forgebadger 0.1.1 → 0.1.3

package/dist/gateway/src/services/cli-account/mcode-account.js

@@ -0,0 +1,249 @@
+/**
+ * MiniMax Code account source (read-only observation).
+ *
+ * Layout, verified against `@minimax-ai/code` 0.5.8:
+ *
+ * ```
+ * <dataDir>/auth/<buildEnv>/<region>/<clientId>/
+ *   auth.json        { schemaVersion, records: { "com.minimax.mcode.oauth.<env>.<region>": {
+ *                        accessToken, refreshToken, tokenType, clientId,
+ *                        scopes, audience, expiresAtMs, generation, loginEpoch } } }
+ *   auth-state.json  { status, storeKind, clientId, scopes, audience,
+ *                      buildEnv, region, generation, expiresAtMs }
+ * ```
+ *
+ * The record key is discovered rather than assembled, so a new buildEnv/region
+ * pairing keeps working without a code change.
+ *
+ * Quota endpoint, also taken from the shipped bundle
+ * (`bxe.fetchTokenPlanQuota`):
+ *
+ * ```
+ * GET {base}/v1/api/openplatform/coding_plan/remains
+ * Authorization: Bearer <accessToken>
+ * base: cn -> https://www.minimaxi.com, en -> https://platform.minimax.io
+ * -> { base_resp: { status_code }, model_remains: [{ model_name,
+ *      current_interval_*, end_time, current_weekly_*, weekly_end_time }] }
+ * ```
+ *
+ * Two things are easy to get wrong here and are called out below:
+ *
+ * 1. The upstream field is `current_interval_remaining_percent` — a
+ *    *remaining* ratio, not a used ratio. `CliQuotaEntry.usedPercent` is the
+ *    used percentage, so the value is inverted rather than passed through.
+ * 2. `current_interval_status === 3` means unlimited; the CLI hides the meter
+ *    entirely in that case, so no percentage is reported.
+ *
+ * Policy: read-only. Tokens stay in memory for the duration of one probe and
+ * are never written, logged, or returned over the API. Refresh is never
+ * performed on the user's behalf — the session token is short-lived, so an
+ * expired one surfaces as `token_expired` and the user re-runs `mcode login`.
+ */
+import { readdir, readFile } from "node:fs/promises";
+import path from "node:path";
+import { globalConfigRoot } from "../cli-config-target.js";
+import { asRecord, createPerUserProbeCache, fetchCliQuotaJson, parseLooseNumber, probeConfigRootOptions, readCliTokenFile, stringField } from "./probe-runner.js";
+const QUOTA_PATH = "/v1/api/openplatform/coding_plan/remains";
+const QUOTA_BASES = {
+    cn: "https://www.minimaxi.com",
+    en: "https://platform.minimax.io"
+};
+/** Upstream `current_*_status` value that marks an unlimited plan. */
+const UNLIMITED_STATUS = 3;
+const loginCache = createPerUserProbeCache(2_000);
+export function resetMcodeAccountProbeCache() {
+    loginCache.clear();
+}
+export async function buildMcodeAccountOverview(userId, options = {}) {
+    const login = await loginCache.probe(userId, () => observeMcodeLogin(options));
+    const quota = await observeMcodeQuota(options);
+    return { login, quota };
+}
+export async function observeMcodeLogin(options = {}) {
+    const base = { adapter: "mcode" };
+    const auth = await readMcodeAuth(options);
+    if (!auth || auth.status !== "authenticated") {
+        return { ...base, state: "not_authenticated", method: "unknown" };
+    }
+    if (!auth.accessToken) {
+        return { ...base, state: "not_authenticated", method: "unknown" };
+    }
+    if (auth.expiresAtMs !== undefined && auth.expiresAtMs <= Date.now()) {
+        // The session token is short-lived. Never refresh it here; `mcode login`
+        // is the only supported way to obtain a new one.
+        return {
+            ...base,
+            state: "not_authenticated",
+            method: "oauth",
+            detailCode: "token_expired"
+        };
+    }
+    return { ...base, state: "ready", method: "oauth", ...(auth.clientId ? { accountLabel: auth.clientId } : {}) };
+}
+export async function observeMcodeQuota(options = {}) {
+    const fetchedAt = new Date().toISOString();
+    const auth = await readMcodeAuth(options);
+    if (!auth?.accessToken) {
+        return unsupportedQuota(fetchedAt, "no_native_login");
+    }
+    if (auth.expiresAtMs !== undefined && auth.expiresAtMs <= Date.now()) {
+        return unsupportedQuota(fetchedAt, "token_expired");
+    }
+    const base = QUOTA_BASES[auth.region];
+    if (!base) {
+        // Unknown region means an unrecognised host; do not guess one.
+        return unsupportedQuota(fetchedAt, "upstream_error");
+    }
+    const outcome = await fetchCliQuotaJson({
+        url: `${base}${QUOTA_PATH}`,
+        headers: { Authorization: `Bearer ${auth.accessToken}` },
+        ...(options.fetchImpl ? { fetchImpl: options.fetchImpl } : {})
+    });
+    if (!outcome.ok) {
+        return unsupportedQuota(fetchedAt, outcome.errorCode === "token_expired" ? "token_expired" : "upstream_error");
+    }
+    return parseQuotaBody(outcome.body, fetchedAt);
+}
+/**
+ * Locates the credential directory under `<dataDir>/auth/<buildEnv>/<region>/<clientId>`
+ * and merges the non-secret state file with the token record. Returns undefined
+ * when nothing is installed or no record carries an access token.
+ *
+ * Region and buildEnv are read from the directory path (and cross-checked
+ * against auth-state.json) rather than the `com.minimax.mcode.oauth.*` record
+ * key, so the record key format can change without breaking quota routing.
+ */
+async function readMcodeAuth(options) {
+    const root = globalConfigRoot("mcode", probeConfigRootOptions(options));
+    const authRoot = path.join(root, "auth");
+    for (const dir of await listAuthDirs(authRoot)) {
+        const credentialRead = await readCliTokenFile(path.join(dir, "auth.json"));
+        if (!credentialRead.ok)
+            continue;
+        const records = asRecord(credentialRead.data.records);
+        if (!records)
+            continue;
+        for (const [recordKey, value] of Object.entries(records)) {
+            const record = asRecord(value);
+            const accessToken = stringField(record?.accessToken);
+            if (!accessToken)
+                continue;
+            const state = asRecord(await readJson(path.join(dir, "auth-state.json"))) ?? {};
+            // <authRoot>/<buildEnv>/<region>/<clientId>
+            const segments = path.relative(authRoot, dir).split(path.sep);
+            const buildEnv = stringField(state.buildEnv) ?? (segments.length >= 3 ? segments[0] : undefined) ?? "";
+            const region = stringField(state.region) ?? (segments.length >= 2 ? segments[1] : undefined) ?? "";
+            const clientId = stringField(record?.clientId) ?? stringField(state.clientId) ?? regionFromRecordKey(recordKey);
+            return {
+                dir,
+                region,
+                buildEnv,
+                clientId,
+                status: stringField(state.status) ?? "authenticated",
+                expiresAtMs: parseLooseNumber(state.expiresAtMs) ?? parseLooseNumber(record?.expiresAtMs),
+                accessToken
+            };
+        }
+    }
+    return undefined;
+}
+/** `<dataDir>/auth/<buildEnv>/<region>/<clientId>` directories, best effort. */
+async function listAuthDirs(authRoot) {
+    const dirs = [];
+    const walk = async (dir, depth) => {
+        if (depth > 3)
+            return;
+        let entries;
+        try {
+            entries = await readdir(dir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            if (!entry.isDirectory())
+                continue;
+            const next = path.join(dir, entry.name);
+            dirs.push(next);
+            await walk(next, depth + 1);
+        }
+    };
+    await walk(authRoot, 0);
+    return dirs;
+}
+async function readJson(filePath) {
+    try {
+        return JSON.parse(await readFile(filePath, "utf8"));
+    }
+    catch {
+        return undefined;
+    }
+}
+function regionFromRecordKey(key) {
+    const parts = key.split(".");
+    return parts.length >= 2 ? parts[parts.length - 1] : undefined;
+}
+function unsupportedQuota(fetchedAt, reason) {
+    return { supported: false, entries: [], fetchedAt, ...(reason ? { unsupportedReason: reason } : {}) };
+}
+function parseQuotaBody(body, fetchedAt) {
+    const root = asRecord(body);
+    if (!root)
+        return unsupportedQuota(fetchedAt, "upstream_error");
+    // base_resp.status_code !== 0 is the CLI's own success gate.
+    const baseResp = asRecord(root.base_resp);
+    const statusCode = parseLooseNumber(baseResp?.status_code);
+    if (statusCode !== undefined && statusCode !== 0) {
+        return unsupportedQuota(fetchedAt, "upstream_error");
+    }
+    const remains = Array.isArray(root.model_remains) ? root.model_remains : [];
+    const first = asRecord(remains[0]);
+    if (!first)
+        return unsupportedQuota(fetchedAt, "upstream_error");
+    const entries = [];
+    const fiveHour = windowEntry(first, "interval", "Five-hour window");
+    if (fiveHour)
+        entries.push(fiveHour);
+    const weekly = windowEntry(first, "weekly", "Weekly window");
+    if (weekly)
+        entries.push(weekly);
+    if (entries.length === 0)
+        return unsupportedQuota(fetchedAt, "upstream_error");
+    return { supported: true, entries, fetchedAt };
+}
+/**
+ * One quota window. `interval` reads the `current_interval_*` prefix and
+ * `weekly` the `current_weekly_*` prefix; the reset field differs per window
+ * (`end_time` vs `weekly_end_time`).
+ */
+function windowEntry(remain, window, label) {
+    const prefix = window === "interval" ? "current_interval" : "current_weekly";
+    const unlimited = parseLooseNumber(remain[`${prefix}_status`]) === UNLIMITED_STATUS;
+    const remainingPercent = parseLooseNumber(remain[`${prefix}_remaining_percent`]);
+    const total = parseLooseNumber(remain[`${prefix}_total_count`]);
+    const used = parseLooseNumber(remain[`${prefix}_usage_count`]);
+    // Upstream reports *remaining*; CliQuotaEntry reports *used*.
+    let usedPercent;
+    if (!unlimited) {
+        if (remainingPercent !== undefined) {
+            usedPercent = Math.round(Math.min(100, Math.max(0, 100 - remainingPercent)));
+        }
+        else if (total !== undefined && total > 0 && used !== undefined) {
+            usedPercent = Math.min(100, (used / total) * 100);
+        }
+    }
+    const resetField = window === "interval" ? "end_time" : "weekly_end_time";
+    const resetAtMs = parseLooseNumber(remain[resetField]);
+    const resetsAt = resetAtMs !== undefined && resetAtMs > 0 ? new Date(resetAtMs).toISOString() : undefined;
+    // Unlimited plans report no percentage at all (the CLI hides the meter).
+    if (usedPercent === undefined && !unlimited)
+        return undefined;
+    return {
+        label,
+        unit: "percent",
+        ...(unlimited ? { usedPercent: 0 } : { ...(usedPercent !== undefined ? { usedPercent } : {}) }),
+        ...(total !== undefined && total > 0 ? { limit: total } : {}),
+        ...(resetsAt ? { resetsAt } : {})
+    };
+}
+//# sourceMappingURL=mcode-account.js.map

package/dist/gateway/src/services/cli-account/mcode-account.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcode-account.js","sourceRoot":"","sources":["../../../../src/services/cli-account/mcode-account.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EACL,QAAQ,EACR,uBAAuB,EACvB,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,gBAAgB,EAChB,WAAW,EACZ,MAAM,mBAAmB,CAAC;AAE3B,MAAM,UAAU,GAAG,0CAA0C,CAAC;AAE9D,MAAM,WAAW,GAA2B;IAC1C,EAAE,EAAE,0BAA0B;IAC9B,EAAE,EAAE,6BAA6B;CAClC,CAAC;AAEF,sEAAsE;AACtE,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B,MAAM,UAAU,GAAG,uBAAuB,CAAiB,KAAK,CAAC,CAAC;AAElE,MAAM,UAAU,2BAA2B;IACzC,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC;AAeD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAc,EACd,UAAkC,EAAE;IAEpC,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC/C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,UAAkC,EAAE;IAC1E,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,OAAgB,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;QAC7C,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACtB,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACrE,yEAAyE;QACzE,iDAAiD;QACjD,OAAO;YACL,GAAG,IAAI;YACP,KAAK,EAAE,mBAAmB;YAC1B,MAAM,EAAE,OAAO;YACf,UAAU,EAAE,eAAe;SAC5B,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACjH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,UAAkC,EAAE;IAC1E,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC;QACvB,OAAO,gBAAgB,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACrE,OAAO,gBAAgB,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,+DAA+D;QAC/D,OAAO,gBAAgB,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC;QACtC,GAAG,EAAE,GAAG,IAAI,GAAG,UAAU,EAAE;QAC3B,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,WAAW,EAAE,EAAE;QACxD,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,gBAAgB,CACrB,SAAS,EACT,OAAO,CAAC,SAAS,KAAK,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,gBAAgB,CAC3E,CAAC;IACJ,CAAC;IACD,OAAO,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,aAAa,CAAC,OAA+B;IAC1D,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,EAAE,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAEzC,KAAK,MAAM,GAAG,IAAI,MAAM,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/C,MAAM,cAAc,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,cAAc,CAAC,EAAE;YAAE,SAAS;QACjC,MAAM,OAAO,GAAG,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACzD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC/B,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YACrD,IAAI,CAAC,WAAW;gBAAE,SAAS;YAE3B,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAChF,4CAA4C;YAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9D,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACvG,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACnG,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,mBAAmB,CAAC,SAAS,CAAC,CAAC;YAEhH,OAAO;gBACL,GAAG;gBACH,MAAM;gBACN,QAAQ;gBACR,QAAQ;gBACR,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,eAAe;gBACpD,WAAW,EAAE,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,gBAAgB,CAAC,MAAM,EAAE,WAAW,CAAC;gBACzF,WAAW;aACZ,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,gFAAgF;AAChF,KAAK,UAAU,YAAY,CAAC,QAAgB;IAC1C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,KAAK,EAAE,GAAW,EAAE,KAAa,EAAiB,EAAE;QAC/D,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO;QACtB,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;gBAAE,SAAS;YACnC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,MAAM,IAAI,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC;IACF,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACxB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAgB;IACtC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,SAAS,gBAAgB,CACvB,SAAiB,EACjB,MAA2C;IAE3C,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACxG,CAAC;AAED,SAAS,cAAc,CAAC,IAAa,EAAE,SAAiB;IACtD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,IAAI;QAAE,OAAO,gBAAgB,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAEhE,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC3D,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;QACjD,OAAO,gBAAgB,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK;QAAE,OAAO,gBAAgB,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAEjE,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC;IACpE,IAAI,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;IAC7D,IAAI,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEjC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,gBAAgB,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAC/E,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAClB,MAA+B,EAC/B,MAA6B,EAC7B,KAAa;IAEb,MAAM,MAAM,GAAG,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,gBAAgB,CAAC;IAC7E,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,CAAC,KAAK,gBAAgB,CAAC;IACpF,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,MAAM,CAAC,GAAG,MAAM,oBAAoB,CAAC,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC,CAAC,CAAC;IAE/D,8DAA8D;IAC9D,IAAI,WAA+B,CAAC;IACpC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;QAC/E,CAAC;aAAM,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAClE,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC;IAC1E,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,SAAS,KAAK,SAAS,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAE1G,yEAAyE;IACzE,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IAE9D,OAAO;QACL,KAAK;QACL,IAAI,EAAE,SAAS;QACf,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC/F,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClC,CAAC;AACJ,CAAC"}

package/dist/gateway/src/services/cli-account/probe-runner.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Generic probe infrastructure for the cli-account subsystem, generalized
+ * from the former codex-native-auth-status probe: per-user caching with
+ * in-flight dedupe and a global concurrency cap, an injectable execFile
+ * runner, a read-only token-file reader, and a tolerant HTTPS JSON fetcher
+ * for the unofficial quota endpoints.
+ */
+export interface CliProbeRunResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+}
+export type CliProbeRunner = (command: string, args: string[], signal: AbortSignal, options: {
+    env: NodeJS.ProcessEnv;
+}) => Promise<CliProbeRunResult>;
+export declare function buildCliProbeEnv(): NodeJS.ProcessEnv;
+export declare function runCliProbe(command: string, args: string[], signal: AbortSignal, options: {
+    env: NodeJS.ProcessEnv;
+}): Promise<CliProbeRunResult>;
+export declare function isMissingBinaryError(error: unknown): boolean;
+export declare class CliProbeLimitError extends Error {
+    readonly code = "CLI_PROBE_BUSY";
+}
+/**
+ * Per-probe-kind cache: 2s TTL per user, singleflight per user, and a global
+ * concurrency cap so a burst of users cannot spawn unbounded CLI subprocesses.
+ */
+export declare function createPerUserProbeCache<T>(ttlMs: number): {
+    probe(userId: string, run: () => Promise<T>): Promise<T>;
+    clear(): void;
+};
+export type CliTokenFileRead = {
+    ok: true;
+    data: Record<string, unknown>;
+} | {
+    ok: false;
+};
+/**
+ * Read-only token material reader. Tokens are password-equivalent: the file
+ * is read into memory only, never persisted, logged, or returned by any API.
+ * Enforces the 64KB cap and a POSIX 0600 permission check (Windows ACLs do
+ * not expose POSIX mode bits, so the check is skipped there).
+ */
+export declare function readCliTokenFile(filePath: string): Promise<CliTokenFileRead>;
+export type CliQuotaFetchOutcome = {
+    ok: true;
+    body: unknown;
+} | {
+    ok: false;
+    errorCode: "token_expired" | "upstream_error" | "timeout" | "invalid_response";
+};
+export interface CliQuotaFetchRequest {
+    url: string;
+    /** May carry secrets (Bearer token, account id) — never logged or echoed. */
+    headers: Record<string, string>;
+    timeoutMs?: number;
+    fetchImpl?: typeof fetch;
+}
+/**
+ * Tolerant HTTPS JSON fetcher for the unofficial quota endpoints. Never
+ * throws: failures degrade to a classified error code. 401/403 means the
+ * access token died (we never refresh OAuth tokens ourselves — the user must
+ * re-login); 429/5xx and network issues are upstream errors.
+ */
+export declare function fetchCliQuotaJson(request: CliQuotaFetchRequest): Promise<CliQuotaFetchOutcome>;
+/** Tolerantly extract `exp` (seconds) from a JWT payload; undefined when absent/malformed. */
+export declare function parseJwtExpiresAt(token: string): number | undefined;
+export declare function asRecord(value: unknown): Record<string, unknown> | undefined;
+/** Parse a JSON field as a number, tolerating string-encoded numbers. */
+export declare function parseLooseNumber(value: unknown): number | undefined;
+/** Normalize epoch seconds / epoch ms / ISO strings into an ISO timestamp. */
+export declare function toIsoTimestamp(value: unknown): string | undefined;
+export declare function stringField(value: unknown): string | undefined;
+/** exactOptionalPropertyTypes-safe forwarding of probe overrides to globalConfigRoot. */
+export declare function probeConfigRootOptions(options: {
+    env?: NodeJS.ProcessEnv;
+    homeDir?: string;
+}): {
+    env?: NodeJS.ProcessEnv;
+    homeDir?: string;
+};

package/dist/gateway/src/services/cli-account/probe-runner.js

@@ -0,0 +1,181 @@
+import { execFile } from "node:child_process";
+import { readFile, stat } from "node:fs/promises";
+import { buildSanitizedEnv } from "../session-server/env-policy.js";
+export function buildCliProbeEnv() {
+    return buildSanitizedEnv(process.env);
+}
+export function runCliProbe(command, args, signal, options) {
+    return new Promise((resolve, reject) => {
+        execFile(command, args, { signal, timeout: 2_000, maxBuffer: 16 * 1024, env: options.env }, (error, stdout, stderr) => {
+            if (error && typeof error.code !== "number") {
+                reject(error);
+                return;
+            }
+            resolve({
+                exitCode: typeof error?.code === "number" ? error.code : 0,
+                stdout,
+                stderr
+            });
+        });
+    });
+}
+export function isMissingBinaryError(error) {
+    return error instanceof Error && "code" in error && error.code === "ENOENT";
+}
+export class CliProbeLimitError extends Error {
+    code = "CLI_PROBE_BUSY";
+}
+const maxGlobalActiveProbes = 4;
+/**
+ * Per-probe-kind cache: 2s TTL per user, singleflight per user, and a global
+ * concurrency cap so a burst of users cannot spawn unbounded CLI subprocesses.
+ */
+export function createPerUserProbeCache(ttlMs) {
+    const cache = new Map();
+    const flights = new Map();
+    let active = 0;
+    return {
+        async probe(userId, run) {
+            const cached = cache.get(userId);
+            if (cached && cached.expiresAt > Date.now())
+                return cached.value;
+            const existing = flights.get(userId);
+            if (existing)
+                return existing;
+            if (active >= maxGlobalActiveProbes)
+                throw new CliProbeLimitError("CLI account probe is busy");
+            active += 1;
+            const flight = run().then((value) => {
+                cache.set(userId, { expiresAt: Date.now() + ttlMs, value });
+                return value;
+            }).finally(() => {
+                active -= 1;
+                flights.delete(userId);
+            });
+            flights.set(userId, flight);
+            return flight;
+        },
+        clear() {
+            cache.clear();
+            flights.clear();
+            active = 0;
+        }
+    };
+}
+const maxTokenFileBytes = 64 * 1024;
+/**
+ * Read-only token material reader. Tokens are password-equivalent: the file
+ * is read into memory only, never persisted, logged, or returned by any API.
+ * Enforces the 64KB cap and a POSIX 0600 permission check (Windows ACLs do
+ * not expose POSIX mode bits, so the check is skipped there).
+ */
+export async function readCliTokenFile(filePath) {
+    try {
+        const info = await stat(filePath);
+        if (!info.isFile() || info.size > maxTokenFileBytes)
+            return { ok: false };
+        if (process.platform !== "win32" && (info.mode & 0o077) !== 0)
+            return { ok: false };
+        const raw = await readFile(filePath, "utf8");
+        const parsed = JSON.parse(raw);
+        if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed))
+            return { ok: false };
+        return { ok: true, data: parsed };
+    }
+    catch {
+        return { ok: false };
+    }
+}
+const defaultQuotaTimeoutMs = 10_000;
+/**
+ * Tolerant HTTPS JSON fetcher for the unofficial quota endpoints. Never
+ * throws: failures degrade to a classified error code. 401/403 means the
+ * access token died (we never refresh OAuth tokens ourselves — the user must
+ * re-login); 429/5xx and network issues are upstream errors.
+ */
+export async function fetchCliQuotaJson(request) {
+    const fetchImpl = request.fetchImpl ?? fetch;
+    const timeoutMs = request.timeoutMs ?? defaultQuotaTimeoutMs;
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        const response = await fetchImpl(request.url, {
+            method: "GET",
+            headers: { Accept: "application/json", ...request.headers },
+            redirect: "error",
+            signal: controller.signal
+        });
+        if (!response.ok) {
+            if (response.status === 401 || response.status === 403)
+                return { ok: false, errorCode: "token_expired" };
+            return { ok: false, errorCode: "upstream_error" };
+        }
+        const body = await response.json().catch(() => undefined);
+        if (body === undefined)
+            return { ok: false, errorCode: "invalid_response" };
+        return { ok: true, body };
+    }
+    catch (error) {
+        if (error instanceof DOMException && error.name === "AbortError")
+            return { ok: false, errorCode: "timeout" };
+        return { ok: false, errorCode: "upstream_error" };
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
+/** Tolerantly extract `exp` (seconds) from a JWT payload; undefined when absent/malformed. */
+export function parseJwtExpiresAt(token) {
+    const parts = token.split(".");
+    if (parts.length < 2)
+        return undefined;
+    const payload = parts[1];
+    if (!payload)
+        return undefined;
+    try {
+        const decoded = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
+        const exp = asRecord(decoded)?.exp;
+        return typeof exp === "number" && Number.isFinite(exp) ? exp : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function asRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+/** Parse a JSON field as a number, tolerating string-encoded numbers. */
+export function parseLooseNumber(value) {
+    if (typeof value === "number" && Number.isFinite(value))
+        return value;
+    if (typeof value === "string") {
+        const parsed = Number.parseFloat(value);
+        if (Number.isFinite(parsed))
+            return parsed;
+    }
+    return undefined;
+}
+/** Normalize epoch seconds / epoch ms / ISO strings into an ISO timestamp. */
+export function toIsoTimestamp(value) {
+    if (typeof value === "string" && value)
+        return value;
+    if (typeof value === "number" && Number.isFinite(value)) {
+        const millis = value > 1e12 ? value : value * 1000;
+        const date = new Date(millis);
+        return Number.isNaN(date.getTime()) ? undefined : date.toISOString();
+    }
+    return undefined;
+}
+export function stringField(value) {
+    return typeof value === "string" && value ? value : undefined;
+}
+/** exactOptionalPropertyTypes-safe forwarding of probe overrides to globalConfigRoot. */
+export function probeConfigRootOptions(options) {
+    return {
+        ...(options.env !== undefined ? { env: options.env } : {}),
+        ...(options.homeDir !== undefined ? { homeDir: options.homeDir } : {})
+    };
+}
+//# sourceMappingURL=probe-runner.js.map

package/dist/gateway/src/services/cli-account/probe-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe-runner.js","sourceRoot":"","sources":["../../../../src/services/cli-account/probe-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAuBpE,MAAM,UAAU,gBAAgB;IAC9B,OAAO,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,OAAe,EACf,IAAc,EACd,MAAmB,EACnB,OAAmC;IAEnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACpH,IAAI,KAAK,IAAI,OAAQ,KAA4B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACpE,MAAM,CAAC,KAAK,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YACD,OAAO,CAAC;gBACN,QAAQ,EAAE,OAAQ,KAAmC,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAqC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC1H,MAAM;gBACN,MAAM;aACP,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC;AACzG,CAAC;AAED,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAClC,IAAI,GAAG,gBAAgB,CAAC;CAClC;AAED,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEhC;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAI,KAAa;IACtD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA2C,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC9C,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,MAAc,EAAE,GAAqB;YAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;gBAAE,OAAO,MAAM,CAAC,KAAK,CAAC;YACjE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;YAC9B,IAAI,MAAM,IAAI,qBAAqB;gBAAE,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;YAC/F,MAAM,IAAI,CAAC,CAAC;YACZ,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;gBAClC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC5D,OAAO,KAAK,CAAC;YACf,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;gBACd,MAAM,IAAI,CAAC,CAAC;gBACZ,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACzB,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK;YACH,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,GAAG,CAAC,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAC;AAMpC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IACrD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,iBAAiB;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QAC1E,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QACpF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QACjG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAiC,EAAE,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAMD,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAUrC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAA6B;IACnE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,qBAAqB,CAAC;IAC7D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;YAC5C,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE;YAC3D,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;YACzG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;QACpD,CAAC;QACD,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnE,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC;QAC5E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;QAC7G,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;IACpD,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;QAC1F,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC;QACnC,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAC,KAAgC;QAClC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;IAC7C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC;QACnD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IACvE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAChE,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,sBAAsB,CAAC,OAGtC;IACC,OAAO;QACL,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAC;AACJ,CAAC"}

package/dist/gateway/src/services/cli-account/types.d.ts

@@ -0,0 +1,49 @@
+/**
+ * cli-account subsystem: read-only observation of each CLI's native login
+ * state (OAuth / subscription) and subscription quota. opencode and pi are
+ * reserved for a later phase — they have no native account/quota surface yet.
+ */
+export type CliAccountAdapter = "claude" | "codex" | "kimi" | "mcode";
+/**
+ * `custom_endpoint` (claude): the effective global config points
+ * ANTHROPIC_BASE_URL at a non-Anthropic endpoint (Gateway loopback route or
+ * third-party compatible relay), so a "native login" claim would be
+ * misleading even when `claude auth status` reports loggedIn.
+ */
+export type CliLoginState = "ready" | "custom_endpoint" | "not_authenticated" | "cli_missing" | "unknown";
+export interface CliLoginStatus {
+    adapter: CliAccountAdapter;
+    state: CliLoginState;
+    /** Login method, e.g. claude "claude.ai", codex "chatgpt"|"api", kimi "oauth"|"api_key". */
+    method?: string;
+    /** Human-facing account hint (e.g. email) when the CLI exposes one. */
+    accountLabel?: string;
+    /**
+     * Machine-readable qualifier for ambiguous states (e.g. "token_expired",
+     * or claude's exit-0-but-loggedIn:false third-party-gateway false positive,
+     * where the original payload value is passed through verbatim).
+     */
+    detailCode?: string;
+}
+export type CliQuotaUnsupportedReason = "keychain" | "no_native_login" | "api_key_mode" | "token_expired" | "upstream_error";
+export interface CliQuotaEntry {
+    label: string;
+    unit: "percent" | "count" | "currency";
+    /** 0-100 usage percentage when the endpoint reports one. */
+    usedPercent?: number;
+    remaining?: number;
+    limit?: number;
+    /** ISO timestamp when the quota window resets, when reported. */
+    resetsAt?: string;
+}
+export interface CliQuotaResult {
+    supported: boolean;
+    unsupportedReason?: CliQuotaUnsupportedReason;
+    planLabel?: string;
+    entries: CliQuotaEntry[];
+    fetchedAt: string;
+}
+export interface CliAccountOverview {
+    login: CliLoginStatus;
+    quota?: CliQuotaResult;
+}

package/dist/gateway/src/services/cli-account/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/gateway/src/services/cli-account/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/services/cli-account/types.ts"],"names":[],"mappings":""}

package/dist/gateway/src/services/cli-config-apply.d.ts

@@ -1,6 +1,7 @@
 import type { Database } from "../db/types.js";
 import { type ProviderProfile } from "../db/repositories/model-provider-repository.js";
 import type { AdapterId } from "./adapter-discovery.js";
+import { type CodexConfigProbeFn } from "./codex-config-probe.js";
 import { type OutboundHostResolver } from "./network-policy.js";
 export declare class CliConfigApplyError extends Error {
     readonly code: string;
@@ -34,10 +35,17 @@ export interface CliConfigApplyInput {
      */
     codexWireApi?: CodexWireApi | undefined;
     resolveHost?: OutboundHostResolver | undefined;
+    /**
+     * Test seam: replaces the Codex config validation probe (which spawns the
+     * installed `codex` binary). Tests that don't exercise the probe inject a
+     * fixed outcome so behavior stays hermetic on machines with any Codex
+     * version installed.
+     */
+    codexConfigProbe?: CodexConfigProbeFn | undefined;
 }
 export interface CliConfigApplyFilePreview {
     targetPath: string;
-    fileType: "json" | "toml";
+    fileType: "json" | "toml" | "yaml";
     operation: "create" | "update" | "delete" | "none";
     /** Observed content with credential values masked; null when the file does not exist. */
     current: string | null;
@@ -93,5 +101,5 @@ export declare function rollbackCliConfigApply(input: {
 /** Removes encrypted CLI config backups older than the retention window. */
 export declare function cleanupExpiredCliConfigBackups(now?: number): number;
 /** Masks credential values so previews never surface plaintext secrets. */
-export declare function maskSecrets(fileType: "json" | "toml", content: string): string;
+export declare function maskSecrets(fileType: "json" | "toml" | "yaml", content: string): string;
 export declare function endpointForAdapter(provider: ProviderProfile, adapter: AdapterId): string | null;