oc-codex-multi-auth 6.0.0 → 6.1.1

package/dist/lib/tools/codex-keychain.js

@@ -0,0 +1,289 @@
+/**
+ * `codex-keychain` tool — inspect and manage the opt-in OS-keychain backend.
+ *
+ * Phase 4 F1. Companion to `lib/storage/keychain.ts`. The tool exposes three
+ * subcommands chosen for operator-level control over the credential surface:
+ *
+ *   - `status`: report which backend is active and whether the OS keychain
+ *     is reachable. Never mutates state; safe to run under any config.
+ *   - `migrate`: explicitly move the current on-disk JSON accounts file into
+ *     the OS keychain, rename the JSON as
+ *     `<path>.migrated-to-keychain.<ts>` for rollback, and leave the
+ *     authoritative copy in the keychain. Idempotent: running again when
+ *     the keychain already holds a fresher copy is a no-op.
+ *   - `rollback`: restore the most recent `.migrated-to-keychain.<ts>`
+ *     backup next to the accounts file and delete the keychain entry so
+ *     subsequent loads read from disk again. The inverse of `migrate`.
+ *
+ * Runs under the same storage lock as `saveAccounts`/`loadAccounts` so the
+ * mutation cannot interleave with an in-flight rotation save.
+ *
+ * Security notes:
+ *   - No secret value ever reaches the tool output. Success messages show
+ *     account counts and file paths, never token material.
+ *   - Failures fall back to JSON at the storage layer — this tool never
+ *     hides that from the operator.
+ */
+import { promises as fs } from "node:fs";
+import { basename, dirname, join } from "node:path";
+import { tool } from "@opencode-ai/plugin/tool";
+import { clearAccounts, loadAccounts, saveAccounts, } from "../storage.js";
+import { deleteFromKeychain, isKeychainOptInEnabled, keychainIsAvailable, readFromKeychain, } from "../storage/keychain.js";
+import { getCurrentProjectStorageKey, getStoragePath } from "../storage/state.js";
+import { normalizeAccountStorage } from "../storage/normalize.js";
+import { formatUiHeader, formatUiItem, formatUiKeyValue, } from "../ui/format.js";
+function normalizeSubcommand(raw) {
+    const v = (raw ?? "").trim().toLowerCase();
+    if (v === "migrate" || v === "rollback")
+        return v;
+    return "status";
+}
+/**
+ * List `<path>.migrated-to-keychain.<ts>` siblings of the current storage
+ * path, sorted most-recent first by `fs.stat().mtimeMs` (F1 post-merge
+ * MEDIUM finding). The previous implementation sorted the filenames
+ * lexicographically, which happens to produce the correct order when all
+ * filenames share the fixed-width ISO-8601 suffix
+ * (`YYYY-MM-DDTHH-MM-SS-mmmZ`) emitted by `migrateOnDiskJsonToKeychainBackup`
+ * in `lib/storage/load-save.ts`. Any format drift (locale epoch, test
+ * fixture with non-ISO suffix, future migration-suffix change) silently
+ * picks the alphabetically-last entry instead of the most-recent. Sorting
+ * by `mtimeMs` is format-independent and matches "most recent backup"
+ * exactly. The filename tiebreaker (rare: identical mtime) preserves the
+ * previous descending-lex behaviour so the function stays deterministic.
+ *
+ * Exported as `_findMigrationBackupsForTests` below so the sort order can
+ * be asserted without stubbing the tool closure.
+ */
+async function findMigrationBackups(storagePath) {
+    const dir = dirname(storagePath);
+    const base = basename(storagePath);
+    const prefix = `${base}.migrated-to-keychain.`;
+    let entries;
+    try {
+        entries = await fs.readdir(dir);
+    }
+    catch {
+        return [];
+    }
+    const matches = entries.filter((name) => name.startsWith(prefix));
+    const withMtime = await Promise.all(matches.map(async (name) => {
+        const full = join(dir, name);
+        let mtimeMs = Number.NEGATIVE_INFINITY;
+        try {
+            const st = await fs.stat(full);
+            mtimeMs = st.mtimeMs;
+        }
+        catch {
+            // Stat failure: keep -Infinity so the entry sorts last.
+            // This protects against a backup that disappeared between
+            // readdir and stat (race) without crashing the tool.
+        }
+        return { full, name, mtimeMs };
+    }));
+    withMtime.sort((a, b) => {
+        if (b.mtimeMs !== a.mtimeMs)
+            return b.mtimeMs - a.mtimeMs;
+        return a.name < b.name ? 1 : a.name > b.name ? -1 : 0;
+    });
+    return withMtime.map((entry) => entry.full);
+}
+/**
+ * Test-only export for `findMigrationBackups`. Kept separate from the
+ * tool factory so the sort semantics can be asserted directly against a
+ * temp directory in `test/tools-codex-keychain.test.ts`.
+ */
+export async function _findMigrationBackupsForTests(storagePath) {
+    return findMigrationBackups(storagePath);
+}
+export function createCodexKeychainTool(ctx) {
+    // ctx.resolveUiRuntime is the only helper we need: it threads the v2
+    // TUI / color-profile state from plugin config + CODEX_TUI_* env into
+    // every format helper call, so output is consistent with the rest of
+    // the codex-* tools without leaking the UI-runtime plumbing in here.
+    const { resolveUiRuntime } = ctx;
+    return tool({
+        description: "Inspect and manage the opt-in OS-keychain credential backend. Subcommands: status (default), migrate, rollback. Rollback requires confirm=true when a current accounts JSON file exists alongside the backup (safety gate).",
+        args: {
+            command: tool.schema
+                .string()
+                .optional()
+                .describe('Subcommand: "status" (default), "migrate", or "rollback".'),
+            confirm: tool.schema
+                .boolean()
+                .optional()
+                .describe("rollback only: pass true to archive any current accounts JSON as `.pre-rollback.<ts>` before restoring the backup. Without confirm=true, rollback refuses if a current file exists."),
+        },
+        async execute({ command, confirm, }) {
+            const ui = resolveUiRuntime();
+            const sub = normalizeSubcommand(command);
+            const optIn = isKeychainOptInEnabled();
+            const projectKey = getCurrentProjectStorageKey();
+            const storagePath = (() => {
+                try {
+                    return getStoragePath();
+                }
+                catch {
+                    return "<unresolved>";
+                }
+            })();
+            if (sub === "status") {
+                // When opt-in is off, skip the probe entirely (F1 post-merge
+                // LOW finding). Probing under an unset `CODEX_KEYCHAIN`
+                // violates the "unset -> no keychain code path" invariant
+                // and can trigger a first-run macOS "allow/always allow"
+                // prompt for users who run `codex-keychain status` without
+                // opting in. `keychainIsAvailable` already short-circuits
+                // on the opt-in check; we surface that explicitly here so
+                // the status line reads "not checked; CODEX_KEYCHAIN unset"
+                // instead of the misleading "keychain unavailable".
+                const available = optIn ? await keychainIsAvailable() : false;
+                const keychainHasEntry = optIn
+                    ? (await readFromKeychain(projectKey)) !== null
+                    : false;
+                const activeBackend = !optIn
+                    ? "JSON (keychain disabled; CODEX_KEYCHAIN unset)"
+                    : available && keychainHasEntry
+                        ? "keychain"
+                        : available
+                            ? "keychain (empty, JSON fallback)"
+                            : "JSON (keychain unavailable)";
+                const lines = [];
+                lines.push(...formatUiHeader(ui, "Codex keychain status"));
+                lines.push("");
+                lines.push(formatUiKeyValue(ui, "Active backend", activeBackend));
+                lines.push(formatUiKeyValue(ui, "CODEX_KEYCHAIN", optIn ? "1 (enabled)" : "unset/disabled"));
+                lines.push(formatUiKeyValue(ui, "Keychain reachable", optIn ? (available ? "yes" : "no") : "not checked (opt-in off)"));
+                lines.push(formatUiKeyValue(ui, "Project scope", projectKey ?? "global"));
+                lines.push(formatUiKeyValue(ui, "On-disk path", storagePath));
+                if (!optIn) {
+                    lines.push("");
+                    lines.push(formatUiItem(ui, "Set CODEX_KEYCHAIN=1 to enable the OS-keychain backend. Migration runs on the next save."));
+                }
+                return lines.join("\n");
+            }
+            if (sub === "migrate") {
+                if (!optIn) {
+                    return "codex-keychain migrate: refusing to migrate because CODEX_KEYCHAIN is not set to 1. Enable the opt-in first, then re-run this command.";
+                }
+                const storage = await loadAccounts();
+                if (!storage) {
+                    return "codex-keychain migrate: no accounts found to migrate. Nothing to do.";
+                }
+                // Re-saving under the opt-in path triggers the same keychain
+                // write + JSON-backup flow used by every rotation save, so we
+                // avoid duplicating the migration logic here.
+                await saveAccounts(storage);
+                return [
+                    ...formatUiHeader(ui, "Codex keychain migrate"),
+                    "",
+                    formatUiItem(ui, `Migrated ${storage.accounts.length} account(s) to the OS keychain.`),
+                    formatUiKeyValue(ui, "Project scope", projectKey ?? "global"),
+                    formatUiItem(ui, "On-disk JSON (if any) was renamed with a .migrated-to-keychain.<timestamp> suffix. Use `codex-keychain rollback` to restore it."),
+                ].join("\n");
+            }
+            // rollback
+            const backups = await findMigrationBackups(storagePath);
+            const mostRecent = backups[0];
+            if (!mostRecent) {
+                return `codex-keychain rollback: no .migrated-to-keychain.<ts> backup found next to ${storagePath}. Nothing to restore.`;
+            }
+            // Verify the backup parses as a V3 storage blob before we trust
+            // it. A corrupt backup must not be promoted to the active file.
+            let accountCount = 0;
+            try {
+                const raw = await fs.readFile(mostRecent, "utf-8");
+                const parsed = JSON.parse(raw);
+                const normalized = normalizeAccountStorage(parsed, mostRecent);
+                if (!normalized) {
+                    return `codex-keychain rollback: backup at ${mostRecent} did not parse as V3 account storage. Aborted.`;
+                }
+                accountCount = normalized.accounts.length;
+            }
+            catch (err) {
+                return `codex-keychain rollback: failed to read backup at ${mostRecent}: ${err.message}`;
+            }
+            // Wipe the keychain entry + any current on-disk file, then rename
+            // the backup back to the canonical storage path so the next load
+            // reads from disk again. clearAccounts handles both sides.
+            await clearAccounts();
+            // Silent-clobber guard (F1 post-merge MEDIUM finding). On POSIX,
+            // `fs.rename(backup, storagePath)` silently overwrites an
+            // existing destination. If `clearAccounts` failed to unlink the
+            // current JSON (EACCES/EBUSY) or a race write landed a new file
+            // between clearAccounts and rename, the user's current accounts
+            // would be silently discarded with no way to recover them.
+            // Require explicit `confirm=true` before overwriting; without
+            // it, refuse and surface the offending path.
+            let currentExists = false;
+            try {
+                await fs.access(storagePath);
+                currentExists = true;
+            }
+            catch {
+                /* canonical path is clear; safe to rename */
+            }
+            let preRollbackArchive = null;
+            if (currentExists) {
+                if (!confirm) {
+                    return [
+                        `codex-keychain rollback: refusing to overwrite existing accounts file at ${storagePath}.`,
+                        `Backup at ${mostRecent} was not restored.`,
+                        "Pass confirm=true to archive the current file as .pre-rollback.<timestamp> and proceed, or move the current file aside and re-run.",
+                    ].join("\n");
+                }
+                const archiveSuffix = new Date()
+                    .toISOString()
+                    .replace(/[:.]/g, "-");
+                preRollbackArchive = `${storagePath}.pre-rollback.${archiveSuffix}`;
+                try {
+                    await fs.rename(storagePath, preRollbackArchive);
+                }
+                catch (err) {
+                    return `codex-keychain rollback: failed to archive current accounts file at ${storagePath} -> ${preRollbackArchive}: ${err.message}. Backup at ${mostRecent} was not restored.`;
+                }
+            }
+            try {
+                await fs.rename(mostRecent, storagePath);
+            }
+            catch (err) {
+                return `codex-keychain rollback: failed to rename ${mostRecent} -> ${storagePath}: ${err.message}`;
+            }
+            // Re-apply 0o600 after rollback rename (F1 post-merge LOW
+            // finding). Mirror the chmod applied on the backup-write path
+            // so a restored file can never end up group/world-readable even
+            // if the backup's mode drifted between migration and rollback.
+            // Windows ignores POSIX mode bits, so skip there.
+            if (process.platform !== "win32") {
+                try {
+                    await fs.chmod(storagePath, 0o600);
+                }
+                catch {
+                    /* non-fatal: file is restored, mode drift is a hardening
+                     * nicety. Swallow to avoid failing the rollback on a
+                     * permission-sensitive mount. */
+                }
+            }
+            // Best-effort keychain delete in case opt-in is still on; the
+            // storage layer will honour that on subsequent saves.
+            try {
+                await deleteFromKeychain(projectKey);
+            }
+            catch {
+                /* already deleted by clearAccounts */
+            }
+            const lines = [
+                ...formatUiHeader(ui, "Codex keychain rollback"),
+                "",
+                formatUiItem(ui, `Restored ${accountCount} account(s) from backup ${mostRecent}.`),
+                formatUiKeyValue(ui, "Active file", storagePath),
+            ];
+            if (preRollbackArchive) {
+                lines.push(formatUiKeyValue(ui, "Previous file archived at", preRollbackArchive));
+            }
+            lines.push(formatUiItem(ui, "To stop using the keychain backend, unset CODEX_KEYCHAIN (or set it to any value other than \"1\") before the next save."));
+            return lines.join("\n");
+        },
+    });
+}
+//# sourceMappingURL=codex-keychain.js.map

package/dist/lib/tools/codex-keychain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-keychain.js","sourceRoot":"","sources":["../../../lib/tools/codex-keychain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,IAAI,EAAuB,MAAM,0BAA0B,CAAC;AACrE,OAAO,EACN,aAAa,EACb,YAAY,EACZ,YAAY,GACZ,MAAM,eAAe,CAAC;AACvB,OAAO,EACN,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,EACnB,gBAAgB,GAChB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,2BAA2B,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EACN,cAAc,EACd,YAAY,EACZ,gBAAgB,GAChB,MAAM,iBAAiB,CAAC;AAKzB,SAAS,mBAAmB,CAAC,GAAuB;IACnD,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,UAAU;QAAE,OAAO,CAAC,CAAC;IAClD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,KAAK,UAAU,oBAAoB,CAAC,WAAmB;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,GAAG,IAAI,wBAAwB,CAAC;IAC/C,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACJ,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAClC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,IAAI,OAAO,GAAG,MAAM,CAAC,iBAAiB,CAAC;QACvC,IAAI,CAAC;YACJ,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/B,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACR,wDAAwD;YACxD,0DAA0D;YAC1D,qDAAqD;QACtD,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAChC,CAAC,CAAC,CACF,CAAC;IACF,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACvB,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;QAC1D,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IACH,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAClD,WAAmB;IAEnB,OAAO,oBAAoB,CAAC,WAAW,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,GAAgB;IACvD,qEAAqE;IACrE,sEAAsE;IACtE,qEAAqE;IACrE,qEAAqE;IACrE,MAAM,EAAE,gBAAgB,EAAE,GAAG,GAAG,CAAC;IACjC,OAAO,IAAI,CAAC;QACX,WAAW,EACV,6NAA6N;QAC9N,IAAI,EAAE;YACL,OAAO,EAAE,IAAI,CAAC,MAAM;iBAClB,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACR,2DAA2D,CAC3D;YACF,OAAO,EAAE,IAAI,CAAC,MAAM;iBAClB,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,QAAQ,CACR,qLAAqL,CACrL;SACF;QACD,KAAK,CAAC,OAAO,CAAC,EACb,OAAO,EACP,OAAO,GAIP;YACA,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,KAAK,GAAG,sBAAsB,EAAE,CAAC;YACvC,MAAM,UAAU,GAAG,2BAA2B,EAAE,CAAC;YACjD,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE;gBACzB,IAAI,CAAC;oBACJ,OAAO,cAAc,EAAE,CAAC;gBACzB,CAAC;gBAAC,MAAM,CAAC;oBACR,OAAO,cAAc,CAAC;gBACvB,CAAC;YACF,CAAC,CAAC,EAAE,CAAC;YAEL,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACtB,6DAA6D;gBAC7D,wDAAwD;gBACxD,0DAA0D;gBAC1D,yDAAyD;gBACzD,2DAA2D;gBAC3D,0DAA0D;gBAC1D,0DAA0D;gBAC1D,4DAA4D;gBAC5D,oDAAoD;gBACpD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,mBAAmB,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;gBAC9D,MAAM,gBAAgB,GAAG,KAAK;oBAC7B,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAC,KAAK,IAAI;oBAC/C,CAAC,CAAC,KAAK,CAAC;gBACT,MAAM,aAAa,GAAG,CAAC,KAAK;oBAC3B,CAAC,CAAC,gDAAgD;oBAClD,CAAC,CAAC,SAAS,IAAI,gBAAgB;wBAC9B,CAAC,CAAC,UAAU;wBACZ,CAAC,CAAC,SAAS;4BACV,CAAC,CAAC,iCAAiC;4BACnC,CAAC,CAAC,6BAA6B,CAAC;gBAEnC,MAAM,KAAK,GAAa,EAAE,CAAC;gBAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;gBAC3D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACf,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC,CAAC;gBAClE,KAAK,CAAC,IAAI,CACT,gBAAgB,CACf,EAAE,EACF,gBAAgB,EAChB,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,CACxC,CACD,CAAC;gBACF,KAAK,CAAC,IAAI,CACT,gBAAgB,CACf,EAAE,EACF,oBAAoB,EACpB,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAC/D,CACD,CAAC;gBACF,KAAK,CAAC,IAAI,CACT,gBAAgB,CACf,EAAE,EACF,eAAe,EACf,UAAU,IAAI,QAAQ,CACtB,CACD,CAAC;gBACF,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC;gBAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;oBACZ,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBACf,KAAK,CAAC,IAAI,CACT,YAAY,CACX,EAAE,EACF,0FAA0F,CAC1F,CACD,CAAC;gBACH,CAAC;gBACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;YAED,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACvB,IAAI,CAAC,KAAK,EAAE,CAAC;oBACZ,OAAO,wIAAwI,CAAC;gBACjJ,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,YAAY,EAAE,CAAC;gBACrC,IAAI,CAAC,OAAO,EAAE,CAAC;oBACd,OAAO,sEAAsE,CAAC;gBAC/E,CAAC;gBACD,6DAA6D;gBAC7D,8DAA8D;gBAC9D,8CAA8C;gBAC9C,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;gBAC5B,OAAO;oBACN,GAAG,cAAc,CAAC,EAAE,EAAE,wBAAwB,CAAC;oBAC/C,EAAE;oBACF,YAAY,CACX,EAAE,EACF,YAAY,OAAO,CAAC,QAAQ,CAAC,MAAM,iCAAiC,CACpE;oBACD,gBAAgB,CAAC,EAAE,EAAE,eAAe,EAAE,UAAU,IAAI,QAAQ,CAAC;oBAC7D,YAAY,CACX,EAAE,EACF,iIAAiI,CACjI;iBACD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,CAAC;YAED,WAAW;YACX,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,WAAW,CAAC,CAAC;YACxD,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,CAAC,UAAU,EAAE,CAAC;gBACjB,OAAO,+EAA+E,WAAW,uBAAuB,CAAC;YAC1H,CAAC;YACD,gEAAgE;YAChE,gEAAgE;YAChE,IAAI,YAAY,GAAG,CAAC,CAAC;YACrB,IAAI,CAAC;gBACJ,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;gBACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;gBAC1C,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;gBAC/D,IAAI,CAAC,UAAU,EAAE,CAAC;oBACjB,OAAO,sCAAsC,UAAU,gDAAgD,CAAC;gBACzG,CAAC;gBACD,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC3C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,OAAO,qDAAqD,UAAU,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC;YACrG,CAAC;YAED,kEAAkE;YAClE,iEAAiE;YACjE,2DAA2D;YAC3D,MAAM,aAAa,EAAE,CAAC;YAEtB,iEAAiE;YACjE,0DAA0D;YAC1D,gEAAgE;YAChE,gEAAgE;YAChE,gEAAgE;YAChE,2DAA2D;YAC3D,8DAA8D;YAC9D,6CAA6C;YAC7C,IAAI,aAAa,GAAG,KAAK,CAAC;YAC1B,IAAI,CAAC;gBACJ,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBAC7B,aAAa,GAAG,IAAI,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACR,6CAA6C;YAC9C,CAAC;YACD,IAAI,kBAAkB,GAAkB,IAAI,CAAC;YAC7C,IAAI,aAAa,EAAE,CAAC;gBACnB,IAAI,CAAC,OAAO,EAAE,CAAC;oBACd,OAAO;wBACN,4EAA4E,WAAW,GAAG;wBAC1F,aAAa,UAAU,oBAAoB;wBAC3C,oIAAoI;qBACpI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,CAAC;gBACD,MAAM,aAAa,GAAG,IAAI,IAAI,EAAE;qBAC9B,WAAW,EAAE;qBACb,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBACxB,kBAAkB,GAAG,GAAG,WAAW,iBAAiB,aAAa,EAAE,CAAC;gBACpE,IAAI,CAAC;oBACJ,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;gBAClD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,OAAO,uEAAuE,WAAW,OAAO,kBAAkB,KAAM,GAAa,CAAC,OAAO,eAAe,UAAU,oBAAoB,CAAC;gBAC5L,CAAC;YACF,CAAC;YAED,IAAI,CAAC;gBACJ,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YAC1C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,OAAO,6CAA6C,UAAU,OAAO,WAAW,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC;YAC/G,CAAC;YACD,0DAA0D;YAC1D,8DAA8D;YAC9D,gEAAgE;YAChE,+DAA+D;YAC/D,kDAAkD;YAClD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAClC,IAAI,CAAC;oBACJ,MAAM,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;gBACpC,CAAC;gBAAC,MAAM,CAAC;oBACR;;qDAEiC;gBAClC,CAAC;YACF,CAAC;YACD,8DAA8D;YAC9D,sDAAsD;YACtD,IAAI,CAAC;gBACJ,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;YACtC,CAAC;YAAC,MAAM,CAAC;gBACR,sCAAsC;YACvC,CAAC;YAED,MAAM,KAAK,GAAa;gBACvB,GAAG,cAAc,CAAC,EAAE,EAAE,yBAAyB,CAAC;gBAChD,EAAE;gBACF,YAAY,CACX,EAAE,EACF,YAAY,YAAY,2BAA2B,UAAU,GAAG,CAChE;gBACD,gBAAgB,CAAC,EAAE,EAAE,aAAa,EAAE,WAAW,CAAC;aAChD,CAAC;YACF,IAAI,kBAAkB,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,CACT,gBAAgB,CACf,EAAE,EACF,2BAA2B,EAC3B,kBAAkB,CAClB,CACD,CAAC;YACH,CAAC;YACD,KAAK,CAAC,IAAI,CACT,YAAY,CACX,EAAE,EACF,0HAA0H,CAC1H,CACD,CAAC;YACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;KACD,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/tools/codex-label.d.ts

@@ -0,0 +1,8 @@
+/**
+ * `codex-label` tool — set or clear per-account display label.
+ * Extracted from `index.ts` per RC-1 Phase 2.
+ */
+import { type ToolDefinition } from "@opencode-ai/plugin/tool";
+import type { ToolContext } from "./index.js";
+export declare function createCodexLabelTool(ctx: ToolContext): ToolDefinition;
+//# sourceMappingURL=codex-label.d.ts.map

package/dist/lib/tools/codex-label.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-label.d.ts","sourceRoot":"","sources":["../../../lib/tools/codex-label.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAQ,KAAK,cAAc,EAAE,MAAM,0BAA0B,CAAC;AASrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,WAAW,GAAG,cAAc,CA6LrE"}

package/dist/lib/tools/codex-label.js

@@ -0,0 +1,143 @@
+/**
+ * `codex-label` tool — set or clear per-account display label.
+ * Extracted from `index.ts` per RC-1 Phase 2.
+ */
+import { tool } from "@opencode-ai/plugin/tool";
+import { loadAccounts, saveAccounts } from "../storage.js";
+import { AccountManager } from "../accounts.js";
+import { logWarn } from "../logger.js";
+import { formatUiHeader, formatUiItem, formatUiKeyValue, } from "../ui/format.js";
+export function createCodexLabelTool(ctx) {
+    const { resolveUiRuntime, promptAccountIndexSelection, supportsInteractiveMenus, formatCommandAccountLabel, getStatusMarker, cachedAccountManagerRef, accountManagerPromiseRef, } = ctx;
+    return tool({
+        description: "Set or clear a beginner-friendly display label for an account (interactive picker when index is omitted).",
+        args: {
+            index: tool.schema
+                .number()
+                .optional()
+                .describe("Account number to update (1-based, e.g., 1 for first account)"),
+            label: tool.schema
+                .string()
+                .describe("Display label. Use an empty string to clear (e.g., Work, Personal, Team A)"),
+        },
+        async execute({ index, label }) {
+            const ui = resolveUiRuntime();
+            const storage = await loadAccounts();
+            if (!storage || storage.accounts.length === 0) {
+                if (ui.v2Enabled) {
+                    return [
+                        ...formatUiHeader(ui, "Set account label"),
+                        "",
+                        formatUiItem(ui, "No accounts configured.", "warning"),
+                        formatUiItem(ui, "Run: opencode auth login", "accent"),
+                    ].join("\n");
+                }
+                return "No Codex accounts configured. Run: opencode auth login";
+            }
+            let resolvedIndex = index;
+            if (resolvedIndex === undefined) {
+                const selectedIndex = await promptAccountIndexSelection(ui, storage, "Set account label");
+                if (selectedIndex === null) {
+                    if (supportsInteractiveMenus()) {
+                        if (ui.v2Enabled) {
+                            return [
+                                ...formatUiHeader(ui, "Set account label"),
+                                "",
+                                formatUiItem(ui, "No account selected.", "warning"),
+                                formatUiItem(ui, 'Run again and pick an account, or pass codex-label index=2 label="Work".', "muted"),
+                            ].join("\n");
+                        }
+                        return "No account selected.";
+                    }
+                    if (ui.v2Enabled) {
+                        return [
+                            ...formatUiHeader(ui, "Set account label"),
+                            "",
+                            formatUiItem(ui, "Missing account number.", "warning"),
+                            formatUiItem(ui, 'Use: codex-label index=2 label="Work"', "accent"),
+                        ].join("\n");
+                    }
+                    return 'Missing account number. Use: codex-label index=2 label="Work"';
+                }
+                resolvedIndex = selectedIndex + 1;
+            }
+            const targetIndex = Math.floor((resolvedIndex ?? 0) - 1);
+            if (!Number.isFinite(targetIndex) ||
+                targetIndex < 0 ||
+                targetIndex >= storage.accounts.length) {
+                if (ui.v2Enabled) {
+                    return [
+                        ...formatUiHeader(ui, "Set account label"),
+                        "",
+                        formatUiItem(ui, `Invalid account number: ${resolvedIndex}`, "danger"),
+                        formatUiKeyValue(ui, "Valid range", `1-${storage.accounts.length}`, "muted"),
+                    ].join("\n");
+                }
+                return `Invalid account number: ${resolvedIndex}\n\nValid range: 1-${storage.accounts.length}`;
+            }
+            const normalizedLabel = (label ?? "").trim().replace(/\s+/g, " ");
+            if (normalizedLabel.length > 60) {
+                if (ui.v2Enabled) {
+                    return [
+                        ...formatUiHeader(ui, "Set account label"),
+                        "",
+                        formatUiItem(ui, "Label is too long (max 60 characters).", "danger"),
+                    ].join("\n");
+                }
+                return "Label is too long (max 60 characters).";
+            }
+            const account = storage.accounts[targetIndex];
+            if (!account) {
+                return `Account ${resolvedIndex} not found.`;
+            }
+            const previousLabel = account.accountLabel?.trim() ?? "";
+            if (normalizedLabel.length === 0) {
+                delete account.accountLabel;
+            }
+            else {
+                account.accountLabel = normalizedLabel;
+            }
+            try {
+                await saveAccounts(storage);
+            }
+            catch (saveError) {
+                logWarn("Failed to save account label update", {
+                    error: String(saveError),
+                });
+                if (ui.v2Enabled) {
+                    return [
+                        ...formatUiHeader(ui, "Set account label"),
+                        "",
+                        formatUiItem(ui, "Label updated in memory but failed to persist.", "danger"),
+                    ].join("\n");
+                }
+                return "Label updated in memory but failed to persist. Changes may be lost on restart.";
+            }
+            if (cachedAccountManagerRef.current) {
+                const reloadedManager = await AccountManager.loadFromDisk();
+                cachedAccountManagerRef.current = reloadedManager;
+                accountManagerPromiseRef.current = Promise.resolve(reloadedManager);
+            }
+            const accountLabel = formatCommandAccountLabel(account, targetIndex);
+            if (ui.v2Enabled) {
+                const statusText = normalizedLabel.length === 0
+                    ? `Cleared label for ${accountLabel}`
+                    : `Set label for ${accountLabel} to "${normalizedLabel}"`;
+                const previousText = previousLabel.length > 0
+                    ? formatUiKeyValue(ui, "Previous label", previousLabel, "muted")
+                    : formatUiKeyValue(ui, "Previous label", "none", "muted");
+                return [
+                    ...formatUiHeader(ui, "Set account label"),
+                    "",
+                    formatUiItem(ui, `${getStatusMarker(ui, "ok")} ${statusText}`, "success"),
+                    previousText,
+                ].join("\n");
+            }
+            if (normalizedLabel.length === 0) {
+                return `Cleared label for ${accountLabel}`;
+            }
+            return `Set label for ${accountLabel} to "${normalizedLabel}"`;
+        },
+    });
+}
+//# sourceMappingURL=codex-label.js.map

package/dist/lib/tools/codex-label.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-label.js","sourceRoot":"","sources":["../../../lib/tools/codex-label.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAuB,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EACN,cAAc,EACd,YAAY,EACZ,gBAAgB,GAChB,MAAM,iBAAiB,CAAC;AAGzB,MAAM,UAAU,oBAAoB,CAAC,GAAgB;IACpD,MAAM,EACL,gBAAgB,EAChB,2BAA2B,EAC3B,wBAAwB,EACxB,yBAAyB,EACzB,eAAe,EACf,uBAAuB,EACvB,wBAAwB,GACxB,GAAG,GAAG,CAAC;IACR,OAAO,IAAI,CAAC;QACX,WAAW,EACV,2GAA2G;QAC5G,IAAI,EAAE;YACL,KAAK,EAAE,IAAI,CAAC,MAAM;iBAChB,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACR,+DAA+D,CAC/D;YACF,KAAK,EAAE,IAAI,CAAC,MAAM;iBAChB,MAAM,EAAE;iBACR,QAAQ,CACR,4EAA4E,CAC5E;SACF;QACD,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,EAAqC;YAChE,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,MAAM,YAAY,EAAE,CAAC;YACrC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/C,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;oBAClB,OAAO;wBACN,GAAG,cAAc,CAAC,EAAE,EAAE,mBAAmB,CAAC;wBAC1C,EAAE;wBACF,YAAY,CAAC,EAAE,EAAE,yBAAyB,EAAE,SAAS,CAAC;wBACtD,YAAY,CAAC,EAAE,EAAE,0BAA0B,EAAE,QAAQ,CAAC;qBACtD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,CAAC;gBACD,OAAO,wDAAwD,CAAC;YACjE,CAAC;YAED,IAAI,aAAa,GAAG,KAAK,CAAC;YAC1B,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,aAAa,GAAG,MAAM,2BAA2B,CACtD,EAAE,EACF,OAAO,EACP,mBAAmB,CACnB,CAAC;gBACF,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;oBAC5B,IAAI,wBAAwB,EAAE,EAAE,CAAC;wBAChC,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;4BAClB,OAAO;gCACN,GAAG,cAAc,CAAC,EAAE,EAAE,mBAAmB,CAAC;gCAC1C,EAAE;gCACF,YAAY,CAAC,EAAE,EAAE,sBAAsB,EAAE,SAAS,CAAC;gCACnD,YAAY,CACX,EAAE,EACF,0EAA0E,EAC1E,OAAO,CACP;6BACD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBACd,CAAC;wBACD,OAAO,sBAAsB,CAAC;oBAC/B,CAAC;oBACD,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;wBAClB,OAAO;4BACN,GAAG,cAAc,CAAC,EAAE,EAAE,mBAAmB,CAAC;4BAC1C,EAAE;4BACF,YAAY,CAAC,EAAE,EAAE,yBAAyB,EAAE,SAAS,CAAC;4BACtD,YAAY,CACX,EAAE,EACF,uCAAuC,EACvC,QAAQ,CACR;yBACD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACd,CAAC;oBACD,OAAO,+DAA+D,CAAC;gBACxE,CAAC;gBACD,aAAa,GAAG,aAAa,GAAG,CAAC,CAAC;YACnC,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzD,IACC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAC7B,WAAW,GAAG,CAAC;gBACf,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,EACrC,CAAC;gBACF,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;oBAClB,OAAO;wBACN,GAAG,cAAc,CAAC,EAAE,EAAE,mBAAmB,CAAC;wBAC1C,EAAE;wBACF,YAAY,CACX,EAAE,EACF,2BAA2B,aAAa,EAAE,EAC1C,QAAQ,CACR;wBACD,gBAAgB,CACf,EAAE,EACF,aAAa,EACb,KAAK,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,EAC9B,OAAO,CACP;qBACD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,CAAC;gBACD,OAAO,2BAA2B,aAAa,sBAAsB,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAChG,CAAC;YAED,MAAM,eAAe,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAClE,IAAI,eAAe,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBACjC,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;oBAClB,OAAO;wBACN,GAAG,cAAc,CAAC,EAAE,EAAE,mBAAmB,CAAC;wBAC1C,EAAE;wBACF,YAAY,CACX,EAAE,EACF,wCAAwC,EACxC,QAAQ,CACR;qBACD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,CAAC;gBACD,OAAO,wCAAwC,CAAC;YACjD,CAAC;YAED,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO,WAAW,aAAa,aAAa,CAAC;YAC9C,CAAC;YAED,MAAM,aAAa,GAAG,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACzD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClC,OAAO,OAAO,CAAC,YAAY,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACP,OAAO,CAAC,YAAY,GAAG,eAAe,CAAC;YACxC,CAAC;YAED,IAAI,CAAC;gBACJ,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;YAC7B,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACpB,OAAO,CAAC,qCAAqC,EAAE;oBAC9C,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC;iBACxB,CAAC,CAAC;gBACH,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;oBAClB,OAAO;wBACN,GAAG,cAAc,CAAC,EAAE,EAAE,mBAAmB,CAAC;wBAC1C,EAAE;wBACF,YAAY,CACX,EAAE,EACF,gDAAgD,EAChD,QAAQ,CACR;qBACD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,CAAC;gBACD,OAAO,gFAAgF,CAAC;YACzF,CAAC;YAED,IAAI,uBAAuB,CAAC,OAAO,EAAE,CAAC;gBACrC,MAAM,eAAe,GAAG,MAAM,cAAc,CAAC,YAAY,EAAE,CAAC;gBAC5D,uBAAuB,CAAC,OAAO,GAAG,eAAe,CAAC;gBAClD,wBAAwB,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YACrE,CAAC;YAED,MAAM,YAAY,GAAG,yBAAyB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YACrE,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;gBAClB,MAAM,UAAU,GACf,eAAe,CAAC,MAAM,KAAK,CAAC;oBAC3B,CAAC,CAAC,qBAAqB,YAAY,EAAE;oBACrC,CAAC,CAAC,iBAAiB,YAAY,QAAQ,eAAe,GAAG,CAAC;gBAC5D,MAAM,YAAY,GACjB,aAAa,CAAC,MAAM,GAAG,CAAC;oBACvB,CAAC,CAAC,gBAAgB,CAAC,EAAE,EAAE,gBAAgB,EAAE,aAAa,EAAE,OAAO,CAAC;oBAChE,CAAC,CAAC,gBAAgB,CAAC,EAAE,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC5D,OAAO;oBACN,GAAG,cAAc,CAAC,EAAE,EAAE,mBAAmB,CAAC;oBAC1C,EAAE;oBACF,YAAY,CACX,EAAE,EACF,GAAG,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,UAAU,EAAE,EAC5C,SAAS,CACT;oBACD,YAAY;iBACZ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,CAAC;YAED,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClC,OAAO,qBAAqB,YAAY,EAAE,CAAC;YAC5C,CAAC;YACD,OAAO,iBAAiB,YAAY,QAAQ,eAAe,GAAG,CAAC;QAChE,CAAC;KACD,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/tools/codex-limits.d.ts

@@ -0,0 +1,8 @@
+/**
+ * `codex-limits` tool — show Codex usage limits per account.
+ * Extracted from `index.ts` per RC-1 Phase 2.
+ */
+import { type ToolDefinition } from "@opencode-ai/plugin/tool";
+import type { ToolContext } from "./index.js";
+export declare function createCodexLimitsTool(ctx: ToolContext): ToolDefinition;
+//# sourceMappingURL=codex-limits.d.ts.map

package/dist/lib/tools/codex-limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-limits.d.ts","sourceRoot":"","sources":["../../../lib/tools/codex-limits.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAQ,KAAK,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAoBrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,WAAW,GAAG,cAAc,CAwrBtE"}