codex-multi-auth 2.19.0 → 2.20.0

package/dist/lib/dashboard-settings.js

@@ -19,6 +19,7 @@ export const DEFAULT_DASHBOARD_DISPLAY_SETTINGS = {
     menuSortQuickSwitchVisibleRow: true,
     uiThemePreset: "green",
     uiAccentColor: "green",
+    uiColorMode: "auto",
     menuShowStatusBadge: true,
     menuShowCurrentBadge: true,
     menuShowLastUsed: true,
@@ -102,6 +103,22 @@ function normalizeAccentColor(value) {
             return "green";
     }
 }
+/**
+ * Normalize an input value into a dashboard terminal-background mode.
+ *
+ * @param value - Input value to coerce into a color mode
+ * @returns `'dark'` or `'light'` if `value` matches one of those strings; otherwise `'auto'` (terminal detection)
+ */
+function normalizeColorMode(value) {
+    switch (value) {
+        case "dark":
+            return "dark";
+        case "light":
+            return "light";
+        default:
+            return "auto";
+    }
+}
 /**
  * Validate a dashboard layout mode, allowing only "expanded-rows".
  *
@@ -249,6 +266,7 @@ export function normalizeDashboardDisplaySettings(value) {
         menuSortQuickSwitchVisibleRow: normalizeBoolean(value.menuSortQuickSwitchVisibleRow, DEFAULT_DASHBOARD_DISPLAY_SETTINGS.menuSortQuickSwitchVisibleRow ?? true),
         uiThemePreset: normalizeThemePreset(value.uiThemePreset),
         uiAccentColor: normalizeAccentColor(value.uiAccentColor),
+        uiColorMode: normalizeColorMode(value.uiColorMode),
         menuShowStatusBadge: normalizeBoolean(value.menuShowStatusBadge, DEFAULT_DASHBOARD_DISPLAY_SETTINGS.menuShowStatusBadge ?? true),
         menuShowCurrentBadge: normalizeBoolean(value.menuShowCurrentBadge, DEFAULT_DASHBOARD_DISPLAY_SETTINGS.menuShowCurrentBadge ?? true),
         menuShowLastUsed: normalizeBoolean(value.menuShowLastUsed, DEFAULT_DASHBOARD_DISPLAY_SETTINGS.menuShowLastUsed ?? true),

package/dist/lib/luna-reserve.d.ts

@@ -0,0 +1,26 @@
+import { LUNA_RESERVE_MODEL } from "./constants.js";
+export interface LunaReserveWindow {
+    usedPercent: number | null;
+    remainingPercent: number | null;
+    windowMinutes: number | null;
+    resetAtMs: number | null;
+}
+export interface LunaReserveSnapshot {
+    observedAt: number;
+    offered: boolean;
+    available: boolean | null;
+    limitId: string | null;
+    limitName: typeof LUNA_RESERVE_MODEL | null;
+    normalModelSlug: string | null;
+    primary: LunaReserveWindow | null;
+    secondary: LunaReserveWindow | null;
+}
+/**
+ * Parse the official Codex app-server `account/rateLimits/read` response for
+ * the separately metered Luna Reserve bucket.
+ *
+ * Absence is intentionally represented as `offered:false`, never as 0% left:
+ * the backend may omit Reserve when an account is not currently eligible or
+ * when the experiment is not active for that account.
+ */
+export declare function parseLunaReserveRateLimits(value: unknown, observedAt?: number): LunaReserveSnapshot;

package/dist/lib/luna-reserve.js

@@ -0,0 +1,68 @@
+import { LUNA_RESERVE_MODEL } from "./constants.js";
+import { isRecord } from "./utils.js";
+/** Return a finite numeric value or null for malformed backend data. */
+function finiteNumber(value) {
+    return typeof value === "number" && Number.isFinite(value) ? value : null;
+}
+/** Normalize backend percentages into the inclusive 0-100 range. */
+function clampPercent(value) {
+    const number = finiteNumber(value);
+    return number === null ? null : Math.max(0, Math.min(100, number));
+}
+/** Parse one Reserve usage window without inventing missing values. */
+function parseWindow(value) {
+    if (!isRecord(value))
+        return null;
+    const usedPercent = clampPercent(value.usedPercent);
+    const duration = finiteNumber(value.windowDurationMins);
+    const resetSeconds = finiteNumber(value.resetsAt);
+    return {
+        usedPercent,
+        remainingPercent: usedPercent === null ? null : Math.max(0, 100 - usedPercent),
+        windowMinutes: duration === null || duration < 0 ? null : duration,
+        resetAtMs: resetSeconds === null || resetSeconds <= 0 ? null : resetSeconds * 1000,
+    };
+}
+/**
+ * Parse the official Codex app-server `account/rateLimits/read` response for
+ * the separately metered Luna Reserve bucket.
+ *
+ * Absence is intentionally represented as `offered:false`, never as 0% left:
+ * the backend may omit Reserve when an account is not currently eligible or
+ * when the experiment is not active for that account.
+ */
+export function parseLunaReserveRateLimits(value, observedAt = Date.now()) {
+    const absent = {
+        observedAt,
+        offered: false,
+        available: null,
+        limitId: null,
+        limitName: null,
+        normalModelSlug: null,
+        primary: null,
+        secondary: null,
+    };
+    if (!isRecord(value) || !isRecord(value.rateLimitsByLimitId))
+        return absent;
+    for (const [limitId, candidate] of Object.entries(value.rateLimitsByLimitId)) {
+        if (!isRecord(candidate) || candidate.limitName !== LUNA_RESERVE_MODEL)
+            continue;
+        const primary = parseWindow(candidate.primary);
+        const secondary = parseWindow(candidate.secondary);
+        const knownWindows = [primary, secondary].filter((window) => window !== null && window.usedPercent !== null);
+        const exhausted = knownWindows.some((window) => (window.usedPercent ?? 0) >= 100);
+        return {
+            observedAt,
+            offered: true,
+            available: knownWindows.length === 0 ? null : !exhausted,
+            limitId: limitId || (typeof candidate.limitId === "string" ? candidate.limitId : null),
+            limitName: LUNA_RESERVE_MODEL,
+            normalModelSlug: typeof candidate.normalModelSlug === "string" && candidate.normalModelSlug.trim()
+                ? candidate.normalModelSlug.trim()
+                : null,
+            primary,
+            secondary,
+        };
+    }
+    return absent;
+}

package/dist/lib/model-route-policy.d.ts

@@ -37,15 +37,15 @@ export declare function resolveModelRoute(model: string, catalogs: RouteCatalog[
 export declare function buildVisibleModelUnion(catalogs: RouteCatalog[]): RouteModel[];
 /** Whitelist capability metadata; never persist model instructions or arbitrary fields. */
 export declare function modelEntitlements(model: RouteModel): {
+    model: string;
+    checkedAt?: number | undefined;
+    probes?: {
+        [k: string]: "downgraded" | "unsupported" | "unverified" | "verified";
+    } | undefined;
     serviceTiers: {
         id: string;
         name: string;
     }[];
     reasoningLevels: string[];
     accessPrograms: string[];
-    probes?: {
-        [k: string]: "unsupported" | "verified" | "unverified" | "downgraded";
-    } | undefined;
-    checkedAt?: number | undefined;
-    model: string;
 };

package/dist/lib/oauth-success.html

@@ -1,126 +1,126 @@
-<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8" />
-  <meta name="viewport" content="width=device-width, initial-scale=1" />
-  <title>Codex Sign-In Complete</title>
-  <style>
-    :root {
-      color-scheme: dark;
-      --bg: #0b0b0b;
-      --panel: #111111;
-      --text: #f2f2f2;
-      --muted: #a3a3a3;
-      --line: #232323;
-      --ok: #7cf0a6;
-    }
-
-    * {
-      box-sizing: border-box;
-    }
-
-    body {
-      margin: 0;
-      min-height: 100vh;
-      display: grid;
-      place-items: center;
-      background: var(--bg);
-      color: var(--text);
-      font-family: "Geist Mono", "GeistMono", ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;
-      padding: 24px;
-    }
-
-    main {
-      width: min(520px, 100%);
-      background: var(--panel);
-      border: 1px solid var(--line);
-      border-radius: 12px;
-      padding: 20px;
-      display: grid;
-      gap: 14px;
-    }
-
-    h1 {
-      margin: 0;
-      font-size: 20px;
-      font-weight: 600;
-      letter-spacing: -0.02em;
-    }
-
-    p {
-      margin: 0;
-      color: var(--muted);
-      font-size: 14px;
-      line-height: 1.5;
-    }
-
-    .status {
-      display: inline-flex;
-      align-items: center;
-      gap: 8px;
-      color: var(--ok);
-      font-size: 13px;
-    }
-
-    .dot {
-      width: 8px;
-      height: 8px;
-      border-radius: 50%;
-      background: currentColor;
-    }
-
-    dl {
-      margin: 0;
-      display: grid;
-      grid-template-columns: 120px 1fr;
-      gap: 8px 12px;
-      font-size: 13px;
-    }
-
-    dt {
-      color: var(--muted);
-    }
-
-    dd {
-      margin: 0;
-      color: var(--text);
-      word-break: break-word;
-    }
-
-    code {
-      background: #171717;
-      border: 1px solid var(--line);
-      border-radius: 6px;
-      padding: 2px 6px;
-      font-family: inherit;
-      font-size: 12px;
-    }
-
-    @media (max-width: 520px) {
-      dl {
-        grid-template-columns: 1fr;
-      }
-    }
-  </style>
-</head>
-<body>
-  <main role="main" aria-label="OAuth callback received">
-    <h1>Sign-in complete</h1>
-    <p>Return to your terminal to finish Codex login.</p>
-
-    <div class="status" aria-live="polite">
-      <span class="dot" aria-hidden="true"></span>
-      Callback received
-    </div>
-
-    <dl>
-      <dt>Endpoint</dt>
-      <dd><code>localhost:1455</code></dd>
-      <dt>Flow</dt>
-      <dd>OAuth callback captured</dd>
-      <dt>Next</dt>
-      <dd>Close this tab and continue in terminal</dd>
-    </dl>
-  </main>
-</body>
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1" />
+  <title>Codex Sign-In Complete</title>
+  <style>
+    :root {
+      color-scheme: dark;
+      --bg: #0b0b0b;
+      --panel: #111111;
+      --text: #f2f2f2;
+      --muted: #a3a3a3;
+      --line: #232323;
+      --ok: #7cf0a6;
+    }
+
+    * {
+      box-sizing: border-box;
+    }
+
+    body {
+      margin: 0;
+      min-height: 100vh;
+      display: grid;
+      place-items: center;
+      background: var(--bg);
+      color: var(--text);
+      font-family: "Geist Mono", "GeistMono", ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;
+      padding: 24px;
+    }
+
+    main {
+      width: min(520px, 100%);
+      background: var(--panel);
+      border: 1px solid var(--line);
+      border-radius: 12px;
+      padding: 20px;
+      display: grid;
+      gap: 14px;
+    }
+
+    h1 {
+      margin: 0;
+      font-size: 20px;
+      font-weight: 600;
+      letter-spacing: -0.02em;
+    }
+
+    p {
+      margin: 0;
+      color: var(--muted);
+      font-size: 14px;
+      line-height: 1.5;
+    }
+
+    .status {
+      display: inline-flex;
+      align-items: center;
+      gap: 8px;
+      color: var(--ok);
+      font-size: 13px;
+    }
+
+    .dot {
+      width: 8px;
+      height: 8px;
+      border-radius: 50%;
+      background: currentColor;
+    }
+
+    dl {
+      margin: 0;
+      display: grid;
+      grid-template-columns: 120px 1fr;
+      gap: 8px 12px;
+      font-size: 13px;
+    }
+
+    dt {
+      color: var(--muted);
+    }
+
+    dd {
+      margin: 0;
+      color: var(--text);
+      word-break: break-word;
+    }
+
+    code {
+      background: #171717;
+      border: 1px solid var(--line);
+      border-radius: 6px;
+      padding: 2px 6px;
+      font-family: inherit;
+      font-size: 12px;
+    }
+
+    @media (max-width: 520px) {
+      dl {
+        grid-template-columns: 1fr;
+      }
+    }
+  </style>
+</head>
+<body>
+  <main role="main" aria-label="OAuth callback received">
+    <h1>Sign-in complete</h1>
+    <p>Return to your terminal to finish Codex login.</p>
+
+    <div class="status" aria-live="polite">
+      <span class="dot" aria-hidden="true"></span>
+      Callback received
+    </div>
+
+    <dl>
+      <dt>Endpoint</dt>
+      <dd><code>localhost:1455</code></dd>
+      <dt>Flow</dt>
+      <dd>OAuth callback captured</dd>
+      <dt>Next</dt>
+      <dd>Close this tab and continue in terminal</dd>
+    </dl>
+  </main>
+</body>
 </html>

package/dist/lib/policy/runtime-policy.js

@@ -1,3 +1,4 @@
+import { logDebug } from "../logger.js";
 import { resolveEntitlementAccountKey } from "../entitlement-cache.js";
 import { getAccountPolicyKey, } from "../account-policy.js";
 import { evaluateBudgetGuard, getBudgetWindowStart, normalizeBudgetKey, } from "../budget-guard.js";
@@ -198,6 +199,19 @@ export function createRuntimeUsageRecorder(input) {
             if (recorded)
                 return;
             recorded = true;
+            if (input.operation === "responses" && recordInput.outcome === "success" && ![
+                recordInput.inputTokens,
+                recordInput.outputTokens,
+                recordInput.cachedInputTokens,
+                recordInput.reasoningTokens,
+                recordInput.totalTokens,
+            ].some(count => typeof count === "number" && count > 0)) {
+                // Keep diagnostics free of account identities, credentials and body data.
+                logDebug("Successful Responses request has zero or missing token usage", {
+                    source: input.source,
+                    operation: input.operation,
+                });
+            }
             const account = recordInput.account;
             const row = {
                 source: input.source,