@kaitranntt/ccs 7.79.1-dev.5 → 7.79.1-dev.7

package/dist/codex-auth/codex-profile-registry.js

@@ -0,0 +1,360 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CodexProfileRegistry = exports.validateCodexProfileRegistryData = exports.CodexProfileRegistryReadError = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const yaml = __importStar(require("js-yaml"));
+const lockfile = __importStar(require("proper-lockfile"));
+const logging_1 = require("../services/logging");
+const codex_profile_paths_1 = require("./codex-profile-paths");
+const config_manager_1 = require("../utils/config-manager");
+const types_1 = require("./types");
+const logger = (0, logging_1.createLogger)('codex-auth:registry');
+const REGISTRY_LOCK_STALE_MS = 10000;
+const REGISTRY_LOCK_RETRIES = 40;
+const REGISTRY_LOCK_RETRY_DELAY_MS = 50;
+function emptyRegistry() {
+    return { version: types_1.CODEX_PROFILE_SCHEMA_VERSION, default: null, profiles: {} };
+}
+class CodexProfileRegistryReadError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'CodexProfileRegistryReadError';
+    }
+}
+exports.CodexProfileRegistryReadError = CodexProfileRegistryReadError;
+function validateCodexProfileRegistryData(parsed) {
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+        throw new Error('registry YAML root is not an object');
+    }
+    const data = parsed;
+    if (!data.profiles || typeof data.profiles !== 'object' || Array.isArray(data.profiles)) {
+        throw new Error('registry YAML is missing an object profiles map');
+    }
+    if (data.default !== undefined && data.default !== null && typeof data.default !== 'string') {
+        throw new Error('registry YAML default must be a string or null');
+    }
+    if (typeof data.default === 'string') {
+        assertValidProfileName(data.default);
+    }
+    const profiles = {};
+    for (const [name, profile] of Object.entries(data.profiles)) {
+        assertValidProfileName(name);
+        profiles[name] = validateProfileMetadata(name, profile);
+    }
+    if (typeof data.default === 'string' &&
+        !Object.prototype.hasOwnProperty.call(profiles, data.default)) {
+        throw new Error('registry YAML default profile is missing from profiles map');
+    }
+    return {
+        version: typeof data.version === 'string' ? data.version : types_1.CODEX_PROFILE_SCHEMA_VERSION,
+        default: data.default ?? null,
+        profiles,
+    };
+}
+exports.validateCodexProfileRegistryData = validateCodexProfileRegistryData;
+function assertValidProfileName(name) {
+    const nameError = (0, types_1.getCodexProfileNameError)(name);
+    if (nameError) {
+        throw new Error(`registry YAML contains invalid profile name "${name}": ${nameError}`);
+    }
+}
+function validateProfileMetadata(name, profile) {
+    if (!profile || typeof profile !== 'object' || Array.isArray(profile)) {
+        throw new Error(`registry YAML profile "${name}" must be an object`);
+    }
+    const meta = profile;
+    if (meta.type !== 'codex') {
+        throw new Error(`registry YAML profile "${name}" must have type "codex"`);
+    }
+    if (typeof meta.created !== 'string') {
+        throw new Error(`registry YAML profile "${name}" must have a string created timestamp`);
+    }
+    if (meta.last_used !== null && typeof meta.last_used !== 'string') {
+        throw new Error(`registry YAML profile "${name}" must have a string or null last_used timestamp`);
+    }
+    if (meta.email !== undefined && typeof meta.email !== 'string') {
+        throw new Error(`registry YAML profile "${name}" email must be a string`);
+    }
+    if (meta.plan_type !== undefined &&
+        meta.plan_type !== null &&
+        typeof meta.plan_type !== 'string') {
+        throw new Error(`registry YAML profile "${name}" plan_type must be a string or null`);
+    }
+    if (meta.account_id !== undefined && typeof meta.account_id !== 'string') {
+        throw new Error(`registry YAML profile "${name}" account_id must be a string`);
+    }
+    return meta;
+}
+function registryDisplayPath(registryPath) {
+    const [source] = (0, config_manager_1.getCcsDirSource)();
+    const defaultRegistryPath = path.resolve((0, codex_profile_paths_1.getCodexAuthRegistryPath)());
+    if (path.resolve(registryPath) !== defaultRegistryPath) {
+        return path.basename(registryPath);
+    }
+    if (source === 'default') {
+        return process.platform === 'win32'
+            ? '%USERPROFILE%\\.ccs\\codex-profiles.yaml'
+            : '~/.ccs/codex-profiles.yaml';
+    }
+    if (source === 'CCS_HOME' || source === 'scoped:CCS_HOME') {
+        return '$CCS_HOME/.ccs/codex-profiles.yaml';
+    }
+    if (source === 'CCS_DIR' || source === 'scoped:CCS_DIR') {
+        return '$CCS_DIR/codex-profiles.yaml';
+    }
+    return 'codex-profiles.yaml';
+}
+function safeRegistryReadMessage(err) {
+    if (err?.name === 'YAMLException') {
+        return 'registry YAML could not be parsed';
+    }
+    return err instanceof Error ? err.message : String(err);
+}
+function sleepSync(ms) {
+    try {
+        Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+    }
+    catch {
+        const end = Date.now() + ms;
+        while (Date.now() < end) {
+            // Fall back for runtimes without Atomics.wait.
+        }
+    }
+}
+function isLockContentionError(err) {
+    return err?.code === 'ELOCKED';
+}
+/**
+ * Registry for codex auth profiles stored at ~/.ccs/codex-profiles.yaml.
+ *
+ * Writes are guarded by a registry-directory lock around the read-modify-write
+ * cycle, then persisted atomically with tmp file + POSIX rename.
+ *
+ * Constructor accepts an optional registryPath for test isolation.
+ */
+class CodexProfileRegistry {
+    constructor(registryPath) {
+        this.registryPath = registryPath ?? (0, codex_profile_paths_1.getCodexAuthRegistryPath)();
+        this._cleanOrphanTmpFiles();
+    }
+    // ── private read/write ──────────────────────────────────────────────────
+    _read() {
+        if (!fs.existsSync(this.registryPath)) {
+            return emptyRegistry();
+        }
+        try {
+            const raw = fs.readFileSync(this.registryPath, 'utf8');
+            return validateCodexProfileRegistryData(yaml.load(raw));
+        }
+        catch (err) {
+            const msg = safeRegistryReadMessage(err);
+            const displayPath = registryDisplayPath(this.registryPath);
+            logger.warn('codex-auth.registry.read-failed', `Registry at ${displayPath} could not be read safely; refusing empty-state rewrite: ${msg}`);
+            throw new CodexProfileRegistryReadError(`Codex profile registry at ${displayPath} could not be read safely: ${msg}. Refusing to rewrite it.`);
+        }
+    }
+    _write(data) {
+        const dir = path.dirname(this.registryPath);
+        if (!fs.existsSync(dir)) {
+            fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+        }
+        // Unique tmp suffix avoids collisions on concurrent writes and orphan leaks
+        const tmpPath = `${this.registryPath}.tmp.${process.pid}.${Math.random().toString(36).slice(2)}`;
+        try {
+            fs.writeFileSync(tmpPath, yaml.dump(data, { indent: 2, lineWidth: -1 }), {
+                mode: 0o600,
+            });
+            fs.renameSync(tmpPath, this.registryPath);
+        }
+        catch (err) {
+            if (fs.existsSync(tmpPath)) {
+                try {
+                    fs.unlinkSync(tmpPath);
+                }
+                catch {
+                    // best-effort cleanup
+                }
+            }
+            const msg = err instanceof Error ? err.message : String(err);
+            throw new Error(`Failed to write codex profile registry: ${msg}`);
+        }
+    }
+    _withRegistryWriteLock(callback) {
+        const dir = path.dirname(this.registryPath);
+        if (!fs.existsSync(dir)) {
+            fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+        }
+        let release;
+        let lastLockError;
+        for (let attempt = 0; attempt <= REGISTRY_LOCK_RETRIES; attempt++) {
+            try {
+                release = lockfile.lockSync(dir, { stale: REGISTRY_LOCK_STALE_MS });
+                break;
+            }
+            catch (err) {
+                if (!isLockContentionError(err) || attempt === REGISTRY_LOCK_RETRIES) {
+                    throw err;
+                }
+                lastLockError = err;
+                sleepSync(REGISTRY_LOCK_RETRY_DELAY_MS);
+            }
+        }
+        if (!release) {
+            const msg = lastLockError instanceof Error ? lastLockError.message : 'unknown lock error';
+            throw new Error(`Failed to acquire codex profile registry lock: ${msg}`);
+        }
+        try {
+            return callback();
+        }
+        finally {
+            try {
+                release();
+            }
+            catch {
+                // Best-effort release.
+            }
+        }
+    }
+    // Best-effort cleanup of orphan tmp files older than 1 hour (H3 mitigation).
+    _cleanOrphanTmpFiles() {
+        const dir = path.dirname(this.registryPath);
+        const base = path.basename(this.registryPath);
+        if (!fs.existsSync(dir))
+            return;
+        try {
+            const oneHourAgo = Date.now() - 60 * 60 * 1000;
+            for (const entry of fs.readdirSync(dir)) {
+                if (!entry.startsWith(`${base}.tmp.`))
+                    continue;
+                const full = path.join(dir, entry);
+                try {
+                    const stat = fs.statSync(full);
+                    if (stat.mtimeMs < oneHourAgo) {
+                        fs.unlinkSync(full);
+                    }
+                }
+                catch {
+                    // ignore per-file errors
+                }
+            }
+        }
+        catch {
+            // ignore cleanup failure silently
+        }
+    }
+    // ── CRUD ────────────────────────────────────────────────────────────────
+    createProfile(name, meta = {}) {
+        assertValidProfileName(name);
+        this._withRegistryWriteLock(() => {
+            const data = this._read();
+            if (data.profiles[name]) {
+                throw new Error(`Profile already exists: ${name}`);
+            }
+            data.profiles[name] = {
+                type: 'codex',
+                created: new Date().toISOString(),
+                last_used: null,
+                ...meta,
+            };
+            this._write(data);
+            logger.stage('route', 'codex-auth.profile.created', 'Codex profile created', { name });
+        });
+    }
+    getProfile(name) {
+        assertValidProfileName(name);
+        const data = this._read();
+        const profile = data.profiles[name];
+        if (!profile) {
+            throw new Error(`Profile not found: ${name}`);
+        }
+        return profile;
+    }
+    updateProfile(name, partial) {
+        assertValidProfileName(name);
+        this._withRegistryWriteLock(() => {
+            const data = this._read();
+            if (!data.profiles[name]) {
+                throw new Error(`Profile not found: ${name}`);
+            }
+            data.profiles[name] = { ...data.profiles[name], ...partial };
+            this._write(data);
+        });
+    }
+    removeProfile(name, options = {}) {
+        assertValidProfileName(name);
+        this._withRegistryWriteLock(() => {
+            const data = this._read();
+            if (!data.profiles[name]) {
+                throw new Error(`Profile not found: ${name}`);
+            }
+            if (data.default === name && Object.keys(data.profiles).length > 1 && !options.forceDefault) {
+                throw new Error('Cannot remove default profile while other profiles exist without --force');
+            }
+            delete data.profiles[name];
+            if (data.default === name) {
+                data.default = null;
+            }
+            this._write(data);
+            logger.stage('cleanup', 'codex-auth.profile.deleted', 'Codex profile removed', { name });
+        });
+    }
+    listProfiles() {
+        return Object.keys(this._read().profiles);
+    }
+    hasProfile(name) {
+        if ((0, types_1.getCodexProfileNameError)(name))
+            return false;
+        return Object.prototype.hasOwnProperty.call(this._read().profiles, name);
+    }
+    // ── Default pointer ──────────────────────────────────────────────────────
+    getDefault() {
+        return this._read().default;
+    }
+    setDefault(name) {
+        assertValidProfileName(name);
+        this._withRegistryWriteLock(() => {
+            const data = this._read();
+            if (!data.profiles[name]) {
+                throw new Error(`Profile not found: ${name}`);
+            }
+            data.default = name;
+            this._write(data);
+        });
+    }
+    clearDefault() {
+        this._withRegistryWriteLock(() => {
+            const data = this._read();
+            data.default = null;
+            this._write(data);
+        });
+    }
+    touchProfile(name) {
+        this.updateProfile(name, { last_used: new Date().toISOString() });
+    }
+}
+exports.CodexProfileRegistry = CodexProfileRegistry;
+//# sourceMappingURL=codex-profile-registry.js.map

package/dist/codex-auth/codex-profile-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-profile-registry.js","sourceRoot":"","sources":["../../src/codex-auth/codex-profile-registry.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AACzB,2CAA6B;AAC7B,8CAAgC;AAChC,0DAA4C;AAC5C,iDAAmD;AACnD,+DAAiE;AACjE,4DAA0D;AAC1D,mCAAiF;AAGjF,MAAM,MAAM,GAAG,IAAA,sBAAY,EAAC,qBAAqB,CAAC,CAAC;AACnD,MAAM,sBAAsB,GAAG,KAAK,CAAC;AACrC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACjC,MAAM,4BAA4B,GAAG,EAAE,CAAC;AAExC,SAAS,aAAa;IACpB,OAAO,EAAE,OAAO,EAAE,oCAA4B,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAChF,CAAC;AAED,MAAa,6BAA8B,SAAQ,KAAK;IACtD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AALD,sEAKC;AAED,SAAgB,gCAAgC,CAAC,MAAe;IAC9D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,IAAI,GAAG,MAAmC,CAAC;IACjD,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5F,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACrC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,QAAQ,GAAyC,EAAE,CAAC;IAC1D,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5D,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,GAAG,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IACD,IACE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;QAChC,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,EAC7D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IAED,OAAO;QACL,OAAO,EAAE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,oCAA4B;QACvF,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;QAC7B,QAAQ;KACT,CAAC;AACJ,CAAC;AAjCD,4EAiCC;AAED,SAAS,sBAAsB,CAAC,IAAY;IAC1C,MAAM,SAAS,GAAG,IAAA,gCAAwB,EAAC,IAAI,CAAC,CAAC;IACjD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,gDAAgD,IAAI,MAAM,SAAS,EAAE,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAY,EAAE,OAAgB;IAC7D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,qBAAqB,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,IAAI,GAAG,OAAwC,CAAC;IACtD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,0BAA0B,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,wCAAwC,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CACb,0BAA0B,IAAI,kDAAkD,CACjF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,0BAA0B,CAAC,CAAC;IAC5E,CAAC;IACD,IACE,IAAI,CAAC,SAAS,KAAK,SAAS;QAC5B,IAAI,CAAC,SAAS,KAAK,IAAI;QACvB,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAClC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,sCAAsC,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,+BAA+B,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,IAA4B,CAAC;AACtC,CAAC;AAED,SAAS,mBAAmB,CAAC,YAAoB;IAC/C,MAAM,CAAC,MAAM,CAAC,GAAG,IAAA,gCAAe,GAAE,CAAC;IACnC,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,CAAC,IAAA,8CAAwB,GAAE,CAAC,CAAC;IACrE,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,mBAAmB,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO;YACjC,CAAC,CAAC,0CAA0C;YAC5C,CAAC,CAAC,4BAA4B,CAAC;IACnC,CAAC;IACD,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,iBAAiB,EAAE,CAAC;QAC1D,OAAO,oCAAoC,CAAC;IAC9C,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;QACxD,OAAO,8BAA8B,CAAC;IACxC,CAAC;IACD,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAY;IAC3C,IAAK,GAAsC,EAAE,IAAI,KAAK,eAAe,EAAE,CAAC;QACtE,OAAO,mCAAmC,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,SAAS,CAAC,EAAU;IAC3B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;YACxB,+CAA+C;QACjD,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAY;IACzC,OAAQ,GAAyC,EAAE,IAAI,KAAK,SAAS,CAAC;AACxE,CAAC;AAED;;;;;;;GAOG;AACH,MAAa,oBAAoB;IAG/B,YAAY,YAAqB;QAC/B,IAAI,CAAC,YAAY,GAAG,YAAY,IAAI,IAAA,8CAAwB,GAAE,CAAC;QAC/D,IAAI,CAAC,oBAAoB,EAAE,CAAC;IAC9B,CAAC;IAED,2EAA2E;IAEnE,KAAK;QACX,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACtC,OAAO,aAAa,EAAE,CAAC;QACzB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACvD,OAAO,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,WAAW,GAAG,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC3D,MAAM,CAAC,IAAI,CACT,iCAAiC,EACjC,eAAe,WAAW,4DAA4D,GAAG,EAAE,CAC5F,CAAC;YACF,MAAM,IAAI,6BAA6B,CACrC,6BAA6B,WAAW,8BAA8B,GAAG,2BAA2B,CACrG,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,IAAsB;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,4EAA4E;QAC5E,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,YAAY,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAEjG,IAAI,CAAC;YACH,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE;gBACvE,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC;oBACH,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBACzB,CAAC;gBAAC,MAAM,CAAC;oBACP,sBAAsB;gBACxB,CAAC;YACH,CAAC;YACD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,2CAA2C,GAAG,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAEO,sBAAsB,CAAI,QAAiB;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,OAAiC,CAAC;QACtC,IAAI,aAAsB,CAAC;QAE3B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,qBAAqB,EAAE,OAAO,EAAE,EAAE,CAAC;YAClE,IAAI,CAAC;gBACH,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAe,CAAC;gBAClF,MAAM;YACR,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,qBAAqB,EAAE,CAAC;oBACrE,MAAM,GAAG,CAAC;gBACZ,CAAC;gBACD,aAAa,GAAG,GAAG,CAAC;gBACpB,SAAS,CAAC,4BAA4B,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,aAAa,YAAY,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC;YAC1F,MAAM,IAAI,KAAK,CAAC,kDAAkD,GAAG,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,CAAC;YACH,OAAO,QAAQ,EAAE,CAAC;QACpB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBACH,OAAO,EAAE,CAAC;YACZ,CAAC;YAAC,MAAM,CAAC;gBACP,uBAAuB;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED,6EAA6E;IACrE,oBAAoB;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO;QAChC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;YAC/C,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,OAAO,CAAC;oBAAE,SAAS;gBAChD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACnC,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;oBAC/B,IAAI,IAAI,CAAC,OAAO,GAAG,UAAU,EAAE,CAAC;wBAC9B,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;oBACtB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,yBAAyB;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;IACH,CAAC;IAED,2EAA2E;IAE3E,aAAa,CAAC,IAAY,EAAE,OAAsC,EAAE;QAClE,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,sBAAsB,CAAC,GAAG,EAAE;YAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAC1B,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC;YACrD,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG;gBACpB,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACjC,SAAS,EAAE,IAAI;gBACf,GAAG,IAAI;aACgB,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAClB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,4BAA4B,EAAE,uBAAuB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,IAAY;QACrB,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,aAAa,CAAC,IAAY,EAAE,OAAsC;QAChE,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,sBAAsB,CAAC,GAAG,EAAE;YAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;YAChD,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAA0B,CAAC;YACrF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,IAAY,EAAE,UAAsC,EAAE;QAClE,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,sBAAsB,CAAC,GAAG,EAAE;YAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;YAChD,CAAC;YACD,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;gBAC5F,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;YAC9F,CAAC;YACD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBAC1B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACtB,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAClB,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,4BAA4B,EAAE,uBAAuB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,CAAC,CAAC,CAAC;IACL,CAAC;IAED,YAAY;QACV,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,UAAU,CAAC,IAAY;QACrB,IAAI,IAAA,gCAAwB,EAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACjD,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC3E,CAAC;IAED,4EAA4E;IAE5E,UAAU;QACR,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC;IAC9B,CAAC;IAED,UAAU,CAAC,IAAY;QACrB,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,sBAAsB,CAAC,GAAG,EAAE;YAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;YAChD,CAAC;YACD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,YAAY;QACV,IAAI,CAAC,sBAAsB,CAAC,GAAG,EAAE;YAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,YAAY,CAAC,IAAY;QACvB,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;CACF;AA1ND,oDA0NC"}

package/dist/codex-auth/commands/create-command.d.ts

@@ -0,0 +1,9 @@
+/**
+ * codex-auth create command.
+ * Creates a new profile dir + shared config.toml symlink.
+ * After creation, auto-spawns `codex login` with CODEX_HOME pinned (D11).
+ * --force: re-link config.toml only, preserve auth.json (D9).
+ */
+import type { CodexCommandContext } from './types';
+export declare function handleCreateCodex(ctx: CodexCommandContext, args: string[]): Promise<void>;
+//# sourceMappingURL=create-command.d.ts.map

package/dist/codex-auth/commands/create-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-command.d.ts","sourceRoot":"","sources":["../../../src/codex-auth/commands/create-command.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAaH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAInD,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsF/F"}

package/dist/codex-auth/commands/create-command.js

@@ -0,0 +1,189 @@
+"use strict";
+/**
+ * codex-auth create command.
+ * Creates a new profile dir + shared config.toml symlink.
+ * After creation, auto-spawns `codex login` with CODEX_HOME pinned (D11).
+ * --force: re-link config.toml only, preserve auth.json (D9).
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleCreateCodex = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const childProcess = __importStar(require("child_process"));
+const logging_1 = require("../../services/logging");
+const ui_1 = require("../../utils/ui");
+const errors_1 = require("../../errors");
+const exit_codes_1 = require("../../errors/exit-codes");
+const index_1 = require("../index");
+const codex_account_identity_1 = require("../codex-account-identity");
+const codex_detector_1 = require("../../targets/codex-detector");
+const types_1 = require("./types");
+const logger = (0, logging_1.createLogger)('codex-auth:cmd:create');
+async function handleCreateCodex(ctx, args) {
+    await (0, ui_1.initUI)();
+    const parsed = (0, types_1.parseArgs)(args);
+    (0, types_1.rejectUnsupportedOptions)(parsed, 'ccsx auth create <name> [--force]', { force: true });
+    const { profileName, force } = parsed;
+    if (!profileName) {
+        console.log(`Usage: ccsx auth create <name> [--force]`);
+        (0, errors_1.exitWithError)('Profile name required', exit_codes_1.ExitCode.PROFILE_ERROR);
+        return;
+    }
+    const nameError = (0, types_1.getProfileNameError)(profileName);
+    if (nameError) {
+        (0, errors_1.exitWithError)(nameError, exit_codes_1.ExitCode.PROFILE_ERROR);
+        return;
+    }
+    const { registry } = ctx;
+    const profileDir = (0, index_1.resolveCodexProfileDir)(profileName);
+    // Idempotent: profile already exists
+    if (registry.hasProfile(profileName)) {
+        if (force) {
+            // --force: only re-link config.toml, preserve auth.json
+            console.log((0, ui_1.info)(`Profile already exists: ${profileName} (re-linking config.toml)`));
+            _ensureSymlinkSafe(profileDir, true);
+            console.log((0, ui_1.ok)(`Profile config.toml re-linked.`));
+            console.log(`  Profile dir: ${profileDir}`);
+        }
+        else {
+            _ensureSymlinkSafe(profileDir);
+            console.log((0, ui_1.info)(`Profile already exists: ${profileName}`));
+            console.log((0, ui_1.ok)(`Profile config.toml is ready.`));
+            console.log(`  Profile dir: ${profileDir}`);
+            console.log(`  Run: ccsx auth login ${profileName}`);
+        }
+        return;
+    }
+    // Create profile dir + symlink FIRST (filesystem is more failure-prone than registry write).
+    // Avoids registry orphan if mkdir hits EACCES/ENOSPC.
+    try {
+        fs.mkdirSync(profileDir, { recursive: true, mode: 0o700 });
+        _ensureSymlinkSafe(profileDir);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        if (err.code === 'EACCES') {
+            (0, errors_1.exitWithError)(msg, exit_codes_1.ExitCode.GENERAL_ERROR);
+            return;
+        }
+        throw err;
+    }
+    // Now register in the profile registry
+    try {
+        registry.createProfile(profileName, {
+            created: new Date().toISOString(),
+            last_used: null,
+            email: undefined,
+            plan_type: undefined,
+        });
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        if (msg.includes('corrupt') || msg.includes('Failed to write')) {
+            (0, errors_1.exitWithError)(`Profile registry is corrupt. Backup and remove the file to re-init.\n  ${msg}`, exit_codes_1.ExitCode.GENERAL_ERROR);
+            return;
+        }
+        throw err;
+    }
+    const authJsonPath = path.join(profileDir, 'auth.json');
+    const authExists = fs.existsSync(authJsonPath);
+    console.log((0, ui_1.info)(`Creating Codex profile: ${profileName}`));
+    console.log('');
+    console.log(`  Profile dir : ${profileDir}`);
+    console.log(`  Auth state  : ${authExists ? 'authenticated' : 'not authenticated'}`);
+    console.log('');
+    console.log((0, ui_1.ok)('Profile created.'));
+    // D11: auto-spawn codex login after creating the profile
+    await _spawnLogin(profileName, profileDir, ctx);
+}
+exports.handleCreateCodex = handleCreateCodex;
+function _ensureSymlinkSafe(profileDir, overwriteRegularFile = false) {
+    try {
+        (0, index_1.ensureSharedConfigSymlink)(profileDir, undefined, { overwriteRegularFile });
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        logger.warn('codex-auth.create.config-repair-failed', 'Config repair failed', {
+            profileDir,
+            error: msg,
+        });
+        (0, errors_1.exitWithError)(`Failed to prepare profile config.toml: ${msg}`, exit_codes_1.ExitCode.CONFIG_ERROR);
+    }
+}
+async function _spawnLogin(profileName, profileDir, ctx) {
+    const codexCli = (0, codex_detector_1.detectCodexCli)();
+    if (!codexCli) {
+        process.stderr.write(`[!] codex CLI not found — skipping auto-login.\n`);
+        process.stderr.write(`    Install: npm i -g @openai/codex\n`);
+        process.stderr.write(`    Then run: ccsx auth login ${profileName}\n`);
+        return;
+    }
+    console.log('');
+    console.log(`Next step: logging in to Codex...`);
+    console.log(`  CODEX_HOME=${profileDir}`);
+    console.log('');
+    const loginResult = await new Promise((resolve) => {
+        const child = childProcess.spawn(codexCli, ['login'], {
+            stdio: 'inherit',
+            env: { ...process.env, CODEX_HOME: profileDir },
+            windowsHide: true,
+        });
+        child.on('error', (err) => {
+            process.stderr.write(`[X] Failed to execute codex: ${err.message}\n`);
+            resolve({ code: exit_codes_1.ExitCode.BINARY_ERROR, error: err.message });
+        });
+        child.on('exit', (code) => {
+            resolve({ code: code ?? 1 });
+        });
+    });
+    if (loginResult.error) {
+        (0, errors_1.exitWithError)(`codex login failed to start: ${loginResult.error}`, exit_codes_1.ExitCode.BINARY_ERROR);
+        return;
+    }
+    const authJsonPath = path.join(profileDir, 'auth.json');
+    if (loginResult.code === 0 && fs.existsSync(authJsonPath)) {
+        const identity = (0, codex_account_identity_1.decodeAccountIdentity)(authJsonPath);
+        ctx.registry.updateProfile(profileName, {
+            last_used: new Date().toISOString(),
+            email: identity.email,
+            plan_type: identity.plan_type ?? null,
+            account_id: identity.account_id,
+        });
+        const emailStr = identity.email ? ` as ${identity.email}` : '';
+        const planStr = identity.plan_type ? ` (plan: ${identity.plan_type})` : '';
+        console.log((0, ui_1.ok)(`Logged in${emailStr}${planStr}`));
+    }
+    else if (loginResult.code === 0) {
+        process.stderr.write(`[!] codex login exited cleanly but no auth.json. Skipping registry update.\n`);
+        (0, errors_1.exitWithError)('codex login completed without auth.json', exit_codes_1.ExitCode.AUTH_ERROR);
+    }
+    else {
+        process.stderr.write(`[!] Login cancelled or failed. Profile ${profileName} remains unauthenticated.\n`);
+        process.stderr.write(`    Retry: ccsx auth login ${profileName}\n`);
+        (0, errors_1.exitWithError)('codex login failed', exit_codes_1.ExitCode.AUTH_ERROR);
+    }
+}
+//# sourceMappingURL=create-command.js.map

package/dist/codex-auth/commands/create-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-command.js","sourceRoot":"","sources":["../../../src/codex-auth/commands/create-command.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAC7B,4DAA8C;AAC9C,oDAAsD;AACtD,uCAAkD;AAClD,yCAA6C;AAC7C,wDAAmD;AACnD,oCAA6E;AAC7E,sEAAkE;AAClE,iEAA8D;AAC9D,mCAAmF;AAGnF,MAAM,MAAM,GAAG,IAAA,sBAAY,EAAC,uBAAuB,CAAC,CAAC;AAE9C,KAAK,UAAU,iBAAiB,CAAC,GAAwB,EAAE,IAAc;IAC9E,MAAM,IAAA,WAAM,GAAE,CAAC;IACf,MAAM,MAAM,GAAG,IAAA,iBAAS,EAAC,IAAI,CAAC,CAAC;IAC/B,IAAA,gCAAwB,EAAC,MAAM,EAAE,mCAAmC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvF,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IAEtC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;QACxD,IAAA,sBAAa,EAAC,uBAAuB,EAAE,qBAAQ,CAAC,aAAa,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,IAAA,2BAAmB,EAAC,WAAW,CAAC,CAAC;IACnD,IAAI,SAAS,EAAE,CAAC;QACd,IAAA,sBAAa,EAAC,SAAS,EAAE,qBAAQ,CAAC,aAAa,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC;IACzB,MAAM,UAAU,GAAG,IAAA,8BAAsB,EAAC,WAAW,CAAC,CAAC;IAEvD,qCAAqC;IACrC,IAAI,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACrC,IAAI,KAAK,EAAE,CAAC;YACV,wDAAwD;YACxD,OAAO,CAAC,GAAG,CAAC,IAAA,SAAI,EAAC,2BAA2B,WAAW,2BAA2B,CAAC,CAAC,CAAC;YACrF,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,IAAA,OAAE,EAAC,gCAAgC,CAAC,CAAC,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,kBAAkB,UAAU,EAAE,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,kBAAkB,CAAC,UAAU,CAAC,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,IAAA,SAAI,EAAC,2BAA2B,WAAW,EAAE,CAAC,CAAC,CAAC;YAC5D,OAAO,CAAC,GAAG,CAAC,IAAA,OAAE,EAAC,+BAA+B,CAAC,CAAC,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,kBAAkB,UAAU,EAAE,CAAC,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,0BAA0B,WAAW,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,OAAO;IACT,CAAC;IAED,6FAA6F;IAC7F,sDAAsD;IACtD,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,IAAA,sBAAa,EAAC,GAAG,EAAE,qBAAQ,CAAC,aAAa,CAAC,CAAC;YAC3C,OAAO;QACT,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,uCAAuC;IACvC,IAAI,CAAC;QACH,QAAQ,CAAC,aAAa,CAAC,WAAW,EAAE;YAClC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACjC,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,SAAS;YAChB,SAAS,EAAE,SAAS;SACrB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC/D,IAAA,sBAAa,EACX,0EAA0E,GAAG,EAAE,EAC/E,qBAAQ,CAAC,aAAa,CACvB,CAAC;YACF,OAAO;QACT,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAE/C,OAAO,CAAC,GAAG,CAAC,IAAA,SAAI,EAAC,2BAA2B,WAAW,EAAE,CAAC,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,mBAAmB,UAAU,EAAE,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,mBAAmB,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC,CAAC;IACrF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAA,OAAE,EAAC,kBAAkB,CAAC,CAAC,CAAC;IAEpC,yDAAyD;IACzD,MAAM,WAAW,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;AAClD,CAAC;AAtFD,8CAsFC;AAED,SAAS,kBAAkB,CAAC,UAAkB,EAAE,oBAAoB,GAAG,KAAK;IAC1E,IAAI,CAAC;QACH,IAAA,iCAAyB,EAAC,UAAU,EAAE,SAAS,EAAE,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,sBAAsB,EAAE;YAC5E,UAAU;YACV,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;QACH,IAAA,sBAAa,EAAC,0CAA0C,GAAG,EAAE,EAAE,qBAAQ,CAAC,YAAY,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,WAAmB,EACnB,UAAkB,EAClB,GAAwB;IAExB,MAAM,QAAQ,GAAG,IAAA,+BAAc,GAAE,CAAC;IAClC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACzE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC9D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,WAAW,IAAI,CAAC,CAAC;QACvE,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,gBAAgB,UAAU,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,WAAW,GAAG,MAAM,IAAI,OAAO,CAAmC,CAAC,OAAO,EAAE,EAAE;QAClF,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE;YACpD,KAAK,EAAE,SAAS;YAChB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE;YAC/C,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;YACtE,OAAO,CAAC,EAAE,IAAI,EAAE,qBAAQ,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;QACtB,IAAA,sBAAa,EAAC,gCAAgC,WAAW,CAAC,KAAK,EAAE,EAAE,qBAAQ,CAAC,YAAY,CAAC,CAAC;QAC1F,OAAO;IACT,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACxD,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC1D,MAAM,QAAQ,GAAG,IAAA,8CAAqB,EAAC,YAAY,CAAC,CAAC;QACrD,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,WAAW,EAAE;YACtC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI;YACrC,UAAU,EAAE,QAAQ,CAAC,UAAU;SAChC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,IAAA,OAAE,EAAC,YAAY,QAAQ,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC;IACpD,CAAC;SAAM,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8EAA8E,CAC/E,CAAC;QACF,IAAA,sBAAa,EAAC,yCAAyC,EAAE,qBAAQ,CAAC,UAAU,CAAC,CAAC;IAChF,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0CAA0C,WAAW,6BAA6B,CACnF,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,WAAW,IAAI,CAAC,CAAC;QACpE,IAAA,sBAAa,EAAC,oBAAoB,EAAE,qBAAQ,CAAC,UAAU,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC"}

package/dist/codex-auth/commands/import-default-command.d.ts

@@ -0,0 +1,18 @@
+/**
+ * codex-auth import-default command.
+ *
+ * Migrates legacy ~/.codex/auth.json into a named profile (non-destructive).
+ * Implements C3 torn-write protection: read-with-retry + JWT-shape validation
+ * + pgrep Codex-running detection + atomic write.
+ *
+ * Usage: ccsx auth import-default <name> [--with-history] [--force] [--force-while-running]
+ */
+import type { CodexCommandContext } from './types';
+export interface ImportDefaultArgs {
+    name: string;
+    withHistory: boolean;
+    force: boolean;
+    forceWhileRunning: boolean;
+}
+export declare function handleImportDefaultCodex(ctx: CodexCommandContext, rawArgs: string[]): Promise<void>;
+//# sourceMappingURL=import-default-command.d.ts.map

package/dist/codex-auth/commands/import-default-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-default-command.d.ts","sourceRoot":"","sources":["../../../src/codex-auth/commands/import-default-command.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAcH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AA6NnD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;IACrB,KAAK,EAAE,OAAO,CAAC;IACf,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAuBD,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,mBAAmB,EACxB,OAAO,EAAE,MAAM,EAAE,GAChB,OAAO,CAAC,IAAI,CAAC,CAuJf"}