codex-multi-auth 1.2.0 → 1.2.1

package/dist/lib/runtime/account-health-check.d.ts

@@ -0,0 +1,8 @@
+import type { ModelFamily } from "../prompts/codex.js";
+import type { AccountStorageV3 } from "../storage.js";
+import type { TokenResult } from "../types.js";
+export declare function clampRuntimeActiveIndices(storage: AccountStorageV3, modelFamilies: readonly ModelFamily[]): void;
+export declare function isRuntimeFlaggableFailure(failure: Extract<TokenResult, {
+    type: "failed";
+}>): boolean;
+//# sourceMappingURL=account-health-check.d.ts.map

package/dist/lib/runtime/account-health-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-health-check.d.ts","sourceRoot":"","sources":["../../../lib/runtime/account-health-check.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,wBAAgB,yBAAyB,CACxC,OAAO,EAAE,gBAAgB,EACzB,aAAa,EAAE,SAAS,WAAW,EAAE,GACnC,IAAI,CAqBN;AAED,wBAAgB,yBAAyB,CACxC,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC,GAC/C,OAAO,CAUT"}

package/dist/lib/runtime/account-health-check.js

@@ -0,0 +1,30 @@
+export function clampRuntimeActiveIndices(storage, modelFamilies) {
+    const count = storage.accounts.length;
+    if (count === 0) {
+        storage.activeIndex = 0;
+        storage.activeIndexByFamily = {};
+        return;
+    }
+    storage.activeIndex = Math.max(0, Math.min(storage.activeIndex, count - 1));
+    storage.activeIndexByFamily = storage.activeIndexByFamily ?? {};
+    for (const family of modelFamilies) {
+        const raw = storage.activeIndexByFamily[family];
+        const candidate = typeof raw === "number" && Number.isFinite(raw)
+            ? raw
+            : storage.activeIndex;
+        storage.activeIndexByFamily[family] = Math.max(0, Math.min(candidate, count - 1));
+    }
+}
+export function isRuntimeFlaggableFailure(failure) {
+    if (failure.reason === "missing_refresh")
+        return true;
+    if (failure.statusCode === 401)
+        return true;
+    if (failure.statusCode !== 400)
+        return false;
+    const message = (failure.message ?? "").toLowerCase();
+    return (message.includes("invalid_grant") ||
+        message.includes("invalid refresh") ||
+        message.includes("token has been revoked"));
+}
+//# sourceMappingURL=account-health-check.js.map

package/dist/lib/runtime/account-health-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-health-check.js","sourceRoot":"","sources":["../../../lib/runtime/account-health-check.ts"],"names":[],"mappings":"AAIA,MAAM,UAAU,yBAAyB,CACxC,OAAyB,EACzB,aAAqC;IAErC,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IACtC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QACjB,OAAO,CAAC,WAAW,GAAG,CAAC,CAAC;QACxB,OAAO,CAAC,mBAAmB,GAAG,EAAE,CAAC;QACjC,OAAO;IACR,CAAC;IAED,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5E,OAAO,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,IAAI,EAAE,CAAC;IAChE,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,SAAS,GACd,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC9C,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QACxB,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAC7C,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAC9B,CAAC;IACH,CAAC;AACF,CAAC;AAED,MAAM,UAAU,yBAAyB,CACxC,OAAiD;IAEjD,IAAI,OAAO,CAAC,MAAM,KAAK,iBAAiB;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,OAAO,CAAC,UAAU,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,OAAO,CAAC,UAAU,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACtD,OAAO,CACN,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;QACjC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QACnC,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAC1C,CAAC;AACH,CAAC"}

package/dist/lib/runtime/account-manager-cache-entry.d.ts

@@ -0,0 +1,25 @@
+import type { OAuthAuthDetails } from "../types.js";
+export declare function invalidateAccountManagerCacheEntry<TManager>(params: {
+    invalidateAccountManagerCacheState: () => {
+        cachedAccountManager: null;
+        accountManagerPromise: null;
+    };
+    setCachedAccountManager: (manager: TManager | null) => void;
+    setAccountManagerPromise: (promise: Promise<TManager> | null) => void;
+}): void;
+export declare function reloadAccountManagerFromDiskEntry<TManager>(params: {
+    authFallback?: OAuthAuthDetails;
+    currentReloadInFlight: Promise<TManager> | null;
+    reloadAccountManagerFromDiskState: (args: {
+        currentReloadInFlight: Promise<TManager> | null;
+        loadFromDisk: (authFallback?: OAuthAuthDetails) => Promise<TManager>;
+        authFallback?: OAuthAuthDetails;
+        onLoaded: (manager: TManager) => void;
+        onSettled: () => void;
+    }) => Promise<TManager>;
+    loadFromDisk: (authFallback?: OAuthAuthDetails) => Promise<TManager>;
+    onLoaded: (manager: TManager) => void;
+    onSettled: () => void;
+    setReloadInFlight: (promise: Promise<TManager>) => void;
+}): Promise<TManager>;
+//# sourceMappingURL=account-manager-cache-entry.d.ts.map

package/dist/lib/runtime/account-manager-cache-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-manager-cache-entry.d.ts","sourceRoot":"","sources":["../../../lib/runtime/account-manager-cache-entry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,wBAAgB,kCAAkC,CAAC,QAAQ,EAAE,MAAM,EAAE;IACpE,kCAAkC,EAAE,MAAM;QACzC,oBAAoB,EAAE,IAAI,CAAC;QAC3B,qBAAqB,EAAE,IAAI,CAAC;KAC5B,CAAC;IACF,uBAAuB,EAAE,CAAC,OAAO,EAAE,QAAQ,GAAG,IAAI,KAAK,IAAI,CAAC;IAC5D,wBAAwB,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,KAAK,IAAI,CAAC;CACtE,GAAG,IAAI,CAIP;AAED,wBAAsB,iCAAiC,CAAC,QAAQ,EAAE,MAAM,EAAE;IACzE,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,qBAAqB,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;IAChD,iCAAiC,EAAE,CAAC,IAAI,EAAE;QACzC,qBAAqB,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;QAChD,YAAY,EAAE,CAAC,YAAY,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;QACrE,YAAY,CAAC,EAAE,gBAAgB,CAAC;QAChC,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,IAAI,CAAC;QACtC,SAAS,EAAE,MAAM,IAAI,CAAC;KACtB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxB,YAAY,EAAE,CAAC,YAAY,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrE,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,IAAI,CAAC;IACtC,SAAS,EAAE,MAAM,IAAI,CAAC;IACtB,iBAAiB,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC;CACxD,GAAG,OAAO,CAAC,QAAQ,CAAC,CAUpB"}

package/dist/lib/runtime/account-manager-cache-entry.js

@@ -0,0 +1,17 @@
+export function invalidateAccountManagerCacheEntry(params) {
+    const next = params.invalidateAccountManagerCacheState();
+    params.setCachedAccountManager(next.cachedAccountManager);
+    params.setAccountManagerPromise(next.accountManagerPromise);
+}
+export async function reloadAccountManagerFromDiskEntry(params) {
+    const inFlight = params.reloadAccountManagerFromDiskState({
+        currentReloadInFlight: params.currentReloadInFlight,
+        loadFromDisk: params.loadFromDisk,
+        authFallback: params.authFallback,
+        onLoaded: params.onLoaded,
+        onSettled: params.onSettled,
+    });
+    params.setReloadInFlight(inFlight);
+    return inFlight;
+}
+//# sourceMappingURL=account-manager-cache-entry.js.map

package/dist/lib/runtime/account-manager-cache-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-manager-cache-entry.js","sourceRoot":"","sources":["../../../lib/runtime/account-manager-cache-entry.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,kCAAkC,CAAW,MAO5D;IACA,MAAM,IAAI,GAAG,MAAM,CAAC,kCAAkC,EAAE,CAAC;IACzD,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC1D,MAAM,CAAC,wBAAwB,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAW,MAcjE;IACA,MAAM,QAAQ,GAAG,MAAM,CAAC,iCAAiC,CAAC;QACzD,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;QACnD,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;KAC3B,CAAC,CAAC;IACH,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACnC,OAAO,QAAQ,CAAC;AACjB,CAAC"}

package/dist/lib/runtime/account-manager-cache.d.ts

@@ -0,0 +1,25 @@
+import type { OAuthAuthDetails } from "../types.js";
+export declare function invalidateRuntimeAccountManagerCache(deps: {
+    setCachedAccountManager: (value: unknown) => void;
+    setAccountManagerPromise: (value: Promise<unknown> | null) => void;
+}): void;
+export declare function invalidateAccountManagerCacheState(): {
+    cachedAccountManager: null;
+    accountManagerPromise: null;
+};
+export declare function reloadRuntimeAccountManager<TAccountManager>(deps: {
+    currentReloadInFlight: Promise<TAccountManager> | null;
+    loadFromDisk: (authFallback?: OAuthAuthDetails) => Promise<TAccountManager>;
+    setCachedAccountManager: (value: TAccountManager) => void;
+    setAccountManagerPromise: (value: Promise<TAccountManager> | null) => void;
+    setReloadInFlight: (value: Promise<TAccountManager> | null) => void;
+    authFallback?: OAuthAuthDetails;
+}): Promise<TAccountManager>;
+export declare function reloadAccountManagerFromDiskState<TManager>(params: {
+    currentReloadInFlight: Promise<TManager> | null;
+    loadFromDisk: (authFallback?: OAuthAuthDetails) => Promise<TManager>;
+    authFallback?: OAuthAuthDetails;
+    onLoaded: (manager: TManager) => void;
+    onSettled: () => void;
+}): Promise<TManager>;
+//# sourceMappingURL=account-manager-cache.d.ts.map

package/dist/lib/runtime/account-manager-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-manager-cache.d.ts","sourceRoot":"","sources":["../../../lib/runtime/account-manager-cache.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,wBAAgB,oCAAoC,CAAC,IAAI,EAAE;IAC1D,uBAAuB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IAClD,wBAAwB,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,KAAK,IAAI,CAAC;CACnE,GAAG,IAAI,CAGP;AAED,wBAAgB,kCAAkC,IAAI;IACrD,oBAAoB,EAAE,IAAI,CAAC;IAC3B,qBAAqB,EAAE,IAAI,CAAC;CAC5B,CAKA;AAED,wBAAgB,2BAA2B,CAAC,eAAe,EAAE,IAAI,EAAE;IAClE,qBAAqB,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC;IACvD,YAAY,EAAE,CAAC,YAAY,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5E,uBAAuB,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;IAC1D,wBAAwB,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,KAAK,IAAI,CAAC;IAC3E,iBAAiB,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,KAAK,IAAI,CAAC;IACpE,YAAY,CAAC,EAAE,gBAAgB,CAAC;CAChC,GAAG,OAAO,CAAC,eAAe,CAAC,CAkB3B;AAED,wBAAsB,iCAAiC,CAAC,QAAQ,EAAE,MAAM,EAAE;IACzE,qBAAqB,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;IAChD,YAAY,EAAE,CAAC,YAAY,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrE,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,IAAI,CAAC;IACtC,SAAS,EAAE,MAAM,IAAI,CAAC;CACtB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAgBpB"}

package/dist/lib/runtime/account-manager-cache.js

@@ -0,0 +1,44 @@
+export function invalidateRuntimeAccountManagerCache(deps) {
+    deps.setCachedAccountManager(null);
+    deps.setAccountManagerPromise(null);
+}
+export function invalidateAccountManagerCacheState() {
+    return {
+        cachedAccountManager: null,
+        accountManagerPromise: null,
+    };
+}
+export function reloadRuntimeAccountManager(deps) {
+    // The caller must pass a fresh snapshot of the shared in-flight promise.
+    // Dedup only holds if setReloadInFlight runs before any awaited work below.
+    if (deps.currentReloadInFlight) {
+        return deps.currentReloadInFlight;
+    }
+    const reloadInFlight = (async () => {
+        const reloaded = await deps.loadFromDisk(deps.authFallback);
+        deps.setCachedAccountManager(reloaded);
+        deps.setAccountManagerPromise(Promise.resolve(reloaded));
+        return reloaded;
+    })().finally(() => {
+        deps.setReloadInFlight(null);
+    });
+    deps.setReloadInFlight(reloadInFlight);
+    return reloadInFlight;
+}
+export async function reloadAccountManagerFromDiskState(params) {
+    if (params.currentReloadInFlight) {
+        return params.currentReloadInFlight;
+    }
+    const inFlight = (async () => {
+        const reloaded = await params.loadFromDisk(params.authFallback);
+        params.onLoaded(reloaded);
+        return reloaded;
+    })();
+    try {
+        return await inFlight;
+    }
+    finally {
+        params.onSettled();
+    }
+}
+//# sourceMappingURL=account-manager-cache.js.map

package/dist/lib/runtime/account-manager-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-manager-cache.js","sourceRoot":"","sources":["../../../lib/runtime/account-manager-cache.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,oCAAoC,CAAC,IAGpD;IACA,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,kCAAkC;IAIjD,OAAO;QACN,oBAAoB,EAAE,IAAI;QAC1B,qBAAqB,EAAE,IAAI;KAC3B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAkB,IAO5D;IACA,yEAAyE;IACzE,4EAA4E;IAC5E,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC,qBAAqB,CAAC;IACnC,CAAC;IAED,MAAM,cAAc,GAAG,CAAC,KAAK,IAAI,EAAE;QAClC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5D,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzD,OAAO,QAAQ,CAAC;IACjB,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;QACjB,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;IACvC,OAAO,cAAc,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAW,MAMjE;IACA,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,qBAAqB,CAAC;IACrC,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;QAC5B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAChE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC1B,OAAO,QAAQ,CAAC;IACjB,CAAC,CAAC,EAAE,CAAC;IAEL,IAAI,CAAC;QACJ,OAAO,MAAM,QAAQ,CAAC;IACvB,CAAC;YAAS,CAAC;QACV,MAAM,CAAC,SAAS,EAAE,CAAC;IACpB,CAAC;AACF,CAAC"}

package/dist/lib/runtime/account-pool.d.ts

@@ -0,0 +1,23 @@
+import type { Workspace } from "../accounts.js";
+import type { ModelFamily } from "../prompts/codex.js";
+import type { AccountStorageV3 } from "../storage.js";
+import type { AccountIdSource, TokenResult } from "../types.js";
+export type TokenSuccessWithAccount = Extract<TokenResult, {
+    type: "success";
+}> & {
+    accountIdOverride?: string;
+    accountIdSource?: AccountIdSource;
+    accountLabel?: string;
+    workspaces?: Workspace[];
+};
+export declare function persistAccountPoolResults(params: {
+    results: TokenSuccessWithAccount[];
+    replaceAll?: boolean;
+    modelFamilies: readonly ModelFamily[];
+    withAccountStorageTransaction: <T>(handler: (loadedStorage: AccountStorageV3 | null, persist: (storage: AccountStorageV3) => Promise<void>) => Promise<T>) => Promise<T>;
+    findMatchingAccountIndex: typeof import("../storage.js").findMatchingAccountIndex;
+    extractAccountId: (accessToken: string) => string | undefined;
+    extractAccountEmail: (accessToken: string, idToken?: string) => string | undefined;
+    sanitizeEmail: (email: string | undefined) => string | undefined;
+}): Promise<void>;
+//# sourceMappingURL=account-pool.d.ts.map

package/dist/lib/runtime/account-pool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-pool.d.ts","sourceRoot":"","sources":["../../../lib/runtime/account-pool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAqB,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACzE,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEhE,MAAM,MAAM,uBAAuB,GAAG,OAAO,CAC5C,WAAW,EACX;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CACnB,GAAG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;CACzB,CAAC;AAEF,wBAAsB,yBAAyB,CAAC,MAAM,EAAE;IACvD,OAAO,EAAE,uBAAuB,EAAE,CAAC;IACnC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,SAAS,WAAW,EAAE,CAAC;IACtC,6BAA6B,EAAE,CAAC,CAAC,EAChC,OAAO,EAAE,CACR,aAAa,EAAE,gBAAgB,GAAG,IAAI,EACtC,OAAO,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,KACjD,OAAO,CAAC,CAAC,CAAC,KACX,OAAO,CAAC,CAAC,CAAC,CAAC;IAChB,wBAAwB,EAAE,cAAc,eAAe,EAAE,wBAAwB,CAAC;IAClF,gBAAgB,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IAC9D,mBAAmB,EAAE,CACpB,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,MAAM,KACZ,MAAM,GAAG,SAAS,CAAC;IACxB,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,KAAK,MAAM,GAAG,SAAS,CAAC;CACjE,GAAG,OAAO,CAAC,IAAI,CAAC,CA4KhB"}

package/dist/lib/runtime/account-pool.js

@@ -0,0 +1,138 @@
+export async function persistAccountPoolResults(params) {
+    const { results, replaceAll = false } = params;
+    if (results.length === 0)
+        return;
+    await params.withAccountStorageTransaction(async (loadedStorage, persist) => {
+        const now = Date.now();
+        const stored = replaceAll ? null : loadedStorage;
+        const accounts = stored?.accounts ? [...stored.accounts] : [];
+        for (const result of results) {
+            const accountId = result.accountIdOverride ?? params.extractAccountId(result.access);
+            const accountIdSource = accountId
+                ? (result.accountIdSource ??
+                    (result.accountIdOverride ? "manual" : "token"))
+                : undefined;
+            const accountLabel = result.accountLabel;
+            const accountEmail = params.sanitizeEmail(params.extractAccountEmail(result.access, result.idToken));
+            const existingIndex = params.findMatchingAccountIndex(accounts, {
+                accountId,
+                email: accountEmail,
+                refreshToken: result.refresh,
+            }, {
+                allowUniqueAccountIdFallbackWithoutEmail: true,
+            });
+            if (existingIndex === undefined) {
+                const initialWorkspaceIndex = result.workspaces && result.workspaces.length > 0
+                    ? (() => {
+                        if (accountId) {
+                            const matchingWorkspaceIndex = result.workspaces.findIndex((workspace) => workspace.id === accountId);
+                            if (matchingWorkspaceIndex >= 0) {
+                                return matchingWorkspaceIndex;
+                            }
+                        }
+                        const firstEnabledWorkspaceIndex = result.workspaces.findIndex((workspace) => workspace.enabled !== false);
+                        return firstEnabledWorkspaceIndex >= 0
+                            ? firstEnabledWorkspaceIndex
+                            : 0;
+                    })()
+                    : undefined;
+                accounts.push({
+                    accountId,
+                    accountIdSource,
+                    accountLabel,
+                    email: accountEmail,
+                    refreshToken: result.refresh,
+                    accessToken: result.access,
+                    expiresAt: result.expires,
+                    addedAt: now,
+                    lastUsed: now,
+                    workspaces: result.workspaces,
+                    currentWorkspaceIndex: initialWorkspaceIndex,
+                });
+                continue;
+            }
+            const existing = accounts[existingIndex];
+            if (!existing)
+                continue;
+            const nextEmail = accountEmail ?? params.sanitizeEmail(existing.email);
+            const nextAccountId = accountId ?? existing.accountId;
+            const nextAccountIdSource = accountId
+                ? (accountIdSource ?? existing.accountIdSource)
+                : existing.accountIdSource;
+            const nextAccountLabel = accountLabel ?? existing.accountLabel;
+            const mergedWorkspaces = result.workspaces
+                ? result.workspaces.map((newWs) => {
+                    const existingWs = existing.workspaces?.find((w) => w.id === newWs.id);
+                    return existingWs
+                        ? {
+                            ...newWs,
+                            enabled: existingWs.enabled,
+                            disabledAt: existingWs.disabledAt,
+                        }
+                        : newWs;
+                })
+                : existing.workspaces;
+            const currentWorkspaceId = existing.workspaces?.[typeof existing.currentWorkspaceIndex === "number"
+                ? existing.currentWorkspaceIndex
+                : 0]?.id;
+            const nextCurrentWorkspaceIndex = mergedWorkspaces && mergedWorkspaces.length > 0
+                ? (() => {
+                    if (currentWorkspaceId) {
+                        const matchingWorkspaceIndex = mergedWorkspaces.findIndex((workspace) => workspace.id === currentWorkspaceId);
+                        if (matchingWorkspaceIndex >= 0) {
+                            return matchingWorkspaceIndex;
+                        }
+                    }
+                    const defaultWorkspaceIndex = mergedWorkspaces.findIndex((workspace) => workspace.isDefault === true);
+                    if (defaultWorkspaceIndex >= 0) {
+                        return defaultWorkspaceIndex;
+                    }
+                    const firstEnabledWorkspaceIndex = mergedWorkspaces.findIndex((workspace) => workspace.enabled !== false);
+                    return firstEnabledWorkspaceIndex >= 0
+                        ? firstEnabledWorkspaceIndex
+                        : 0;
+                })()
+                : existing.currentWorkspaceIndex;
+            accounts[existingIndex] = {
+                ...existing,
+                accountId: nextAccountId,
+                accountIdSource: nextAccountIdSource,
+                accountLabel: nextAccountLabel,
+                email: nextEmail,
+                refreshToken: result.refresh,
+                accessToken: result.access,
+                expiresAt: result.expires,
+                lastUsed: now,
+                workspaces: mergedWorkspaces,
+                currentWorkspaceIndex: nextCurrentWorkspaceIndex,
+            };
+        }
+        if (accounts.length === 0)
+            return;
+        const activeIndex = replaceAll
+            ? 0
+            : typeof stored?.activeIndex === "number" &&
+                Number.isFinite(stored.activeIndex)
+                ? stored.activeIndex
+                : 0;
+        const clampedActiveIndex = Math.max(0, Math.min(activeIndex, accounts.length - 1));
+        const activeIndexByFamily = {};
+        for (const family of params.modelFamilies) {
+            const storedFamilyIndex = stored?.activeIndexByFamily?.[family];
+            const rawFamilyIndex = replaceAll
+                ? 0
+                : typeof storedFamilyIndex === "number" &&
+                    Number.isFinite(storedFamilyIndex)
+                    ? storedFamilyIndex
+                    : clampedActiveIndex;
+            activeIndexByFamily[family] = Math.max(0, Math.min(Math.floor(rawFamilyIndex), accounts.length - 1));
+        }
+        await persist({
+            version: 3,
+            accounts: accounts,
+            activeIndex: clampedActiveIndex,
+            activeIndexByFamily,
+        });
+    });
+}
+//# sourceMappingURL=account-pool.js.map

package/dist/lib/runtime/account-pool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-pool.js","sourceRoot":"","sources":["../../../lib/runtime/account-pool.ts"],"names":[],"mappings":"AAeA,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,MAiB/C;IACA,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,KAAK,EAAE,GAAG,MAAM,CAAC;IAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEjC,MAAM,MAAM,CAAC,6BAA6B,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE;QAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC;QACjD,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAE9D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC9B,MAAM,SAAS,GACd,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACpE,MAAM,eAAe,GAAG,SAAS;gBAChC,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe;oBACxB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBACjD,CAAC,CAAC,SAAS,CAAC;YACb,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;YACzC,MAAM,YAAY,GAAG,MAAM,CAAC,aAAa,CACxC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CACzD,CAAC;YACF,MAAM,aAAa,GAAG,MAAM,CAAC,wBAAwB,CACpD,QAAQ,EACR;gBACC,SAAS;gBACT,KAAK,EAAE,YAAY;gBACnB,YAAY,EAAE,MAAM,CAAC,OAAO;aAC5B,EACD;gBACC,wCAAwC,EAAE,IAAI;aAC9C,CACD,CAAC;YAEF,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,qBAAqB,GAC1B,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;oBAChD,CAAC,CAAC,CAAC,GAAG,EAAE;wBACN,IAAI,SAAS,EAAE,CAAC;4BACf,MAAM,sBAAsB,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CACzD,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,SAAS,CACzC,CAAC;4BACF,IAAI,sBAAsB,IAAI,CAAC,EAAE,CAAC;gCACjC,OAAO,sBAAsB,CAAC;4BAC/B,CAAC;wBACF,CAAC;wBACD,MAAM,0BAA0B,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAC7D,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,KAAK,CAC1C,CAAC;wBACF,OAAO,0BAA0B,IAAI,CAAC;4BACrC,CAAC,CAAC,0BAA0B;4BAC5B,CAAC,CAAC,CAAC,CAAC;oBACN,CAAC,CAAC,EAAE;oBACL,CAAC,CAAC,SAAS,CAAC;gBACd,QAAQ,CAAC,IAAI,CAAC;oBACb,SAAS;oBACT,eAAe;oBACf,YAAY;oBACZ,KAAK,EAAE,YAAY;oBACnB,YAAY,EAAE,MAAM,CAAC,OAAO;oBAC5B,WAAW,EAAE,MAAM,CAAC,MAAM;oBAC1B,SAAS,EAAE,MAAM,CAAC,OAAO;oBACzB,OAAO,EAAE,GAAG;oBACZ,QAAQ,EAAE,GAAG;oBACb,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,qBAAqB,EAAE,qBAAqB;iBAC5C,CAAC,CAAC;gBACH,SAAS;YACV,CAAC;YAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;YACzC,IAAI,CAAC,QAAQ;gBAAE,SAAS;YAExB,MAAM,SAAS,GAAG,YAAY,IAAI,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,aAAa,GAAG,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC;YACtD,MAAM,mBAAmB,GAAG,SAAS;gBACpC,CAAC,CAAC,CAAC,eAAe,IAAI,QAAQ,CAAC,eAAe,CAAC;gBAC/C,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC;YAC5B,MAAM,gBAAgB,GAAG,YAAY,IAAI,QAAQ,CAAC,YAAY,CAAC;YAC/D,MAAM,gBAAgB,GAAG,MAAM,CAAC,UAAU;gBACzC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;oBAChC,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,EAAE,IAAI,CAC3C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CACxB,CAAC;oBACF,OAAO,UAAU;wBAChB,CAAC,CAAC;4BACA,GAAG,KAAK;4BACR,OAAO,EAAE,UAAU,CAAC,OAAO;4BAC3B,UAAU,EAAE,UAAU,CAAC,UAAU;yBACjC;wBACF,CAAC,CAAC,KAAK,CAAC;gBACV,CAAC,CAAC;gBACH,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;YACvB,MAAM,kBAAkB,GACvB,QAAQ,CAAC,UAAU,EAAE,CACpB,OAAO,QAAQ,CAAC,qBAAqB,KAAK,QAAQ;gBACjD,CAAC,CAAC,QAAQ,CAAC,qBAAqB;gBAChC,CAAC,CAAC,CAAC,CACJ,EAAE,EAAE,CAAC;YACP,MAAM,yBAAyB,GAC9B,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC;gBAC9C,CAAC,CAAC,CAAC,GAAG,EAAE;oBACN,IAAI,kBAAkB,EAAE,CAAC;wBACxB,MAAM,sBAAsB,GAAG,gBAAgB,CAAC,SAAS,CACxD,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,kBAAkB,CAClD,CAAC;wBACF,IAAI,sBAAsB,IAAI,CAAC,EAAE,CAAC;4BACjC,OAAO,sBAAsB,CAAC;wBAC/B,CAAC;oBACF,CAAC;oBACD,MAAM,qBAAqB,GAAG,gBAAgB,CAAC,SAAS,CACvD,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,KAAK,IAAI,CAC3C,CAAC;oBACF,IAAI,qBAAqB,IAAI,CAAC,EAAE,CAAC;wBAChC,OAAO,qBAAqB,CAAC;oBAC9B,CAAC;oBACD,MAAM,0BAA0B,GAAG,gBAAgB,CAAC,SAAS,CAC5D,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,KAAK,CAC1C,CAAC;oBACF,OAAO,0BAA0B,IAAI,CAAC;wBACrC,CAAC,CAAC,0BAA0B;wBAC5B,CAAC,CAAC,CAAC,CAAC;gBACN,CAAC,CAAC,EAAE;gBACL,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;YACnC,QAAQ,CAAC,aAAa,CAAC,GAAG;gBACzB,GAAG,QAAQ;gBACX,SAAS,EAAE,aAAa;gBACxB,eAAe,EAAE,mBAAmB;gBACpC,YAAY,EAAE,gBAAgB;gBAC9B,KAAK,EAAE,SAAS;gBAChB,YAAY,EAAE,MAAM,CAAC,OAAO;gBAC5B,WAAW,EAAE,MAAM,CAAC,MAAM;gBAC1B,SAAS,EAAE,MAAM,CAAC,OAAO;gBACzB,QAAQ,EAAE,GAAG;gBACb,UAAU,EAAE,gBAAgB;gBAC5B,qBAAqB,EAAE,yBAAyB;aAChD,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAElC,MAAM,WAAW,GAAG,UAAU;YAC7B,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,OAAO,MAAM,EAAE,WAAW,KAAK,QAAQ;gBACvC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC;gBACpC,CAAC,CAAC,MAAM,CAAC,WAAW;gBACpB,CAAC,CAAC,CAAC,CAAC;QAEN,MAAM,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAClC,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAC1C,CAAC;QACF,MAAM,mBAAmB,GAAyC,EAAE,CAAC;QACrE,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YAC3C,MAAM,iBAAiB,GAAG,MAAM,EAAE,mBAAmB,EAAE,CAAC,MAAM,CAAC,CAAC;YAChE,MAAM,cAAc,GAAG,UAAU;gBAChC,CAAC,CAAC,CAAC;gBACH,CAAC,CAAC,OAAO,iBAAiB,KAAK,QAAQ;oBACrC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC;oBACnC,CAAC,CAAC,iBAAiB;oBACnB,CAAC,CAAC,kBAAkB,CAAC;YACvB,mBAAmB,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CACrC,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CACzD,CAAC;QACH,CAAC;QAED,MAAM,OAAO,CAAC;YACb,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE,QAA+B;YACzC,WAAW,EAAE,kBAAkB;YAC/B,mBAAmB;SACnB,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/runtime/account-scope.d.ts

@@ -0,0 +1,10 @@
+export declare function applyAccountStorageScope<TConfig>(pluginConfig: TConfig, deps: {
+    getPerProjectAccounts: (config: TConfig) => boolean;
+    getStorageBackupEnabled: (config: TConfig) => boolean;
+    isCodexCliSyncEnabled: () => boolean;
+    setStorageBackupEnabled: (enabled: boolean) => void;
+    setStoragePath: (path: string | null) => void;
+    getCwd: () => string;
+    warnPerProjectSyncConflict: () => void;
+}): void;
+//# sourceMappingURL=account-scope.d.ts.map

package/dist/lib/runtime/account-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-scope.d.ts","sourceRoot":"","sources":["../../../lib/runtime/account-scope.ts"],"names":[],"mappings":"AAAA,wBAAgB,wBAAwB,CAAC,OAAO,EAC/C,YAAY,EAAE,OAAO,EACrB,IAAI,EAAE;IACL,qBAAqB,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC;IACpD,uBAAuB,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC;IACtD,qBAAqB,EAAE,MAAM,OAAO,CAAC;IACrC,uBAAuB,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IACpD,cAAc,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAC9C,MAAM,EAAE,MAAM,MAAM,CAAC;IACrB,0BAA0B,EAAE,MAAM,IAAI,CAAC;CACvC,GACC,IAAI,CAYN"}

package/dist/lib/runtime/account-scope.js

@@ -0,0 +1,13 @@
+export function applyAccountStorageScope(pluginConfig, deps) {
+    const perProjectAccounts = deps.getPerProjectAccounts(pluginConfig);
+    deps.setStorageBackupEnabled(deps.getStorageBackupEnabled(pluginConfig));
+    if (deps.isCodexCliSyncEnabled()) {
+        if (perProjectAccounts) {
+            deps.warnPerProjectSyncConflict();
+        }
+        deps.setStoragePath(null);
+        return;
+    }
+    deps.setStoragePath(perProjectAccounts ? deps.getCwd() : null);
+}
+//# sourceMappingURL=account-scope.js.map

package/dist/lib/runtime/account-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-scope.js","sourceRoot":"","sources":["../../../lib/runtime/account-scope.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,wBAAwB,CACvC,YAAqB,EACrB,IAQC;IAED,MAAM,kBAAkB,GAAG,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;IACpE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC,CAAC;IACzE,IAAI,IAAI,CAAC,qBAAqB,EAAE,EAAE,CAAC;QAClC,IAAI,kBAAkB,EAAE,CAAC;YACxB,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACnC,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC1B,OAAO;IACR,CAAC;IAED,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAChE,CAAC"}

package/dist/lib/runtime/account-select-event.d.ts

@@ -0,0 +1,19 @@
+import type { ModelFamily } from "../prompts/codex.js";
+import type { AccountStorageV3 } from "../storage.js";
+export declare function handleAccountSelectEvent(input: {
+    event: {
+        type: string;
+        properties?: unknown;
+    };
+    providerId: string;
+    loadAccounts: () => Promise<AccountStorageV3 | null>;
+    saveAccounts: (storage: AccountStorageV3) => Promise<void>;
+    modelFamilies: readonly ModelFamily[];
+    getCachedAccountManager: () => {
+        syncCodexCliActiveSelectionForIndex(index: number): Promise<void>;
+    } | null;
+    reloadAccountManagerFromDisk: () => Promise<unknown>;
+    setLastCodexCliActiveSyncIndex: (index: number) => void;
+    showToast: (message: string, variant?: "info" | "success" | "warning" | "error") => Promise<void>;
+}): Promise<boolean>;
+//# sourceMappingURL=account-select-event.d.ts.map

package/dist/lib/runtime/account-select-event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-select-event.d.ts","sourceRoot":"","sources":["../../../lib/runtime/account-select-event.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAetD,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IACrD,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IACrD,YAAY,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,aAAa,EAAE,SAAS,WAAW,EAAE,CAAC;IACtC,uBAAuB,EAAE,MAAM;QAC9B,mCAAmC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAClE,GAAG,IAAI,CAAC;IACT,4BAA4B,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACrD,8BAA8B,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACxD,SAAS,EAAE,CACV,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,KAC9C,OAAO,CAAC,IAAI,CAAC,CAAC;CACnB,GAAG,OAAO,CAAC,OAAO,CAAC,CA2DnB"}

package/dist/lib/runtime/account-select-event.js

@@ -0,0 +1,53 @@
+let accountSelectWriteQueue = Promise.resolve();
+function serializeAccountSelectMutation(task) {
+    const run = accountSelectWriteQueue.then(task, task);
+    accountSelectWriteQueue = run.then(() => undefined, () => undefined);
+    return run;
+}
+export async function handleAccountSelectEvent(input) {
+    const { event } = input;
+    if (event.type !== "account.select" &&
+        event.type !== "openai.account.select") {
+        return false;
+    }
+    const props = typeof event.properties === "object" && event.properties !== null
+        ? event.properties
+        : {};
+    const provider = typeof props.provider === "string" ? props.provider : undefined;
+    if (provider && provider !== "openai" && provider !== input.providerId) {
+        return false;
+    }
+    const rawIndex = props.index ?? props.accountIndex;
+    if (!Number.isInteger(rawIndex))
+        return true;
+    const index = rawIndex;
+    return serializeAccountSelectMutation(async () => {
+        const storage = await input.loadAccounts();
+        if (!storage || index < 0 || index >= storage.accounts.length) {
+            return true;
+        }
+        const now = Date.now();
+        const account = storage.accounts[index];
+        if (account) {
+            account.lastUsed = now;
+            account.lastSwitchReason = "rotation";
+        }
+        storage.activeIndex = index;
+        storage.activeIndexByFamily = storage.activeIndexByFamily ?? {};
+        for (const family of input.modelFamilies) {
+            storage.activeIndexByFamily[family] = index;
+        }
+        await input.saveAccounts(storage);
+        const manager = input.getCachedAccountManager();
+        if (manager) {
+            await manager.syncCodexCliActiveSelectionForIndex(index);
+        }
+        input.setLastCodexCliActiveSyncIndex(index);
+        if (input.getCachedAccountManager()) {
+            await input.reloadAccountManagerFromDisk();
+        }
+        await input.showToast(`Switched to account ${index + 1}`, "info");
+        return true;
+    });
+}
+//# sourceMappingURL=account-select-event.js.map

package/dist/lib/runtime/account-select-event.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-select-event.js","sourceRoot":"","sources":["../../../lib/runtime/account-select-event.ts"],"names":[],"mappings":"AAGA,IAAI,uBAAuB,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;AAE/D,SAAS,8BAA8B,CACtC,IAAsB;IAEtB,MAAM,GAAG,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrD,uBAAuB,GAAG,GAAG,CAAC,IAAI,CACjC,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CACf,CAAC;IACF,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAe9C;IACA,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxB,IACC,KAAK,CAAC,IAAI,KAAK,gBAAgB;QAC/B,KAAK,CAAC,IAAI,KAAK,uBAAuB,EACrC,CAAC;QACF,OAAO,KAAK,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GACV,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;QAChE,CAAC,CAAE,KAAK,CAAC,UAIN;QACH,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,QAAQ,GACb,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,IAAI,QAAQ,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;QACxE,OAAO,KAAK,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,YAAY,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,KAAK,GAAG,QAAkB,CAAC;IAEjC,OAAO,8BAA8B,CAAC,KAAK,IAAI,EAAE;QAChD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE,CAAC;QAC3C,IAAI,CAAC,OAAO,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC;YACvB,OAAO,CAAC,gBAAgB,GAAG,UAAU,CAAC;QACvC,CAAC;QACD,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC;QAC5B,OAAO,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,IAAI,EAAE,CAAC;QAChE,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YAC1C,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QAC7C,CAAC;QAED,MAAM,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,KAAK,CAAC,uBAAuB,EAAE,CAAC;QAChD,IAAI,OAAO,EAAE,CAAC;YACb,MAAM,OAAO,CAAC,mCAAmC,CAAC,KAAK,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC;QAE5C,IAAI,KAAK,CAAC,uBAAuB,EAAE,EAAE,CAAC;YACrC,MAAM,KAAK,CAAC,4BAA4B,EAAE,CAAC;QAC5C,CAAC;QAED,MAAM,KAAK,CAAC,SAAS,CAAC,uBAAuB,KAAK,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/runtime/account-selection.d.ts

@@ -0,0 +1,28 @@
+import type { Workspace } from "../accounts.js";
+import type { AccountIdSource } from "../types.js";
+export type TokenSuccessWithAccount<T extends {
+    access: string;
+    idToken?: string;
+}> = T & {
+    accountIdOverride?: string;
+    accountIdSource?: AccountIdSource;
+    accountLabel?: string;
+    workspaces?: Workspace[];
+};
+type AccountCandidate = {
+    accountId: string;
+    label: string;
+    isDefault?: boolean;
+    source: AccountIdSource;
+};
+export declare function resolveAccountSelection<T extends {
+    access: string;
+    idToken?: string;
+}>(tokens: T, deps: {
+    envAccountId?: string;
+    logInfo: (message: string) => void;
+    getAccountIdCandidates: (accessToken: string, idToken?: string) => AccountCandidate[];
+    selectBestAccountCandidate: (candidates: AccountCandidate[]) => AccountCandidate | null | undefined;
+}): TokenSuccessWithAccount<T>;
+export {};
+//# sourceMappingURL=account-selection.d.ts.map

package/dist/lib/runtime/account-selection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-selection.d.ts","sourceRoot":"","sources":["../../../lib/runtime/account-selection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,MAAM,MAAM,uBAAuB,CAClC,CAAC,SAAS;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,IAC3C,CAAC,GAAG;IACP,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;CACzB,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,EAAE,eAAe,CAAC;CACxB,CAAC;AAEF,wBAAgB,uBAAuB,CACtC,CAAC,SAAS;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,EAE9C,MAAM,EAAE,CAAC,EACT,IAAI,EAAE;IACL,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,sBAAsB,EAAE,CACvB,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,MAAM,KACZ,gBAAgB,EAAE,CAAC;IACxB,0BAA0B,EAAE,CAC3B,UAAU,EAAE,gBAAgB,EAAE,KAC1B,gBAAgB,GAAG,IAAI,GAAG,SAAS,CAAC;CACzC,GACC,uBAAuB,CAAC,CAAC,CAAC,CAkD5B"}

package/dist/lib/runtime/account-selection.js

@@ -0,0 +1,46 @@
+export function resolveAccountSelection(tokens, deps) {
+    const override = (deps.envAccountId ?? "").trim();
+    if (override) {
+        const suffix = override.length > 6 ? override.slice(-6) : override;
+        deps.logInfo(`Using account override from CODEX_AUTH_ACCOUNT_ID (id:${suffix}).`);
+        return {
+            ...tokens,
+            accountIdOverride: override,
+            accountIdSource: "manual",
+            accountLabel: `Override [id:${suffix}]`,
+        };
+    }
+    const candidates = deps.getAccountIdCandidates(tokens.access, tokens.idToken);
+    if (candidates.length === 0) {
+        return tokens;
+    }
+    const workspaces = candidates.map((candidate) => ({
+        id: candidate.accountId,
+        name: candidate.label,
+        enabled: true,
+        isDefault: candidate.isDefault,
+    }));
+    if (candidates.length === 1) {
+        const [candidate] = candidates;
+        if (candidate) {
+            return {
+                ...tokens,
+                accountIdOverride: candidate.accountId,
+                accountIdSource: candidate.source,
+                accountLabel: candidate.label,
+                workspaces,
+            };
+        }
+    }
+    const choice = deps.selectBestAccountCandidate(candidates);
+    if (!choice)
+        return tokens;
+    return {
+        ...tokens,
+        accountIdOverride: choice.accountId,
+        accountIdSource: choice.source ?? "token",
+        accountLabel: choice.label,
+        workspaces,
+    };
+}
+//# sourceMappingURL=account-selection.js.map

package/dist/lib/runtime/account-selection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-selection.js","sourceRoot":"","sources":["../../../lib/runtime/account-selection.ts"],"names":[],"mappings":"AAmBA,MAAM,UAAU,uBAAuB,CAGtC,MAAS,EACT,IAUC;IAED,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClD,IAAI,QAAQ,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACnE,IAAI,CAAC,OAAO,CACX,yDAAyD,MAAM,IAAI,CACnE,CAAC;QACF,OAAO;YACN,GAAG,MAAM;YACT,iBAAiB,EAAE,QAAQ;YAC3B,eAAe,EAAE,QAAQ;YACzB,YAAY,EAAE,gBAAgB,MAAM,GAAG;SACvC,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9E,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,MAAM,CAAC;IACf,CAAC;IAED,MAAM,UAAU,GAAgB,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC9D,EAAE,EAAE,SAAS,CAAC,SAAS;QACvB,IAAI,EAAE,SAAS,CAAC,KAAK;QACrB,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,SAAS,CAAC,SAAS;KAC9B,CAAC,CAAC,CAAC;IAEJ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,CAAC,SAAS,CAAC,GAAG,UAAU,CAAC;QAC/B,IAAI,SAAS,EAAE,CAAC;YACf,OAAO;gBACN,GAAG,MAAM;gBACT,iBAAiB,EAAE,SAAS,CAAC,SAAS;gBACtC,eAAe,EAAE,SAAS,CAAC,MAAM;gBACjC,YAAY,EAAE,SAAS,CAAC,KAAK;gBAC7B,UAAU;aACV,CAAC;QACH,CAAC;IACF,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC;IAE3B,OAAO;QACN,GAAG,MAAM;QACT,iBAAiB,EAAE,MAAM,CAAC,SAAS;QACnC,eAAe,EAAE,MAAM,CAAC,MAAM,IAAI,OAAO;QACzC,YAAY,EAAE,MAAM,CAAC,KAAK;QAC1B,UAAU;KACV,CAAC;AACH,CAAC"}

package/dist/lib/runtime/account-state.d.ts

@@ -0,0 +1,13 @@
+import type { ModelFamily } from "../prompts/codex.js";
+export declare function resolveActiveIndex(storage: {
+    activeIndex: number;
+    activeIndexByFamily?: Partial<Record<ModelFamily, number>>;
+    accounts: unknown[];
+}, family?: ModelFamily): number;
+export declare function getRateLimitResetTimeForFamily(account: {
+    rateLimitResetTimes?: Record<string, number | undefined>;
+}, now: number, family: ModelFamily): number | null;
+export declare function formatRateLimitEntry(account: {
+    rateLimitResetTimes?: Record<string, number | undefined>;
+}, now: number, family?: ModelFamily): string | null;
+//# sourceMappingURL=account-state.d.ts.map

package/dist/lib/runtime/account-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-state.d.ts","sourceRoot":"","sources":["../../../lib/runtime/account-state.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,wBAAgB,kBAAkB,CACjC,OAAO,EAAE;IACR,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3D,QAAQ,EAAE,OAAO,EAAE,CAAC;CACpB,EACD,MAAM,GAAE,WAAqB,GAC3B,MAAM,CAOR;AAED,wBAAgB,8BAA8B,CAC7C,OAAO,EAAE;IAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;CAAE,EACrE,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,WAAW,GACjB,MAAM,GAAG,IAAI,CAgBf;AAED,wBAAgB,oBAAoB,CACnC,OAAO,EAAE;IAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;CAAE,EACrE,GAAG,EAAE,MAAM,EACX,MAAM,GAAE,WAAqB,GAC3B,MAAM,GAAG,IAAI,CAMf"}

package/dist/lib/runtime/account-state.js

@@ -0,0 +1,38 @@
+import { formatWaitTime } from "../accounts.js";
+export function resolveActiveIndex(storage, family = "codex") {
+    const total = storage.accounts.length;
+    if (total === 0)
+        return 0;
+    const rawCandidate = storage.activeIndexByFamily?.[family] ?? storage.activeIndex;
+    const raw = Number.isFinite(rawCandidate) ? rawCandidate : 0;
+    return Math.max(0, Math.min(raw, total - 1));
+}
+export function getRateLimitResetTimeForFamily(account, now, family) {
+    const times = account.rateLimitResetTimes;
+    if (!times)
+        return null;
+    let minReset = null;
+    const prefix = `${family}:`;
+    for (const [key, value] of Object.entries(times)) {
+        if (typeof value !== "number")
+            continue;
+        if (value <= now)
+            continue;
+        if (key !== family && !key.startsWith(prefix))
+            continue;
+        if (minReset === null || value < minReset) {
+            minReset = value;
+        }
+    }
+    return minReset;
+}
+export function formatRateLimitEntry(account, now, family = "codex") {
+    const resetAt = getRateLimitResetTimeForFamily(account, now, family);
+    if (typeof resetAt !== "number")
+        return null;
+    const remaining = resetAt - now;
+    if (remaining <= 0)
+        return null;
+    return `resets in ${formatWaitTime(remaining)}`;
+}
+//# sourceMappingURL=account-state.js.map