codex-multi-auth 2.3.0-beta.1 → 2.3.0-beta.3

package/dist/lib/runtime/rotation-token-refresh.js

@@ -0,0 +1,99 @@
+import { queuedRefresh } from "../refresh-queue.js";
+import { isTokenInvalidationError, isTokenRefreshRetryable, } from "../request/rate-limit-decision.js";
+/** @internal */
+export const DEFAULT_AUTH_FAILURE_COOLDOWN_MS = 30_000;
+// Monotonic auth-failure cooldown: only extend, never shorten. Two concurrent
+// requests on the same account can race so that an invalidation path sets a
+// long cooldown (5 min) and a subsequent generic 401 truncates it (30 s).
+// Reading the live coolingDownUntil before writing prevents that race.
+/** @internal */
+export function applyMonotonicAuthCooldown(accountManager, account, cooldownMs) {
+    const existing = accountManager.getAccountByIndex(account.index)?.coolingDownUntil ?? 0;
+    // Intentionally Date.now(), not the proxy's injected now(): coolingDownUntil is
+    // written by markAccountCoolingDown via nowMs() (== Date.now()), so both sides of
+    // this comparison must live in the same real-wall-clock domain. Switching to the
+    // injected now() would mis-compare an injected-clock value against a real-clock
+    // deadline and silently defeat the monotonic guard.
+    if (Date.now() + cooldownMs > existing) {
+        accountManager.markAccountCoolingDown(account, cooldownMs, "auth-failure");
+    }
+}
+function hasUsableAccessToken(account, now, skewMs) {
+    return (typeof account.access === "string" &&
+        account.access.trim().length > 0 &&
+        typeof account.expires === "number" &&
+        account.expires > now + Math.max(0, skewMs));
+}
+const runtimeRefreshCommitQueues = new WeakMap();
+async function commitRefreshedAuthOnce(accountManager, account, auth) {
+    const key = [
+        account.index,
+        account.accountId ?? "",
+        account.email ?? "",
+        account.refreshToken,
+    ].join("\0");
+    let queue = runtimeRefreshCommitQueues.get(accountManager);
+    if (!queue) {
+        queue = new Map();
+        runtimeRefreshCommitQueues.set(accountManager, queue);
+    }
+    const existing = queue.get(key);
+    if (existing)
+        return existing;
+    const pending = accountManager
+        .commitRefreshedAuth(account, auth)
+        .finally(() => queue?.delete(key));
+    queue.set(key, pending);
+    return pending;
+}
+/** @internal */
+export async function ensureFreshAccessToken(params) {
+    const { accountManager, account, family, model, now, tokenRefreshSkewMs, tokenInvalidationCooldownMs } = params;
+    if (hasUsableAccessToken(account, now, tokenRefreshSkewMs)) {
+        return { ok: true, accessToken: account.access ?? "", account };
+    }
+    const refreshResult = await queuedRefresh(account.refreshToken);
+    if (refreshResult.type === "failed") {
+        accountManager.recordFailure(account, family, model);
+        accountManager.incrementAuthFailures(account);
+        // If the refresh endpoint itself returns an explicit invalidation message
+        // (e.g. Microsoft/Outlook SSO revokes the refresh token server-side), apply
+        // the long cooldown and signal to the caller to stop rotating rather than
+        // presenting other accounts' tokens from the same IP.
+        const invalidated = isTokenInvalidationError(refreshResult.message ?? "");
+        applyMonotonicAuthCooldown(accountManager, account, invalidated ? tokenInvalidationCooldownMs : DEFAULT_AUTH_FAILURE_COOLDOWN_MS);
+        accountManager.saveToDiskDebounced();
+        return { ok: false, retryable: isTokenRefreshRetryable(refreshResult), invalidated };
+    }
+    const auth = {
+        type: "oauth",
+        access: refreshResult.access,
+        refresh: refreshResult.refresh,
+        expires: refreshResult.expires,
+    };
+    try {
+        const updatedAccount = await commitRefreshedAuthOnce(accountManager, account, auth);
+        // If commit succeeded, use the stored access token from the committed
+        // account — this also handles the dedup case where two concurrent callers
+        // share one commit and both end up with the same committed token.
+        // If commit returned null (account missing from storage after persist),
+        // fall back to the original account object but always use refreshResult.access:
+        // the original account may carry an expired token, and using that would
+        // cause a downstream 401 and incorrectly trigger invalidation-cooldown logic.
+        const resolvedAccount = updatedAccount ?? account;
+        const accessToken = updatedAccount !== null
+            ? (updatedAccount.access ?? refreshResult.access)
+            : refreshResult.access;
+        return {
+            ok: true,
+            accessToken,
+            account: resolvedAccount,
+        };
+    }
+    catch {
+        accountManager.recordFailure(account, family, model);
+        accountManager.markAccountCoolingDown(account, DEFAULT_AUTH_FAILURE_COOLDOWN_MS, "auth-failure");
+        accountManager.saveToDiskDebounced();
+        return { ok: false, retryable: true };
+    }
+}

package/dist/lib/runtime/runtime-current-account.d.ts

@@ -1,8 +1,8 @@
 import type { RuntimeObservabilitySnapshot } from "./runtime-observability.js";
 import type { AppBindRouterStatus } from "./app-bind.js";
 import type { AccountStorageV3 } from "../storage.js";
-export type RuntimeCurrentAccountSource = "runtime-observability" | "app-bind" | "app-helper";
-export type RuntimeCurrentAccountMatch = "account-id" | "email" | "index";
+type RuntimeCurrentAccountSource = "runtime-observability" | "app-bind" | "app-helper";
+type RuntimeCurrentAccountMatch = "account-id" | "email" | "index";
 export type AccountCurrentMarker = "current" | "in-use" | "selected";
 export interface RuntimeAccountSignal {
     source: RuntimeCurrentAccountSource;
@@ -31,7 +31,6 @@ export interface RuntimeCurrentAccountSources {
     appBindStatus?: AppBindRouterStatus | null;
     appHelperStatus?: RuntimeAccountSignal | null;
 }
-export declare const RUNTIME_CURRENT_ACCOUNT_MAX_AGE_MS: number;
 export interface AppRuntimeHelperAccountStatus {
     kind: string | null;
     state: string | null;
@@ -49,4 +48,5 @@ export declare function readAppRuntimeHelperAccountSignal(): RuntimeAccountSigna
 export declare function resolveRuntimeCurrentAccount(storage: AccountStorageV3, sources: RuntimeCurrentAccountSources, options?: RuntimeCurrentAccountOptions): RuntimeCurrentAccountSelection | null;
 export declare function resolveAccountCurrentMarkers(index: number, storedCurrentIndex: number, runtimeCurrent: RuntimeCurrentAccountSelection | null): AccountCurrentMarker[];
 export declare function isDisplayCurrentAccount(index: number, storedCurrentIndex: number, runtimeCurrent: RuntimeCurrentAccountSelection | null): boolean;
+export {};
 //# sourceMappingURL=runtime-current-account.d.ts.map

package/dist/lib/runtime/runtime-current-account.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-current-account.d.ts","sourceRoot":"","sources":["../../../lib/runtime/runtime-current-account.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAGzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEtD,MAAM,MAAM,2BAA2B,GACpC,uBAAuB,GACvB,UAAU,GACV,YAAY,CAAC;AAEhB,MAAM,MAAM,0BAA0B,GAAG,YAAY,GAAG,OAAO,GAAG,OAAO,CAAC;AAE1E,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAC;AAErE,MAAM,WAAW,oBAAoB;IACpC,MAAM,EAAE,2BAA2B,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,8BAA8B;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,2BAA2B,CAAC;IACpC,SAAS,EAAE,0BAA0B,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,4BAA4B;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,4BAA4B;IAC5C,eAAe,CAAC,EAAE,4BAA4B,GAAG,IAAI,CAAC;IACtD,aAAa,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC3C,eAAe,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;CAC9C;AAED,eAAO,MAAM,kCAAkC,QAAsB,CAAC;AAItE,MAAM,WAAW,6BAA6B;IAC7C,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAkED,wBAAgB,0BAA0B,IAAI,6BAA6B,GAAG,IAAI,CA0BjF;AAED,wBAAgB,8BAA8B,CAC7C,MAAM,EAAE,6BAA6B,GAAG,IAAI,GAC1C,oBAAoB,GAAG,IAAI,CAc7B;AAED,wBAAgB,iCAAiC,IAAI,oBAAoB,GAAG,IAAI,CAE/E;AA+FD,wBAAgB,4BAA4B,CAC3C,OAAO,EAAE,gBAAgB,EACzB,OAAO,EAAE,4BAA4B,EACrC,OAAO,GAAE,4BAAiC,GACxC,8BAA8B,GAAG,IAAI,CAgDvC;AAED,wBAAgB,4BAA4B,CAC3C,KAAK,EAAE,MAAM,EACb,kBAAkB,EAAE,MAAM,EAC1B,cAAc,EAAE,8BAA8B,GAAG,IAAI,GACnD,oBAAoB,EAAE,CAWxB;AAED,wBAAgB,uBAAuB,CACtC,KAAK,EAAE,MAAM,EACb,kBAAkB,EAAE,MAAM,EAC1B,cAAc,EAAE,8BAA8B,GAAG,IAAI,GACnD,OAAO,CAET"}
+{"version":3,"file":"runtime-current-account.d.ts","sourceRoot":"","sources":["../../../lib/runtime/runtime-current-account.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAGzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAGtD,KAAK,2BAA2B,GAC7B,uBAAuB,GACvB,UAAU,GACV,YAAY,CAAC;AAEhB,KAAK,0BAA0B,GAAG,YAAY,GAAG,OAAO,GAAG,OAAO,CAAC;AAEnE,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAC;AAErE,MAAM,WAAW,oBAAoB;IACpC,MAAM,EAAE,2BAA2B,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,8BAA8B;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,2BAA2B,CAAC;IACpC,SAAS,EAAE,0BAA0B,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,4BAA4B;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,4BAA4B;IAC5C,eAAe,CAAC,EAAE,4BAA4B,GAAG,IAAI,CAAC;IACtD,aAAa,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC3C,eAAe,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;CAC9C;AAMD,MAAM,WAAW,6BAA6B;IAC7C,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AA8DD,wBAAgB,0BAA0B,IAAI,6BAA6B,GAAG,IAAI,CA0BjF;AAED,wBAAgB,8BAA8B,CAC7C,MAAM,EAAE,6BAA6B,GAAG,IAAI,GAC1C,oBAAoB,GAAG,IAAI,CAc7B;AAED,wBAAgB,iCAAiC,IAAI,oBAAoB,GAAG,IAAI,CAE/E;AA+FD,wBAAgB,4BAA4B,CAC3C,OAAO,EAAE,gBAAgB,EACzB,OAAO,EAAE,4BAA4B,EACrC,OAAO,GAAE,4BAAiC,GACxC,8BAA8B,GAAG,IAAI,CAgDvC;AAED,wBAAgB,4BAA4B,CAC3C,KAAK,EAAE,MAAM,EACb,kBAAkB,EAAE,MAAM,EAC1B,cAAc,EAAE,8BAA8B,GAAG,IAAI,GACnD,oBAAoB,EAAE,CAWxB;AAED,wBAAgB,uBAAuB,CACtC,KAAK,EAAE,MAAM,EACb,kBAAkB,EAAE,MAAM,EAC1B,cAAc,EAAE,8BAA8B,GAAG,IAAI,GACnD,OAAO,CAET"}

package/dist/lib/runtime/runtime-current-account.js

@@ -3,7 +3,8 @@ import { join } from "node:path";
 import process from "node:process";
 import { APP_RUNTIME_HELPER_STATUS_FILE } from "../runtime-constants.js";
 import { getCodexMultiAuthDir } from "../runtime-paths.js";
-export const RUNTIME_CURRENT_ACCOUNT_MAX_AGE_MS = 24 * 60 * 60 * 1000;
+import { isRecord } from "../utils.js";
+const RUNTIME_CURRENT_ACCOUNT_MAX_AGE_MS = 24 * 60 * 60 * 1000;
 const APP_RUNTIME_HELPER_KIND = "codex-app-runtime-rotation-helper";
 const MAX_STATUS_FILE_BYTES = 1024 * 1024; // 1 MB sanity cap
 function normalizeString(value) {
@@ -35,9 +36,6 @@ function normalizeTimestamp(signal) {
     ].filter((timestamp) => timestamp !== null);
     return timestamps.length > 0 ? Math.max(...timestamps) : null;
 }
-function isRecord(value) {
-    return typeof value === "object" && value !== null;
-}
 function readOptionalNumber(record, key) {
     const value = record[key];
     return typeof value === "number" && Number.isFinite(value) ? value : null;
@@ -258,4 +256,3 @@ export function resolveAccountCurrentMarkers(index, storedCurrentIndex, runtimeC
 export function isDisplayCurrentAccount(index, storedCurrentIndex, runtimeCurrent) {
     return runtimeCurrent ? index === runtimeCurrent.index : index === storedCurrentIndex;
 }
-//# sourceMappingURL=runtime-current-account.js.map

package/dist/lib/runtime/runtime-observability.d.ts

@@ -1,4 +1,4 @@
-export interface RuntimeMetricsSnapshot {
+interface RuntimeMetricsSnapshot {
     startedAt: number;
     totalRequests: number;
     successfulRequests: number;
@@ -73,5 +73,5 @@ export declare function recordRuntimeReset(reason: string): void;
  */
 export declare function recordRuntimeAccountRecovery(index: number): void;
 export declare function loadPersistedRuntimeObservabilitySnapshot(): Promise<RuntimeObservabilitySnapshot | null>;
-export declare function resetRuntimeObservabilitySnapshotForTests(): void;
+export {};
 //# sourceMappingURL=runtime-observability.d.ts.map

package/dist/lib/runtime/runtime-observability.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-observability.d.ts","sourceRoot":"","sources":["../../../lib/runtime/runtime-observability.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,sBAAsB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,uBAAuB,EAAE,MAAM,CAAC;IAChC,4BAA4B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,+BAA+B,EAAE,MAAM,CAAC;IACxC,+BAA+B,EAAE,MAAM,CAAC;IACxC,uBAAuB,EAAE,MAAM,CAAC;IAChC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,kCAAkC,EAAE,MAAM,CAAC;IAC3C,gCAAgC,EAAE,MAAM,CAAC;IACzC,wBAAwB,EAAE,MAAM,CAAC;IACjC,oCAAoC,EAAE,MAAM,CAAC;IAC7C,mBAAmB,EAAE,MAAM,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,4BAA4B;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,uBAAuB,EAAE,MAAM,CAAC;IAChC,2BAA2B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,8BAA8B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,6BAA6B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvD,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,cAAc,EAAE,sBAAsB,CAAC;CACvC;AA6LD,wBAAgB,+BAA+B,IAAI,4BAA4B,CAE9E;AAED,wBAAgB,kCAAkC,CACjD,OAAO,EAAE,CAAC,QAAQ,EAAE,4BAA4B,KAAK,IAAI,GACvD,IAAI,CAYN;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE;IACnD,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C,GAAG,IAAI,CAOP;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAKxD;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAWvD;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAoBhE;AAED,wBAAsB,yCAAyC,IAAI,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAAC,CAY9G;AAED,wBAAgB,yCAAyC,IAAI,IAAI,CAGhE"}
+{"version":3,"file":"runtime-observability.d.ts","sourceRoot":"","sources":["../../../lib/runtime/runtime-observability.ts"],"names":[],"mappings":"AAIA,UAAU,sBAAsB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,uBAAuB,EAAE,MAAM,CAAC;IAChC,4BAA4B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,+BAA+B,EAAE,MAAM,CAAC;IACxC,+BAA+B,EAAE,MAAM,CAAC;IACxC,uBAAuB,EAAE,MAAM,CAAC;IAChC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,kCAAkC,EAAE,MAAM,CAAC;IAC3C,gCAAgC,EAAE,MAAM,CAAC;IACzC,wBAAwB,EAAE,MAAM,CAAC;IACjC,oCAAoC,EAAE,MAAM,CAAC;IAC7C,mBAAmB,EAAE,MAAM,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,4BAA4B;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,uBAAuB,EAAE,MAAM,CAAC;IAChC,2BAA2B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,8BAA8B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,6BAA6B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvD,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,cAAc,EAAE,sBAAsB,CAAC;CACvC;AA6LD,wBAAgB,+BAA+B,IAAI,4BAA4B,CAE9E;AAED,wBAAgB,kCAAkC,CACjD,OAAO,EAAE,CAAC,QAAQ,EAAE,4BAA4B,KAAK,IAAI,GACvD,IAAI,CAYN;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE;IACnD,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C,GAAG,IAAI,CAOP;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAKxD;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAWvD;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAoBhE;AAED,wBAAsB,yCAAyC,IAAI,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAAC,CAY9G"}

package/dist/lib/runtime/runtime-observability.js

@@ -263,8 +263,3 @@ export async function loadPersistedRuntimeObservabilitySnapshot() {
         return null;
     }
 }
-export function resetRuntimeObservabilitySnapshotForTests() {
-    snapshotState = createDefaultSnapshot();
-    pendingWrite = null;
-}
-//# sourceMappingURL=runtime-observability.js.map

package/dist/lib/runtime/runtime-services.js

@@ -96,4 +96,3 @@ export function ensureSessionAffinityState(params) {
         sessionAffinityConfigKey: configKey,
     };
 }
-//# sourceMappingURL=runtime-services.js.map

package/dist/lib/runtime/session-affinity-entry.js

@@ -8,4 +8,3 @@ export function ensureSessionAffinityEntry(params) {
         createStore: params.createStore,
     });
 }
-//# sourceMappingURL=session-affinity-entry.js.map

package/dist/lib/runtime/session-affinity.js

@@ -14,4 +14,3 @@ export function ensureRuntimeSessionAffinity(deps) {
         configKey,
     };
 }
-//# sourceMappingURL=session-affinity.js.map

package/dist/lib/runtime/session-recovery.js

@@ -4,4 +4,3 @@ export function createRuntimeSessionRecoveryHook(deps) {
         ? createSessionRecoveryHook({ client: deps.client, directory: deps.directory }, { sessionRecovery: true, autoResume: deps.autoResume })
         : null;
 }
-//# sourceMappingURL=session-recovery.js.map

package/dist/lib/runtime/status-marker.js

@@ -12,4 +12,3 @@ export function getRuntimeStatusMarker(ui, status) {
         return "!";
     return ui.theme.glyphs.cross;
 }
-//# sourceMappingURL=status-marker.js.map

package/dist/lib/runtime/storage-scope.js

@@ -27,4 +27,3 @@ export function applyAccountStorageScopeFromConfig(pluginConfig, deps) {
     }
     deps.setStoragePath(perProjectAccounts ? deps.cwd() : null);
 }
-//# sourceMappingURL=storage-scope.js.map

package/dist/lib/runtime/toast.js

@@ -13,4 +13,3 @@ export async function showRuntimeToast(client, message, variant = "success", opt
         // Ignore when TUI is not available.
     }
 }
-//# sourceMappingURL=toast.js.map

package/dist/lib/runtime/ui-runtime-entry.js

@@ -1,4 +1,3 @@
 export function resolveUiRuntimeEntry(params) {
     return params.resolveUiRuntimeFromConfig(params.loadPluginConfig, params.applyUiRuntimeFromConfig);
 }
-//# sourceMappingURL=ui-runtime-entry.js.map

package/dist/lib/runtime/ui-runtime.js

@@ -20,4 +20,3 @@ export function getStatusMarker(ui, status) {
         return "!";
     return ui.theme.glyphs.cross;
 }
-//# sourceMappingURL=ui-runtime.js.map

package/dist/lib/runtime/verify-flagged.js

@@ -90,4 +90,3 @@ export async function verifyRuntimeFlaggedAccounts(deps) {
     deps.showLine(`Results: ${state.restored.length} restored, ${state.remaining.length} still flagged`);
     deps.showLine("");
 }
-//# sourceMappingURL=verify-flagged.js.map

package/dist/lib/runtime-constants.js

@@ -1,3 +1,2 @@
 export const RUNTIME_ROTATION_PROXY_PROVIDER_ID = "codex-multi-auth-runtime-proxy";
 export const APP_RUNTIME_HELPER_STATUS_FILE = "runtime-rotation-app-helper.json";
-//# sourceMappingURL=runtime-constants.js.map

package/dist/lib/runtime-paths.js

@@ -247,4 +247,3 @@ export function getCodexLogDir() {
 export function getLegacyCodexDir() {
     return join(getResolvedUserHomeDir(), ".codex");
 }
-//# sourceMappingURL=runtime-paths.js.map

package/dist/lib/runtime-rotation-proxy.d.ts

@@ -1,126 +1,9 @@
-import { AccountManager, type ManagedAccount } from "./accounts.js";
-import { type ModelFamily } from "./prompts/codex.js";
-import { type RuntimePolicyDecision } from "./policy/runtime-policy.js";
-import { SessionAffinityStore } from "./session-affinity.js";
-export interface RuntimeRotationProxyServer {
-    host: string;
-    port: number;
-    baseUrl: string;
-    close: () => Promise<void>;
-    getStatus: () => RuntimeRotationProxyStatus;
-}
-export interface RuntimeRotationProxyStatus {
-    startedAt: number;
-    totalRequests: number;
-    upstreamRequests: number;
-    retries: number;
-    rotations: number;
-    streamsStarted: number;
-    lastError: string | null;
-    lastAccountIndex: number | null;
-    lastAccountLabel: string | null;
-    lastAccountId: string | null;
-    lastAccountUpdatedAt: number | null;
-}
-export interface RuntimeRotationProxyOptions {
-    host?: string;
-    port?: number;
-    upstreamBaseUrl?: string;
-    clientApiKey: string;
-    accountManager?: AccountManager;
-    fetchImpl?: typeof fetch;
-    now?: () => number;
-    quotaRemainingPercentThreshold?: number;
-    maxRequestBodyBytes?: number;
-    fetchTimeoutMs?: number;
-    streamStallTimeoutMs?: number;
-}
-export interface StorageMeta {
-    pinnedAccountIndex: number | null;
-    affinityGeneration: number;
-}
-/**
- * Cheap, hot-path-safe single read with mtime-cache short-circuit. When the
- * file's `mtimeMs` and `size` match the cached snapshot for this path we
- * return the cached value WITHOUT reading or hashing the file. Only when
- * mtime/size differ (or were never cached) do we `readFileSync` + sha1 and,
- * if the content hash still matches, skip the `JSON.parse`. Transient
- * failures (EBUSY/EPERM/EACCES/EAGAIN, partial-write SyntaxError) fall through
- * to the last cached value for this path; defaults are only returned when the
- * file has never been successfully read.
- *
- * Replaces an earlier retry loop with a sub-15ms busy-wait that blocked the
- * event loop on every transient failure. The proxy is on the request hot
- * path; serving a slightly stale (but consistent) value is strictly better
- * than blocking. See #474.
- */
-export declare function readStorageMetaFromDisk(storagePath?: string): StorageMeta;
-/**
- * Backwards-compatible helper retained for tests. Prefer `readStorageMetaFromDisk`
- * for new callers that also need `affinityGeneration`.
- */
-export declare function readPinnedAccountIndexFromDisk(storagePath?: string): number | null;
-/**
- * Test-only: reset the storage-meta content-hash cache between scenarios so
- * each test starts from a clean read-from-disk state.
- */
-export declare function resetPinCacheForTesting(): void;
-/**
- * If the on-disk `affinityGeneration` is greater than `lastObservedGeneration`,
- * drop every entry in `sessionAffinityStore` and return the new generation so
- * the caller can update its tracker. Otherwise returns `lastObservedGeneration`
- * unchanged. Extracted so the request-flow logic can be unit-tested without
- * spinning up the full proxy. See issue #474.
- */
-export declare function maybeInvalidateAffinityFromDisk(sessionAffinityStore: SessionAffinityStore | null, lastObservedGeneration: number, storagePath?: string): number;
-export declare function buildTokenInvalidationBody(upstreamBodyText: string): string;
-/**
- * `chooseAccount` is a SYNC selector that internally advances the rotation
- * cursor (the session-affinity-preferred branch and the round-robin fallback
- * both call `accountManager.markSwitched(...)`, and the hybrid selector advances
- * its own cursor). It does NOT acquire the routing mutex itself.
- *
- * Concurrency (L4): when `routingMutex === "enabled"`, the proxy hot path runs
- * this whole call AND the subsequent `markSwitchedLocked` commit inside a single
- * `withRoutingMutex` acquisition, so concurrent requests serialize selection +
- * cursor advance and cannot stampede the same account. `withRoutingMutex` is
- * reentrant (AsyncLocalStorage), so the nested `markSwitchedLocked` — and the
- * later one in `persistRuntimeActiveAccount` — run inline without re-acquiring
- * the non-reentrant FIFO queue (no deadlock). In legacy mode the inline
- * `markSwitched` calls below are used unchanged and no lock is taken, so default
- * behavior and perf are identical. See the hot-path caller in
- * `startRuntimeRotationProxy` and the regression in
- * `test/runtime-rotation-proxy.test.ts`.
- */
-export declare function chooseAccount(params: {
-    accountManager: AccountManager;
-    sessionAffinityStore: SessionAffinityStore | null;
-    sessionKey: string | null;
-    family: ModelFamily;
-    model: string | null;
-    attemptedIndexes: ReadonlySet<number>;
-    now: number;
-    policy: RuntimePolicyDecision | null;
-    pinnedIndex: number | null;
-    skipReasons?: Map<number, string>;
-    stickyBoostByAccount?: Record<number, number>;
-    pidOffsetEnabled?: boolean;
-    schedulingStrategy?: "hybrid" | "sequential";
-}): ManagedAccount | null;
-/**
- * Build the JSON `error` body for a pinned-account 503 response. Extracted so
- * the null-reason desync path (`reason: null`, no parenthetical in `message`)
- * can be unit-tested without standing up a full proxy. The shape mirrors
- * `writePoolExhausted` so consumers can handle both 503 codes uniformly. See
- * issue #486.
- */
-export interface PinnedUnavailableErrorBody {
-    message: string;
-    code: "codex_pinned_account_unavailable";
-    pinnedAccountIndex: number | null;
-    reason: string | null;
-    account_skip_reasons: Record<string, string>;
-}
-export declare function buildPinnedUnavailableErrorBody(pinnedIndex: number | null | undefined, accountSkipReasons: ReadonlyMap<number, string>): PinnedUnavailableErrorBody;
+import type { RuntimeRotationProxyOptions, RuntimeRotationProxyServer } from "./runtime/rotation-server-types.js";
+export type { RuntimeRotationProxyOptions, RuntimeRotationProxyServer, RuntimeRotationProxyStatus, } from "./runtime/rotation-server-types.js";
+export { buildPinnedUnavailableErrorBody, buildTokenInvalidationBody, } from "./request/rate-limit-decision.js";
+export type { PinnedUnavailableErrorBody } from "./request/rate-limit-decision.js";
+export { chooseAccount } from "./runtime/rotation-account-selection.js";
+export { maybeInvalidateAffinityFromDisk, readPinnedAccountIndexFromDisk, readStorageMetaFromDisk, resetPinCacheForTesting, } from "./runtime/rotation-storage-meta.js";
+export type { StorageMeta } from "./runtime/rotation-storage-meta.js";
 export declare function startRuntimeRotationProxy(options: RuntimeRotationProxyOptions): Promise<RuntimeRotationProxyServer>;
 //# sourceMappingURL=runtime-rotation-proxy.d.ts.map

package/dist/lib/runtime-rotation-proxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-rotation-proxy.d.ts","sourceRoot":"","sources":["../../lib/runtime-rotation-proxy.ts"],"names":[],"mappings":"AAIA,OAAO,EACN,cAAc,EAEd,KAAK,cAAc,EACnB,MAAM,eAAe,CAAC;AA2BvB,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAUtE,OAAO,EAIN,KAAK,qBAAqB,EAC1B,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAI7D,MAAM,WAAW,0BAA0B;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,SAAS,EAAE,MAAM,0BAA0B,CAAC;CAC5C;AAED,MAAM,WAAW,0BAA0B;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,2BAA2B;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC9B;AA4RD,MAAM,WAAW,WAAW;IAC3B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,kBAAkB,EAAE,MAAM,CAAC;CAC3B;AA8BD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CACtC,WAAW,GAAE,MAAyB,GACpC,WAAW,CA6Eb;AAED;;;GAGG;AACH,wBAAgB,8BAA8B,CAC7C,WAAW,GAAE,MAAyB,GACpC,MAAM,GAAG,IAAI,CAEf;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AAED;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAC9C,oBAAoB,EAAE,oBAAoB,GAAG,IAAI,EACjD,sBAAsB,EAAE,MAAM,EAC9B,WAAW,GAAE,MAAyB,GACpC,MAAM,CAOR;AA6fD,wBAAgB,0BAA0B,CAAC,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAuB3E;AA8DD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE;IACrC,cAAc,EAAE,cAAc,CAAC;IAC/B,oBAAoB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAClD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,qBAAqB,GAAG,IAAI,CAAC;IACrC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,kBAAkB,CAAC,EAAE,QAAQ,GAAG,YAAY,CAAC;CAC7C,GAAG,cAAc,GAAG,IAAI,CAsJxB;AAqID;;;;;;GAMG;AACH,MAAM,WAAW,0BAA0B;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,kCAAkC,CAAC;IACzC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7C;AAED,wBAAgB,+BAA+B,CAC9C,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACtC,kBAAkB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7C,0BAA0B,CAqB5B;AA0ED,wBAAsB,yBAAyB,CAC9C,OAAO,EAAE,2BAA2B,GAClC,OAAO,CAAC,0BAA0B,CAAC,CAk5BrC"}
+{"version":3,"file":"runtime-rotation-proxy.d.ts","sourceRoot":"","sources":["../../lib/runtime-rotation-proxy.ts"],"names":[],"mappings":"AAwEA,OAAO,KAAK,EAKX,2BAA2B,EAC3B,0BAA0B,EAE1B,MAAM,oCAAoC,CAAC;AAe5C,YAAY,EACX,2BAA2B,EAC3B,0BAA0B,EAC1B,0BAA0B,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACN,+BAA+B,EAC/B,0BAA0B,GAC1B,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AACxE,OAAO,EACN,+BAA+B,EAC/B,8BAA8B,EAC9B,uBAAuB,EACvB,uBAAuB,GACvB,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AA6etE,wBAAsB,yBAAyB,CAC9C,OAAO,EAAE,2BAA2B,GAClC,OAAO,CAAC,0BAA0B,CAAC,CA+IrC"}