codex-multi-auth 2.0.1 → 2.1.0

package/dist/lib/auth/device-auth.js

@@ -0,0 +1,325 @@
+import { CLIENT_ID, exchangeAuthorizationCode, sanitizeOAuthResponseBodyForLog, } from "./auth.js";
+export const DEVICE_AUTH_BASE_URL = "https://auth.openai.com";
+export const DEVICE_AUTH_API_BASE_URL = `${DEVICE_AUTH_BASE_URL}/api/accounts`;
+export const DEVICE_AUTH_VERIFICATION_URL = `${DEVICE_AUTH_BASE_URL}/codex/device`;
+export const DEVICE_AUTH_REDIRECT_URI = `${DEVICE_AUTH_BASE_URL}/deviceauth/callback`;
+export const DEVICE_AUTH_TIMEOUT_MS = 15 * 60 * 1000;
+export const DEVICE_AUTH_DEFAULT_INTERVAL_MS = 5_000;
+const DEVICE_AUTH_ABORTED_MESSAGE = "aborted";
+const DEVICE_AUTH_TRANSIENT_PENDING_STATUSES = new Set([
+    408,
+    429,
+    502,
+    503,
+    504,
+]);
+function getFetch(options) {
+    return options.fetchImpl ?? fetch;
+}
+function getNow(options) {
+    return options.now ?? Date.now;
+}
+function unrefTimer(timer) {
+    timer.unref?.();
+}
+function getSleep(options) {
+    return (options.sleep ??
+        ((ms) => new Promise((resolve) => {
+            const timeout = setTimeout(resolve, ms);
+            unrefTimer(timeout);
+        })));
+}
+function getRandom(options) {
+    return options.random ?? Math.random;
+}
+function failedResult(reason, message, statusCode) {
+    return {
+        type: "failed",
+        reason,
+        statusCode,
+        message,
+    };
+}
+function createAbortError() {
+    const error = new Error(DEVICE_AUTH_ABORTED_MESSAGE);
+    error.name = "AbortError";
+    return error;
+}
+function isAbortError(error) {
+    return error instanceof Error && error.name === "AbortError";
+}
+function abortedResult() {
+    return failedResult("network_error", DEVICE_AUTH_ABORTED_MESSAGE);
+}
+function sleepWithAbort(ms, options) {
+    const signal = options.signal;
+    if (!signal) {
+        return getSleep(options)(ms);
+    }
+    if (signal.aborted) {
+        return Promise.reject(createAbortError());
+    }
+    const customSleep = options.sleep;
+    if (customSleep) {
+        let removeAbortListener = () => { };
+        const abortPromise = new Promise((_resolve, reject) => {
+            const onAbort = () => reject(createAbortError());
+            signal.addEventListener("abort", onAbort, { once: true });
+            removeAbortListener = () => signal.removeEventListener("abort", onAbort);
+        });
+        return Promise.race([customSleep(ms), abortPromise]).finally(removeAbortListener);
+    }
+    return new Promise((resolve, reject) => {
+        const onAbort = () => {
+            clearTimeout(timeout);
+            cleanup();
+            reject(createAbortError());
+        };
+        const cleanup = () => signal.removeEventListener("abort", onAbort);
+        const timeout = setTimeout(() => {
+            cleanup();
+            resolve();
+        }, ms);
+        unrefTimer(timeout);
+        signal.addEventListener("abort", onAbort, { once: true });
+    });
+}
+function formatWaitBudget(timeoutMs) {
+    const totalSeconds = Math.max(1, Math.ceil(timeoutMs / 1000));
+    if (totalSeconds < 60) {
+        return `${totalSeconds} second${totalSeconds === 1 ? "" : "s"}`;
+    }
+    const totalMinutes = Math.ceil(totalSeconds / 60);
+    return `${totalMinutes} minute${totalMinutes === 1 ? "" : "s"}`;
+}
+function isPendingStatus(status) {
+    return (status === 403 ||
+        status === 404 ||
+        DEVICE_AUTH_TRANSIENT_PENDING_STATUSES.has(status));
+}
+function parseRetryAfterMs(value, nowMs) {
+    if (!value)
+        return null;
+    const trimmed = value.trim();
+    if (!trimmed)
+        return null;
+    const seconds = Number(trimmed);
+    if (Number.isFinite(seconds) && seconds >= 0) {
+        return Math.ceil(seconds * 1000);
+    }
+    const dateMs = Date.parse(trimmed);
+    if (Number.isFinite(dateMs)) {
+        return Math.max(0, dateMs - nowMs);
+    }
+    return null;
+}
+function applyLightJitter(delayMs, options) {
+    const jitterRatio = 1 + (getRandom(options)() - 0.5) * 0.2;
+    return Math.max(1_000, Math.round(delayMs * jitterRatio));
+}
+function resolvePollDelayMs(response, deviceCode, nowMs, options) {
+    const retryAfterMs = parseRetryAfterMs(response.headers.get("retry-after"), nowMs);
+    if (retryAfterMs !== null) {
+        return Math.max(1_000, retryAfterMs);
+    }
+    if (response.status === 403 || response.status === 404) {
+        return deviceCode.intervalMs;
+    }
+    return applyLightJitter(deviceCode.intervalMs, options);
+}
+function asRecord(value) {
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+        return null;
+    }
+    return value;
+}
+async function readJsonRecord(response) {
+    const text = await response.text().catch(() => "");
+    if (!text.trim()) {
+        return null;
+    }
+    try {
+        return asRecord(JSON.parse(text));
+    }
+    catch {
+        return null;
+    }
+}
+function parseIntervalMs(value) {
+    if (typeof value === "number" && Number.isFinite(value) && value > 0) {
+        return Math.trunc(value * 1000);
+    }
+    if (typeof value === "string") {
+        const parsed = Number.parseFloat(value.trim());
+        if (Number.isFinite(parsed) && parsed > 0) {
+            return Math.trunc(parsed * 1000);
+        }
+    }
+    return DEVICE_AUTH_DEFAULT_INTERVAL_MS;
+}
+function parseExpirationMs(value, nowMs) {
+    if (typeof value === "number" && Number.isFinite(value) && value > 0) {
+        return nowMs + Math.trunc(value * 1000);
+    }
+    if (typeof value === "string") {
+        const trimmed = value.trim();
+        if (/^\d+(?:\.\d+)?$/.test(trimmed)) {
+            const seconds = Number.parseFloat(trimmed);
+            return nowMs + Math.trunc(seconds * 1000);
+        }
+        const dateMs = Date.parse(trimmed);
+        if (Number.isFinite(dateMs)) {
+            return dateMs;
+        }
+    }
+    return null;
+}
+function parseNonEmptyString(value) {
+    if (typeof value !== "string") {
+        return null;
+    }
+    const trimmed = value.trim();
+    return trimmed.length > 0 ? trimmed : null;
+}
+function parseDeviceCodePayload(payload, nowMs) {
+    const deviceAuthId = parseNonEmptyString(payload.device_auth_id);
+    const userCode = parseNonEmptyString(payload.user_code) ??
+        parseNonEmptyString(payload.usercode);
+    if (!deviceAuthId || !userCode) {
+        return null;
+    }
+    const expiresAtMs = parseExpirationMs(payload.expires_at, nowMs) ??
+        parseExpirationMs(payload.expires_in, nowMs);
+    return {
+        verificationUrl: DEVICE_AUTH_VERIFICATION_URL,
+        userCode,
+        deviceAuthId,
+        intervalMs: parseIntervalMs(payload.interval),
+        ...(expiresAtMs === null ? {} : { expiresAtMs }),
+    };
+}
+function parseCompletionPayload(payload) {
+    const authorizationCode = parseNonEmptyString(payload.authorization_code);
+    const codeVerifier = parseNonEmptyString(payload.code_verifier);
+    if (!authorizationCode || !codeVerifier) {
+        return null;
+    }
+    // OpenAI Codex's device-code endpoint intentionally returns the PKCE
+    // verifier with the issued authorization code. This mirrors the upstream
+    // Codex CLI flow. The verifier is never persisted to account storage; keep
+    // this poll response out of logs and only hand it directly to the token
+    // exchange.
+    return { authorizationCode, codeVerifier };
+}
+async function readFailureText(response) {
+    const text = await response.text().catch(() => "");
+    return sanitizeOAuthResponseBodyForLog(text);
+}
+export async function requestDeviceAuthorization(options = {}) {
+    if (options.signal?.aborted) {
+        return abortedResult();
+    }
+    try {
+        const response = await getFetch(options)(`${DEVICE_AUTH_API_BASE_URL}/deviceauth/usercode`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            signal: options.signal,
+            body: JSON.stringify({ client_id: CLIENT_ID }),
+        });
+        if (!response.ok) {
+            if (response.status === 404) {
+                return failedResult("http_error", "Device auth login is not enabled for this Codex server. Use browser login or --manual.", response.status);
+            }
+            const safeText = await readFailureText(response);
+            return failedResult("http_error", safeText || `Device code request failed with status ${response.status}`, response.status);
+        }
+        const payload = await readJsonRecord(response);
+        const deviceCode = payload
+            ? parseDeviceCodePayload(payload, getNow(options)())
+            : null;
+        if (!deviceCode) {
+            return failedResult("invalid_response", "Device code request response failed schema validation");
+        }
+        return { type: "success", deviceCode };
+    }
+    catch (error) {
+        if (isAbortError(error) || options.signal?.aborted) {
+            return abortedResult();
+        }
+        return failedResult("network_error", error instanceof Error ? error.message : String(error));
+    }
+}
+export function printDeviceAuthorizationPrompt(deviceCode, log = console.log, timeoutMs = DEVICE_AUTH_TIMEOUT_MS, nowMs = Date.now()) {
+    const effectiveTimeoutMs = deviceCode.expiresAtMs === undefined
+        ? timeoutMs
+        : Math.min(timeoutMs, Math.max(0, deviceCode.expiresAtMs - nowMs));
+    log("Device auth login");
+    log(`Open: ${deviceCode.verificationUrl}`);
+    log(`Code: ${deviceCode.userCode}`);
+    log(`This code expires in ${formatWaitBudget(effectiveTimeoutMs)}. Never share it.`);
+}
+export async function pollDeviceAuthorization(deviceCode, options = {}) {
+    const now = getNow(options);
+    const startMs = now();
+    const timeoutMs = options.timeoutMs ?? DEVICE_AUTH_TIMEOUT_MS;
+    const deadline = Math.min(startMs + timeoutMs, deviceCode.expiresAtMs ?? Number.POSITIVE_INFINITY);
+    const effectiveTimeoutMs = Math.max(0, deadline - startMs);
+    try {
+        while (true) {
+            if (options.signal?.aborted) {
+                return abortedResult();
+            }
+            const response = await getFetch(options)(`${DEVICE_AUTH_API_BASE_URL}/deviceauth/token`, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                signal: options.signal,
+                body: JSON.stringify({
+                    device_auth_id: deviceCode.deviceAuthId,
+                    user_code: deviceCode.userCode,
+                }),
+            });
+            if (response.ok) {
+                const payload = await readJsonRecord(response);
+                const completion = payload ? parseCompletionPayload(payload) : null;
+                if (!completion) {
+                    return failedResult("invalid_response", "Device auth token response failed schema validation");
+                }
+                return { type: "success", completion };
+            }
+            if (isPendingStatus(response.status)) {
+                const nowMs = now();
+                const remainingMs = deadline - nowMs;
+                if (remainingMs <= 0) {
+                    return failedResult("timeout", `Device auth timed out after ${formatWaitBudget(effectiveTimeoutMs)}`);
+                }
+                const delayMs = resolvePollDelayMs(response, deviceCode, nowMs, options);
+                await sleepWithAbort(Math.min(delayMs, remainingMs), options);
+                continue;
+            }
+            const safeText = await readFailureText(response);
+            return failedResult("http_error", safeText || `Device auth failed with status ${response.status}`, response.status);
+        }
+    }
+    catch (error) {
+        if (isAbortError(error) || options.signal?.aborted) {
+            return abortedResult();
+        }
+        return failedResult("network_error", error instanceof Error ? error.message : String(error));
+    }
+}
+export async function runDeviceAuthFlow(options = {}) {
+    const deviceCodeResult = await requestDeviceAuthorization(options);
+    if (deviceCodeResult.type !== "success") {
+        return deviceCodeResult;
+    }
+    if (options.signal?.aborted) {
+        return abortedResult();
+    }
+    printDeviceAuthorizationPrompt(deviceCodeResult.deviceCode, options.log ?? console.log, options.timeoutMs ?? DEVICE_AUTH_TIMEOUT_MS, getNow(options)());
+    const completionResult = await pollDeviceAuthorization(deviceCodeResult.deviceCode, options);
+    if (completionResult.type !== "success") {
+        return completionResult;
+    }
+    return exchangeAuthorizationCode(completionResult.completion.authorizationCode, completionResult.completion.codeVerifier, DEVICE_AUTH_REDIRECT_URI);
+}
+//# sourceMappingURL=device-auth.js.map

package/dist/lib/auth/device-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-auth.js","sourceRoot":"","sources":["../../../lib/auth/device-auth.ts"],"names":[],"mappings":"AACA,OAAO,EACN,SAAS,EACT,yBAAyB,EACzB,+BAA+B,GAC/B,MAAM,WAAW,CAAC;AAEnB,MAAM,CAAC,MAAM,oBAAoB,GAAG,yBAAyB,CAAC;AAC9D,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,oBAAoB,eAAe,CAAC;AAC/E,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,oBAAoB,eAAe,CAAC;AACnF,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,oBAAoB,sBAAsB,CAAC;AACtF,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACrD,MAAM,CAAC,MAAM,+BAA+B,GAAG,KAAK,CAAC;AACrD,MAAM,2BAA2B,GAAG,SAAS,CAAC;AAC9C,MAAM,sCAAsC,GAAG,IAAI,GAAG,CAAC;IACtD,GAAG;IACH,GAAG;IACH,GAAG;IACH,GAAG;IACH,GAAG;CACH,CAAC,CAAC;AAmCH,SAAS,QAAQ,CAAC,OAA8B;IAC/C,OAAO,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;AACnC,CAAC;AAED,SAAS,MAAM,CAAC,OAA8B;IAC7C,OAAO,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;AAChC,CAAC;AAED,SAAS,UAAU,CAAC,KAAoC;IACtD,KAAgC,CAAC,KAAK,EAAE,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,QAAQ,CAAC,OAA8B;IAC/C,OAAO,CACN,OAAO,CAAC,KAAK;QACb,CAAC,CAAC,EAAU,EAAE,EAAE,CACf,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACxC,UAAU,CAAC,OAAO,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC,CACJ,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,OAA8B;IAChD,OAAO,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;AACtC,CAAC;AAED,SAAS,YAAY,CACpB,MAA0D,EAC1D,OAAe,EACf,UAAmB;IAEnB,OAAO;QACN,IAAI,EAAE,QAAQ;QACd,MAAM;QACN,UAAU;QACV,OAAO;KACP,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB;IACxB,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,GAAG,YAAY,CAAC;IAC1B,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IACnC,OAAO,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC;AAC9D,CAAC;AAED,SAAS,aAAa;IACrB,OAAO,YAAY,CAAC,eAAe,EAAE,2BAA2B,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,cAAc,CACtB,EAAU,EACV,OAA8B;IAE9B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;IAClC,IAAI,WAAW,EAAE,CAAC;QACjB,IAAI,mBAAmB,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;QACnC,MAAM,YAAY,GAAG,IAAI,OAAO,CAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;YAC3D,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;YACjD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,mBAAmB,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAC3D,mBAAmB,CACnB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC5C,MAAM,OAAO,GAAG,GAAG,EAAE;YACpB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC5B,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC/B,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;QACX,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,UAAU,CAAC,OAAO,CAAC,CAAC;QACpB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB;IAC1C,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC;IAC9D,IAAI,YAAY,GAAG,EAAE,EAAE,CAAC;QACvB,OAAO,GAAG,YAAY,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC,CAAC;IAClD,OAAO,GAAG,YAAY,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACtC,OAAO,CACN,MAAM,KAAK,GAAG;QACd,MAAM,KAAK,GAAG;QACd,sCAAsC,CAAC,GAAG,CAAC,MAAM,CAAC,CAClD,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAoB,EAAE,KAAa;IAC7D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CACxB,OAAe,EACf,OAA8B;IAE9B,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;IAC3D,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,kBAAkB,CAC1B,QAAkB,EAClB,UAA0B,EAC1B,KAAa,EACb,OAA8B;IAE9B,MAAM,YAAY,GAAG,iBAAiB,CACrC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EACnC,KAAK,CACL,CAAC;IACF,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACxD,OAAO,UAAU,CAAC,UAAU,CAAC;IAC9B,CAAC;IACD,OAAO,gBAAgB,CAAC,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO,KAAgC,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,QAAkB;IAC/C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,CAAC;QACJ,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACtE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;QAClC,CAAC;IACF,CAAC;IACD,OAAO,+BAA+B,CAAC;AACxC,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACtE,OAAO,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC3C,OAAO,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,OAAO,MAAM,CAAC;QACf,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,SAAS,sBAAsB,CAC9B,OAAgC,EAChC,KAAa;IAEb,MAAM,YAAY,GAAG,mBAAmB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACjE,MAAM,QAAQ,GACb,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC;QACtC,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,WAAW,GAChB,iBAAiB,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC;QAC5C,iBAAiB,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC9C,OAAO;QACN,eAAe,EAAE,4BAA4B;QAC7C,QAAQ;QACR,YAAY;QACZ,UAAU,EAAE,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC7C,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;KAChD,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC9B,OAAgC;IAEhC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC1E,MAAM,YAAY,GAAG,mBAAmB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAChE,IAAI,CAAC,iBAAiB,IAAI,CAAC,YAAY,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC;IACb,CAAC;IACD,qEAAqE;IACrE,yEAAyE;IACzE,2EAA2E;IAC3E,wEAAwE;IACxE,YAAY;IACZ,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,CAAC;AAC5C,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAkB;IAChD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACnD,OAAO,+BAA+B,CAAC,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC/C,UAAiC,EAAE;IAEnC,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QAC7B,OAAO,aAAa,EAAE,CAAC;IACxB,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CACvC,GAAG,wBAAwB,sBAAsB,EACjD;YACC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;SAC9C,CACD,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC7B,OAAO,YAAY,CAClB,YAAY,EACZ,wFAAwF,EACxF,QAAQ,CAAC,MAAM,CACf,CAAC;YACH,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;YACjD,OAAO,YAAY,CAClB,YAAY,EACZ,QAAQ,IAAI,0CAA0C,QAAQ,CAAC,MAAM,EAAE,EACvE,QAAQ,CAAC,MAAM,CACf,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,OAAO;YACzB,CAAC,CAAC,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACpD,CAAC,CAAC,IAAI,CAAC;QACR,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,OAAO,YAAY,CAClB,kBAAkB,EAClB,uDAAuD,CACvD,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACpD,OAAO,aAAa,EAAE,CAAC;QACxB,CAAC;QACD,OAAO,YAAY,CAClB,eAAe,EACf,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACtD,CAAC;IACH,CAAC;AACF,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC7C,UAA0B,EAC1B,MAAiC,OAAO,CAAC,GAAG,EAC5C,SAAS,GAAG,sBAAsB,EAClC,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE;IAElB,MAAM,kBAAkB,GACvB,UAAU,CAAC,WAAW,KAAK,SAAS;QACnC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC;IACrE,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACzB,GAAG,CAAC,SAAS,UAAU,CAAC,eAAe,EAAE,CAAC,CAAC;IAC3C,GAAG,CAAC,SAAS,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpC,GAAG,CACF,wBAAwB,gBAAgB,CAAC,kBAAkB,CAAC,mBAAmB,CAC/E,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,UAA0B,EAC1B,UAAiC,EAAE;IAEnC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;IACtB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,sBAAsB,CAAC;IAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CACxB,OAAO,GAAG,SAAS,EACnB,UAAU,CAAC,WAAW,IAAI,MAAM,CAAC,iBAAiB,CAClD,CAAC;IACF,MAAM,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,CAAC;IAE3D,IAAI,CAAC;QACJ,OAAO,IAAI,EAAE,CAAC;YACb,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBAC7B,OAAO,aAAa,EAAE,CAAC;YACxB,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CACvC,GAAG,wBAAwB,mBAAmB,EAC9C;gBACC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACpB,cAAc,EAAE,UAAU,CAAC,YAAY;oBACvC,SAAS,EAAE,UAAU,CAAC,QAAQ;iBAC9B,CAAC;aACF,CACD,CAAC;YAEF,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC;gBAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACpE,IAAI,CAAC,UAAU,EAAE,CAAC;oBACjB,OAAO,YAAY,CAClB,kBAAkB,EAClB,qDAAqD,CACrD,CAAC;gBACH,CAAC;gBACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;YACxC,CAAC;YAED,IAAI,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC;gBACpB,MAAM,WAAW,GAAG,QAAQ,GAAG,KAAK,CAAC;gBACrC,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;oBACtB,OAAO,YAAY,CAClB,SAAS,EACT,+BAA+B,gBAAgB,CAAC,kBAAkB,CAAC,EAAE,CACrE,CAAC;gBACH,CAAC;gBACD,MAAM,OAAO,GAAG,kBAAkB,CACjC,QAAQ,EACR,UAAU,EACV,KAAK,EACL,OAAO,CACP,CAAC;gBACF,MAAM,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC;gBAC9D,SAAS;YACV,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;YACjD,OAAO,YAAY,CAClB,YAAY,EACZ,QAAQ,IAAI,kCAAkC,QAAQ,CAAC,MAAM,EAAE,EAC/D,QAAQ,CAAC,MAAM,CACf,CAAC;QACH,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACpD,OAAO,aAAa,EAAE,CAAC;QACxB,CAAC;QACD,OAAO,YAAY,CAClB,eAAe,EACf,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACtD,CAAC;IACH,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,UAAiC,EAAE;IAEnC,MAAM,gBAAgB,GAAG,MAAM,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACnE,IAAI,gBAAgB,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,gBAAgB,CAAC;IACzB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QAC7B,OAAO,aAAa,EAAE,CAAC;IACxB,CAAC;IAED,8BAA8B,CAC7B,gBAAgB,CAAC,UAAU,EAC3B,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAC1B,OAAO,CAAC,SAAS,IAAI,sBAAsB,EAC3C,MAAM,CAAC,OAAO,CAAC,EAAE,CACjB,CAAC;IAEF,MAAM,gBAAgB,GAAG,MAAM,uBAAuB,CACrD,gBAAgB,CAAC,UAAU,EAC3B,OAAO,CACP,CAAC;IACF,IAAI,gBAAgB,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,gBAAgB,CAAC;IACzB,CAAC;IAED,OAAO,yBAAyB,CAC/B,gBAAgB,CAAC,UAAU,CAAC,iBAAiB,EAC7C,gBAAgB,CAAC,UAAU,CAAC,YAAY,EACxC,wBAAwB,CACxB,CAAC;AACH,CAAC"}

package/dist/lib/auth/index.d.ts

@@ -1,2 +1,4 @@
 export * from "./auth.js";
+export { runDeviceAuthFlow } from "./device-auth.js";
+export type { DeviceAuthFlowOptions } from "./device-auth.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/lib/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,YAAY,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/lib/auth/index.js

@@ -1,2 +1,3 @@
 export * from "./auth.js";
+export { runDeviceAuthFlow } from "./device-auth.js";
 //# sourceMappingURL=index.js.map

package/dist/lib/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../lib/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/lib/budget-guard.d.ts

@@ -0,0 +1,39 @@
+import type { UsageSummary } from "./usage/index.js";
+export type BudgetWindow = "hour" | "day" | "week" | "month";
+export interface BudgetLimit {
+    key: string;
+    window: BudgetWindow;
+    maxRequests?: number;
+    maxTokens?: number;
+    maxCostUsd?: number;
+    updatedAt: number;
+}
+export interface BudgetGuardStore {
+    version: 1;
+    limits: Record<string, BudgetLimit>;
+}
+export interface BudgetGuardEvaluation {
+    key: string;
+    window: BudgetWindow;
+    allowed: boolean;
+    reasons: string[];
+    usage: {
+        requests: number;
+        totalTokens: number;
+        costUsd: number;
+    };
+    limits: {
+        maxRequests: number | null;
+        maxTokens: number | null;
+        maxCostUsd: number | null;
+    };
+}
+export declare function getBudgetGuardPath(): string;
+export declare function normalizeBudgetKey(value: string): string | null;
+export declare function loadBudgetGuardStore(): Promise<BudgetGuardStore>;
+export declare function saveBudgetGuardStore(store: BudgetGuardStore): Promise<void>;
+export declare function upsertBudgetLimit(store: BudgetGuardStore, limit: Omit<BudgetLimit, "updatedAt">, now?: number): BudgetLimit;
+export declare function getBudgetWindowStart(window: BudgetWindow, now?: number): number;
+export declare function evaluateBudgetGuard(limit: BudgetLimit, summary: UsageSummary): BudgetGuardEvaluation;
+export declare function resetBudgetGuardWriteQueueForTests(): void;
+//# sourceMappingURL=budget-guard.d.ts.map

package/dist/lib/budget-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget-guard.d.ts","sourceRoot":"","sources":["../../lib/budget-guard.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAGrD,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;AAE7D,MAAM,WAAW,WAAW;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,YAAY,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAChC,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,qBAAqB;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,MAAM,EAAE;QACP,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,CAAC;CACF;AA6ED,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE/D;AAED,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAatE;AAED,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsCjF;AAED,wBAAgB,iBAAiB,CAChC,KAAK,EAAE,gBAAgB,EACvB,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EACrC,GAAG,SAAa,GACd,WAAW,CAOb;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,SAAa,GAAG,MAAM,CAoBnF;AAED,wBAAgB,mBAAmB,CAClC,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,YAAY,GACnB,qBAAqB,CAsCvB;AAED,wBAAgB,kCAAkC,IAAI,IAAI,CAEzD"}

package/dist/lib/budget-guard.js

@@ -0,0 +1,201 @@
+import { existsSync, promises as fs } from "node:fs";
+import { basename, join } from "node:path";
+import { logWarn } from "./logger.js";
+import { getCodexMultiAuthDir } from "./runtime-paths.js";
+import { isRecord, sleep } from "./utils.js";
+const BUDGET_GUARD_FILE_NAME = "budget-guards.json";
+const RETRYABLE_FS_CODES = new Set(["EBUSY", "EPERM"]);
+const VALID_WINDOWS = new Set(["hour", "day", "week", "month"]);
+let writeQueue = Promise.resolve();
+function isRetryableFsError(error) {
+    const code = error?.code;
+    return typeof code === "string" && RETRYABLE_FS_CODES.has(code);
+}
+function normalizeKey(value) {
+    const normalized = value.trim().toLowerCase().replace(/[^a-z0-9._:-]+/g, "-");
+    return normalized.length > 0 ? normalized.slice(0, 100) : null;
+}
+function normalizePositiveNumber(value) {
+    return typeof value === "number" && Number.isFinite(value) && value > 0
+        ? value
+        : undefined;
+}
+function normalizeLimit(key, value) {
+    if (!isRecord(value))
+        return null;
+    const window = typeof value.window === "string" && VALID_WINDOWS.has(value.window)
+        ? value.window
+        : null;
+    if (!window)
+        return null;
+    return {
+        key,
+        window,
+        maxRequests: normalizePositiveNumber(value.maxRequests),
+        maxTokens: normalizePositiveNumber(value.maxTokens),
+        maxCostUsd: normalizePositiveNumber(value.maxCostUsd),
+        updatedAt: typeof value.updatedAt === "number" && Number.isFinite(value.updatedAt)
+            ? value.updatedAt
+            : 0,
+    };
+}
+function emptyStore() {
+    return { version: 1, limits: {} };
+}
+function normalizeStore(value) {
+    if (!isRecord(value) || value.version !== 1)
+        return emptyStore();
+    const limits = {};
+    if (isRecord(value.limits)) {
+        for (const [rawKey, raw] of Object.entries(value.limits)) {
+            const key = normalizeKey(rawKey);
+            if (!key)
+                continue;
+            const limit = normalizeLimit(key, raw);
+            if (limit)
+                limits[key] = limit;
+        }
+    }
+    return { version: 1, limits };
+}
+async function readFileWithRetry(path) {
+    let lastError;
+    for (let attempt = 0; attempt < 5; attempt += 1) {
+        try {
+            return await fs.readFile(path, "utf8");
+        }
+        catch (error) {
+            lastError = error;
+            if (!isRetryableFsError(error) || attempt >= 4)
+                throw error;
+            await sleep(10 * 2 ** attempt);
+        }
+    }
+    throw lastError instanceof Error
+        ? lastError
+        : new Error("budget guard read retry exhausted");
+}
+export function getBudgetGuardPath() {
+    return join(getCodexMultiAuthDir(), BUDGET_GUARD_FILE_NAME);
+}
+export function normalizeBudgetKey(value) {
+    return normalizeKey(value);
+}
+export async function loadBudgetGuardStore() {
+    const path = getBudgetGuardPath();
+    if (!existsSync(path))
+        return emptyStore();
+    try {
+        return normalizeStore(JSON.parse(await readFileWithRetry(path)));
+    }
+    catch (error) {
+        logWarn(`Failed to load budget guards from ${basename(path)}: ${error instanceof Error ? error.message : String(error)}`);
+        return emptyStore();
+    }
+}
+export async function saveBudgetGuardStore(store) {
+    const path = getBudgetGuardPath();
+    const payload = normalizeStore(store);
+    const task = async () => {
+        await fs.mkdir(getCodexMultiAuthDir(), { recursive: true, mode: 0o700 });
+        const tempPath = `${path}.${process.pid}.${Date.now()}.${Math.random().toString(36).slice(2, 8)}.tmp`;
+        let moved = false;
+        try {
+            await fs.writeFile(tempPath, `${JSON.stringify(payload, null, 2)}\n`, {
+                encoding: "utf8",
+                mode: 0o600,
+            });
+            for (let attempt = 0; attempt < 5; attempt += 1) {
+                try {
+                    await fs.rename(tempPath, path);
+                    moved = true;
+                    return;
+                }
+                catch (error) {
+                    if (!isRetryableFsError(error) || attempt >= 4)
+                        throw error;
+                    await sleep(10 * 2 ** attempt);
+                }
+            }
+        }
+        finally {
+            if (!moved) {
+                try {
+                    await fs.unlink(tempPath);
+                }
+                catch {
+                    // Best-effort temp cleanup.
+                }
+            }
+        }
+    };
+    const queued = writeQueue.catch(() => undefined).then(task);
+    writeQueue = queued.then(() => undefined, () => undefined);
+    await queued;
+}
+export function upsertBudgetLimit(store, limit, now = Date.now()) {
+    const key = normalizeKey(limit.key);
+    if (!key)
+        throw new Error("Budget key is required");
+    const next = normalizeLimit(key, { ...limit, key, updatedAt: now });
+    if (!next)
+        throw new Error("Invalid budget limit");
+    store.limits[key] = next;
+    return next;
+}
+export function getBudgetWindowStart(window, now = Date.now()) {
+    const date = new Date(now);
+    if (window === "hour") {
+        date.setUTCMinutes(0, 0, 0);
+        return date.getTime();
+    }
+    if (window === "day") {
+        date.setUTCHours(0, 0, 0, 0);
+        return date.getTime();
+    }
+    if (window === "week") {
+        date.setUTCHours(0, 0, 0, 0);
+        const day = date.getUTCDay();
+        const mondayOffset = day === 0 ? 6 : day - 1;
+        date.setUTCDate(date.getUTCDate() - mondayOffset);
+        return date.getTime();
+    }
+    date.setUTCDate(1);
+    date.setUTCHours(0, 0, 0, 0);
+    return date.getTime();
+}
+export function evaluateBudgetGuard(limit, summary) {
+    const reasons = [];
+    if (typeof limit.maxRequests === "number" &&
+        summary.totals.requests >= limit.maxRequests) {
+        reasons.push(`request limit reached (${summary.totals.requests}/${limit.maxRequests})`);
+    }
+    if (typeof limit.maxTokens === "number" &&
+        summary.totals.totalTokens >= limit.maxTokens) {
+        reasons.push(`token limit reached (${summary.totals.totalTokens}/${limit.maxTokens})`);
+    }
+    if (typeof limit.maxCostUsd === "number" &&
+        summary.totals.costUsd >= limit.maxCostUsd) {
+        reasons.push(`cost limit reached (${summary.totals.costUsd.toFixed(6)}/${limit.maxCostUsd.toFixed(6)})`);
+    }
+    return {
+        key: limit.key,
+        window: limit.window,
+        allowed: reasons.length === 0,
+        reasons,
+        usage: {
+            requests: summary.totals.requests,
+            totalTokens: summary.totals.totalTokens,
+            costUsd: summary.totals.costUsd,
+        },
+        limits: {
+            maxRequests: limit.maxRequests ?? null,
+            maxTokens: limit.maxTokens ?? null,
+            maxCostUsd: limit.maxCostUsd ?? null,
+        },
+    };
+}
+export function resetBudgetGuardWriteQueueForTests() {
+    writeQueue = Promise.resolve();
+}
+//# sourceMappingURL=budget-guard.js.map

package/dist/lib/budget-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget-guard.js","sourceRoot":"","sources":["../../lib/budget-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE1D,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAmC7C,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AACpD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AACvD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAe,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAC9E,IAAI,UAAU,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;AAElD,SAAS,kBAAkB,CAAC,KAAc;IACzC,MAAM,IAAI,GAAI,KAA2C,EAAE,IAAI,CAAC;IAChE,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IAClC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;IAC9E,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC9C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QACtE,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,GAAW,EAAE,KAAc;IAClD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,MAAM,GACX,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,MAAsB,CAAC;QAClF,CAAC,CAAE,KAAK,CAAC,MAAuB;QAChC,CAAC,CAAC,IAAI,CAAC;IACT,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO;QACN,GAAG;QACH,MAAM;QACN,WAAW,EAAE,uBAAuB,CAAC,KAAK,CAAC,WAAW,CAAC;QACvD,SAAS,EAAE,uBAAuB,CAAC,KAAK,CAAC,SAAS,CAAC;QACnD,UAAU,EAAE,uBAAuB,CAAC,KAAK,CAAC,UAAU,CAAC;QACrD,SAAS,EACR,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;YACtE,CAAC,CAAC,KAAK,CAAC,SAAS;YACjB,CAAC,CAAC,CAAC;KACL,CAAC;AACH,CAAC;AAED,SAAS,UAAU;IAClB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACrC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC;QAAE,OAAO,UAAU,EAAE,CAAC;IACjE,MAAM,MAAM,GAAgC,EAAE,CAAC;IAC/C,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1D,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvC,IAAI,KAAK;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAChC,CAAC;IACF,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,SAAkB,CAAC;IACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC;YACJ,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,SAAS,GAAG,KAAK,CAAC;YAClB,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC5D,MAAM,KAAK,CAAC,EAAE,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC;QAChC,CAAC;IACF,CAAC;IACD,MAAM,SAAS,YAAY,KAAK;QAC/B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,kBAAkB;IACjC,OAAO,IAAI,CAAC,oBAAoB,EAAE,EAAE,sBAAsB,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC/C,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACzC,MAAM,IAAI,GAAG,kBAAkB,EAAE,CAAC;IAClC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,EAAE,CAAC;IAC3C,IAAI,CAAC;QACJ,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAY,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,CACN,qCAAqC,QAAQ,CAAC,IAAI,CAAC,KAClD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACtD,EAAE,CACF,CAAC;QACF,OAAO,UAAU,EAAE,CAAC;IACrB,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAuB;IACjE,MAAM,IAAI,GAAG,kBAAkB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;QACtC,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;QACtG,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC;YACJ,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;gBACrE,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,KAAK;aACX,CAAC,CAAC;YACH,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;gBACjD,IAAI,CAAC;oBACJ,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;oBAChC,KAAK,GAAG,IAAI,CAAC;oBACb,OAAO;gBACR,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC;wBAAE,MAAM,KAAK,CAAC;oBAC5D,MAAM,KAAK,CAAC,EAAE,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC;gBAChC,CAAC;YACF,CAAC;QACF,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACJ,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC3B,CAAC;gBAAC,MAAM,CAAC;oBACR,4BAA4B;gBAC7B,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5D,UAAU,GAAG,MAAM,CAAC,IAAI,CACvB,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CACf,CAAC;IACF,MAAM,MAAM,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB,CAChC,KAAuB,EACvB,KAAqC,EACrC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,EAAE,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACnD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACzB,OAAO,IAAI,CAAC;AACb,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAoB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC1E,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC7B,MAAM,YAAY,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,YAAY,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACnB,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAClC,KAAkB,EAClB,OAAqB;IAErB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IACC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,OAAO,CAAC,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC,WAAW,EAC3C,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,0BAA0B,OAAO,CAAC,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC;IACzF,CAAC;IACD,IACC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,OAAO,CAAC,MAAM,CAAC,WAAW,IAAI,KAAK,CAAC,SAAS,EAC5C,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,wBAAwB,OAAO,CAAC,MAAM,CAAC,WAAW,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;IACxF,CAAC;IACD,IACC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,UAAU,EACzC,CAAC;QACF,OAAO,CAAC,IAAI,CACX,uBAAuB,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAC1F,CAAC;IACH,CAAC;IACD,OAAO;QACN,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;QAC7B,OAAO;QACP,KAAK,EAAE;YACN,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;YACjC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW;YACvC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;SAC/B;QACD,MAAM,EAAE;YACP,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;YACtC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YAClC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;SACpC;KACD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kCAAkC;IACjD,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;AAChC,CAAC"}

package/dist/lib/codex-manager/commands/account.d.ts

@@ -0,0 +1,13 @@
+import { loadAccountPolicyStore, saveAccountPolicyStore } from "../../account-policy.js";
+import type { AccountStorageV3 } from "../../storage.js";
+export interface AccountCommandDeps {
+    setStoragePath: (path: string | null) => void;
+    loadAccounts: () => Promise<AccountStorageV3 | null>;
+    loadPolicyStore?: typeof loadAccountPolicyStore;
+    savePolicyStore?: typeof saveAccountPolicyStore;
+    logInfo?: (message: string) => void;
+    logError?: (message: string) => void;
+    getNow?: () => number;
+}
+export declare function runAccountCommand(args: string[], deps: AccountCommandDeps): Promise<number>;
+//# sourceMappingURL=account.d.ts.map

package/dist/lib/codex-manager/commands/account.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../../../../lib/codex-manager/commands/account.ts"],"names":[],"mappings":"AAAA,OAAO,EAEN,sBAAsB,EAEtB,sBAAsB,EAGtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAqB,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAE5E,MAAM,WAAW,kBAAkB;IAClC,cAAc,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAC9C,YAAY,EAAE,MAAM,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IACrD,eAAe,CAAC,EAAE,OAAO,sBAAsB,CAAC;IAChD,eAAe,CAAC,EAAE,OAAO,sBAAsB,CAAC;IAChD,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;CACtB;AAkDD,wBAAsB,iBAAiB,CACtC,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,EAAE,kBAAkB,GACtB,OAAO,CAAC,MAAM,CAAC,CA2HjB"}