codex-multi-auth 1.2.0 → 1.2.2

package/dist/lib/runtime/account-check-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-check-types.js","sourceRoot":"","sources":["../../../lib/runtime/account-check-types.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,8BAA8B,CAAC,cAG9C;IACA,OAAO;QACN,cAAc,EAAE,KAAK;QACrB,cAAc,EAAE,KAAK;QACrB,EAAE,EAAE,CAAC;QACL,MAAM,EAAE,CAAC;QACT,QAAQ,EAAE,CAAC;QACX,gBAAgB,EAAE,IAAI,GAAG,EAAU;QACnC,cAAc;KACd,CAAC;AACH,CAAC"}

package/dist/lib/runtime/account-check.d.ts

@@ -0,0 +1,48 @@
+import type { ModelFamily } from "../prompts/codex.js";
+import type { AccountStorageV3, FlaggedAccountMetadataV1 } from "../storage.js";
+import type { AccountIdSource, TokenResult } from "../types.js";
+import type { AccountCheckWorkingState } from "./account-check-types.js";
+import type { CodexQuotaSnapshot } from "./quota-headers.js";
+export declare function runRuntimeAccountCheck(deepProbe: boolean, deps: {
+    hydrateEmails: (storage: AccountStorageV3 | null) => Promise<AccountStorageV3 | null>;
+    loadAccounts: () => Promise<AccountStorageV3 | null>;
+    createEmptyStorage: () => AccountStorageV3;
+    loadFlaggedAccounts: () => Promise<{
+        version: 1;
+        accounts: FlaggedAccountMetadataV1[];
+    }>;
+    createAccountCheckWorkingState: (flaggedStorage: {
+        version: 1;
+        accounts: FlaggedAccountMetadataV1[];
+    }) => AccountCheckWorkingState;
+    lookupCodexCliTokensByEmail: (email: string | undefined) => Promise<{
+        refreshToken?: string;
+        accessToken: string;
+        expiresAt?: number;
+    } | null | undefined>;
+    extractAccountId: (accessToken: string | undefined) => string | undefined;
+    shouldUpdateAccountIdFromToken: (source: AccountIdSource | undefined, currentAccountId: string | undefined) => boolean;
+    sanitizeEmail: (email: string | undefined) => string | undefined;
+    extractAccountEmail: (accessToken: string | undefined, idToken?: string | undefined) => string | undefined;
+    queuedRefresh: (refreshToken: string) => Promise<TokenResult>;
+    isRuntimeFlaggableFailure: (failure: Extract<TokenResult, {
+        type: "failed";
+    }>) => boolean;
+    fetchCodexQuotaSnapshot: (params: {
+        accountId: string;
+        accessToken: string;
+    }) => Promise<CodexQuotaSnapshot>;
+    resolveRequestAccountId: (accountId: string | undefined, accountIdSource: AccountIdSource | undefined, tokenAccountId: string | undefined) => string | undefined;
+    formatCodexQuotaLine: (snapshot: CodexQuotaSnapshot) => string;
+    clampRuntimeActiveIndices: (storage: AccountStorageV3, modelFamilies: readonly ModelFamily[]) => void;
+    MODEL_FAMILIES: readonly ModelFamily[];
+    saveAccounts: (storage: AccountStorageV3) => Promise<void>;
+    invalidateAccountManagerCache: () => void;
+    saveFlaggedAccounts: (storage: {
+        version: 1;
+        accounts: FlaggedAccountMetadataV1[];
+    }) => Promise<void>;
+    now?: () => number;
+    showLine: (message: string) => void;
+}): Promise<void>;
+//# sourceMappingURL=account-check.d.ts.map

package/dist/lib/runtime/account-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-check.d.ts","sourceRoot":"","sources":["../../../lib/runtime/account-check.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAChF,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,wBAAsB,sBAAsB,CAC3C,SAAS,EAAE,OAAO,EAClB,IAAI,EAAE;IACL,aAAa,EAAE,CACd,OAAO,EAAE,gBAAgB,GAAG,IAAI,KAC5B,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IACtC,YAAY,EAAE,MAAM,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IACrD,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;IAC3C,mBAAmB,EAAE,MAAM,OAAO,CAAC;QAClC,OAAO,EAAE,CAAC,CAAC;QACX,QAAQ,EAAE,wBAAwB,EAAE,CAAC;KACrC,CAAC,CAAC;IACH,8BAA8B,EAAE,CAAC,cAAc,EAAE;QAChD,OAAO,EAAE,CAAC,CAAC;QACX,QAAQ,EAAE,wBAAwB,EAAE,CAAC;KACrC,KAAK,wBAAwB,CAAC;IAC/B,2BAA2B,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAChE;QACA,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;KAClB,GACD,IAAI,GACJ,SAAS,CACX,CAAC;IACF,gBAAgB,EAAE,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,KAAK,MAAM,GAAG,SAAS,CAAC;IAC1E,8BAA8B,EAAE,CAC/B,MAAM,EAAE,eAAe,GAAG,SAAS,EACnC,gBAAgB,EAAE,MAAM,GAAG,SAAS,KAChC,OAAO,CAAC;IACb,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,KAAK,MAAM,GAAG,SAAS,CAAC;IACjE,mBAAmB,EAAE,CACpB,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,KACxB,MAAM,GAAG,SAAS,CAAC;IACxB,aAAa,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9D,yBAAyB,EAAE,CAC1B,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE;QAAE,IAAI,EAAE,QAAQ,CAAA;KAAE,CAAC,KAC7C,OAAO,CAAC;IACb,uBAAuB,EAAE,CAAC,MAAM,EAAE;QACjC,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;KACpB,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAClC,uBAAuB,EAAE,CACxB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,eAAe,EAAE,eAAe,GAAG,SAAS,EAC5C,cAAc,EAAE,MAAM,GAAG,SAAS,KAC9B,MAAM,GAAG,SAAS,CAAC;IACxB,oBAAoB,EAAE,CAAC,QAAQ,EAAE,kBAAkB,KAAK,MAAM,CAAC;IAC/D,yBAAyB,EAAE,CAC1B,OAAO,EAAE,gBAAgB,EACzB,aAAa,EAAE,SAAS,WAAW,EAAE,KACjC,IAAI,CAAC;IACV,cAAc,EAAE,SAAS,WAAW,EAAE,CAAC;IACvC,YAAY,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,6BAA6B,EAAE,MAAM,IAAI,CAAC;IAC1C,mBAAmB,EAAE,CAAC,OAAO,EAAE;QAC9B,OAAO,EAAE,CAAC,CAAC;QACX,QAAQ,EAAE,wBAAwB,EAAE,CAAC;KACrC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACpC,GACC,OAAO,CAAC,IAAI,CAAC,CA4Qf"}

package/dist/lib/runtime/account-check.js

@@ -0,0 +1,202 @@
+import { maskEmail } from "../logger.js";
+export async function runRuntimeAccountCheck(deepProbe, deps) {
+    const loadedStorage = await deps.hydrateEmails(await deps.loadAccounts());
+    const workingStorage = loadedStorage
+        ? {
+            ...loadedStorage,
+            accounts: loadedStorage.accounts.map((account) => ({ ...account })),
+            activeIndexByFamily: loadedStorage.activeIndexByFamily
+                ? { ...loadedStorage.activeIndexByFamily }
+                : {},
+        }
+        : deps.createEmptyStorage();
+    if (workingStorage.accounts.length === 0) {
+        deps.showLine("\nNo accounts to check.\n");
+        return;
+    }
+    const flaggedStorage = await deps.loadFlaggedAccounts();
+    const state = deps.createAccountCheckWorkingState(flaggedStorage);
+    const total = workingStorage.accounts.length;
+    deps.showLine(`\nChecking ${deepProbe ? "full account health" : "quotas"} for all accounts...\n`);
+    for (let i = 0; i < total; i += 1) {
+        const account = workingStorage.accounts[i];
+        if (!account)
+            continue;
+        const maskedEmail = account.email ? maskEmail(account.email) : undefined;
+        const label = account.accountLabel ?? maskedEmail ?? `Account ${i + 1}`;
+        if (account.enabled === false) {
+            state.disabled += 1;
+            deps.showLine(`[${i + 1}/${total}] ${label}: DISABLED`);
+            continue;
+        }
+        try {
+            const nowMs = deps.now?.() ?? Date.now();
+            let accessToken = null;
+            let tokenAccountId;
+            let authDetail = "OK";
+            if (account.accessToken &&
+                (typeof account.expiresAt !== "number" ||
+                    !Number.isFinite(account.expiresAt) ||
+                    account.expiresAt > nowMs)) {
+                accessToken = account.accessToken;
+                authDetail = "OK (cached access)";
+                tokenAccountId = deps.extractAccountId(account.accessToken);
+                if (tokenAccountId &&
+                    deps.shouldUpdateAccountIdFromToken(account.accountIdSource, account.accountId) &&
+                    tokenAccountId !== account.accountId) {
+                    account.accountId = tokenAccountId;
+                    account.accountIdSource = "token";
+                    state.storageChanged = true;
+                }
+            }
+            if (!accessToken) {
+                const cached = await deps
+                    .lookupCodexCliTokensByEmail(account.email)
+                    .catch(() => null);
+                if (cached &&
+                    (typeof cached.expiresAt !== "number" ||
+                        !Number.isFinite(cached.expiresAt) ||
+                        cached.expiresAt > nowMs)) {
+                    accessToken = cached.accessToken;
+                    authDetail = "OK (Codex CLI cache)";
+                    if (cached.refreshToken &&
+                        cached.refreshToken !== account.refreshToken) {
+                        account.refreshToken = cached.refreshToken;
+                        state.storageChanged = true;
+                    }
+                    if (cached.accessToken &&
+                        cached.accessToken !== account.accessToken) {
+                        account.accessToken = cached.accessToken;
+                        state.storageChanged = true;
+                    }
+                    if (cached.expiresAt !== account.expiresAt) {
+                        account.expiresAt = cached.expiresAt;
+                        state.storageChanged = true;
+                    }
+                    const hydratedEmail = deps.sanitizeEmail(deps.extractAccountEmail(cached.accessToken));
+                    if (hydratedEmail && hydratedEmail !== account.email) {
+                        account.email = hydratedEmail;
+                        state.storageChanged = true;
+                    }
+                    tokenAccountId = deps.extractAccountId(cached.accessToken);
+                    if (tokenAccountId &&
+                        deps.shouldUpdateAccountIdFromToken(account.accountIdSource, account.accountId) &&
+                        tokenAccountId !== account.accountId) {
+                        account.accountId = tokenAccountId;
+                        account.accountIdSource = "token";
+                        state.storageChanged = true;
+                    }
+                }
+            }
+            if (!accessToken) {
+                const refreshResult = await deps.queuedRefresh(account.refreshToken);
+                if (refreshResult.type !== "success") {
+                    state.errors += 1;
+                    const message = refreshResult.message ?? refreshResult.reason ?? "refresh failed";
+                    deps.showLine(`[${i + 1}/${total}] ${label}: ERROR (${message})`);
+                    if (deepProbe && deps.isRuntimeFlaggableFailure(refreshResult)) {
+                        const existingIndex = state.flaggedStorage.accounts.findIndex((flagged) => flagged.refreshToken === account.refreshToken);
+                        const flaggedRecord = {
+                            ...account,
+                            flaggedAt: nowMs,
+                            flaggedReason: "token-invalid",
+                            lastError: message,
+                        };
+                        if (existingIndex >= 0) {
+                            state.flaggedStorage.accounts[existingIndex] = flaggedRecord;
+                        }
+                        else {
+                            state.flaggedStorage.accounts.push(flaggedRecord);
+                        }
+                        state.removeFromActive.add(account.refreshToken);
+                        state.flaggedChanged = true;
+                    }
+                    continue;
+                }
+                accessToken = refreshResult.access;
+                authDetail = "OK";
+                if (refreshResult.refresh !== account.refreshToken) {
+                    account.refreshToken = refreshResult.refresh;
+                    state.storageChanged = true;
+                }
+                if (refreshResult.access &&
+                    refreshResult.access !== account.accessToken) {
+                    account.accessToken = refreshResult.access;
+                    state.storageChanged = true;
+                }
+                if (typeof refreshResult.expires === "number" &&
+                    refreshResult.expires !== account.expiresAt) {
+                    account.expiresAt = refreshResult.expires;
+                    state.storageChanged = true;
+                }
+                const hydratedEmail = deps.sanitizeEmail(deps.extractAccountEmail(refreshResult.access, refreshResult.idToken));
+                if (hydratedEmail && hydratedEmail !== account.email) {
+                    account.email = hydratedEmail;
+                    state.storageChanged = true;
+                }
+                tokenAccountId = deps.extractAccountId(refreshResult.access);
+                if (tokenAccountId &&
+                    deps.shouldUpdateAccountIdFromToken(account.accountIdSource, account.accountId) &&
+                    tokenAccountId !== account.accountId) {
+                    account.accountId = tokenAccountId;
+                    account.accountIdSource = "token";
+                    state.storageChanged = true;
+                }
+            }
+            if (!accessToken) {
+                throw new Error("Missing access token after refresh");
+            }
+            if (deepProbe) {
+                state.ok += 1;
+                const detail = tokenAccountId
+                    ? `${authDetail} (id:${tokenAccountId.slice(-6)})`
+                    : authDetail;
+                deps.showLine(`[${i + 1}/${total}] ${label}: ${detail}`);
+                continue;
+            }
+            try {
+                const requestAccountId = deps.resolveRequestAccountId(account.accountId, account.accountIdSource, tokenAccountId) ??
+                    tokenAccountId ??
+                    account.accountId;
+                if (!requestAccountId) {
+                    throw new Error("Missing accountId for quota probe");
+                }
+                const snapshot = await deps.fetchCodexQuotaSnapshot({
+                    accountId: requestAccountId,
+                    accessToken,
+                });
+                state.ok += 1;
+                deps.showLine(`[${i + 1}/${total}] ${label}: ${deps.formatCodexQuotaLine(snapshot)}`);
+            }
+            catch (error) {
+                state.errors += 1;
+                const message = error instanceof Error ? error.message : String(error);
+                deps.showLine(`[${i + 1}/${total}] ${label}: ERROR (${message.slice(0, 160)})`);
+            }
+        }
+        catch (error) {
+            state.errors += 1;
+            const message = error instanceof Error ? error.message : String(error);
+            deps.showLine(`[${i + 1}/${total}] ${label}: ERROR (${message.slice(0, 120)})`);
+        }
+    }
+    if (state.removeFromActive.size > 0) {
+        workingStorage.accounts = workingStorage.accounts.filter((account) => !state.removeFromActive.has(account.refreshToken));
+        deps.clampRuntimeActiveIndices(workingStorage, deps.MODEL_FAMILIES);
+        state.storageChanged = true;
+    }
+    if (state.flaggedChanged) {
+        await deps.saveFlaggedAccounts(state.flaggedStorage);
+    }
+    if (state.storageChanged) {
+        await deps.saveAccounts(workingStorage);
+        deps.invalidateAccountManagerCache();
+    }
+    deps.showLine("");
+    deps.showLine(`Results: ${state.ok} ok, ${state.errors} error, ${state.disabled} disabled`);
+    if (state.removeFromActive.size > 0) {
+        deps.showLine(`Moved ${state.removeFromActive.size} account(s) to flagged pool (invalid refresh token).`);
+    }
+    deps.showLine("");
+}
+//# sourceMappingURL=account-check.js.map

package/dist/lib/runtime/account-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-check.js","sourceRoot":"","sources":["../../../lib/runtime/account-check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAOzC,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,SAAkB,EAClB,IA4DC;IAED,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IAC1E,MAAM,cAAc,GAAG,aAAa;QACnC,CAAC,CAAC;YACA,GAAG,aAAa;YAChB,QAAQ,EAAE,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;YACnE,mBAAmB,EAAE,aAAa,CAAC,mBAAmB;gBACrD,CAAC,CAAC,EAAE,GAAG,aAAa,CAAC,mBAAmB,EAAE;gBAC1C,CAAC,CAAC,EAAE;SACL;QACF,CAAC,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAE7B,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC;QAC3C,OAAO;IACR,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,CAAC,8BAA8B,CAAC,cAAc,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC;IAE7C,IAAI,CAAC,QAAQ,CACZ,cAAc,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,QAAQ,wBAAwB,CAClF,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzE,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,IAAI,WAAW,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACxE,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAC/B,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;YACpB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,KAAK,YAAY,CAAC,CAAC;YACxD,SAAS;QACV,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACzC,IAAI,WAAW,GAAkB,IAAI,CAAC;YACtC,IAAI,cAAkC,CAAC;YACvC,IAAI,UAAU,GAAG,IAAI,CAAC;YAEtB,IACC,OAAO,CAAC,WAAW;gBACnB,CAAC,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ;oBACrC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;oBACnC,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC,EAC1B,CAAC;gBACF,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;gBAClC,UAAU,GAAG,oBAAoB,CAAC;gBAClC,cAAc,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;gBAC5D,IACC,cAAc;oBACd,IAAI,CAAC,8BAA8B,CAClC,OAAO,CAAC,eAAe,EACvB,OAAO,CAAC,SAAS,CACjB;oBACD,cAAc,KAAK,OAAO,CAAC,SAAS,EACnC,CAAC;oBACF,OAAO,CAAC,SAAS,GAAG,cAAc,CAAC;oBACnC,OAAO,CAAC,eAAe,GAAG,OAAO,CAAC;oBAClC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC7B,CAAC;YACF,CAAC;YAED,IAAI,CAAC,WAAW,EAAE,CAAC;gBAClB,MAAM,MAAM,GAAG,MAAM,IAAI;qBACvB,2BAA2B,CAAC,OAAO,CAAC,KAAK,CAAC;qBAC1C,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBACpB,IACC,MAAM;oBACN,CAAC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;wBACpC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;wBAClC,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,EACzB,CAAC;oBACF,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;oBACjC,UAAU,GAAG,sBAAsB,CAAC;oBAEpC,IACC,MAAM,CAAC,YAAY;wBACnB,MAAM,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY,EAC3C,CAAC;wBACF,OAAO,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;wBAC3C,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;oBAC7B,CAAC;oBACD,IACC,MAAM,CAAC,WAAW;wBAClB,MAAM,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,EACzC,CAAC;wBACF,OAAO,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;wBACzC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;oBAC7B,CAAC;oBACD,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;wBAC5C,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;wBACrC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;oBAC7B,CAAC;oBAED,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CACvC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,WAAW,CAAC,CAC5C,CAAC;oBACF,IAAI,aAAa,IAAI,aAAa,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;wBACtD,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC;wBAC9B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;oBAC7B,CAAC;oBAED,cAAc,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;oBAC3D,IACC,cAAc;wBACd,IAAI,CAAC,8BAA8B,CAClC,OAAO,CAAC,eAAe,EACvB,OAAO,CAAC,SAAS,CACjB;wBACD,cAAc,KAAK,OAAO,CAAC,SAAS,EACnC,CAAC;wBACF,OAAO,CAAC,SAAS,GAAG,cAAc,CAAC;wBACnC,OAAO,CAAC,eAAe,GAAG,OAAO,CAAC;wBAClC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;oBAC7B,CAAC;gBACF,CAAC;YACF,CAAC;YAED,IAAI,CAAC,WAAW,EAAE,CAAC;gBAClB,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBACrE,IAAI,aAAa,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBACtC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;oBAClB,MAAM,OAAO,GACZ,aAAa,CAAC,OAAO,IAAI,aAAa,CAAC,MAAM,IAAI,gBAAgB,CAAC;oBACnE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,KAAK,YAAY,OAAO,GAAG,CAAC,CAAC;oBAClE,IAAI,SAAS,IAAI,IAAI,CAAC,yBAAyB,CAAC,aAAa,CAAC,EAAE,CAAC;wBAChE,MAAM,aAAa,GAAG,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAC5D,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY,CAC1D,CAAC;wBACF,MAAM,aAAa,GAA6B;4BAC/C,GAAG,OAAO;4BACV,SAAS,EAAE,KAAK;4BAChB,aAAa,EAAE,eAAe;4BAC9B,SAAS,EAAE,OAAO;yBAClB,CAAC;wBACF,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;4BACxB,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,aAAa,CAAC;wBAC9D,CAAC;6BAAM,CAAC;4BACP,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;wBACnD,CAAC;wBACD,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;wBACjD,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;oBAC7B,CAAC;oBACD,SAAS;gBACV,CAAC;gBAED,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC;gBACnC,UAAU,GAAG,IAAI,CAAC;gBAClB,IAAI,aAAa,CAAC,OAAO,KAAK,OAAO,CAAC,YAAY,EAAE,CAAC;oBACpD,OAAO,CAAC,YAAY,GAAG,aAAa,CAAC,OAAO,CAAC;oBAC7C,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC7B,CAAC;gBACD,IACC,aAAa,CAAC,MAAM;oBACpB,aAAa,CAAC,MAAM,KAAK,OAAO,CAAC,WAAW,EAC3C,CAAC;oBACF,OAAO,CAAC,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC;oBAC3C,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC7B,CAAC;gBACD,IACC,OAAO,aAAa,CAAC,OAAO,KAAK,QAAQ;oBACzC,aAAa,CAAC,OAAO,KAAK,OAAO,CAAC,SAAS,EAC1C,CAAC;oBACF,OAAO,CAAC,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC;oBAC1C,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC7B,CAAC;gBACD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CACvC,IAAI,CAAC,mBAAmB,CAAC,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,CACrE,CAAC;gBACF,IAAI,aAAa,IAAI,aAAa,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;oBACtD,OAAO,CAAC,KAAK,GAAG,aAAa,CAAC;oBAC9B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC7B,CAAC;gBACD,cAAc,GAAG,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;gBAC7D,IACC,cAAc;oBACd,IAAI,CAAC,8BAA8B,CAClC,OAAO,CAAC,eAAe,EACvB,OAAO,CAAC,SAAS,CACjB;oBACD,cAAc,KAAK,OAAO,CAAC,SAAS,EACnC,CAAC;oBACF,OAAO,CAAC,SAAS,GAAG,cAAc,CAAC;oBACnC,OAAO,CAAC,eAAe,GAAG,OAAO,CAAC;oBAClC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC7B,CAAC;YACF,CAAC;YAED,IAAI,CAAC,WAAW,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACvD,CAAC;YAED,IAAI,SAAS,EAAE,CAAC;gBACf,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;gBACd,MAAM,MAAM,GAAG,cAAc;oBAC5B,CAAC,CAAC,GAAG,UAAU,QAAQ,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG;oBAClD,CAAC,CAAC,UAAU,CAAC;gBACd,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,KAAK,KAAK,MAAM,EAAE,CAAC,CAAC;gBACzD,SAAS;YACV,CAAC;YAED,IAAI,CAAC;gBACJ,MAAM,gBAAgB,GACrB,IAAI,CAAC,uBAAuB,CAC3B,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,eAAe,EACvB,cAAc,CACd;oBACD,cAAc;oBACd,OAAO,CAAC,SAAS,CAAC;gBAEnB,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACvB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBACtD,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC;oBACnD,SAAS,EAAE,gBAAgB;oBAC3B,WAAW;iBACX,CAAC,CAAC;gBACH,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;gBACd,IAAI,CAAC,QAAQ,CACZ,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,KAAK,KAAK,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,CACtE,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;gBAClB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvE,IAAI,CAAC,QAAQ,CACZ,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,KAAK,YAAY,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAChE,CAAC;YACH,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;YAClB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,CAAC,QAAQ,CACZ,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,KAAK,YAAY,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAChE,CAAC;QACH,CAAC;IACF,CAAC;IAED,IAAI,KAAK,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACrC,cAAc,CAAC,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,MAAM,CACvD,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAC9D,CAAC;QACF,IAAI,CAAC,yBAAyB,CAAC,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QACpE,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1B,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1B,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;QACxC,IAAI,CAAC,6BAA6B,EAAE,CAAC;IACtC,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAClB,IAAI,CAAC,QAAQ,CACZ,YAAY,KAAK,CAAC,EAAE,QAAQ,KAAK,CAAC,MAAM,WAAW,KAAK,CAAC,QAAQ,WAAW,CAC5E,CAAC;IACF,IAAI,KAAK,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,QAAQ,CACZ,SAAS,KAAK,CAAC,gBAAgB,CAAC,IAAI,sDAAsD,CAC1F,CAAC;IACH,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACnB,CAAC"}

package/dist/lib/runtime/account-health-check.d.ts

@@ -0,0 +1,8 @@
+import type { ModelFamily } from "../prompts/codex.js";
+import type { AccountStorageV3 } from "../storage.js";
+import type { TokenResult } from "../types.js";
+export declare function clampRuntimeActiveIndices(storage: AccountStorageV3, modelFamilies: readonly ModelFamily[]): void;
+export declare function isRuntimeFlaggableFailure(failure: Extract<TokenResult, {
+    type: "failed";
+}>): boolean;
+//# sourceMappingURL=account-health-check.d.ts.map

package/dist/lib/runtime/account-health-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-health-check.d.ts","sourceRoot":"","sources":["../../../lib/runtime/account-health-check.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,wBAAgB,yBAAyB,CACxC,OAAO,EAAE,gBAAgB,EACzB,aAAa,EAAE,SAAS,WAAW,EAAE,GACnC,IAAI,CAqBN;AAED,wBAAgB,yBAAyB,CACxC,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC,GAC/C,OAAO,CAUT"}

package/dist/lib/runtime/account-health-check.js

@@ -0,0 +1,30 @@
+export function clampRuntimeActiveIndices(storage, modelFamilies) {
+    const count = storage.accounts.length;
+    if (count === 0) {
+        storage.activeIndex = 0;
+        storage.activeIndexByFamily = {};
+        return;
+    }
+    storage.activeIndex = Math.max(0, Math.min(storage.activeIndex, count - 1));
+    storage.activeIndexByFamily = storage.activeIndexByFamily ?? {};
+    for (const family of modelFamilies) {
+        const raw = storage.activeIndexByFamily[family];
+        const candidate = typeof raw === "number" && Number.isFinite(raw)
+            ? raw
+            : storage.activeIndex;
+        storage.activeIndexByFamily[family] = Math.max(0, Math.min(candidate, count - 1));
+    }
+}
+export function isRuntimeFlaggableFailure(failure) {
+    if (failure.reason === "missing_refresh")
+        return true;
+    if (failure.statusCode === 401)
+        return true;
+    if (failure.statusCode !== 400)
+        return false;
+    const message = (failure.message ?? "").toLowerCase();
+    return (message.includes("invalid_grant") ||
+        message.includes("invalid refresh") ||
+        message.includes("token has been revoked"));
+}
+//# sourceMappingURL=account-health-check.js.map

package/dist/lib/runtime/account-health-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-health-check.js","sourceRoot":"","sources":["../../../lib/runtime/account-health-check.ts"],"names":[],"mappings":"AAIA,MAAM,UAAU,yBAAyB,CACxC,OAAyB,EACzB,aAAqC;IAErC,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IACtC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QACjB,OAAO,CAAC,WAAW,GAAG,CAAC,CAAC;QACxB,OAAO,CAAC,mBAAmB,GAAG,EAAE,CAAC;QACjC,OAAO;IACR,CAAC;IAED,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5E,OAAO,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,IAAI,EAAE,CAAC;IAChE,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,SAAS,GACd,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC9C,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QACxB,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAC7C,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAC9B,CAAC;IACH,CAAC;AACF,CAAC;AAED,MAAM,UAAU,yBAAyB,CACxC,OAAiD;IAEjD,IAAI,OAAO,CAAC,MAAM,KAAK,iBAAiB;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,OAAO,CAAC,UAAU,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,OAAO,CAAC,UAAU,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACtD,OAAO,CACN,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;QACjC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QACnC,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAC1C,CAAC;AACH,CAAC"}

package/dist/lib/runtime/account-manager-cache-entry.d.ts

@@ -0,0 +1,25 @@
+import type { OAuthAuthDetails } from "../types.js";
+export declare function invalidateAccountManagerCacheEntry<TManager>(params: {
+    invalidateAccountManagerCacheState: () => {
+        cachedAccountManager: null;
+        accountManagerPromise: null;
+    };
+    setCachedAccountManager: (manager: TManager | null) => void;
+    setAccountManagerPromise: (promise: Promise<TManager> | null) => void;
+}): void;
+export declare function reloadAccountManagerFromDiskEntry<TManager>(params: {
+    authFallback?: OAuthAuthDetails;
+    currentReloadInFlight: Promise<TManager> | null;
+    reloadAccountManagerFromDiskState: (args: {
+        currentReloadInFlight: Promise<TManager> | null;
+        loadFromDisk: (authFallback?: OAuthAuthDetails) => Promise<TManager>;
+        authFallback?: OAuthAuthDetails;
+        onLoaded: (manager: TManager) => void;
+        onSettled: () => void;
+    }) => Promise<TManager>;
+    loadFromDisk: (authFallback?: OAuthAuthDetails) => Promise<TManager>;
+    onLoaded: (manager: TManager) => void;
+    onSettled: () => void;
+    setReloadInFlight: (promise: Promise<TManager>) => void;
+}): Promise<TManager>;
+//# sourceMappingURL=account-manager-cache-entry.d.ts.map

package/dist/lib/runtime/account-manager-cache-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-manager-cache-entry.d.ts","sourceRoot":"","sources":["../../../lib/runtime/account-manager-cache-entry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,wBAAgB,kCAAkC,CAAC,QAAQ,EAAE,MAAM,EAAE;IACpE,kCAAkC,EAAE,MAAM;QACzC,oBAAoB,EAAE,IAAI,CAAC;QAC3B,qBAAqB,EAAE,IAAI,CAAC;KAC5B,CAAC;IACF,uBAAuB,EAAE,CAAC,OAAO,EAAE,QAAQ,GAAG,IAAI,KAAK,IAAI,CAAC;IAC5D,wBAAwB,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,KAAK,IAAI,CAAC;CACtE,GAAG,IAAI,CAIP;AAED,wBAAsB,iCAAiC,CAAC,QAAQ,EAAE,MAAM,EAAE;IACzE,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,qBAAqB,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;IAChD,iCAAiC,EAAE,CAAC,IAAI,EAAE;QACzC,qBAAqB,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;QAChD,YAAY,EAAE,CAAC,YAAY,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;QACrE,YAAY,CAAC,EAAE,gBAAgB,CAAC;QAChC,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,IAAI,CAAC;QACtC,SAAS,EAAE,MAAM,IAAI,CAAC;KACtB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxB,YAAY,EAAE,CAAC,YAAY,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrE,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,IAAI,CAAC;IACtC,SAAS,EAAE,MAAM,IAAI,CAAC;IACtB,iBAAiB,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC;CACxD,GAAG,OAAO,CAAC,QAAQ,CAAC,CAUpB"}

package/dist/lib/runtime/account-manager-cache-entry.js

@@ -0,0 +1,17 @@
+export function invalidateAccountManagerCacheEntry(params) {
+    const next = params.invalidateAccountManagerCacheState();
+    params.setCachedAccountManager(next.cachedAccountManager);
+    params.setAccountManagerPromise(next.accountManagerPromise);
+}
+export async function reloadAccountManagerFromDiskEntry(params) {
+    const inFlight = params.reloadAccountManagerFromDiskState({
+        currentReloadInFlight: params.currentReloadInFlight,
+        loadFromDisk: params.loadFromDisk,
+        authFallback: params.authFallback,
+        onLoaded: params.onLoaded,
+        onSettled: params.onSettled,
+    });
+    params.setReloadInFlight(inFlight);
+    return inFlight;
+}
+//# sourceMappingURL=account-manager-cache-entry.js.map

package/dist/lib/runtime/account-manager-cache-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-manager-cache-entry.js","sourceRoot":"","sources":["../../../lib/runtime/account-manager-cache-entry.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,kCAAkC,CAAW,MAO5D;IACA,MAAM,IAAI,GAAG,MAAM,CAAC,kCAAkC,EAAE,CAAC;IACzD,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC1D,MAAM,CAAC,wBAAwB,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAW,MAcjE;IACA,MAAM,QAAQ,GAAG,MAAM,CAAC,iCAAiC,CAAC;QACzD,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;QACnD,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;KAC3B,CAAC,CAAC;IACH,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACnC,OAAO,QAAQ,CAAC;AACjB,CAAC"}

package/dist/lib/runtime/account-manager-cache.d.ts

@@ -0,0 +1,25 @@
+import type { OAuthAuthDetails } from "../types.js";
+export declare function invalidateRuntimeAccountManagerCache(deps: {
+    setCachedAccountManager: (value: unknown) => void;
+    setAccountManagerPromise: (value: Promise<unknown> | null) => void;
+}): void;
+export declare function invalidateAccountManagerCacheState(): {
+    cachedAccountManager: null;
+    accountManagerPromise: null;
+};
+export declare function reloadRuntimeAccountManager<TAccountManager>(deps: {
+    currentReloadInFlight: Promise<TAccountManager> | null;
+    loadFromDisk: (authFallback?: OAuthAuthDetails) => Promise<TAccountManager>;
+    setCachedAccountManager: (value: TAccountManager) => void;
+    setAccountManagerPromise: (value: Promise<TAccountManager> | null) => void;
+    setReloadInFlight: (value: Promise<TAccountManager> | null) => void;
+    authFallback?: OAuthAuthDetails;
+}): Promise<TAccountManager>;
+export declare function reloadAccountManagerFromDiskState<TManager>(params: {
+    currentReloadInFlight: Promise<TManager> | null;
+    loadFromDisk: (authFallback?: OAuthAuthDetails) => Promise<TManager>;
+    authFallback?: OAuthAuthDetails;
+    onLoaded: (manager: TManager) => void;
+    onSettled: () => void;
+}): Promise<TManager>;
+//# sourceMappingURL=account-manager-cache.d.ts.map

package/dist/lib/runtime/account-manager-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-manager-cache.d.ts","sourceRoot":"","sources":["../../../lib/runtime/account-manager-cache.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,wBAAgB,oCAAoC,CAAC,IAAI,EAAE;IAC1D,uBAAuB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IAClD,wBAAwB,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,KAAK,IAAI,CAAC;CACnE,GAAG,IAAI,CAGP;AAED,wBAAgB,kCAAkC,IAAI;IACrD,oBAAoB,EAAE,IAAI,CAAC;IAC3B,qBAAqB,EAAE,IAAI,CAAC;CAC5B,CAKA;AAED,wBAAgB,2BAA2B,CAAC,eAAe,EAAE,IAAI,EAAE;IAClE,qBAAqB,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC;IACvD,YAAY,EAAE,CAAC,YAAY,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5E,uBAAuB,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;IAC1D,wBAAwB,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,KAAK,IAAI,CAAC;IAC3E,iBAAiB,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,KAAK,IAAI,CAAC;IACpE,YAAY,CAAC,EAAE,gBAAgB,CAAC;CAChC,GAAG,OAAO,CAAC,eAAe,CAAC,CAkB3B;AAED,wBAAsB,iCAAiC,CAAC,QAAQ,EAAE,MAAM,EAAE;IACzE,qBAAqB,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;IAChD,YAAY,EAAE,CAAC,YAAY,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrE,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,IAAI,CAAC;IACtC,SAAS,EAAE,MAAM,IAAI,CAAC;CACtB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAgBpB"}

package/dist/lib/runtime/account-manager-cache.js

@@ -0,0 +1,44 @@
+export function invalidateRuntimeAccountManagerCache(deps) {
+    deps.setCachedAccountManager(null);
+    deps.setAccountManagerPromise(null);
+}
+export function invalidateAccountManagerCacheState() {
+    return {
+        cachedAccountManager: null,
+        accountManagerPromise: null,
+    };
+}
+export function reloadRuntimeAccountManager(deps) {
+    // The caller must pass a fresh snapshot of the shared in-flight promise.
+    // Dedup only holds if setReloadInFlight runs before any awaited work below.
+    if (deps.currentReloadInFlight) {
+        return deps.currentReloadInFlight;
+    }
+    const reloadInFlight = (async () => {
+        const reloaded = await deps.loadFromDisk(deps.authFallback);
+        deps.setCachedAccountManager(reloaded);
+        deps.setAccountManagerPromise(Promise.resolve(reloaded));
+        return reloaded;
+    })().finally(() => {
+        deps.setReloadInFlight(null);
+    });
+    deps.setReloadInFlight(reloadInFlight);
+    return reloadInFlight;
+}
+export async function reloadAccountManagerFromDiskState(params) {
+    if (params.currentReloadInFlight) {
+        return params.currentReloadInFlight;
+    }
+    const inFlight = (async () => {
+        const reloaded = await params.loadFromDisk(params.authFallback);
+        params.onLoaded(reloaded);
+        return reloaded;
+    })();
+    try {
+        return await inFlight;
+    }
+    finally {
+        params.onSettled();
+    }
+}
+//# sourceMappingURL=account-manager-cache.js.map

package/dist/lib/runtime/account-manager-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-manager-cache.js","sourceRoot":"","sources":["../../../lib/runtime/account-manager-cache.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,oCAAoC,CAAC,IAGpD;IACA,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,kCAAkC;IAIjD,OAAO;QACN,oBAAoB,EAAE,IAAI;QAC1B,qBAAqB,EAAE,IAAI;KAC3B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAkB,IAO5D;IACA,yEAAyE;IACzE,4EAA4E;IAC5E,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC,qBAAqB,CAAC;IACnC,CAAC;IAED,MAAM,cAAc,GAAG,CAAC,KAAK,IAAI,EAAE;QAClC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5D,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzD,OAAO,QAAQ,CAAC;IACjB,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;QACjB,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;IACvC,OAAO,cAAc,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAW,MAMjE;IACA,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,qBAAqB,CAAC;IACrC,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;QAC5B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAChE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC1B,OAAO,QAAQ,CAAC;IACjB,CAAC,CAAC,EAAE,CAAC;IAEL,IAAI,CAAC;QACJ,OAAO,MAAM,QAAQ,CAAC;IACvB,CAAC;YAAS,CAAC;QACV,MAAM,CAAC,SAAS,EAAE,CAAC;IACpB,CAAC;AACF,CAAC"}

package/dist/lib/runtime/account-pool.d.ts

@@ -0,0 +1,23 @@
+import type { Workspace } from "../accounts.js";
+import type { ModelFamily } from "../prompts/codex.js";
+import type { AccountStorageV3 } from "../storage.js";
+import type { AccountIdSource, TokenResult } from "../types.js";
+export type TokenSuccessWithAccount = Extract<TokenResult, {
+    type: "success";
+}> & {
+    accountIdOverride?: string;
+    accountIdSource?: AccountIdSource;
+    accountLabel?: string;
+    workspaces?: Workspace[];
+};
+export declare function persistAccountPoolResults(params: {
+    results: TokenSuccessWithAccount[];
+    replaceAll?: boolean;
+    modelFamilies: readonly ModelFamily[];
+    withAccountStorageTransaction: <T>(handler: (loadedStorage: AccountStorageV3 | null, persist: (storage: AccountStorageV3) => Promise<void>) => Promise<T>) => Promise<T>;
+    findMatchingAccountIndex: typeof import("../storage.js").findMatchingAccountIndex;
+    extractAccountId: (accessToken: string) => string | undefined;
+    extractAccountEmail: (accessToken: string, idToken?: string) => string | undefined;
+    sanitizeEmail: (email: string | undefined) => string | undefined;
+}): Promise<void>;
+//# sourceMappingURL=account-pool.d.ts.map

package/dist/lib/runtime/account-pool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-pool.d.ts","sourceRoot":"","sources":["../../../lib/runtime/account-pool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAqB,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACzE,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEhE,MAAM,MAAM,uBAAuB,GAAG,OAAO,CAC5C,WAAW,EACX;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CACnB,GAAG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;CACzB,CAAC;AAEF,wBAAsB,yBAAyB,CAAC,MAAM,EAAE;IACvD,OAAO,EAAE,uBAAuB,EAAE,CAAC;IACnC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,SAAS,WAAW,EAAE,CAAC;IACtC,6BAA6B,EAAE,CAAC,CAAC,EAChC,OAAO,EAAE,CACR,aAAa,EAAE,gBAAgB,GAAG,IAAI,EACtC,OAAO,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,KACjD,OAAO,CAAC,CAAC,CAAC,KACX,OAAO,CAAC,CAAC,CAAC,CAAC;IAChB,wBAAwB,EAAE,cAAc,eAAe,EAAE,wBAAwB,CAAC;IAClF,gBAAgB,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IAC9D,mBAAmB,EAAE,CACpB,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,MAAM,KACZ,MAAM,GAAG,SAAS,CAAC;IACxB,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,KAAK,MAAM,GAAG,SAAS,CAAC;CACjE,GAAG,OAAO,CAAC,IAAI,CAAC,CA4KhB"}

package/dist/lib/runtime/account-pool.js

@@ -0,0 +1,138 @@
+export async function persistAccountPoolResults(params) {
+    const { results, replaceAll = false } = params;
+    if (results.length === 0)
+        return;
+    await params.withAccountStorageTransaction(async (loadedStorage, persist) => {
+        const now = Date.now();
+        const stored = replaceAll ? null : loadedStorage;
+        const accounts = stored?.accounts ? [...stored.accounts] : [];
+        for (const result of results) {
+            const accountId = result.accountIdOverride ?? params.extractAccountId(result.access);
+            const accountIdSource = accountId
+                ? (result.accountIdSource ??
+                    (result.accountIdOverride ? "manual" : "token"))
+                : undefined;
+            const accountLabel = result.accountLabel;
+            const accountEmail = params.sanitizeEmail(params.extractAccountEmail(result.access, result.idToken));
+            const existingIndex = params.findMatchingAccountIndex(accounts, {
+                accountId,
+                email: accountEmail,
+                refreshToken: result.refresh,
+            }, {
+                allowUniqueAccountIdFallbackWithoutEmail: true,
+            });
+            if (existingIndex === undefined) {
+                const initialWorkspaceIndex = result.workspaces && result.workspaces.length > 0
+                    ? (() => {
+                        if (accountId) {
+                            const matchingWorkspaceIndex = result.workspaces.findIndex((workspace) => workspace.id === accountId);
+                            if (matchingWorkspaceIndex >= 0) {
+                                return matchingWorkspaceIndex;
+                            }
+                        }
+                        const firstEnabledWorkspaceIndex = result.workspaces.findIndex((workspace) => workspace.enabled !== false);
+                        return firstEnabledWorkspaceIndex >= 0
+                            ? firstEnabledWorkspaceIndex
+                            : 0;
+                    })()
+                    : undefined;
+                accounts.push({
+                    accountId,
+                    accountIdSource,
+                    accountLabel,
+                    email: accountEmail,
+                    refreshToken: result.refresh,
+                    accessToken: result.access,
+                    expiresAt: result.expires,
+                    addedAt: now,
+                    lastUsed: now,
+                    workspaces: result.workspaces,
+                    currentWorkspaceIndex: initialWorkspaceIndex,
+                });
+                continue;
+            }
+            const existing = accounts[existingIndex];
+            if (!existing)
+                continue;
+            const nextEmail = accountEmail ?? params.sanitizeEmail(existing.email);
+            const nextAccountId = accountId ?? existing.accountId;
+            const nextAccountIdSource = accountId
+                ? (accountIdSource ?? existing.accountIdSource)
+                : existing.accountIdSource;
+            const nextAccountLabel = accountLabel ?? existing.accountLabel;
+            const mergedWorkspaces = result.workspaces
+                ? result.workspaces.map((newWs) => {
+                    const existingWs = existing.workspaces?.find((w) => w.id === newWs.id);
+                    return existingWs
+                        ? {
+                            ...newWs,
+                            enabled: existingWs.enabled,
+                            disabledAt: existingWs.disabledAt,
+                        }
+                        : newWs;
+                })
+                : existing.workspaces;
+            const currentWorkspaceId = existing.workspaces?.[typeof existing.currentWorkspaceIndex === "number"
+                ? existing.currentWorkspaceIndex
+                : 0]?.id;
+            const nextCurrentWorkspaceIndex = mergedWorkspaces && mergedWorkspaces.length > 0
+                ? (() => {
+                    if (currentWorkspaceId) {
+                        const matchingWorkspaceIndex = mergedWorkspaces.findIndex((workspace) => workspace.id === currentWorkspaceId);
+                        if (matchingWorkspaceIndex >= 0) {
+                            return matchingWorkspaceIndex;
+                        }
+                    }
+                    const defaultWorkspaceIndex = mergedWorkspaces.findIndex((workspace) => workspace.isDefault === true);
+                    if (defaultWorkspaceIndex >= 0) {
+                        return defaultWorkspaceIndex;
+                    }
+                    const firstEnabledWorkspaceIndex = mergedWorkspaces.findIndex((workspace) => workspace.enabled !== false);
+                    return firstEnabledWorkspaceIndex >= 0
+                        ? firstEnabledWorkspaceIndex
+                        : 0;
+                })()
+                : existing.currentWorkspaceIndex;
+            accounts[existingIndex] = {
+                ...existing,
+                accountId: nextAccountId,
+                accountIdSource: nextAccountIdSource,
+                accountLabel: nextAccountLabel,
+                email: nextEmail,
+                refreshToken: result.refresh,
+                accessToken: result.access,
+                expiresAt: result.expires,
+                lastUsed: now,
+                workspaces: mergedWorkspaces,
+                currentWorkspaceIndex: nextCurrentWorkspaceIndex,
+            };
+        }
+        if (accounts.length === 0)
+            return;
+        const activeIndex = replaceAll
+            ? 0
+            : typeof stored?.activeIndex === "number" &&
+                Number.isFinite(stored.activeIndex)
+                ? stored.activeIndex
+                : 0;
+        const clampedActiveIndex = Math.max(0, Math.min(activeIndex, accounts.length - 1));
+        const activeIndexByFamily = {};
+        for (const family of params.modelFamilies) {
+            const storedFamilyIndex = stored?.activeIndexByFamily?.[family];
+            const rawFamilyIndex = replaceAll
+                ? 0
+                : typeof storedFamilyIndex === "number" &&
+                    Number.isFinite(storedFamilyIndex)
+                    ? storedFamilyIndex
+                    : clampedActiveIndex;
+            activeIndexByFamily[family] = Math.max(0, Math.min(Math.floor(rawFamilyIndex), accounts.length - 1));
+        }
+        await persist({
+            version: 3,
+            accounts: accounts,
+            activeIndex: clampedActiveIndex,
+            activeIndexByFamily,
+        });
+    });
+}
+//# sourceMappingURL=account-pool.js.map