@namzu/sdk 58.1.1 → 60.0.0

package/dist/account/registry.js

@@ -0,0 +1,340 @@
+import { randomBytes } from 'node:crypto';
+import { chmodSync, closeSync, fsyncSync, mkdirSync, openSync, readFileSync, realpathSync, renameSync, rmSync, unlinkSync, writeSync, } from 'node:fs';
+import { basename, dirname, isAbsolute, join, relative, resolve } from 'node:path';
+import { z } from 'zod';
+import { resolveNamzuHome } from '../session/home.js';
+import { withAccountLockSync } from './lock.js';
+import { AccountRegistryError, CredentialWithdrawnError, DEFAULT_ACCOUNT_LABEL, } from './types.js';
+export const ACCOUNTS_FILE_NAME = 'accounts.json';
+export const ACCOUNTS_FILE_VERSION = 1;
+const LABEL = /^[a-z0-9-]{1,32}$/;
+const CODEX_PROVIDER = 'codex';
+const PROVIDER = /^[a-z0-9][a-z0-9._-]{0,63}$/;
+// Unknown keys are kept so a store written by a newer build survives a rewrite by this one.
+const SourceSchema = z.discriminatedUnion('kind', [
+    z.object({ kind: z.literal('codex-home'), dir: z.string().min(1) }).passthrough(),
+    z.object({ kind: z.literal('api-key'), keyRef: z.string().min(1) }).passthrough(),
+]);
+const AccountSchema = z
+    .object({
+    id: z.string().min(1),
+    provider: z.string().min(1),
+    label: z.string().min(1),
+    source: SourceSchema,
+    createdAt: z.string(),
+    display: z.string().optional(),
+    baseUrl: z.string().optional(),
+    defaultModel: z.string().optional(),
+})
+    .passthrough();
+const FileSchema = z
+    .object({
+    version: z.literal(ACCOUNTS_FILE_VERSION),
+    accounts: z.array(AccountSchema),
+    keys: z.record(z.string()),
+})
+    .passthrough();
+function sleepBlocking() {
+    Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, 25);
+}
+export function accountId(provider, label) {
+    return `${provider}:${label}`;
+}
+/** Split an id into provider and label, or `undefined` if it is not shaped `<provider>:<label>`. */
+export function parseAccountId(id) {
+    const at = id.indexOf(':');
+    if (at <= 0 || at === id.length - 1)
+        return undefined;
+    return { provider: id.slice(0, at), label: id.slice(at + 1) };
+}
+function writeAtomic(path, text) {
+    const temporary = join(dirname(path), `.${randomBytes(8).toString('hex')}.accounts.tmp`);
+    const fd = openSync(temporary, 'wx', 0o600);
+    try {
+        writeSync(fd, text);
+        fsyncSync(fd);
+    }
+    finally {
+        closeSync(fd);
+    }
+    try {
+        renameSync(temporary, path);
+    }
+    catch (error) {
+        try {
+            unlinkSync(temporary);
+        }
+        catch {
+            // The rename already failed; the leftover temporary is not the failure to report.
+        }
+        throw error;
+    }
+}
+export function createAccountRegistry(options = {}) {
+    const home = options.home ?? resolveNamzuHome();
+    const path = join(home, ACCOUNTS_FILE_NAME);
+    const lockPath = `${path}.lock`;
+    const accountsRoot = join(home, 'accounts');
+    const now = options.now ?? (() => new Date());
+    function defaultAccount(provider) {
+        return {
+            id: accountId(provider, DEFAULT_ACCOUNT_LABEL),
+            provider,
+            label: DEFAULT_ACCOUNT_LABEL,
+            source: { kind: 'existing-default' },
+            createdAt: new Date(0).toISOString(),
+        };
+    }
+    function read() {
+        let text;
+        try {
+            text = readFileSync(path, 'utf8');
+        }
+        catch (error) {
+            if (error.code === 'ENOENT') {
+                return { version: ACCOUNTS_FILE_VERSION, accounts: [], keys: {} };
+            }
+            throw error;
+        }
+        let json;
+        try {
+            json = JSON.parse(text);
+        }
+        catch {
+            throw new AccountRegistryError(`${path} is not valid JSON; no account was changed.`);
+        }
+        const parsed = FileSchema.safeParse(json);
+        if (!parsed.success) {
+            throw new AccountRegistryError(`${path} is not a version ${ACCOUNTS_FILE_VERSION} account store.`);
+        }
+        return parsed.data;
+    }
+    function mutate(change) {
+        mkdirSync(home, { recursive: true, mode: 0o700 });
+        return withAccountLockSync(lockPath, () => {
+            const file = read();
+            const result = change(file);
+            writeAtomic(path, `${JSON.stringify(file, null, 2)}\n`);
+            try {
+                chmodSync(path, 0o600);
+            }
+            catch {
+                // Windows has no POSIX mode; the temporary was already created 0600 where it applies.
+            }
+            return result;
+        }, { attempts: 80, wait: options.lockWait ?? sleepBlocking });
+    }
+    function ownDir(source) {
+        return String(source.dir);
+    }
+    function toAccount(stored) {
+        return stored;
+    }
+    function checkLabel(label) {
+        if (!LABEL.test(label)) {
+            throw new AccountRegistryError('An account label is 1 to 32 characters: lowercase letters, digits and hyphens.');
+        }
+        if (label === DEFAULT_ACCOUNT_LABEL) {
+            throw new AccountRegistryError('The label "default" belongs to the existing sign-in.');
+        }
+    }
+    function checkEndpointAndModel(input) {
+        if (input.baseUrl !== undefined) {
+            let url;
+            try {
+                url = new URL(input.baseUrl);
+            }
+            catch {
+                throw new AccountRegistryError('The base URL is not a valid address.');
+            }
+            if (url.protocol !== 'https:' && url.protocol !== 'http:') {
+                throw new AccountRegistryError('The base URL must start with https:// or http://.');
+            }
+            if (url.username !== '' || url.password !== '') {
+                throw new AccountRegistryError('The base URL must not contain a user name or password.');
+            }
+        }
+        if (input.defaultModel !== undefined && !/^\S{1,200}$/.test(input.defaultModel)) {
+            throw new AccountRegistryError('The default model is one name of up to 200 characters.');
+        }
+    }
+    function realOrSelf(target) {
+        // Resolve symlinks through the deepest existing ancestor, so a symlinked
+        // parent cannot lead outside the accounts folder.
+        let existing = resolve(target);
+        const rest = [];
+        for (;;) {
+            try {
+                return join(realpathSync(existing), ...rest.reverse());
+            }
+            catch {
+                const parent = dirname(existing);
+                if (parent === existing)
+                    return resolve(target);
+                rest.push(basename(existing));
+                existing = parent;
+            }
+        }
+    }
+    function insideAccountsRoot(dir) {
+        const rel = relative(realOrSelf(accountsRoot), realOrSelf(dir));
+        return rel !== '' && !rel.startsWith('..') && !isAbsolute(rel);
+    }
+    function nests(outer, inner) {
+        const rel = relative(realOrSelf(outer), realOrSelf(inner));
+        return rel === '' || (!rel.startsWith('..') && !isAbsolute(rel));
+    }
+    const registry = {
+        list(provider) {
+            const stored = read().accounts.map(toAccount);
+            const providers = new Set([
+                ...(options.defaultProviders ?? []),
+                ...stored.map((a) => a.provider),
+            ]);
+            if (provider !== undefined)
+                providers.add(provider);
+            const defaults = [...providers]
+                .filter((p) => provider === undefined || p === provider)
+                .map(defaultAccount);
+            return [
+                ...defaults,
+                ...stored.filter((a) => provider === undefined || a.provider === provider),
+            ];
+        },
+        get(id) {
+            const parsed = parseAccountId(id);
+            if (!parsed)
+                return undefined;
+            if (parsed.label === DEFAULT_ACCOUNT_LABEL)
+                return defaultAccount(parsed.provider);
+            const stored = read().accounts.find((a) => a.id === id);
+            return stored ? toAccount(stored) : undefined;
+        },
+        add(input) {
+            if (!PROVIDER.test(input.provider)) {
+                throw new AccountRegistryError('The provider name is not valid.');
+            }
+            checkLabel(input.label);
+            const id = accountId(input.provider, input.label);
+            return mutate((file) => {
+                if (file.accounts.some((a) => a.id === id)) {
+                    throw new AccountRegistryError(`There is already an account labelled "${input.label}".`);
+                }
+                let source;
+                if (input.kind === 'api-key') {
+                    if (input.apiKey.length === 0)
+                        throw new AccountRegistryError('The API key is empty.');
+                    checkEndpointAndModel(input);
+                    const keyRef = `key-${randomBytes(9).toString('hex')}`;
+                    file.keys[keyRef] = input.apiKey;
+                    source = { kind: 'api-key', keyRef };
+                }
+                else {
+                    if (input.provider !== CODEX_PROVIDER) {
+                        throw new AccountRegistryError('A Codex home account belongs to the codex provider only.');
+                    }
+                    const dir = resolve(input.dir ?? join(accountsRoot, 'codex', input.label));
+                    if (!insideAccountsRoot(dir)) {
+                        throw new AccountRegistryError('A Codex account directory must live under the Namzu accounts folder.');
+                    }
+                    if (file.accounts.some((a) => a.source.kind === 'codex-home' &&
+                        (nests(a.source.dir, dir) || nests(dir, a.source.dir)))) {
+                        throw new AccountRegistryError('Another account already uses that Codex directory, or one inside or around it.');
+                    }
+                    mkdirSync(dir, { recursive: true, mode: 0o700 });
+                    source = { kind: 'codex-home', dir };
+                }
+                const account = {
+                    id,
+                    provider: input.provider,
+                    label: input.label,
+                    source,
+                    createdAt: now().toISOString(),
+                    ...(input.display !== undefined ? { display: input.display } : {}),
+                    ...(input.kind === 'api-key' && input.baseUrl !== undefined
+                        ? { baseUrl: input.baseUrl }
+                        : {}),
+                    ...(input.kind === 'api-key' && input.defaultModel !== undefined
+                        ? { defaultModel: input.defaultModel }
+                        : {}),
+                };
+                file.accounts.push(account);
+                return account;
+            });
+        },
+        rename(id, label) {
+            checkLabel(label);
+            return mutate((file) => {
+                const index = file.accounts.findIndex((a) => a.id === id);
+                const current = file.accounts[index];
+                if (!current)
+                    throw new AccountRegistryError('No such account.');
+                const nextId = accountId(current.provider, label);
+                if (file.accounts.some((a) => a.id === nextId)) {
+                    throw new AccountRegistryError(`There is already an account labelled "${label}".`);
+                }
+                const renamed = { ...current, id: nextId, label };
+                file.accounts[index] = renamed;
+                return toAccount(renamed);
+            });
+        },
+        remove(id) {
+            const parsed = parseAccountId(id);
+            if (parsed?.label === DEFAULT_ACCOUNT_LABEL) {
+                throw new AccountRegistryError('The existing sign-in is not an account that can be removed.');
+            }
+            mutate((file) => {
+                const index = file.accounts.findIndex((a) => a.id === id);
+                const current = file.accounts[index];
+                if (!current)
+                    throw new AccountRegistryError('No such account.');
+                file.accounts.splice(index, 1);
+                if (current.source.kind === 'api-key') {
+                    delete file.keys[current.source.keyRef];
+                }
+                else if (insideAccountsRoot(ownDir(current.source)) &&
+                    !file.accounts.some((a) => a.source.kind === 'codex-home' && nests(ownDir(current.source), a.source.dir))) {
+                    // Only a directory this registry could have created, and that holds no
+                    // other account's directory, is ever deleted.
+                    rmSync(ownDir(current.source), { recursive: true, force: true });
+                }
+            });
+        },
+        async resolve(id, signal) {
+            const account = registry.get(id);
+            if (!account)
+                throw new CredentialWithdrawnError(id, 'That account no longer exists.');
+            const { source } = account;
+            if (source.kind === 'existing-default') {
+                if (!options.readers?.existingDefault) {
+                    throw new CredentialWithdrawnError(id, 'No reader is configured for the existing sign-in.');
+                }
+                return options.readers.existingDefault(account.provider, signal);
+            }
+            if (source.kind === 'codex-home') {
+                if (account.provider !== CODEX_PROVIDER) {
+                    throw new CredentialWithdrawnError(id, 'A Codex home is only valid for the codex provider.');
+                }
+                if (!options.readers?.codexHome) {
+                    throw new CredentialWithdrawnError(id, 'No reader is configured for Codex accounts.');
+                }
+                return options.readers.codexHome(account, signal);
+            }
+            const secret = read().keys[source.keyRef];
+            if (secret === undefined) {
+                throw new CredentialWithdrawnError(id, 'The saved key for this account is missing.');
+            }
+            return {
+                kind: 'api-key',
+                accessToken: secret,
+                ...(account.baseUrl !== undefined ? { baseUrl: account.baseUrl } : {}),
+                ...(account.defaultModel !== undefined ? { defaultModel: account.defaultModel } : {}),
+            };
+        },
+        next(provider, excluding) {
+            return registry.list(provider).find((a) => !excluding.includes(a.id));
+        },
+    };
+    return registry;
+}
+//# sourceMappingURL=registry.js.map

package/dist/account/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/account/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EACN,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,MAAM,EACN,UAAU,EACV,SAAS,GACT,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAClF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAA;AAC/C,OAAO,EAKN,oBAAoB,EAEpB,wBAAwB,EACxB,qBAAqB,GAGrB,MAAM,YAAY,CAAA;AAEnB,MAAM,CAAC,MAAM,kBAAkB,GAAG,eAAe,CAAA;AACjD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAA;AACtC,MAAM,KAAK,GAAG,mBAAmB,CAAA;AACjC,MAAM,cAAc,GAAG,OAAO,CAAA;AAC9B,MAAM,QAAQ,GAAG,6BAA6B,CAAA;AAE9C,4FAA4F;AAC5F,MAAM,YAAY,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACjD,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE;IACjF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE;CACjF,CAAC,CAAA;AACF,MAAM,aAAa,GAAG,CAAC;KACrB,MAAM,CAAC;IACP,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,MAAM,EAAE,YAAY;IACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,WAAW,EAAE,CAAA;AACf,MAAM,UAAU,GAAG,CAAC;KAClB,MAAM,CAAC;IACP,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC1B,CAAC;KACD,WAAW,EAAE,CAAA;AAcf,SAAS,aAAa;IACrB,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;AACjE,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,QAAgB,EAAE,KAAa;IACxD,OAAO,GAAG,QAAQ,IAAI,KAAK,EAAE,CAAA;AAC9B,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,cAAc,CAAC,EAAU;IACxC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAC1B,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IACrD,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAA;AAC9D,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,IAAY;IAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;IACxF,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;IAC3C,IAAI,CAAC;QACJ,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;QACnB,SAAS,CAAC,EAAE,CAAC,CAAA;IACd,CAAC;YAAS,CAAC;QACV,SAAS,CAAC,EAAE,CAAC,CAAA;IACd,CAAC;IACD,IAAI,CAAC;QACJ,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC;YACJ,UAAU,CAAC,SAAS,CAAC,CAAA;QACtB,CAAC;QAAC,MAAM,CAAC;YACR,kFAAkF;QACnF,CAAC;QACD,MAAM,KAAK,CAAA;IACZ,CAAC;AACF,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,UAAkC,EAAE;IACzE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,gBAAgB,EAAE,CAAA;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAA;IAC3C,MAAM,QAAQ,GAAG,GAAG,IAAI,OAAO,CAAA;IAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IAE7C,SAAS,cAAc,CAAC,QAAgB;QACvC,OAAO;YACN,EAAE,EAAE,SAAS,CAAC,QAAQ,EAAE,qBAAqB,CAAC;YAC9C,QAAQ;YACR,KAAK,EAAE,qBAAqB;YAC5B,MAAM,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;YACpC,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;SACpC,CAAA;IACF,CAAC;IAED,SAAS,IAAI;QACZ,IAAI,IAAY,CAAA;QAChB,IAAI,CAAC;YACJ,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACxD,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;YAClE,CAAC;YACD,MAAM,KAAK,CAAA;QACZ,CAAC;QACD,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACJ,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACxB,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,oBAAoB,CAAC,GAAG,IAAI,6CAA6C,CAAC,CAAA;QACrF,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QACzC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,oBAAoB,CAC7B,GAAG,IAAI,qBAAqB,qBAAqB,iBAAiB,CAClE,CAAA;QACF,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAA;IACnB,CAAC;IAED,SAAS,MAAM,CAAI,MAA8B;QAChD,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACjD,OAAO,mBAAmB,CACzB,QAAQ,EACR,GAAG,EAAE;YACJ,MAAM,IAAI,GAAG,IAAI,EAAE,CAAA;YACnB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;YAC3B,WAAW,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;YACvD,IAAI,CAAC;gBACJ,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;YACvB,CAAC;YAAC,MAAM,CAAC;gBACR,sFAAsF;YACvF,CAAC;YACD,OAAO,MAAM,CAAA;QACd,CAAC,EACD,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,IAAI,aAAa,EAAE,CACzD,CAAA;IACF,CAAC;IAED,SAAS,MAAM,CAAC,MAAgD;QAC/D,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAC1B,CAAC;IAED,SAAS,SAAS,CAAC,MAAqC;QACvD,OAAO,MAA4B,CAAA;IACpC,CAAC;IAED,SAAS,UAAU,CAAC,KAAa;QAChC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,oBAAoB,CAC7B,gFAAgF,CAChF,CAAA;QACF,CAAC;QACD,IAAI,KAAK,KAAK,qBAAqB,EAAE,CAAC;YACrC,MAAM,IAAI,oBAAoB,CAAC,sDAAsD,CAAC,CAAA;QACvF,CAAC;IACF,CAAC;IAED,SAAS,qBAAqB,CAAC,KAAkD;QAChF,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,GAAQ,CAAA;YACZ,IAAI,CAAC;gBACJ,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACR,MAAM,IAAI,oBAAoB,CAAC,sCAAsC,CAAC,CAAA;YACvE,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAC3D,MAAM,IAAI,oBAAoB,CAAC,mDAAmD,CAAC,CAAA;YACpF,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;gBAChD,MAAM,IAAI,oBAAoB,CAAC,wDAAwD,CAAC,CAAA;YACzF,CAAC;QACF,CAAC;QACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,oBAAoB,CAAC,wDAAwD,CAAC,CAAA;QACzF,CAAC;IACF,CAAC;IAED,SAAS,UAAU,CAAC,MAAc;QACjC,yEAAyE;QACzE,kDAAkD;QAClD,IAAI,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;QAC9B,MAAM,IAAI,GAAa,EAAE,CAAA;QACzB,SAAS,CAAC;YACT,IAAI,CAAC;gBACJ,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;YACvD,CAAC;YAAC,MAAM,CAAC;gBACR,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;gBAChC,IAAI,MAAM,KAAK,QAAQ;oBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAA;gBAC/C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;gBAC7B,QAAQ,GAAG,MAAM,CAAA;YAClB,CAAC;QACF,CAAC;IACF,CAAC;IAED,SAAS,kBAAkB,CAAC,GAAW;QACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;QAC/D,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;IAC/D,CAAC;IAED,SAAS,KAAK,CAAC,KAAa,EAAE,KAAa;QAC1C,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAA;QAC1D,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;IACjE,CAAC;IAED,MAAM,QAAQ,GAAoB;QACjC,IAAI,CAAC,QAAQ;YACZ,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YAC7C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS;gBACjC,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC;gBACnC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;aAChC,CAAC,CAAA;YACF,IAAI,QAAQ,KAAK,SAAS;gBAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YACnD,MAAM,QAAQ,GAAG,CAAC,GAAG,SAAS,CAAC;iBAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,KAAK,QAAQ,CAAC;iBACvD,GAAG,CAAC,cAAc,CAAC,CAAA;YACrB,OAAO;gBACN,GAAG,QAAQ;gBACX,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC;aAC1E,CAAA;QACF,CAAC;QAED,GAAG,CAAC,EAAE;YACL,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,CAAC,CAAA;YACjC,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAA;YAC7B,IAAI,MAAM,CAAC,KAAK,KAAK,qBAAqB;gBAAE,OAAO,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YAClF,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;YACvD,OAAO,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC9C,CAAC;QAED,GAAG,CAAC,KAAiB;YACpB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,oBAAoB,CAAC,iCAAiC,CAAC,CAAA;YAClE,CAAC;YACD,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YACvB,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;YACjD,OAAO,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;gBACtB,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;oBAC5C,MAAM,IAAI,oBAAoB,CAAC,yCAAyC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAA;gBACzF,CAAC;gBACD,IAAI,MAAqB,CAAA;gBACzB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC9B,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;wBAAE,MAAM,IAAI,oBAAoB,CAAC,uBAAuB,CAAC,CAAA;oBACtF,qBAAqB,CAAC,KAAK,CAAC,CAAA;oBAC5B,MAAM,MAAM,GAAG,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAA;oBACtD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAA;oBAChC,MAAM,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAA;gBACrC,CAAC;qBAAM,CAAC;oBACP,IAAK,KAA8B,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;wBACjE,MAAM,IAAI,oBAAoB,CAC7B,0DAA0D,CAC1D,CAAA;oBACF,CAAC;oBACD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;oBAC1E,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC9B,MAAM,IAAI,oBAAoB,CAC7B,sEAAsE,CACtE,CAAA;oBACF,CAAC;oBACD,IACC,IAAI,CAAC,QAAQ,CAAC,IAAI,CACjB,CAAC,CAAC,EAAE,EAAE,CACL,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY;wBAC9B,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACvD,EACA,CAAC;wBACF,MAAM,IAAI,oBAAoB,CAC7B,gFAAgF,CAChF,CAAA;oBACF,CAAC;oBACD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;oBAChD,MAAM,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAA;gBACrC,CAAC;gBACD,MAAM,OAAO,GAAY;oBACxB,EAAE;oBACF,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,MAAM;oBACN,SAAS,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;oBAC9B,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClE,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;wBAC1D,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;wBAC5B,CAAC,CAAC,EAAE,CAAC;oBACN,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;wBAC/D,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE;wBACtC,CAAC,CAAC,EAAE,CAAC;iBACN,CAAA;gBACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAmD,CAAC,CAAA;gBACvE,OAAO,OAAO,CAAA;YACf,CAAC,CAAC,CAAA;QACH,CAAC;QAED,MAAM,CAAC,EAAE,EAAE,KAAK;YACf,UAAU,CAAC,KAAK,CAAC,CAAA;YACjB,OAAO,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;gBACtB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;gBACzD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;gBACpC,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,CAAC,CAAA;gBAChE,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;gBACjD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC;oBAChD,MAAM,IAAI,oBAAoB,CAAC,yCAAyC,KAAK,IAAI,CAAC,CAAA;gBACnF,CAAC;gBACD,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;gBACjD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,OAAO,CAAA;gBAC9B,OAAO,SAAS,CAAC,OAAO,CAAC,CAAA;YAC1B,CAAC,CAAC,CAAA;QACH,CAAC;QAED,MAAM,CAAC,EAAE;YACR,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,CAAC,CAAA;YACjC,IAAI,MAAM,EAAE,KAAK,KAAK,qBAAqB,EAAE,CAAC;gBAC7C,MAAM,IAAI,oBAAoB,CAC7B,6DAA6D,CAC7D,CAAA;YACF,CAAC;YACD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;gBACf,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;gBACzD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;gBACpC,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,CAAC,CAAA;gBAChE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;gBAC9B,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBACvC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;gBACxC,CAAC;qBAAM,IACN,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBAC1C,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAClB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACpF,EACA,CAAC;oBACF,uEAAuE;oBACvE,8CAA8C;oBAC9C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;gBACjE,CAAC;YACF,CAAC,CAAC,CAAA;QACH,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM;YACvB,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAChC,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,wBAAwB,CAAC,EAAE,EAAE,gCAAgC,CAAC,CAAA;YACtF,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;YAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACxC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,CAAC;oBACvC,MAAM,IAAI,wBAAwB,CACjC,EAAE,EACF,mDAAmD,CACnD,CAAA;gBACF,CAAC;gBACD,OAAO,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;YACjE,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAClC,IAAI,OAAO,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;oBACzC,MAAM,IAAI,wBAAwB,CACjC,EAAE,EACF,oDAAoD,CACpD,CAAA;gBACF,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC;oBACjC,MAAM,IAAI,wBAAwB,CAAC,EAAE,EAAE,6CAA6C,CAAC,CAAA;gBACtF,CAAC;gBACD,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAC/B,OAAoE,EACpE,MAAM,CACN,CAAA;YACF,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,IAAI,wBAAwB,CAAC,EAAE,EAAE,4CAA4C,CAAC,CAAA;YACrF,CAAC;YACD,OAAO;gBACN,IAAI,EAAE,SAAS;gBACf,WAAW,EAAE,MAAM;gBACnB,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtE,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrF,CAAA;QACF,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,SAAS;YACvB,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACtE,CAAC;KACD,CAAA;IACD,OAAO,QAAQ,CAAA;AAChB,CAAC"}

package/dist/account/types.d.ts

@@ -0,0 +1,124 @@
+/**
+ * Accounts: more than one credential for one provider, chosen per session.
+ *
+ * An account is a provider plus a label. Today's single sign-in for each
+ * provider is the account labelled `default`; it is read exactly as before and
+ * is never stored here. Further accounts are one of two kinds: a private
+ * Codex home directory that holds its own `auth.json`, or a labelled API key.
+ *
+ * @experimental
+ */
+/** `<provider>:<label>`. The label is `[a-z0-9-]{1,32}`; `default` is reserved for today's sign-in. */
+export type AccountId = string;
+/** The label of the account that wraps a provider's existing sign-in. */
+export declare const DEFAULT_ACCOUNT_LABEL = "default";
+/** Where an account's credential comes from. */
+export type AccountSource = 
+/** The provider's existing sign-in, read the way it was before accounts existed. Synthesised, never stored. */
+{
+    readonly kind: 'existing-default';
+}
+/** A private Codex home: `dir/auth.json` was written by `codex login` run with `CODEX_HOME=dir`. */
+ | {
+    readonly kind: 'codex-home';
+    readonly dir: string;
+}
+/** A labelled API key. `keyRef` names a slot in the registry's secret map; the key itself is never in a log. */
+ | {
+    readonly kind: 'api-key';
+    readonly keyRef: string;
+};
+export interface Account {
+    readonly id: AccountId;
+    readonly provider: string;
+    readonly label: string;
+    readonly source: AccountSource;
+    readonly createdAt: string;
+    /** A short human tag such as the tail of the provider's account id. Never a token. */
+    readonly display?: string;
+    /** API-key accounts only: the endpoint this key belongs to. A different endpoint is a different account. */
+    readonly baseUrl?: string;
+    /** API-key accounts only: the model a session on this account starts with. */
+    readonly defaultModel?: string;
+}
+/** What `add` accepts. The id, the creation time and the key slot are assigned by the registry. */
+export type NewAccount = {
+    readonly provider: string;
+    readonly label: string;
+    readonly kind: 'api-key';
+    readonly apiKey: string;
+    readonly display?: string;
+    /** An http(s) endpoint without embedded credentials. */
+    readonly baseUrl?: string;
+    readonly defaultModel?: string;
+} | {
+    readonly provider: 'codex';
+    readonly label: string;
+    readonly kind: 'codex-home';
+    /** Defaults to `<home>/accounts/codex/<label>`; must stay inside `<home>/accounts`. */
+    readonly dir?: string;
+    readonly display?: string;
+};
+/** A credential ready to put on a request. Never logged. */
+export interface ResolvedAccountCredential {
+    readonly kind: 'api-key' | 'oauth';
+    readonly accessToken: string;
+    /** Set for an API-key account that names its own endpoint. */
+    readonly baseUrl?: string;
+    /** Set for an API-key account that names a starting model. */
+    readonly defaultModel?: string;
+    /** The provider-side account identity some drivers send as a header. */
+    readonly accountId?: string;
+    /** Epoch milliseconds, when the credential expires. */
+    readonly expiresAt?: number;
+}
+/** The credential behind an account is gone or unusable; the caller should offer another account. */
+export declare class CredentialWithdrawnError extends Error {
+    readonly accountId: AccountId;
+    readonly name = "CredentialWithdrawnError";
+    constructor(accountId: AccountId, message: string);
+}
+/** A registry mutation was refused: bad label, duplicate, unknown account, unreadable store. */
+export declare class AccountRegistryError extends Error {
+    readonly name = "AccountRegistryError";
+}
+/** Another owner holds the lock for a store or an account's credential file. */
+export declare class AccountLockError extends Error {
+    readonly lockPath: string;
+    readonly name = "AccountLockError";
+    constructor(lockPath: string, message: string);
+}
+/**
+ * Source-specific readers. The registry owns the bookkeeping; the code that
+ * knows how a provider's sign-in is discovered or refreshed lives with the
+ * provider and is handed in here.
+ */
+export interface AccountCredentialReaders {
+    /** Read the provider's existing sign-in. Throws {@link CredentialWithdrawnError} when there is none. */
+    readonly existingDefault?: (provider: string, signal: AbortSignal) => Promise<ResolvedAccountCredential>;
+    /**
+     * Read, and refresh when due, the credential in a private Codex home. An
+     * implementation holds `withAccountRefreshLock` across the read-refresh-write
+     * so two processes never spend one refresh token twice.
+     */
+    readonly codexHome?: (account: Account & {
+        readonly source: {
+            readonly kind: 'codex-home';
+            readonly dir: string;
+        };
+    }, signal: AbortSignal) => Promise<ResolvedAccountCredential>;
+}
+export interface AccountRegistry {
+    /** Stored accounts plus the synthesised `default` of each known provider. Defaults first, then creation order. */
+    list(provider?: string): Account[];
+    get(id: AccountId): Account | undefined;
+    add(account: NewAccount): Account;
+    /** Change an account's label; its id changes with it. Sessions bound to the old id fall back to `default`. */
+    rename(id: AccountId, label: string): Account;
+    /** Remove a stored account and its secret or private Codex directory. The `default` account cannot be removed. */
+    remove(id: AccountId): void;
+    resolve(id: AccountId, signal: AbortSignal): Promise<ResolvedAccountCredential>;
+    /** The next account of `provider` not in `excluding`, for the "continue with another account" picker. */
+    next(provider: string, excluding: readonly AccountId[]): Account | undefined;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/account/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/account/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,uGAAuG;AACvG,MAAM,MAAM,SAAS,GAAG,MAAM,CAAA;AAE9B,yEAAyE;AACzE,eAAO,MAAM,qBAAqB,YAAY,CAAA;AAE9C,gDAAgD;AAChD,MAAM,MAAM,aAAa;AACxB,+GAA+G;AAC7G;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;CAAE;AACvC,oGAAoG;GAClG;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE;AACvD,gHAAgH;GAC9G;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAExD,MAAM,WAAW,OAAO;IACvB,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,sFAAsF;IACtF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,4GAA4G;IAC5G,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,8EAA8E;IAC9E,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,mGAAmG;AACnG,MAAM,MAAM,UAAU,GACnB;IACA,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,wDAAwD;IACxD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAC7B,GACD;IACA,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,uFAAuF;IACvF,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CACxB,CAAA;AAEJ,4DAA4D;AAC5D,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAA;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,8DAA8D;IAC9D,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,wEAAwE;IACxE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,uDAAuD;IACvD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,qGAAqG;AACrG,qBAAa,wBAAyB,SAAQ,KAAK;IAGjD,QAAQ,CAAC,SAAS,EAAE,SAAS;IAF9B,SAAkB,IAAI,8BAA6B;gBAEzC,SAAS,EAAE,SAAS,EAC7B,OAAO,EAAE,MAAM;CAIhB;AAED,gGAAgG;AAChG,qBAAa,oBAAqB,SAAQ,KAAK;IAC9C,SAAkB,IAAI,0BAAyB;CAC/C;AAED,gFAAgF;AAChF,qBAAa,gBAAiB,SAAQ,KAAK;IAGzC,QAAQ,CAAC,QAAQ,EAAE,MAAM;IAF1B,SAAkB,IAAI,sBAAqB;gBAEjC,QAAQ,EAAE,MAAM,EACzB,OAAO,EAAE,MAAM;CAIhB;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACxC,wGAAwG;IACxG,QAAQ,CAAC,eAAe,CAAC,EAAE,CAC1B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,WAAW,KACf,OAAO,CAAC,yBAAyB,CAAC,CAAA;IACvC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,CACpB,OAAO,EAAE,OAAO,GAAG;QAAE,QAAQ,CAAC,MAAM,EAAE;YAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;YAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,EAC7F,MAAM,EAAE,WAAW,KACf,OAAO,CAAC,yBAAyB,CAAC,CAAA;CACvC;AAED,MAAM,WAAW,eAAe;IAC/B,kHAAkH;IAClH,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,EAAE,CAAA;IAClC,GAAG,CAAC,EAAE,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAA;IACvC,GAAG,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAA;IACjC,8GAA8G;IAC9G,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAA;IAC7C,kHAAkH;IAClH,MAAM,CAAC,EAAE,EAAE,SAAS,GAAG,IAAI,CAAA;IAC3B,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAA;IAC/E,yGAAyG;IACzG,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,SAAS,EAAE,GAAG,OAAO,GAAG,SAAS,CAAA;CAC5E"}

package/dist/account/types.js

@@ -0,0 +1,35 @@
+/**
+ * Accounts: more than one credential for one provider, chosen per session.
+ *
+ * An account is a provider plus a label. Today's single sign-in for each
+ * provider is the account labelled `default`; it is read exactly as before and
+ * is never stored here. Further accounts are one of two kinds: a private
+ * Codex home directory that holds its own `auth.json`, or a labelled API key.
+ *
+ * @experimental
+ */
+/** The label of the account that wraps a provider's existing sign-in. */
+export const DEFAULT_ACCOUNT_LABEL = 'default';
+/** The credential behind an account is gone or unusable; the caller should offer another account. */
+export class CredentialWithdrawnError extends Error {
+    accountId;
+    name = 'CredentialWithdrawnError';
+    constructor(accountId, message) {
+        super(message);
+        this.accountId = accountId;
+    }
+}
+/** A registry mutation was refused: bad label, duplicate, unknown account, unreadable store. */
+export class AccountRegistryError extends Error {
+    name = 'AccountRegistryError';
+}
+/** Another owner holds the lock for a store or an account's credential file. */
+export class AccountLockError extends Error {
+    lockPath;
+    name = 'AccountLockError';
+    constructor(lockPath, message) {
+        super(message);
+        this.lockPath = lockPath;
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/account/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/account/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,yEAAyE;AACzE,MAAM,CAAC,MAAM,qBAAqB,GAAG,SAAS,CAAA;AA4D9C,qGAAqG;AACrG,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAGxC;IAFQ,IAAI,GAAG,0BAA0B,CAAA;IACnD,YACU,SAAoB,EAC7B,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAA;QAHL,cAAS,GAAT,SAAS,CAAW;IAI9B,CAAC;CACD;AAED,gGAAgG;AAChG,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC5B,IAAI,GAAG,sBAAsB,CAAA;CAC/C;AAED,gFAAgF;AAChF,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAGhC;IAFQ,IAAI,GAAG,kBAAkB,CAAA;IAC3C,YACU,QAAgB,EACzB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAA;QAHL,aAAQ,GAAR,QAAQ,CAAQ;IAI1B,CAAC;CACD"}

package/dist/compaction/context-window.d.ts

@@ -29,6 +29,59 @@
  * accumulates every release. Until a driver does that, an entry here is
  * only ever as fresh as the day someone checked it.
  */
+/** The window an id declares with the `[1m]` suffix, and the ceiling `NAMZU_AUTO_COMPACT_WINDOW` accepts. */
+export declare const ONE_MILLION_WINDOW_TOKENS = 1000000;
+/** The window a model is held to when `NAMZU_DISABLE_1M_CONTEXT` is on. */
+export declare const DISABLED_ONE_MILLION_WINDOW_CAP_TOKENS = 200000;
+/**
+ * A model id may end in `[1m]` (any case) to declare a one-million-token
+ * window, whether or not the id is recognised. The suffix is a marker for
+ * Namzu, never part of the vendor's name: strip it with this before an id
+ * reaches a driver or a wire.
+ */
+export declare function splitModelWindowSuffix(model: string): {
+    readonly model: string;
+    readonly declaresOneMillion: boolean;
+};
+/** The id with any `[1m]` suffix removed. */
+export declare function stripModelWindowSuffix(model: string): string;
+/**
+ * `NAMZU_DISABLE_1M_CONTEXT` (1, true, yes or on): the suffix is still
+ * stripped but declares nothing, and no window above 200,000 tokens is
+ * assumed for a model whose window comes from a driver or the table.
+ */
+export declare function oneMillionWindowDisabled(env?: NodeJS.ProcessEnv): boolean;
+/** Smallest and largest window `NAMZU_AUTO_COMPACT_WINDOW` can name. */
+export declare const AUTO_COMPACT_WINDOW_MIN_TOKENS = 100000;
+export declare const AUTO_COMPACT_WINDOW_MAX_TOKENS = 1000000;
+export type AutoCompactWindowParse = {
+    readonly kind: 'in_range';
+    readonly tokens: number;
+} | {
+    readonly kind: 'below_minimum';
+    readonly tokens: number;
+} | {
+    readonly kind: 'above_maximum';
+} | {
+    readonly kind: 'unusable';
+};
+/**
+ * Read an automatic-summary window the way people write one: a plain number
+ * (`200000`) or one with a `k` or `m` suffix (`786k`, `1m`, `1.5m`). Anything
+ * under 100,000 is `below_minimum`, over 1,000,000 `above_maximum`, and
+ * something that is not a size at all `unusable`.
+ */
+export declare function parseAutoCompactWindow(raw: string): AutoCompactWindowParse;
+/**
+ * The window to use for a written size, and a one-line warning when what was
+ * written had to be changed: below 100,000 reads as 100,000, above 1,000,000
+ * as 1,000,000, and a non-size is ignored (`tokens` undefined). `source`
+ * names where it was written, e.g. `NAMZU_AUTO_COMPACT_WINDOW`.
+ */
+export declare function resolveAutoCompactWindowSetting(raw: string | number, source: string): {
+    readonly tokens: number | undefined;
+    readonly warning?: string;
+};
 /**
  * Conservative default for a model we do not recognise.
  *

package/dist/compaction/context-window.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context-window.d.ts","sourceRoot":"","sources":["../../src/compaction/context-window.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,8BAA8B,SAAU,CAAA;AAqDrD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAOjF;AAED,4FAA4F;AAC5F,eAAO,MAAM,iCAAiC,QAAS,CAAA;AACvD,wEAAwE;AACxE,eAAO,MAAM,qBAAqB,QAAS,CAAA;AAC3C;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,MAAM,CAAA;AAE/C;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACtC,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,YAAY,EAAE,MAAM,EACpB,eAAe,CAAC,EAAE,MAAM,EACxB,uBAAuB,CAAC,EAAE,MAAM,GAC9B,MAAM,CAoBR;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB;;;;;;;OAOG;IACH,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,aAAa,GAAG,SAAS,CAAA;CAClE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CACnC,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,KAAK,EAAE,MAAM,GAAG,SAAS;AACzB;;;;;;GAMG;AACH,gBAAgB,CAAC,EAAE,MAAM,GACvB,qBAAqB,CAevB"}
+{"version":3,"file":"context-window.d.ts","sourceRoot":"","sources":["../../src/compaction/context-window.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,6GAA6G;AAC7G,eAAO,MAAM,yBAAyB,UAAY,CAAA;AAClD,2EAA2E;AAC3E,eAAO,MAAM,sCAAsC,SAAU,CAAA;AAI7D;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG;IACtD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAA;CACpC,CAIA;AAED,6CAA6C;AAC7C,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAGtF;AAED,wEAAwE;AACxE,eAAO,MAAM,8BAA8B,SAAU,CAAA;AACrD,eAAO,MAAM,8BAA8B,UAA4B,CAAA;AAEvE,MAAM,MAAM,sBAAsB,GAC/B;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC3D;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;CAAE,GAClC;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAA;AAEhC;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,sBAAsB,CAe1E;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAC9C,GAAG,EAAE,MAAM,GAAG,MAAM,EACpB,MAAM,EAAE,MAAM,GACZ;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAwBpE;AAED;;;;;;GAMG;AACH,eAAO,MAAM,8BAA8B,SAAU,CAAA;AA4ErD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAQjF;AAaD,4FAA4F;AAC5F,eAAO,MAAM,iCAAiC,QAAS,CAAA;AACvD,wEAAwE;AACxE,eAAO,MAAM,qBAAqB,QAAS,CAAA;AAC3C;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,MAAM,CAAA;AAE/C;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACtC,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,YAAY,EAAE,MAAM,EACpB,eAAe,CAAC,EAAE,MAAM,EACxB,uBAAuB,CAAC,EAAE,MAAM,GAC9B,MAAM,CAoBR;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB;;;;;;;OAOG;IACH,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,aAAa,GAAG,SAAS,CAAA;CAClE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CACnC,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,KAAK,EAAE,MAAM,GAAG,SAAS;AACzB;;;;;;GAMG;AACH,gBAAgB,CAAC,EAAE,MAAM,GACvB,qBAAqB,CAmBvB"}