codex-multi-auth 1.2.0 → 1.2.1

package/dist/lib/runtime/live-sync-entry.d.ts

@@ -0,0 +1,36 @@
+import type { OAuthAuthDetails } from "../types.js";
+type LiveAccountSyncLike = {
+    stop: () => void;
+    syncToPath: (path: string) => Promise<void>;
+};
+export declare function ensureLiveAccountSyncEntry<TSync extends LiveAccountSyncLike>(params: {
+    pluginConfig: ReturnType<typeof import("../config.js").loadPluginConfig>;
+    authFallback?: OAuthAuthDetails;
+    currentSync: TSync | null;
+    currentPath: string | null;
+    getLiveAccountSync: (config: ReturnType<typeof import("../config.js").loadPluginConfig>) => boolean;
+    getStoragePath: () => string;
+    createSync: (authFallback?: OAuthAuthDetails) => TSync;
+    registerCleanup: (cleanup: () => void) => void;
+    logWarn: (message: string) => void;
+    pluginName: string;
+    ensureLiveAccountSyncState: (args: {
+        enabled: boolean;
+        targetPath: string;
+        currentSync: TSync | null;
+        currentPath: string | null;
+        authFallback?: OAuthAuthDetails;
+        createSync: (authFallback?: OAuthAuthDetails) => TSync;
+        registerCleanup: (cleanup: () => void) => void;
+        logWarn: (message: string) => void;
+        pluginName: string;
+    }) => Promise<{
+        liveAccountSync: TSync | null;
+        liveAccountSyncPath: string | null;
+    }>;
+}): Promise<{
+    liveAccountSync: TSync | null;
+    liveAccountSyncPath: string | null;
+}>;
+export {};
+//# sourceMappingURL=live-sync-entry.d.ts.map

package/dist/lib/runtime/live-sync-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-sync-entry.d.ts","sourceRoot":"","sources":["../../../lib/runtime/live-sync-entry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,KAAK,mBAAmB,GAAG;IAC1B,IAAI,EAAE,MAAM,IAAI,CAAC;IACjB,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5C,CAAC;AAEF,wBAAsB,0BAA0B,CAC/C,KAAK,SAAS,mBAAmB,EAChC,MAAM,EAAE;IACT,YAAY,EAAE,UAAU,CAAC,cAAc,cAAc,EAAE,gBAAgB,CAAC,CAAC;IACzE,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,WAAW,EAAE,KAAK,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,kBAAkB,EAAE,CACnB,MAAM,EAAE,UAAU,CAAC,cAAc,cAAc,EAAE,gBAAgB,CAAC,KAC9D,OAAO,CAAC;IACb,cAAc,EAAE,MAAM,MAAM,CAAC;IAC7B,UAAU,EAAE,CAAC,YAAY,CAAC,EAAE,gBAAgB,KAAK,KAAK,CAAC;IACvD,eAAe,EAAE,CAAC,OAAO,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;IAC/C,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,0BAA0B,EAAE,CAAC,IAAI,EAAE;QAClC,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,KAAK,GAAG,IAAI,CAAC;QAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,YAAY,CAAC,EAAE,gBAAgB,CAAC;QAChC,UAAU,EAAE,CAAC,YAAY,CAAC,EAAE,gBAAgB,KAAK,KAAK,CAAC;QACvD,eAAe,EAAE,CAAC,OAAO,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;QAC/C,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;QACnC,UAAU,EAAE,MAAM,CAAC;KACnB,KAAK,OAAO,CAAC;QACb,eAAe,EAAE,KAAK,GAAG,IAAI,CAAC;QAC9B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;KACnC,CAAC,CAAC;CACH,GAAG,OAAO,CAAC;IACX,eAAe,EAAE,KAAK,GAAG,IAAI,CAAC;IAC9B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC,CAAC,CAYD"}

package/dist/lib/runtime/live-sync-entry.js

@@ -0,0 +1,14 @@
+export async function ensureLiveAccountSyncEntry(params) {
+    return params.ensureLiveAccountSyncState({
+        enabled: params.getLiveAccountSync(params.pluginConfig),
+        targetPath: params.getStoragePath(),
+        currentSync: params.currentSync,
+        currentPath: params.currentPath,
+        authFallback: params.authFallback,
+        createSync: params.createSync,
+        registerCleanup: params.registerCleanup,
+        logWarn: params.logWarn,
+        pluginName: params.pluginName,
+    });
+}
+//# sourceMappingURL=live-sync-entry.js.map

package/dist/lib/runtime/live-sync-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-sync-entry.js","sourceRoot":"","sources":["../../../lib/runtime/live-sync-entry.ts"],"names":[],"mappings":"AAOA,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAE9C,MA2BD;IAIA,OAAO,MAAM,CAAC,0BAA0B,CAAC;QACxC,OAAO,EAAE,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC;QACvD,UAAU,EAAE,MAAM,CAAC,cAAc,EAAE;QACnC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,UAAU,EAAE,MAAM,CAAC,UAAU;KAC7B,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/runtime/live-sync.d.ts

@@ -0,0 +1,35 @@
+import type { OAuthAuthDetails } from "../types.js";
+export interface LiveSyncController {
+    stop(): void;
+    syncToPath(path: string): Promise<void>;
+}
+export declare function ensureRuntimeLiveAccountSync<TConfig, TSync extends LiveSyncController>(deps: {
+    pluginConfig: TConfig;
+    authFallback?: OAuthAuthDetails;
+    getLiveAccountSync: (config: TConfig) => boolean;
+    getStoragePath: () => string;
+    currentSync: TSync | null;
+    currentPath: string | null;
+    currentCleanupRegistered: boolean;
+    getCurrentSync: () => TSync | null;
+    createSync: (onChange: () => Promise<void>, options: {
+        debounceMs: number;
+        pollIntervalMs: number;
+    }) => TSync;
+    reloadAccountManagerFromDisk: (authFallback?: OAuthAuthDetails) => Promise<unknown>;
+    getLiveAccountSyncDebounceMs: (config: TConfig) => number;
+    getLiveAccountSyncPollMs: (config: TConfig) => number;
+    commitState: (state: {
+        sync: TSync | null;
+        path: string | null;
+        cleanupRegistered: boolean;
+    }) => void;
+    registerCleanup: (cleanup: () => void) => void;
+    logWarn: (message: string) => void;
+    pluginName: string;
+}): Promise<{
+    sync: TSync | null;
+    path: string | null;
+    cleanupRegistered: boolean;
+}>;
+//# sourceMappingURL=live-sync.d.ts.map

package/dist/lib/runtime/live-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-sync.d.ts","sourceRoot":"","sources":["../../../lib/runtime/live-sync.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,WAAW,kBAAkB;IAClC,IAAI,IAAI,IAAI,CAAC;IACb,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC;AAED,wBAAsB,4BAA4B,CACjD,OAAO,EACP,KAAK,SAAS,kBAAkB,EAC/B,IAAI,EAAE;IACP,YAAY,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,kBAAkB,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC;IACjD,cAAc,EAAE,MAAM,MAAM,CAAC;IAC7B,WAAW,EAAE,KAAK,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,wBAAwB,EAAE,OAAO,CAAC;IAClC,cAAc,EAAE,MAAM,KAAK,GAAG,IAAI,CAAC;IACnC,UAAU,EAAE,CACX,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAC7B,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,KACnD,KAAK,CAAC;IACX,4BAA4B,EAAE,CAC7B,YAAY,CAAC,EAAE,gBAAgB,KAC3B,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,4BAA4B,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,MAAM,CAAC;IAC1D,wBAAwB,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,MAAM,CAAC;IACtD,WAAW,EAAE,CAAC,KAAK,EAAE;QACpB,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC;QACnB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,iBAAiB,EAAE,OAAO,CAAC;KAC3B,KAAK,IAAI,CAAC;IACX,eAAe,EAAE,CAAC,OAAO,EAAE,MAAM,IAAI,KAAK,IAAI,CAAC;IAC/C,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC;IACX,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC;IACnB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,iBAAiB,EAAE,OAAO,CAAC;CAC3B,CAAC,CAqED"}

package/dist/lib/runtime/live-sync.js

@@ -0,0 +1,65 @@
+export async function ensureRuntimeLiveAccountSync(deps) {
+    if (!deps.getLiveAccountSync(deps.pluginConfig)) {
+        deps.currentSync?.stop();
+        deps.commitState({
+            sync: null,
+            path: null,
+            cleanupRegistered: deps.currentCleanupRegistered,
+        });
+        return {
+            sync: null,
+            path: null,
+            cleanupRegistered: deps.currentCleanupRegistered,
+        };
+    }
+    const targetPath = deps.getStoragePath();
+    let sync = deps.currentSync;
+    let cleanupRegistered = deps.currentCleanupRegistered;
+    let nextPath = deps.currentPath;
+    const commitState = () => {
+        deps.commitState({
+            sync,
+            path: nextPath,
+            cleanupRegistered,
+        });
+    };
+    if (!sync) {
+        sync = deps.createSync(async () => {
+            await deps.reloadAccountManagerFromDisk(deps.authFallback);
+        }, {
+            debounceMs: deps.getLiveAccountSyncDebounceMs(deps.pluginConfig),
+            pollIntervalMs: deps.getLiveAccountSyncPollMs(deps.pluginConfig),
+        });
+        commitState();
+        if (!cleanupRegistered) {
+            deps.registerCleanup(() => {
+                deps.getCurrentSync()?.stop();
+            });
+            cleanupRegistered = true;
+            commitState();
+        }
+    }
+    if (nextPath !== targetPath) {
+        let switched = false;
+        for (let attempt = 0; attempt < 3; attempt += 1) {
+            try {
+                await sync.syncToPath(targetPath);
+                nextPath = targetPath;
+                commitState();
+                switched = true;
+                break;
+            }
+            catch (error) {
+                const code = error?.code;
+                if (code !== "EBUSY" && code !== "EPERM")
+                    throw error;
+                await new Promise((resolve) => setTimeout(resolve, 25 * 2 ** attempt));
+            }
+        }
+        if (!switched) {
+            deps.logWarn(`[${deps.pluginName}] Live account sync path switch failed due to transient filesystem locks; keeping previous watcher.`);
+        }
+    }
+    return { sync, path: nextPath, cleanupRegistered };
+}
+//# sourceMappingURL=live-sync.js.map

package/dist/lib/runtime/live-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-sync.js","sourceRoot":"","sources":["../../../lib/runtime/live-sync.ts"],"names":[],"mappings":"AAOA,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAGhD,IA0BD;IAKA,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,WAAW,CAAC;YAChB,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,IAAI;YACV,iBAAiB,EAAE,IAAI,CAAC,wBAAwB;SAChD,CAAC,CAAC;QACH,OAAO;YACN,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,IAAI;YACV,iBAAiB,EAAE,IAAI,CAAC,wBAAwB;SAChD,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;IACzC,IAAI,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;IAC5B,IAAI,iBAAiB,GAAG,IAAI,CAAC,wBAAwB,CAAC;IACtD,IAAI,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC;IAChC,MAAM,WAAW,GAAG,GAAS,EAAE;QAC9B,IAAI,CAAC,WAAW,CAAC;YAChB,IAAI;YACJ,IAAI,EAAE,QAAQ;YACd,iBAAiB;SACjB,CAAC,CAAC;IACJ,CAAC,CAAC;IACF,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,IAAI,GAAG,IAAI,CAAC,UAAU,CACrB,KAAK,IAAI,EAAE;YACV,MAAM,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5D,CAAC,EACD;YACC,UAAU,EAAE,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,YAAY,CAAC;YAChE,cAAc,EAAE,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,YAAY,CAAC;SAChE,CACD,CAAC;QACF,WAAW,EAAE,CAAC;QACd,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACxB,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE;gBACzB,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,CAAC;YAC/B,CAAC,CAAC,CAAC;YACH,iBAAiB,GAAG,IAAI,CAAC;YACzB,WAAW,EAAE,CAAC;QACf,CAAC;IACF,CAAC;IAED,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC7B,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC;gBACJ,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;gBAClC,QAAQ,GAAG,UAAU,CAAC;gBACtB,WAAW,EAAE,CAAC;gBACd,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM;YACP,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,IAAI,GAAI,KAA2C,EAAE,IAAI,CAAC;gBAChE,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO;oBAAE,MAAM,KAAK,CAAC;gBACtD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC;YACxE,CAAC;QACF,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CACX,IAAI,IAAI,CAAC,UAAU,qGAAqG,CACxH,CAAC;QACH,CAAC;IACF,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;AACpD,CAAC"}

package/dist/lib/runtime/loader-setup.d.ts

@@ -0,0 +1,9 @@
+export declare function applyLoaderRuntimeSetup(params: {
+    pluginConfig: ReturnType<typeof import("../config.js").loadPluginConfig>;
+    applyUiRuntimeFromConfig: (pluginConfig: ReturnType<typeof import("../config.js").loadPluginConfig>) => void;
+    applyAccountStorageScope: (pluginConfig: ReturnType<typeof import("../config.js").loadPluginConfig>) => void;
+    ensureSessionAffinity: (pluginConfig: ReturnType<typeof import("../config.js").loadPluginConfig>) => void;
+    ensureRefreshGuardian: (pluginConfig: ReturnType<typeof import("../config.js").loadPluginConfig>) => void;
+    applyPreemptiveQuotaSettings: (pluginConfig: ReturnType<typeof import("../config.js").loadPluginConfig>) => void;
+}): void;
+//# sourceMappingURL=loader-setup.d.ts.map

package/dist/lib/runtime/loader-setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader-setup.d.ts","sourceRoot":"","sources":["../../../lib/runtime/loader-setup.ts"],"names":[],"mappings":"AAAA,wBAAgB,uBAAuB,CAAC,MAAM,EAAE;IAC/C,YAAY,EAAE,UAAU,CAAC,cAAc,cAAc,EAAE,gBAAgB,CAAC,CAAC;IACzE,wBAAwB,EAAE,CACzB,YAAY,EAAE,UAAU,CAAC,cAAc,cAAc,EAAE,gBAAgB,CAAC,KACpE,IAAI,CAAC;IACV,wBAAwB,EAAE,CACzB,YAAY,EAAE,UAAU,CAAC,cAAc,cAAc,EAAE,gBAAgB,CAAC,KACpE,IAAI,CAAC;IACV,qBAAqB,EAAE,CACtB,YAAY,EAAE,UAAU,CAAC,cAAc,cAAc,EAAE,gBAAgB,CAAC,KACpE,IAAI,CAAC;IACV,qBAAqB,EAAE,CACtB,YAAY,EAAE,UAAU,CAAC,cAAc,cAAc,EAAE,gBAAgB,CAAC,KACpE,IAAI,CAAC;IACV,4BAA4B,EAAE,CAC7B,YAAY,EAAE,UAAU,CAAC,cAAc,cAAc,EAAE,gBAAgB,CAAC,KACpE,IAAI,CAAC;CACV,GAAG,IAAI,CAMP"}

package/dist/lib/runtime/loader-setup.js

@@ -0,0 +1,8 @@
+export function applyLoaderRuntimeSetup(params) {
+    params.applyUiRuntimeFromConfig(params.pluginConfig);
+    params.applyAccountStorageScope(params.pluginConfig);
+    params.ensureSessionAffinity(params.pluginConfig);
+    params.ensureRefreshGuardian(params.pluginConfig);
+    params.applyPreemptiveQuotaSettings(params.pluginConfig);
+}
+//# sourceMappingURL=loader-setup.js.map

package/dist/lib/runtime/loader-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader-setup.js","sourceRoot":"","sources":["../../../lib/runtime/loader-setup.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,uBAAuB,CAAC,MAiBvC;IACA,MAAM,CAAC,wBAAwB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACrD,MAAM,CAAC,wBAAwB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACrD,MAAM,CAAC,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,CAAC,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,CAAC,4BAA4B,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AAC1D,CAAC"}

package/dist/lib/runtime/login-menu-accounts.d.ts

@@ -0,0 +1,29 @@
+type LoginMenuAccount = {
+    accountId?: string;
+    accountLabel?: string;
+    email?: string;
+    index: number;
+    addedAt?: number;
+    lastUsed?: number;
+    status: "active" | "ok" | "rate-limited" | "cooldown" | "disabled";
+    isCurrentAccount: boolean;
+    enabled: boolean;
+};
+export declare function buildLoginMenuAccounts(accounts: Array<{
+    accountId?: string;
+    accountLabel?: string;
+    email?: string;
+    addedAt?: number;
+    lastUsed?: number;
+    enabled?: boolean;
+    coolingDownUntil?: number;
+    rateLimitResetTimes?: Record<string, number | undefined>;
+}>, deps: {
+    now: number;
+    activeIndex: number;
+    formatRateLimitEntry: (account: {
+        rateLimitResetTimes?: Record<string, number | undefined>;
+    }, now: number) => string | null;
+}): LoginMenuAccount[];
+export {};
+//# sourceMappingURL=login-menu-accounts.d.ts.map

package/dist/lib/runtime/login-menu-accounts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-menu-accounts.d.ts","sourceRoot":"","sources":["../../../lib/runtime/login-menu-accounts.ts"],"names":[],"mappings":"AAAA,KAAK,gBAAgB,GAAG;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,QAAQ,GAAG,IAAI,GAAG,cAAc,GAAG,UAAU,GAAG,UAAU,CAAC;IACnE,gBAAgB,EAAE,OAAO,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,wBAAgB,sBAAsB,CACrC,QAAQ,EAAE,KAAK,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CACzD,CAAC,EACF,IAAI,EAAE;IACL,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB,EAAE,CACrB,OAAO,EAAE;QACR,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;KACzD,EACD,GAAG,EAAE,MAAM,KACP,MAAM,GAAG,IAAI,CAAC;CACnB,GACC,gBAAgB,EAAE,CA8BpB"}

package/dist/lib/runtime/login-menu-accounts.js

@@ -0,0 +1,33 @@
+export function buildLoginMenuAccounts(accounts, deps) {
+    return accounts.map((account, index) => {
+        let status;
+        if (account.enabled === false) {
+            status = "disabled";
+        }
+        else if (typeof account.coolingDownUntil === "number" &&
+            account.coolingDownUntil > deps.now) {
+            status = "cooldown";
+        }
+        else if (deps.formatRateLimitEntry(account, deps.now)) {
+            status = "rate-limited";
+        }
+        else if (index === deps.activeIndex) {
+            status = "active";
+        }
+        else {
+            status = "ok";
+        }
+        return {
+            accountId: account.accountId,
+            accountLabel: account.accountLabel,
+            email: account.email,
+            index,
+            addedAt: account.addedAt,
+            lastUsed: account.lastUsed,
+            status,
+            isCurrentAccount: index === deps.activeIndex,
+            enabled: account.enabled !== false,
+        };
+    });
+}
+//# sourceMappingURL=login-menu-accounts.js.map

package/dist/lib/runtime/login-menu-accounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-menu-accounts.js","sourceRoot":"","sources":["../../../lib/runtime/login-menu-accounts.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,sBAAsB,CACrC,QASE,EACF,IASC;IAED,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QACtC,IAAI,MAAkC,CAAC;QACvC,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAC/B,MAAM,GAAG,UAAU,CAAC;QACrB,CAAC;aAAM,IACN,OAAO,OAAO,CAAC,gBAAgB,KAAK,QAAQ;YAC5C,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAClC,CAAC;YACF,MAAM,GAAG,UAAU,CAAC;QACrB,CAAC;aAAM,IAAI,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACzD,MAAM,GAAG,cAAc,CAAC;QACzB,CAAC;aAAM,IAAI,KAAK,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,GAAG,QAAQ,CAAC;QACnB,CAAC;aAAM,CAAC;YACP,MAAM,GAAG,IAAI,CAAC;QACf,CAAC;QAED,OAAO;YACN,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK;YACL,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM;YACN,gBAAgB,EAAE,KAAK,KAAK,IAAI,CAAC,WAAW;YAC5C,OAAO,EAAE,OAAO,CAAC,OAAO,KAAK,KAAK;SAClC,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/runtime/manual-oauth-flow.d.ts

@@ -0,0 +1,40 @@
+import type { TokenResult } from "../types.js";
+import { type TokenSuccessWithAccount } from "./account-selection.js";
+type TokenSuccess = Extract<TokenResult, {
+    type: "success";
+}>;
+type RuntimeResolvedToken = TokenSuccessWithAccount<TokenSuccess>;
+type ManualOAuthFlow<TResolved extends TokenSuccess> = {
+    url: string;
+    method: "code";
+    instructions: string;
+    validate: (input: string) => string | undefined;
+    callback: (input: string) => Promise<TokenResult | TResolved>;
+};
+type ManualOAuthFlowParams<TResolved extends TokenSuccess> = {
+    pkce: {
+        verifier: string;
+    };
+    url: string;
+    expectedState: string;
+    redirectUri: string;
+    parseAuthorizationInput: (input: string) => {
+        code?: string;
+        state?: string;
+    };
+    exchangeAuthorizationCode: (code: string, verifier: string, redirectUri: string) => Promise<TokenResult>;
+    resolveTokenSuccess: (tokens: TokenSuccess) => TResolved;
+    onSuccess?: (tokens: TResolved) => Promise<void>;
+    instructions: string;
+};
+type RuntimeManualOAuthFlowDeps = {
+    instructions: string;
+    logInfo: (message: string) => void;
+    onSuccess?: (tokens: RuntimeResolvedToken) => Promise<void>;
+};
+export declare function buildManualOAuthFlow<TResolved extends TokenSuccess>(params: ManualOAuthFlowParams<TResolved>): ManualOAuthFlow<TResolved>;
+export declare function buildManualOAuthFlow(pkce: {
+    verifier: string;
+}, url: string, expectedState: string, deps: RuntimeManualOAuthFlowDeps): ManualOAuthFlow<RuntimeResolvedToken>;
+export {};
+//# sourceMappingURL=manual-oauth-flow.d.ts.map

package/dist/lib/runtime/manual-oauth-flow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manual-oauth-flow.d.ts","sourceRoot":"","sources":["../../../lib/runtime/manual-oauth-flow.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAEN,KAAK,uBAAuB,EAC5B,MAAM,wBAAwB,CAAC;AAEhC,KAAK,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC,CAAC;AAC9D,KAAK,oBAAoB,GAAG,uBAAuB,CAAC,YAAY,CAAC,CAAC;AAElE,KAAK,eAAe,CAAC,SAAS,SAAS,YAAY,IAAI;IACtD,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC;CAC9D,CAAC;AAEF,KAAK,qBAAqB,CAAC,SAAS,SAAS,YAAY,IAAI;IAC5D,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,uBAAuB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK;QAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF,yBAAyB,EAAE,CAC1B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,KACf,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1B,mBAAmB,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,SAAS,CAAC;IACzD,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,YAAY,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,KAAK,0BAA0B,GAAG;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D,CAAC;AAuDF,wBAAgB,oBAAoB,CAAC,SAAS,SAAS,YAAY,EAClE,MAAM,EAAE,qBAAqB,CAAC,SAAS,CAAC,GACtC,eAAe,CAAC,SAAS,CAAC,CAAC;AAE9B,wBAAgB,oBAAoB,CACnC,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,EAC1B,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,0BAA0B,GAC9B,eAAe,CAAC,oBAAoB,CAAC,CAAC"}

package/dist/lib/runtime/manual-oauth-flow.js

@@ -0,0 +1,71 @@
+import { exchangeAuthorizationCode, parseAuthorizationInput, REDIRECT_URI, } from "../auth/auth.js";
+import { getAccountIdCandidates, selectBestAccountCandidate, } from "../auth/token-utils.js";
+import { resolveAccountSelection, } from "./account-selection.js";
+function buildManualOAuthFlowFromParams(params) {
+    return {
+        url: params.url,
+        method: "code",
+        instructions: params.instructions,
+        validate: (input) => {
+            const parsed = params.parseAuthorizationInput(input);
+            if (!parsed.code) {
+                return `No authorization code found. Paste the full callback URL (e.g., ${params.redirectUri}?code=...)`;
+            }
+            if (!parsed.state) {
+                return "Missing OAuth state. Paste the full callback URL including both code and state parameters.";
+            }
+            if (parsed.state !== params.expectedState) {
+                return "OAuth state mismatch. Restart login and paste the callback URL generated for this login attempt.";
+            }
+            return undefined;
+        },
+        callback: async (input) => {
+            const parsed = params.parseAuthorizationInput(input);
+            if (!parsed.code || !parsed.state) {
+                return {
+                    type: "failed",
+                    reason: "invalid_response",
+                    message: "Missing authorization code or OAuth state",
+                };
+            }
+            if (parsed.state !== params.expectedState) {
+                return {
+                    type: "failed",
+                    reason: "invalid_response",
+                    message: "OAuth state mismatch. Restart login and try again.",
+                };
+            }
+            const tokens = await params.exchangeAuthorizationCode(parsed.code, params.pkce.verifier, params.redirectUri);
+            if (tokens?.type === "success") {
+                const resolved = params.resolveTokenSuccess(tokens);
+                if (params.onSuccess) {
+                    await params.onSuccess(resolved);
+                }
+                return resolved;
+            }
+            return tokens?.type === "failed" ? tokens : { type: "failed" };
+        },
+    };
+}
+export function buildManualOAuthFlow(paramsOrPkce, url, expectedState, deps) {
+    if (typeof url === "string" && typeof expectedState === "string" && deps) {
+        return buildManualOAuthFlowFromParams({
+            pkce: paramsOrPkce,
+            url,
+            expectedState,
+            redirectUri: REDIRECT_URI,
+            parseAuthorizationInput,
+            exchangeAuthorizationCode,
+            resolveTokenSuccess: (tokens) => resolveAccountSelection(tokens, {
+                envAccountId: process.env.CODEX_AUTH_ACCOUNT_ID,
+                logInfo: deps.logInfo,
+                getAccountIdCandidates,
+                selectBestAccountCandidate,
+            }),
+            onSuccess: deps.onSuccess,
+            instructions: deps.instructions,
+        });
+    }
+    return buildManualOAuthFlowFromParams(paramsOrPkce);
+}
+//# sourceMappingURL=manual-oauth-flow.js.map

package/dist/lib/runtime/manual-oauth-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manual-oauth-flow.js","sourceRoot":"","sources":["../../../lib/runtime/manual-oauth-flow.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,yBAAyB,EACzB,uBAAuB,EACvB,YAAY,GACZ,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACN,sBAAsB,EACtB,0BAA0B,GAC1B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACN,uBAAuB,GAEvB,MAAM,wBAAwB,CAAC;AAsChC,SAAS,8BAA8B,CACtC,MAAwC;IAExC,OAAO;QACN,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,MAAM,EAAE,MAAM;QACd,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,QAAQ,EAAE,CAAC,KAAa,EAAsB,EAAE;YAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;YACrD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBAClB,OAAO,mEAAmE,MAAM,CAAC,WAAW,YAAY,CAAC;YAC1G,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACnB,OAAO,4FAA4F,CAAC;YACrG,CAAC;YACD,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;gBAC3C,OAAO,kGAAkG,CAAC;YAC3G,CAAC;YACD,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,QAAQ,EAAE,KAAK,EAAE,KAAa,EAAoC,EAAE;YACnE,MAAM,MAAM,GAAG,MAAM,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;YACrD,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACnC,OAAO;oBACN,IAAI,EAAE,QAAiB;oBACvB,MAAM,EAAE,kBAA2B;oBACnC,OAAO,EAAE,2CAA2C;iBACpD,CAAC;YACH,CAAC;YACD,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;gBAC3C,OAAO;oBACN,IAAI,EAAE,QAAiB;oBACvB,MAAM,EAAE,kBAA2B;oBACnC,OAAO,EAAE,oDAAoD;iBAC7D,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,yBAAyB,CACpD,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,IAAI,CAAC,QAAQ,EACpB,MAAM,CAAC,WAAW,CAClB,CAAC;YACF,IAAI,MAAM,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;gBACpD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;oBACtB,MAAM,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;gBAClC,CAAC;gBACD,OAAO,QAAQ,CAAC;YACjB,CAAC;YACD,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,CAAC;QACzE,CAAC;KACD,CAAC;AACH,CAAC;AAaD,MAAM,UAAU,oBAAoB,CACnC,YAAqE,EACrE,GAAY,EACZ,aAAsB,EACtB,IAAiC;IAEjC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC1E,OAAO,8BAA8B,CAAuB;YAC3D,IAAI,EAAE,YAAoC;YAC1C,GAAG;YACH,aAAa;YACb,WAAW,EAAE,YAAY;YACzB,uBAAuB;YACvB,yBAAyB;YACzB,mBAAmB,EAAE,CAAC,MAAM,EAAE,EAAE,CAC/B,uBAAuB,CAAC,MAAM,EAAE;gBAC/B,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB;gBAC/C,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,sBAAsB;gBACtB,0BAA0B;aAC1B,CAAC;YACH,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,YAAY,EAAE,IAAI,CAAC,YAAY;SAC/B,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,8BAA8B,CACpC,YAAgD,CAChD,CAAC;AACH,CAAC"}

package/dist/lib/runtime/metrics.d.ts

@@ -0,0 +1,29 @@
+import type { FailoverMode } from "../request/failure-policy.js";
+export declare const MAX_RETRY_HINT_MS: number;
+export type RuntimeMetrics = {
+    startedAt: number;
+    totalRequests: number;
+    successfulRequests: number;
+    failedRequests: number;
+    rateLimitedResponses: number;
+    serverErrors: number;
+    networkErrors: number;
+    userAborts: number;
+    authRefreshFailures: number;
+    emptyResponseRetries: number;
+    accountRotations: number;
+    sameAccountRetries: number;
+    streamFailoverAttempts: number;
+    streamFailoverRecoveries: number;
+    streamFailoverCrossAccountRecoveries: number;
+    cumulativeLatencyMs: number;
+    lastRequestAt: number | null;
+    lastError: string | null;
+};
+export declare function createRuntimeMetrics(now?: number): RuntimeMetrics;
+export declare function parseFailoverMode(value: string | undefined): FailoverMode;
+export declare function parseEnvInt(value: string | undefined): number | undefined;
+export declare function clampRetryHintMs(value: number): number | null;
+export declare function parseRetryAfterHintMs(headers: Headers, now?: number): number | null;
+export declare function sanitizeResponseHeadersForLog(headers: Headers): Record<string, string>;
+//# sourceMappingURL=metrics.d.ts.map

package/dist/lib/runtime/metrics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.d.ts","sourceRoot":"","sources":["../../../lib/runtime/metrics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAEjE,eAAO,MAAM,iBAAiB,QAAgB,CAAC;AAE/C,MAAM,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,wBAAwB,EAAE,MAAM,CAAC;IACjC,oCAAoC,EAAE,MAAM,CAAC;IAC7C,mBAAmB,EAAE,MAAM,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,GAAG,SAAa,GAAG,cAAc,CAqBrE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,YAAY,CAKzE;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAIzE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK7D;AAED,wBAAgB,qBAAqB,CACpC,OAAO,EAAE,OAAO,EAChB,GAAG,SAAa,GACd,MAAM,GAAG,IAAI,CAyBf;AAED,wBAAgB,6BAA6B,CAC5C,OAAO,EAAE,OAAO,GACd,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA0BxB"}

package/dist/lib/runtime/metrics.js

@@ -0,0 +1,97 @@
+export const MAX_RETRY_HINT_MS = 5 * 60 * 1000;
+export function createRuntimeMetrics(now = Date.now()) {
+    return {
+        startedAt: now,
+        totalRequests: 0,
+        successfulRequests: 0,
+        failedRequests: 0,
+        rateLimitedResponses: 0,
+        serverErrors: 0,
+        networkErrors: 0,
+        userAborts: 0,
+        authRefreshFailures: 0,
+        emptyResponseRetries: 0,
+        accountRotations: 0,
+        sameAccountRetries: 0,
+        streamFailoverAttempts: 0,
+        streamFailoverRecoveries: 0,
+        streamFailoverCrossAccountRecoveries: 0,
+        cumulativeLatencyMs: 0,
+        lastRequestAt: null,
+        lastError: null,
+    };
+}
+export function parseFailoverMode(value) {
+    const normalized = (value ?? "").trim().toLowerCase();
+    if (normalized === "aggressive")
+        return "aggressive";
+    if (normalized === "conservative")
+        return "conservative";
+    return "balanced";
+}
+export function parseEnvInt(value) {
+    if (value === undefined)
+        return undefined;
+    const parsed = Number.parseInt(value, 10);
+    return Number.isFinite(parsed) ? parsed : undefined;
+}
+export function clampRetryHintMs(value) {
+    if (!Number.isFinite(value))
+        return null;
+    const normalized = Math.floor(value);
+    if (normalized <= 0)
+        return null;
+    return Math.min(normalized, MAX_RETRY_HINT_MS);
+}
+export function parseRetryAfterHintMs(headers, now = Date.now()) {
+    const retryAfterMsHeader = headers.get("retry-after-ms")?.trim();
+    if (retryAfterMsHeader && /^\d+$/.test(retryAfterMsHeader)) {
+        return clampRetryHintMs(Number.parseInt(retryAfterMsHeader, 10));
+    }
+    const retryAfterHeader = headers.get("retry-after")?.trim();
+    if (retryAfterHeader && /^\d+$/.test(retryAfterHeader)) {
+        return clampRetryHintMs(Number.parseInt(retryAfterHeader, 10) * 1000);
+    }
+    if (retryAfterHeader) {
+        const retryAtMs = Date.parse(retryAfterHeader);
+        if (Number.isFinite(retryAtMs)) {
+            return clampRetryHintMs(retryAtMs - now);
+        }
+    }
+    const resetAtHeader = headers.get("x-ratelimit-reset")?.trim();
+    if (resetAtHeader && /^\d+$/.test(resetAtHeader)) {
+        const resetRaw = Number.parseInt(resetAtHeader, 10);
+        const resetAtMs = resetRaw < 10_000_000_000 ? resetRaw * 1000 : resetRaw;
+        return clampRetryHintMs(resetAtMs - now);
+    }
+    return null;
+}
+export function sanitizeResponseHeadersForLog(headers) {
+    const allowed = new Set([
+        "content-type",
+        "x-request-id",
+        "x-openai-request-id",
+        "x-codex-plan-type",
+        "x-codex-active-limit",
+        "x-codex-primary-used-percent",
+        "x-codex-primary-window-minutes",
+        "x-codex-primary-reset-at",
+        "x-codex-primary-reset-after-seconds",
+        "x-codex-secondary-used-percent",
+        "x-codex-secondary-window-minutes",
+        "x-codex-secondary-reset-at",
+        "x-codex-secondary-reset-after-seconds",
+        "retry-after",
+        "x-ratelimit-reset",
+        "x-ratelimit-reset-requests",
+    ]);
+    const sanitized = {};
+    for (const [rawName, rawValue] of headers.entries()) {
+        const name = rawName.toLowerCase();
+        if (!allowed.has(name))
+            continue;
+        sanitized[name] = rawValue;
+    }
+    return sanitized;
+}
+//# sourceMappingURL=metrics.js.map

package/dist/lib/runtime/metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../../../lib/runtime/metrics.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAuB/C,MAAM,UAAU,oBAAoB,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACpD,OAAO;QACN,SAAS,EAAE,GAAG;QACd,aAAa,EAAE,CAAC;QAChB,kBAAkB,EAAE,CAAC;QACrB,cAAc,EAAE,CAAC;QACjB,oBAAoB,EAAE,CAAC;QACvB,YAAY,EAAE,CAAC;QACf,aAAa,EAAE,CAAC;QAChB,UAAU,EAAE,CAAC;QACb,mBAAmB,EAAE,CAAC;QACtB,oBAAoB,EAAE,CAAC;QACvB,gBAAgB,EAAE,CAAC;QACnB,kBAAkB,EAAE,CAAC;QACrB,sBAAsB,EAAE,CAAC;QACzB,wBAAwB,EAAE,CAAC;QAC3B,oCAAoC,EAAE,CAAC;QACvC,mBAAmB,EAAE,CAAC;QACtB,aAAa,EAAE,IAAI;QACnB,SAAS,EAAE,IAAI;KACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAyB;IAC1D,MAAM,UAAU,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtD,IAAI,UAAU,KAAK,YAAY;QAAE,OAAO,YAAY,CAAC;IACrD,IAAI,UAAU,KAAK,cAAc;QAAE,OAAO,cAAc,CAAC;IACzD,OAAO,UAAU,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAyB;IACpD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC7C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,UAAU,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,qBAAqB,CACpC,OAAgB,EAChB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC;IACjE,IAAI,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC5D,OAAO,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC;IAC5D,IAAI,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxD,OAAO,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,gBAAgB,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,OAAO,gBAAgB,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC;QAC1C,CAAC;IACF,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,CAAC;IAC/D,IAAI,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,QAAQ,GAAG,cAAc,CAAC,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;QACzE,OAAO,gBAAgB,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC5C,OAAgB;IAEhB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACvB,cAAc;QACd,cAAc;QACd,qBAAqB;QACrB,mBAAmB;QACnB,sBAAsB;QACtB,8BAA8B;QAC9B,gCAAgC;QAChC,0BAA0B;QAC1B,qCAAqC;QACrC,gCAAgC;QAChC,kCAAkC;QAClC,4BAA4B;QAC5B,uCAAuC;QACvC,aAAa;QACb,mBAAmB;QACnB,4BAA4B;KAC5B,CAAC,CAAC;IACH,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACjC,SAAS,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;IAC5B,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC"}

package/dist/lib/runtime/oauth-browser-flow.d.ts

@@ -0,0 +1,9 @@
+import type { TokenResult } from "../types.js";
+export declare function runOAuthBrowserFlow(deps: {
+    forceNewLogin?: boolean;
+    manualModeLabel: string;
+    logInfo: (message: string) => void;
+    logDebug: (message: string) => void;
+    logWarn: (message: string) => void;
+}): Promise<TokenResult>;
+//# sourceMappingURL=oauth-browser-flow.d.ts.map

package/dist/lib/runtime/oauth-browser-flow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-browser-flow.d.ts","sourceRoot":"","sources":["../../../lib/runtime/oauth-browser-flow.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC/C,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACnC,GAAG,OAAO,CAAC,WAAW,CAAC,CAsCvB"}

package/dist/lib/runtime/oauth-browser-flow.js

@@ -0,0 +1,34 @@
+import { createAuthorizationFlow, exchangeAuthorizationCode, REDIRECT_URI, redactOAuthUrlForLog, } from "../auth/auth.js";
+import { openBrowserUrl } from "../auth/browser.js";
+import { startLocalOAuthServer } from "../auth/server.js";
+export async function runOAuthBrowserFlow(deps) {
+    const { pkce, state, url } = await createAuthorizationFlow({
+        forceNewLogin: deps.forceNewLogin ?? false,
+    });
+    deps.logInfo(`OAuth URL: ${redactOAuthUrlForLog(url)}`);
+    let serverInfo = null;
+    try {
+        serverInfo = await startLocalOAuthServer({ state });
+    }
+    catch (err) {
+        deps.logDebug(`Failed to start OAuth server: ${err?.message ?? String(err)}`);
+        serverInfo = null;
+    }
+    if (!serverInfo || !serverInfo.ready) {
+        serverInfo?.close();
+        deps.logWarn(`OAuth callback server failed to start. Please retry with "${deps.manualModeLabel}".\n`);
+        return { type: "failed" };
+    }
+    openBrowserUrl(url);
+    const result = await serverInfo.waitForCode(state);
+    serverInfo.close();
+    if (!result) {
+        return {
+            type: "failed",
+            reason: "unknown",
+            message: "OAuth callback timeout or cancelled",
+        };
+    }
+    return exchangeAuthorizationCode(result.code, pkce.verifier, REDIRECT_URI);
+}
+//# sourceMappingURL=oauth-browser-flow.js.map

package/dist/lib/runtime/oauth-browser-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-browser-flow.js","sourceRoot":"","sources":["../../../lib/runtime/oauth-browser-flow.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,uBAAuB,EACvB,yBAAyB,EACzB,YAAY,EACZ,oBAAoB,GACpB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAG1D,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAMzC;IACA,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,uBAAuB,CAAC;QAC1D,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,KAAK;KAC1C,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,cAAc,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAExD,IAAI,UAAU,GACb,IAAI,CAAC;IACN,IAAI,CAAC;QACJ,UAAU,GAAG,MAAM,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,QAAQ,CACZ,iCAAkC,GAAa,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CACzE,CAAC;QACF,UAAU,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACtC,UAAU,EAAE,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,OAAO,CACX,6DAA6D,IAAI,CAAC,eAAe,MAAM,CACvF,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,QAAiB,EAAE,CAAC;IACpC,CAAC;IACD,cAAc,CAAC,GAAG,CAAC,CAAC;IAEpB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACnD,UAAU,CAAC,KAAK,EAAE,CAAC;IAEnB,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO;YACN,IAAI,EAAE,QAAiB;YACvB,MAAM,EAAE,SAAkB;YAC1B,OAAO,EAAE,qCAAqC;SAC9C,CAAC;IACH,CAAC;IAED,OAAO,yBAAyB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;AAC5E,CAAC"}

package/dist/lib/runtime/preemptive-quota.d.ts

@@ -0,0 +1,13 @@
+export declare function applyRuntimePreemptiveQuotaSettings<TConfig>(pluginConfig: TConfig, deps: {
+    configure: (options: {
+        enabled: boolean;
+        remainingPercentThresholdPrimary: number;
+        remainingPercentThresholdSecondary: number;
+        maxDeferralMs: number;
+    }) => void;
+    getPreemptiveQuotaEnabled: (config: TConfig) => boolean;
+    getPreemptiveQuotaRemainingPercent5h: (config: TConfig) => number;
+    getPreemptiveQuotaRemainingPercent7d: (config: TConfig) => number;
+    getPreemptiveQuotaMaxDeferralMs: (config: TConfig) => number;
+}): void;
+//# sourceMappingURL=preemptive-quota.d.ts.map

package/dist/lib/runtime/preemptive-quota.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preemptive-quota.d.ts","sourceRoot":"","sources":["../../../lib/runtime/preemptive-quota.ts"],"names":[],"mappings":"AAAA,wBAAgB,mCAAmC,CAAC,OAAO,EAC1D,YAAY,EAAE,OAAO,EACrB,IAAI,EAAE;IACL,SAAS,EAAE,CAAC,OAAO,EAAE;QACpB,OAAO,EAAE,OAAO,CAAC;QACjB,gCAAgC,EAAE,MAAM,CAAC;QACzC,kCAAkC,EAAE,MAAM,CAAC;QAC3C,aAAa,EAAE,MAAM,CAAC;KACtB,KAAK,IAAI,CAAC;IACX,yBAAyB,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC;IACxD,oCAAoC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,MAAM,CAAC;IAClE,oCAAoC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,MAAM,CAAC;IAClE,+BAA+B,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,MAAM,CAAC;CAC7D,GACC,IAAI,CASN"}

package/dist/lib/runtime/preemptive-quota.js

@@ -0,0 +1,9 @@
+export function applyRuntimePreemptiveQuotaSettings(pluginConfig, deps) {
+    deps.configure({
+        enabled: deps.getPreemptiveQuotaEnabled(pluginConfig),
+        remainingPercentThresholdPrimary: deps.getPreemptiveQuotaRemainingPercent5h(pluginConfig),
+        remainingPercentThresholdSecondary: deps.getPreemptiveQuotaRemainingPercent7d(pluginConfig),
+        maxDeferralMs: deps.getPreemptiveQuotaMaxDeferralMs(pluginConfig),
+    });
+}
+//# sourceMappingURL=preemptive-quota.js.map

package/dist/lib/runtime/preemptive-quota.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preemptive-quota.js","sourceRoot":"","sources":["../../../lib/runtime/preemptive-quota.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,mCAAmC,CAClD,YAAqB,EACrB,IAWC;IAED,IAAI,CAAC,SAAS,CAAC;QACd,OAAO,EAAE,IAAI,CAAC,yBAAyB,CAAC,YAAY,CAAC;QACrD,gCAAgC,EAC/B,IAAI,CAAC,oCAAoC,CAAC,YAAY,CAAC;QACxD,kCAAkC,EACjC,IAAI,CAAC,oCAAoC,CAAC,YAAY,CAAC;QACxD,aAAa,EAAE,IAAI,CAAC,+BAA+B,CAAC,YAAY,CAAC;KACjE,CAAC,CAAC;AACJ,CAAC"}