@iislee/opencodex 2.11.0

package/src/codex/account-namespace-match.ts

@@ -0,0 +1,63 @@
+import { isValidCodexAccountId } from "./account-id";
+
+/** Config-only sentinel for the Codex Desktop account; outside the pool-account id grammar. */
+export const MAIN_CODEX_ACCOUNT_NAMESPACE_TARGET = "@main";
+
+export const CODEX_ACCOUNT_NAMESPACE_COMBO_ALIAS_COLLISION_ERROR =
+  "combo alias must not use a configured Codex account namespace";
+
+const CODEX_ACCOUNT_ID_NAMESPACE_COLLISION_ERROR =
+  "account id must not collide with a configured Codex account namespace";
+
+/** Provider ids are compared case-insensitively at namespace admission boundaries. */
+export function codexProviderNamespaceKey(value: string): string {
+  return value.toLowerCase();
+}
+
+export function hasCodexAccountNamespace(
+  namespaces: unknown,
+  namespace: string,
+): boolean {
+  return !!namespaces
+    && typeof namespaces === "object"
+    && !Array.isArray(namespaces)
+    && Object.hasOwn(namespaces, namespace);
+}
+
+export function codexAccountNamespaceProviderCollisionError(
+  namespaces: unknown,
+  providerName: string,
+): string | undefined {
+  const normalizedProvider = codexProviderNamespaceKey(providerName);
+  const collides = !!namespaces
+    && typeof namespaces === "object"
+    && !Array.isArray(namespaces)
+    && Object.keys(namespaces)
+      .some(namespace => codexProviderNamespaceKey(namespace) === normalizedProvider);
+  return collides
+    ? "provider name must not collide with a configured Codex account namespace"
+    : undefined;
+}
+
+export function codexAccountIdNamespaceCollisionError(
+  namespaces: unknown,
+  accountId: string,
+): string | undefined {
+  return hasCodexAccountNamespace(namespaces, accountId)
+    ? CODEX_ACCOUNT_ID_NAMESPACE_COLLISION_ERROR
+    : undefined;
+}
+
+export function codexAccountNamespaceForModel(
+  namespaces: unknown,
+  modelId: string,
+): string | undefined {
+  const slash = modelId.indexOf("/");
+  if (slash <= 0) return undefined;
+  const namespace = modelId.slice(0, slash);
+  return hasCodexAccountNamespace(namespaces, namespace) ? namespace : undefined;
+}
+
+export function isValidCodexAccountNamespaceTarget(accountId: unknown): accountId is string {
+  return accountId === MAIN_CODEX_ACCOUNT_NAMESPACE_TARGET || isValidCodexAccountId(accountId);
+}

package/src/codex/account-namespaces.ts

@@ -0,0 +1,149 @@
+import type { CodexAccount, OcxConfig } from "../types";
+import { COMBO_NAMESPACE } from "../combos/types";
+import { OPENAI_CODEX_PROVIDER_ID } from "../providers/openai-tiers";
+import {
+  CODEX_ACCOUNT_LOG_LABEL_RE,
+  createCodexAccountLogLabel,
+  fallbackCodexAccountLogLabel,
+} from "./account-label";
+import { isValidCodexAccountId, MAIN_CODEX_ACCOUNT_ID } from "./account-id";
+import {
+  codexAccountIdNamespaceCollisionError,
+  codexProviderNamespaceKey,
+  MAIN_CODEX_ACCOUNT_NAMESPACE_TARGET,
+} from "./account-namespace-match";
+
+export { isValidCodexAccountNamespaceTarget } from "./account-namespace-match";
+
+const RESERVED_NAMESPACE_KEYS = new Set([
+  "__proto__",
+  "prototype",
+  "constructor",
+  COMBO_NAMESPACE,
+  OPENAI_CODEX_PROVIDER_ID,
+].map(codexProviderNamespaceKey));
+const PUBLIC_ACCOUNT_SELECTOR_MAX_ATTEMPTS = 16;
+
+function comboAliasNamespaces(config: Pick<OcxConfig, "combos">): string[] {
+  return Object.values(config.combos ?? {}).flatMap((combo) => {
+    const alias = typeof combo?.alias === "string" ? combo.alias.trim() : "";
+    const slash = alias.indexOf("/");
+    return slash > 0 ? [alias.slice(0, slash)] : [];
+  });
+}
+
+function privateAccountSelectorCandidates(accountIds: Iterable<string>): Set<string> {
+  const candidates = new Set<string>();
+  for (const accountId of accountIds) {
+    candidates.add(accountId);
+    candidates.add(fallbackCodexAccountLogLabel(accountId));
+  }
+  return candidates;
+}
+
+function defaultPublicAccountSelector(
+  account: Pick<CodexAccount, "id" | "logLabel">,
+  allPrivateCandidates: ReadonlySet<string>,
+): string {
+  const privateCandidates = new Set(allPrivateCandidates);
+  privateCandidates.add(account.id);
+  privateCandidates.add(fallbackCodexAccountLogLabel(account.id));
+  if (CODEX_ACCOUNT_LOG_LABEL_RE.test(account.logLabel ?? "")
+    && !privateCandidates.has(account.logLabel!)) return account.logLabel!;
+
+  // Legacy or hand-edited rows may predate persisted random log labels. Allocate a fresh public
+  // selector rather than exposing the stable, id-derived fallback used only to redact old logs.
+  for (let attempt = 0; attempt < PUBLIC_ACCOUNT_SELECTOR_MAX_ATTEMPTS; attempt += 1) {
+    const selector = createCodexAccountLogLabel(privateCandidates);
+    if (!privateCandidates.has(selector)) return selector;
+  }
+  throw new Error("Unable to allocate a unique Codex account selector");
+}
+
+function claimNamespace(requested: string, used: Set<string>): string {
+  let namespace = requested;
+  let suffix = 2;
+  while (used.has(namespace)) namespace = `${requested}-${suffix++}`;
+  used.add(namespace);
+  return namespace;
+}
+
+function occupiedNamespaces(config: Pick<OcxConfig, "combos" | "providers">): Set<string> {
+  return new Set([
+    ...Object.keys(config.providers).map(codexProviderNamespaceKey),
+    ...comboAliasNamespaces(config),
+    ...RESERVED_NAMESPACE_KEYS,
+  ]);
+}
+
+/** Build an initial account-selector map without deriving public selectors from aliases or ids. */
+export function defaultCodexAccountNamespaces(
+  config: Pick<OcxConfig, "codexAccounts" | "combos" | "providers">,
+): Record<string, string> {
+  const namespaces: Record<string, string> = {};
+  const used = occupiedNamespaces(config);
+  const accounts = config.codexAccounts ?? [];
+  const privateCandidates = privateAccountSelectorCandidates(
+    accounts
+      .filter(account => account.id !== MAIN_CODEX_ACCOUNT_ID)
+      .map(account => account.id),
+  );
+  for (const candidate of privateCandidates) used.add(candidate);
+
+  namespaces[claimNamespace("main", used)] = MAIN_CODEX_ACCOUNT_NAMESPACE_TARGET;
+  for (const account of accounts) {
+    if (account.isMain || !isValidCodexAccountId(account.id)) continue;
+    const namespace = claimNamespace(defaultPublicAccountSelector(account, privateCandidates), used);
+    namespaces[namespace] = account.id;
+  }
+  return namespaces;
+}
+
+/**
+ * Add one account to a generated map without renaming or replacing explicit existing entries.
+ * The account-creation layer must reject a new id that already equals an existing selector key.
+ * A true result means the map was mutated in place; callers must persist the updated config.
+ */
+export function appendDefaultCodexAccountNamespace(
+  config: Pick<OcxConfig, "codexAccountNamespaces" | "codexAccounts" | "combos" | "providers">,
+  account: Pick<CodexAccount, "id" | "isMain" | "logLabel">,
+): boolean {
+  const namespaces = config.codexAccountNamespaces;
+  if (account.isMain
+    || !isValidCodexAccountId(account.id)
+    || !namespaces
+    || Object.keys(namespaces).length === 0
+    || codexAccountIdNamespaceCollisionError(namespaces, account.id)
+    || Object.values(namespaces).includes(account.id)) return false;
+
+  const used = occupiedNamespaces(config);
+  for (const namespace of Object.keys(namespaces)) used.add(namespace);
+  const privateCandidates = privateAccountSelectorCandidates([
+    ...(config.codexAccounts ?? [])
+      .filter(existing => existing.id !== MAIN_CODEX_ACCOUNT_ID)
+      .map(existing => existing.id),
+    ...Object.values(namespaces),
+    account.id,
+  ]);
+  for (const candidate of privateCandidates) used.add(candidate);
+  const namespace = claimNamespace(defaultPublicAccountSelector(account, privateCandidates), used);
+  namespaces[namespace] = account.id;
+  return true;
+}
+
+export function isMainCodexAccountTarget(accountId: string): boolean {
+  return accountId === MAIN_CODEX_ACCOUNT_NAMESPACE_TARGET || accountId === MAIN_CODEX_ACCOUNT_ID;
+}
+
+function normalizeCodexAccountNamespaceTarget(accountId: string): string {
+  return isMainCodexAccountTarget(accountId)
+    ? MAIN_CODEX_ACCOUNT_ID
+    : accountId;
+}
+
+export function codexAccountNamespaceEntries(
+  config: Pick<OcxConfig, "codexAccountNamespaces">,
+): Array<[string, string]> {
+  return Object.entries(config.codexAccountNamespaces ?? {})
+    .map(([namespace, accountId]) => [namespace, normalizeCodexAccountNamespaceTarget(accountId)]);
+}

package/src/codex/account-pause.ts

@@ -0,0 +1,20 @@
+import type { OcxConfig } from "../types";
+
+/** Whether an account is administratively excluded from future pool selection. */
+export function isCodexAccountPaused(config: OcxConfig, accountId: string): boolean {
+  return config.pausedCodexAccountIds?.includes(accountId) ?? false;
+}
+
+/** Persist the account's pool eligibility without changing credentials or runtime health. */
+export function setCodexAccountPaused(config: OcxConfig, accountId: string, paused: boolean): void {
+  const pausedIds = new Set(config.pausedCodexAccountIds ?? []);
+  if (paused) pausedIds.add(accountId);
+  else pausedIds.delete(accountId);
+
+  if (pausedIds.size > 0) config.pausedCodexAccountIds = [...pausedIds];
+  else delete config.pausedCodexAccountIds;
+}
+
+export function forgetCodexAccountPause(config: OcxConfig, accountId: string): void {
+  setCodexAccountPaused(config, accountId, false);
+}

package/src/codex/account-runtime-state.ts

@@ -0,0 +1,31 @@
+import { captureConfigGeneration, type GenerationContext } from "../lib/state-store-sweeper";
+
+const reauthAccounts = new Set<string>();
+let lastReconciledGeneration = 0;
+let liveAccountIds = new Set<string>();
+
+export function markAccountNeedsReauth(id: string, writerGeneration = captureConfigGeneration()): void {
+  if (writerGeneration < lastReconciledGeneration && !liveAccountIds.has(id)) return;
+  reauthAccounts.add(id);
+}
+
+export function reconcileCodexReauthState(context: GenerationContext): number {
+  if (context.generation <= lastReconciledGeneration) return 0;
+  let removed = 0;
+  for (const id of reauthAccounts) {
+    if (context.codexAccountIds.has(id)) continue;
+    reauthAccounts.delete(id);
+    removed += 1;
+  }
+  liveAccountIds = new Set(context.codexAccountIds);
+  lastReconciledGeneration = context.generation;
+  return removed;
+}
+
+export function isAccountNeedsReauth(id: string): boolean {
+  return reauthAccounts.has(id);
+}
+
+export function clearAccountNeedsReauth(id: string): void {
+  reauthAccounts.delete(id);
+}