codex-multi-auth 2.0.2 → 2.1.0

package/dist/lib/budget-guard.js

@@ -0,0 +1,201 @@
+import { existsSync, promises as fs } from "node:fs";
+import { basename, join } from "node:path";
+import { logWarn } from "./logger.js";
+import { getCodexMultiAuthDir } from "./runtime-paths.js";
+import { isRecord, sleep } from "./utils.js";
+const BUDGET_GUARD_FILE_NAME = "budget-guards.json";
+const RETRYABLE_FS_CODES = new Set(["EBUSY", "EPERM"]);
+const VALID_WINDOWS = new Set(["hour", "day", "week", "month"]);
+let writeQueue = Promise.resolve();
+function isRetryableFsError(error) {
+    const code = error?.code;
+    return typeof code === "string" && RETRYABLE_FS_CODES.has(code);
+}
+function normalizeKey(value) {
+    const normalized = value.trim().toLowerCase().replace(/[^a-z0-9._:-]+/g, "-");
+    return normalized.length > 0 ? normalized.slice(0, 100) : null;
+}
+function normalizePositiveNumber(value) {
+    return typeof value === "number" && Number.isFinite(value) && value > 0
+        ? value
+        : undefined;
+}
+function normalizeLimit(key, value) {
+    if (!isRecord(value))
+        return null;
+    const window = typeof value.window === "string" && VALID_WINDOWS.has(value.window)
+        ? value.window
+        : null;
+    if (!window)
+        return null;
+    return {
+        key,
+        window,
+        maxRequests: normalizePositiveNumber(value.maxRequests),
+        maxTokens: normalizePositiveNumber(value.maxTokens),
+        maxCostUsd: normalizePositiveNumber(value.maxCostUsd),
+        updatedAt: typeof value.updatedAt === "number" && Number.isFinite(value.updatedAt)
+            ? value.updatedAt
+            : 0,
+    };
+}
+function emptyStore() {
+    return { version: 1, limits: {} };
+}
+function normalizeStore(value) {
+    if (!isRecord(value) || value.version !== 1)
+        return emptyStore();
+    const limits = {};
+    if (isRecord(value.limits)) {
+        for (const [rawKey, raw] of Object.entries(value.limits)) {
+            const key = normalizeKey(rawKey);
+            if (!key)
+                continue;
+            const limit = normalizeLimit(key, raw);
+            if (limit)
+                limits[key] = limit;
+        }
+    }
+    return { version: 1, limits };
+}
+async function readFileWithRetry(path) {
+    let lastError;
+    for (let attempt = 0; attempt < 5; attempt += 1) {
+        try {
+            return await fs.readFile(path, "utf8");
+        }
+        catch (error) {
+            lastError = error;
+            if (!isRetryableFsError(error) || attempt >= 4)
+                throw error;
+            await sleep(10 * 2 ** attempt);
+        }
+    }
+    throw lastError instanceof Error
+        ? lastError
+        : new Error("budget guard read retry exhausted");
+}
+export function getBudgetGuardPath() {
+    return join(getCodexMultiAuthDir(), BUDGET_GUARD_FILE_NAME);
+}
+export function normalizeBudgetKey(value) {
+    return normalizeKey(value);
+}
+export async function loadBudgetGuardStore() {
+    const path = getBudgetGuardPath();
+    if (!existsSync(path))
+        return emptyStore();
+    try {
+        return normalizeStore(JSON.parse(await readFileWithRetry(path)));
+    }
+    catch (error) {
+        logWarn(`Failed to load budget guards from ${basename(path)}: ${error instanceof Error ? error.message : String(error)}`);
+        return emptyStore();
+    }
+}
+export async function saveBudgetGuardStore(store) {
+    const path = getBudgetGuardPath();
+    const payload = normalizeStore(store);
+    const task = async () => {
+        await fs.mkdir(getCodexMultiAuthDir(), { recursive: true, mode: 0o700 });
+        const tempPath = `${path}.${process.pid}.${Date.now()}.${Math.random().toString(36).slice(2, 8)}.tmp`;
+        let moved = false;
+        try {
+            await fs.writeFile(tempPath, `${JSON.stringify(payload, null, 2)}\n`, {
+                encoding: "utf8",
+                mode: 0o600,
+            });
+            for (let attempt = 0; attempt < 5; attempt += 1) {
+                try {
+                    await fs.rename(tempPath, path);
+                    moved = true;
+                    return;
+                }
+                catch (error) {
+                    if (!isRetryableFsError(error) || attempt >= 4)
+                        throw error;
+                    await sleep(10 * 2 ** attempt);
+                }
+            }
+        }
+        finally {
+            if (!moved) {
+                try {
+                    await fs.unlink(tempPath);
+                }
+                catch {
+                    // Best-effort temp cleanup.
+                }
+            }
+        }
+    };
+    const queued = writeQueue.catch(() => undefined).then(task);
+    writeQueue = queued.then(() => undefined, () => undefined);
+    await queued;
+}
+export function upsertBudgetLimit(store, limit, now = Date.now()) {
+    const key = normalizeKey(limit.key);
+    if (!key)
+        throw new Error("Budget key is required");
+    const next = normalizeLimit(key, { ...limit, key, updatedAt: now });
+    if (!next)
+        throw new Error("Invalid budget limit");
+    store.limits[key] = next;
+    return next;
+}
+export function getBudgetWindowStart(window, now = Date.now()) {
+    const date = new Date(now);
+    if (window === "hour") {
+        date.setUTCMinutes(0, 0, 0);
+        return date.getTime();
+    }
+    if (window === "day") {
+        date.setUTCHours(0, 0, 0, 0);
+        return date.getTime();
+    }
+    if (window === "week") {
+        date.setUTCHours(0, 0, 0, 0);
+        const day = date.getUTCDay();
+        const mondayOffset = day === 0 ? 6 : day - 1;
+        date.setUTCDate(date.getUTCDate() - mondayOffset);
+        return date.getTime();
+    }
+    date.setUTCDate(1);
+    date.setUTCHours(0, 0, 0, 0);
+    return date.getTime();
+}
+export function evaluateBudgetGuard(limit, summary) {
+    const reasons = [];
+    if (typeof limit.maxRequests === "number" &&
+        summary.totals.requests >= limit.maxRequests) {
+        reasons.push(`request limit reached (${summary.totals.requests}/${limit.maxRequests})`);
+    }
+    if (typeof limit.maxTokens === "number" &&
+        summary.totals.totalTokens >= limit.maxTokens) {
+        reasons.push(`token limit reached (${summary.totals.totalTokens}/${limit.maxTokens})`);
+    }
+    if (typeof limit.maxCostUsd === "number" &&
+        summary.totals.costUsd >= limit.maxCostUsd) {
+        reasons.push(`cost limit reached (${summary.totals.costUsd.toFixed(6)}/${limit.maxCostUsd.toFixed(6)})`);
+    }
+    return {
+        key: limit.key,
+        window: limit.window,
+        allowed: reasons.length === 0,
+        reasons,
+        usage: {
+            requests: summary.totals.requests,
+            totalTokens: summary.totals.totalTokens,
+            costUsd: summary.totals.costUsd,
+        },
+        limits: {
+            maxRequests: limit.maxRequests ?? null,
+            maxTokens: limit.maxTokens ?? null,
+            maxCostUsd: limit.maxCostUsd ?? null,
+        },
+    };
+}
+export function resetBudgetGuardWriteQueueForTests() {
+    writeQueue = Promise.resolve();
+}
+//# sourceMappingURL=budget-guard.js.map

package/dist/lib/budget-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget-guard.js","sourceRoot":"","sources":["../../lib/budget-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE1D,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAmC7C,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AACpD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AACvD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAe,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAC9E,IAAI,UAAU,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;AAElD,SAAS,kBAAkB,CAAC,KAAc;IACzC,MAAM,IAAI,GAAI,KAA2C,EAAE,IAAI,CAAC;IAChE,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IAClC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;IAC9E,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC9C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QACtE,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,GAAW,EAAE,KAAc;IAClD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,MAAM,GACX,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,MAAsB,CAAC;QAClF,CAAC,CAAE,KAAK,CAAC,MAAuB;QAChC,CAAC,CAAC,IAAI,CAAC;IACT,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO;QACN,GAAG;QACH,MAAM;QACN,WAAW,EAAE,uBAAuB,CAAC,KAAK,CAAC,WAAW,CAAC;QACvD,SAAS,EAAE,uBAAuB,CAAC,KAAK,CAAC,SAAS,CAAC;QACnD,UAAU,EAAE,uBAAuB,CAAC,KAAK,CAAC,UAAU,CAAC;QACrD,SAAS,EACR,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;YACtE,CAAC,CAAC,KAAK,CAAC,SAAS;YACjB,CAAC,CAAC,CAAC;KACL,CAAC;AACH,CAAC;AAED,SAAS,UAAU;IAClB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACrC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC;QAAE,OAAO,UAAU,EAAE,CAAC;IACjE,MAAM,MAAM,GAAgC,EAAE,CAAC;IAC/C,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1D,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvC,IAAI,KAAK;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAChC,CAAC;IACF,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,SAAkB,CAAC;IACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC;YACJ,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,SAAS,GAAG,KAAK,CAAC;YAClB,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC5D,MAAM,KAAK,CAAC,EAAE,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC;QAChC,CAAC;IACF,CAAC;IACD,MAAM,SAAS,YAAY,KAAK;QAC/B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,kBAAkB;IACjC,OAAO,IAAI,CAAC,oBAAoB,EAAE,EAAE,sBAAsB,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC/C,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACzC,MAAM,IAAI,GAAG,kBAAkB,EAAE,CAAC;IAClC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,EAAE,CAAC;IAC3C,IAAI,CAAC;QACJ,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAY,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,CACN,qCAAqC,QAAQ,CAAC,IAAI,CAAC,KAClD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACtD,EAAE,CACF,CAAC;QACF,OAAO,UAAU,EAAE,CAAC;IACrB,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAuB;IACjE,MAAM,IAAI,GAAG,kBAAkB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;QACtC,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;QACtG,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC;YACJ,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;gBACrE,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,KAAK;aACX,CAAC,CAAC;YACH,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;gBACjD,IAAI,CAAC;oBACJ,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;oBAChC,KAAK,GAAG,IAAI,CAAC;oBACb,OAAO;gBACR,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC;wBAAE,MAAM,KAAK,CAAC;oBAC5D,MAAM,KAAK,CAAC,EAAE,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC;gBAChC,CAAC;YACF,CAAC;QACF,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACJ,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC3B,CAAC;gBAAC,MAAM,CAAC;oBACR,4BAA4B;gBAC7B,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5D,UAAU,GAAG,MAAM,CAAC,IAAI,CACvB,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CACf,CAAC;IACF,MAAM,MAAM,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB,CAChC,KAAuB,EACvB,KAAqC,EACrC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,EAAE,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACnD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACzB,OAAO,IAAI,CAAC;AACb,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAoB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC1E,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC7B,MAAM,YAAY,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,YAAY,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACnB,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAClC,KAAkB,EAClB,OAAqB;IAErB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IACC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,OAAO,CAAC,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC,WAAW,EAC3C,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,0BAA0B,OAAO,CAAC,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC;IACzF,CAAC;IACD,IACC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,OAAO,CAAC,MAAM,CAAC,WAAW,IAAI,KAAK,CAAC,SAAS,EAC5C,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,wBAAwB,OAAO,CAAC,MAAM,CAAC,WAAW,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;IACxF,CAAC;IACD,IACC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,UAAU,EACzC,CAAC;QACF,OAAO,CAAC,IAAI,CACX,uBAAuB,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAC1F,CAAC;IACH,CAAC;IACD,OAAO;QACN,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;QAC7B,OAAO;QACP,KAAK,EAAE;YACN,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;YACjC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW;YACvC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;SAC/B;QACD,MAAM,EAAE;YACP,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;YACtC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YAClC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;SACpC;KACD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kCAAkC;IACjD,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;AAChC,CAAC"}

package/dist/lib/codex-manager/commands/account.d.ts

@@ -0,0 +1,13 @@
+import { loadAccountPolicyStore, saveAccountPolicyStore } from "../../account-policy.js";
+import type { AccountStorageV3 } from "../../storage.js";
+export interface AccountCommandDeps {
+    setStoragePath: (path: string | null) => void;
+    loadAccounts: () => Promise<AccountStorageV3 | null>;
+    loadPolicyStore?: typeof loadAccountPolicyStore;
+    savePolicyStore?: typeof saveAccountPolicyStore;
+    logInfo?: (message: string) => void;
+    logError?: (message: string) => void;
+    getNow?: () => number;
+}
+export declare function runAccountCommand(args: string[], deps: AccountCommandDeps): Promise<number>;
+//# sourceMappingURL=account.d.ts.map

package/dist/lib/codex-manager/commands/account.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../../../../lib/codex-manager/commands/account.ts"],"names":[],"mappings":"AAAA,OAAO,EAEN,sBAAsB,EAEtB,sBAAsB,EAGtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAqB,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAE5E,MAAM,WAAW,kBAAkB;IAClC,cAAc,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAC9C,YAAY,EAAE,MAAM,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IACrD,eAAe,CAAC,EAAE,OAAO,sBAAsB,CAAC;IAChD,eAAe,CAAC,EAAE,OAAO,sBAAsB,CAAC;IAChD,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;CACtB;AAkDD,wBAAsB,iBAAiB,CACtC,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,EAAE,kBAAkB,GACtB,OAAO,CAAC,MAAM,CAAC,CA2HjB"}

package/dist/lib/codex-manager/commands/account.js

@@ -0,0 +1,156 @@
+import { getAccountPolicyKey, loadAccountPolicyStore, normalizeAccountPolicyTag, saveAccountPolicyStore, upsertAccountPolicy, } from "../../account-policy.js";
+function printAccountUsage(logInfo) {
+    logInfo([
+        "Usage:",
+        "  codex auth account tag <index> <tag>",
+        "  codex auth account untag <index> <tag>",
+        "  codex auth account weight <index> <0..10>",
+        "  codex auth account pause|unpause|drain|undrain <index>",
+        "  codex auth account note <index> <text>",
+        "  codex auth account policy list [--json]",
+    ].join("\n"));
+}
+function parseAccountIndex(value) {
+    if (!value || !/^\d+$/.test(value))
+        return null;
+    const parsed = Number.parseInt(value, 10);
+    return Number.isSafeInteger(parsed) && parsed > 0 ? parsed - 1 : null;
+}
+function resolveAccount(storage, index) {
+    if (!storage || index === null || index < 0 || index >= storage.accounts.length) {
+        return null;
+    }
+    const account = storage.accounts[index];
+    return account ? { account, index } : null;
+}
+function policySummary(store, storage) {
+    return (storage?.accounts ?? []).map((account, index) => {
+        const accountKey = getAccountPolicyKey(account, index);
+        const policy = store.accounts[accountKey];
+        return {
+            index: index + 1,
+            label: `Account ${index + 1}`,
+            accountKey,
+            tags: policy?.tags ?? [],
+            weight: policy?.weight ?? 1,
+            paused: policy?.paused ?? false,
+            drained: policy?.drained ?? false,
+            note: policy?.note ?? null,
+        };
+    });
+}
+export async function runAccountCommand(args, deps) {
+    const logInfo = deps.logInfo ?? console.log;
+    const logError = deps.logError ?? console.error;
+    const [command, ...rest] = args;
+    if (!command || command === "--help" || command === "-h") {
+        printAccountUsage(logInfo);
+        return 0;
+    }
+    deps.setStoragePath(null);
+    const storage = await deps.loadAccounts();
+    const loadStore = deps.loadPolicyStore ?? loadAccountPolicyStore;
+    const saveStore = deps.savePolicyStore ?? saveAccountPolicyStore;
+    const store = await loadStore();
+    if (command === "policy") {
+        const [subcommand, ...policyArgs] = rest;
+        if (subcommand !== "list") {
+            logError(`Unknown account policy command: ${subcommand ?? "(missing)"}`);
+            return 1;
+        }
+        const unknown = policyArgs.find((arg) => arg !== "--json" && arg !== "-j");
+        if (unknown) {
+            logError(`Unknown account policy list option: ${unknown}`);
+            return 1;
+        }
+        const payload = {
+            command: "account policy list",
+            accounts: policySummary(store, storage),
+        };
+        if (policyArgs.includes("--json") || policyArgs.includes("-j")) {
+            logInfo(JSON.stringify(payload, null, 2));
+            return 0;
+        }
+        if (payload.accounts.length === 0) {
+            logInfo("No accounts configured.");
+            return 0;
+        }
+        for (const entry of payload.accounts) {
+            const markers = [
+                `weight=${entry.weight}`,
+                entry.paused ? "paused" : null,
+                entry.drained ? "drained" : null,
+                entry.tags.length > 0 ? `tags=${entry.tags.join(",")}` : null,
+                entry.note ? "note" : null,
+            ].filter((value) => value !== null);
+            logInfo(`${entry.index}. ${entry.label} | ${markers.join(" | ")}`);
+        }
+        return 0;
+    }
+    const accountIndex = parseAccountIndex(rest[0]);
+    const resolved = resolveAccount(storage, accountIndex);
+    if (!resolved) {
+        logError("Account index is required and must reference a configured account.");
+        return 1;
+    }
+    const accountKey = getAccountPolicyKey(resolved.account, resolved.index);
+    const now = deps.getNow?.() ?? Date.now();
+    if (command === "tag" || command === "untag") {
+        const tag = normalizeAccountPolicyTag(rest[1] ?? "");
+        if (!tag) {
+            logError(`${command} requires a tag value.`);
+            return 1;
+        }
+        const policy = upsertAccountPolicy(store, accountKey, (next) => {
+            if (command === "tag" && !next.tags.includes(tag))
+                next.tags.push(tag);
+            if (command === "untag") {
+                next.tags = next.tags.filter((existing) => existing !== tag);
+            }
+        }, now);
+        await saveStore(store);
+        logInfo(`${command === "tag" ? "Tagged" : "Removed tag from"} account ${resolved.index + 1}: ${policy.tags.join(",") || "none"}`);
+        return 0;
+    }
+    if (command === "weight") {
+        const weight = rest[1] === undefined ? Number.NaN : Number.parseFloat(rest[1]);
+        if (!Number.isFinite(weight) || weight < 0 || weight > 10) {
+            logError("weight requires a number from 0 to 10.");
+            return 1;
+        }
+        upsertAccountPolicy(store, accountKey, (next) => {
+            next.weight = weight;
+        }, now);
+        await saveStore(store);
+        logInfo(`Set account ${resolved.index + 1} weight to ${weight}.`);
+        return 0;
+    }
+    if (["pause", "unpause", "drain", "undrain"].includes(command)) {
+        upsertAccountPolicy(store, accountKey, (next) => {
+            if (command === "pause")
+                next.paused = true;
+            if (command === "unpause")
+                next.paused = false;
+            if (command === "drain")
+                next.drained = true;
+            if (command === "undrain")
+                next.drained = false;
+        }, now);
+        await saveStore(store);
+        logInfo(`Updated account ${resolved.index + 1}: ${command}.`);
+        return 0;
+    }
+    if (command === "note") {
+        const note = rest.slice(1).join(" ").trim();
+        upsertAccountPolicy(store, accountKey, (next) => {
+            next.note = note.length > 0 ? note.slice(0, 500) : null;
+        }, now);
+        await saveStore(store);
+        logInfo(`Updated account ${resolved.index + 1} note.`);
+        return 0;
+    }
+    logError(`Unknown account command: ${command}`);
+    printAccountUsage(logInfo);
+    return 1;
+}
+//# sourceMappingURL=account.js.map

package/dist/lib/codex-manager/commands/account.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account.js","sourceRoot":"","sources":["../../../../lib/codex-manager/commands/account.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,mBAAmB,EACnB,sBAAsB,EACtB,yBAAyB,EACzB,sBAAsB,EACtB,mBAAmB,GAEnB,MAAM,yBAAyB,CAAC;AAajC,SAAS,iBAAiB,CAAC,OAAkC;IAC5D,OAAO,CACN;QACC,QAAQ;QACR,wCAAwC;QACxC,0CAA0C;QAC1C,6CAA6C;QAC7C,0DAA0D;QAC1D,0CAA0C;QAC1C,2CAA2C;KAC3C,CAAC,IAAI,CAAC,IAAI,CAAC,CACZ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAyB;IACnD,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACvE,CAAC;AAED,SAAS,cAAc,CACtB,OAAgC,EAChC,KAAoB;IAEpB,IAAI,CAAC,OAAO,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACjF,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB,EAAE,OAAgC;IACjF,OAAO,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QACvD,MAAM,UAAU,GAAG,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC1C,OAAO;YACN,KAAK,EAAE,KAAK,GAAG,CAAC;YAChB,KAAK,EAAE,WAAW,KAAK,GAAG,CAAC,EAAE;YAC7B,UAAU;YACV,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE;YACxB,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;YAC3B,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,KAAK;YAC/B,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,KAAK;YACjC,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,IAAI;SAC1B,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,IAAc,EACd,IAAwB;IAExB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC;IAChD,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAChC,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAC1D,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC3B,OAAO,CAAC,CAAC;IACV,CAAC;IAED,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,IAAI,sBAAsB,CAAC;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,IAAI,sBAAsB,CAAC;IACjE,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAEhC,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,CAAC,UAAU,EAAE,GAAG,UAAU,CAAC,GAAG,IAAI,CAAC;QACzC,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;YAC3B,QAAQ,CAAC,mCAAmC,UAAU,IAAI,WAAW,EAAE,CAAC,CAAC;YACzE,OAAO,CAAC,CAAC;QACV,CAAC;QACD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC;QAC3E,IAAI,OAAO,EAAE,CAAC;YACb,QAAQ,CAAC,uCAAuC,OAAO,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,CAAC;QACV,CAAC;QACD,MAAM,OAAO,GAAG;YACf,OAAO,EAAE,qBAAqB;YAC9B,QAAQ,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC;SACvC,CAAC;QACF,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAChE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC;QACV,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,yBAAyB,CAAC,CAAC;YACnC,OAAO,CAAC,CAAC;QACV,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG;gBACf,UAAU,KAAK,CAAC,MAAM,EAAE;gBACxB,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;gBAC9B,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;gBAChC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;gBAC7D,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;aAC1B,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;YACrD,OAAO,CAAC,GAAG,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,CAAC,CAAC;IACV,CAAC;IAED,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,QAAQ,CAAC,oEAAoE,CAAC,CAAC;QAC/E,OAAO,CAAC,CAAC;IACV,CAAC;IACD,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzE,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAE1C,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,GAAG,EAAE,CAAC;YACV,QAAQ,CAAC,GAAG,OAAO,wBAAwB,CAAC,CAAC;YAC7C,OAAO,CAAC,CAAC;QACV,CAAC;QACD,MAAM,MAAM,GAAG,mBAAmB,CACjC,KAAK,EACL,UAAU,EACV,CAAC,IAAI,EAAE,EAAE;YACR,IAAI,OAAO,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvE,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC;YAC9D,CAAC;QACF,CAAC,EACD,GAAG,CACH,CAAC;QACF,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;QACvB,OAAO,CACN,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,kBAAkB,YAAY,QAAQ,CAAC,KAAK,GAAG,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,EAAE,CACxH,CAAC;QACF,OAAO,CAAC,CAAC;IACV,CAAC;IAED,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,EAAE,EAAE,CAAC;YAC3D,QAAQ,CAAC,wCAAwC,CAAC,CAAC;YACnD,OAAO,CAAC,CAAC;QACV,CAAC;QACD,mBAAmB,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;YAC/C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACtB,CAAC,EAAE,GAAG,CAAC,CAAC;QACR,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;QACvB,OAAO,CAAC,eAAe,QAAQ,CAAC,KAAK,GAAG,CAAC,cAAc,MAAM,GAAG,CAAC,CAAC;QAClE,OAAO,CAAC,CAAC;IACV,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,mBAAmB,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;YAC/C,IAAI,OAAO,KAAK,OAAO;gBAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YAC5C,IAAI,OAAO,KAAK,SAAS;gBAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YAC/C,IAAI,OAAO,KAAK,OAAO;gBAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YAC7C,IAAI,OAAO,KAAK,SAAS;gBAAE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACjD,CAAC,EAAE,GAAG,CAAC,CAAC;QACR,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;QACvB,OAAO,CAAC,mBAAmB,QAAQ,CAAC,KAAK,GAAG,CAAC,KAAK,OAAO,GAAG,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC;IACV,CAAC;IAED,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,mBAAmB,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;YAC/C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACzD,CAAC,EAAE,GAAG,CAAC,CAAC;QACR,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;QACvB,OAAO,CAAC,mBAAmB,QAAQ,CAAC,KAAK,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,OAAO,CAAC,CAAC;IACV,CAAC;IAED,QAAQ,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;IAChD,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAC;AACV,CAAC"}

package/dist/lib/codex-manager/commands/bridge.d.ts

@@ -0,0 +1,6 @@
+export interface BridgeCommandDeps {
+    logInfo?: (message: string) => void;
+    logError?: (message: string) => void;
+}
+export declare function runBridgeCommand(args: string[], deps?: BridgeCommandDeps): Promise<number>;
+//# sourceMappingURL=bridge.d.ts.map

package/dist/lib/codex-manager/commands/bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../../../lib/codex-manager/commands/bridge.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,iBAAiB;IACjC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACrC;AAkCD,wBAAsB,gBAAgB,CACrC,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,GAAE,iBAAsB,GAC1B,OAAO,CAAC,MAAM,CAAC,CAoEjB"}

package/dist/lib/codex-manager/commands/bridge.js

@@ -0,0 +1,100 @@
+import { addLocalClientToken, loadLocalClientTokenStore, revokeLocalClientToken, rotateLocalClientToken, } from "../../local-client-tokens.js";
+function printBridgeUsage(logInfo) {
+    logInfo([
+        "Usage:",
+        "  codex auth bridge token create [--label <label>]",
+        "  codex auth bridge token list",
+        "  codex auth bridge token rotate <id>",
+        "  codex auth bridge token revoke <id>",
+    ].join("\n"));
+}
+function parseLabel(args) {
+    let label;
+    for (let i = 0; i < args.length; i += 1) {
+        const arg = args[i];
+        if (arg === "--label") {
+            const value = args[i + 1];
+            if (!value)
+                return { ok: false, message: "Missing value for --label" };
+            label = value;
+            i += 1;
+            continue;
+        }
+        if (arg?.startsWith("--label=")) {
+            label = arg.slice("--label=".length);
+            continue;
+        }
+        return { ok: false, message: `Unknown bridge token option: ${arg ?? ""}` };
+    }
+    return { ok: true, label };
+}
+export async function runBridgeCommand(args, deps = {}) {
+    const logInfo = deps.logInfo ?? console.log;
+    const logError = deps.logError ?? console.error;
+    if (args.includes("--help") || args.includes("-h")) {
+        printBridgeUsage(logInfo);
+        return 0;
+    }
+    const [area, action, ...rest] = args;
+    if (area !== "token") {
+        logError("Expected `codex auth bridge token ...`");
+        return 1;
+    }
+    if (action === "create") {
+        const parsed = parseLabel(rest);
+        if (!parsed.ok) {
+            logError(parsed.message);
+            return 1;
+        }
+        const created = await addLocalClientToken({ label: parsed.label });
+        logInfo(`Token id: ${created.record.id}`);
+        logInfo(`Token prefix: ${created.record.prefix}`);
+        logInfo(`Token: ${created.plainToken}`);
+        return 0;
+    }
+    if (action === "list") {
+        const store = await loadLocalClientTokenStore();
+        if (store.tokens.length === 0) {
+            logInfo("No local bridge tokens configured.");
+            return 0;
+        }
+        for (const token of store.tokens) {
+            const state = token.revokedAt === null ? "active" : "revoked";
+            logInfo(`${token.id} ${token.prefix} ${token.label} ${state}`);
+        }
+        return 0;
+    }
+    if (action === "rotate") {
+        const id = rest[0];
+        if (!id) {
+            logError("Missing token id");
+            return 1;
+        }
+        const rotated = await rotateLocalClientToken({ id });
+        if (!rotated) {
+            logError("Token not found or already revoked.");
+            return 1;
+        }
+        logInfo(`Token id: ${rotated.record.id}`);
+        logInfo(`Token prefix: ${rotated.record.prefix}`);
+        logInfo(`Token: ${rotated.plainToken}`);
+        return 0;
+    }
+    if (action === "revoke") {
+        const id = rest[0];
+        if (!id) {
+            logError("Missing token id");
+            return 1;
+        }
+        const revoked = await revokeLocalClientToken(id);
+        if (!revoked) {
+            logError("Token not found or already revoked.");
+            return 1;
+        }
+        logInfo("Token revoked.");
+        return 0;
+    }
+    logError(`Unknown bridge token action: ${action ?? ""}`);
+    return 1;
+}
+//# sourceMappingURL=bridge.js.map

package/dist/lib/codex-manager/commands/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../../../lib/codex-manager/commands/bridge.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,mBAAmB,EACnB,yBAAyB,EACzB,sBAAsB,EACtB,sBAAsB,GACtB,MAAM,8BAA8B,CAAC;AAOtC,SAAS,gBAAgB,CAAC,OAAkC;IAC3D,OAAO,CACN;QACC,QAAQ;QACR,oDAAoD;QACpD,gCAAgC;QAChC,uCAAuC;QACvC,uCAAuC;KACvC,CAAC,IAAI,CAAC,IAAI,CAAC,CACZ,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAc;IACjC,IAAI,KAAyB,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;YACvE,KAAK,GAAG,KAAK,CAAC;YACd,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACV,CAAC;QACD,IAAI,GAAG,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACrC,SAAS;QACV,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,gCAAgC,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,IAAc,EACd,OAA0B,EAAE;IAE5B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC;IAChD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC1B,OAAO,CAAC,CAAC;IACV,CAAC;IACD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACrC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACtB,QAAQ,CAAC,wCAAwC,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC;IACV,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAChB,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACzB,OAAO,CAAC,CAAC;QACV,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACnE,OAAO,CAAC,aAAa,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,iBAAiB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,UAAU,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,CAAC;IACV,CAAC;IACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,yBAAyB,EAAE,CAAC;QAChD,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,oCAAoC,CAAC,CAAC;YAC9C,OAAO,CAAC,CAAC;QACV,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,OAAO,CAAC,GAAG,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,CAAC,CAAC;IACV,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,CAAC,EAAE,EAAE,CAAC;YACT,QAAQ,CAAC,kBAAkB,CAAC,CAAC;YAC7B,OAAO,CAAC,CAAC;QACV,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,QAAQ,CAAC,qCAAqC,CAAC,CAAC;YAChD,OAAO,CAAC,CAAC;QACV,CAAC;QACD,OAAO,CAAC,aAAa,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,iBAAiB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,UAAU,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,CAAC;IACV,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,CAAC,EAAE,EAAE,CAAC;YACT,QAAQ,CAAC,kBAAkB,CAAC,CAAC;YAC7B,OAAO,CAAC,CAAC;QACV,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,QAAQ,CAAC,qCAAqC,CAAC,CAAC;YAChD,OAAO,CAAC,CAAC;QACV,CAAC;QACD,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC1B,OAAO,CAAC,CAAC;IACV,CAAC;IACD,QAAQ,CAAC,gCAAgC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;IACzD,OAAO,CAAC,CAAC;AACV,CAAC"}

package/dist/lib/codex-manager/commands/budget.d.ts

@@ -0,0 +1,12 @@
+import { loadBudgetGuardStore, saveBudgetGuardStore } from "../../budget-guard.js";
+import { summarizeUsageLedger } from "../../usage/index.js";
+export interface BudgetCommandDeps {
+    loadStore?: typeof loadBudgetGuardStore;
+    saveStore?: typeof saveBudgetGuardStore;
+    summarizeUsage?: typeof summarizeUsageLedger;
+    logInfo?: (message: string) => void;
+    logError?: (message: string) => void;
+    getNow?: () => number;
+}
+export declare function runBudgetCommand(args: string[], deps?: BudgetCommandDeps): Promise<number>;
+//# sourceMappingURL=budget.d.ts.map

package/dist/lib/codex-manager/commands/budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.d.ts","sourceRoot":"","sources":["../../../../lib/codex-manager/commands/budget.ts"],"names":[],"mappings":"AAAA,OAAO,EAGN,oBAAoB,EAEpB,oBAAoB,EAGpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,MAAM,WAAW,iBAAiB;IACjC,SAAS,CAAC,EAAE,OAAO,oBAAoB,CAAC;IACxC,SAAS,CAAC,EAAE,OAAO,oBAAoB,CAAC;IACxC,cAAc,CAAC,EAAE,OAAO,oBAAoB,CAAC;IAC7C,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;CACtB;AAqBD,wBAAsB,gBAAgB,CACrC,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,GAAE,iBAAsB,GAC1B,OAAO,CAAC,MAAM,CAAC,CAoHjB"}

package/dist/lib/codex-manager/commands/budget.js

@@ -0,0 +1,123 @@
+import { evaluateBudgetGuard, getBudgetWindowStart, loadBudgetGuardStore, normalizeBudgetKey, saveBudgetGuardStore, upsertBudgetLimit, } from "../../budget-guard.js";
+import { summarizeUsageLedger } from "../../usage/index.js";
+const VALID_WINDOWS = new Set(["hour", "day", "week", "month"]);
+function printBudgetUsage(logInfo) {
+    logInfo([
+        "Usage:",
+        "  codex auth budget limit <key> --window <hour|day|week|month> [--requests N] [--tokens N] [--cost USD]",
+        "  codex auth budget check <key> [--json]",
+        "  codex auth budget list [--json]",
+    ].join("\n"));
+}
+function parsePositiveNumber(value) {
+    if (!value)
+        return null;
+    const parsed = Number.parseFloat(value);
+    return Number.isFinite(parsed) && parsed > 0 ? parsed : null;
+}
+export async function runBudgetCommand(args, deps = {}) {
+    const logInfo = deps.logInfo ?? console.log;
+    const logError = deps.logError ?? console.error;
+    const [command, ...rest] = args;
+    if (!command || command === "--help" || command === "-h") {
+        printBudgetUsage(logInfo);
+        return 0;
+    }
+    const loadStore = deps.loadStore ?? loadBudgetGuardStore;
+    const saveStore = deps.saveStore ?? saveBudgetGuardStore;
+    const store = await loadStore();
+    const now = deps.getNow?.() ?? Date.now();
+    if (command === "list") {
+        const json = rest.includes("--json") || rest.includes("-j");
+        const limits = Object.values(store.limits).sort((a, b) => a.key.localeCompare(b.key));
+        if (json) {
+            logInfo(JSON.stringify({ command: "budget list", limits }, null, 2));
+            return 0;
+        }
+        if (limits.length === 0) {
+            logInfo("No budget limits configured.");
+            return 0;
+        }
+        for (const limit of limits) {
+            logInfo(`${limit.key}: window=${limit.window}, requests=${limit.maxRequests ?? "none"}, tokens=${limit.maxTokens ?? "none"}, cost=${limit.maxCostUsd ?? "none"}`);
+        }
+        return 0;
+    }
+    const key = normalizeBudgetKey(rest[0] ?? "");
+    if (!key) {
+        logError("Budget key is required.");
+        return 1;
+    }
+    if (command === "limit") {
+        let window = null;
+        let maxRequests;
+        let maxTokens;
+        let maxCostUsd;
+        for (let i = 1; i < rest.length; i += 1) {
+            const arg = rest[i];
+            const value = rest[i + 1];
+            if (arg === "--window") {
+                if (!value || !VALID_WINDOWS.has(value)) {
+                    logError("--window must be hour, day, week, or month.");
+                    return 1;
+                }
+                window = value;
+                i += 1;
+                continue;
+            }
+            if (arg === "--requests" || arg === "--tokens" || arg === "--cost") {
+                const parsed = parsePositiveNumber(value);
+                if (parsed === null) {
+                    logError(`${arg} requires a positive number.`);
+                    return 1;
+                }
+                if (arg === "--requests")
+                    maxRequests = parsed;
+                if (arg === "--tokens")
+                    maxTokens = parsed;
+                if (arg === "--cost")
+                    maxCostUsd = parsed;
+                i += 1;
+                continue;
+            }
+            logError(`Unknown budget limit option: ${arg ?? "(missing)"}`);
+            return 1;
+        }
+        if (!window) {
+            logError("--window is required.");
+            return 1;
+        }
+        if (!maxRequests && !maxTokens && !maxCostUsd) {
+            logError("At least one of --requests, --tokens, or --cost is required.");
+            return 1;
+        }
+        const limit = upsertBudgetLimit(store, { key, window, maxRequests, maxTokens, maxCostUsd }, now);
+        await saveStore(store);
+        logInfo(`Saved budget limit ${limit.key} (${limit.window}).`);
+        return 0;
+    }
+    if (command === "check") {
+        const limit = store.limits[key];
+        if (!limit) {
+            logError(`Budget limit not found: ${key}`);
+            return 1;
+        }
+        const summary = await (deps.summarizeUsage ?? summarizeUsageLedger)({
+            since: getBudgetWindowStart(limit.window, now),
+            by: "model",
+        });
+        const evaluation = evaluateBudgetGuard(limit, summary);
+        if (rest.includes("--json") || rest.includes("-j")) {
+            logInfo(JSON.stringify({ command: "budget check", evaluation }, null, 2));
+            return evaluation.allowed ? 0 : 1;
+        }
+        logInfo(evaluation.allowed
+            ? `Budget ${key} allows usage.`
+            : `Budget ${key} blocked: ${evaluation.reasons.join("; ")}`);
+        return evaluation.allowed ? 0 : 1;
+    }
+    logError(`Unknown budget command: ${command}`);
+    printBudgetUsage(logInfo);
+    return 1;
+}
+//# sourceMappingURL=budget.js.map