codex-multi-auth 2.8.4 → 2.8.5

package/dist/lib/runtime/app-helper-selection.js

@@ -0,0 +1,100 @@
+import process from "node:process";
+/**
+ * How stale a `running` record may be before it stops counting as live.
+ *
+ * A running helper republishes its status on every tick, and the publish path
+ * heartbeats at least once per `APP_RUNTIME_HELPER_STATUS_HEARTBEAT_MS` (60s)
+ * even when nothing in the payload changed. Ten heartbeats of silence is not a
+ * helper that is merely quiet — it is a record whose writer is gone.
+ *
+ * This is the identity check these readers were missing. `kill(pid, 0)` answers
+ * "does *a* process hold this integer", so a stale record — classically the
+ * legacy shared `runtime-rotation-app-helper.json` left behind by a SIGKILLed
+ * pre-upgrade helper — passes liveness as soon as an unrelated process is
+ * handed its PID, and can then win selection outright. Freshness is the half of
+ * identity available to a synchronous reader: the wrapper verifies identity by
+ * probing kernel start times, but that costs a `ps` per candidate, and these
+ * two call sites are read-only status paths reached from the interactive menu
+ * as well as the CLI. Whoever holds the PID now, they are not the process that
+ * last wrote this file.
+ */
+export const RUNTIME_HELPER_STATUS_STALE_MS = 10 * 60 * 1000;
+/** Tolerance for clock skew between the writing helper and the reader. */
+export const RUNTIME_HELPER_CLOCK_TOLERANCE_MS = 60 * 1000;
+/**
+ * A PID is a positive integer or it is nothing. Both readers used to accept any
+ * finite number, so a corrupt or hand-edited record carrying `-1234` reached
+ * `process.kill(-1234, 0)` — which on POSIX probes process *group* 1234 and
+ * succeeds on any busy machine, reporting a helper that does not exist as live.
+ * Fractional values were accepted the same way.
+ */
+export function readRuntimeHelperPid(value) {
+    return typeof value === "number" && Number.isInteger(value) && value > 0
+        ? value
+        : null;
+}
+/**
+ * Best-effort liveness probe. `EPERM` means a process exists that this user may
+ * not signal, so it counts as alive; every other errno — including the `EINVAL`
+ * some platforms raise for a PID above their ceiling — counts as dead.
+ */
+export function isRuntimeHelperProcessAlive(pid) {
+    const probePid = readRuntimeHelperPid(pid);
+    if (probePid === null)
+        return false;
+    try {
+        process.kill(probePid, 0);
+        return true;
+    }
+    catch (error) {
+        const code = error && typeof error === "object" && "code" in error ? error.code : null;
+        return code === "EPERM";
+    }
+}
+/**
+ * The single definition of "this helper is currently serving": a running state,
+ * a live PID, and a record recent enough to have been written by that PID's
+ * current occupant.
+ */
+export function isLiveRuntimeHelper(status, now = Date.now()) {
+    if (status.state !== "running")
+        return false;
+    if (!isRuntimeHelperProcessAlive(status.pid))
+        return false;
+    // A record that claims to have started after the current instant was not
+    // written by a process that is running now.
+    if (status.startedAt !== null &&
+        status.startedAt > now + RUNTIME_HELPER_CLOCK_TOLERANCE_MS) {
+        return false;
+    }
+    // A record with no `updatedAt` at all predates the heartbeat contract and
+    // cannot be judged on freshness; it falls back to bare liveness rather than
+    // being discarded, which is no worse than the behaviour it replaces.
+    if (status.updatedAt === null)
+        return true;
+    return now - status.updatedAt <= RUNTIME_HELPER_STATUS_STALE_MS;
+}
+/** Every helper that passes {@link isLiveRuntimeHelper}, input order preserved. */
+export function liveRuntimeHelpers(statuses, now = Date.now()) {
+    return statuses.filter((status) => isLiveRuntimeHelper(status, now));
+}
+function byRecency(left, right) {
+    return (right.updatedAt ?? 0) - (left.updatedAt ?? 0);
+}
+/**
+ * Prefer a live helper, and among several the most recently updated. Absent any
+ * live helper, fall back to the freshest record so the previous "reports the
+ * last helper's final state" behaviour survives.
+ *
+ * Callers that also need the live count must pass the same `statuses` array and
+ * the same `now` to {@link liveRuntimeHelpers}, so the selected helper and the
+ * count describe one instant rather than two.
+ */
+export function selectRuntimeHelperStatus(statuses, now = Date.now()) {
+    if (statuses.length === 0)
+        return null;
+    const live = liveRuntimeHelpers(statuses, now).sort(byRecency);
+    if (live.length > 0)
+        return live[0] ?? null;
+    return [...statuses].sort(byRecency)[0] ?? null;
+}

package/dist/lib/runtime/rotation-server-types.d.ts

@@ -6,6 +6,13 @@ export interface RuntimeRotationProxyServer {
     baseUrl: string;
     close: () => Promise<void>;
     getStatus: () => RuntimeRotationProxyStatus;
+    /**
+     * Number of client sockets currently open against the proxy. The detached
+     * app helper uses it to tell a handed-off consumer from a stranded process;
+     * optional so a proxy shape without it degrades to activity-only accounting
+     * rather than failing to start.
+     */
+    getOpenConnectionCount?: () => number;
 }
 export interface RuntimeRotationProxyStatus {
     startedAt: number;

package/dist/lib/runtime/rotation-server-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rotation-server-types.d.ts","sourceRoot":"","sources":["../../../lib/runtime/rotation-server-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,MAAM,WAAW,0BAA0B;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,SAAS,EAAE,MAAM,0BAA0B,CAAC;CAC5C;AAED,MAAM,WAAW,0BAA0B;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,2BAA2B;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,KAAK,GAAG,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,MAAM,gBAAgB,GACzB,YAAY,GACZ,cAAc,GACd,eAAe,GACf,cAAc,GACd,QAAQ,GACR,aAAa,GACb,YAAY,CAAC;AAChB,MAAM,MAAM,qBAAqB,GAAG,KAAK,GAAG;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,MAAM,WAAW,8BAA8B;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CAClB"}
+{"version":3,"file":"rotation-server-types.d.ts","sourceRoot":"","sources":["../../../lib/runtime/rotation-server-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,MAAM,WAAW,0BAA0B;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,SAAS,EAAE,MAAM,0BAA0B,CAAC;IAC5C;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,MAAM,MAAM,CAAC;CACtC;AAED,MAAM,WAAW,0BAA0B;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,2BAA2B;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,KAAK,GAAG,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,MAAM,gBAAgB,GACzB,YAAY,GACZ,cAAc,GACd,eAAe,GACf,cAAc,GACd,QAAQ,GACR,aAAa,GACb,YAAY,CAAC;AAChB,MAAM,MAAM,qBAAqB,GAAG,KAAK,GAAG;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,MAAM,WAAW,8BAA8B;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CAClB"}

package/dist/lib/runtime/runtime-current-account.d.ts

@@ -35,6 +35,7 @@ export interface AppRuntimeHelperAccountStatus {
     kind: string | null;
     state: string | null;
     pid: number | null;
+    startedAt: number | null;
     lastAccountIndex: number | null;
     lastAccountLabel: string | null;
     lastAccountEmail: string | null;
@@ -42,8 +43,8 @@ export interface AppRuntimeHelperAccountStatus {
     lastAccountUpdatedAt: number | null;
     updatedAt: number | null;
 }
-export declare function readAppRuntimeHelperStatus(): AppRuntimeHelperAccountStatus | null;
-export declare function appRuntimeHelperStatusToSignal(status: AppRuntimeHelperAccountStatus | null): RuntimeAccountSignal | null;
+export declare function readAppRuntimeHelperStatus(now?: number): AppRuntimeHelperAccountStatus | null;
+export declare function appRuntimeHelperStatusToSignal(status: AppRuntimeHelperAccountStatus | null, now?: number): RuntimeAccountSignal | null;
 export declare function readAppRuntimeHelperAccountSignal(): RuntimeAccountSignal | null;
 export declare function resolveRuntimeCurrentAccount(storage: AccountStorageV3, sources: RuntimeCurrentAccountSources, options?: RuntimeCurrentAccountOptions): RuntimeCurrentAccountSelection | null;
 export declare function resolveAccountCurrentMarkers(index: number, storedCurrentIndex: number, runtimeCurrent: RuntimeCurrentAccountSelection | null): AccountCurrentMarker[];

package/dist/lib/runtime/runtime-current-account.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-current-account.d.ts","sourceRoot":"","sources":["../../../lib/runtime/runtime-current-account.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAGzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAGtD,KAAK,2BAA2B,GAC7B,uBAAuB,GACvB,UAAU,GACV,YAAY,CAAC;AAEhB,KAAK,0BAA0B,GAAG,YAAY,GAAG,OAAO,GAAG,OAAO,CAAC;AAEnE,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAC;AAErE,MAAM,WAAW,oBAAoB;IACpC,MAAM,EAAE,2BAA2B,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,8BAA8B;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,2BAA2B,CAAC;IACpC,SAAS,EAAE,0BAA0B,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,4BAA4B;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,4BAA4B;IAC5C,eAAe,CAAC,EAAE,4BAA4B,GAAG,IAAI,CAAC;IACtD,aAAa,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC3C,eAAe,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;CAC9C;AAMD,MAAM,WAAW,6BAA6B;IAC7C,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AA8DD,wBAAgB,0BAA0B,IAAI,6BAA6B,GAAG,IAAI,CA0BjF;AAED,wBAAgB,8BAA8B,CAC7C,MAAM,EAAE,6BAA6B,GAAG,IAAI,GAC1C,oBAAoB,GAAG,IAAI,CAc7B;AAED,wBAAgB,iCAAiC,IAAI,oBAAoB,GAAG,IAAI,CAE/E;AA+FD,wBAAgB,4BAA4B,CAC3C,OAAO,EAAE,gBAAgB,EACzB,OAAO,EAAE,4BAA4B,EACrC,OAAO,GAAE,4BAAiC,GACxC,8BAA8B,GAAG,IAAI,CAgDvC;AAED,wBAAgB,4BAA4B,CAC3C,KAAK,EAAE,MAAM,EACb,kBAAkB,EAAE,MAAM,EAC1B,cAAc,EAAE,8BAA8B,GAAG,IAAI,GACnD,oBAAoB,EAAE,CAWxB;AAED,wBAAgB,uBAAuB,CACtC,KAAK,EAAE,MAAM,EACb,kBAAkB,EAAE,MAAM,EAC1B,cAAc,EAAE,8BAA8B,GAAG,IAAI,GACnD,OAAO,CAET"}
+{"version":3,"file":"runtime-current-account.d.ts","sourceRoot":"","sources":["../../../lib/runtime/runtime-current-account.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAQzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAGtD,KAAK,2BAA2B,GAC7B,uBAAuB,GACvB,UAAU,GACV,YAAY,CAAC;AAEhB,KAAK,0BAA0B,GAAG,YAAY,GAAG,OAAO,GAAG,OAAO,CAAC;AAEnE,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAC;AAErE,MAAM,WAAW,oBAAoB;IACpC,MAAM,EAAE,2BAA2B,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,8BAA8B;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,2BAA2B,CAAC;IACpC,SAAS,EAAE,0BAA0B,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,4BAA4B;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,4BAA4B;IAC5C,eAAe,CAAC,EAAE,4BAA4B,GAAG,IAAI,CAAC;IACtD,aAAa,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC3C,eAAe,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;CAC9C;AAMD,MAAM,WAAW,6BAA6B;IAC7C,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAGnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AA4FD,wBAAgB,0BAA0B,CACzC,GAAG,GAAE,MAAmB,GACtB,6BAA6B,GAAG,IAAI,CAWtC;AAED,wBAAgB,8BAA8B,CAC7C,MAAM,EAAE,6BAA6B,GAAG,IAAI,EAC5C,GAAG,GAAE,MAAmB,GACtB,oBAAoB,GAAG,IAAI,CAa7B;AAED,wBAAgB,iCAAiC,IAAI,oBAAoB,GAAG,IAAI,CAK/E;AA+FD,wBAAgB,4BAA4B,CAC3C,OAAO,EAAE,gBAAgB,EACzB,OAAO,EAAE,4BAA4B,EACrC,OAAO,GAAE,4BAAiC,GACxC,8BAA8B,GAAG,IAAI,CAgDvC;AAED,wBAAgB,4BAA4B,CAC3C,KAAK,EAAE,MAAM,EACb,kBAAkB,EAAE,MAAM,EAC1B,cAAc,EAAE,8BAA8B,GAAG,IAAI,GACnD,oBAAoB,EAAE,CAWxB;AAED,wBAAgB,uBAAuB,CACtC,KAAK,EAAE,MAAM,EACb,kBAAkB,EAAE,MAAM,EAC1B,cAAc,EAAE,8BAA8B,GAAG,IAAI,GACnD,OAAO,CAET"}

package/dist/lib/runtime/runtime-current-account.js

@@ -1,7 +1,6 @@
-import { existsSync, readFileSync, statSync } from "node:fs";
-import { join } from "node:path";
-import process from "node:process";
-import { APP_RUNTIME_HELPER_STATUS_FILE } from "../runtime-constants.js";
+import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
+import { isLiveRuntimeHelper, readRuntimeHelperPid, selectRuntimeHelperStatus, } from "./app-helper-selection.js";
+import { listRuntimeHelperStatusPaths } from "../runtime-constants.js";
 import { getCodexMultiAuthDir } from "../runtime-paths.js";
 import { isRecord } from "../utils.js";
 const RUNTIME_CURRENT_ACCOUNT_MAX_AGE_MS = 24 * 60 * 60 * 1000;
@@ -46,22 +45,7 @@ function readOptionalString(record, key) {
         ? value.trim()
         : null;
 }
-// Best-effort liveness probe: process.kill(pid, 0) can report permission
-// failures for live processes and cannot protect against rare PID reuse.
-function isProcessAlive(pid) {
-    if (!pid)
-        return false;
-    try {
-        process.kill(pid, 0);
-        return true;
-    }
-    catch (error) {
-        const code = error && typeof error === "object" && "code" in error ? error.code : null;
-        return code === "EPERM";
-    }
-}
-export function readAppRuntimeHelperStatus() {
-    const statusPath = join(getCodexMultiAuthDir(), APP_RUNTIME_HELPER_STATUS_FILE);
+function readAppRuntimeHelperStatusFile(statusPath) {
     if (!existsSync(statusPath))
         return null;
     try {
@@ -79,7 +63,8 @@ export function readAppRuntimeHelperStatus() {
         return {
             kind: readOptionalString(parsed, "kind"),
             state: readOptionalString(parsed, "state"),
-            pid: readOptionalNumber(parsed, "pid"),
+            pid: readRuntimeHelperPid(parsed.pid),
+            startedAt: readOptionalNumber(parsed, "startedAt"),
             lastAccountIndex: readOptionalNumber(parsed, "lastAccountIndex"),
             lastAccountLabel: readOptionalString(parsed, "lastAccountLabel"),
             lastAccountEmail: readOptionalString(parsed, "lastAccountEmail"),
@@ -92,14 +77,34 @@ export function readAppRuntimeHelperStatus() {
         return null;
     }
 }
-export function appRuntimeHelperStatusToSignal(status) {
+// Helpers publish per-PID status files (`runtime-rotation-app-helper.<pid>.json`)
+// so N concurrent helpers stop overwriting one shared path; path discovery is
+// shared with every other reader via listRuntimeHelperStatusPaths.
+function listAppRuntimeHelperStatusPaths(multiAuthDir) {
+    let entries = [];
+    try {
+        entries = readdirSync(multiAuthDir);
+    }
+    catch {
+        entries = [];
+    }
+    return listRuntimeHelperStatusPaths(multiAuthDir, entries);
+}
+export function readAppRuntimeHelperStatus(now = Date.now()) {
+    const statuses = listAppRuntimeHelperStatusPaths(getCodexMultiAuthDir())
+        .map(readAppRuntimeHelperStatusFile)
+        .filter((status) => status !== null && status.kind === APP_RUNTIME_HELPER_KIND);
+    // Selection is shared with `rotation status` so the helper named on the
+    // status line and the helper whose account is marked `current` can never be
+    // two different helpers (#667).
+    return selectRuntimeHelperStatus(statuses, now);
+}
+export function appRuntimeHelperStatusToSignal(status, now = Date.now()) {
     if (!status)
         return null;
     if (status.kind !== APP_RUNTIME_HELPER_KIND)
         return null;
-    if (status.state !== "running")
-        return null;
-    if (!isProcessAlive(status.pid))
+    if (!isLiveRuntimeHelper(status, now))
         return null;
     return {
         source: "app-helper",
@@ -112,7 +117,10 @@ export function appRuntimeHelperStatusToSignal(status) {
     };
 }
 export function readAppRuntimeHelperAccountSignal() {
-    return appRuntimeHelperStatusToSignal(readAppRuntimeHelperStatus());
+    // One `now` for both the selection and the liveness verdict, so a helper
+    // cannot be selected against one instant and judged against another.
+    const now = Date.now();
+    return appRuntimeHelperStatusToSignal(readAppRuntimeHelperStatus(now), now);
 }
 function runtimeSnapshotToSignal(snapshot) {
     if (!snapshot)

package/dist/lib/runtime-constants.d.ts

@@ -2,4 +2,34 @@ export declare const RUNTIME_ROTATION_PROXY_PROVIDER_ID: "codex-multi-auth-runti
 export declare const APP_RUNTIME_HELPER_STATUS_FILE: "runtime-rotation-app-helper.json";
 /** Immutable launcher metadata used to verify ownership before stopping a helper. */
 export declare const APP_RUNTIME_HELPER_OWNER_FILE: "runtime-rotation-app-helper-owner.json";
+/**
+ * The one place the per-PID filename shape is written down:
+ * `<base-without-.json>.<pid>.json`, matched case-insensitively with the PID
+ * captured. Status files and owner files share that shape, and so does the
+ * launcher-side sweep in `scripts/codex.js` — that file re-derives the pattern
+ * from the same two constants because it has to keep working before `dist/` is
+ * built, so a change to the shape here is a change there too.
+ */
+export declare function runtimeHelperPerPidPattern(baseName: string): RegExp;
+/**
+ * Every path a helper status record can live at: the per-PID files
+ * (`runtime-rotation-app-helper.<pid>.json`, one per helper) plus the
+ * un-suffixed legacy shared path from before the per-PID change, which is
+ * still read so a pre-upgrade helper stays visible. The filename contract
+ * lives here, next to the constant it derives from, so every reader agrees
+ * on it; callers supply the directory listing so this stays pure and their
+ * own error handling for the `readdir` stays theirs.
+ */
+export declare function listRuntimeHelperStatusPaths(baseDir: string, entries: readonly string[]): string[];
+/**
+ * Owner files paired with the helper PID they belong to. Unbind used to
+ * enumerate status files only, so an owner file whose status record had
+ * already been removed could never be rediscovered and accumulated under the
+ * multi-auth root forever (#666). Enumerating both is what lets a cleanup pass
+ * reclaim an owner file that outlived its status record.
+ */
+export declare function listRuntimeHelperOwnerPaths(baseDir: string, entries: readonly string[]): {
+    path: string;
+    pid: number;
+}[];
 //# sourceMappingURL=runtime-constants.d.ts.map

package/dist/lib/runtime-constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-constants.d.ts","sourceRoot":"","sources":["../../lib/runtime-constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,kCAAkC,EAC9C,gCAAyC,CAAC;AAE3C,eAAO,MAAM,8BAA8B,EAC1C,kCAA2C,CAAC;AAE7C,qFAAqF;AACrF,eAAO,MAAM,6BAA6B,EACzC,wCAAiD,CAAC"}
+{"version":3,"file":"runtime-constants.d.ts","sourceRoot":"","sources":["../../lib/runtime-constants.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,kCAAkC,EAC9C,gCAAyC,CAAC;AAE3C,eAAO,MAAM,8BAA8B,EAC1C,kCAA2C,CAAC;AAE7C,qFAAqF;AACrF,eAAO,MAAM,6BAA6B,EACzC,wCAAiD,CAAC;AAEnD;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAMnE;AAED;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAC3C,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,SAAS,MAAM,EAAE,GACxB,MAAM,EAAE,CAUV;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAC1C,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,SAAS,MAAM,EAAE,GACxB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EAAE,CAcjC"}

package/dist/lib/runtime-constants.js

@@ -1,4 +1,57 @@
+import { join } from "node:path";
 export const RUNTIME_ROTATION_PROXY_PROVIDER_ID = "codex-multi-auth-runtime-proxy";
 export const APP_RUNTIME_HELPER_STATUS_FILE = "runtime-rotation-app-helper.json";
 /** Immutable launcher metadata used to verify ownership before stopping a helper. */
 export const APP_RUNTIME_HELPER_OWNER_FILE = "runtime-rotation-app-helper-owner.json";
+/**
+ * The one place the per-PID filename shape is written down:
+ * `<base-without-.json>.<pid>.json`, matched case-insensitively with the PID
+ * captured. Status files and owner files share that shape, and so does the
+ * launcher-side sweep in `scripts/codex.js` — that file re-derives the pattern
+ * from the same two constants because it has to keep working before `dist/` is
+ * built, so a change to the shape here is a change there too.
+ */
+export function runtimeHelperPerPidPattern(baseName) {
+    const prefix = baseName.replace(/\.json$/i, "");
+    return new RegExp(`^${prefix.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}\\.(\\d+)\\.json$`, "i");
+}
+/**
+ * Every path a helper status record can live at: the per-PID files
+ * (`runtime-rotation-app-helper.<pid>.json`, one per helper) plus the
+ * un-suffixed legacy shared path from before the per-PID change, which is
+ * still read so a pre-upgrade helper stays visible. The filename contract
+ * lives here, next to the constant it derives from, so every reader agrees
+ * on it; callers supply the directory listing so this stays pure and their
+ * own error handling for the `readdir` stays theirs.
+ */
+export function listRuntimeHelperStatusPaths(baseDir, entries) {
+    const perPidPattern = runtimeHelperPerPidPattern(APP_RUNTIME_HELPER_STATUS_FILE);
+    return [
+        ...entries
+            .filter((name) => perPidPattern.test(name))
+            .map((name) => join(baseDir, name)),
+        join(baseDir, APP_RUNTIME_HELPER_STATUS_FILE),
+    ];
+}
+/**
+ * Owner files paired with the helper PID they belong to. Unbind used to
+ * enumerate status files only, so an owner file whose status record had
+ * already been removed could never be rediscovered and accumulated under the
+ * multi-auth root forever (#666). Enumerating both is what lets a cleanup pass
+ * reclaim an owner file that outlived its status record.
+ */
+export function listRuntimeHelperOwnerPaths(baseDir, entries) {
+    const perPidPattern = runtimeHelperPerPidPattern(APP_RUNTIME_HELPER_OWNER_FILE);
+    const owners = [];
+    for (const name of entries) {
+        const match = perPidPattern.exec(name);
+        const captured = match?.[1];
+        if (captured === undefined)
+            continue;
+        const pid = Number.parseInt(captured, 10);
+        if (!Number.isInteger(pid) || pid < 1)
+            continue;
+        owners.push({ path: join(baseDir, name), pid });
+    }
+    return owners;
+}

package/dist/lib/runtime-rotation-proxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-rotation-proxy.d.ts","sourceRoot":"","sources":["../../lib/runtime-rotation-proxy.ts"],"names":[],"mappings":"AAGA,OAAO,EAGN,KAAK,cAAc,EACnB,MAAM,eAAe,CAAC;AA8BvB,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AA2CtE,OAAO,KAAK,EAKX,2BAA2B,EAC3B,0BAA0B,EAE1B,MAAM,oCAAoC,CAAC;AAe5C,YAAY,EACX,2BAA2B,EAC3B,0BAA0B,EAC1B,0BAA0B,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACN,+BAA+B,EAC/B,0BAA0B,GAC1B,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AACxE,OAAO,EACN,+BAA+B,EAC/B,8BAA8B,EAC9B,uBAAuB,EACvB,uBAAuB,GACvB,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AAiDtE,kFAAkF;AAClF,wBAAgB,qBAAqB,CACpC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,GAAG,OAAO,GAAG,cAAc,CAAC,GAAG;IACvE,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB,EACD,MAAM,EAAE,WAAW,EACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GACnB,MAAM,CAmBR;AA8bD;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAC1C,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,GACvC,MAAM,GAAG,IAAI,CAUf;AAED,wBAAsB,yBAAyB,CAC9C,OAAO,EAAE,2BAA2B,GAClC,OAAO,CAAC,0BAA0B,CAAC,CAwKrC"}
+{"version":3,"file":"runtime-rotation-proxy.d.ts","sourceRoot":"","sources":["../../lib/runtime-rotation-proxy.ts"],"names":[],"mappings":"AAGA,OAAO,EAGN,KAAK,cAAc,EACnB,MAAM,eAAe,CAAC;AA8BvB,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AA2CtE,OAAO,KAAK,EAKX,2BAA2B,EAC3B,0BAA0B,EAE1B,MAAM,oCAAoC,CAAC;AAe5C,YAAY,EACX,2BAA2B,EAC3B,0BAA0B,EAC1B,0BAA0B,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACN,+BAA+B,EAC/B,0BAA0B,GAC1B,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AACxE,OAAO,EACN,+BAA+B,EAC/B,8BAA8B,EAC9B,uBAAuB,EACvB,uBAAuB,GACvB,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AAiDtE,kFAAkF;AAClF,wBAAgB,qBAAqB,CACpC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,GAAG,OAAO,GAAG,cAAc,CAAC,GAAG;IACvE,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB,EACD,MAAM,EAAE,WAAW,EACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GACnB,MAAM,CAmBR;AA8bD;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAC1C,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,GACvC,MAAM,GAAG,IAAI,CAUf;AAED,wBAAsB,yBAAyB,CAC9C,OAAO,EAAE,2BAA2B,GAClC,OAAO,CAAC,0BAA0B,CAAC,CA4KrC"}

package/dist/lib/runtime-rotation-proxy.js

@@ -600,6 +600,10 @@ export async function startRuntimeRotationProxy(options) {
             await closeServer(server, sockets);
             await state.activeAccountManager.flushPendingSave();
         },
+        // Live client connections, which the app helper reads as evidence that a
+        // detached consumer is still attached: a helper whose launcher is gone
+        // and whose socket set is empty has nobody left to serve.
+        getOpenConnectionCount: () => sockets.size,
         getStatus: () => ({
             ...state.status,
             // Redact any email/token material that leaked into a raw upstream or

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "codex-multi-auth",
-	"version": "2.8.4",
+	"version": "2.8.5",
 	"description": "Codex CLI multi-account OAuth manager with account switching, health checks, runtime rotation, diagnostics, and recovery tools for @openai/codex",
 	"main": "./dist/index.js",
 	"types": "./dist/index.d.ts",
@@ -174,7 +174,6 @@
 	"dependencies": {
 		"@codex-ai/plugin": "file:vendor/codex-ai-plugin",
 		"@codex-ai/sdk": "file:vendor/codex-ai-sdk",
-		"@openauthjs/openauth": "^0.4.3",
 		"hono": "4.12.33",
 		"undici": "6.28.0",
 		"zod": "4.4.3"