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;YAChD,MAAM,OAAO,GAAG;gBACd,SAAS;gBACT,KAAK;gBACL,SAAS;gBACT,KAAK;gBACL,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,OAAO;gBACP,IAAI;gBACJ,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;aAChB,CAAA;YACD,MAAM,SAAS,CAAC,WAAW,SAAS,IAAI,KAAK,OAAO,EAAE;gBACpD,GAAG,OAAO;aACX,CAAC,CAAA;YACF,MAAM,WAAW,CAAC,qBAAqB,EAAE;gBACvC,SAAS;gBACT,KAAK;gBACL,SAAS;gBACT,KAAK;gBACL,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,OAAO;gBACP,gBAAgB,EAAE,iBAAiB,CAAC,IAAI,CAAC;gBACzC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;aAChB,CAAC,CAAA;QACJ,CAAC;QACD,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;YAC/C,MAAM,UAAU,GAAG,EAAE,eAAe,CAAA;YACpC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;YAC1C,MAAM,SAAS,CAAC,YAAY,UAAU,IAAI,KAAK,OAAO,EAAE;gBACtD,SAAS;gBACT,KAAK;gBACL,UAAU;gBACV,KAAK;gBACL,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,OAAO,EAAE,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC1C,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;aAChB,CAAC,CAAA;QACJ,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/lib/rotation.d.ts

@@ -0,0 +1,29 @@
+import type { AccountRecord, RotationStrategy } from "./types";
+export type StickySessionState = {
+    bySessionKey: Map<string, string>;
+    cursor: number;
+    maxEntries?: number;
+};
+export declare function createStickySessionState(maxEntries?: number): StickySessionState;
+export type SelectAccountInput = {
+    accounts: AccountRecord[];
+    strategy?: RotationStrategy;
+    activeIdentityKey?: string;
+    now: number;
+    stickyPidOffset?: boolean;
+    pid?: number;
+    stickySessionKey?: string | null;
+    stickySessionState?: StickySessionState;
+    onDebug?: (event: RotationDebugEvent) => void;
+};
+export type RotationDebugEvent = {
+    strategy: RotationStrategy;
+    decision: "none-eligible" | "sticky-session-reuse" | "sticky-session-assign" | "sticky-fallback-first" | "sticky-active" | "sticky-pid-offset" | "hybrid-session-reuse" | "hybrid-session-assign" | "hybrid-active" | "hybrid-lru" | "round-robin-next" | "round-robin-pid-offset";
+    selectedIdentityKey?: string;
+    activeIdentityKey?: string;
+    sessionKey?: string;
+    eligibleCount: number;
+    extra?: Record<string, unknown>;
+};
+export declare function selectAccount(input: SelectAccountInput): AccountRecord | undefined;
+//# sourceMappingURL=rotation.d.ts.map

package/dist/lib/rotation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rotation.d.ts","sourceRoot":"","sources":["../../lib/rotation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAI9D,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAED,wBAAgB,wBAAwB,CAAC,UAAU,SAAiC,GAAG,kBAAkB,CAMxG;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,EAAE,aAAa,EAAE,CAAA;IACzB,QAAQ,CAAC,EAAE,gBAAgB,CAAA;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,GAAG,EAAE,MAAM,CAAA;IACX,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;IACvC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,CAAA;CAC9C,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,EAAE,gBAAgB,CAAA;IAC1B,QAAQ,EACJ,eAAe,GACf,sBAAsB,GACtB,uBAAuB,GACvB,uBAAuB,GACvB,eAAe,GACf,mBAAmB,GACnB,sBAAsB,GACtB,uBAAuB,GACvB,eAAe,GACf,YAAY,GACZ,kBAAkB,GAClB,wBAAwB,CAAA;IAC5B,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAChC,CAAA;AAoID,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GACnD,aAAa,GACb,SAAS,CA2HZ"}