codex-multi-auth 0.1.0

package/dist/lib/preemptive-quota-scheduler.js

@@ -0,0 +1,220 @@
+const DEFAULT_REMAINING_PERCENT_THRESHOLD = 5;
+const DEFAULT_MAX_DEFERRAL_MS = 2 * 60 * 60_000;
+/**
+ * Clamp a number to the inclusive integer range [min, max] after flooring.
+ *
+ * @param value - The input number to be floored and clamped
+ * @param min - The inclusive lower bound
+ * @param max - The inclusive upper bound
+ * @returns The integer result equal to `Math.floor(value)` constrained to the range between `min` and `max`
+ */
+function clampInt(value, min, max) {
+    return Math.max(min, Math.min(max, Math.floor(value)));
+}
+/**
+ * Parses a header value as a finite number and returns it when valid.
+ *
+ * This function is pure: it has no concurrency or filesystem side effects, does not access the Windows filesystem, and does not perform any token redaction.
+ *
+ * @param headers - The Headers object to read the header from
+ * @param name - The name of the header to parse
+ * @returns The parsed finite number from the header, or `undefined` if the header is absent or not a finite number
+ */
+function parseFiniteNumberHeader(headers, name) {
+    const raw = headers.get(name);
+    if (!raw)
+        return undefined;
+    const parsed = Number(raw);
+    return Number.isFinite(parsed) ? parsed : undefined;
+}
+/**
+ * Parse an HTTP header value as a base-10 integer.
+ *
+ * @param headers - The Headers object to read the value from.
+ * @param name - The header name to parse.
+ * @returns The parsed integer if the header exists and is a finite base-10 integer, `undefined` otherwise.
+ */
+function parseFiniteIntHeader(headers, name) {
+    const raw = headers.get(name);
+    if (!raw)
+        return undefined;
+    const parsed = Number.parseInt(raw, 10);
+    return Number.isFinite(parsed) ? parsed : undefined;
+}
+/**
+ * Parse a reset timestamp header for the given prefix and normalize it to milliseconds since the epoch.
+ *
+ * Interprets `<prefix>-reset-after-seconds` as a relative seconds offset from now, and `<prefix>-reset-at` as
+ * either an absolute epoch seconds value or an HTTP-date; returns the corresponding millisecond timestamp or
+ * `undefined` when no valid value is present.
+ *
+ * Concurrency: callers should treat `headers` as an immutable snapshot. Behavior is independent of Windows
+ * filesystem semantics. Sensitive header values (tokens) are not logged or persisted by this function.
+ *
+ * @param headers - The Headers object to read values from.
+ * @param prefix - Header name prefix (for example `"x-rate-limit"` to read `"x-rate-limit-reset-at"` or `"x-rate-limit-reset-after-seconds"`).
+ * @returns The reset time in milliseconds since epoch, or `undefined` if no valid value is found.
+ */
+function parseResetAtMs(headers, prefix, now) {
+    const resetAfterSeconds = parseFiniteIntHeader(headers, `${prefix}-reset-after-seconds`);
+    if (typeof resetAfterSeconds === "number" && resetAfterSeconds > 0) {
+        return now + resetAfterSeconds * 1000;
+    }
+    const resetAtRaw = headers.get(`${prefix}-reset-at`);
+    if (!resetAtRaw)
+        return undefined;
+    const trimmed = resetAtRaw.trim();
+    if (/^\d+$/.test(trimmed)) {
+        const parsedNumber = Number.parseInt(trimmed, 10);
+        if (Number.isFinite(parsedNumber) && parsedNumber > 0) {
+            return parsedNumber < 10_000_000_000 ? parsedNumber * 1000 : parsedNumber;
+        }
+    }
+    const parsedDate = Date.parse(trimmed);
+    return Number.isFinite(parsedDate) ? parsedDate : undefined;
+}
+/**
+ * Create a quota snapshot from HTTP headers when quota signals are present.
+ *
+ * Parses primary and secondary used-percent and reset timestamps and produces a snapshot; returns `null` if no quota signals are present.
+ *
+ * Concurrency: pure and safe for concurrent calls.
+ * Filesystem: does not access the filesystem (no Windows-specific behavior).
+ * Token handling: does not log or persist header values; callers should redact sensitive headers before logging or storing.
+ *
+ * @param headers - HTTP headers to read quota signals from; may contain sensitive values
+ * @param status - HTTP status code associated with the snapshot
+ * @param now - Millisecond epoch used as the snapshot's `updatedAt` timestamp
+ * @returns A QuotaSchedulerSnapshot built from available header values, or `null` when no signals are present
+ */
+export function readQuotaSchedulerSnapshot(headers, status, now = Date.now()) {
+    const primaryPrefix = "x-codex-primary";
+    const secondaryPrefix = "x-codex-secondary";
+    const primaryUsed = parseFiniteNumberHeader(headers, `${primaryPrefix}-used-percent`);
+    const secondaryUsed = parseFiniteNumberHeader(headers, `${secondaryPrefix}-used-percent`);
+    const primaryResetAt = parseResetAtMs(headers, primaryPrefix, now);
+    const secondaryResetAt = parseResetAtMs(headers, secondaryPrefix, now);
+    const hasSignal = typeof primaryUsed === "number" ||
+        typeof secondaryUsed === "number" ||
+        typeof primaryResetAt === "number" ||
+        typeof secondaryResetAt === "number";
+    if (!hasSignal)
+        return null;
+    return {
+        status,
+        primary: { usedPercent: primaryUsed, resetAtMs: primaryResetAt },
+        secondary: { usedPercent: secondaryUsed, resetAtMs: secondaryResetAt },
+        updatedAt: now,
+    };
+}
+export class PreemptiveQuotaScheduler {
+    snapshots = new Map();
+    enabled;
+    primaryRemainingPercentThreshold;
+    secondaryRemainingPercentThreshold;
+    maxDeferralMs;
+    lastPruneAt = 0;
+    constructor(options = {}) {
+        this.enabled = true;
+        this.primaryRemainingPercentThreshold = DEFAULT_REMAINING_PERCENT_THRESHOLD;
+        this.secondaryRemainingPercentThreshold = DEFAULT_REMAINING_PERCENT_THRESHOLD;
+        this.maxDeferralMs = DEFAULT_MAX_DEFERRAL_MS;
+        this.configure(options);
+    }
+    configure(options = {}) {
+        if (typeof options.enabled === "boolean") {
+            this.enabled = options.enabled;
+        }
+        const legacyUsedPercentThreshold = options.usedPercentThreshold;
+        if (typeof legacyUsedPercentThreshold === "number" &&
+            Number.isFinite(legacyUsedPercentThreshold)) {
+            const clampedUsed = clampInt(legacyUsedPercentThreshold, 0, 100);
+            const derivedRemaining = clampInt(100 - clampedUsed, 0, 100);
+            this.primaryRemainingPercentThreshold = derivedRemaining;
+            this.secondaryRemainingPercentThreshold = derivedRemaining;
+        }
+        if (typeof options.remainingPercentThresholdPrimary === "number" &&
+            Number.isFinite(options.remainingPercentThresholdPrimary)) {
+            this.primaryRemainingPercentThreshold = clampInt(options.remainingPercentThresholdPrimary, 0, 100);
+        }
+        if (typeof options.remainingPercentThresholdSecondary === "number" &&
+            Number.isFinite(options.remainingPercentThresholdSecondary)) {
+            this.secondaryRemainingPercentThreshold = clampInt(options.remainingPercentThresholdSecondary, 0, 100);
+        }
+        if (typeof options.maxDeferralMs === "number" && Number.isFinite(options.maxDeferralMs)) {
+            this.maxDeferralMs = Math.max(1_000, Math.floor(options.maxDeferralMs));
+        }
+    }
+    maybePrune(now = Date.now()) {
+        if (now - this.lastPruneAt < 60_000)
+            return;
+        this.prune(now);
+        this.lastPruneAt = now;
+    }
+    update(key, snapshot) {
+        if (!key)
+            return;
+        this.maybePrune(snapshot.updatedAt || Date.now());
+        this.snapshots.set(key, snapshot);
+    }
+    markRateLimited(key, retryAfterMs, now = Date.now()) {
+        if (!key)
+            return;
+        const waitMs = Number.isFinite(retryAfterMs) ? Math.max(0, Math.floor(retryAfterMs)) : 0;
+        this.snapshots.set(key, {
+            status: 429,
+            primary: {
+                usedPercent: 100,
+                resetAtMs: now + waitMs,
+            },
+            secondary: {},
+            updatedAt: now,
+        });
+    }
+    getDeferral(key, now = Date.now()) {
+        this.maybePrune(now);
+        if (!this.enabled) {
+            return { defer: false, waitMs: 0 };
+        }
+        const snapshot = this.snapshots.get(key);
+        if (!snapshot)
+            return { defer: false, waitMs: 0 };
+        const waitCandidates = [snapshot.primary.resetAtMs, snapshot.secondary.resetAtMs]
+            .filter((value) => typeof value === "number" && Number.isFinite(value) && value > now)
+            .map((value) => value - now)
+            .filter((value) => value > 0);
+        const nearestWait = waitCandidates.length > 0 ? Math.min(...waitCandidates) : 0;
+        if (snapshot.status === 429 && nearestWait > 0) {
+            const bounded = Math.min(nearestWait, this.maxDeferralMs);
+            if (bounded > 0) {
+                return { defer: true, waitMs: bounded, reason: "rate-limit" };
+            }
+        }
+        const primaryNearExhausted = typeof snapshot.primary.usedPercent === "number" &&
+            Number.isFinite(snapshot.primary.usedPercent) &&
+            snapshot.primary.usedPercent >= 100 - this.primaryRemainingPercentThreshold;
+        const secondaryNearExhausted = typeof snapshot.secondary.usedPercent === "number" &&
+            Number.isFinite(snapshot.secondary.usedPercent) &&
+            snapshot.secondary.usedPercent >= 100 - this.secondaryRemainingPercentThreshold;
+        const nearExhausted = primaryNearExhausted || secondaryNearExhausted;
+        if (nearExhausted && nearestWait > 0) {
+            const bounded = Math.min(nearestWait, this.maxDeferralMs);
+            if (bounded > 0) {
+                return { defer: true, waitMs: bounded, reason: "quota-near-exhaustion" };
+            }
+        }
+        return { defer: false, waitMs: 0 };
+    }
+    prune(now = Date.now()) {
+        let removed = 0;
+        for (const [key, snapshot] of this.snapshots.entries()) {
+            const latestReset = Math.max(snapshot.primary.resetAtMs ?? 0, snapshot.secondary.resetAtMs ?? 0);
+            if (latestReset > 0 && latestReset <= now) {
+                this.snapshots.delete(key);
+                removed += 1;
+            }
+        }
+        return removed;
+    }
+}
+//# sourceMappingURL=preemptive-quota-scheduler.js.map

package/dist/lib/preemptive-quota-scheduler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preemptive-quota-scheduler.js","sourceRoot":"","sources":["../../lib/preemptive-quota-scheduler.ts"],"names":[],"mappings":"AA0BA,MAAM,mCAAmC,GAAG,CAAC,CAAC;AAC9C,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;AAEhD;;;;;;;GAOG;AACH,SAAS,QAAQ,CAAC,KAAa,EAAE,GAAW,EAAE,GAAW;IACxD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,uBAAuB,CAAC,OAAgB,EAAE,IAAY;IAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAAC,OAAgB,EAAE,IAAY;IAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,cAAc,CAAC,OAAgB,EAAE,MAAc,EAAE,GAAW;IACpE,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,OAAO,EAAE,GAAG,MAAM,sBAAsB,CAAC,CAAC;IACzF,IAAI,OAAO,iBAAiB,KAAK,QAAQ,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;QACpE,OAAO,GAAG,GAAG,iBAAiB,GAAG,IAAI,CAAC;IACvC,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACvD,OAAO,YAAY,GAAG,cAAc,CAAC,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;QAC3E,CAAC;IACF,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAgB,EAAE,MAAc,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC5F,MAAM,aAAa,GAAG,iBAAiB,CAAC;IACxC,MAAM,eAAe,GAAG,mBAAmB,CAAC;IAC5C,MAAM,WAAW,GAAG,uBAAuB,CAAC,OAAO,EAAE,GAAG,aAAa,eAAe,CAAC,CAAC;IACtF,MAAM,aAAa,GAAG,uBAAuB,CAAC,OAAO,EAAE,GAAG,eAAe,eAAe,CAAC,CAAC;IAC1F,MAAM,cAAc,GAAG,cAAc,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;IACnE,MAAM,gBAAgB,GAAG,cAAc,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;IAEvE,MAAM,SAAS,GACd,OAAO,WAAW,KAAK,QAAQ;QAC/B,OAAO,aAAa,KAAK,QAAQ;QACjC,OAAO,cAAc,KAAK,QAAQ;QAClC,OAAO,gBAAgB,KAAK,QAAQ,CAAC;IACtC,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5B,OAAO;QACN,MAAM;QACN,OAAO,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,cAAc,EAAE;QAChE,SAAS,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,EAAE,gBAAgB,EAAE;QACtE,SAAS,EAAE,GAAG;KACd,CAAC;AACH,CAAC;AAED,MAAM,OAAO,wBAAwB;IACnB,SAAS,GAAG,IAAI,GAAG,EAAkC,CAAC;IAC/D,OAAO,CAAU;IACjB,gCAAgC,CAAS;IACzC,kCAAkC,CAAS;IAC3C,aAAa,CAAS;IACtB,WAAW,GAAG,CAAC,CAAC;IAExB,YAAY,UAAiC,EAAE;QAC9C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,gCAAgC,GAAG,mCAAmC,CAAC;QAC5E,IAAI,CAAC,kCAAkC,GAAG,mCAAmC,CAAC;QAC9E,IAAI,CAAC,aAAa,GAAG,uBAAuB,CAAC;QAC7C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAED,SAAS,CAAC,UAAiC,EAAE;QAC5C,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,CAAC;QAED,MAAM,0BAA0B,GAAG,OAAO,CAAC,oBAAoB,CAAC;QAChE,IACC,OAAO,0BAA0B,KAAK,QAAQ;YAC9C,MAAM,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAC1C,CAAC;YACF,MAAM,WAAW,GAAG,QAAQ,CAAC,0BAA0B,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;YACjE,MAAM,gBAAgB,GAAG,QAAQ,CAAC,GAAG,GAAG,WAAW,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;YAC7D,IAAI,CAAC,gCAAgC,GAAG,gBAAgB,CAAC;YACzD,IAAI,CAAC,kCAAkC,GAAG,gBAAgB,CAAC;QAC5D,CAAC;QAED,IACC,OAAO,OAAO,CAAC,gCAAgC,KAAK,QAAQ;YAC5D,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,gCAAgC,CAAC,EACxD,CAAC;YACF,IAAI,CAAC,gCAAgC,GAAG,QAAQ,CAC/C,OAAO,CAAC,gCAAgC,EACxC,CAAC,EACD,GAAG,CACH,CAAC;QACH,CAAC;QAED,IACC,OAAO,OAAO,CAAC,kCAAkC,KAAK,QAAQ;YAC9D,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,kCAAkC,CAAC,EAC1D,CAAC;YACF,IAAI,CAAC,kCAAkC,GAAG,QAAQ,CACjD,OAAO,CAAC,kCAAkC,EAC1C,CAAC,EACD,GAAG,CACH,CAAC;QACH,CAAC;QAED,IAAI,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YACzF,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;QACzE,CAAC;IACF,CAAC;IAEO,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAClC,IAAI,GAAG,GAAG,IAAI,CAAC,WAAW,GAAG,MAAM;YAAE,OAAO;QAC5C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChB,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC;IACxB,CAAC;IAED,MAAM,CAAC,GAAW,EAAE,QAAgC;QACnD,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,eAAe,CAAC,GAAW,EAAE,YAAoB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAClE,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE;YACvB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACR,WAAW,EAAE,GAAG;gBAChB,SAAS,EAAE,GAAG,GAAG,MAAM;aACvB;YACD,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,GAAG;SACd,CAAC,CAAC;IACJ,CAAC;IAED,WAAW,CAAC,GAAW,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACxC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACpC,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAElD,MAAM,cAAc,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC;aAC/E,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,GAAG,CAAC;aACtG,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,GAAG,CAAC;aAC3B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC/B,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEhF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;YAC1D,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBACjB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;YAC/D,CAAC;QACF,CAAC;QAED,MAAM,oBAAoB,GACzB,OAAO,QAAQ,CAAC,OAAO,CAAC,WAAW,KAAK,QAAQ;YAChD,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC;YAC7C,QAAQ,CAAC,OAAO,CAAC,WAAW,IAAI,GAAG,GAAG,IAAI,CAAC,gCAAgC,CAAC;QAC7E,MAAM,sBAAsB,GAC3B,OAAO,QAAQ,CAAC,SAAS,CAAC,WAAW,KAAK,QAAQ;YAClD,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC;YAC/C,QAAQ,CAAC,SAAS,CAAC,WAAW,IAAI,GAAG,GAAG,IAAI,CAAC,kCAAkC,CAAC;QACjF,MAAM,aAAa,GAAG,oBAAoB,IAAI,sBAAsB,CAAC;QACrE,IAAI,aAAa,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;YAC1D,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBACjB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;YAC1E,CAAC;QACF,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACrB,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;YACxD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;YACjG,IAAI,WAAW,GAAG,CAAC,IAAI,WAAW,IAAI,GAAG,EAAE,CAAC;gBAC3C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC3B,OAAO,IAAI,CAAC,CAAC;YACd,CAAC;QACF,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC;CACD"}

package/dist/lib/proactive-refresh.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Proactive Token Refresh Module
+ *
+ * Refreshes OAuth tokens before they expire to prevent auth failures mid-request.
+ * Default buffer: 5 minutes before expiry (configurable via tokenRefreshSkewMs).
+ *
+ * This is a production hardening feature that:
+ * - Reduces mid-request auth failures
+ * - Improves user experience with seamless token rotation
+ * - Works alongside the existing reactive refresh in fetch-helpers
+ */
+import type { ManagedAccount } from "./accounts.js";
+import type { TokenResult } from "./types.js";
+/** Default buffer before expiry to trigger proactive refresh (5 minutes) */
+export declare const DEFAULT_PROACTIVE_BUFFER_MS: number;
+/** Minimum buffer to prevent unnecessary refreshes (30 seconds) */
+export declare const MIN_PROACTIVE_BUFFER_MS: number;
+/**
+ * Result of a proactive refresh operation.
+ */
+export interface ProactiveRefreshResult {
+    refreshed: boolean;
+    tokenResult?: TokenResult;
+    reason: "not_needed" | "no_refresh_token" | "success" | "failed";
+}
+/**
+ * Determines if an account's token should be proactively refreshed.
+ *
+ * @param account - The managed account to check
+ * @param bufferMs - Time buffer before expiry to trigger refresh (default: 5 minutes)
+ * @returns True if token is approaching expiry and should be refreshed
+ */
+export declare function shouldRefreshProactively(account: ManagedAccount, bufferMs?: number): boolean;
+/**
+ * Calculates milliseconds until an account's token expires.
+ *
+ * @param account - The managed account to check
+ * @returns Milliseconds until expiry, or Infinity if no expiry set
+ */
+export declare function getTimeUntilExpiry(account: ManagedAccount): number;
+/**
+ * Proactively refreshes an account's token if it's approaching expiry.
+ *
+ * @param account - The managed account to refresh
+ * @param bufferMs - Time buffer before expiry to trigger refresh
+ * @returns Result indicating whether refresh was performed and outcome
+ */
+export declare function proactiveRefreshAccount(account: ManagedAccount, bufferMs?: number): Promise<ProactiveRefreshResult>;
+/**
+ * Refreshes all accounts that are approaching token expiry.
+ *
+ * @param accounts - Array of managed accounts to check
+ * @param bufferMs - Time buffer before expiry to trigger refresh
+ * @returns Map of account index to refresh result
+ */
+export declare function refreshExpiringAccounts(accounts: ManagedAccount[], bufferMs?: number): Promise<Map<number, ProactiveRefreshResult>>;
+/**
+ * Updates a ManagedAccount with fresh token data from a successful refresh.
+ *
+ * @param account - The account to update
+ * @param result - Successful token refresh result
+ */
+export declare function applyRefreshResult(account: ManagedAccount, result: Extract<TokenResult, {
+    type: "success";
+}>): void;
+//# sourceMappingURL=proactive-refresh.d.ts.map

package/dist/lib/proactive-refresh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proactive-refresh.d.ts","sourceRoot":"","sources":["../../lib/proactive-refresh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAI9C,4EAA4E;AAC5E,eAAO,MAAM,2BAA2B,QAAgB,CAAC;AAEzD,mEAAmE;AACnE,eAAO,MAAM,uBAAuB,QAAY,CAAC;AAEjD;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACtC,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,MAAM,EAAE,YAAY,GAAG,kBAAkB,GAAG,SAAS,GAAG,QAAQ,CAAC;CACjE;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACvC,OAAO,EAAE,cAAc,EACvB,QAAQ,GAAE,MAAoC,GAC5C,OAAO,CAoBT;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM,CAKlE;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC5C,OAAO,EAAE,cAAc,EACvB,QAAQ,GAAE,MAAoC,GAC5C,OAAO,CAAC,sBAAsB,CAAC,CAoCjC;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC5C,QAAQ,EAAE,cAAc,EAAE,EAC1B,QAAQ,GAAE,MAAoC,GAC5C,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC,CA0C9C;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CACjC,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC,GAC/C,IAAI,CAMN"}

package/dist/lib/proactive-refresh.js

@@ -0,0 +1,143 @@
+/**
+ * Proactive Token Refresh Module
+ *
+ * Refreshes OAuth tokens before they expire to prevent auth failures mid-request.
+ * Default buffer: 5 minutes before expiry (configurable via tokenRefreshSkewMs).
+ *
+ * This is a production hardening feature that:
+ * - Reduces mid-request auth failures
+ * - Improves user experience with seamless token rotation
+ * - Works alongside the existing reactive refresh in fetch-helpers
+ */
+import { queuedRefresh } from "./refresh-queue.js";
+import { createLogger } from "./logger.js";
+const log = createLogger("proactive-refresh");
+/** Default buffer before expiry to trigger proactive refresh (5 minutes) */
+export const DEFAULT_PROACTIVE_BUFFER_MS = 5 * 60 * 1000;
+/** Minimum buffer to prevent unnecessary refreshes (30 seconds) */
+export const MIN_PROACTIVE_BUFFER_MS = 30 * 1000;
+/**
+ * Determines if an account's token should be proactively refreshed.
+ *
+ * @param account - The managed account to check
+ * @param bufferMs - Time buffer before expiry to trigger refresh (default: 5 minutes)
+ * @returns True if token is approaching expiry and should be refreshed
+ */
+export function shouldRefreshProactively(account, bufferMs = DEFAULT_PROACTIVE_BUFFER_MS) {
+    // No expiry set - can't determine if refresh is needed
+    if (account.expires === undefined) {
+        return false;
+    }
+    // No access token - definitely needs refresh
+    if (!account.access) {
+        return true;
+    }
+    // Clamp buffer to minimum
+    const safeBufferMs = Math.max(MIN_PROACTIVE_BUFFER_MS, bufferMs);
+    // Check if token expires within buffer window
+    const now = Date.now();
+    const expiresAt = account.expires;
+    const refreshThreshold = expiresAt - safeBufferMs;
+    return now >= refreshThreshold;
+}
+/**
+ * Calculates milliseconds until an account's token expires.
+ *
+ * @param account - The managed account to check
+ * @returns Milliseconds until expiry, or Infinity if no expiry set
+ */
+export function getTimeUntilExpiry(account) {
+    if (account.expires === undefined) {
+        return Infinity;
+    }
+    return Math.max(0, account.expires - Date.now());
+}
+/**
+ * Proactively refreshes an account's token if it's approaching expiry.
+ *
+ * @param account - The managed account to refresh
+ * @param bufferMs - Time buffer before expiry to trigger refresh
+ * @returns Result indicating whether refresh was performed and outcome
+ */
+export async function proactiveRefreshAccount(account, bufferMs = DEFAULT_PROACTIVE_BUFFER_MS) {
+    if (!shouldRefreshProactively(account, bufferMs)) {
+        return { refreshed: false, reason: "not_needed" };
+    }
+    if (!account.refreshToken) {
+        log.warn("Cannot proactively refresh account without refresh token", {
+            accountIndex: account.index,
+        });
+        return { refreshed: false, reason: "no_refresh_token" };
+    }
+    const timeUntilExpiry = getTimeUntilExpiry(account);
+    log.info("Proactively refreshing token", {
+        accountIndex: account.index,
+        email: account.email,
+        expiresInMs: timeUntilExpiry,
+        expiresInMinutes: Math.round(timeUntilExpiry / 60000),
+    });
+    const result = await queuedRefresh(account.refreshToken);
+    if (result.type === "success") {
+        log.info("Proactive refresh succeeded", {
+            accountIndex: account.index,
+            email: account.email,
+        });
+        return { refreshed: true, tokenResult: result, reason: "success" };
+    }
+    log.warn("Proactive refresh failed", {
+        accountIndex: account.index,
+        email: account.email,
+        failureReason: result.reason,
+    });
+    return { refreshed: true, tokenResult: result, reason: "failed" };
+}
+/**
+ * Refreshes all accounts that are approaching token expiry.
+ *
+ * @param accounts - Array of managed accounts to check
+ * @param bufferMs - Time buffer before expiry to trigger refresh
+ * @returns Map of account index to refresh result
+ */
+export async function refreshExpiringAccounts(accounts, bufferMs = DEFAULT_PROACTIVE_BUFFER_MS) {
+    const results = new Map();
+    const accountsToRefresh = accounts.filter((a) => shouldRefreshProactively(a, bufferMs));
+    if (accountsToRefresh.length === 0) {
+        log.debug("No accounts need proactive refresh");
+        return results;
+    }
+    log.info(`Proactively refreshing ${accountsToRefresh.length} account(s)`);
+    // Refresh in parallel for efficiency
+    const refreshPromises = accountsToRefresh.map(async (account) => {
+        const result = await proactiveRefreshAccount(account, bufferMs);
+        return { index: account.index, result };
+    });
+    const outcomes = await Promise.all(refreshPromises);
+    for (const { index, result } of outcomes) {
+        results.set(index, result);
+    }
+    // Log summary
+    const succeeded = Array.from(results.values()).filter((r) => r.reason === "success").length;
+    const failed = Array.from(results.values()).filter((r) => r.reason === "failed").length;
+    if (succeeded > 0 || failed > 0) {
+        log.info("Proactive refresh complete", {
+            total: accountsToRefresh.length,
+            succeeded,
+            failed,
+        });
+    }
+    return results;
+}
+/**
+ * Updates a ManagedAccount with fresh token data from a successful refresh.
+ *
+ * @param account - The account to update
+ * @param result - Successful token refresh result
+ */
+export function applyRefreshResult(account, result) {
+    account.access = result.access;
+    account.expires = result.expires;
+    if (result.refresh !== account.refreshToken) {
+        account.refreshToken = result.refresh;
+    }
+}
+//# sourceMappingURL=proactive-refresh.js.map

package/dist/lib/proactive-refresh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proactive-refresh.js","sourceRoot":"","sources":["../../lib/proactive-refresh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,MAAM,GAAG,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAC;AAE9C,4EAA4E;AAC5E,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEzD,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,CAAC;AAWjD;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACvC,OAAuB,EACvB,WAAmB,2BAA2B;IAE9C,uDAAuD;IACvD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC;IACd,CAAC;IAED,6CAA6C;IAC7C,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,0BAA0B;IAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,uBAAuB,EAAE,QAAQ,CAAC,CAAC;IAEjE,8CAA8C;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IAClC,MAAM,gBAAgB,GAAG,SAAS,GAAG,YAAY,CAAC;IAElD,OAAO,GAAG,IAAI,gBAAgB,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAuB;IACzD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,OAAuB,EACvB,WAAmB,2BAA2B;IAE9C,IAAI,CAAC,wBAAwB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACnD,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,0DAA0D,EAAE;YACpE,YAAY,EAAE,OAAO,CAAC,KAAK;SAC3B,CAAC,CAAC;QACH,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,eAAe,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACpD,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE;QACxC,YAAY,EAAE,OAAO,CAAC,KAAK;QAC3B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,WAAW,EAAE,eAAe;QAC5B,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,KAAK,CAAC;KACrD,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAEzD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE;YACvC,YAAY,EAAE,OAAO,CAAC,KAAK;YAC3B,KAAK,EAAE,OAAO,CAAC,KAAK;SACpB,CAAC,CAAC;QACH,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACpE,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE;QACpC,YAAY,EAAE,OAAO,CAAC,KAAK;QAC3B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,aAAa,EAAE,MAAM,CAAC,MAAM;KAC5B,CAAC,CAAC;IACH,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACnE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,QAA0B,EAC1B,WAAmB,2BAA2B;IAE9C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkC,CAAC;IAC1D,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/C,wBAAwB,CAAC,CAAC,EAAE,QAAQ,CAAC,CACrC,CAAC;IAEF,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,GAAG,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAChD,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,0BAA0B,iBAAiB,CAAC,MAAM,aAAa,CAAC,CAAC;IAE1E,qCAAqC;IACrC,MAAM,eAAe,GAAG,iBAAiB,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC/D,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAChE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAEpD,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED,cAAc;IACd,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CACpD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAC7B,CAAC,MAAM,CAAC;IACT,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CACjD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAC5B,CAAC,MAAM,CAAC;IAET,IAAI,SAAS,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE;YACtC,KAAK,EAAE,iBAAiB,CAAC,MAAM;YAC/B,SAAS;YACT,MAAM;SACN,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CACjC,OAAuB,EACvB,MAAiD;IAEjD,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/B,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IACjC,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,YAAY,EAAE,CAAC;QAC7C,OAAO,CAAC,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC;IACvC,CAAC;AACF,CAAC"}

package/dist/lib/prompts/codex-opencode-bridge.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Codex-OpenCode Bridge Prompt
+ *
+ * This prompt bridges Codex CLI instructions to the OpenCode environment.
+ * It incorporates critical tool mappings, available tools list, substitution rules,
+ * and verification checklist to ensure proper tool usage.
+ *
+ * Token Count: ~450 tokens (~90% reduction vs full OpenCode prompt)
+ */
+export declare const CODEX_OPENCODE_BRIDGE = "# Codex Running in OpenCode\n\nYou are running Codex through OpenCode, an open-source terminal coding assistant. OpenCode provides specific tools to help you work efficiently.\n\n## CRITICAL: Tool Usage\n\n<critical_rule priority=\"0\">\napply_patch/applyPatch are Codex names, but OpenCode tool names vary by version.\n- Inspect the actual tool list before editing.\n- If `edit` exists: use `edit` for precise in-place string replacements and hashline edits.\n- If `edit` is absent and `apply_patch` exists: use `apply_patch` for those precise/hashline edits in this plugin.\n- For diff-style or multi-line structural edits: use `patch` if available, otherwise use `apply_patch`.\n- In this plugin, `edit` / `apply_patch` also support hashline refs (`lineRef`, `endLineRef`, `operation`, `content`)\n</critical_rule>\n\n<critical_rule priority=\"0\">\nUPDATE_PLAN DOES NOT EXIST -> USE \"todowrite\" INSTEAD\n- NEVER use: update_plan, updatePlan, read_plan, readPlan\n- ALWAYS use: todowrite for task/plan updates, todoread to read plans\n- Before plan operations: Verify you're using \"todowrite\", NOT \"update_plan\"\n</critical_rule>\n\n## Available OpenCode Tools\n\n**File Operations:**\n- `write`  - Create new files\n  - Overwriting existing files requires a prior Read in this session; default to ASCII unless the file already uses Unicode.\n- `edit`   - Modify existing files with string replacement (version-dependent)\n  - Requires a prior Read in this session; preserve exact indentation; ensure `oldString` uniquely matches or use `replaceAll`; edit fails if ambiguous or missing.\n  - Never pass unresolved template placeholders in `oldString` (e.g. `${TARGET_SNIPPET}`); `oldString` must be literal text copied from the current file.\n  - For complex multi-line changes: break into multiple sequential edit calls, each with unique oldString context.\n- `apply_patch` - May be the edit/patch tool name in newer OpenCode builds (version-dependent)\n  - In this plugin, `apply_patch` also accepts hashline edit args (`path`, `lineRef`, `endLineRef`, `operation`, `content`) when `edit` is not available.\n- `hashline_read` - Read file with hashline refs (`L<line>#<hash>`) for deterministic edits\n- `patch`  - Apply diff-style patches for multi-line updates (version-dependent)\n- `read`   - Read file contents\n\nNote: Tool naming is version-dependent. If `edit` is unavailable but `apply_patch` exists, use `apply_patch`.\n\nWhen available, prefer hashline workflow for reliability:\n1. Call `hashline_read` for target file and capture refs.\n2. Call `edit` or `apply_patch` with `lineRef` (and optional `endLineRef`) plus `operation` and `content`.\n3. Use legacy `oldString` / `newString` only when hashline refs are unavailable, and only with literal file text (no template placeholders).\n\n**Search/Discovery:**\n- `grep`   - Search file contents (tool, not bash grep); use `include` to filter patterns; set `path` only when not searching workspace root; for cross-file match counts use bash with `rg`.\n- `glob`   - Find files by pattern; defaults to workspace cwd unless `path` is set.\n- `list`   - List directories (requires absolute paths)\n\n**Execution:**\n- `bash`   - Run shell commands\n  - No workdir parameter; do not include it in tool calls.\n  - Always include a short description for the command.\n  - Do not use cd; use absolute paths in commands.\n  - Quote paths containing spaces with double quotes.\n  - Chain multiple commands with ';' or '&&'; avoid newlines.\n  - Use Grep/Glob tools for searches; only use bash with `rg` when you need counts or advanced features.\n  - Do not use `ls`/`cat` in bash; use `list`/`read` tools instead.\n  - For deletions (rm), verify by listing parent dir with `list`.\n\n**Network:**\n- `webfetch` - Fetch web content\n  - Use fully-formed URLs (http/https; http auto-upgrades to https).\n  - Always set `format` to one of: text | markdown | html; prefer markdown unless otherwise required.\n  - Read-only; short cache window.\n\n**Task Management:**\n- `todowrite` - Manage tasks/plans (REPLACES update_plan)\n- `todoread`  - Read current plan\n\n## Substitution Rules\n\nBase instruction says:    You MUST use instead:\napply_patch           ->   patch (preferred if available), otherwise edit/apply_patch based on actual tool list\nupdate_plan           ->   todowrite\nread_plan             ->   todoread\n\n**Path Usage:** Use per-tool conventions to avoid conflicts:\n- Tool calls: `read`, `edit`, `write`, `list` require absolute paths.\n- Searches: `grep`/`glob` default to the workspace cwd; prefer relative include patterns; set `path` only when a different root is needed.\n- Presentation: In assistant messages, show workspace-relative paths; use absolute paths only inside tool calls.\n- Tool schema overrides general path preferences-do not convert required absolute paths to relative.\n\n## Verification Checklist\n\nBefore file/plan modifications:\n1. Am I using the actual available edit tool name (`edit`, `patch`, or `apply_patch`)?\n2. Am I using \"todowrite\" NOT \"update_plan\"?\n3. Is this tool in the approved list above?\n4. Am I following each tool's path requirements?\n\nIf ANY answer is NO -> STOP and correct before proceeding.\n\n## OpenCode Working Style\n\n**Communication:**\n- Send brief preambles (8-12 words) before tool calls, building on prior context\n- Provide progress updates during longer tasks\n\n**Execution:**\n- Keep working autonomously until query is fully resolved before yielding\n- Don't return to user with partial solutions\n\n**Code Approach:**\n- New projects: Be ambitious and creative\n- Existing codebases: Surgical precision - modify only what's requested unless explicitly instructed to do otherwise\n\n**Testing:**\n- If tests exist: Start specific to your changes, then broader validation\n\n## Advanced Tools\n\n**Task Tool (Sub-Agents):**\n- Use the Task tool (functions.task) to launch sub-agents\n- Check the Task tool description for current agent types and their capabilities\n- Useful for complex analysis, specialized workflows, or tasks requiring isolated context\n- The agent list is dynamically generated - refer to tool schema for available agents\n\n**Parallelization:**\n- When multiple independent tool calls are needed, use multi_tool_use.parallel to run them concurrently.\n- Reserve sequential calls for ordered or data-dependent steps.\n\n**MCP Tools:**\n- Model Context Protocol servers provide additional capabilities\n- MCP tools are prefixed: `mcp__<server-name>__<tool-name>`\n- Check your available tools for MCP integrations\n- Use when the tool's functionality matches your task needs\n\n## What Remains from Codex\n \nSandbox policies, approval mechanisms, final answer formatting, git commit protocols, and file reference formats all follow Codex instructions. In approval policy \"never\", never request escalations.\n\n## Approvals & Safety\n- Assume workspace-write filesystem, network enabled, approval on-failure unless explicitly stated otherwise.\n- When a command fails due to sandboxing or permissions, retry with escalated permissions if allowed by policy, including a one-line justification.\n- Treat destructive commands (e.g., `rm`, `git reset --hard`) as requiring explicit user request or approval.\n- Never run `git reset --hard`, `git checkout --`, or force deletes unless the user explicitly asked for that exact action.\n- `request_user_input` is Plan-mode only; do not call it in Default mode.\n- When uncertain, prefer non-destructive verification first (e.g., confirm file existence with `list`, then delete with `bash`).";
+export interface CodexOpenCodeBridgeMeta {
+    estimatedTokens: number;
+    reductionVsCurrent: string;
+    reductionVsToolRemap: string;
+    protects: string[];
+    omits: string[];
+}
+export declare const CODEX_OPENCODE_BRIDGE_META: CodexOpenCodeBridgeMeta;
+//# sourceMappingURL=codex-opencode-bridge.d.ts.map

package/dist/lib/prompts/codex-opencode-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-opencode-bridge.d.ts","sourceRoot":"","sources":["../../../lib/prompts/codex-opencode-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,eAAO,MAAM,qBAAqB,q8OA0ImG,CAAC;AAEtI,MAAM,WAAW,uBAAuB;IACvC,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,eAAO,MAAM,0BAA0B,EAAE,uBAmBxC,CAAC"}