codexuse-cli 3.1.3 → 3.1.5

package/dist/server/index.mjs

@@ -45783,6 +45783,69 @@ var ProfileManager = class {
 			return null;
 		}
 	}
+	async captureActiveAuthSnapshot() {
+		await this.initialize();
+		let raw;
+		try {
+			raw = await promises$1.readFile(this.activeAuth, "utf8");
+		} catch (error) {
+			if (this.isNotFoundError(error)) return {
+				fingerprint: null,
+				email: null,
+				accountId: null,
+				userId: null,
+				chatgptUserId: null,
+				workspaceId: null
+			};
+			const message = error instanceof Error ? error.message : "unknown error";
+			const signature = typeof message === "string" ? `${message}:${this.activeAuth}` : this.activeAuth;
+			if (this.lastActiveAuthErrorSignature !== signature) {
+				logWarn("Failed to snapshot active auth file:", error);
+				this.lastActiveAuthErrorSignature = signature;
+			}
+			return {
+				fingerprint: null,
+				email: null,
+				accountId: null,
+				userId: null,
+				chatgptUserId: null,
+				workspaceId: null
+			};
+		}
+		const trimmed = raw.trim();
+		if (!trimmed) return {
+			fingerprint: null,
+			email: null,
+			accountId: null,
+			userId: null,
+			chatgptUserId: null,
+			workspaceId: null
+		};
+		const fingerprint = createHash("sha256").update(trimmed).digest("hex");
+		try {
+			const parsed = JSON.parse(trimmed);
+			const normalized = this.normalizeProfileData(parsed);
+			const metadata = this.extractProfileMetadata(normalized);
+			const workspace = this.resolveWorkspaceIdentity(normalized, metadata);
+			return {
+				fingerprint,
+				email: this.resolveProfileEmail(normalized, metadata) ?? null,
+				accountId: this.getAccountIdFromData(normalized) ?? null,
+				userId: metadata?.userId ?? null,
+				chatgptUserId: metadata?.chatgptUserId ?? null,
+				workspaceId: workspace.id ?? null
+			};
+		} catch {
+			return {
+				fingerprint,
+				email: null,
+				accountId: null,
+				userId: null,
+				chatgptUserId: null,
+				workspaceId: null
+			};
+		}
+	}
 	/**
 	* Decode a JWT payload into an object without validating the signature.
 	*/
@@ -49858,6 +49921,10 @@ function recordRefreshRedeemed(session, output) {
 		appendSessionError(session, detected);
 	}
 }
+function describeActiveAuthOwner(snapshot) {
+	if (!snapshot) return null;
+	return snapshot.email ?? snapshot.userId ?? snapshot.chatgptUserId ?? snapshot.accountId ?? null;
+}
 async function resolveCodexBinaryOrThrow(context) {
 	try {
 		return await requireCodexCli();
@@ -50695,6 +50762,7 @@ const createServer = fn(function* () {
 					authSessions.delete(name);
 				}
 				const startedAt = Date.now();
+				const initialAuthSnapshot = yield* promise(() => profileManager.captureActiveAuthSnapshot());
 				let cleanupConfig = null;
 				const restoreConfig = async () => {
 					if (!cleanupConfig) return;
@@ -50726,6 +50794,7 @@ const createServer = fn(function* () {
 						exitCode: null,
 						mode,
 						startedAt,
+						initialAuthSnapshot,
 						restoreConfig
 					};
 					authSessions.set(name, session);
@@ -50800,6 +50869,16 @@ const createServer = fn(function* () {
 					trackTelemetryEvent("profile_auth_failed", { mode: session.mode });
 					return yield* new RouteRequestError({ message: formatUserFacingError(session.error ?? `Authentication failed with code ${session.exitCode}`, { fallback: "Authentication failed. Try again." }) });
 				}
+				if (session.mode === "create") {
+					const currentAuthSnapshot = yield* promise(() => profileManager.captureActiveAuthSnapshot());
+					if (currentAuthSnapshot.fingerprint === (session.initialAuthSnapshot?.fingerprint ?? null)) {
+						authSessions.delete(body.name);
+						trackTelemetryEvent("profile_auth_complete_failed", { mode: session.mode });
+						const activeOwner = describeActiveAuthOwner(currentAuthSnapshot);
+						const ownerText = activeOwner ? ` The active auth still belongs to '${activeOwner}'.` : "";
+						return yield* new RouteRequestError({ message: `Codex login finished without updating the active auth for '${body.name}'.${ownerText} Finish the browser login for the new account and try again.` });
+					}
+				}
 				try {
 					if (session.mode === "refresh") yield* promise(() => profileManager.refreshProfileAuth(body.name));
 					else {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codexuse-cli",
-  "version": "3.1.3",
+  "version": "3.1.5",
   "description": "CodexUse CLI for managing Codex profiles and licenses.",
   "author": {
     "name": "Hoang",