oc-codex-multi-auth 6.0.0 → 6.1.0

package/dist/lib/tools/codex-export.js

@@ -0,0 +1,63 @@
+/**
+ * `codex-export` tool — export accounts to JSON file.
+ * Extracted from `index.ts` per RC-1 Phase 2.
+ */
+import { tool } from "@opencode-ai/plugin/tool";
+import { createTimestampedBackupPath, exportAccounts, loadAccounts, } from "../storage.js";
+import { formatUiHeader, formatUiItem, formatUiKeyValue } from "../ui/format.js";
+export function createCodexExportTool(ctx) {
+    const { resolveUiRuntime, getStatusMarker } = ctx;
+    return tool({
+        description: "Export accounts to a JSON file for backup or migration. Can auto-generate timestamped backup paths.",
+        args: {
+            path: tool.schema
+                .string()
+                .optional()
+                .describe("File path to export to (e.g., ~/codex-backup.json). If omitted, a timestamped backup path is used."),
+            force: tool.schema
+                .boolean()
+                .optional()
+                .describe("Overwrite existing file (default: true)"),
+            timestamped: tool.schema
+                .boolean()
+                .optional()
+                .describe("When true (default), omitted paths use a timestamped backup filename."),
+        },
+        async execute({ path: filePath, force, timestamped, }) {
+            const ui = resolveUiRuntime();
+            const shouldTimestamp = timestamped ?? true;
+            const resolvedExportPath = filePath && filePath.trim().length > 0
+                ? filePath
+                : shouldTimestamp
+                    ? createTimestampedBackupPath()
+                    : "codex-backup.json";
+            try {
+                await exportAccounts(resolvedExportPath, force ?? true);
+                const storage = await loadAccounts();
+                const count = storage?.accounts.length ?? 0;
+                if (ui.v2Enabled) {
+                    return [
+                        ...formatUiHeader(ui, "Export accounts"),
+                        "",
+                        formatUiItem(ui, `${getStatusMarker(ui, "ok")} Exported ${count} account(s)`, "success"),
+                        formatUiKeyValue(ui, "Path", resolvedExportPath, "muted"),
+                    ].join("\n");
+                }
+                return `Exported ${count} account(s) to: ${resolvedExportPath}`;
+            }
+            catch (error) {
+                const msg = error instanceof Error ? error.message : String(error);
+                if (ui.v2Enabled) {
+                    return [
+                        ...formatUiHeader(ui, "Export accounts"),
+                        "",
+                        formatUiItem(ui, `${getStatusMarker(ui, "error")} Export failed`, "danger"),
+                        formatUiKeyValue(ui, "Error", msg, "danger"),
+                    ].join("\n");
+                }
+                return `Export failed: ${msg}`;
+            }
+        },
+    });
+}
+//# sourceMappingURL=codex-export.js.map

package/dist/lib/tools/codex-export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-export.js","sourceRoot":"","sources":["../../../lib/tools/codex-export.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAuB,MAAM,0BAA0B,CAAC;AACrE,OAAO,EACN,2BAA2B,EAC3B,cAAc,EACd,YAAY,GACZ,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAGjF,MAAM,UAAU,qBAAqB,CAAC,GAAgB;IACrD,MAAM,EAAE,gBAAgB,EAAE,eAAe,EAAE,GAAG,GAAG,CAAC;IAClD,OAAO,IAAI,CAAC;QACX,WAAW,EACV,qGAAqG;QACtG,IAAI,EAAE;YACL,IAAI,EAAE,IAAI,CAAC,MAAM;iBACf,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACR,oGAAoG,CACpG;YACF,KAAK,EAAE,IAAI,CAAC,MAAM;iBAChB,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,QAAQ,CAAC,yCAAyC,CAAC;YACrD,WAAW,EAAE,IAAI,CAAC,MAAM;iBACtB,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,QAAQ,CACR,uEAAuE,CACvE;SACF;QACD,KAAK,CAAC,OAAO,CAAC,EACb,IAAI,EAAE,QAAQ,EACd,KAAK,EACL,WAAW,GAKX;YACA,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAAC;YAC9B,MAAM,eAAe,GAAG,WAAW,IAAI,IAAI,CAAC;YAC5C,MAAM,kBAAkB,GACvB,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;gBACrC,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,eAAe;oBAChB,CAAC,CAAC,2BAA2B,EAAE;oBAC/B,CAAC,CAAC,mBAAmB,CAAC;YACzB,IAAI,CAAC;gBACJ,MAAM,cAAc,CAAC,kBAAkB,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC;gBACxD,MAAM,OAAO,GAAG,MAAM,YAAY,EAAE,CAAC;gBACrC,MAAM,KAAK,GAAG,OAAO,EAAE,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;gBAC5C,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;oBAClB,OAAO;wBACN,GAAG,cAAc,CAAC,EAAE,EAAE,iBAAiB,CAAC;wBACxC,EAAE;wBACF,YAAY,CACX,EAAE,EACF,GAAG,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,aAAa,KAAK,aAAa,EAC3D,SAAS,CACT;wBACD,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC;qBACzD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,CAAC;gBACD,OAAO,YAAY,KAAK,mBAAmB,kBAAkB,EAAE,CAAC;YACjE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACnE,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;oBAClB,OAAO;wBACN,GAAG,cAAc,CAAC,EAAE,EAAE,iBAAiB,CAAC;wBACxC,EAAE;wBACF,YAAY,CACX,EAAE,EACF,GAAG,eAAe,CAAC,EAAE,EAAE,OAAO,CAAC,gBAAgB,EAC/C,QAAQ,CACR;wBACD,gBAAgB,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC;qBAC5C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,CAAC;gBACD,OAAO,kBAAkB,GAAG,EAAE,CAAC;YAChC,CAAC;QACF,CAAC;KACD,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/tools/codex-health.d.ts

@@ -0,0 +1,8 @@
+/**
+ * `codex-health` tool — verify refresh tokens for all accounts.
+ * Extracted from `index.ts` per RC-1 Phase 2.
+ */
+import { type ToolDefinition } from "@opencode-ai/plugin/tool";
+import type { ToolContext } from "./index.js";
+export declare function createCodexHealthTool(ctx: ToolContext): ToolDefinition;
+//# sourceMappingURL=codex-health.d.ts.map

package/dist/lib/tools/codex-health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-health.d.ts","sourceRoot":"","sources":["../../../lib/tools/codex-health.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAQ,KAAK,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAKrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,WAAW,GAAG,cAAc,CA6ItE"}

package/dist/lib/tools/codex-health.js

@@ -0,0 +1,124 @@
+/**
+ * `codex-health` tool — verify refresh tokens for all accounts.
+ * Extracted from `index.ts` per RC-1 Phase 2.
+ */
+import { tool } from "@opencode-ai/plugin/tool";
+import { loadAccounts } from "../storage.js";
+import { queuedRefresh } from "../refresh-queue.js";
+import { formatUiHeader, formatUiItem, paintUiText } from "../ui/format.js";
+import { normalizeToolOutputFormat, renderJsonOutput } from "../runtime.js";
+export function createCodexHealthTool(ctx) {
+    const { resolveUiRuntime, formatCommandAccountLabel, getStatusMarker, buildJsonAccountIdentity, } = ctx;
+    return tool({
+        description: "Check health of all Codex accounts by validating refresh tokens.",
+        args: {
+            format: tool.schema
+                .string()
+                .optional()
+                .describe('Output format: "text" (default) or "json".'),
+            includeSensitive: tool.schema
+                .boolean()
+                .optional()
+                .describe("Include raw account labels, emails, and account IDs in JSON output. Defaults to false."),
+        },
+        async execute({ format, includeSensitive, } = {}) {
+            const ui = resolveUiRuntime();
+            const outputFormat = normalizeToolOutputFormat(format);
+            const includeSensitiveOutput = includeSensitive === true;
+            const storage = await loadAccounts();
+            if (!storage || storage.accounts.length === 0) {
+                if (outputFormat === "json") {
+                    return renderJsonOutput({
+                        message: "No Codex accounts configured. Run: opencode auth login",
+                        totalAccounts: 0,
+                        healthyCount: 0,
+                        unhealthyCount: 0,
+                        accounts: [],
+                    });
+                }
+                if (ui.v2Enabled) {
+                    return [
+                        ...formatUiHeader(ui, "Health check"),
+                        "",
+                        formatUiItem(ui, "No accounts configured.", "warning"),
+                        formatUiItem(ui, "Run: opencode auth login", "accent"),
+                    ].join("\n");
+                }
+                return "No Codex accounts configured. Run: opencode auth login";
+            }
+            const results = ui.v2Enabled
+                ? []
+                : [`Health Check (${storage.accounts.length} accounts):`, ""];
+            const jsonAccounts = [];
+            let healthyCount = 0;
+            let unhealthyCount = 0;
+            for (let i = 0; i < storage.accounts.length; i++) {
+                const account = storage.accounts[i];
+                if (!account)
+                    continue;
+                const label = formatCommandAccountLabel(account, i);
+                try {
+                    const refreshResult = await queuedRefresh(account.refreshToken);
+                    if (refreshResult.type === "success") {
+                        jsonAccounts.push({
+                            ...buildJsonAccountIdentity(i, {
+                                includeSensitive: includeSensitiveOutput,
+                                account,
+                                label,
+                            }),
+                            status: "healthy",
+                        });
+                        results.push(`  ${getStatusMarker(ui, "ok")} ${label}: Healthy`);
+                        healthyCount++;
+                    }
+                    else {
+                        jsonAccounts.push({
+                            ...buildJsonAccountIdentity(i, {
+                                includeSensitive: includeSensitiveOutput,
+                                account,
+                                label,
+                            }),
+                            status: "unhealthy",
+                            error: refreshResult.message ?? refreshResult.reason,
+                        });
+                        results.push(`  ${getStatusMarker(ui, "error")} ${label}: Token refresh failed`);
+                        unhealthyCount++;
+                    }
+                }
+                catch (error) {
+                    const errorMsg = error instanceof Error ? error.message : String(error);
+                    jsonAccounts.push({
+                        ...buildJsonAccountIdentity(i, {
+                            includeSensitive: includeSensitiveOutput,
+                            account,
+                            label,
+                        }),
+                        status: "unhealthy",
+                        error: errorMsg.slice(0, 120),
+                    });
+                    results.push(`  ${getStatusMarker(ui, "error")} ${label}: Error - ${errorMsg.slice(0, 120)}`);
+                    unhealthyCount++;
+                }
+            }
+            results.push("");
+            results.push(`Summary: ${healthyCount} healthy, ${unhealthyCount} unhealthy`);
+            if (outputFormat === "json") {
+                return renderJsonOutput({
+                    totalAccounts: storage.accounts.length,
+                    healthyCount,
+                    unhealthyCount,
+                    accounts: jsonAccounts,
+                });
+            }
+            if (ui.v2Enabled) {
+                return [
+                    ...formatUiHeader(ui, "Health check"),
+                    "",
+                    ...results.map((line) => paintUiText(ui, line, "normal")),
+                ].join("\n");
+            }
+            return results.join("\n");
+        },
+    });
+}
+//# sourceMappingURL=codex-health.js.map

package/dist/lib/tools/codex-health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-health.js","sourceRoot":"","sources":["../../../lib/tools/codex-health.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAuB,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAG5E,MAAM,UAAU,qBAAqB,CAAC,GAAgB;IACrD,MAAM,EACL,gBAAgB,EAChB,yBAAyB,EACzB,eAAe,EACf,wBAAwB,GACxB,GAAG,GAAG,CAAC;IACR,OAAO,IAAI,CAAC;QACX,WAAW,EACV,kEAAkE;QACnE,IAAI,EAAE;YACL,MAAM,EAAE,IAAI,CAAC,MAAM;iBACjB,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,4CAA4C,CAAC;YACxD,gBAAgB,EAAE,IAAI,CAAC,MAAM;iBAC3B,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,QAAQ,CACR,wFAAwF,CACxF;SACF;QACD,KAAK,CAAC,OAAO,CAAC,EACb,MAAM,EACN,gBAAgB,MAIb,EAAE;YACL,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAAC;YAC9B,MAAM,YAAY,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;YACvD,MAAM,sBAAsB,GAAG,gBAAgB,KAAK,IAAI,CAAC;YACzD,MAAM,OAAO,GAAG,MAAM,YAAY,EAAE,CAAC;YACrC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/C,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;oBAC7B,OAAO,gBAAgB,CAAC;wBACvB,OAAO,EACN,wDAAwD;wBACzD,aAAa,EAAE,CAAC;wBAChB,YAAY,EAAE,CAAC;wBACf,cAAc,EAAE,CAAC;wBACjB,QAAQ,EAAE,EAAE;qBACZ,CAAC,CAAC;gBACJ,CAAC;gBACD,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;oBAClB,OAAO;wBACN,GAAG,cAAc,CAAC,EAAE,EAAE,cAAc,CAAC;wBACrC,EAAE;wBACF,YAAY,CAAC,EAAE,EAAE,yBAAyB,EAAE,SAAS,CAAC;wBACtD,YAAY,CAAC,EAAE,EAAE,0BAA0B,EAAE,QAAQ,CAAC;qBACtD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,CAAC;gBACD,OAAO,wDAAwD,CAAC;YACjE,CAAC;YAED,MAAM,OAAO,GAAa,EAAE,CAAC,SAAS;gBACrC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,CAAC,iBAAiB,OAAO,CAAC,QAAQ,CAAC,MAAM,aAAa,EAAE,EAAE,CAAC,CAAC;YAC/D,MAAM,YAAY,GAAmC,EAAE,CAAC;YAExD,IAAI,YAAY,GAAG,CAAC,CAAC;YACrB,IAAI,cAAc,GAAG,CAAC,CAAC;YAEvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAClD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBACpC,IAAI,CAAC,OAAO;oBAAE,SAAS;gBAEvB,MAAM,KAAK,GAAG,yBAAyB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBACpD,IAAI,CAAC;oBACJ,MAAM,aAAa,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;oBAChE,IAAI,aAAa,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;wBACtC,YAAY,CAAC,IAAI,CAAC;4BACjB,GAAG,wBAAwB,CAAC,CAAC,EAAE;gCAC9B,gBAAgB,EAAE,sBAAsB;gCACxC,OAAO;gCACP,KAAK;6BACL,CAAC;4BACF,MAAM,EAAE,SAAS;yBACjB,CAAC,CAAC;wBACH,OAAO,CAAC,IAAI,CACX,KAAK,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,KAAK,WAAW,CAClD,CAAC;wBACF,YAAY,EAAE,CAAC;oBAChB,CAAC;yBAAM,CAAC;wBACP,YAAY,CAAC,IAAI,CAAC;4BACjB,GAAG,wBAAwB,CAAC,CAAC,EAAE;gCAC9B,gBAAgB,EAAE,sBAAsB;gCACxC,OAAO;gCACP,KAAK;6BACL,CAAC;4BACF,MAAM,EAAE,WAAW;4BACnB,KAAK,EAAE,aAAa,CAAC,OAAO,IAAI,aAAa,CAAC,MAAM;yBACpD,CAAC,CAAC;wBACH,OAAO,CAAC,IAAI,CACX,KAAK,eAAe,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,KAAK,wBAAwB,CAClE,CAAC;wBACF,cAAc,EAAE,CAAC;oBAClB,CAAC;gBACF,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,MAAM,QAAQ,GACb,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACxD,YAAY,CAAC,IAAI,CAAC;wBACjB,GAAG,wBAAwB,CAAC,CAAC,EAAE;4BAC9B,gBAAgB,EAAE,sBAAsB;4BACxC,OAAO;4BACP,KAAK;yBACL,CAAC;wBACF,MAAM,EAAE,WAAW;wBACnB,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;qBAC7B,CAAC,CAAC;oBACH,OAAO,CAAC,IAAI,CACX,KAAK,eAAe,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,KAAK,aAAa,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC/E,CAAC;oBACF,cAAc,EAAE,CAAC;gBAClB,CAAC;YACF,CAAC;YAED,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjB,OAAO,CAAC,IAAI,CACX,YAAY,YAAY,aAAa,cAAc,YAAY,CAC/D,CAAC;YACF,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;gBAC7B,OAAO,gBAAgB,CAAC;oBACvB,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;oBACtC,YAAY;oBACZ,cAAc;oBACd,QAAQ,EAAE,YAAY;iBACtB,CAAC,CAAC;YACJ,CAAC;YAED,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;gBAClB,OAAO;oBACN,GAAG,cAAc,CAAC,EAAE,EAAE,cAAc,CAAC;oBACrC,EAAE;oBACF,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;iBACzD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,CAAC;YAED,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;KACD,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/tools/codex-help.d.ts

@@ -0,0 +1,8 @@
+/**
+ * `codex-help` tool — beginner-friendly command guide.
+ * Extracted from `index.ts` per RC-1 Phase 2.
+ */
+import { type ToolDefinition } from "@opencode-ai/plugin/tool";
+import type { ToolContext } from "./index.js";
+export declare function createCodexHelpTool(ctx: ToolContext): ToolDefinition;
+//# sourceMappingURL=codex-help.d.ts.map

package/dist/lib/tools/codex-help.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-help.d.ts","sourceRoot":"","sources":["../../../lib/tools/codex-help.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAQ,KAAK,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAMrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,WAAW,GAAG,cAAc,CA8IpE"}

package/dist/lib/tools/codex-help.js

@@ -0,0 +1,127 @@
+/**
+ * `codex-help` tool — beginner-friendly command guide.
+ * Extracted from `index.ts` per RC-1 Phase 2.
+ */
+import { tool } from "@opencode-ai/plugin/tool";
+import { formatUiHeader, formatUiItem, formatUiSection, } from "../ui/format.js";
+export function createCodexHelpTool(ctx) {
+    const { resolveUiRuntime } = ctx;
+    return tool({
+        description: "Beginner-friendly command guide with quickstart and troubleshooting flows.",
+        args: {
+            topic: tool.schema
+                .string()
+                .optional()
+                .describe("Optional topic: setup, switch, health, backup, dashboard, metrics."),
+        },
+        async execute({ topic }) {
+            const ui = resolveUiRuntime();
+            await Promise.resolve();
+            const normalizedTopic = (topic ?? "").trim().toLowerCase();
+            const sections = [
+                {
+                    key: "setup",
+                    title: "Quickstart",
+                    lines: [
+                        "1) Add account: opencode auth login",
+                        "2) Verify account health: codex-health",
+                        "3) View account list: codex-list",
+                        "4) Run checklist: codex-setup",
+                        "5) Use guided wizard: codex-setup --wizard",
+                        "6) Start requests and monitor: codex-dashboard",
+                    ],
+                },
+                {
+                    key: "switch",
+                    title: "Daily account operations",
+                    lines: [
+                        "List accounts: codex-list",
+                        "Switch active account: codex-switch index=2",
+                        "Show detailed status: codex-status",
+                        "Set account label: codex-label index=2 label=\"Work\"",
+                        "Set account tags: codex-tag index=2 tags=\"work,team-a\"",
+                        "Set account note: codex-note index=2 note=\"weekday primary\"",
+                        "Filter by tag: codex-list tag=\"work\"",
+                        "Remove account: codex-remove index=2",
+                    ],
+                },
+                {
+                    key: "health",
+                    title: "Health and recovery",
+                    lines: [
+                        "Verify token health: codex-health",
+                        "Refresh all tokens: codex-refresh",
+                        "Run diagnostics: codex-doctor",
+                        "Run diagnostics with fixes: codex-doctor --fix",
+                        "Show best next action: codex-next",
+                        "Run guided wizard: codex-setup --wizard",
+                    ],
+                },
+                {
+                    key: "dashboard",
+                    title: "Monitoring",
+                    lines: [
+                        "Live dashboard: codex-dashboard",
+                        "Runtime metrics: codex-metrics",
+                        "Per-account status detail: codex-status",
+                    ],
+                },
+                {
+                    key: "backup",
+                    title: "Backup and migration",
+                    lines: [
+                        "Export accounts: codex-export <path>",
+                        "Auto backup export: codex-export",
+                        "Import preview: codex-import <path> --dryRun",
+                        "Import apply: codex-import <path>",
+                        "Setup checklist: codex-setup",
+                    ],
+                },
+            ];
+            const visibleSections = normalizedTopic.length === 0
+                ? sections
+                : sections.filter((section) => section.key.includes(normalizedTopic));
+            if (visibleSections.length === 0) {
+                const available = sections.map((section) => section.key).join(", ");
+                if (ui.v2Enabled) {
+                    return [
+                        ...formatUiHeader(ui, "Codex help"),
+                        "",
+                        formatUiItem(ui, `Unknown topic: ${normalizedTopic}`, "warning"),
+                        formatUiItem(ui, `Available topics: ${available}`, "muted"),
+                    ].join("\n");
+                }
+                return `Unknown topic: ${normalizedTopic}\n\nAvailable topics: ${available}`;
+            }
+            if (ui.v2Enabled) {
+                const lines = [...formatUiHeader(ui, "Codex help"), ""];
+                for (const section of visibleSections) {
+                    lines.push(...formatUiSection(ui, section.title));
+                    for (const line of section.lines) {
+                        lines.push(formatUiItem(ui, line));
+                    }
+                    lines.push("");
+                }
+                lines.push(...formatUiSection(ui, "Tips"));
+                lines.push(formatUiItem(ui, "Run codex-setup after adding accounts."));
+                lines.push(formatUiItem(ui, "Use codex-setup --wizard for menu-driven onboarding."));
+                lines.push(formatUiItem(ui, "Use codex-doctor when request failures increase."));
+                return lines.join("\n").trimEnd();
+            }
+            const lines = ["Codex Help:", ""];
+            for (const section of visibleSections) {
+                lines.push(`${section.title}:`);
+                for (const line of section.lines) {
+                    lines.push(`  - ${line}`);
+                }
+                lines.push("");
+            }
+            lines.push("Tips:");
+            lines.push("  - Run codex-setup after adding accounts.");
+            lines.push("  - Use codex-setup --wizard for menu-driven onboarding.");
+            lines.push("  - Use codex-doctor when request failures increase.");
+            return lines.join("\n");
+        },
+    });
+}
+//# sourceMappingURL=codex-help.js.map

package/dist/lib/tools/codex-help.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-help.js","sourceRoot":"","sources":["../../../lib/tools/codex-help.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAuB,MAAM,0BAA0B,CAAC;AACrE,OAAO,EACN,cAAc,EACd,YAAY,EACZ,eAAe,GACf,MAAM,iBAAiB,CAAC;AAGzB,MAAM,UAAU,mBAAmB,CAAC,GAAgB;IACnD,MAAM,EAAE,gBAAgB,EAAE,GAAG,GAAG,CAAC;IACjC,OAAO,IAAI,CAAC;QACX,WAAW,EACV,4EAA4E;QAC7E,IAAI,EAAE;YACL,KAAK,EAAE,IAAI,CAAC,MAAM;iBAChB,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACR,oEAAoE,CACpE;SACF;QACD,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE;YACtB,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAAC;YAC9B,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,eAAe,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3D,MAAM,QAAQ,GAA2D;gBACxE;oBACC,GAAG,EAAE,OAAO;oBACZ,KAAK,EAAE,YAAY;oBACnB,KAAK,EAAE;wBACN,qCAAqC;wBACrC,wCAAwC;wBACxC,kCAAkC;wBAClC,+BAA+B;wBAC/B,4CAA4C;wBAC5C,gDAAgD;qBAChD;iBACD;gBACD;oBACC,GAAG,EAAE,QAAQ;oBACb,KAAK,EAAE,0BAA0B;oBACjC,KAAK,EAAE;wBACN,2BAA2B;wBAC3B,6CAA6C;wBAC7C,oCAAoC;wBACpC,uDAAuD;wBACvD,0DAA0D;wBAC1D,+DAA+D;wBAC/D,wCAAwC;wBACxC,sCAAsC;qBACtC;iBACD;gBACD;oBACC,GAAG,EAAE,QAAQ;oBACb,KAAK,EAAE,qBAAqB;oBAC5B,KAAK,EAAE;wBACN,mCAAmC;wBACnC,mCAAmC;wBACnC,+BAA+B;wBAC/B,gDAAgD;wBAChD,mCAAmC;wBACnC,yCAAyC;qBACzC;iBACD;gBACD;oBACC,GAAG,EAAE,WAAW;oBAChB,KAAK,EAAE,YAAY;oBACnB,KAAK,EAAE;wBACN,iCAAiC;wBACjC,gCAAgC;wBAChC,yCAAyC;qBACzC;iBACD;gBACD;oBACC,GAAG,EAAE,QAAQ;oBACb,KAAK,EAAE,sBAAsB;oBAC7B,KAAK,EAAE;wBACN,sCAAsC;wBACtC,kCAAkC;wBAClC,8CAA8C;wBAC9C,mCAAmC;wBACnC,8BAA8B;qBAC9B;iBACD;aACD,CAAC;YAEF,MAAM,eAAe,GACpB,eAAe,CAAC,MAAM,KAAK,CAAC;gBAC3B,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC;YACxE,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClC,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpE,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;oBAClB,OAAO;wBACN,GAAG,cAAc,CAAC,EAAE,EAAE,YAAY,CAAC;wBACnC,EAAE;wBACF,YAAY,CAAC,EAAE,EAAE,kBAAkB,eAAe,EAAE,EAAE,SAAS,CAAC;wBAChE,YAAY,CACX,EAAE,EACF,qBAAqB,SAAS,EAAE,EAChC,OAAO,CACP;qBACD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,CAAC;gBACD,OAAO,kBAAkB,eAAe,yBAAyB,SAAS,EAAE,CAAC;YAC9E,CAAC;YAED,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;gBAClB,MAAM,KAAK,GAAa,CAAC,GAAG,cAAc,CAAC,EAAE,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClE,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;oBACvC,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;oBAClD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;wBAClC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;oBACpC,CAAC;oBACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAChB,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;gBAC3C,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,wCAAwC,CAAC,CAAC,CAAC;gBACvE,KAAK,CAAC,IAAI,CACT,YAAY,CACX,EAAE,EACF,sDAAsD,CACtD,CACD,CAAC;gBACF,KAAK,CAAC,IAAI,CACT,YAAY,CACX,EAAE,EACF,kDAAkD,CAClD,CACD,CAAC;gBACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACnC,CAAC;YAED,MAAM,KAAK,GAAa,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;YAC5C,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;gBACvC,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;gBAChC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;oBAClC,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBAC3B,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChB,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;YACzD,KAAK,CAAC,IAAI,CACT,0DAA0D,CAC1D,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;YACnE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;KACD,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/tools/codex-import.d.ts

@@ -0,0 +1,8 @@
+/**
+ * `codex-import` tool — import accounts from JSON file.
+ * Extracted from `index.ts` per RC-1 Phase 2.
+ */
+import { type ToolDefinition } from "@opencode-ai/plugin/tool";
+import type { ToolContext } from "./index.js";
+export declare function createCodexImportTool(ctx: ToolContext): ToolDefinition;
+//# sourceMappingURL=codex-import.d.ts.map

package/dist/lib/tools/codex-import.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-import.d.ts","sourceRoot":"","sources":["../../../lib/tools/codex-import.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAQ,KAAK,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAGrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,WAAW,GAAG,cAAc,CAoJtE"}

package/dist/lib/tools/codex-import.js

@@ -0,0 +1,97 @@
+/**
+ * `codex-import` tool — import accounts from JSON file.
+ * Extracted from `index.ts` per RC-1 Phase 2.
+ */
+import { tool } from "@opencode-ai/plugin/tool";
+import { importAccounts, previewImportAccounts } from "../storage.js";
+import { formatUiHeader, formatUiItem, formatUiKeyValue } from "../ui/format.js";
+export function createCodexImportTool(ctx) {
+    const { resolveUiRuntime, getStatusMarker, invalidateAccountManagerCache } = ctx;
+    return tool({
+        description: "Import accounts from a JSON file, with dry-run preview and automatic timestamped backup before apply.",
+        args: {
+            path: tool.schema
+                .string()
+                .describe("File path to import from (e.g., ~/codex-backup.json)"),
+            dryRun: tool.schema
+                .boolean()
+                .optional()
+                .describe("Preview import impact without applying changes."),
+        },
+        async execute({ path: filePath, dryRun, }) {
+            const ui = resolveUiRuntime();
+            try {
+                const preview = await previewImportAccounts(filePath);
+                if (dryRun) {
+                    if (ui.v2Enabled) {
+                        return [
+                            ...formatUiHeader(ui, "Import preview"),
+                            "",
+                            formatUiItem(ui, "No changes applied (dry run).", "warning"),
+                            formatUiKeyValue(ui, "Path", filePath, "muted"),
+                            formatUiKeyValue(ui, "New accounts", String(preview.imported), preview.imported > 0 ? "success" : "muted"),
+                            formatUiKeyValue(ui, "Duplicates skipped", String(preview.skipped), preview.skipped > 0 ? "warning" : "muted"),
+                            formatUiKeyValue(ui, "Resulting total", String(preview.total), "accent"),
+                        ].join("\n");
+                    }
+                    return [
+                        "Import preview (dry run):",
+                        `Path: ${filePath}`,
+                        `New accounts: ${preview.imported}`,
+                        `Duplicates skipped: ${preview.skipped}`,
+                        `Resulting total: ${preview.total}`,
+                    ].join("\n");
+                }
+                const result = await importAccounts(filePath, {
+                    preImportBackupPrefix: "codex-pre-import-backup",
+                    backupMode: "required",
+                });
+                const backupSummary = result.backupStatus === "created"
+                    ? (result.backupPath ?? "created")
+                    : result.backupStatus === "failed"
+                        ? `failed (${result.backupError ?? "unknown error"})`
+                        : "skipped (no existing accounts)";
+                const backupStatus = result.backupStatus === "created" ? "ok" : "warning";
+                invalidateAccountManagerCache();
+                const lines = [`Import complete.`, ``];
+                lines.push(`Preview: +${preview.imported} new, ${preview.skipped} skipped, ${preview.total} total`);
+                lines.push(`Auto-backup: ${backupSummary}`);
+                if (result.imported > 0) {
+                    lines.push(`New accounts: ${result.imported}`);
+                }
+                if (result.skipped > 0) {
+                    lines.push(`Duplicates skipped: ${result.skipped}`);
+                }
+                lines.push(`Total accounts: ${result.total}`);
+                if (ui.v2Enabled) {
+                    const styled = [
+                        ...formatUiHeader(ui, "Import accounts"),
+                        "",
+                        formatUiItem(ui, `${getStatusMarker(ui, "ok")} Import complete`, "success"),
+                        formatUiKeyValue(ui, "Path", filePath, "muted"),
+                        formatUiKeyValue(ui, "Auto-backup", backupSummary, backupStatus === "ok" ? "muted" : "warning"),
+                        formatUiKeyValue(ui, "Preview", `+${preview.imported}, skipped=${preview.skipped}, total=${preview.total}`, "muted"),
+                        formatUiKeyValue(ui, "New accounts", String(result.imported), result.imported > 0 ? "success" : "muted"),
+                        formatUiKeyValue(ui, "Duplicates skipped", String(result.skipped), result.skipped > 0 ? "warning" : "muted"),
+                        formatUiKeyValue(ui, "Total accounts", String(result.total), "accent"),
+                    ];
+                    return styled.join("\n");
+                }
+                return lines.join("\n");
+            }
+            catch (error) {
+                const msg = error instanceof Error ? error.message : String(error);
+                if (ui.v2Enabled) {
+                    return [
+                        ...formatUiHeader(ui, "Import accounts"),
+                        "",
+                        formatUiItem(ui, `${getStatusMarker(ui, "error")} Import failed`, "danger"),
+                        formatUiKeyValue(ui, "Error", msg, "danger"),
+                    ].join("\n");
+                }
+                return `Import failed: ${msg}`;
+            }
+        },
+    });
+}
+//# sourceMappingURL=codex-import.js.map

package/dist/lib/tools/codex-import.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-import.js","sourceRoot":"","sources":["../../../lib/tools/codex-import.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAuB,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAGjF,MAAM,UAAU,qBAAqB,CAAC,GAAgB;IACrD,MAAM,EAAE,gBAAgB,EAAE,eAAe,EAAE,6BAA6B,EAAE,GACzE,GAAG,CAAC;IACL,OAAO,IAAI,CAAC;QACX,WAAW,EACV,uGAAuG;QACxG,IAAI,EAAE;YACL,IAAI,EAAE,IAAI,CAAC,MAAM;iBACf,MAAM,EAAE;iBACR,QAAQ,CAAC,sDAAsD,CAAC;YAClE,MAAM,EAAE,IAAI,CAAC,MAAM;iBACjB,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,QAAQ,CAAC,iDAAiD,CAAC;SAC7D;QACD,KAAK,CAAC,OAAO,CAAC,EACb,IAAI,EAAE,QAAQ,EACd,MAAM,GAIN;YACA,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACJ,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,QAAQ,CAAC,CAAC;gBACtD,IAAI,MAAM,EAAE,CAAC;oBACZ,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;wBAClB,OAAO;4BACN,GAAG,cAAc,CAAC,EAAE,EAAE,gBAAgB,CAAC;4BACvC,EAAE;4BACF,YAAY,CAAC,EAAE,EAAE,+BAA+B,EAAE,SAAS,CAAC;4BAC5D,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC;4BAC/C,gBAAgB,CACf,EAAE,EACF,cAAc,EACd,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EACxB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAC1C;4BACD,gBAAgB,CACf,EAAE,EACF,oBAAoB,EACpB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EACvB,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CACzC;4BACD,gBAAgB,CACf,EAAE,EACF,iBAAiB,EACjB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EACrB,QAAQ,CACR;yBACD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACd,CAAC;oBACD,OAAO;wBACN,2BAA2B;wBAC3B,SAAS,QAAQ,EAAE;wBACnB,iBAAiB,OAAO,CAAC,QAAQ,EAAE;wBACnC,uBAAuB,OAAO,CAAC,OAAO,EAAE;wBACxC,oBAAoB,OAAO,CAAC,KAAK,EAAE;qBACnC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE;oBAC7C,qBAAqB,EAAE,yBAAyB;oBAChD,UAAU,EAAE,UAAU;iBACtB,CAAC,CAAC;gBACH,MAAM,aAAa,GAClB,MAAM,CAAC,YAAY,KAAK,SAAS;oBAChC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,IAAI,SAAS,CAAC;oBAClC,CAAC,CAAC,MAAM,CAAC,YAAY,KAAK,QAAQ;wBACjC,CAAC,CAAC,WAAW,MAAM,CAAC,WAAW,IAAI,eAAe,GAAG;wBACrD,CAAC,CAAC,gCAAgC,CAAC;gBACtC,MAAM,YAAY,GACjB,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;gBACtD,6BAA6B,EAAE,CAAC;gBAChC,MAAM,KAAK,GAAG,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;gBACvC,KAAK,CAAC,IAAI,CACT,aAAa,OAAO,CAAC,QAAQ,SAAS,OAAO,CAAC,OAAO,aAAa,OAAO,CAAC,KAAK,QAAQ,CACvF,CAAC;gBACF,KAAK,CAAC,IAAI,CAAC,gBAAgB,aAAa,EAAE,CAAC,CAAC;gBAC5C,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;oBACzB,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAChD,CAAC;gBACD,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;oBACxB,KAAK,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;gBACrD,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC9C,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;oBAClB,MAAM,MAAM,GAAG;wBACd,GAAG,cAAc,CAAC,EAAE,EAAE,iBAAiB,CAAC;wBACxC,EAAE;wBACF,YAAY,CACX,EAAE,EACF,GAAG,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,kBAAkB,EAC9C,SAAS,CACT;wBACD,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC;wBAC/C,gBAAgB,CACf,EAAE,EACF,aAAa,EACb,aAAa,EACb,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAC3C;wBACD,gBAAgB,CACf,EAAE,EACF,SAAS,EACT,IAAI,OAAO,CAAC,QAAQ,aAAa,OAAO,CAAC,OAAO,WAAW,OAAO,CAAC,KAAK,EAAE,EAC1E,OAAO,CACP;wBACD,gBAAgB,CACf,EAAE,EACF,cAAc,EACd,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EACvB,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CACzC;wBACD,gBAAgB,CACf,EAAE,EACF,oBAAoB,EACpB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EACtB,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CACxC;wBACD,gBAAgB,CACf,EAAE,EACF,gBAAgB,EAChB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EACpB,QAAQ,CACR;qBACD,CAAC;oBACF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC1B,CAAC;gBACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACnE,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;oBAClB,OAAO;wBACN,GAAG,cAAc,CAAC,EAAE,EAAE,iBAAiB,CAAC;wBACxC,EAAE;wBACF,YAAY,CACX,EAAE,EACF,GAAG,eAAe,CAAC,EAAE,EAAE,OAAO,CAAC,gBAAgB,EAC/C,QAAQ,CACR;wBACD,gBAAgB,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC;qBAC5C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,CAAC;gBACD,OAAO,kBAAkB,GAAG,EAAE,CAAC;YAChC,CAAC;QACF,CAAC;KACD,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/tools/codex-keychain.d.ts

@@ -0,0 +1,36 @@
+/**
+ * `codex-keychain` tool — inspect and manage the opt-in OS-keychain backend.
+ *
+ * Phase 4 F1. Companion to `lib/storage/keychain.ts`. The tool exposes three
+ * subcommands chosen for operator-level control over the credential surface:
+ *
+ *   - `status`: report which backend is active and whether the OS keychain
+ *     is reachable. Never mutates state; safe to run under any config.
+ *   - `migrate`: explicitly move the current on-disk JSON accounts file into
+ *     the OS keychain, rename the JSON as
+ *     `<path>.migrated-to-keychain.<ts>` for rollback, and leave the
+ *     authoritative copy in the keychain. Idempotent: running again when
+ *     the keychain already holds a fresher copy is a no-op.
+ *   - `rollback`: restore the most recent `.migrated-to-keychain.<ts>`
+ *     backup next to the accounts file and delete the keychain entry so
+ *     subsequent loads read from disk again. The inverse of `migrate`.
+ *
+ * Runs under the same storage lock as `saveAccounts`/`loadAccounts` so the
+ * mutation cannot interleave with an in-flight rotation save.
+ *
+ * Security notes:
+ *   - No secret value ever reaches the tool output. Success messages show
+ *     account counts and file paths, never token material.
+ *   - Failures fall back to JSON at the storage layer — this tool never
+ *     hides that from the operator.
+ */
+import { type ToolDefinition } from "@opencode-ai/plugin/tool";
+import type { ToolContext } from "./index.js";
+/**
+ * Test-only export for `findMigrationBackups`. Kept separate from the
+ * tool factory so the sort semantics can be asserted directly against a
+ * temp directory in `test/tools-codex-keychain.test.ts`.
+ */
+export declare function _findMigrationBackupsForTests(storagePath: string): Promise<string[]>;
+export declare function createCodexKeychainTool(ctx: ToolContext): ToolDefinition;
+//# sourceMappingURL=codex-keychain.d.ts.map

package/dist/lib/tools/codex-keychain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-keychain.d.ts","sourceRoot":"","sources":["../../../lib/tools/codex-keychain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,EAAQ,KAAK,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAmBrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AA4D9C;;;;GAIG;AACH,wBAAsB,6BAA6B,CAClD,WAAW,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,EAAE,CAAC,CAEnB;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,WAAW,GAAG,cAAc,CAoPxE"}