@kaitranntt/ccs 7.79.1 → 8.0.0-dev.1

package/dist/codex-auth/codex-auth-dashboard-service.js

@@ -0,0 +1,228 @@
+"use strict";
+/**
+ * Dashboard service for codex-auth profile summary.
+ *
+ * Reads the profile registry, decodes each profile's auth.json JWT,
+ * resolves the active profile via env precedence, and returns the
+ * API response shape for GET /api/codex/profiles.
+ *
+ * Security: tokens NEVER appear in the returned object. Only display-safe
+ * fields (email, plan, accountId) are extracted from JWT. auth.json is
+ * read/decoded and then discarded.
+ *
+ * Cache: 5-second in-memory cache reduces full registry/auth reads during
+ * dashboard polling, but each call still stats the registry so corruption or
+ * edits are surfaced immediately instead of serving stale success.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getCodexAuthProfilesSummary = exports.invalidateCodexAuthProfilesCache = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const logging_1 = require("../services/logging");
+const codex_account_identity_1 = require("./codex-account-identity");
+const decode_id_token_1 = require("./decode-id-token");
+const codex_profile_paths_1 = require("./codex-profile-paths");
+const types_1 = require("./types");
+const codex_profile_registry_1 = require("./codex-profile-registry");
+const logger = (0, logging_1.createLogger)('codex-auth:dashboard');
+// ── Cache ───────────────────────────────────────────────────────────────────
+let cache = null;
+const TTL_MS = 5000;
+/**
+ * Invalidate the in-process cache so the next call re-reads from disk.
+ * Useful for Phase 2 CLI commands running in the same process as the dashboard.
+ * Out-of-process invocations rely on the 5s TTL.
+ */
+function invalidateCodexAuthProfilesCache() {
+    cache = null;
+}
+exports.invalidateCodexAuthProfilesCache = invalidateCodexAuthProfilesCache;
+// ── Registry helpers ────────────────────────────────────────────────────────
+function getRegistryCacheSignature() {
+    const registryPath = (0, codex_profile_paths_1.getCodexAuthRegistryPath)();
+    try {
+        const stat = fs.statSync(registryPath);
+        return ['present', stat.dev, stat.ino, stat.size, stat.mtimeMs, stat.ctimeMs].join(':');
+    }
+    catch (err) {
+        if (err?.code === 'ENOENT') {
+            return 'missing';
+        }
+        const msg = err instanceof Error ? err.message : String(err);
+        logger.warn('codex-auth.dashboard.registry-stat-failed', `Registry stat failed: ${msg}`);
+        throw new Error('Codex auth profile registry could not be checked safely');
+    }
+}
+function readRegistry() {
+    const registryPath = (0, codex_profile_paths_1.getCodexAuthRegistryPath)();
+    if (!fs.existsSync(registryPath)) {
+        return { version: types_1.CODEX_PROFILE_SCHEMA_VERSION, default: null, profiles: {} };
+    }
+    try {
+        const registry = new codex_profile_registry_1.CodexProfileRegistry(registryPath);
+        const profiles = {};
+        for (const name of registry.listProfiles()) {
+            profiles[name] = registry.getProfile(name);
+        }
+        return {
+            version: types_1.CODEX_PROFILE_SCHEMA_VERSION,
+            default: registry.getDefault(),
+            profiles,
+        };
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        logger.warn('codex-auth.dashboard.registry-read-failed', `Registry read failed: ${msg}`);
+        throw new Error(`Codex auth profile registry could not be read safely: ${msg}`);
+    }
+}
+// ── Profile entry builder ───────────────────────────────────────────────────
+function buildProfileEntry(name) {
+    const codexHome = path.join((0, codex_profile_paths_1.getCodexInstancesDir)(), name);
+    const authJsonPath = path.join(codexHome, 'auth.json');
+    let authValid = false;
+    let email = null;
+    let plan = null;
+    let accountId = null;
+    try {
+        if (fs.existsSync(authJsonPath)) {
+            // decodeAccountIdentity never throws; returns {} on any error
+            const identity = (0, codex_account_identity_1.decodeAccountIdentity)(authJsonPath);
+            authValid = Object.keys(identity).length > 0 || _hasStructurallyValidIdToken(authJsonPath);
+            email = identity.email ?? null;
+            plan = identity.plan_type ?? null;
+            accountId = identity.account_id ?? null;
+            logger.debug('codex-auth.dashboard.decoded', 'Decoded auth profile summary', {
+                profileName: name,
+                hasEmail: email !== null,
+                hasPlan: plan !== null,
+                hasAccountId: accountId !== null,
+            });
+        }
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        logger.warn('codex-auth.dashboard.decode-error', `Failed to decode auth for profile=${name}: ${msg}`);
+    }
+    return {
+        name,
+        codexHome,
+        email,
+        plan,
+        accountId,
+        // lastUsed is set below by caller from registry metadata
+        lastUsed: null,
+        authValid,
+    };
+}
+/**
+ * Check whether auth.json has a parseable JWT payload, even if it has no
+ * display fields. A non-empty but malformed token is not valid auth.
+ * This sets authValid=true for valid-but-sparse tokens.
+ */
+function _hasStructurallyValidIdToken(authJsonPath) {
+    try {
+        const raw = fs.readFileSync(authJsonPath, 'utf8');
+        const parsed = JSON.parse(raw);
+        const idToken = parsed?.tokens?.id_token;
+        return typeof idToken === 'string' && (0, decode_id_token_1.hasStructurallyValidIdToken)(idToken);
+    }
+    catch {
+        return false;
+    }
+}
+// ── Active resolution ───────────────────────────────────────────────────────
+function resolveActive(registry) {
+    const instancesDir = (0, codex_profile_paths_1.getCodexInstancesDir)();
+    // Precedence 1: explicit $CODEX_HOME set by env (ccsxp, manual)
+    const codexHome = (process.env.CODEX_HOME ?? '').trim();
+    if (codexHome) {
+        // Attempt reverse-map: does any registered profile's codexHome match?
+        const matchedName = Object.keys(registry.profiles).find((name) => path.join(instancesDir, name) === codexHome) ??
+            null;
+        return {
+            name: matchedName,
+            source: 'explicit-codex-home',
+            codexHome,
+        };
+    }
+    // Precedence 2: $CCS_CODEX_PROFILE env var
+    const profileEnv = (process.env.CCS_CODEX_PROFILE ?? '').trim();
+    if (profileEnv) {
+        if (!Object.prototype.hasOwnProperty.call(registry.profiles, profileEnv)) {
+            logger.warn('codex-auth.dashboard.stale-env-profile', 'Ignoring CCS_CODEX_PROFILE because it is not registered', { profileName: profileEnv });
+            return null;
+        }
+        return {
+            name: profileEnv,
+            source: 'env',
+            codexHome: path.join(instancesDir, profileEnv),
+        };
+    }
+    // Precedence 3: registry default
+    const defaultProfile = registry.default;
+    if (defaultProfile) {
+        return {
+            name: defaultProfile,
+            source: 'default',
+            codexHome: path.join(instancesDir, defaultProfile),
+        };
+    }
+    // Precedence 4: no active profile (legacy ~/.codex mode)
+    return null;
+}
+// ── Core builder ────────────────────────────────────────────────────────────
+async function buildSummary() {
+    const registry = readRegistry();
+    const active = resolveActive(registry);
+    const profiles = Object.entries(registry.profiles).map(([name, meta]) => {
+        const entry = buildProfileEntry(name);
+        entry.lastUsed = meta.last_used ?? null;
+        return entry;
+    });
+    return {
+        active,
+        default: registry.default,
+        profiles,
+    };
+}
+// ── Public API ──────────────────────────────────────────────────────────────
+/**
+ * Returns the codex-auth profiles summary, using a 5s in-memory cache.
+ * Tokens are never included in the returned object.
+ */
+async function getCodexAuthProfilesSummary() {
+    const now = Date.now();
+    const registrySignature = getRegistryCacheSignature();
+    if (cache && cache.expiresAt > now && cache.registrySignature === registrySignature) {
+        return cache.value;
+    }
+    const value = await buildSummary();
+    cache = { value, expiresAt: now + TTL_MS, registrySignature };
+    return value;
+}
+exports.getCodexAuthProfilesSummary = getCodexAuthProfilesSummary;
+//# sourceMappingURL=codex-auth-dashboard-service.js.map

package/dist/codex-auth/codex-auth-dashboard-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-auth-dashboard-service.js","sourceRoot":"","sources":["../../src/codex-auth/codex-auth-dashboard-service.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAC7B,iDAAmD;AACnD,qEAAiE;AACjE,uDAAgE;AAChE,+DAAuF;AACvF,mCAAuD;AACvD,qEAAgE;AAGhE,MAAM,MAAM,GAAG,IAAA,sBAAY,EAAC,sBAAsB,CAAC,CAAC;AA0BpD,+EAA+E;AAE/E,IAAI,KAAK,GAIE,IAAI,CAAC;AAChB,MAAM,MAAM,GAAG,IAAI,CAAC;AAEpB;;;;GAIG;AACH,SAAgB,gCAAgC;IAC9C,KAAK,GAAG,IAAI,CAAC;AACf,CAAC;AAFD,4EAEC;AAED,+EAA+E;AAE/E,SAAS,yBAAyB;IAChC,MAAM,YAAY,GAAG,IAAA,8CAAwB,GAAE,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACvC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAAyC,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE,yBAAyB,GAAG,EAAE,CAAC,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,YAAY,GAAG,IAAA,8CAAwB,GAAE,CAAC;IAChD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,OAAO,EAAE,oCAA4B,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAChF,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,6CAAoB,CAAC,YAAY,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAyC,EAAE,CAAC;QAC1D,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;YAC3C,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO;YACL,OAAO,EAAE,oCAA4B;YACrC,OAAO,EAAE,QAAQ,CAAC,UAAU,EAAE;YAC9B,QAAQ;SACT,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE,yBAAyB,GAAG,EAAE,CAAC,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,yDAAyD,GAAG,EAAE,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAA,0CAAoB,GAAE,EAAE,IAAI,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAEvD,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,SAAS,GAAkB,IAAI,CAAC;IAEpC,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAChC,8DAA8D;YAC9D,MAAM,QAAQ,GAAG,IAAA,8CAAqB,EAAC,YAAY,CAAC,CAAC;YACrD,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,4BAA4B,CAAC,YAAY,CAAC,CAAC;YAC3F,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC;YAC/B,IAAI,GAAG,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC;YAClC,SAAS,GAAG,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC;YACxC,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,8BAA8B,EAAE;gBAC3E,WAAW,EAAE,IAAI;gBACjB,QAAQ,EAAE,KAAK,KAAK,IAAI;gBACxB,OAAO,EAAE,IAAI,KAAK,IAAI;gBACtB,YAAY,EAAE,SAAS,KAAK,IAAI;aACjC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,CAAC,IAAI,CACT,mCAAmC,EACnC,qCAAqC,IAAI,KAAK,GAAG,EAAE,CACpD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI;QACJ,SAAS;QACT,KAAK;QACL,IAAI;QACJ,SAAS;QACT,yDAAyD;QACzD,QAAQ,EAAE,IAAI;QACd,SAAS;KACV,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,4BAA4B,CAAC,YAAoB;IACxD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuC,CAAC;QACrE,MAAM,OAAO,GAAG,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;QACzC,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,IAAA,6CAA2B,EAAC,OAAO,CAAC,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E,SAAS,aAAa,CAAC,QAA0B;IAC/C,MAAM,YAAY,GAAG,IAAA,0CAAoB,GAAE,CAAC;IAE5C,gEAAgE;IAChE,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxD,IAAI,SAAS,EAAE,CAAC;QACd,sEAAsE;QACtE,MAAM,WAAW,GACf,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,KAAK,SAAS,CAAC;YAC1F,IAAI,CAAC;QACP,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,qBAAqB;YAC7B,SAAS;SACV,CAAC;IACJ,CAAC;IAED,2CAA2C;IAC3C,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChE,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;YACzE,MAAM,CAAC,IAAI,CACT,wCAAwC,EACxC,yDAAyD,EACzD,EAAE,WAAW,EAAE,UAAU,EAAE,CAC5B,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC;SAC/C,CAAC;IACJ,CAAC;IAED,iCAAiC;IACjC,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC;IACxC,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC;SACnD,CAAC;IACJ,CAAC;IAED,yDAAyD;IACzD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAE/E,KAAK,UAAU,YAAY;IACzB,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAEvC,MAAM,QAAQ,GAA4B,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,CAC7E,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE;QACf,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACtC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC,CACF,CAAC;IAEF,OAAO;QACL,MAAM;QACN,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E;;;GAGG;AACI,KAAK,UAAU,2BAA2B;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,iBAAiB,GAAG,yBAAyB,EAAE,CAAC;IACtD,IAAI,KAAK,IAAI,KAAK,CAAC,SAAS,GAAG,GAAG,IAAI,KAAK,CAAC,iBAAiB,KAAK,iBAAiB,EAAE,CAAC;QACpF,OAAO,KAAK,CAAC,KAAK,CAAC;IACrB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE,CAAC;IACnC,KAAK,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,GAAG,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC9D,OAAO,KAAK,CAAC;AACf,CAAC;AATD,kEASC"}

package/dist/codex-auth/codex-auth-help.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Help text for `ccsx auth` command tree.
+ * ASCII-only. Includes ccsxp scope clarifier (H5).
+ */
+export declare function printCodexAuthHelp(): void;
+export declare function printCodexAuthUseHelp(): void;
+//# sourceMappingURL=codex-auth-help.d.ts.map

package/dist/codex-auth/codex-auth-help.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-auth-help.d.ts","sourceRoot":"","sources":["../../src/codex-auth/codex-auth-help.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,wBAAgB,kBAAkB,IAAI,IAAI,CAkDzC;AAED,wBAAgB,qBAAqB,IAAI,IAAI,CAyB5C"}

package/dist/codex-auth/codex-auth-help.js

@@ -0,0 +1,87 @@
+"use strict";
+/**
+ * Help text for `ccsx auth` command tree.
+ * ASCII-only. Includes ccsxp scope clarifier (H5).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.printCodexAuthUseHelp = exports.printCodexAuthHelp = void 0;
+function printCodexAuthHelp() {
+    process.stdout.write(`CCS Concurrent Codex Account Management
+
+Usage
+  ccsx auth <command> [options]
+
+Commands
+  create <name>          Create a new Codex profile (idempotent)
+  login <name>           Run \`codex login\` against the profile (auto-creates if missing)
+  switch <name>          Set the persistent default Codex profile
+  use <name>             Emit shell-eval exports to activate a profile in this shell only
+  show [name]            List profiles or show details for one
+  remove <name>          Delete a profile (auth.json + profile dir + registry entry)
+  import-default <name>  Migrate legacy ~/.codex/auth.json into a new profile
+
+Shell activation (per terminal)
+  bash/zsh: eval "$(ccsx auth use work)"
+  fish:     ccsx auth use work | source
+  pwsh:     ccsx auth use work | Invoke-Expression
+
+Examples
+  ccsx auth create work
+  ccsx auth login work          # OAuth in browser
+  ccsx auth create personal
+  ccsx auth login personal
+  eval "$(ccsx auth use work)"  # terminal A
+  eval "$(ccsx auth use personal)"  # terminal B
+  codex                              # each terminal uses its own account
+  ccsx auth show
+  ccsx auth switch personal     # change persistent default
+  ccsx auth remove old --yes
+
+Options
+  --yes, -y              Skip confirmation (remove)
+  --force                Re-link config.toml (create) | override default check (remove) |
+                         overwrite existing profile (import-default)
+  --json                 JSON output (show)
+  --shell <s>            Override shell detection (use): bash|zsh|fish|pwsh|cmd
+  --with-history         Copy history.jsonl + sessions/ too (import-default, default: off)
+  --force-while-running  Allow import-default even if Codex is running (risky)
+
+Notes
+  Auth state (auth.json) and history.jsonl are isolated per profile.
+  config.toml is shared via symlink to ~/.codex/config.toml.
+  Default profile (switch) is persistent across shells.
+  Active profile (use) is per-terminal via CODEX_HOME / CCS_CODEX_PROFILE.
+
+  Note: This feature applies only to native \`codex\`. \`ccsxp\` ignores
+  CCS_CODEX_PROFILE and uses its own cliproxy pool.
+`);
+}
+exports.printCodexAuthHelp = printCodexAuthHelp;
+function printCodexAuthUseHelp() {
+    process.stdout.write(`ccsx auth use — Activate a Codex profile in the current shell
+
+Usage
+  ccsx auth use <name> [--shell <bash|zsh|fish|pwsh|cmd>]
+
+Description
+  Emits shell-evalable export statements to stdout. Use within eval "$(...)"
+  only. Output to stdout is shell-evaluatable; do not pipe to other commands.
+
+  All errors and informational messages go to stderr so the eval is never
+  contaminated.
+
+Shell evaluation
+  bash/zsh: eval "$(ccsx auth use work)"
+  fish:     ccsx auth use work | source
+  pwsh:     ccsx auth use work | Invoke-Expression
+  cmd:      (not supported natively; use PowerShell)
+
+Options
+  --shell <s>   Override auto-detected shell: bash|zsh|fish|pwsh|cmd
+
+Note: This profile applies only to native \`codex\`. \`ccsxp\` ignores
+CCS_CODEX_PROFILE and uses its own cliproxy pool.
+`);
+}
+exports.printCodexAuthUseHelp = printCodexAuthUseHelp;
+//# sourceMappingURL=codex-auth-help.js.map

package/dist/codex-auth/codex-auth-help.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-auth-help.js","sourceRoot":"","sources":["../../src/codex-auth/codex-auth-help.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,SAAgB,kBAAkB;IAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgDtB,CAAC,CAAC;AACH,CAAC;AAlDD,gDAkDC;AAED,SAAgB,qBAAqB;IACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;CAuBtB,CAAC,CAAC;AACH,CAAC;AAzBD,sDAyBC"}

package/dist/codex-auth/codex-auth-router.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Codex auth command router.
+ *
+ * Exports runCodexAuth(argv) which routes argv[0] (the subcommand) to
+ * the appropriate handler. Returns an exit code (0 = success, non-zero = error).
+ *
+ * Phase 3 wires this into src/bin/codex-runtime.ts for argv[2]==='auth'.
+ */
+/**
+ * Route a `ccsx auth <subcommand> [...args]` invocation.
+ *
+ * @param argv - Arguments after `auth`, e.g. ['create', 'work'] or ['--help']
+ * @returns Exit code (0 success, 1 user error, 2+ system error)
+ */
+export declare function runCodexAuth(argv: string[]): Promise<number>;
+//# sourceMappingURL=codex-auth-router.d.ts.map

package/dist/codex-auth/codex-auth-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-auth-router.d.ts","sourceRoot":"","sources":["../../src/codex-auth/codex-auth-router.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAiBH;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAwDlE"}

package/dist/codex-auth/codex-auth-router.js

@@ -0,0 +1,77 @@
+"use strict";
+/**
+ * Codex auth command router.
+ *
+ * Exports runCodexAuth(argv) which routes argv[0] (the subcommand) to
+ * the appropriate handler. Returns an exit code (0 = success, non-zero = error).
+ *
+ * Phase 3 wires this into src/bin/codex-runtime.ts for argv[2]==='auth'.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runCodexAuth = void 0;
+const codex_profile_registry_1 = require("./codex-profile-registry");
+const codex_auth_help_1 = require("./codex-auth-help");
+const index_1 = require("./commands/index");
+const packageJson = require('../../package.json');
+/**
+ * Route a `ccsx auth <subcommand> [...args]` invocation.
+ *
+ * @param argv - Arguments after `auth`, e.g. ['create', 'work'] or ['--help']
+ * @returns Exit code (0 success, 1 user error, 2+ system error)
+ */
+async function runCodexAuth(argv) {
+    const [subcommand, ...rest] = argv;
+    // Help / no-arg
+    if (!subcommand || subcommand === '--help' || subcommand === '-h' || subcommand === 'help') {
+        (0, codex_auth_help_1.printCodexAuthHelp)();
+        return 0;
+    }
+    // Version passthrough
+    if (subcommand === '--version' || subcommand === '-v') {
+        process.stdout.write(`ccsx auth ${packageJson.version}\n`);
+        return 0;
+    }
+    const registry = new codex_profile_registry_1.CodexProfileRegistry();
+    const ctx = {
+        registry,
+        version: packageJson.version,
+    };
+    try {
+        switch (subcommand) {
+            case 'create':
+                await (0, index_1.handleCreateCodex)(ctx, rest);
+                return 0;
+            case 'login':
+                await (0, index_1.handleLoginCodex)(ctx, rest);
+                return 0;
+            case 'switch':
+                await (0, index_1.handleSwitchCodex)(ctx, rest);
+                return 0;
+            case 'use':
+                await (0, index_1.handleUseCodex)(ctx, rest);
+                return 0;
+            case 'show':
+                await (0, index_1.handleShowCodex)(ctx, rest);
+                return 0;
+            case 'remove':
+                await (0, index_1.handleRemoveCodex)(ctx, rest);
+                return 0;
+            case 'import-default':
+                await (0, index_1.handleImportDefaultCodex)(ctx, rest);
+                return 0;
+            default:
+                process.stderr.write(`[X] Unknown command: ${subcommand}\n`);
+                process.stderr.write(`    ccsx auth --help\n`);
+                return 1;
+        }
+    }
+    catch (err) {
+        // Unhandled errors from handlers (e.g. process.exit called inside)
+        // These should be rare — handlers use exitWithError() which calls process.exit
+        const msg = err instanceof Error ? err.message : String(err);
+        process.stderr.write(`[X] Unexpected error in ccsx auth ${subcommand}: ${msg}\n`);
+        return 1;
+    }
+}
+exports.runCodexAuth = runCodexAuth;
+//# sourceMappingURL=codex-auth-router.js.map

package/dist/codex-auth/codex-auth-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-auth-router.js","sourceRoot":"","sources":["../../src/codex-auth/codex-auth-router.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAEH,qEAAgE;AAChE,uDAAuD;AACvD,4CAQ0B;AAG1B,MAAM,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAwB,CAAC;AAEzE;;;;;GAKG;AACI,KAAK,UAAU,YAAY,CAAC,IAAc;IAC/C,MAAM,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAEnC,gBAAgB;IAChB,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC3F,IAAA,oCAAkB,GAAE,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,sBAAsB;IACtB,IAAI,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,WAAW,CAAC,OAAO,IAAI,CAAC,CAAC;QAC3D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,6CAAoB,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAwB;QAC/B,QAAQ;QACR,OAAO,EAAE,WAAW,CAAC,OAAO;KAC7B,CAAC;IAEF,IAAI,CAAC;QACH,QAAQ,UAAU,EAAE,CAAC;YACnB,KAAK,QAAQ;gBACX,MAAM,IAAA,yBAAiB,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACnC,OAAO,CAAC,CAAC;YACX,KAAK,OAAO;gBACV,MAAM,IAAA,wBAAgB,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAClC,OAAO,CAAC,CAAC;YACX,KAAK,QAAQ;gBACX,MAAM,IAAA,yBAAiB,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACnC,OAAO,CAAC,CAAC;YACX,KAAK,KAAK;gBACR,MAAM,IAAA,sBAAc,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAChC,OAAO,CAAC,CAAC;YACX,KAAK,MAAM;gBACT,MAAM,IAAA,uBAAe,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACjC,OAAO,CAAC,CAAC;YACX,KAAK,QAAQ;gBACX,MAAM,IAAA,yBAAiB,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACnC,OAAO,CAAC,CAAC;YACX,KAAK,gBAAgB;gBACnB,MAAM,IAAA,gCAAwB,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC1C,OAAO,CAAC,CAAC;YACX;gBACE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,UAAU,IAAI,CAAC,CAAC;gBAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;gBAC/C,OAAO,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,mEAAmE;QACnE,+EAA+E;QAC/E,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,UAAU,KAAK,GAAG,IAAI,CAAC,CAAC;QAClF,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAxDD,oCAwDC"}

package/dist/codex-auth/codex-config-symlink.d.ts

@@ -0,0 +1,14 @@
+export interface EnsureSharedConfigSymlinkOptions {
+    overwriteRegularFile?: boolean;
+}
+/**
+ * Ensure <profileDir>/config.toml points at the shared ~/.codex/config.toml.
+ * Self-healing: recreates stale or missing symlinks. If symlink creation is
+ * unavailable, copies the shared config so the profile still has settings.
+ *
+ * @param profileDir  - The per-profile directory (will be created if missing).
+ * @param sharedConfigPath - Override for the shared target path (used in tests
+ *   to avoid touching real ~/.codex/config.toml). Defaults to getSharedCodexConfigPath().
+ */
+export declare function ensureSharedConfigSymlink(profileDir: string, sharedConfigPath?: string, options?: EnsureSharedConfigSymlinkOptions): void;
+//# sourceMappingURL=codex-config-symlink.d.ts.map

package/dist/codex-auth/codex-config-symlink.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-config-symlink.d.ts","sourceRoot":"","sources":["../../src/codex-auth/codex-config-symlink.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,gCAAgC;IAC/C,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,MAAM,EAClB,gBAAgB,CAAC,EAAE,MAAM,EACzB,OAAO,GAAE,gCAAqC,GAC7C,IAAI,CA0EN"}

package/dist/codex-auth/codex-config-symlink.js

@@ -0,0 +1,128 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ensureSharedConfigSymlink = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const logging_1 = require("../services/logging");
+const codex_profile_paths_1 = require("./codex-profile-paths");
+const logger = (0, logging_1.createLogger)('codex-auth:symlink');
+/**
+ * Ensure <profileDir>/config.toml points at the shared ~/.codex/config.toml.
+ * Self-healing: recreates stale or missing symlinks. If symlink creation is
+ * unavailable, copies the shared config so the profile still has settings.
+ *
+ * @param profileDir  - The per-profile directory (will be created if missing).
+ * @param sharedConfigPath - Override for the shared target path (used in tests
+ *   to avoid touching real ~/.codex/config.toml). Defaults to getSharedCodexConfigPath().
+ */
+function ensureSharedConfigSymlink(profileDir, sharedConfigPath, options = {}) {
+    const targetPath = sharedConfigPath ?? (0, codex_profile_paths_1.getSharedCodexConfigPath)();
+    const linkPath = path.join(profileDir, 'config.toml');
+    // Ensure profile directory exists
+    fs.mkdirSync(profileDir, { recursive: true, mode: 0o700 });
+    // Ensure shared config target parent directory exists
+    fs.mkdirSync(path.dirname(targetPath), { recursive: true, mode: 0o700 });
+    // Create empty shared config if it doesn't exist — Codex will populate on first run
+    if (!fs.existsSync(targetPath)) {
+        fs.writeFileSync(targetPath, '', { mode: 0o600 });
+        logger.stage('dispatch', 'codex.shared-config.created', 'Created empty shared config.toml', {
+            path: targetPath,
+        });
+    }
+    // Inspect whatever currently exists at the link path
+    let existingStat = null;
+    try {
+        existingStat = fs.lstatSync(linkPath);
+    }
+    catch {
+        // ENOENT — nothing there yet, proceed to create
+    }
+    if (existingStat !== null) {
+        if (existingStat.isSymbolicLink()) {
+            const currentTarget = fs.readlinkSync(linkPath);
+            if (currentTarget === targetPath) {
+                // Already correct — idempotent return
+                logger.stage('dispatch', 'codex.symlink.ok', 'Shared config symlink already correct', {
+                    link: linkPath,
+                });
+                return;
+            }
+            // Stale symlink — remove and re-create
+            fs.unlinkSync(linkPath);
+            logger.stage('dispatch', 'codex.symlink.repaired', 'Replaced stale symlink', {
+                link: linkPath,
+                was: currentTarget,
+                now: targetPath,
+            });
+        }
+        else if (options.overwriteRegularFile ||
+            isRegularConfigCopyUnmodified(linkPath, targetPath)) {
+            // Explicit repair or unchanged fallback copy — replace with a shared symlink when possible.
+            process.stderr.write(`[!] codex-auth: overwriting regular file at ${linkPath} with symlink to shared config.toml\n`);
+            fs.unlinkSync(linkPath);
+        }
+        else {
+            process.stderr.write(`[!] codex-auth: preserving existing regular config.toml at ${linkPath}; ` +
+                `use ccsx auth create <name> --force to refresh it.\n`);
+            logger.warn('codex-auth.symlink-regular-file-preserved', 'Preserved regular config.toml', {
+                link: linkPath,
+                target: targetPath,
+            });
+            return;
+        }
+    }
+    try {
+        fs.symlinkSync(targetPath, linkPath);
+        logger.stage('dispatch', 'codex.symlink.created', 'Created shared config symlink', {
+            link: linkPath,
+            target: targetPath,
+        });
+    }
+    catch (err) {
+        copySharedConfigFallback(targetPath, linkPath, err);
+    }
+}
+exports.ensureSharedConfigSymlink = ensureSharedConfigSymlink;
+function isRegularConfigCopyUnmodified(linkPath, targetPath) {
+    try {
+        return fs.readFileSync(linkPath, 'utf8') === fs.readFileSync(targetPath, 'utf8');
+    }
+    catch {
+        return false;
+    }
+}
+function copySharedConfigFallback(targetPath, linkPath, err) {
+    fs.copyFileSync(targetPath, linkPath);
+    fs.chmodSync(linkPath, 0o600);
+    process.stderr.write(`[!] codex-auth: symlink unavailable; copied shared config.toml to ${linkPath}. ` +
+        `Config edits won't propagate automatically.\n`);
+    logger.warn('codex-auth.symlink-copy-fallback', 'Copied shared config after symlink failure', {
+        link: linkPath,
+        target: targetPath,
+        error: err instanceof Error ? err.message : String(err),
+    });
+}
+//# sourceMappingURL=codex-config-symlink.js.map

package/dist/codex-auth/codex-config-symlink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-config-symlink.js","sourceRoot":"","sources":["../../src/codex-auth/codex-config-symlink.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AACzB,2CAA6B;AAC7B,iDAAmD;AACnD,+DAAiE;AAEjE,MAAM,MAAM,GAAG,IAAA,sBAAY,EAAC,oBAAoB,CAAC,CAAC;AAMlD;;;;;;;;GAQG;AACH,SAAgB,yBAAyB,CACvC,UAAkB,EAClB,gBAAyB,EACzB,UAA4C,EAAE;IAE9C,MAAM,UAAU,GAAG,gBAAgB,IAAI,IAAA,8CAAwB,GAAE,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAEtD,kCAAkC;IAClC,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAE3D,sDAAsD;IACtD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAEzE,oFAAoF;IACpF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,6BAA6B,EAAE,kCAAkC,EAAE;YAC1F,IAAI,EAAE,UAAU;SACjB,CAAC,CAAC;IACL,CAAC;IAED,qDAAqD;IACrD,IAAI,YAAY,GAAoB,IAAI,CAAC;IACzC,IAAI,CAAC;QACH,YAAY,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;IAED,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1B,IAAI,YAAY,CAAC,cAAc,EAAE,EAAE,CAAC;YAClC,MAAM,aAAa,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAChD,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;gBACjC,sCAAsC;gBACtC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,kBAAkB,EAAE,uCAAuC,EAAE;oBACpF,IAAI,EAAE,QAAQ;iBACf,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,uCAAuC;YACvC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACxB,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,wBAAwB,EAAE,wBAAwB,EAAE;gBAC3E,IAAI,EAAE,QAAQ;gBACd,GAAG,EAAE,aAAa;gBAClB,GAAG,EAAE,UAAU;aAChB,CAAC,CAAC;QACL,CAAC;aAAM,IACL,OAAO,CAAC,oBAAoB;YAC5B,6BAA6B,CAAC,QAAQ,EAAE,UAAU,CAAC,EACnD,CAAC;YACD,4FAA4F;YAC5F,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,+CAA+C,QAAQ,uCAAuC,CAC/F,CAAC;YACF,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8DAA8D,QAAQ,IAAI;gBACxE,sDAAsD,CACzD,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE,+BAA+B,EAAE;gBACxF,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,uBAAuB,EAAE,+BAA+B,EAAE;YACjF,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wBAAwB,CAAC,UAAU,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AA9ED,8DA8EC;AAED,SAAS,6BAA6B,CAAC,QAAgB,EAAE,UAAkB;IACzE,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,UAAkB,EAAE,QAAgB,EAAE,GAAY;IAClF,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACtC,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qEAAqE,QAAQ,IAAI;QAC/E,+CAA+C,CAClD,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,4CAA4C,EAAE;QAC5F,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,UAAU;QAClB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;KACxD,CAAC,CAAC;AACL,CAAC"}

package/dist/codex-auth/codex-profile-paths.d.ts

@@ -0,0 +1,5 @@
+export declare function getCodexAuthRegistryPath(): string;
+export declare function getCodexInstancesDir(): string;
+export declare function resolveCodexProfileDir(name: string): string;
+export declare function getSharedCodexConfigPath(): string;
+//# sourceMappingURL=codex-profile-paths.d.ts.map

package/dist/codex-auth/codex-profile-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-profile-paths.d.ts","sourceRoot":"","sources":["../../src/codex-auth/codex-profile-paths.ts"],"names":[],"mappings":"AAKA,wBAAgB,wBAAwB,IAAI,MAAM,CAEjD;AAED,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAa3D;AAID,wBAAgB,wBAAwB,IAAI,MAAM,CAEjD"}