codex-multi-auth 0.1.0

package/dist/lib/refresh-lease.js

@@ -0,0 +1,335 @@
+import { createHash } from "node:crypto";
+import { existsSync, promises as fs } from "node:fs";
+import { join } from "node:path";
+import { createLogger } from "./logger.js";
+import { getCodexMultiAuthDir } from "./runtime-paths.js";
+import { safeParseTokenResult } from "./schemas.js";
+const log = createLogger("refresh-lease");
+const DEFAULT_LEASE_TTL_MS = 30_000;
+const DEFAULT_WAIT_TIMEOUT_MS = 35_000;
+const DEFAULT_POLL_INTERVAL_MS = 150;
+const DEFAULT_RESULT_TTL_MS = 20_000;
+const RETRYABLE_IO_ERRORS = new Set(["EBUSY", "EPERM", "EMFILE", "ENFILE"]);
+function parseBooleanEnv(value) {
+    if (value === undefined)
+        return undefined;
+    const normalized = value.trim().toLowerCase();
+    if (normalized === "1" || normalized === "true" || normalized === "yes")
+        return true;
+    if (normalized === "0" || normalized === "false" || normalized === "no")
+        return false;
+    return undefined;
+}
+function parseEnvInt(value) {
+    if (value === undefined)
+        return undefined;
+    const parsed = Number.parseInt(value, 10);
+    return Number.isFinite(parsed) ? parsed : undefined;
+}
+function sleep(delayMs) {
+    return new Promise((resolve) => {
+        setTimeout(resolve, delayMs);
+    });
+}
+function hashRefreshToken(refreshToken) {
+    return createHash("sha256").update(refreshToken).digest("hex");
+}
+function isRecord(value) {
+    return value !== null && typeof value === "object";
+}
+function parseLeasePayload(raw) {
+    if (!isRecord(raw))
+        return null;
+    const tokenHash = typeof raw.tokenHash === "string" ? raw.tokenHash : "";
+    const pid = typeof raw.pid === "number" ? raw.pid : Number.NaN;
+    const acquiredAt = typeof raw.acquiredAt === "number" ? raw.acquiredAt : Number.NaN;
+    const expiresAt = typeof raw.expiresAt === "number" ? raw.expiresAt : Number.NaN;
+    if (tokenHash.length === 0 ||
+        !Number.isFinite(pid) ||
+        !Number.isFinite(acquiredAt) ||
+        !Number.isFinite(expiresAt)) {
+        return null;
+    }
+    return {
+        tokenHash,
+        pid: Math.floor(pid),
+        acquiredAt: Math.floor(acquiredAt),
+        expiresAt: Math.floor(expiresAt),
+    };
+}
+function parseResultPayload(raw) {
+    if (!isRecord(raw))
+        return null;
+    const tokenHash = typeof raw.tokenHash === "string" ? raw.tokenHash : "";
+    const createdAt = typeof raw.createdAt === "number" ? raw.createdAt : Number.NaN;
+    const result = safeParseTokenResult(raw.result);
+    if (tokenHash.length === 0 || !Number.isFinite(createdAt) || !result)
+        return null;
+    return {
+        tokenHash,
+        createdAt: Math.floor(createdAt),
+        result,
+    };
+}
+async function readJson(path, fsOps) {
+    try {
+        const content = await fsOps.readFile(path, "utf8");
+        return JSON.parse(content);
+    }
+    catch {
+        return null;
+    }
+}
+async function safeUnlink(path, options, fsOps = fs) {
+    const attempts = Math.max(1, Math.floor(options?.attempts ?? 4));
+    const baseDelayMs = Math.max(5, Math.floor(options?.baseDelayMs ?? 15));
+    for (let attempt = 0; attempt < attempts; attempt++) {
+        try {
+            await fsOps.unlink(path);
+            return true;
+        }
+        catch (error) {
+            const code = error.code;
+            if (code === "ENOENT")
+                return true;
+            const canRetry = RETRYABLE_IO_ERRORS.has(code ?? "");
+            if (canRetry && attempt + 1 < attempts) {
+                await sleep(baseDelayMs * (2 ** attempt));
+                continue;
+            }
+            log.debug("Failed to remove lease artifact", {
+                path,
+                error: error instanceof Error ? error.message : String(error),
+                code,
+            });
+            return false;
+        }
+    }
+    return false;
+}
+function isRetryableFsCode(code) {
+    return RETRYABLE_IO_ERRORS.has(code ?? "");
+}
+export class RefreshLeaseCoordinator {
+    enabled;
+    leaseDir;
+    leaseTtlMs;
+    waitTimeoutMs;
+    pollIntervalMs;
+    resultTtlMs;
+    fsOps;
+    constructor(options = {}) {
+        this.enabled = options.enabled ?? true;
+        this.leaseDir = options.leaseDir ?? join(getCodexMultiAuthDir(), "refresh-leases");
+        this.leaseTtlMs = Math.max(1_000, Math.floor(options.leaseTtlMs ?? DEFAULT_LEASE_TTL_MS));
+        this.waitTimeoutMs = Math.max(0, Math.floor(options.waitTimeoutMs ?? DEFAULT_WAIT_TIMEOUT_MS));
+        this.pollIntervalMs = Math.max(50, Math.floor(options.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS));
+        this.resultTtlMs = Math.max(1_000, Math.floor(options.resultTtlMs ?? DEFAULT_RESULT_TTL_MS));
+        this.fsOps = options.fsOps ?? fs;
+    }
+    static fromEnvironment() {
+        const testMode = process.env.VITEST === "true" || process.env.NODE_ENV === "test";
+        const enabled = parseBooleanEnv(process.env.CODEX_AUTH_REFRESH_LEASE) ??
+            (testMode ? false : true);
+        return new RefreshLeaseCoordinator({
+            enabled,
+            leaseDir: (process.env.CODEX_AUTH_REFRESH_LEASE_DIR ?? "").trim() || undefined,
+            leaseTtlMs: parseEnvInt(process.env.CODEX_AUTH_REFRESH_LEASE_TTL_MS),
+            waitTimeoutMs: parseEnvInt(process.env.CODEX_AUTH_REFRESH_LEASE_WAIT_MS),
+            pollIntervalMs: parseEnvInt(process.env.CODEX_AUTH_REFRESH_LEASE_POLL_MS),
+            resultTtlMs: parseEnvInt(process.env.CODEX_AUTH_REFRESH_LEASE_RESULT_TTL_MS),
+        });
+    }
+    async acquire(refreshToken) {
+        if (!this.enabled) {
+            return this.createBypassHandle("disabled");
+        }
+        if (refreshToken.trim().length === 0) {
+            return this.createBypassHandle("empty-token");
+        }
+        const tokenHash = hashRefreshToken(refreshToken);
+        const lockPath = join(this.leaseDir, `${tokenHash}.lock`);
+        const resultPath = join(this.leaseDir, `${tokenHash}.result.json`);
+        await this.fsOps.mkdir(this.leaseDir, { recursive: true });
+        void this.pruneExpiredArtifacts();
+        const deadline = Date.now() + this.waitTimeoutMs;
+        while (true) {
+            const cachedResult = await this.readFreshResult(resultPath, tokenHash);
+            if (cachedResult) {
+                return {
+                    role: "follower",
+                    result: cachedResult,
+                    release: async () => {
+                        // Follower does not own lock.
+                    },
+                };
+            }
+            try {
+                const handle = await this.fsOps.open(lockPath, "wx");
+                try {
+                    const now = Date.now();
+                    const payload = {
+                        tokenHash,
+                        pid: process.pid,
+                        acquiredAt: now,
+                        expiresAt: now + this.leaseTtlMs,
+                    };
+                    await handle.writeFile(`${JSON.stringify(payload)}\n`, "utf8");
+                }
+                finally {
+                    await handle.close();
+                }
+                return this.createOwnerHandle(tokenHash, lockPath, resultPath);
+            }
+            catch (error) {
+                const code = error.code;
+                if (code !== "EEXIST") {
+                    log.warn("Refresh lease acquisition failed; proceeding without lease", {
+                        error: error instanceof Error ? error.message : String(error),
+                    });
+                    return this.createBypassHandle("acquire-error");
+                }
+                const stale = await this.assessLockStaleness(lockPath, tokenHash);
+                if (stale.state === "stale") {
+                    const removed = await safeUnlink(lockPath, undefined, this.fsOps);
+                    if (removed)
+                        continue;
+                    if (Date.now() >= deadline) {
+                        log.warn("Refresh lease wait timeout while stale lock could not be removed", {
+                            waitTimeoutMs: this.waitTimeoutMs,
+                        });
+                        return this.createBypassHandle("wait-timeout");
+                    }
+                    await sleep(this.pollIntervalMs);
+                    continue;
+                }
+                if (Date.now() >= deadline) {
+                    log.warn("Refresh lease wait timeout; proceeding without lease", {
+                        waitTimeoutMs: this.waitTimeoutMs,
+                    });
+                    return this.createBypassHandle("wait-timeout");
+                }
+                await sleep(this.pollIntervalMs);
+            }
+        }
+    }
+    createBypassHandle(reason) {
+        log.debug("Bypassing refresh lease", { reason });
+        return {
+            role: "bypass",
+            release: async () => {
+                // No-op
+            },
+        };
+    }
+    createOwnerHandle(tokenHash, lockPath, resultPath) {
+        let released = false;
+        return {
+            role: "owner",
+            release: async (result) => {
+                if (released)
+                    return;
+                released = true;
+                try {
+                    if (result) {
+                        await this.writeResult(resultPath, tokenHash, result);
+                    }
+                }
+                finally {
+                    await safeUnlink(lockPath, undefined, this.fsOps);
+                }
+            },
+        };
+    }
+    async writeResult(resultPath, tokenHash, result) {
+        const payload = {
+            tokenHash,
+            createdAt: Date.now(),
+            result,
+        };
+        const tempPath = `${resultPath}.${process.pid}.${Date.now()}.tmp`;
+        try {
+            await this.fsOps.writeFile(tempPath, `${JSON.stringify(payload)}\n`, "utf8");
+            await this.fsOps.rename(tempPath, resultPath);
+        }
+        finally {
+            await safeUnlink(tempPath, undefined, this.fsOps);
+        }
+    }
+    async readFreshResult(resultPath, tokenHash) {
+        if (!existsSync(resultPath))
+            return null;
+        const parsed = parseResultPayload(await readJson(resultPath, this.fsOps));
+        if (!parsed || parsed.tokenHash !== tokenHash) {
+            return null;
+        }
+        const ageMs = Date.now() - parsed.createdAt;
+        if (ageMs > this.resultTtlMs) {
+            await safeUnlink(resultPath, undefined, this.fsOps);
+            return null;
+        }
+        return parsed.result;
+    }
+    async assessLockStaleness(lockPath, tokenHash) {
+        const raw = await readJson(lockPath, this.fsOps);
+        if (raw === null) {
+            if (!existsSync(lockPath)) {
+                return { state: "stale", reason: "missing" };
+            }
+            return { state: "unknown", reason: "unreadable" };
+        }
+        const parsed = parseLeasePayload(raw);
+        if (!parsed) {
+            return { state: "unknown", reason: "invalid-payload" };
+        }
+        if (parsed.tokenHash !== tokenHash) {
+            return { state: "unknown", reason: "token-mismatch" };
+        }
+        if (parsed.expiresAt <= Date.now()) {
+            return { state: "stale", reason: "expired" };
+        }
+        try {
+            const stat = await this.fsOps.stat(lockPath);
+            if (Date.now() - stat.mtimeMs > this.leaseTtlMs) {
+                return { state: "stale", reason: "mtime-expired" };
+            }
+            return { state: "active", reason: "fresh" };
+        }
+        catch (error) {
+            const code = error.code;
+            if (code === "ENOENT")
+                return { state: "stale", reason: "missing" };
+            if (isRetryableFsCode(code) || code === "EACCES") {
+                return { state: "unknown", reason: `stat-${String(code).toLowerCase()}` };
+            }
+            return { state: "unknown", reason: "stat-error" };
+        }
+    }
+    async pruneExpiredArtifacts() {
+        try {
+            const entries = await this.fsOps.readdir(this.leaseDir, { withFileTypes: true });
+            const now = Date.now();
+            const maxAgeMs = Math.max(this.leaseTtlMs, this.resultTtlMs) * 2;
+            for (const entry of entries) {
+                if (!entry.isFile())
+                    continue;
+                if (!entry.name.endsWith(".lock") && !entry.name.endsWith(".result.json"))
+                    continue;
+                const fullPath = join(this.leaseDir, entry.name);
+                try {
+                    const stat = await this.fsOps.stat(fullPath);
+                    if (now - stat.mtimeMs > maxAgeMs) {
+                        await safeUnlink(fullPath, undefined, this.fsOps);
+                    }
+                }
+                catch {
+                    // Best effort.
+                }
+            }
+        }
+        catch {
+            // Best effort.
+        }
+    }
+}
+//# sourceMappingURL=refresh-lease.js.map

package/dist/lib/refresh-lease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-lease.js","sourceRoot":"","sources":["../../lib/refresh-lease.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAGpD,MAAM,GAAG,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;AAE1C,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AACvC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AACrC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAoC5E,SAAS,eAAe,CAAC,KAAyB;IACjD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACrF,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtF,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB;IAC7C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED,SAAS,KAAK,CAAC,OAAe;IAC7B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,YAAoB;IAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AACpD,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAY;IACtC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;IAC/D,MAAM,UAAU,GAAG,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;IACpF,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;IACjF,IACC,SAAS,CAAC,MAAM,KAAK,CAAC;QACtB,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QACrB,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC5B,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAC1B,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO;QACN,SAAS;QACT,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QACpB,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QAClC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;KAChC,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAY;IACvC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;IACjF,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAClF,OAAO;QACN,SAAS;QACT,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QAChC,MAAM;KACN,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,KAAiB;IACtD,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,KAAK,UAAU,UAAU,CACxB,IAAY,EACZ,OAAqD,EACrD,QAAoB,EAAE;IAEtB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC;IACxE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;QACrD,IAAI,CAAC;YACJ,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACzB,OAAO,IAAI,CAAC;QACb,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;YACnD,IAAI,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACnC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YACrD,IAAI,QAAQ,IAAI,OAAO,GAAG,CAAC,GAAG,QAAQ,EAAE,CAAC;gBACxC,MAAM,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC;gBAC1C,SAAS;YACV,CAAC;YACD,GAAG,CAAC,KAAK,CAAC,iCAAiC,EAAE;gBAC5C,IAAI;gBACJ,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,IAAI;aACJ,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAOD,SAAS,iBAAiB,CAAC,IAAwB;IAClD,OAAO,mBAAmB,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,OAAO,uBAAuB;IAClB,OAAO,CAAU;IACjB,QAAQ,CAAS;IACjB,UAAU,CAAS;IACnB,aAAa,CAAS;IACtB,cAAc,CAAS;IACvB,WAAW,CAAS;IACpB,KAAK,CAAa;IAEnC,YAAY,UAA0C,EAAE;QACvD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC;QACvC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,oBAAoB,EAAE,EAAE,gBAAgB,CAAC,CAAC;QACnF,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,IAAI,oBAAoB,CAAC,CAAC,CAAC;QAC1F,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,IAAI,uBAAuB,CAAC,CAAC,CAAC;QAC/F,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC,CAAC,CAAC;QACnG,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,IAAI,qBAAqB,CAAC,CAAC,CAAC;QAC7F,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IAClC,CAAC;IAED,MAAM,CAAC,eAAe;QACrB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC;QAClF,MAAM,OAAO,GACZ,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;YACrD,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,IAAI,uBAAuB,CAAC;YAClC,OAAO;YACP,QAAQ,EACP,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS;YACrE,UAAU,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC;YACpE,aAAa,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC;YACxE,cAAc,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC;YACzE,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC;SAC5E,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,YAAoB;QACjC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,SAAS,cAAc,CAAC,CAAC;QACnE,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,KAAK,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAElC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC;QACjD,OAAO,IAAI,EAAE,CAAC;YACb,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YACvE,IAAI,YAAY,EAAE,CAAC;gBAClB,OAAO;oBACN,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,YAAY;oBACpB,OAAO,EAAE,KAAK,IAAI,EAAE;wBACnB,8BAA8B;oBAC/B,CAAC;iBACD,CAAC;YACH,CAAC;YAED,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBACrD,IAAI,CAAC;oBACJ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;oBACvB,MAAM,OAAO,GAAqB;wBACjC,SAAS;wBACT,GAAG,EAAE,OAAO,CAAC,GAAG;wBAChB,UAAU,EAAE,GAAG;wBACf,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,UAAU;qBAChC,CAAC;oBACF,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAChE,CAAC;wBAAS,CAAC;oBACV,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACtB,CAAC;gBAED,OAAO,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;YAChE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;gBACnD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACvB,GAAG,CAAC,IAAI,CAAC,4DAA4D,EAAE;wBACtE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC7D,CAAC,CAAC;oBACH,OAAO,IAAI,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC;gBACjD,CAAC;gBAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBAClE,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;oBAC7B,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;oBAClE,IAAI,OAAO;wBAAE,SAAS;oBACtB,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;wBAC5B,GAAG,CAAC,IAAI,CAAC,kEAAkE,EAAE;4BAC5E,aAAa,EAAE,IAAI,CAAC,aAAa;yBACjC,CAAC,CAAC;wBACH,OAAO,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC;oBAChD,CAAC;oBACD,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;oBACjC,SAAS;gBACV,CAAC;gBAED,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;oBAC5B,GAAG,CAAC,IAAI,CAAC,sDAAsD,EAAE;wBAChE,aAAa,EAAE,IAAI,CAAC,aAAa;qBACjC,CAAC,CAAC;oBACH,OAAO,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC;gBAChD,CAAC;gBACD,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAClC,CAAC;QACF,CAAC;IACF,CAAC;IAEO,kBAAkB,CAAC,MAAc;QACxC,GAAG,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACjD,OAAO;YACN,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,KAAK,IAAI,EAAE;gBACnB,QAAQ;YACT,CAAC;SACD,CAAC;IACH,CAAC;IAEO,iBAAiB,CACxB,SAAiB,EACjB,QAAgB,EAChB,UAAkB;QAElB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,OAAO;YACN,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,KAAK,EAAE,MAAoB,EAAE,EAAE;gBACvC,IAAI,QAAQ;oBAAE,OAAO;gBACrB,QAAQ,GAAG,IAAI,CAAC;gBAChB,IAAI,CAAC;oBACJ,IAAI,MAAM,EAAE,CAAC;wBACZ,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;oBACvD,CAAC;gBACF,CAAC;wBAAS,CAAC;oBACV,MAAM,UAAU,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnD,CAAC;YACF,CAAC;SACD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CACxB,UAAkB,EAClB,SAAiB,EACjB,MAAmB;QAEnB,MAAM,OAAO,GAAsB;YAClC,SAAS;YACT,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,MAAM;SACN,CAAC;QACF,MAAM,QAAQ,GAAG,GAAG,UAAU,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;QAClE,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7E,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC/C,CAAC;gBAAS,CAAC;YACV,MAAM,UAAU,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,eAAe,CAC5B,UAAkB,EAClB,SAAiB;QAEjB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC;QACb,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC;QAC5C,IAAI,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAC9B,MAAM,UAAU,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACpD,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAChC,QAAgB,EAChB,SAAiB;QAEjB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAClB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3B,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC9C,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QACnD,CAAC;QAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QACxD,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QACvD,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACpC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC9C,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7C,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;gBACjD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;YACpD,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;YACnD,IAAI,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YACpE,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAClD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC;YAC3E,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QACnD,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,qBAAqB;QAClC,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACjF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACjE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;oBAAE,SAAS;gBAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;oBAAE,SAAS;gBACpF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjD,IAAI,CAAC;oBACJ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAC7C,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,QAAQ,EAAE,CAAC;wBACnC,MAAM,UAAU,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;oBACnD,CAAC;gBACF,CAAC;gBAAC,MAAM,CAAC;oBACR,eAAe;gBAChB,CAAC;YACF,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,eAAe;QAChB,CAAC;IACF,CAAC;CACD"}

package/dist/lib/refresh-queue.d.ts

@@ -0,0 +1,117 @@
+/**
+ * Refresh Queue Module
+ *
+ * Prevents race conditions when multiple concurrent requests try to refresh
+ * the same account's token simultaneously. Instead of firing parallel refresh
+ * requests, subsequent callers await the existing in-flight refresh.
+ *
+ * Ported from antigravity-auth refresh-queue.ts pattern.
+ */
+import type { TokenResult } from "./types.js";
+import { RefreshLeaseCoordinator } from "./refresh-lease.js";
+/**
+ * Manages queued token refresh operations to prevent race conditions.
+ *
+ * When multiple concurrent requests need to refresh the same account's token,
+ * only the first request triggers the actual refresh. Subsequent requests
+ * await the same promise, ensuring:
+ * - No duplicate refresh API calls for the same refresh token
+ * - Consistent token state across all waiting callers
+ * - Reduced load on OpenAI's token endpoint
+ *
+ * Token Rotation Handling:
+ * When OpenAI rotates the refresh token during a refresh operation, we maintain
+ * a mapping from old token → new token. This ensures that requests arriving with
+ * either the old or new token will find the in-flight refresh and not trigger
+ * duplicate refreshes.
+ *
+ * @example
+ * ```typescript
+ * const queue = new RefreshQueue();
+ *
+ * // These three concurrent calls will only trigger ONE actual refresh
+ * const [result1, result2, result3] = await Promise.all([
+ *   queue.refresh(refreshToken),
+ *   queue.refresh(refreshToken),
+ *   queue.refresh(refreshToken),
+ * ]);
+ *
+ * // All three get the same result
+ * console.log(result1 === result2); // true (same object reference)
+ * ```
+ */
+export declare class RefreshQueue {
+    private pending;
+    private readonly leaseCoordinator;
+    /**
+     * Maps old refresh tokens to new tokens after rotation.
+     * This allows lookups with either old or new token to find the same entry.
+     * Format: oldToken → newToken
+     */
+    private tokenRotationMap;
+    /**
+     * Maximum time to keep a refresh entry in the queue (prevents memory leaks
+     * from stuck requests). After this timeout, the entry is removed and new
+     * callers will trigger a fresh refresh.
+     */
+    private readonly maxEntryAgeMs;
+    /**
+     * Create a new RefreshQueue instance.
+     * @param maxEntryAgeMs - Maximum age for pending entries before cleanup (default: 30s)
+     */
+    constructor(maxEntryAgeMs?: number, leaseCoordinator?: RefreshLeaseCoordinator);
+    /**
+     * Refresh a token, deduplicating concurrent requests for the same refresh token.
+     *
+     * If a refresh is already in-flight for this token, returns the existing promise.
+     * Otherwise, initiates a new refresh and caches the promise for other callers.
+     *
+     * @param refreshToken - The refresh token to use
+     * @returns Token result (success with new tokens, or failure)
+     */
+    refresh(refreshToken: string): Promise<TokenResult>;
+    private findOriginalToken;
+    private cleanupRotationMapping;
+    private executeRefreshWithRotationTracking;
+    /**
+     * Execute the actual refresh and log results.
+     */
+    private executeRefresh;
+    /**
+     * Remove stale entries that have been pending too long.
+     * This prevents memory leaks from stuck or abandoned refresh operations.
+     */
+    private cleanup;
+    /**
+     * Check if there's an in-flight refresh for a given token.
+     * @param refreshToken - The refresh token to check
+     * @returns True if refresh is in progress
+     */
+    isRefreshing(refreshToken: string): boolean;
+    /**
+     * Get the number of pending refresh operations.
+     * Useful for debugging and monitoring.
+     */
+    get pendingCount(): number;
+    /**
+     * Clear all pending entries (primarily for testing).
+     */
+    clear(): void;
+}
+/**
+ * Get the singleton RefreshQueue instance.
+ * @param maxEntryAgeMs - Maximum age for pending entries (only used on first call)
+ * @returns The global RefreshQueue instance
+ */
+export declare function getRefreshQueue(maxEntryAgeMs?: number): RefreshQueue;
+/**
+ * Reset the singleton instance (primarily for testing).
+ */
+export declare function resetRefreshQueue(): void;
+/**
+ * Convenience function to refresh a token using the singleton queue.
+ * @param refreshToken - The refresh token to use
+ * @returns Token result
+ */
+export declare function queuedRefresh(refreshToken: string): Promise<TokenResult>;
+//# sourceMappingURL=refresh-queue.d.ts.map

package/dist/lib/refresh-queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-queue.d.ts","sourceRoot":"","sources":["../../lib/refresh-queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAY7D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,OAAO,CAAwC;IACvD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA0B;IAE3D;;;;OAIG;IACH,OAAO,CAAC,gBAAgB,CAAkC;IAE1D;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IAEvC;;;OAGG;gBAED,aAAa,GAAE,MAAe,EAC9B,gBAAgB,GAAE,uBAAmE;IAMvF;;;;;;;;OAQG;IACG,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAiFzD,OAAO,CAAC,iBAAiB;IASzB,OAAO,CAAC,sBAAsB;YAShB,kCAAkC;IAchD;;OAEG;YACW,cAAc;IAsC5B;;;OAGG;IACH,OAAO,CAAC,OAAO;IAqBf;;;;OAIG;IACH,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IAI3C;;;OAGG;IACH,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED;;OAEG;IACH,KAAK,IAAI,IAAI;CAId;AAQD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,YAAY,CAKpE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAGxC;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAE9E"}