@iam-brain/opencode-codex-auth 0.3.1 → 1.0.0

package/dist/lib/codex-native/auth-menu-flow.js

@@ -0,0 +1,304 @@
+import { extractEmailFromClaims, extractPlanFromClaims, parseJwtClaims } from "../claims";
+import { toolOutputForStatus } from "../codex-status-tool";
+import { buildIdentityKey, ensureIdentityKey } from "../identity";
+import { ensureOpenAIOAuthDomain, getOpenAIOAuthDomain, importLegacyInstallData, loadAuthStorage, saveAuthStorage, shouldOfferLegacyTransfer } from "../storage";
+import { runAuthMenuOnce } from "../ui/auth-menu-runner";
+import { shouldUseColor } from "../ui/tty/ansi";
+import { buildAuthMenuAccounts, ensureAccountAuthTypes, findDomainAccountIndex, hydrateAccountIdentityFromAccessClaims, reconcileActiveIdentityKey } from "./accounts";
+import { extractAccountId, refreshAccessToken } from "./oauth-utils";
+const AUTH_MENU_REFRESH_LEASE_MS = 30_000;
+export async function runInteractiveAuthMenu(input) {
+    while (true) {
+        const auth = await loadAuthStorage();
+        const nativeDomain = getOpenAIOAuthDomain(auth, "native");
+        const codexDomain = getOpenAIOAuthDomain(auth, "codex");
+        const menuAccounts = buildAuthMenuAccounts({
+            native: nativeDomain,
+            codex: codexDomain,
+            activeMode: input.authMode
+        });
+        const allowTransfer = await shouldOfferLegacyTransfer();
+        const result = await runAuthMenuOnce({
+            accounts: menuAccounts,
+            allowTransfer,
+            input: process.stdin,
+            output: process.stdout,
+            handlers: {
+                onCheckQuotas: async () => {
+                    await input.refreshQuotaSnapshotsForAuthMenu();
+                    const report = await toolOutputForStatus(undefined, undefined, {
+                        style: "menu",
+                        useColor: shouldUseColor()
+                    });
+                    process.stdout.write(`\n${report}\n\n`);
+                },
+                onConfigureModels: async () => {
+                    process.stdout.write("\nConfigure provider models in opencode.json and runtime flags in codex-config.json.\n\n");
+                },
+                onTransfer: async () => {
+                    const transfer = await importLegacyInstallData();
+                    let hydrated = 0;
+                    let refreshed = 0;
+                    const refreshClaims = [];
+                    await saveAuthStorage(undefined, (authFile) => {
+                        for (const mode of ["native", "codex"]) {
+                            const domain = getOpenAIOAuthDomain(authFile, mode);
+                            if (!domain)
+                                continue;
+                            for (let index = 0; index < domain.accounts.length; index += 1) {
+                                const account = domain.accounts[index];
+                                if (!account)
+                                    continue;
+                                const hadIdentity = Boolean(buildIdentityKey(account));
+                                hydrateAccountIdentityFromAccessClaims(account);
+                                const hasIdentityAfterClaims = Boolean(buildIdentityKey(account));
+                                if (!hadIdentity && hasIdentityAfterClaims)
+                                    hydrated += 1;
+                                if (hasIdentityAfterClaims || account.enabled === false || !account.refresh) {
+                                    continue;
+                                }
+                                const now = Date.now();
+                                if (typeof account.refreshLeaseUntil === "number" && account.refreshLeaseUntil > now) {
+                                    continue;
+                                }
+                                const leaseUntil = now + AUTH_MENU_REFRESH_LEASE_MS;
+                                account.refreshLeaseUntil = leaseUntil;
+                                if (account.expires && account.expires > now)
+                                    continue;
+                                refreshClaims.push({
+                                    mode,
+                                    identityKey: account.identityKey,
+                                    refreshToken: account.refresh,
+                                    leaseUntil
+                                });
+                            }
+                        }
+                        return authFile;
+                    });
+                    for (const claim of refreshClaims) {
+                        try {
+                            const tokens = await refreshAccessToken(claim.refreshToken);
+                            await saveAuthStorage(undefined, (authFile) => {
+                                const domain = getOpenAIOAuthDomain(authFile, claim.mode);
+                                if (!domain)
+                                    return authFile;
+                                const account = domain.accounts.find((entry) => entry.refreshLeaseUntil === claim.leaseUntil &&
+                                    entry.refresh === claim.refreshToken &&
+                                    (!claim.identityKey || entry.identityKey === claim.identityKey));
+                                if (!account)
+                                    return authFile;
+                                const now = Date.now();
+                                if (account.enabled === false ||
+                                    typeof account.refreshLeaseUntil !== "number" ||
+                                    account.refreshLeaseUntil !== claim.leaseUntil ||
+                                    account.refreshLeaseUntil <= now) {
+                                    delete account.refreshLeaseUntil;
+                                    return authFile;
+                                }
+                                const hadIdentity = Boolean(buildIdentityKey(account));
+                                const claims = parseJwtClaims(tokens.id_token ?? tokens.access_token);
+                                account.refresh = tokens.refresh_token;
+                                account.access = tokens.access_token;
+                                account.expires = now + (tokens.expires_in ?? 3600) * 1000;
+                                account.accountId = extractAccountId(tokens) || account.accountId;
+                                account.email = extractEmailFromClaims(claims) || account.email;
+                                account.plan = extractPlanFromClaims(claims) || account.plan;
+                                account.lastUsed = now;
+                                hydrateAccountIdentityFromAccessClaims(account);
+                                if (!hadIdentity && buildIdentityKey(account))
+                                    hydrated += 1;
+                                refreshed += 1;
+                                delete account.refreshLeaseUntil;
+                                delete account.cooldownUntil;
+                                return authFile;
+                            });
+                        }
+                        catch (error) {
+                            await saveAuthStorage(undefined, (authFile) => {
+                                const domain = getOpenAIOAuthDomain(authFile, claim.mode);
+                                if (!domain)
+                                    return authFile;
+                                const account = domain.accounts.find((entry) => entry.refreshLeaseUntil === claim.leaseUntil &&
+                                    entry.refresh === claim.refreshToken &&
+                                    (!claim.identityKey || entry.identityKey === claim.identityKey));
+                                if (!account)
+                                    return authFile;
+                                if (account.refreshLeaseUntil === claim.leaseUntil) {
+                                    delete account.refreshLeaseUntil;
+                                    if (account.enabled !== false) {
+                                        account.cooldownUntil = Date.now() + AUTH_MENU_REFRESH_LEASE_MS;
+                                    }
+                                }
+                                return authFile;
+                            });
+                            if (error instanceof Error) {
+                                // best effort per-account hydration
+                            }
+                        }
+                    }
+                    process.stdout.write(`\nTransfer complete: imported ${transfer.imported} account(s). Hydrated ${hydrated} account(s)` +
+                        `${refreshed > 0 ? `, refreshed ${refreshed} token(s)` : ""}.\n\n`);
+                },
+                onDeleteAll: async (scope) => {
+                    await saveAuthStorage(undefined, (authFile) => {
+                        const targets = scope === "both" ? ["native", "codex"] : [scope];
+                        for (const targetMode of targets) {
+                            const domain = ensureOpenAIOAuthDomain(authFile, targetMode);
+                            domain.accounts = [];
+                            domain.activeIdentityKey = undefined;
+                        }
+                        return authFile;
+                    });
+                    const deletedLabel = scope === "both"
+                        ? "Deleted all OpenAI accounts."
+                        : `Deleted ${scope === "native" ? "Native" : "Codex"} auth from all accounts.`;
+                    process.stdout.write(`\n${deletedLabel}\n\n`);
+                },
+                onToggleAccount: async (account) => {
+                    await saveAuthStorage(undefined, (authFile) => {
+                        const authTypes = account.authTypes && account.authTypes.length > 0 ? [...account.authTypes] : ["native"];
+                        for (const mode of authTypes) {
+                            const domain = getOpenAIOAuthDomain(authFile, mode);
+                            if (!domain)
+                                continue;
+                            const idx = findDomainAccountIndex(domain, account);
+                            if (idx < 0)
+                                continue;
+                            const target = domain.accounts[idx];
+                            if (!target)
+                                continue;
+                            target.enabled = target.enabled === false;
+                            reconcileActiveIdentityKey(domain);
+                        }
+                        return authFile;
+                    });
+                    process.stdout.write("\nUpdated account status.\n\n");
+                },
+                onRefreshAccount: async (account) => {
+                    let refreshed = false;
+                    const preferred = [
+                        input.authMode,
+                        ...(account.authTypes ?? []).filter((mode) => mode !== input.authMode)
+                    ];
+                    for (const mode of preferred) {
+                        let claim;
+                        await saveAuthStorage(undefined, (authFile) => {
+                            const domain = getOpenAIOAuthDomain(authFile, mode);
+                            if (!domain)
+                                return authFile;
+                            const idx = findDomainAccountIndex(domain, account);
+                            if (idx < 0)
+                                return authFile;
+                            const target = domain.accounts[idx];
+                            if (!target || target.enabled === false || !target.refresh || !target.identityKey)
+                                return authFile;
+                            const now = Date.now();
+                            if (typeof target.refreshLeaseUntil === "number" && target.refreshLeaseUntil > now)
+                                return authFile;
+                            const leaseUntil = now + AUTH_MENU_REFRESH_LEASE_MS;
+                            target.refreshLeaseUntil = leaseUntil;
+                            claim = {
+                                mode,
+                                identityKey: target.identityKey,
+                                refreshToken: target.refresh,
+                                leaseUntil
+                            };
+                            return authFile;
+                        });
+                        if (!claim)
+                            continue;
+                        const claimed = claim;
+                        try {
+                            const tokens = await refreshAccessToken(claimed.refreshToken);
+                            await saveAuthStorage(undefined, (authFile) => {
+                                const domain = getOpenAIOAuthDomain(authFile, claimed.mode);
+                                if (!domain)
+                                    return authFile;
+                                const target = domain.accounts.find((entry) => entry.identityKey === claimed.identityKey);
+                                if (!target)
+                                    return authFile;
+                                const now = Date.now();
+                                if (target.enabled === false ||
+                                    typeof target.refreshLeaseUntil !== "number" ||
+                                    target.refreshLeaseUntil !== claimed.leaseUntil ||
+                                    target.refreshLeaseUntil <= now) {
+                                    delete target.refreshLeaseUntil;
+                                    return authFile;
+                                }
+                                const claims = parseJwtClaims(tokens.id_token ?? tokens.access_token);
+                                target.refresh = tokens.refresh_token;
+                                target.access = tokens.access_token;
+                                target.expires = now + (tokens.expires_in ?? 3600) * 1000;
+                                target.accountId = extractAccountId(tokens) || target.accountId;
+                                target.email = extractEmailFromClaims(claims) || target.email;
+                                target.plan = extractPlanFromClaims(claims) || target.plan;
+                                target.lastUsed = now;
+                                ensureAccountAuthTypes(target);
+                                ensureIdentityKey(target);
+                                if (target.identityKey)
+                                    domain.activeIdentityKey = target.identityKey;
+                                delete target.refreshLeaseUntil;
+                                delete target.cooldownUntil;
+                                refreshed = true;
+                                return authFile;
+                            });
+                        }
+                        catch (error) {
+                            await saveAuthStorage(undefined, (authFile) => {
+                                const domain = getOpenAIOAuthDomain(authFile, claimed.mode);
+                                if (!domain)
+                                    return authFile;
+                                const target = domain.accounts.find((entry) => entry.identityKey === claimed.identityKey);
+                                if (!target)
+                                    return authFile;
+                                if (target.refreshLeaseUntil === claimed.leaseUntil) {
+                                    delete target.refreshLeaseUntil;
+                                    if (target.enabled !== false) {
+                                        target.cooldownUntil = Date.now() + AUTH_MENU_REFRESH_LEASE_MS;
+                                    }
+                                }
+                                return authFile;
+                            });
+                            if (error instanceof Error) {
+                                // keep UI response simple; surface generic failure text below
+                            }
+                        }
+                        if (refreshed)
+                            break;
+                    }
+                    process.stdout.write(refreshed
+                        ? "\nAccount refreshed successfully.\n\n"
+                        : "\nAccount refresh failed. Run login to reauthenticate.\n\n");
+                },
+                onDeleteAccount: async (account, scope) => {
+                    await saveAuthStorage(undefined, (authFile) => {
+                        const targets = scope === "both" ? ["native", "codex"] : [scope];
+                        for (const mode of targets) {
+                            const domain = getOpenAIOAuthDomain(authFile, mode);
+                            if (!domain)
+                                continue;
+                            const idx = findDomainAccountIndex(domain, account);
+                            if (idx < 0)
+                                continue;
+                            domain.accounts.splice(idx, 1);
+                            reconcileActiveIdentityKey(domain);
+                        }
+                        return authFile;
+                    });
+                    const deletedLabel = scope === "both"
+                        ? "Deleted account."
+                        : `Deleted ${scope === "native" ? "Native" : "Codex"} auth from account.`;
+                    process.stdout.write(`\n${deletedLabel}\n\n`);
+                }
+            }
+        });
+        if (result === "add")
+            return "add";
+        if (result === "exit") {
+            if (input.allowExit)
+                return "exit";
+            continue;
+        }
+    }
+}
+//# sourceMappingURL=auth-menu-flow.js.map

package/dist/lib/codex-native/auth-menu-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-menu-flow.js","sourceRoot":"","sources":["../../../lib/codex-native/auth-menu-flow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AACzF,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AACjE,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,EACvB,eAAe,EACf,eAAe,EACf,yBAAyB,EAC1B,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,sCAAsC,EACtC,0BAA0B,EAC3B,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAA;AAQpE,MAAM,0BAA0B,GAAG,MAAM,CAAA;AAEzC,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAkC;IAC7E,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,eAAe,EAAE,CAAA;QACpC,MAAM,YAAY,GAAG,oBAAoB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QACzD,MAAM,WAAW,GAAG,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACvD,MAAM,YAAY,GAAG,qBAAqB,CAAC;YACzC,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,WAAW;YAClB,UAAU,EAAE,KAAK,CAAC,QAAQ;SAC3B,CAAC,CAAA;QACF,MAAM,aAAa,GAAG,MAAM,yBAAyB,EAAE,CAAA;QAEvD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YACnC,QAAQ,EAAE,YAAY;YACtB,aAAa;YACb,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE;gBACR,aAAa,EAAE,KAAK,IAAI,EAAE;oBACxB,MAAM,KAAK,CAAC,gCAAgC,EAAE,CAAA;oBAC9C,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,SAAS,EAAE,SAAS,EAAE;wBAC7D,KAAK,EAAE,MAAM;wBACb,QAAQ,EAAE,cAAc,EAAE;qBAC3B,CAAC,CAAA;oBACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,MAAM,CAAC,CAAA;gBACzC,CAAC;gBACD,iBAAiB,EAAE,KAAK,IAAI,EAAE;oBAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0FAA0F,CAC3F,CAAA;gBACH,CAAC;gBACD,UAAU,EAAE,KAAK,IAAI,EAAE;oBACrB,MAAM,QAAQ,GAAG,MAAM,uBAAuB,EAAE,CAAA;oBAChD,IAAI,QAAQ,GAAG,CAAC,CAAA;oBAChB,IAAI,SAAS,GAAG,CAAC,CAAA;oBACjB,MAAM,aAAa,GAKd,EAAE,CAAA;oBAEP,MAAM,eAAe,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;wBAC5C,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAU,EAAE,CAAC;4BAChD,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;4BACnD,IAAI,CAAC,MAAM;gCAAE,SAAQ;4BAErB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;gCAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;gCACtC,IAAI,CAAC,OAAO;oCAAE,SAAQ;gCACtB,MAAM,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAA;gCACtD,sCAAsC,CAAC,OAAO,CAAC,CAAA;gCAC/C,MAAM,sBAAsB,GAAG,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAA;gCACjE,IAAI,CAAC,WAAW,IAAI,sBAAsB;oCAAE,QAAQ,IAAI,CAAC,CAAA;gCAEzD,IAAI,sBAAsB,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;oCAC5E,SAAQ;gCACV,CAAC;gCACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;gCACtB,IAAI,OAAO,OAAO,CAAC,iBAAiB,KAAK,QAAQ,IAAI,OAAO,CAAC,iBAAiB,GAAG,GAAG,EAAE,CAAC;oCACrF,SAAQ;gCACV,CAAC;gCACD,MAAM,UAAU,GAAG,GAAG,GAAG,0BAA0B,CAAA;gCACnD,OAAO,CAAC,iBAAiB,GAAG,UAAU,CAAA;gCACtC,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,GAAG,GAAG;oCAAE,SAAQ;gCACtD,aAAa,CAAC,IAAI,CAAC;oCACjB,IAAI;oCACJ,WAAW,EAAE,OAAO,CAAC,WAAW;oCAChC,YAAY,EAAE,OAAO,CAAC,OAAO;oCAC7B,UAAU;iCACX,CAAC,CAAA;4BACJ,CAAC;wBACH,CAAC;wBACD,OAAO,QAAQ,CAAA;oBACjB,CAAC,CAAC,CAAA;oBAEF,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;wBAClC,IAAI,CAAC;4BACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;4BAC3D,MAAM,eAAe,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;gCAC5C,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;gCACzD,IAAI,CAAC,MAAM;oCAAE,OAAO,QAAQ,CAAA;gCAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAClC,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,iBAAiB,KAAK,KAAK,CAAC,UAAU;oCAC5C,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,YAAY;oCACpC,CAAC,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CAAC,CAClE,CAAA;gCACD,IAAI,CAAC,OAAO;oCAAE,OAAO,QAAQ,CAAA;gCAE7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;gCACtB,IACE,OAAO,CAAC,OAAO,KAAK,KAAK;oCACzB,OAAO,OAAO,CAAC,iBAAiB,KAAK,QAAQ;oCAC7C,OAAO,CAAC,iBAAiB,KAAK,KAAK,CAAC,UAAU;oCAC9C,OAAO,CAAC,iBAAiB,IAAI,GAAG,EAChC,CAAC;oCACD,OAAO,OAAO,CAAC,iBAAiB,CAAA;oCAChC,OAAO,QAAQ,CAAA;gCACjB,CAAC;gCAED,MAAM,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAA;gCACtD,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,YAAY,CAAC,CAAA;gCACrE,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,aAAa,CAAA;gCACtC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,YAAY,CAAA;gCACpC,OAAO,CAAC,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,IAAI,CAAA;gCAC1D,OAAO,CAAC,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,SAAS,CAAA;gCACjE,OAAO,CAAC,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,CAAA;gCAC/D,OAAO,CAAC,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAA;gCAC5D,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAA;gCACtB,sCAAsC,CAAC,OAAO,CAAC,CAAA;gCAC/C,IAAI,CAAC,WAAW,IAAI,gBAAgB,CAAC,OAAO,CAAC;oCAAE,QAAQ,IAAI,CAAC,CAAA;gCAC5D,SAAS,IAAI,CAAC,CAAA;gCACd,OAAO,OAAO,CAAC,iBAAiB,CAAA;gCAChC,OAAO,OAAO,CAAC,aAAa,CAAA;gCAC5B,OAAO,QAAQ,CAAA;4BACjB,CAAC,CAAC,CAAA;wBACJ,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,MAAM,eAAe,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;gCAC5C,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;gCACzD,IAAI,CAAC,MAAM;oCAAE,OAAO,QAAQ,CAAA;gCAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAClC,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,iBAAiB,KAAK,KAAK,CAAC,UAAU;oCAC5C,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,YAAY;oCACpC,CAAC,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CAAC,CAClE,CAAA;gCACD,IAAI,CAAC,OAAO;oCAAE,OAAO,QAAQ,CAAA;gCAC7B,IAAI,OAAO,CAAC,iBAAiB,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;oCACnD,OAAO,OAAO,CAAC,iBAAiB,CAAA;oCAChC,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;wCAC9B,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,0BAA0B,CAAA;oCACjE,CAAC;gCACH,CAAC;gCACD,OAAO,QAAQ,CAAA;4BACjB,CAAC,CAAC,CAAA;4BACF,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;gCAC3B,oCAAoC;4BACtC,CAAC;wBACH,CAAC;oBACH,CAAC;oBAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iCAAiC,QAAQ,CAAC,QAAQ,yBAAyB,QAAQ,aAAa;wBAC9F,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,SAAS,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,CACrE,CAAA;gBACH,CAAC;gBACD,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;oBAC3B,MAAM,eAAe,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;wBAC5C,MAAM,OAAO,GAAG,KAAK,KAAK,MAAM,CAAC,CAAC,CAAE,CAAC,QAAQ,EAAE,OAAO,CAAW,CAAC,CAAC,CAAE,CAAC,KAAK,CAAW,CAAA;wBACtF,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE,CAAC;4BACjC,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;4BAC5D,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAA;4BACpB,MAAM,CAAC,iBAAiB,GAAG,SAAS,CAAA;wBACtC,CAAC;wBACD,OAAO,QAAQ,CAAA;oBACjB,CAAC,CAAC,CAAA;oBACF,MAAM,YAAY,GAChB,KAAK,KAAK,MAAM;wBACd,CAAC,CAAC,8BAA8B;wBAChC,CAAC,CAAC,WAAW,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,0BAA0B,CAAA;oBAClF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,YAAY,MAAM,CAAC,CAAA;gBAC/C,CAAC;gBACD,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;oBACjC,MAAM,eAAe,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;wBAC5C,MAAM,SAAS,GACb,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;wBACzF,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;4BAC7B,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;4BACnD,IAAI,CAAC,MAAM;gCAAE,SAAQ;4BACrB,MAAM,GAAG,GAAG,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;4BACnD,IAAI,GAAG,GAAG,CAAC;gCAAE,SAAQ;4BACrB,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;4BACnC,IAAI,CAAC,MAAM;gCAAE,SAAQ;4BACrB,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,KAAK,KAAK,CAAA;4BACzC,0BAA0B,CAAC,MAAM,CAAC,CAAA;wBACpC,CAAC;wBACD,OAAO,QAAQ,CAAA;oBACjB,CAAC,CAAC,CAAA;oBACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAA;gBACvD,CAAC;gBACD,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;oBAClC,IAAI,SAAS,GAAG,KAAK,CAAA;oBACrB,MAAM,SAAS,GAAG;wBAChB,KAAK,CAAC,QAAQ;wBACd,GAAI,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,CAAsB;qBAC7F,CAAA;oBAED,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;wBAC7B,IAAI,KAOS,CAAA;wBAEb,MAAM,eAAe,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;4BAC5C,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;4BACnD,IAAI,CAAC,MAAM;gCAAE,OAAO,QAAQ,CAAA;4BAC5B,MAAM,GAAG,GAAG,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;4BACnD,IAAI,GAAG,GAAG,CAAC;gCAAE,OAAO,QAAQ,CAAA;4BAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;4BACnC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW;gCAAE,OAAO,QAAQ,CAAA;4BAElG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;4BACtB,IAAI,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ,IAAI,MAAM,CAAC,iBAAiB,GAAG,GAAG;gCAAE,OAAO,QAAQ,CAAA;4BAEnG,MAAM,UAAU,GAAG,GAAG,GAAG,0BAA0B,CAAA;4BACnD,MAAM,CAAC,iBAAiB,GAAG,UAAU,CAAA;4BACrC,KAAK,GAAG;gCACN,IAAI;gCACJ,WAAW,EAAE,MAAM,CAAC,WAAW;gCAC/B,YAAY,EAAE,MAAM,CAAC,OAAO;gCAC5B,UAAU;6BACX,CAAA;4BACD,OAAO,QAAQ,CAAA;wBACjB,CAAC,CAAC,CAAA;wBAEF,IAAI,CAAC,KAAK;4BAAE,SAAQ;wBACpB,MAAM,OAAO,GAAG,KAAK,CAAA;wBAErB,IAAI,CAAC;4BACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;4BAC7D,MAAM,eAAe,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;gCAC5C,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;gCAC3D,IAAI,CAAC,MAAM;oCAAE,OAAO,QAAQ,CAAA;gCAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,CAAC,CAAA;gCACzF,IAAI,CAAC,MAAM;oCAAE,OAAO,QAAQ,CAAA;gCAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;gCACtB,IACE,MAAM,CAAC,OAAO,KAAK,KAAK;oCACxB,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ;oCAC5C,MAAM,CAAC,iBAAiB,KAAK,OAAO,CAAC,UAAU;oCAC/C,MAAM,CAAC,iBAAiB,IAAI,GAAG,EAC/B,CAAC;oCACD,OAAO,MAAM,CAAC,iBAAiB,CAAA;oCAC/B,OAAO,QAAQ,CAAA;gCACjB,CAAC;gCAED,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,YAAY,CAAC,CAAA;gCACrE,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,aAAa,CAAA;gCACrC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,YAAY,CAAA;gCACnC,MAAM,CAAC,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,IAAI,CAAA;gCACzD,MAAM,CAAC,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,CAAA;gCAC/D,MAAM,CAAC,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAA;gCAC7D,MAAM,CAAC,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAA;gCAC1D,MAAM,CAAC,QAAQ,GAAG,GAAG,CAAA;gCACrB,sBAAsB,CAAC,MAAM,CAAC,CAAA;gCAC9B,iBAAiB,CAAC,MAAM,CAAC,CAAA;gCACzB,IAAI,MAAM,CAAC,WAAW;oCAAE,MAAM,CAAC,iBAAiB,GAAG,MAAM,CAAC,WAAW,CAAA;gCACrE,OAAO,MAAM,CAAC,iBAAiB,CAAA;gCAC/B,OAAO,MAAM,CAAC,aAAa,CAAA;gCAC3B,SAAS,GAAG,IAAI,CAAA;gCAChB,OAAO,QAAQ,CAAA;4BACjB,CAAC,CAAC,CAAA;wBACJ,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,MAAM,eAAe,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;gCAC5C,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;gCAC3D,IAAI,CAAC,MAAM;oCAAE,OAAO,QAAQ,CAAA;gCAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,CAAC,CAAA;gCACzF,IAAI,CAAC,MAAM;oCAAE,OAAO,QAAQ,CAAA;gCAC5B,IAAI,MAAM,CAAC,iBAAiB,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;oCACpD,OAAO,MAAM,CAAC,iBAAiB,CAAA;oCAC/B,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;wCAC7B,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,0BAA0B,CAAA;oCAChE,CAAC;gCACH,CAAC;gCACD,OAAO,QAAQ,CAAA;4BACjB,CAAC,CAAC,CAAA;4BACF,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;gCAC3B,8DAA8D;4BAChE,CAAC;wBACH,CAAC;wBAED,IAAI,SAAS;4BAAE,MAAK;oBACtB,CAAC;oBACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,SAAS;wBACP,CAAC,CAAC,uCAAuC;wBACzC,CAAC,CAAC,4DAA4D,CACjE,CAAA;gBACH,CAAC;gBACD,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;oBACxC,MAAM,eAAe,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;wBAC5C,MAAM,OAAO,GAAG,KAAK,KAAK,MAAM,CAAC,CAAC,CAAE,CAAC,QAAQ,EAAE,OAAO,CAAW,CAAC,CAAC,CAAE,CAAC,KAAK,CAAW,CAAA;wBACtF,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;4BAC3B,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;4BACnD,IAAI,CAAC,MAAM;gCAAE,SAAQ;4BACrB,MAAM,GAAG,GAAG,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;4BACnD,IAAI,GAAG,GAAG,CAAC;gCAAE,SAAQ;4BACrB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;4BAC9B,0BAA0B,CAAC,MAAM,CAAC,CAAA;wBACpC,CAAC;wBACD,OAAO,QAAQ,CAAA;oBACjB,CAAC,CAAC,CAAA;oBACF,MAAM,YAAY,GAChB,KAAK,KAAK,MAAM;wBACd,CAAC,CAAC,kBAAkB;wBACpB,CAAC,CAAC,WAAW,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,qBAAqB,CAAA;oBAC7E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,YAAY,MAAM,CAAC,CAAA;gBAC/C,CAAC;aACF;SACF,CAAC,CAAA;QAEF,IAAI,MAAM,KAAK,KAAK;YAAE,OAAO,KAAK,CAAA;QAClC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,IAAI,KAAK,CAAC,SAAS;gBAAE,OAAO,MAAM,CAAA;YAClC,SAAQ;QACV,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/lib/codex-native/auth-menu-quotas.d.ts

@@ -0,0 +1,9 @@
+import type { CodexSpoofMode } from "../config";
+import type { Logger } from "../logger";
+export type RefreshQuotaSnapshotsInput = {
+    spoofMode: CodexSpoofMode;
+    log?: Logger;
+    cooldownByIdentity: Map<string, number>;
+};
+export declare function refreshQuotaSnapshotsForAuthMenu(input: RefreshQuotaSnapshotsInput): Promise<void>;
+//# sourceMappingURL=auth-menu-quotas.d.ts.map

package/dist/lib/codex-native/auth-menu-quotas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-menu-quotas.d.ts","sourceRoot":"","sources":["../../../lib/codex-native/auth-menu-quotas.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAC/C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AAuIvC,MAAM,MAAM,0BAA0B,GAAG;IACvC,SAAS,EAAE,cAAc,CAAA;IACzB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,kBAAkB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACxC,CAAA;AAgBD,wBAAsB,gCAAgC,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CA+GvG"}

package/dist/lib/codex-native/auth-menu-quotas.js

@@ -0,0 +1,213 @@
+import { extractEmailFromClaims, extractPlanFromClaims, parseJwtClaims } from "../claims";
+import { loadSnapshots, saveSnapshots } from "../codex-status-storage";
+import { fetchQuotaSnapshotFromBackend } from "../codex-quota-fetch";
+import { defaultSnapshotsPath } from "../paths";
+import { resolveRequestUserAgent } from "./client-identity";
+import { resolveCodexOriginator } from "./originator";
+import { hydrateAccountIdentityFromAccessClaims } from "./accounts";
+import { extractAccountId, refreshAccessToken } from "./oauth-utils";
+import { ensureOpenAIOAuthDomain, listOpenAIOAuthDomains, loadAuthStorage, saveAuthStorage } from "../storage";
+const AUTH_MENU_QUOTA_SNAPSHOT_TTL_MS = 60_000;
+const AUTH_MENU_QUOTA_FAILURE_COOLDOWN_MS = 30_000;
+const AUTH_MENU_QUOTA_FETCH_TIMEOUT_MS = 2500;
+const AUTH_MENU_QUOTA_REFRESH_LEASE_MS = 30_000;
+const AUTH_MENU_QUOTA_FETCH_CONCURRENCY = 4;
+async function claimRefreshForQuotaSnapshot(input) {
+    let claim;
+    await saveAuthStorage(undefined, (authFile) => {
+        const domain = ensureOpenAIOAuthDomain(authFile, input.mode);
+        const target = domain.accounts.find((account) => account.identityKey === input.identityKey);
+        if (!target || target.enabled === false || !target.refresh || !target.identityKey)
+            return authFile;
+        const now = Date.now();
+        if (typeof target.refreshLeaseUntil === "number" && target.refreshLeaseUntil > now)
+            return authFile;
+        const leaseUntil = now + AUTH_MENU_QUOTA_REFRESH_LEASE_MS;
+        target.refreshLeaseUntil = leaseUntil;
+        claim = {
+            mode: input.mode,
+            identityKey: target.identityKey,
+            refreshToken: target.refresh,
+            leaseUntil
+        };
+        return authFile;
+    });
+    return claim;
+}
+async function persistRefreshedTokensForQuotaSnapshot(input) {
+    let nextAccessToken;
+    await saveAuthStorage(undefined, (authFile) => {
+        const domain = ensureOpenAIOAuthDomain(authFile, input.claim.mode);
+        const target = domain.accounts.find((account) => account.identityKey === input.claim.identityKey);
+        if (!target || target.enabled === false)
+            return authFile;
+        const now = Date.now();
+        if (typeof target.refreshLeaseUntil !== "number" ||
+            target.refreshLeaseUntil <= now ||
+            target.refreshLeaseUntil !== input.claim.leaseUntil) {
+            delete target.refreshLeaseUntil;
+            return authFile;
+        }
+        const claims = parseJwtClaims(input.tokens.id_token ?? input.tokens.access_token);
+        target.refresh = input.tokens.refresh_token;
+        target.access = input.tokens.access_token;
+        target.expires = now + (input.tokens.expires_in ?? 3600) * 1000;
+        target.accountId = extractAccountId(input.tokens) || target.accountId;
+        target.email = extractEmailFromClaims(claims) || target.email;
+        target.plan = extractPlanFromClaims(claims) || target.plan;
+        target.lastUsed = now;
+        hydrateAccountIdentityFromAccessClaims(target);
+        delete target.refreshLeaseUntil;
+        delete target.cooldownUntil;
+        input.mirror.refresh = target.refresh;
+        input.mirror.access = target.access;
+        input.mirror.expires = target.expires;
+        input.mirror.accountId = target.accountId;
+        input.mirror.email = target.email;
+        input.mirror.plan = target.plan;
+        input.mirror.identityKey = target.identityKey;
+        nextAccessToken = target.access;
+        return authFile;
+    });
+    return nextAccessToken;
+}
+async function releaseFailedRefreshClaimForQuotaSnapshot(input) {
+    await saveAuthStorage(undefined, (authFile) => {
+        const domain = ensureOpenAIOAuthDomain(authFile, input.claim.mode);
+        const target = domain.accounts.find((account) => account.identityKey === input.claim.identityKey);
+        if (!target)
+            return authFile;
+        if (target.refreshLeaseUntil !== input.claim.leaseUntil)
+            return authFile;
+        delete target.refreshLeaseUntil;
+        if (target.enabled !== false) {
+            target.cooldownUntil = input.now + AUTH_MENU_QUOTA_FAILURE_COOLDOWN_MS;
+        }
+        return authFile;
+    });
+}
+async function runWithConcurrency(items, limit, worker) {
+    if (items.length === 0)
+        return;
+    const concurrency = Math.max(1, Math.min(limit, items.length));
+    let index = 0;
+    const runner = async () => {
+        while (true) {
+            const currentIndex = index;
+            index += 1;
+            if (currentIndex >= items.length)
+                return;
+            const item = items[currentIndex];
+            if (item !== undefined) {
+                await worker(item);
+            }
+        }
+    };
+    await Promise.all(Array.from({ length: concurrency }, () => runner()));
+}
+export async function refreshQuotaSnapshotsForAuthMenu(input) {
+    const auth = await loadAuthStorage();
+    const snapshotPath = defaultSnapshotsPath();
+    const existingSnapshots = await loadSnapshots(snapshotPath).catch(() => ({}));
+    const snapshotUpdates = {};
+    const fetchRequests = [];
+    const refreshCandidates = [];
+    const userAgent = resolveRequestUserAgent(input.spoofMode, resolveCodexOriginator(input.spoofMode));
+    for (const { mode, domain } of listOpenAIOAuthDomains(auth)) {
+        for (let index = 0; index < domain.accounts.length; index += 1) {
+            const account = domain.accounts[index];
+            if (!account || account.enabled === false)
+                continue;
+            hydrateAccountIdentityFromAccessClaims(account);
+            const identityKey = account.identityKey;
+            const now = Date.now();
+            if (identityKey) {
+                const cooldownUntil = input.cooldownByIdentity.get(identityKey);
+                if (typeof cooldownUntil === "number" && cooldownUntil > now)
+                    continue;
+                const existing = existingSnapshots[identityKey];
+                if (existing &&
+                    typeof existing.updatedAt === "number" &&
+                    Number.isFinite(existing.updatedAt) &&
+                    now - existing.updatedAt < AUTH_MENU_QUOTA_SNAPSHOT_TTL_MS) {
+                    continue;
+                }
+            }
+            let accessToken = typeof account.access === "string" && account.access.length > 0 ? account.access : undefined;
+            const expired = typeof account.expires === "number" && Number.isFinite(account.expires) && account.expires <= now;
+            if ((!accessToken || expired) && account.refresh) {
+                if (identityKey) {
+                    refreshCandidates.push({
+                        mode,
+                        identityKey,
+                        mirror: account
+                    });
+                }
+                continue;
+            }
+            if (accessToken && account.identityKey) {
+                fetchRequests.push({
+                    identityKey: account.identityKey,
+                    accessToken,
+                    accountId: account.accountId
+                });
+            }
+        }
+    }
+    await runWithConcurrency(refreshCandidates, AUTH_MENU_QUOTA_FETCH_CONCURRENCY, async (candidate) => {
+        let refreshClaim;
+        try {
+            refreshClaim = await claimRefreshForQuotaSnapshot({ mode: candidate.mode, identityKey: candidate.identityKey });
+            if (!refreshClaim)
+                return;
+            const tokens = await refreshAccessToken(refreshClaim.refreshToken);
+            const persisted = await persistRefreshedTokensForQuotaSnapshot({
+                claim: refreshClaim,
+                tokens,
+                mirror: candidate.mirror
+            });
+            if (!persisted || !candidate.mirror.identityKey)
+                return;
+            fetchRequests.push({
+                identityKey: candidate.mirror.identityKey,
+                accessToken: persisted,
+                accountId: candidate.mirror.accountId
+            });
+        }
+        catch (error) {
+            input.cooldownByIdentity.set(candidate.identityKey, Date.now() + AUTH_MENU_QUOTA_FAILURE_COOLDOWN_MS);
+            if (refreshClaim) {
+                await releaseFailedRefreshClaimForQuotaSnapshot({ claim: refreshClaim, now: Date.now() });
+            }
+            input.log?.debug("quota check refresh failed", {
+                identityKey: candidate.identityKey,
+                mode: candidate.mode,
+                error: error instanceof Error ? error.message : String(error)
+            });
+        }
+    });
+    await runWithConcurrency(fetchRequests, AUTH_MENU_QUOTA_FETCH_CONCURRENCY, async (request) => {
+        const snapshot = await fetchQuotaSnapshotFromBackend({
+            accessToken: request.accessToken,
+            accountId: request.accountId,
+            now: Date.now(),
+            modelFamily: "gpt-5.3-codex",
+            userAgent,
+            log: input.log,
+            timeoutMs: AUTH_MENU_QUOTA_FETCH_TIMEOUT_MS
+        });
+        if (!snapshot) {
+            input.cooldownByIdentity.set(request.identityKey, Date.now() + AUTH_MENU_QUOTA_FAILURE_COOLDOWN_MS);
+            return;
+        }
+        input.cooldownByIdentity.delete(request.identityKey);
+        snapshotUpdates[request.identityKey] = snapshot;
+    });
+    if (Object.keys(snapshotUpdates).length === 0)
+        return;
+    await saveSnapshots(snapshotPath, (current) => ({
+        ...current,
+        ...snapshotUpdates
+    }));
+}
+//# sourceMappingURL=auth-menu-quotas.js.map

package/dist/lib/codex-native/auth-menu-quotas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-menu-quotas.js","sourceRoot":"","sources":["../../../lib/codex-native/auth-menu-quotas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AACzF,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACtE,OAAO,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAA;AAGpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AAG/C,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAA;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AACrD,OAAO,EAAE,sCAAsC,EAAE,MAAM,YAAY,CAAA;AACnE,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAA;AACpE,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAE9G,MAAM,+BAA+B,GAAG,MAAM,CAAA;AAC9C,MAAM,mCAAmC,GAAG,MAAM,CAAA;AAClD,MAAM,gCAAgC,GAAG,IAAI,CAAA;AAC7C,MAAM,gCAAgC,GAAG,MAAM,CAAA;AAC/C,MAAM,iCAAiC,GAAG,CAAC,CAAA;AAS3C,KAAK,UAAU,4BAA4B,CAAC,KAG3C;IACC,IAAI,KAA+B,CAAA;IACnC,MAAM,eAAe,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;QAC5C,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CAAC,CAAA;QAC3F,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,OAAO,QAAQ,CAAA;QAClG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,IAAI,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ,IAAI,MAAM,CAAC,iBAAiB,GAAG,GAAG;YAAE,OAAO,QAAQ,CAAA;QACnG,MAAM,UAAU,GAAG,GAAG,GAAG,gCAAgC,CAAA;QACzD,MAAM,CAAC,iBAAiB,GAAG,UAAU,CAAA;QACrC,KAAK,GAAG;YACN,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,OAAO;YAC5B,UAAU;SACX,CAAA;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC,CAAC,CAAA;IACF,OAAO,KAAK,CAAA;AACd,CAAC;AAED,KAAK,UAAU,sCAAsC,CAAC,KAYrD;IACC,IAAI,eAAmC,CAAA;IACvC,MAAM,eAAe,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;QAC5C,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAClE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;QACjG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK;YAAE,OAAO,QAAQ,CAAA;QAExD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,IACE,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ;YAC5C,MAAM,CAAC,iBAAiB,IAAI,GAAG;YAC/B,MAAM,CAAC,iBAAiB,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,EACnD,CAAC;YACD,OAAO,MAAM,CAAC,iBAAiB,CAAA;YAC/B,OAAO,QAAQ,CAAA;QACjB,CAAC;QAED,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;QACjF,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,aAAa,CAAA;QAC3C,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,YAAY,CAAA;QACzC,MAAM,CAAC,OAAO,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,IAAI,CAAA;QAC/D,MAAM,CAAC,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,CAAA;QACrE,MAAM,CAAC,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAA;QAC7D,MAAM,CAAC,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAA;QAC1D,MAAM,CAAC,QAAQ,GAAG,GAAG,CAAA;QACrB,sCAAsC,CAAC,MAAM,CAAC,CAAA;QAC9C,OAAO,MAAM,CAAC,iBAAiB,CAAA;QAC/B,OAAO,MAAM,CAAC,aAAa,CAAA;QAE3B,KAAK,CAAC,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;QACrC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;QACnC,KAAK,CAAC,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;QACrC,KAAK,CAAC,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;QACzC,KAAK,CAAC,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAA;QACjC,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAA;QAC/B,KAAK,CAAC,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAA;QAC7C,eAAe,GAAG,MAAM,CAAC,MAAM,CAAA;QAC/B,OAAO,QAAQ,CAAA;IACjB,CAAC,CAAC,CAAA;IACF,OAAO,eAAe,CAAA;AACxB,CAAC;AAED,KAAK,UAAU,yCAAyC,CAAC,KAA2C;IAClG,MAAM,eAAe,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;QAC5C,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAClE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;QACjG,IAAI,CAAC,MAAM;YAAE,OAAO,QAAQ,CAAA;QAC5B,IAAI,MAAM,CAAC,iBAAiB,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU;YAAE,OAAO,QAAQ,CAAA;QACxE,OAAO,MAAM,CAAC,iBAAiB,CAAA;QAC/B,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAC7B,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC,GAAG,GAAG,mCAAmC,CAAA;QACxE,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAI,KAAU,EAAE,KAAa,EAAE,MAAkC;IAChG,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAC9B,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;IAC9D,IAAI,KAAK,GAAG,CAAC,CAAA;IAEb,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE;QACxB,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,YAAY,GAAG,KAAK,CAAA;YAC1B,KAAK,IAAI,CAAC,CAAA;YACV,IAAI,YAAY,IAAI,KAAK,CAAC,MAAM;gBAAE,OAAM;YACxC,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,CAAA;YAChC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,MAAM,CAAC,IAAI,CAAC,CAAA;YACpB,CAAC;QACH,CAAC;IACH,CAAC,CAAA;IAED,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;AACxE,CAAC;AAsBD,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,KAAiC;IACtF,MAAM,IAAI,GAAG,MAAM,eAAe,EAAE,CAAA;IACpC,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAA;IAC3C,MAAM,iBAAiB,GAA2C,MAAM,aAAa,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACrH,MAAM,eAAe,GAA2C,EAAE,CAAA;IAClE,MAAM,aAAa,GAA4E,EAAE,CAAA;IACjG,MAAM,iBAAiB,GAAuB,EAAE,CAAA;IAChD,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,CAAC,SAAS,EAAE,sBAAsB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;IAEnG,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;YACtC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK;gBAAE,SAAQ;YAEnD,sCAAsC,CAAC,OAAO,CAAC,CAAA;YAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;YACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACtB,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,aAAa,GAAG,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;gBAC/D,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,GAAG,GAAG;oBAAE,SAAQ;gBACtE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAA;gBAC/C,IACE,QAAQ;oBACR,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ;oBACtC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;oBACnC,GAAG,GAAG,QAAQ,CAAC,SAAS,GAAG,+BAA+B,EAC1D,CAAC;oBACD,SAAQ;gBACV,CAAC;YACH,CAAC;YAED,IAAI,WAAW,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;YAC9G,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,IAAI,GAAG,CAAA;YAEjH,IAAI,CAAC,CAAC,WAAW,IAAI,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACjD,IAAI,WAAW,EAAE,CAAC;oBAChB,iBAAiB,CAAC,IAAI,CAAC;wBACrB,IAAI;wBACJ,WAAW;wBACX,MAAM,EAAE,OAAO;qBAChB,CAAC,CAAA;gBACJ,CAAC;gBACD,SAAQ;YACV,CAAC;YAED,IAAI,WAAW,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBACvC,aAAa,CAAC,IAAI,CAAC;oBACjB,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,WAAW;oBACX,SAAS,EAAE,OAAO,CAAC,SAAS;iBAC7B,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,kBAAkB,CAAC,iBAAiB,EAAE,iCAAiC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;QACjG,IAAI,YAAsC,CAAA;QAC1C,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,4BAA4B,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAA;YAC/G,IAAI,CAAC,YAAY;gBAAE,OAAM;YAEzB,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,YAAY,CAAC,YAAY,CAAC,CAAA;YAClE,MAAM,SAAS,GAAG,MAAM,sCAAsC,CAAC;gBAC7D,KAAK,EAAE,YAAY;gBACnB,MAAM;gBACN,MAAM,EAAE,SAAS,CAAC,MAAM;aACzB,CAAC,CAAA;YACF,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW;gBAAE,OAAM;YAEvD,aAAa,CAAC,IAAI,CAAC;gBACjB,WAAW,EAAE,SAAS,CAAC,MAAM,CAAC,WAAW;gBACzC,WAAW,EAAE,SAAS;gBACtB,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,SAAS;aACtC,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,mCAAmC,CAAC,CAAA;YACrG,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,yCAAyC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;YAC3F,CAAC;YACD,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,4BAA4B,EAAE;gBAC7C,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAA;QACJ,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,kBAAkB,CAAC,aAAa,EAAE,iCAAiC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC3F,MAAM,QAAQ,GAAG,MAAM,6BAA6B,CAAC;YACnD,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;YACf,WAAW,EAAE,eAAe;YAC5B,SAAS;YACT,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,SAAS,EAAE,gCAAgC;SAC5C,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,mCAAmC,CAAC,CAAA;YACnG,OAAM;QACR,CAAC;QACD,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QACpD,eAAe,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,QAAQ,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAErD,MAAM,aAAa,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC9C,GAAG,OAAO;QACV,GAAG,eAAe;KACnB,CAAC,CAAC,CAAA;AACL,CAAC"}

package/dist/lib/codex-native/catalog-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"catalog-auth.d.ts","sourceRoot":"","sources":["../../../lib/codex-native/catalog-auth.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAEhE,wBAAsB,0BAA0B,CAC9C,QAAQ,EAAE,cAAc,EACxB,gBAAgB,EAAE,OAAO,EACzB,gBAAgB,CAAC,EAAE,gBAAgB,GAClC,OAAO,CAAC;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA+BvD"}
+{"version":3,"file":"catalog-auth.d.ts","sourceRoot":"","sources":["../../../lib/codex-native/catalog-auth.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAEhE,wBAAsB,0BAA0B,CAC9C,QAAQ,EAAE,cAAc,EACxB,gBAAgB,EAAE,OAAO,EACzB,gBAAgB,CAAC,EAAE,gBAAgB,GAClC,OAAO,CAAC;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAkCvD"}

package/dist/lib/codex-native/catalog-auth.js

@@ -25,7 +25,10 @@ export async function selectCatalogAuthCandidate(authMode, pidOffsetEnabled, rot
             accountId: selected.accountId
         };
     }
-    catch {
+    catch (error) {
+        if (error instanceof Error) {
+            // best-effort catalog auth selection
+        }
         return {};
     }
 }

package/dist/lib/codex-native/catalog-auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"catalog-auth.js","sourceRoot":"","sources":["../../../lib/codex-native/catalog-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAGlE,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,QAAwB,EACxB,gBAAyB,EACzB,gBAAmC;IAEnC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,eAAe,EAAE,CAAA;QACpC,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QACnD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,CAAA;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,aAAa,CAAC;YAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,gBAAgB,IAAI,MAAM,CAAC,QAAQ;YAC7C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;YACf,eAAe,EAAE,gBAAgB;SAClC,CAAC,CAAA;QAEF,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;YACtB,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAA;QAC3C,CAAC;QAED,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACvD,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAA;QAC1C,CAAC;QAED,OAAO;YACL,WAAW,EAAE,QAAQ,CAAC,MAAM;YAC5B,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC"}
+{"version":3,"file":"catalog-auth.js","sourceRoot":"","sources":["../../../lib/codex-native/catalog-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAGlE,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,QAAwB,EACxB,gBAAyB,EACzB,gBAAmC;IAEnC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,eAAe,EAAE,CAAA;QACpC,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QACnD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,CAAA;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,aAAa,CAAC;YAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,gBAAgB,IAAI,MAAM,CAAC,QAAQ;YAC7C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;YACf,eAAe,EAAE,gBAAgB;SAClC,CAAC,CAAA;QAEF,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;YACtB,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAA;QAC3C,CAAC;QAED,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACvD,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAA;QAC1C,CAAC;QAED,OAAO;YACL,WAAW,EAAE,QAAQ,CAAC,MAAM;YAC5B,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,qCAAqC;QACvC,CAAC;QACD,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC"}

package/dist/lib/codex-native/catalog-sync.d.ts

@@ -0,0 +1,28 @@
+import type { PersonalityOption } from "../config";
+import type { Logger } from "../logger";
+import { type CodexModelInfo } from "../model-catalog";
+import type { OpenAIAuthMode, RotationStrategy } from "../types";
+type CatalogHeaders = {
+    originator: string;
+    userAgent: string;
+    clientVersion: string;
+    versionHeader: string;
+    openaiBeta?: string;
+};
+export declare function initializeCatalogSync(input: {
+    authMode: OpenAIAuthMode;
+    pidOffsetEnabled: boolean;
+    rotationStrategy?: RotationStrategy;
+    resolveCatalogHeaders: () => CatalogHeaders;
+    providerModels: Record<string, Record<string, unknown>>;
+    fallbackModels: string[];
+    personality?: PersonalityOption;
+    log?: Logger;
+    getLastCatalogModels: () => CodexModelInfo[] | undefined;
+    setLastCatalogModels: (models: CodexModelInfo[] | undefined) => void;
+}): Promise<(auth: {
+    accessToken?: string;
+    accountId?: string;
+}) => Promise<CodexModelInfo[] | undefined>>;
+export {};
+//# sourceMappingURL=catalog-sync.d.ts.map

package/dist/lib/codex-native/catalog-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-sync.d.ts","sourceRoot":"","sources":["../../../lib/codex-native/catalog-sync.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAA2D,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAC/G,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAGhE,KAAK,cAAc,GAAG;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,MAAM,CAAA;IACrB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,QAAQ,EAAE,cAAc,CAAA;IACxB,gBAAgB,EAAE,OAAO,CAAA;IACzB,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IACnC,qBAAqB,EAAE,MAAM,cAAc,CAAA;IAC3C,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IACvD,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,WAAW,CAAC,EAAE,iBAAiB,CAAA;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,oBAAoB,EAAE,MAAM,cAAc,EAAE,GAAG,SAAS,CAAA;IACxD,oBAAoB,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,SAAS,KAAK,IAAI,CAAA;CACrE,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC,cAAc,EAAE,GAAG,SAAS,CAAC,CAAC,CAmCzG"}