codex-multi-auth 1.1.11 → 1.2.1

package/dist/lib/storage/flagged-load-entry.d.ts

@@ -0,0 +1,20 @@
+import type { FlaggedAccountStorageV1 } from "../storage.js";
+export declare function loadFlaggedAccountsEntry(params: {
+    getFlaggedAccountsPath: () => string;
+    getLegacyFlaggedAccountsPath: () => string;
+    getIntentionalResetMarkerPath: (path: string) => string;
+    normalizeFlaggedStorage: (data: unknown) => FlaggedAccountStorageV1;
+    saveFlaggedAccounts: (storage: FlaggedAccountStorageV1) => Promise<void>;
+    loadFlaggedAccountsState: (args: {
+        path: string;
+        legacyPath: string;
+        resetMarkerPath: string;
+        normalizeFlaggedStorage: (data: unknown) => FlaggedAccountStorageV1;
+        saveFlaggedAccounts: (storage: FlaggedAccountStorageV1) => Promise<void>;
+        logError: (message: string, details: Record<string, unknown>) => void;
+        logInfo: (message: string, details: Record<string, unknown>) => void;
+    }) => Promise<FlaggedAccountStorageV1>;
+    logError: (message: string, details: Record<string, unknown>) => void;
+    logInfo: (message: string, details: Record<string, unknown>) => void;
+}): Promise<FlaggedAccountStorageV1>;
+//# sourceMappingURL=flagged-load-entry.d.ts.map

package/dist/lib/storage/flagged-load-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flagged-load-entry.d.ts","sourceRoot":"","sources":["../../../lib/storage/flagged-load-entry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAE7D,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IACtD,sBAAsB,EAAE,MAAM,MAAM,CAAC;IACrC,4BAA4B,EAAE,MAAM,MAAM,CAAC;IAC3C,6BAA6B,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IACxD,uBAAuB,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,uBAAuB,CAAC;IACpE,mBAAmB,EAAE,CAAC,OAAO,EAAE,uBAAuB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,wBAAwB,EAAE,CAAC,IAAI,EAAE;QAChC,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,EAAE,MAAM,CAAC;QACxB,uBAAuB,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,uBAAuB,CAAC;QACpE,mBAAmB,EAAE,CAAC,OAAO,EAAE,uBAAuB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QACzE,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QACtE,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;KACrE,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACvC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACtE,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACrE,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAWnC"}

package/dist/lib/storage/flagged-load-entry.js

@@ -0,0 +1,13 @@
+export async function loadFlaggedAccountsEntry(params) {
+    const path = params.getFlaggedAccountsPath();
+    return params.loadFlaggedAccountsState({
+        path,
+        legacyPath: params.getLegacyFlaggedAccountsPath(),
+        resetMarkerPath: params.getIntentionalResetMarkerPath(path),
+        normalizeFlaggedStorage: params.normalizeFlaggedStorage,
+        saveFlaggedAccounts: params.saveFlaggedAccounts,
+        logError: params.logError,
+        logInfo: params.logInfo,
+    });
+}
+//# sourceMappingURL=flagged-load-entry.js.map

package/dist/lib/storage/flagged-load-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flagged-load-entry.js","sourceRoot":"","sources":["../../../lib/storage/flagged-load-entry.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAiB9C;IACA,MAAM,IAAI,GAAG,MAAM,CAAC,sBAAsB,EAAE,CAAC;IAC7C,OAAO,MAAM,CAAC,wBAAwB,CAAC;QACtC,IAAI;QACJ,UAAU,EAAE,MAAM,CAAC,4BAA4B,EAAE;QACjD,eAAe,EAAE,MAAM,CAAC,6BAA6B,CAAC,IAAI,CAAC;QAC3D,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;QACvD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;KACvB,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/storage/flagged-save-entry.d.ts

@@ -0,0 +1,7 @@
+import type { FlaggedAccountStorageV1 } from "../storage.js";
+export declare function saveFlaggedAccountsEntry(params: {
+    storage: FlaggedAccountStorageV1;
+    withStorageLock: <T>(fn: () => Promise<T>) => Promise<T>;
+    saveUnlocked: (storage: FlaggedAccountStorageV1) => Promise<void>;
+}): Promise<void>;
+//# sourceMappingURL=flagged-save-entry.d.ts.map

package/dist/lib/storage/flagged-save-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flagged-save-entry.d.ts","sourceRoot":"","sources":["../../../lib/storage/flagged-save-entry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAE7D,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IACtD,OAAO,EAAE,uBAAuB,CAAC;IACjC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;IACzD,YAAY,EAAE,CAAC,OAAO,EAAE,uBAAuB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAClE,GAAG,OAAO,CAAC,IAAI,CAAC,CAIhB"}

package/dist/lib/storage/flagged-save-entry.js

@@ -0,0 +1,6 @@
+export async function saveFlaggedAccountsEntry(params) {
+    return params.withStorageLock(async () => {
+        await params.saveUnlocked(params.storage);
+    });
+}
+//# sourceMappingURL=flagged-save-entry.js.map

package/dist/lib/storage/flagged-save-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flagged-save-entry.js","sourceRoot":"","sources":["../../../lib/storage/flagged-save-entry.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAI9C;IACA,OAAO,MAAM,CAAC,eAAe,CAAC,KAAK,IAAI,EAAE;QACxC,MAAM,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/storage/flagged-storage-file.d.ts

@@ -0,0 +1,7 @@
+import type { FlaggedAccountStorageV1 } from "../storage.js";
+export declare function loadFlaggedAccountsFromFile(path: string, deps: {
+    readFile: typeof import("node:fs").promises.readFile;
+    normalizeFlaggedStorage: (data: unknown) => FlaggedAccountStorageV1;
+    sleep?: (ms: number) => Promise<void>;
+}): Promise<FlaggedAccountStorageV1>;
+//# sourceMappingURL=flagged-storage-file.d.ts.map

package/dist/lib/storage/flagged-storage-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flagged-storage-file.d.ts","sourceRoot":"","sources":["../../../lib/storage/flagged-storage-file.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AA6B7D,wBAAsB,2BAA2B,CAChD,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;IACL,QAAQ,EAAE,cAAc,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACrD,uBAAuB,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,uBAAuB,CAAC;IACpE,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACtC,GACC,OAAO,CAAC,uBAAuB,CAAC,CAIlC"}

package/dist/lib/storage/flagged-storage-file.js

@@ -0,0 +1,25 @@
+import { sleep } from "../utils.js";
+const RETRYABLE_READ_CODES = new Set(["EBUSY", "EAGAIN"]);
+function isRetryableReadError(error) {
+    const code = error?.code;
+    return typeof code === "string" && RETRYABLE_READ_CODES.has(code);
+}
+async function readFileWithRetry(path, deps) {
+    for (let attempt = 0;; attempt += 1) {
+        try {
+            return await deps.readFile(path, "utf-8");
+        }
+        catch (error) {
+            if (!isRetryableReadError(error) || attempt >= 3) {
+                throw error;
+            }
+            await (deps.sleep ?? sleep)(10 * 2 ** attempt);
+        }
+    }
+}
+export async function loadFlaggedAccountsFromFile(path, deps) {
+    const content = await readFileWithRetry(path, deps);
+    const data = JSON.parse(content);
+    return deps.normalizeFlaggedStorage(data);
+}
+//# sourceMappingURL=flagged-storage-file.js.map

package/dist/lib/storage/flagged-storage-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flagged-storage-file.js","sourceRoot":"","sources":["../../../lib/storage/flagged-storage-file.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEpC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE1D,SAAS,oBAAoB,CAAC,KAAc;IAC3C,MAAM,IAAI,GAAI,KAA2C,EAAE,IAAI,CAAC;IAChE,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC/B,IAAY,EACZ,IAGC;IAED,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC;YACJ,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;gBAClD,MAAM,KAAK,CAAC;YACb,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC;QAChD,CAAC;IACF,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAChD,IAAY,EACZ,IAIC;IAED,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;IAC5C,OAAO,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC"}

package/dist/lib/storage/flagged-storage-io.d.ts

@@ -0,0 +1,28 @@
+import type { FlaggedAccountStorageV1 } from "../storage.js";
+export declare function loadFlaggedAccountsState(params: {
+    path: string;
+    legacyPath: string;
+    resetMarkerPath: string;
+    normalizeFlaggedStorage: (data: unknown) => FlaggedAccountStorageV1;
+    saveFlaggedAccounts: (storage: FlaggedAccountStorageV1) => Promise<void>;
+    logError: (message: string, details: Record<string, unknown>) => void;
+    logInfo: (message: string, details: Record<string, unknown>) => void;
+}): Promise<FlaggedAccountStorageV1>;
+export declare function saveFlaggedAccountsUnlockedToDisk(storage: FlaggedAccountStorageV1, params: {
+    path: string;
+    markerPath: string;
+    normalizeFlaggedStorage: (data: unknown) => FlaggedAccountStorageV1;
+    copyFileWithRetry: (source: string, destination: string, options?: {
+        allowMissingSource?: boolean;
+    }) => Promise<void>;
+    renameFileWithRetry: (source: string, destination: string) => Promise<void>;
+    logWarn: (message: string, details: Record<string, unknown>) => void;
+    logError: (message: string, details: Record<string, unknown>) => void;
+}): Promise<void>;
+export declare function clearFlaggedAccountsOnDisk(params: {
+    path: string;
+    markerPath: string;
+    backupPaths: string[];
+    logError: (message: string, details: Record<string, unknown>) => void;
+}): Promise<void>;
+//# sourceMappingURL=flagged-storage-io.d.ts.map

package/dist/lib/storage/flagged-storage-io.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flagged-storage-io.d.ts","sourceRoot":"","sources":["../../../lib/storage/flagged-storage-io.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAE7D,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,uBAAuB,CAAC;IACpE,mBAAmB,EAAE,CAAC,OAAO,EAAE,uBAAuB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACtE,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACrE,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAoDnC;AAED,wBAAsB,iCAAiC,CACtD,OAAO,EAAE,uBAAuB,EAChC,MAAM,EAAE;IACP,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,uBAAuB,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,uBAAuB,CAAC;IACpE,iBAAiB,EAAE,CAClB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE;QAAE,kBAAkB,CAAC,EAAE,OAAO,CAAA;KAAE,KACtC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,mBAAmB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5E,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACrE,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACtE,GACC,OAAO,CAAC,IAAI,CAAC,CA0Cf;AAED,wBAAsB,0BAA0B,CAAC,MAAM,EAAE;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACtE,GAAG,OAAO,CAAC,IAAI,CAAC,CAkChB"}

package/dist/lib/storage/flagged-storage-io.js

@@ -0,0 +1,135 @@
+import { existsSync, promises as fs } from "node:fs";
+import { dirname } from "node:path";
+export async function loadFlaggedAccountsState(params) {
+    const empty = { version: 1, accounts: [] };
+    try {
+        const content = await fs.readFile(params.path, "utf-8");
+        const data = JSON.parse(content);
+        const loaded = params.normalizeFlaggedStorage(data);
+        if (existsSync(params.resetMarkerPath)) {
+            return empty;
+        }
+        return loaded;
+    }
+    catch (error) {
+        const code = error.code;
+        if (code !== "ENOENT") {
+            params.logError("Failed to load flagged account storage", {
+                path: params.path,
+                error: String(error),
+            });
+            return empty;
+        }
+    }
+    if (!existsSync(params.legacyPath)) {
+        return empty;
+    }
+    try {
+        const legacyContent = await fs.readFile(params.legacyPath, "utf-8");
+        const legacyData = JSON.parse(legacyContent);
+        const migrated = params.normalizeFlaggedStorage(legacyData);
+        if (migrated.accounts.length > 0) {
+            await params.saveFlaggedAccounts(migrated);
+        }
+        try {
+            await fs.unlink(params.legacyPath);
+        }
+        catch {
+            // Best effort cleanup.
+        }
+        params.logInfo("Migrated legacy flagged account storage", {
+            from: params.legacyPath,
+            to: params.path,
+            accounts: migrated.accounts.length,
+        });
+        return migrated;
+    }
+    catch (error) {
+        params.logError("Failed to migrate legacy flagged account storage", {
+            from: params.legacyPath,
+            to: params.path,
+            error: String(error),
+        });
+        return empty;
+    }
+}
+export async function saveFlaggedAccountsUnlockedToDisk(storage, params) {
+    const uniqueSuffix = `${Date.now()}.${Math.random().toString(36).slice(2, 8)}`;
+    const tempPath = `${params.path}.${uniqueSuffix}.tmp`;
+    try {
+        await fs.mkdir(dirname(params.path), { recursive: true });
+        if (existsSync(params.path)) {
+            try {
+                await params.copyFileWithRetry(params.path, `${params.path}.bak`, {
+                    allowMissingSource: true,
+                });
+            }
+            catch (backupError) {
+                params.logWarn("Failed to create flagged backup snapshot", {
+                    path: params.path,
+                    error: String(backupError),
+                });
+            }
+        }
+        const content = JSON.stringify(params.normalizeFlaggedStorage(storage), null, 2);
+        await fs.writeFile(tempPath, content, { encoding: "utf-8", mode: 0o600 });
+        await params.renameFileWithRetry(tempPath, params.path);
+        try {
+            await fs.unlink(params.markerPath);
+        }
+        catch {
+            // Best effort cleanup.
+        }
+    }
+    catch (error) {
+        try {
+            await fs.unlink(tempPath);
+        }
+        catch {
+            // Ignore cleanup failures.
+        }
+        params.logError("Failed to save flagged account storage", {
+            path: params.path,
+            error: String(error),
+        });
+        throw error;
+    }
+}
+export async function clearFlaggedAccountsOnDisk(params) {
+    try {
+        await fs.writeFile(params.markerPath, "reset", {
+            encoding: "utf-8",
+            mode: 0o600,
+        });
+    }
+    catch (error) {
+        params.logError("Failed to write flagged reset marker", {
+            path: params.path,
+            markerPath: params.markerPath,
+            error: String(error),
+        });
+        throw error;
+    }
+    for (const candidate of [
+        params.path,
+        ...params.backupPaths,
+        params.markerPath,
+    ]) {
+        try {
+            await fs.unlink(candidate);
+        }
+        catch (error) {
+            const code = error.code;
+            if (code !== "ENOENT") {
+                params.logError("Failed to clear flagged account storage", {
+                    path: candidate,
+                    error: String(error),
+                });
+                if (candidate === params.path) {
+                    throw error;
+                }
+            }
+        }
+    }
+}
+//# sourceMappingURL=flagged-storage-io.js.map

package/dist/lib/storage/flagged-storage-io.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flagged-storage-io.js","sourceRoot":"","sources":["../../../lib/storage/flagged-storage-io.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAQ9C;IACA,MAAM,KAAK,GAA4B,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAEpE,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC;QACd,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvB,MAAM,CAAC,QAAQ,CAAC,wCAAwC,EAAE;gBACzD,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;aACpB,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACpE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAY,CAAC;QACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC;QAC5D,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACR,uBAAuB;QACxB,CAAC;QACD,MAAM,CAAC,OAAO,CAAC,yCAAyC,EAAE;YACzD,IAAI,EAAE,MAAM,CAAC,UAAU;YACvB,EAAE,EAAE,MAAM,CAAC,IAAI;YACf,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM;SAClC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,QAAQ,CAAC,kDAAkD,EAAE;YACnE,IAAI,EAAE,MAAM,CAAC,UAAU;YACvB,EAAE,EAAE,MAAM,CAAC,IAAI;YACf,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;SACpB,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACtD,OAAgC,EAChC,MAYC;IAED,MAAM,YAAY,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC/E,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,YAAY,MAAM,CAAC;IAEtD,IAAI,CAAC;QACJ,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACJ,MAAM,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,IAAI,MAAM,EAAE;oBACjE,kBAAkB,EAAE,IAAI;iBACxB,CAAC,CAAC;YACJ,CAAC;YAAC,OAAO,WAAW,EAAE,CAAC;gBACtB,MAAM,CAAC,OAAO,CAAC,0CAA0C,EAAE;oBAC1D,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC;iBAC1B,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAC7B,MAAM,CAAC,uBAAuB,CAAC,OAAO,CAAC,EACvC,IAAI,EACJ,CAAC,CACD,CAAC;QACF,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1E,MAAM,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC;YACJ,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACR,uBAAuB;QACxB,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC;YACJ,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACR,2BAA2B;QAC5B,CAAC;QACD,MAAM,CAAC,QAAQ,CAAC,wCAAwC,EAAE;YACzD,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;SACpB,CAAC,CAAC;QACH,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,MAKhD;IACA,IAAI,CAAC;QACJ,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE;YAC9C,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,KAAK;SACX,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,QAAQ,CAAC,sCAAsC,EAAE;YACvD,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;SACpB,CAAC,CAAC;QACH,MAAM,KAAK,CAAC;IACb,CAAC;IACD,KAAK,MAAM,SAAS,IAAI;QACvB,MAAM,CAAC,IAAI;QACX,GAAG,MAAM,CAAC,WAAW;QACrB,MAAM,CAAC,UAAU;KACjB,EAAE,CAAC;QACH,IAAI,CAAC;YACJ,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;YACnD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvB,MAAM,CAAC,QAAQ,CAAC,yCAAyC,EAAE;oBAC1D,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;iBACpB,CAAC,CAAC;gBACH,IAAI,SAAS,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;oBAC/B,MAAM,KAAK,CAAC;gBACb,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC;AACF,CAAC"}

package/dist/lib/storage/flagged-storage.d.ts

@@ -0,0 +1,6 @@
+import type { FlaggedAccountStorageV1 } from "../storage.js";
+export declare function normalizeFlaggedStorage(data: unknown, deps: {
+    isRecord: (value: unknown) => value is Record<string, unknown>;
+    now: () => number;
+}): FlaggedAccountStorageV1;
+//# sourceMappingURL=flagged-storage.d.ts.map

package/dist/lib/storage/flagged-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flagged-storage.d.ts","sourceRoot":"","sources":["../../../lib/storage/flagged-storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAGX,uBAAuB,EACvB,MAAM,eAAe,CAAC;AAEvB,wBAAgB,uBAAuB,CACtC,IAAI,EAAE,OAAO,EACb,IAAI,EAAE;IACL,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/D,GAAG,EAAE,MAAM,MAAM,CAAC;CAClB,GACC,uBAAuB,CAsHzB"}

package/dist/lib/storage/flagged-storage.js

@@ -0,0 +1,90 @@
+export function normalizeFlaggedStorage(data, deps) {
+    if (!deps.isRecord(data) ||
+        data.version !== 1 ||
+        !Array.isArray(data.accounts)) {
+        return { version: 1, accounts: [] };
+    }
+    const byRefreshToken = new Map();
+    for (const rawAccount of data.accounts) {
+        if (!deps.isRecord(rawAccount))
+            continue;
+        const refreshToken = typeof rawAccount.refreshToken === "string"
+            ? rawAccount.refreshToken.trim()
+            : "";
+        if (!refreshToken)
+            continue;
+        const flaggedAt = typeof rawAccount.flaggedAt === "number"
+            ? rawAccount.flaggedAt
+            : deps.now();
+        const isAccountIdSource = (value) => value === "token" ||
+            value === "id_token" ||
+            value === "org" ||
+            value === "manual";
+        const isSwitchReason = (value) => value === "rate-limit" ||
+            value === "initial" ||
+            value === "rotation" ||
+            value === "best" ||
+            value === "restore";
+        const isCooldownReason = (value) => value === "auth-failure" ||
+            value === "network-error" ||
+            value === "rate-limit";
+        let rateLimitResetTimes;
+        if (deps.isRecord(rawAccount.rateLimitResetTimes)) {
+            const normalizedRateLimits = {};
+            for (const [key, value] of Object.entries(rawAccount.rateLimitResetTimes)) {
+                if (typeof value === "number") {
+                    normalizedRateLimits[key] = value;
+                }
+            }
+            if (Object.keys(normalizedRateLimits).length > 0) {
+                rateLimitResetTimes = normalizedRateLimits;
+            }
+        }
+        const accountIdSource = isAccountIdSource(rawAccount.accountIdSource)
+            ? rawAccount.accountIdSource
+            : undefined;
+        const lastSwitchReason = isSwitchReason(rawAccount.lastSwitchReason)
+            ? rawAccount.lastSwitchReason
+            : undefined;
+        const cooldownReason = isCooldownReason(rawAccount.cooldownReason)
+            ? rawAccount.cooldownReason
+            : undefined;
+        const normalized = {
+            refreshToken,
+            addedAt: typeof rawAccount.addedAt === "number" ? rawAccount.addedAt : flaggedAt,
+            lastUsed: typeof rawAccount.lastUsed === "number"
+                ? rawAccount.lastUsed
+                : flaggedAt,
+            accountId: typeof rawAccount.accountId === "string"
+                ? rawAccount.accountId
+                : undefined,
+            accountIdSource,
+            accountLabel: typeof rawAccount.accountLabel === "string"
+                ? rawAccount.accountLabel
+                : undefined,
+            email: typeof rawAccount.email === "string" ? rawAccount.email : undefined,
+            enabled: typeof rawAccount.enabled === "boolean"
+                ? rawAccount.enabled
+                : undefined,
+            lastSwitchReason,
+            rateLimitResetTimes,
+            coolingDownUntil: typeof rawAccount.coolingDownUntil === "number"
+                ? rawAccount.coolingDownUntil
+                : undefined,
+            cooldownReason,
+            flaggedAt,
+            flaggedReason: typeof rawAccount.flaggedReason === "string"
+                ? rawAccount.flaggedReason
+                : undefined,
+            lastError: typeof rawAccount.lastError === "string"
+                ? rawAccount.lastError
+                : undefined,
+        };
+        byRefreshToken.set(refreshToken, normalized);
+    }
+    return {
+        version: 1,
+        accounts: Array.from(byRefreshToken.values()),
+    };
+}
+//# sourceMappingURL=flagged-storage.js.map

package/dist/lib/storage/flagged-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flagged-storage.js","sourceRoot":"","sources":["../../../lib/storage/flagged-storage.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,uBAAuB,CACtC,IAAa,EACb,IAGC;IAED,IACC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,IAAI,CAAC,OAAO,KAAK,CAAC;QAClB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAC5B,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,GAAG,EAAoC,CAAC;IACnE,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,SAAS;QACzC,MAAM,YAAY,GACjB,OAAO,UAAU,CAAC,YAAY,KAAK,QAAQ;YAC1C,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,EAAE;YAChC,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,CAAC,YAAY;YAAE,SAAS;QAE5B,MAAM,SAAS,GACd,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ;YACvC,CAAC,CAAC,UAAU,CAAC,SAAS;YACtB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACf,MAAM,iBAAiB,GAAG,CACzB,KAAc,EACkC,EAAE,CAClD,KAAK,KAAK,OAAO;YACjB,KAAK,KAAK,UAAU;YACpB,KAAK,KAAK,KAAK;YACf,KAAK,KAAK,QAAQ,CAAC;QACpB,MAAM,cAAc,GAAG,CACtB,KAAc,EACmC,EAAE,CACnD,KAAK,KAAK,YAAY;YACtB,KAAK,KAAK,SAAS;YACnB,KAAK,KAAK,UAAU;YACpB,KAAK,KAAK,MAAM;YAChB,KAAK,KAAK,SAAS,CAAC;QACrB,MAAM,gBAAgB,GAAG,CACxB,KAAc,EACiC,EAAE,CACjD,KAAK,KAAK,cAAc;YACxB,KAAK,KAAK,eAAe;YACzB,KAAK,KAAK,YAAY,CAAC;QAExB,IAAI,mBAEQ,CAAC;QACb,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACnD,MAAM,oBAAoB,GAAuC,EAAE,CAAC;YACpE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CACxC,UAAU,CAAC,mBAAmB,CAC9B,EAAE,CAAC;gBACH,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC/B,oBAAoB,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBACnC,CAAC;YACF,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClD,mBAAmB,GAAG,oBAAoB,CAAC;YAC5C,CAAC;QACF,CAAC;QAED,MAAM,eAAe,GAAG,iBAAiB,CAAC,UAAU,CAAC,eAAe,CAAC;YACpE,CAAC,CAAC,UAAU,CAAC,eAAe;YAC5B,CAAC,CAAC,SAAS,CAAC;QACb,MAAM,gBAAgB,GAAG,cAAc,CAAC,UAAU,CAAC,gBAAgB,CAAC;YACnE,CAAC,CAAC,UAAU,CAAC,gBAAgB;YAC7B,CAAC,CAAC,SAAS,CAAC;QACb,MAAM,cAAc,GAAG,gBAAgB,CAAC,UAAU,CAAC,cAAc,CAAC;YACjE,CAAC,CAAC,UAAU,CAAC,cAAc;YAC3B,CAAC,CAAC,SAAS,CAAC;QAEb,MAAM,UAAU,GAA6B;YAC5C,YAAY;YACZ,OAAO,EACN,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACxE,QAAQ,EACP,OAAO,UAAU,CAAC,QAAQ,KAAK,QAAQ;gBACtC,CAAC,CAAC,UAAU,CAAC,QAAQ;gBACrB,CAAC,CAAC,SAAS;YACb,SAAS,EACR,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ;gBACvC,CAAC,CAAC,UAAU,CAAC,SAAS;gBACtB,CAAC,CAAC,SAAS;YACb,eAAe;YACf,YAAY,EACX,OAAO,UAAU,CAAC,YAAY,KAAK,QAAQ;gBAC1C,CAAC,CAAC,UAAU,CAAC,YAAY;gBACzB,CAAC,CAAC,SAAS;YACb,KAAK,EACJ,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;YACpE,OAAO,EACN,OAAO,UAAU,CAAC,OAAO,KAAK,SAAS;gBACtC,CAAC,CAAC,UAAU,CAAC,OAAO;gBACpB,CAAC,CAAC,SAAS;YACb,gBAAgB;YAChB,mBAAmB;YACnB,gBAAgB,EACf,OAAO,UAAU,CAAC,gBAAgB,KAAK,QAAQ;gBAC9C,CAAC,CAAC,UAAU,CAAC,gBAAgB;gBAC7B,CAAC,CAAC,SAAS;YACb,cAAc;YACd,SAAS;YACT,aAAa,EACZ,OAAO,UAAU,CAAC,aAAa,KAAK,QAAQ;gBAC3C,CAAC,CAAC,UAAU,CAAC,aAAa;gBAC1B,CAAC,CAAC,SAAS;YACb,SAAS,EACR,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ;gBACvC,CAAC,CAAC,UAAU,CAAC,SAAS;gBACtB,CAAC,CAAC,SAAS;SACb,CAAC;QACF,cAAc,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO;QACN,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;KAC7C,CAAC;AACH,CAAC"}

package/dist/lib/storage/gitignore.d.ts

@@ -0,0 +1,7 @@
+export declare function ensureCodexGitignoreEntry(params: {
+    storagePath: string;
+    currentProjectRoot: string | null;
+    logDebug: (message: string, details: Record<string, unknown>) => void;
+    logWarn: (message: string, details: Record<string, unknown>) => void;
+}): Promise<void>;
+//# sourceMappingURL=gitignore.d.ts.map

package/dist/lib/storage/gitignore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitignore.d.ts","sourceRoot":"","sources":["../../../lib/storage/gitignore.ts"],"names":[],"mappings":"AAGA,wBAAsB,yBAAyB,CAAC,MAAM,EAAE;IACvD,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACtE,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACrE,GAAG,OAAO,CAAC,IAAI,CAAC,CAqChB"}

package/dist/lib/storage/gitignore.js

@@ -0,0 +1,34 @@
+import { existsSync, promises as fs } from "node:fs";
+import { dirname, join } from "node:path";
+export async function ensureCodexGitignoreEntry(params) {
+    const configDir = dirname(params.storagePath);
+    const inferredProjectRoot = dirname(configDir);
+    const candidateRoots = [
+        params.currentProjectRoot,
+        inferredProjectRoot,
+    ].filter((root) => typeof root === "string" && root.length > 0);
+    const projectRoot = candidateRoots.find((root) => existsSync(join(root, ".git")));
+    if (!projectRoot)
+        return;
+    const gitignorePath = join(projectRoot, ".gitignore");
+    try {
+        let content = "";
+        if (existsSync(gitignorePath)) {
+            content = await fs.readFile(gitignorePath, "utf-8");
+            const lines = content.split("\n").map((line) => line.trim());
+            if (lines.includes(".codex") ||
+                lines.includes(".codex/") ||
+                lines.includes("/.codex") ||
+                lines.includes("/.codex/")) {
+                return;
+            }
+        }
+        const newContent = content.endsWith("\n") || content === "" ? content : `${content}\n`;
+        await fs.writeFile(gitignorePath, `${newContent}.codex/\n`, "utf-8");
+        params.logDebug("Added .codex to .gitignore", { path: gitignorePath });
+    }
+    catch (error) {
+        params.logWarn("Failed to update .gitignore", { error: String(error) });
+    }
+}
+//# sourceMappingURL=gitignore.js.map

package/dist/lib/storage/gitignore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitignore.js","sourceRoot":"","sources":["../../../lib/storage/gitignore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,MAK/C;IACA,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,mBAAmB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,cAAc,GAAG;QACtB,MAAM,CAAC,kBAAkB;QACzB,mBAAmB;KACnB,CAAC,MAAM,CACP,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CACrE,CAAC;IACF,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAChD,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAC9B,CAAC;IACF,IAAI,CAAC,WAAW;QAAE,OAAO;IAEzB,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACtD,IAAI,CAAC;QACJ,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAC/B,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YACpD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7D,IACC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACxB,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;gBACzB,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;gBACzB,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EACzB,CAAC;gBACF,OAAO;YACR,CAAC;QACF,CAAC;QAED,MAAM,UAAU,GACf,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,CAAC;QACrE,MAAM,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,GAAG,UAAU,WAAW,EAAE,OAAO,CAAC,CAAC;QACrE,MAAM,CAAC,QAAQ,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IACxE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,OAAO,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;AACF,CAAC"}

package/dist/lib/storage/hash.d.ts

@@ -0,0 +1,2 @@
+export declare function computeSha256(value: string): string;
+//# sourceMappingURL=hash.d.ts.map

package/dist/lib/storage/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../../../lib/storage/hash.ts"],"names":[],"mappings":"AAEA,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnD"}

package/dist/lib/storage/hash.js

@@ -0,0 +1,5 @@
+import { createHash } from "node:crypto";
+export function computeSha256(value) {
+    return createHash("sha256").update(value).digest("hex");
+}
+//# sourceMappingURL=hash.js.map

package/dist/lib/storage/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../../../lib/storage/hash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,UAAU,aAAa,CAAC,KAAa;IAC1C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC"}

package/dist/lib/storage/identity.d.ts

@@ -0,0 +1,15 @@
+type AccountLike = {
+    accountId?: string;
+    email?: string;
+    refreshToken?: string;
+};
+export type AccountIdentityRef = {
+    accountId?: string;
+    emailKey?: string;
+    refreshToken?: string;
+};
+export declare function normalizeEmailKey(email: string | undefined): string | undefined;
+export declare function toAccountIdentityRef(account: Pick<AccountLike, "accountId" | "email" | "refreshToken"> | null | undefined): AccountIdentityRef;
+export declare function getAccountIdentityKey(account: Pick<AccountLike, "accountId" | "email" | "refreshToken">): string | undefined;
+export {};
+//# sourceMappingURL=identity.d.ts.map

package/dist/lib/storage/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../../lib/storage/identity.ts"],"names":[],"mappings":"AAEA,KAAK,WAAW,GAAG;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAQF,wBAAgB,iBAAiB,CAChC,KAAK,EAAE,MAAM,GAAG,SAAS,GACvB,MAAM,GAAG,SAAS,CAKpB;AAcD,wBAAgB,oBAAoB,CACnC,OAAO,EACJ,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,GAAG,cAAc,CAAC,GACzD,IAAI,GACJ,SAAS,GACV,kBAAkB,CAMpB;AAED,wBAAgB,qBAAqB,CACpC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,GAAG,cAAc,CAAC,GAChE,MAAM,GAAG,SAAS,CAapB"}

package/dist/lib/storage/identity.js

@@ -0,0 +1,48 @@
+import { createHash } from "node:crypto";
+function normalizeAccountIdKey(accountId) {
+    if (!accountId)
+        return undefined;
+    const trimmed = accountId.trim();
+    return trimmed || undefined;
+}
+export function normalizeEmailKey(email) {
+    if (!email)
+        return undefined;
+    const trimmed = email.trim();
+    if (!trimmed)
+        return undefined;
+    return trimmed.toLowerCase();
+}
+function normalizeRefreshTokenKey(refreshToken) {
+    if (!refreshToken)
+        return undefined;
+    const trimmed = refreshToken.trim();
+    return trimmed || undefined;
+}
+function hashRefreshTokenKey(refreshToken) {
+    return createHash("sha256").update(refreshToken).digest("hex");
+}
+export function toAccountIdentityRef(account) {
+    return {
+        accountId: normalizeAccountIdKey(account?.accountId),
+        emailKey: normalizeEmailKey(account?.email),
+        refreshToken: normalizeRefreshTokenKey(account?.refreshToken),
+    };
+}
+export function getAccountIdentityKey(account) {
+    const ref = toAccountIdentityRef(account);
+    if (ref.accountId && ref.emailKey) {
+        return `account:${ref.accountId}::email:${ref.emailKey}`;
+    }
+    if (ref.accountId)
+        return `account:${ref.accountId}`;
+    if (ref.emailKey)
+        return `email:${ref.emailKey}`;
+    if (ref.refreshToken) {
+        // Legacy refresh-only identity keys embedded raw tokens. Hashing preserves
+        // deterministic fallback matching without exposing token material in logs.
+        return `refresh:${hashRefreshTokenKey(ref.refreshToken)}`;
+    }
+    return undefined;
+}
+//# sourceMappingURL=identity.js.map

package/dist/lib/storage/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../lib/storage/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAczC,SAAS,qBAAqB,CAAC,SAA6B;IAC3D,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IACjC,OAAO,OAAO,IAAI,SAAS,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAChC,KAAyB;IAEzB,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,wBAAwB,CAChC,YAAgC;IAEhC,IAAI,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;IACpC,OAAO,OAAO,IAAI,SAAS,CAAC;AAC7B,CAAC;AAED,SAAS,mBAAmB,CAAC,YAAoB;IAChD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,oBAAoB,CACnC,OAGY;IAEZ,OAAO;QACN,SAAS,EAAE,qBAAqB,CAAC,OAAO,EAAE,SAAS,CAAC;QACpD,QAAQ,EAAE,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC;QAC3C,YAAY,EAAE,wBAAwB,CAAC,OAAO,EAAE,YAAY,CAAC;KAC7D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACpC,OAAkE;IAElE,MAAM,GAAG,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACnC,OAAO,WAAW,GAAG,CAAC,SAAS,WAAW,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC1D,CAAC;IACD,IAAI,GAAG,CAAC,SAAS;QAAE,OAAO,WAAW,GAAG,CAAC,SAAS,EAAE,CAAC;IACrD,IAAI,GAAG,CAAC,QAAQ;QAAE,OAAO,SAAS,GAAG,CAAC,QAAQ,EAAE,CAAC;IACjD,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;QACtB,2EAA2E;QAC3E,2EAA2E;QAC3E,OAAO,WAAW,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;IAC3D,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC"}

package/dist/lib/storage/import-export.d.ts

@@ -0,0 +1,24 @@
+import type { AccountStorageV3 } from "../storage.js";
+export declare function exportAccountsToFile(params: {
+    resolvedPath: string;
+    force: boolean;
+    storage: AccountStorageV3 | null;
+    beforeCommit?: (resolvedPath: string) => Promise<void> | void;
+    logInfo: (message: string, details: Record<string, unknown>) => void;
+}): Promise<void>;
+export declare function readImportFile(params: {
+    resolvedPath: string;
+    normalizeAccountStorage: (value: unknown) => AccountStorageV3 | null;
+}): Promise<AccountStorageV3>;
+export declare function mergeImportedAccounts(params: {
+    existing: AccountStorageV3 | null;
+    imported: AccountStorageV3;
+    maxAccounts: number;
+    deduplicateAccounts: (accounts: AccountStorageV3["accounts"]) => AccountStorageV3["accounts"];
+}): {
+    newStorage: AccountStorageV3;
+    imported: number;
+    total: number;
+    skipped: number;
+};
+//# sourceMappingURL=import-export.d.ts.map

package/dist/lib/storage/import-export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-export.d.ts","sourceRoot":"","sources":["../../../lib/storage/import-export.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AA4BtD,wBAAsB,oBAAoB,CAAC,MAAM,EAAE;IAClD,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACjC,YAAY,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC9D,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACrE,GAAG,OAAO,CAAC,IAAI,CAAC,CA4ChB;AAED,wBAAsB,cAAc,CAAC,MAAM,EAAE;IAC5C,YAAY,EAAE,MAAM,CAAC;IACrB,uBAAuB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,gBAAgB,GAAG,IAAI,CAAC;CACrE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAkB5B;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC7C,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAClC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,CACpB,QAAQ,EAAE,gBAAgB,CAAC,UAAU,CAAC,KAClC,gBAAgB,CAAC,UAAU,CAAC,CAAC;CAClC,GAAG;IACH,UAAU,EAAE,gBAAgB,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CAChB,CAgCA"}