codex-multi-auth 0.1.0

package/dist/lib/prompts/opencode-codex.js

@@ -0,0 +1,270 @@
+/**
+ * OpenCode Codex Prompt Fetcher
+ *
+ * Fetches and caches the codex.txt system prompt from OpenCode's GitHub repository.
+ * Uses ETag-based caching to efficiently track updates.
+ */
+import { join } from "node:path";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { logDebug } from "../logger.js";
+import { getCodexCacheDir } from "../runtime-paths.js";
+import { sleep } from "../utils.js";
+const DEFAULT_OPENCODE_CODEX_URLS = [
+    "https://raw.githubusercontent.com/anomalyco/opencode/dev/packages/opencode/src/session/prompt/codex.txt",
+    "https://raw.githubusercontent.com/sst/opencode/dev/packages/opencode/src/session/prompt/codex.txt",
+    "https://raw.githubusercontent.com/anomalyco/opencode/main/packages/opencode/src/session/prompt/codex.txt",
+    "https://raw.githubusercontent.com/sst/opencode/main/packages/opencode/src/session/prompt/codex.txt",
+    "https://raw.githubusercontent.com/anomalyco/opencode/dev/packages/opencode/src/session/prompt/codex.md",
+    "https://raw.githubusercontent.com/sst/opencode/dev/packages/opencode/src/session/prompt/codex.md",
+    "https://raw.githubusercontent.com/anomalyco/opencode/main/packages/opencode/src/session/prompt/codex.md",
+    "https://raw.githubusercontent.com/sst/opencode/main/packages/opencode/src/session/prompt/codex.md",
+];
+const CODEX_PROMPT_URL_OVERRIDE_ENV = "CODEX_PROMPT_SOURCE_URL";
+const LEGACY_OPENCODE_CODEX_URL_OVERRIDE_ENV = "OPENCODE_CODEX_PROMPT_URL";
+const CACHE_DIR = getCodexCacheDir();
+const CACHE_FILE = join(CACHE_DIR, "opencode-codex.txt");
+const CACHE_META_FILE = join(CACHE_DIR, "opencode-codex-meta.json");
+const CACHE_TTL_MS = 15 * 60 * 1000;
+const RETRYABLE_FS_ERROR_CODES = new Set(["EBUSY", "EPERM"]);
+const WRITE_RETRY_ATTEMPTS = 5;
+const WRITE_RETRY_BASE_DELAY_MS = 10;
+let memoryCache = null;
+let refreshPromise = null;
+function isFresh(lastChecked) {
+    return Date.now() - lastChecked < CACHE_TTL_MS;
+}
+function redactSourceForLog(source) {
+    try {
+        const parsed = new URL(source);
+        return `${parsed.origin}${parsed.pathname}`;
+    }
+    catch {
+        return "<invalid-url>";
+    }
+}
+function parseSourceUrl(source) {
+    if (!source)
+        return undefined;
+    const trimmed = source.trim();
+    if (!trimmed)
+        return undefined;
+    try {
+        const parsed = new URL(trimmed);
+        if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+            logDebug("Ignoring OpenCode codex prompt source override due to protocol", {
+                source: redactSourceForLog(trimmed),
+            });
+            return undefined;
+        }
+        return trimmed;
+    }
+    catch {
+        logDebug("Ignoring invalid OpenCode codex prompt source override", {
+            source: redactSourceForLog(trimmed),
+        });
+        return undefined;
+    }
+}
+function sourceCacheKey(source) {
+    try {
+        const parsed = new URL(source);
+        return `${parsed.origin}${parsed.pathname}`;
+    }
+    catch {
+        return source.trim();
+    }
+}
+function isRetryableFsError(error) {
+    const code = error?.code;
+    return typeof code === "string" && RETRYABLE_FS_ERROR_CODES.has(code);
+}
+async function writeFileWithRetry(filePath, content) {
+    let lastError;
+    for (let attempt = 0; attempt < WRITE_RETRY_ATTEMPTS; attempt += 1) {
+        try {
+            await writeFile(filePath, content, "utf-8");
+            return;
+        }
+        catch (error) {
+            if (!isRetryableFsError(error) || attempt + 1 >= WRITE_RETRY_ATTEMPTS) {
+                throw error;
+            }
+            lastError = error;
+            await sleep(WRITE_RETRY_BASE_DELAY_MS * 2 ** attempt);
+        }
+    }
+    throw lastError instanceof Error ? lastError : new Error("Failed to write prompt cache file");
+}
+function resolvePromptSources() {
+    const sources = [];
+    const seen = new Set();
+    const add = (source) => {
+        const parsed = parseSourceUrl(source);
+        if (!parsed || seen.has(parsed))
+            return;
+        seen.add(parsed);
+        sources.push(parsed);
+    };
+    add(process.env[CODEX_PROMPT_URL_OVERRIDE_ENV]);
+    add(process.env[LEGACY_OPENCODE_CODEX_URL_OVERRIDE_ENV]);
+    for (const source of DEFAULT_OPENCODE_CODEX_URLS) {
+        add(source);
+    }
+    return sources;
+}
+async function readDiskCache() {
+    try {
+        const [content, metaContent] = await Promise.all([
+            readFile(CACHE_FILE, "utf-8"),
+            readFile(CACHE_META_FILE, "utf-8"),
+        ]);
+        const meta = JSON.parse(metaContent);
+        if (!meta.lastChecked) {
+            return null;
+        }
+        return { content, meta };
+    }
+    catch {
+        return null;
+    }
+}
+async function saveDiskCache(content, etag, sourceUrl) {
+    await mkdir(CACHE_DIR, { recursive: true });
+    const meta = {
+        etag,
+        lastFetch: new Date().toISOString(),
+        lastChecked: Date.now(),
+        sourceKey: sourceCacheKey(sourceUrl),
+    };
+    await Promise.all([
+        writeFileWithRetry(CACHE_FILE, content),
+        writeFileWithRetry(CACHE_META_FILE, JSON.stringify(meta, null, 2)),
+    ]);
+    return meta;
+}
+async function refreshPrompt(cachedMeta, cachedContent) {
+    const sources = resolvePromptSources();
+    let lastFailure = null;
+    for (const sourceUrl of sources) {
+        const headers = {};
+        const currentSourceKey = sourceCacheKey(sourceUrl);
+        const cachedSourceKey = cachedMeta?.sourceKey ??
+            (cachedMeta?.sourceUrl ? sourceCacheKey(cachedMeta.sourceUrl) : undefined);
+        const canUseConditionalRequest = !!cachedMeta?.etag &&
+            (!cachedSourceKey || cachedSourceKey === currentSourceKey);
+        if (canUseConditionalRequest) {
+            headers["If-None-Match"] = cachedMeta.etag;
+        }
+        let response;
+        try {
+            response = await fetch(sourceUrl, { headers });
+        }
+        catch (error) {
+            lastFailure = `${redactSourceForLog(sourceUrl)}: ${String(error)}`;
+            logDebug("OpenCode prompt source fetch failed", {
+                sourceUrl: redactSourceForLog(sourceUrl),
+                error: String(error),
+            });
+            continue;
+        }
+        if (response.status === 304 && cachedContent) {
+            const refreshedMeta = {
+                etag: cachedMeta?.etag ?? "",
+                lastFetch: cachedMeta?.lastFetch ?? new Date().toISOString(),
+                lastChecked: Date.now(),
+                sourceKey: currentSourceKey,
+            };
+            memoryCache = { content: cachedContent, meta: refreshedMeta };
+            await mkdir(CACHE_DIR, { recursive: true });
+            await writeFileWithRetry(CACHE_META_FILE, JSON.stringify(refreshedMeta, null, 2));
+            return cachedContent;
+        }
+        if (!response.ok) {
+            lastFailure = `${redactSourceForLog(sourceUrl)}: HTTP ${response.status}`;
+            logDebug("OpenCode prompt source returned non-OK response", {
+                sourceUrl: redactSourceForLog(sourceUrl),
+                status: response.status,
+            });
+            continue;
+        }
+        const content = await response.text();
+        const etag = response.headers.get("etag") || "";
+        const meta = await saveDiskCache(content, etag, sourceUrl);
+        memoryCache = { content, meta };
+        return content;
+    }
+    throw new Error(`Failed to fetch OpenCode codex prompt from all sources${lastFailure ? ` (${lastFailure})` : ""}`);
+}
+function scheduleRefresh(cachedMeta, cachedContent) {
+    if (refreshPromise)
+        return;
+    refreshPromise = refreshPrompt(cachedMeta, cachedContent)
+        .then(() => undefined)
+        .catch((error) => {
+        logDebug("OpenCode prompt background refresh failed", {
+            error: String(error),
+        });
+    })
+        .finally(() => {
+        refreshPromise = null;
+    });
+}
+/**
+ * Fetch OpenCode's codex.txt prompt with ETag-based caching
+ * Uses HTTP conditional requests to efficiently check for updates
+ *
+ * Rate limit protection: Only checks GitHub if cache is older than 15 minutes
+ * @returns The codex.txt content
+ */
+export async function getOpenCodeCodexPrompt() {
+    if (memoryCache && isFresh(memoryCache.meta.lastChecked)) {
+        return memoryCache.content;
+    }
+    const diskCache = await readDiskCache();
+    if (diskCache) {
+        memoryCache = diskCache;
+        if (isFresh(diskCache.meta.lastChecked)) {
+            return diskCache.content;
+        }
+        // Serve stale content immediately and refresh in the background.
+        memoryCache = {
+            content: diskCache.content,
+            meta: { ...diskCache.meta, lastChecked: Date.now() },
+        };
+        scheduleRefresh(diskCache.meta, diskCache.content);
+        return diskCache.content;
+    }
+    try {
+        return await refreshPrompt(memoryCache?.meta ?? null, memoryCache?.content ?? null);
+    }
+    catch (error) {
+        const staleContent = memoryCache?.content;
+        if (staleContent) {
+            return staleContent;
+        }
+        throw new Error(`Failed to fetch OpenCode codex.txt and no cache available: ${error}`);
+    }
+}
+/**
+ * Get first N characters of the cached OpenCode prompt for verification
+ * @param chars Number of characters to get (default: 50)
+ * @returns First N characters or null if not cached
+ */
+export async function getCachedPromptPrefix(chars = 50) {
+    try {
+        const content = await readFile(CACHE_FILE, "utf-8");
+        return content.substring(0, chars);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Prewarm the OpenCode prompt cache without blocking startup.
+ */
+export function prewarmOpenCodeCodexPrompt() {
+    void getOpenCodeCodexPrompt().catch((error) => {
+        logDebug("OpenCode prompt prewarm failed", { error: String(error) });
+    });
+}
+//# sourceMappingURL=opencode-codex.js.map

package/dist/lib/prompts/opencode-codex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode-codex.js","sourceRoot":"","sources":["../../../lib/prompts/opencode-codex.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEpC,MAAM,2BAA2B,GAAG;IACnC,yGAAyG;IACzG,mGAAmG;IACnG,0GAA0G;IAC1G,oGAAoG;IACpG,wGAAwG;IACxG,kGAAkG;IAClG,yGAAyG;IACzG,mGAAmG;CAC1F,CAAC;AACX,MAAM,6BAA6B,GAAG,yBAAyB,CAAC;AAChE,MAAM,sCAAsC,GAAG,2BAA2B,CAAC;AAC3E,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;AACrC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;AACzD,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;AACpE,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACpC,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAC7D,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAerC,IAAI,WAAW,GAAyB,IAAI,CAAC;AAC7C,IAAI,cAAc,GAAyB,IAAI,CAAC;AAEhD,SAAS,OAAO,CAAC,WAAmB;IACnC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,GAAG,YAAY,CAAC;AAChD,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAc;IACzC,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,eAAe,CAAC;IACxB,CAAC;AACF,CAAC;AAED,SAAS,cAAc,CAAC,MAA0B;IACjD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjE,QAAQ,CAAC,gEAAgE,EAAE;gBAC1E,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC;aACnC,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACR,QAAQ,CAAC,wDAAwD,EAAE;YAClE,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC;SACnC,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACrC,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;AACF,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACzC,MAAM,IAAI,GAAI,KAA2C,EAAE,IAAI,CAAC;IAChE,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACvE,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,QAAgB,EAAE,OAAe;IAClE,IAAI,SAAkB,CAAC;IACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,oBAAoB,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC;YACJ,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5C,OAAO;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,oBAAoB,EAAE,CAAC;gBACvE,MAAM,KAAK,CAAC;YACb,CAAC;YACD,SAAS,GAAG,KAAK,CAAC;YAClB,MAAM,KAAK,CAAC,yBAAyB,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC;QACvD,CAAC;IACF,CAAC;IACD,MAAM,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;AAC/F,CAAC;AAED,SAAS,oBAAoB;IAC5B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,MAAM,GAAG,GAAG,CAAC,MAA0B,EAAE,EAAE;QAC1C,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO;QACxC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC,CAAC;IAEF,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC;IAChD,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC,CAAC;IACzD,KAAK,MAAM,MAAM,IAAI,2BAA2B,EAAE,CAAC;QAClD,GAAG,CAAC,MAAM,CAAC,CAAC;IACb,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,aAAa;IAC3B,IAAI,CAAC;QACJ,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAChD,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;YAC7B,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;SAClC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAc,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,KAAK,UAAU,aAAa,CAC3B,OAAe,EACf,IAAY,EACZ,SAAiB;IAEjB,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAc;QACvB,IAAI;QACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACvB,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC;KACpC,CAAC;IACF,MAAM,OAAO,CAAC,GAAG,CAAC;QACjB,kBAAkB,CAAC,UAAU,EAAE,OAAO,CAAC;QACvC,kBAAkB,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;KAClE,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACb,CAAC;AAED,KAAK,UAAU,aAAa,CAC3B,UAA4B,EAC5B,aAA4B;IAE5B,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC;IACvC,IAAI,WAAW,GAAkB,IAAI,CAAC;IAEtC,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;QACjC,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,MAAM,gBAAgB,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;QACnD,MAAM,eAAe,GAAG,UAAU,EAAE,SAAS;YAC5C,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5E,MAAM,wBAAwB,GAC7B,CAAC,CAAC,UAAU,EAAE,IAAI;YAClB,CAAC,CAAC,eAAe,IAAI,eAAe,KAAK,gBAAgB,CAAC,CAAC;QAC5D,IAAI,wBAAwB,EAAE,CAAC;YAC9B,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC;QAC5C,CAAC;QAED,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,WAAW,GAAG,GAAG,kBAAkB,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACnE,QAAQ,CAAC,qCAAqC,EAAE;gBAC/C,SAAS,EAAE,kBAAkB,CAAC,SAAS,CAAC;gBACxC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;aACpB,CAAC,CAAC;YACH,SAAS;QACV,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,aAAa,EAAE,CAAC;YAC9C,MAAM,aAAa,GAAc;gBAChC,IAAI,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE;gBAC5B,SAAS,EAAE,UAAU,EAAE,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC5D,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;gBACvB,SAAS,EAAE,gBAAgB;aAC3B,CAAC;YACF,WAAW,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;YAC9D,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5C,MAAM,kBAAkB,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAClF,OAAO,aAAa,CAAC;QACtB,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,WAAW,GAAG,GAAG,kBAAkB,CAAC,SAAS,CAAC,UAAU,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC1E,QAAQ,CAAC,iDAAiD,EAAE;gBAC3D,SAAS,EAAE,kBAAkB,CAAC,SAAS,CAAC;gBACxC,MAAM,EAAE,QAAQ,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,SAAS;QACV,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAC3D,WAAW,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,KAAK,CACd,yDAAyD,WAAW,CAAC,CAAC,CAAC,KAAK,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACjG,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,UAA4B,EAAE,aAA4B;IAClF,IAAI,cAAc;QAAE,OAAO;IAC3B,cAAc,GAAG,aAAa,CAAC,UAAU,EAAE,aAAa,CAAC;SACvD,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;SACrB,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QAChB,QAAQ,CAAC,2CAA2C,EAAE;YACrD,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;SACpB,CAAC,CAAC;IACJ,CAAC,CAAC;SACD,OAAO,CAAC,GAAG,EAAE;QACb,cAAc,GAAG,IAAI,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC3C,IAAI,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1D,OAAO,WAAW,CAAC,OAAO,CAAC;IAC5B,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,aAAa,EAAE,CAAC;IACxC,IAAI,SAAS,EAAE,CAAC;QACf,WAAW,GAAG,SAAS,CAAC;QACxB,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACzC,OAAO,SAAS,CAAC,OAAO,CAAC;QAC1B,CAAC;QACD,iEAAiE;QACjE,WAAW,GAAG;YACb,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,IAAI,EAAE,EAAE,GAAG,SAAS,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE;SACpD,CAAC;QACF,eAAe,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;QACnD,OAAO,SAAS,CAAC,OAAO,CAAC;IAC1B,CAAC;IAED,IAAI,CAAC;QACJ,OAAO,MAAM,aAAa,CAAC,WAAW,EAAE,IAAI,IAAI,IAAI,EAAE,WAAW,EAAE,OAAO,IAAI,IAAI,CAAC,CAAC;IACrF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,YAAY,GAAG,WAAW,EAAE,OAAO,CAAC;QAC1C,IAAI,YAAY,EAAE,CAAC;YAClB,OAAO,YAAY,CAAC;QACrB,CAAC;QACD,MAAM,IAAI,KAAK,CACd,8DAA8D,KAAK,EAAE,CACrE,CAAC;IACH,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAK,GAAG,EAAE;IACrD,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACpD,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B;IACzC,KAAK,sBAAsB,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QAC7C,QAAQ,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/quota-cache.d.ts

@@ -0,0 +1,68 @@
+export interface QuotaCacheWindow {
+    usedPercent?: number;
+    windowMinutes?: number;
+    resetAtMs?: number;
+}
+export interface QuotaCacheEntry {
+    updatedAt: number;
+    status: number;
+    model: string;
+    planType?: string;
+    primary: QuotaCacheWindow;
+    secondary: QuotaCacheWindow;
+}
+export interface QuotaCacheData {
+    byAccountId: Record<string, QuotaCacheEntry>;
+    byEmail: Record<string, QuotaCacheEntry>;
+}
+/**
+ * Get the absolute filesystem path to the quota-cache.json file.
+ *
+ * The resolved path points to quota-cache.json inside the Codex multi-auth directory.
+ * Callers must observe normal filesystem concurrency semantics (no internal locking is provided),
+ * and handle platform-specific path behavior (for example, on Windows the file may reside under %APPDATA%).
+ * The file can contain sensitive values; redact tokens or secrets before logging or exposing its contents.
+ *
+ * @returns The absolute path to the quota-cache.json file
+ */
+export declare function getQuotaCachePath(): string;
+/**
+ * Loads and returns the normalized quota cache from disk.
+ *
+ * Reads the JSON cache at the configured quota-cache path, validates and normalizes entries,
+ * and returns maps keyed by account ID and email. If the file is missing, invalid, or an I/O
+ * error occurs, returns empty maps and logs a warning.
+ *
+ * Notes:
+ * - Concurrency: callers should expect concurrent readers and writers; the function performs
+ *   a best-effort read and does not perform file locking.
+ * - Windows: uses standard UTF-8 file reads; caller should ensure the quota-cache path is
+ *   compatible with Windows path semantics when used on that platform.
+ * - Redaction: callers should avoid logging or exposing the file contents; any tokens or
+ *   sensitive identifiers contained in the cache should be redacted before external reporting.
+ *
+ * @returns The quota cache as `{ byAccountId, byEmail }` with normalized entries; each map
+ *          will be empty if the on-disk file is absent, malformed, or could not be read.
+ */
+export declare function loadQuotaCache(): Promise<QuotaCacheData>;
+/**
+ * Persist the quota cache to the on-disk JSON file used by the multi-auth runtime.
+ *
+ * Writes a versioned, pretty-printed JSON representation of `data` to the configured
+ * quota cache path. Failures are logged and do not throw, so callers should handle
+ * eventual consistency or retry as needed.
+ *
+ * Concurrency: concurrent writers may race and overwrite each other; callers should
+ * serialize writes if strong consistency is required.
+ *
+ * Filesystem notes: Windows path length, permissions, or antivirus locks may cause
+ * write failures; such errors are logged rather than thrown.
+ *
+ * Security: this function does not redact secrets or tokens — callers must ensure
+ * `data` contains no sensitive plaintext tokens before calling.
+ *
+ * @param data - The quota cache data (byAccountId and byEmail maps) to persist; callers
+ *               should pass normalized QuotaCacheData.
+ */
+export declare function saveQuotaCache(data: QuotaCacheData): Promise<void>;
+//# sourceMappingURL=quota-cache.d.ts.map

package/dist/lib/quota-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quota-cache.d.ts","sourceRoot":"","sources":["../../lib/quota-cache.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,gBAAgB;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,SAAS,EAAE,gBAAgB,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC9B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC7C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;CACzC;AAiHD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,cAAc,CAAC,CA4B9D;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA0CxE"}

package/dist/lib/quota-cache.js

@@ -0,0 +1,224 @@
+import { existsSync, promises as fs } from "node:fs";
+import { basename, join } from "node:path";
+import { logWarn } from "./logger.js";
+import { getCodexMultiAuthDir } from "./runtime-paths.js";
+import { isRecord, sleep } from "./utils.js";
+const QUOTA_CACHE_PATH = join(getCodexMultiAuthDir(), "quota-cache.json");
+const QUOTA_CACHE_LABEL = basename(QUOTA_CACHE_PATH);
+const RETRYABLE_FS_CODES = new Set(["EBUSY", "EPERM"]);
+function isRetryableFsError(error) {
+    const code = error?.code;
+    return typeof code === "string" && RETRYABLE_FS_CODES.has(code);
+}
+/**
+ * Normalizes an unknown value to a finite number.
+ *
+ * @param value - The value to normalize
+ * @returns The input as a finite number, or `undefined` if the value is not a finite number
+ */
+function normalizeNumber(value) {
+    return typeof value === "number" && Number.isFinite(value) ? value : undefined;
+}
+/**
+ * Produce a normalized QuotaCacheWindow from an arbitrary value.
+ *
+ * @param value - The raw input to normalize; if not an object, an empty window is returned.
+ * @returns A QuotaCacheWindow whose `usedPercent`, `windowMinutes`, and `resetAtMs` are finite numbers or `undefined` when missing/invalid.
+ */
+function normalizeWindow(value) {
+    if (!isRecord(value))
+        return {};
+    return {
+        usedPercent: normalizeNumber(value.usedPercent),
+        windowMinutes: normalizeNumber(value.windowMinutes),
+        resetAtMs: normalizeNumber(value.resetAtMs),
+    };
+}
+/**
+ * Normalize and validate a raw parsed value into a quota cache entry.
+ *
+ * Produces a QuotaCacheEntry with a trimmed `model`, optional `planType`, and normalized
+ * `primary`/`secondary` windows when `updatedAt`, `status`, and `model` are present and valid;
+ * returns `null` for any invalid input. This helper is pure (no I/O), safe to call concurrently,
+ * and platform-agnostic (works with data read from files on Windows or POSIX). It does not perform
+ * token redaction — callers must redact sensitive fields before persisting or logging.
+ *
+ * @param value - The arbitrary input (typically parsed JSON) to validate and normalize
+ * @returns A normalized `QuotaCacheEntry` if validation succeeds, `null` otherwise
+ */
+function normalizeEntry(value) {
+    if (!isRecord(value))
+        return null;
+    const updatedAt = normalizeNumber(value.updatedAt);
+    const status = normalizeNumber(value.status);
+    const model = typeof value.model === "string" ? value.model : "";
+    if (typeof updatedAt !== "number" ||
+        typeof status !== "number" ||
+        model.trim().length === 0) {
+        return null;
+    }
+    return {
+        updatedAt,
+        status,
+        model: model.trim(),
+        planType: typeof value.planType === "string" ? value.planType : undefined,
+        primary: normalizeWindow(value.primary),
+        secondary: normalizeWindow(value.secondary),
+    };
+}
+/**
+ * Convert a raw parsed value into a map of validated quota cache entries.
+ *
+ * @param value - Parsed JSON value (typically an object) containing raw entries keyed by identifier; non-objects, empty keys, or invalid entries are ignored.
+ * @returns A record mapping valid string keys to normalized `QuotaCacheEntry` objects; malformed entries are omitted.
+ *
+ * Note: This function is pure and performs no filesystem I/O. Callers are responsible for any filesystem concurrency or Windows-specific behavior when loading/saving the on-disk cache, and for redacting any sensitive tokens before logging or persisting.
+ */
+function normalizeEntryMap(value) {
+    if (!isRecord(value))
+        return {};
+    const entries = {};
+    for (const [key, raw] of Object.entries(value)) {
+        if (typeof key !== "string" || key.trim().length === 0)
+            continue;
+        const normalized = normalizeEntry(raw);
+        if (!normalized)
+            continue;
+        entries[key] = normalized;
+    }
+    return entries;
+}
+async function readCacheFileWithRetry(path) {
+    let lastError;
+    for (let attempt = 0; attempt < 5; attempt += 1) {
+        try {
+            return await fs.readFile(path, "utf8");
+        }
+        catch (error) {
+            lastError = error;
+            if (!isRetryableFsError(error) || attempt >= 4) {
+                throw error;
+            }
+            await sleep(10 * 2 ** attempt);
+        }
+    }
+    throw lastError instanceof Error ? lastError : new Error("quota cache read retry exhausted");
+}
+/**
+ * Get the absolute filesystem path to the quota-cache.json file.
+ *
+ * The resolved path points to quota-cache.json inside the Codex multi-auth directory.
+ * Callers must observe normal filesystem concurrency semantics (no internal locking is provided),
+ * and handle platform-specific path behavior (for example, on Windows the file may reside under %APPDATA%).
+ * The file can contain sensitive values; redact tokens or secrets before logging or exposing its contents.
+ *
+ * @returns The absolute path to the quota-cache.json file
+ */
+export function getQuotaCachePath() {
+    return QUOTA_CACHE_PATH;
+}
+/**
+ * Loads and returns the normalized quota cache from disk.
+ *
+ * Reads the JSON cache at the configured quota-cache path, validates and normalizes entries,
+ * and returns maps keyed by account ID and email. If the file is missing, invalid, or an I/O
+ * error occurs, returns empty maps and logs a warning.
+ *
+ * Notes:
+ * - Concurrency: callers should expect concurrent readers and writers; the function performs
+ *   a best-effort read and does not perform file locking.
+ * - Windows: uses standard UTF-8 file reads; caller should ensure the quota-cache path is
+ *   compatible with Windows path semantics when used on that platform.
+ * - Redaction: callers should avoid logging or exposing the file contents; any tokens or
+ *   sensitive identifiers contained in the cache should be redacted before external reporting.
+ *
+ * @returns The quota cache as `{ byAccountId, byEmail }` with normalized entries; each map
+ *          will be empty if the on-disk file is absent, malformed, or could not be read.
+ */
+export async function loadQuotaCache() {
+    if (!existsSync(QUOTA_CACHE_PATH)) {
+        return { byAccountId: {}, byEmail: {} };
+    }
+    try {
+        const content = await readCacheFileWithRetry(QUOTA_CACHE_PATH);
+        const parsed = JSON.parse(content);
+        if (!isRecord(parsed)) {
+            return { byAccountId: {}, byEmail: {} };
+        }
+        if (parsed.version !== 1) {
+            logWarn(`Quota cache rejected due to version mismatch: ${String(parsed.version)}`);
+            return { byAccountId: {}, byEmail: {} };
+        }
+        return {
+            byAccountId: normalizeEntryMap(parsed.byAccountId),
+            byEmail: normalizeEntryMap(parsed.byEmail),
+        };
+    }
+    catch (error) {
+        logWarn(`Failed to load quota cache from ${QUOTA_CACHE_LABEL}: ${error instanceof Error ? error.message : String(error)}`);
+        return { byAccountId: {}, byEmail: {} };
+    }
+}
+/**
+ * Persist the quota cache to the on-disk JSON file used by the multi-auth runtime.
+ *
+ * Writes a versioned, pretty-printed JSON representation of `data` to the configured
+ * quota cache path. Failures are logged and do not throw, so callers should handle
+ * eventual consistency or retry as needed.
+ *
+ * Concurrency: concurrent writers may race and overwrite each other; callers should
+ * serialize writes if strong consistency is required.
+ *
+ * Filesystem notes: Windows path length, permissions, or antivirus locks may cause
+ * write failures; such errors are logged rather than thrown.
+ *
+ * Security: this function does not redact secrets or tokens — callers must ensure
+ * `data` contains no sensitive plaintext tokens before calling.
+ *
+ * @param data - The quota cache data (byAccountId and byEmail maps) to persist; callers
+ *               should pass normalized QuotaCacheData.
+ */
+export async function saveQuotaCache(data) {
+    const payload = {
+        version: 1,
+        byAccountId: data.byAccountId,
+        byEmail: data.byEmail,
+    };
+    try {
+        await fs.mkdir(getCodexMultiAuthDir(), { recursive: true });
+        const tempPath = `${QUOTA_CACHE_PATH}.${process.pid}.${Date.now()}.${Math.random().toString(36).slice(2, 8)}.tmp`;
+        await fs.writeFile(tempPath, `${JSON.stringify(payload, null, 2)}\n`, {
+            encoding: "utf8",
+            mode: 0o600,
+        });
+        let renamed = false;
+        try {
+            for (let attempt = 0; attempt < 5; attempt += 1) {
+                try {
+                    await fs.rename(tempPath, QUOTA_CACHE_PATH);
+                    renamed = true;
+                    break;
+                }
+                catch (error) {
+                    if (!isRetryableFsError(error) || attempt >= 4)
+                        throw error;
+                    await sleep(10 * 2 ** attempt);
+                }
+            }
+        }
+        finally {
+            if (!renamed) {
+                try {
+                    await fs.unlink(tempPath);
+                }
+                catch {
+                    // Best effort temp cleanup.
+                }
+            }
+        }
+    }
+    catch (error) {
+        logWarn(`Failed to save quota cache to ${QUOTA_CACHE_LABEL}: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+//# sourceMappingURL=quota-cache.js.map

package/dist/lib/quota-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quota-cache.js","sourceRoot":"","sources":["../../lib/quota-cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AA4B7C,MAAM,gBAAgB,GAAG,IAAI,CAAC,oBAAoB,EAAE,EAAE,kBAAkB,CAAC,CAAC;AAC1E,MAAM,iBAAiB,GAAG,QAAQ,CAAC,gBAAgB,CAAC,CAAC;AACrD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAEvD,SAAS,kBAAkB,CAAC,KAAc;IACzC,MAAM,IAAI,GAAI,KAA2C,EAAE,IAAI,CAAC;IAChE,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAChF,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,KAAc;IACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,OAAO;QACN,WAAW,EAAE,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC;QAC/C,aAAa,EAAE,eAAe,CAAC,KAAK,CAAC,aAAa,CAAC;QACnD,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC;KAC3C,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,cAAc,CAAC,KAAc;IACrC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,IACC,OAAO,SAAS,KAAK,QAAQ;QAC7B,OAAO,MAAM,KAAK,QAAQ;QAC1B,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EACxB,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IAED,OAAO;QACN,SAAS;QACT,MAAM;QACN,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;QACnB,QAAQ,EAAE,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACzE,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC;QACvC,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC;KAC3C,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,KAAc;IACxC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,OAAO,GAAoC,EAAE,CAAC;IACpD,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACjE,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;IAC3B,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,IAAY;IACjD,IAAI,SAAkB,CAAC;IACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC;YACJ,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,SAAS,GAAG,KAAK,CAAC;YAClB,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;gBAChD,MAAM,KAAK,CAAC;YACb,CAAC;YACD,MAAM,KAAK,CAAC,EAAE,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC;QAChC,CAAC;IACF,CAAC;IACD,MAAM,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;AAC9F,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB;IAChC,OAAO,gBAAgB,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IACnC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACzC,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;QAC9C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACzC,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,iDAAiD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACnF,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACzC,CAAC;QAED,OAAO;YACN,WAAW,EAAE,iBAAiB,CAAC,MAAM,CAAC,WAAW,CAAC;YAClD,OAAO,EAAE,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC;SAC1C,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,CACN,mCAAmC,iBAAiB,KACnD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACtD,EAAE,CACF,CAAC;QACF,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACzC,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAoB;IACxD,MAAM,OAAO,GAAmB;QAC/B,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;KACrB,CAAC;IAEF,IAAI,CAAC;QACJ,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,GAAG,gBAAgB,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;QAClH,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YACrE,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,KAAK;SACX,CAAC,CAAC;QACH,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACJ,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;gBACjD,IAAI,CAAC;oBACJ,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;oBAC5C,OAAO,GAAG,IAAI,CAAC;oBACf,MAAM;gBACP,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC;wBAAE,MAAM,KAAK,CAAC;oBAC5D,MAAM,KAAK,CAAC,EAAE,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC;gBAChC,CAAC;YACF,CAAC;QACF,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,IAAI,CAAC;oBACJ,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC3B,CAAC;gBAAC,MAAM,CAAC;oBACR,4BAA4B;gBAC7B,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,CACN,iCAAiC,iBAAiB,KACjD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACtD,EAAE,CACF,CAAC;IACH,CAAC;AACF,CAAC"}

package/dist/lib/quota-probe.d.ts

@@ -0,0 +1,49 @@
+export interface CodexQuotaWindow {
+    usedPercent?: number;
+    windowMinutes?: number;
+    resetAtMs?: number;
+}
+export interface CodexQuotaSnapshot {
+    status: number;
+    planType?: string;
+    activeLimit?: number;
+    primary: CodexQuotaWindow;
+    secondary: CodexQuotaWindow;
+    model: string;
+}
+/**
+ * Produce a single-line human-readable summary of a Codex quota snapshot.
+ *
+ * This pure, deterministic formatter is safe for concurrent use, performs no
+ * filesystem side effects (including on Windows), and never exposes secret
+ * tokens or other sensitive values.
+ *
+ * @param snapshot - The quota snapshot to format
+ * @returns A concise, comma-separated summary describing primary and secondary windows, optional plan and active limit, and `rate-limited` when the status is 429
+ */
+export declare function formatQuotaSnapshotLine(snapshot: CodexQuotaSnapshot): string;
+export interface ProbeCodexQuotaOptions {
+    accountId: string;
+    accessToken: string;
+    model?: string;
+    fallbackModels?: readonly string[];
+    timeoutMs?: number;
+}
+/**
+ * Probe Codex models sequentially to obtain a quota snapshot for the specified account.
+ *
+ * Concurrency: models are probed one-at-a-time (no parallel requests).
+ * Filesystem: performs no filesystem access and makes no Windows filesystem calls.
+ * Security: `accessToken` is sent in request headers and is treated as sensitive; tokens are not persisted or written to disk.
+ *
+ * @param options - Probe options including:
+ *   - accountId: account identifier used for Codex requests
+ *   - accessToken: bearer token for authentication (sensitive)
+ *   - model: optional preferred model name to probe first
+ *   - fallbackModels: optional list of fallback model names to try
+ *   - timeoutMs: optional per-model timeout in milliseconds (bounded between 1000 and 60000; default 15000)
+ * @returns The first CodexQuotaSnapshot parsed from response quota headers, augmented with the model that produced it.
+ * @throws If no candidate model produces a quota snapshot, throws the last encountered error or a generic failure error.
+ */
+export declare function fetchCodexQuotaSnapshot(options: ProbeCodexQuotaOptions): Promise<CodexQuotaSnapshot>;
+//# sourceMappingURL=quota-probe.d.ts.map

package/dist/lib/quota-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quota-probe.d.ts","sourceRoot":"","sources":["../../lib/quota-probe.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,gBAAgB;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;CACd;AAiQD;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,MAAM,CAa5E;AAED,MAAM,WAAW,sBAAsB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,uBAAuB,CAC5C,OAAO,EAAE,sBAAsB,GAC7B,OAAO,CAAC,kBAAkB,CAAC,CAsF7B"}