oc-codex-multi-auth 6.0.0 → 6.1.1

package/dist/lib/accounts/persistence.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Persistence surface for {@link AccountManager}: debounced disk saves,
+ * pending-save coalescing, and shutdown-flush registration.
+ *
+ * All on-disk format concerns live in `lib/storage.ts`. This module owns the
+ * *lifecycle* (when to save, how to flush before exit, how to dispose the
+ * shutdown hook) rather than the serialization shape itself.
+ */
+import type { AccountState } from "./state.js";
+export declare class AccountPersistence {
+    private readonly state;
+    private saveDebounceTimer;
+    private pendingSave;
+    private shutdownHandler;
+    constructor(state: AccountState);
+    saveToDisk(): Promise<void>;
+    saveToDiskDebounced(delayMs?: number): void;
+    flushPendingSave(): Promise<void>;
+    /**
+     * Registers a process-shutdown cleanup that awaits any pending debounced
+     * save. Without this, a rotation queued inside the 500ms debounce window
+     * would be lost when SIGINT/SIGTERM fires before the timer resolves.
+     * Registration is lazy (only when `saveToDiskDebounced` is first invoked)
+     * so idle managers do not leak handlers into the shutdown queue.
+     */
+    private ensureShutdownFlushRegistered;
+    /**
+     * Removes this manager's shutdown cleanup registration. Call this when
+     * replacing an `AccountManager` instance (e.g., on cache invalidation)
+     * to avoid unbounded growth of the global cleanup queue.
+     */
+    disposeShutdownHandler(): void;
+}
+//# sourceMappingURL=persistence.d.ts.map

package/dist/lib/accounts/persistence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistence.d.ts","sourceRoot":"","sources":["../../../lib/accounts/persistence.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAU/C,qBAAa,kBAAkB;IAKlB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAJlC,OAAO,CAAC,iBAAiB,CAA8C;IACvE,OAAO,CAAC,WAAW,CAA8B;IACjD,OAAO,CAAC,eAAe,CAAsC;gBAEhC,KAAK,EAAE,YAAY;IAE1C,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAwCjC,mBAAmB,CAAC,OAAO,SAAM,GAAG,IAAI;IA0BlC,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IAWvC;;;;;;OAMG;IACH,OAAO,CAAC,6BAA6B;IAoCrC;;;;OAIG;IACH,sBAAsB,IAAI,IAAI;CAK9B"}

package/dist/lib/accounts/persistence.js

@@ -0,0 +1,153 @@
+/**
+ * Persistence surface for {@link AccountManager}: debounced disk saves,
+ * pending-save coalescing, and shutdown-flush registration.
+ *
+ * All on-disk format concerns live in `lib/storage.ts`. This module owns the
+ * *lifecycle* (when to save, how to flush before exit, how to dispose the
+ * shutdown hook) rather than the serialization shape itself.
+ */
+import { createLogger } from "../logger.js";
+import { MODEL_FAMILIES } from "../prompts/codex.js";
+import { registerCleanup, unregisterCleanup } from "../shutdown.js";
+import { saveAccounts } from "../storage.js";
+import { clampNonNegativeInt } from "./rate-limits.js";
+const log = createLogger("accounts");
+/**
+ * Upper bound the shutdown handler will wait for `flushPendingSave` so that a
+ * jammed save cannot stall SIGINT/SIGTERM indefinitely.
+ */
+const SHUTDOWN_FLUSH_TIMEOUT_MS = 5_000;
+export class AccountPersistence {
+    state;
+    saveDebounceTimer = null;
+    pendingSave = null;
+    shutdownHandler = null;
+    constructor(state) {
+        this.state = state;
+    }
+    async saveToDisk() {
+        const activeIndexByFamily = {};
+        for (const family of MODEL_FAMILIES) {
+            const raw = this.state.currentAccountIndexByFamily[family];
+            activeIndexByFamily[family] = clampNonNegativeInt(raw, 0);
+        }
+        const activeIndex = clampNonNegativeInt(activeIndexByFamily.codex, 0);
+        const storage = {
+            version: 3,
+            accounts: this.state.accounts.map((account) => ({
+                accountId: account.accountId,
+                organizationId: account.organizationId,
+                accountIdSource: account.accountIdSource,
+                accountLabel: account.accountLabel,
+                accountTags: account.accountTags,
+                accountNote: account.accountNote,
+                email: account.email,
+                refreshToken: account.refreshToken,
+                accessToken: account.access,
+                expiresAt: account.expires,
+                enabled: account.enabled === false ? false : undefined,
+                addedAt: account.addedAt,
+                lastUsed: account.lastUsed,
+                lastSwitchReason: account.lastSwitchReason,
+                rateLimitResetTimes: Object.keys(account.rateLimitResetTimes).length > 0
+                    ? account.rateLimitResetTimes
+                    : undefined,
+                coolingDownUntil: account.coolingDownUntil,
+                cooldownReason: account.cooldownReason,
+            })),
+            activeIndex,
+            activeIndexByFamily,
+        };
+        await saveAccounts(storage);
+    }
+    saveToDiskDebounced(delayMs = 500) {
+        this.ensureShutdownFlushRegistered();
+        if (this.saveDebounceTimer) {
+            clearTimeout(this.saveDebounceTimer);
+        }
+        this.saveDebounceTimer = setTimeout(() => {
+            this.saveDebounceTimer = null;
+            const doSave = async () => {
+                try {
+                    if (this.pendingSave) {
+                        await this.pendingSave;
+                    }
+                    this.pendingSave = this.saveToDisk().finally(() => {
+                        this.pendingSave = null;
+                    });
+                    await this.pendingSave;
+                }
+                catch (error) {
+                    log.warn("Debounced save failed", {
+                        error: error instanceof Error ? error.message : String(error),
+                    });
+                }
+            };
+            void doSave();
+        }, delayMs);
+    }
+    async flushPendingSave() {
+        if (this.saveDebounceTimer) {
+            clearTimeout(this.saveDebounceTimer);
+            this.saveDebounceTimer = null;
+            await this.saveToDisk();
+        }
+        if (this.pendingSave) {
+            await this.pendingSave;
+        }
+    }
+    /**
+     * Registers a process-shutdown cleanup that awaits any pending debounced
+     * save. Without this, a rotation queued inside the 500ms debounce window
+     * would be lost when SIGINT/SIGTERM fires before the timer resolves.
+     * Registration is lazy (only when `saveToDiskDebounced` is first invoked)
+     * so idle managers do not leak handlers into the shutdown queue.
+     */
+    ensureShutdownFlushRegistered() {
+        if (this.shutdownHandler)
+            return;
+        const handler = async () => {
+            // One-shot: clear the slot first so that if `runCleanup()` fires
+            // externally (e.g. tests reusing a manager across cycles, or any
+            // other caller that drains the global cleanup queue), a subsequent
+            // `saveToDiskDebounced()` can re-register a fresh handler. Without
+            // this the guard above returns early and the next pending save
+            // goes unprotected on shutdown.
+            this.shutdownHandler = null;
+            let timeoutTimer = null;
+            try {
+                await Promise.race([
+                    this.flushPendingSave(),
+                    new Promise((_resolve, reject) => {
+                        timeoutTimer = setTimeout(() => {
+                            reject(new Error(`flushPendingSave timed out after ${SHUTDOWN_FLUSH_TIMEOUT_MS}ms`));
+                        }, SHUTDOWN_FLUSH_TIMEOUT_MS);
+                    }),
+                ]);
+            }
+            catch (error) {
+                log.warn("Shutdown flush failed", {
+                    error: error instanceof Error ? error.message : String(error),
+                });
+            }
+            finally {
+                if (timeoutTimer)
+                    clearTimeout(timeoutTimer);
+            }
+        };
+        this.shutdownHandler = handler;
+        registerCleanup(handler);
+    }
+    /**
+     * Removes this manager's shutdown cleanup registration. Call this when
+     * replacing an `AccountManager` instance (e.g., on cache invalidation)
+     * to avoid unbounded growth of the global cleanup queue.
+     */
+    disposeShutdownHandler() {
+        if (!this.shutdownHandler)
+            return;
+        unregisterCleanup(this.shutdownHandler);
+        this.shutdownHandler = null;
+    }
+}
+//# sourceMappingURL=persistence.js.map

package/dist/lib/accounts/persistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistence.js","sourceRoot":"","sources":["../../../lib/accounts/persistence.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAoB,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,YAAY,EAAyB,MAAM,eAAe,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAGvD,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;AAErC;;;GAGG;AACH,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAExC,MAAM,OAAO,kBAAkB;IAKD;IAJrB,iBAAiB,GAAyC,IAAI,CAAC;IAC/D,WAAW,GAAyB,IAAI,CAAC;IACzC,eAAe,GAAiC,IAAI,CAAC;IAE7D,YAA6B,KAAmB;QAAnB,UAAK,GAAL,KAAK,CAAc;IAAG,CAAC;IAEpD,KAAK,CAAC,UAAU;QACf,MAAM,mBAAmB,GAAyC,EAAE,CAAC;QACrE,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC;YAC3D,mBAAmB,CAAC,MAAM,CAAC,GAAG,mBAAmB,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,WAAW,GAAG,mBAAmB,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAEtE,MAAM,OAAO,GAAqB;YACjC,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAC/C,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,eAAe,EAAE,OAAO,CAAC,eAAe;gBACxC,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,WAAW,EAAE,OAAO,CAAC,MAAM;gBAC3B,SAAS,EAAE,OAAO,CAAC,OAAO;gBAC1B,OAAO,EAAE,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;gBACtD,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;gBAC1C,mBAAmB,EAClB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,MAAM,GAAG,CAAC;oBAClD,CAAC,CAAC,OAAO,CAAC,mBAAmB;oBAC7B,CAAC,CAAC,SAAS;gBACb,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;gBAC1C,cAAc,EAAE,OAAO,CAAC,cAAc;aACtC,CAAC,CAAC;YACH,WAAW;YACX,mBAAmB;SACnB,CAAC;QAEF,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,mBAAmB,CAAC,OAAO,GAAG,GAAG;QAChC,IAAI,CAAC,6BAA6B,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,CAAC,iBAAiB,GAAG,UAAU,CAAC,GAAG,EAAE;YACxC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAC9B,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE;gBACzB,IAAI,CAAC;oBACJ,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;wBACtB,MAAM,IAAI,CAAC,WAAW,CAAC;oBACxB,CAAC;oBACD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;wBACjD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;oBACzB,CAAC,CAAC,CAAC;oBACH,MAAM,IAAI,CAAC,WAAW,CAAC;gBACxB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,GAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE;wBACjC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC7D,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC,CAAC;YACF,KAAK,MAAM,EAAE,CAAC;QACf,CAAC,EAAE,OAAO,CAAC,CAAC;IACb,CAAC;IAED,KAAK,CAAC,gBAAgB;QACrB,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACrC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAC9B,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACzB,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,WAAW,CAAC;QACxB,CAAC;IACF,CAAC;IAED;;;;;;OAMG;IACK,6BAA6B;QACpC,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO;QACjC,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;YACzC,iEAAiE;YACjE,iEAAiE;YACjE,mEAAmE;YACnE,mEAAmE;YACnE,+DAA+D;YAC/D,gCAAgC;YAChC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;YAC5B,IAAI,YAAY,GAAyC,IAAI,CAAC;YAC9D,IAAI,CAAC;gBACJ,MAAM,OAAO,CAAC,IAAI,CAAC;oBAClB,IAAI,CAAC,gBAAgB,EAAE;oBACvB,IAAI,OAAO,CAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;wBACtC,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;4BAC9B,MAAM,CACL,IAAI,KAAK,CACR,oCAAoC,yBAAyB,IAAI,CACjE,CACD,CAAC;wBACH,CAAC,EAAE,yBAAyB,CAAC,CAAC;oBAC/B,CAAC,CAAC;iBACF,CAAC,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,GAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE;oBACjC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC7D,CAAC,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACV,IAAI,YAAY;oBAAE,YAAY,CAAC,YAAY,CAAC,CAAC;YAC9C,CAAC;QACF,CAAC,CAAC;QACF,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC;QAC/B,eAAe,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,sBAAsB;QACrB,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,OAAO;QAClC,iBAAiB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACxC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;IAC7B,CAAC;CACD"}

package/dist/lib/accounts/recovery.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Recovery + hydration surface for {@link AccountManager}.
+ *
+ * Covers:
+ *  - auth-failure counter bookkeeping (per refresh token, serialized)
+ *  - cross-process hydration from the Codex CLI `~/.codex/accounts.json`
+ *  - merge-safe removal of all accounts sharing a refresh token
+ */
+import type { AccountPersistence } from "./persistence.js";
+import type { AccountState, ManagedAccount } from "./state.js";
+export type CodexCliTokenCacheEntry = {
+    accessToken: string;
+    expiresAt?: number;
+    refreshToken?: string;
+    accountId?: string;
+};
+export declare function lookupCodexCliTokensByEmail(email: string | undefined): Promise<CodexCliTokenCacheEntry | null>;
+export declare class AccountRecovery {
+    private readonly state;
+    private readonly persistence;
+    constructor(state: AccountState, persistence: AccountPersistence);
+    hydrateFromCodexCli(): Promise<void>;
+    /**
+     * Atomically increment the auth-failure counter for the account's refresh
+     * token and return the post-increment value.
+     *
+     * The read-modify-write is serialized through a per-refresh-token promise
+     * chain so that concurrent callers (for example, two org-variant accounts
+     * sharing a refresh token that fail auth simultaneously) cannot lose an
+     * increment. Without serialization both callers could read the same stale
+     * value, both compute `+1`, and both write the same result — masking a hard
+     * auth failure and causing the manager to keep hammering a dead token.
+     *
+     * Callers must `await` the returned promise before branching on the
+     * threshold (see `index.ts` auth-refresh failure path).
+     */
+    incrementAuthFailures(account: ManagedAccount): Promise<number>;
+    /**
+     * Return the current auth-failure counter for the account's refresh token
+     * without mutating state. Intended for tests and diagnostics.
+     */
+    getAuthFailures(account: ManagedAccount): number;
+    /**
+     * Clear the authentication failure counter for the given account's refresh token.
+     *
+     * Notes:
+     * - Failure counts are tracked per refresh token (not per account), so this clears
+     *   shared failure state for all org variants that reuse the same token.
+     * - Failure counts are in-memory only for the current AccountManager instance.
+     */
+    clearAuthFailures(account: ManagedAccount): void;
+    /**
+     * Remove all accounts that share the same refreshToken as the given account.
+     * This is used when auth refresh fails to remove all org variants together.
+     * @returns Number of accounts removed
+     */
+    removeAccountsWithSameRefreshToken(account: ManagedAccount): number;
+}
+//# sourceMappingURL=recovery.d.ts.map

package/dist/lib/accounts/recovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery.d.ts","sourceRoot":"","sources":["../../../lib/accounts/recovery.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAaH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAI/D,MAAM,MAAM,uBAAuB,GAAG;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAmGF,wBAAsB,2BAA2B,CAChD,KAAK,EAAE,MAAM,GAAG,SAAS,GACvB,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAMzC;AAED,qBAAa,eAAe;IAE1B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,WAAW;gBADX,KAAK,EAAE,YAAY,EACnB,WAAW,EAAE,kBAAkB;IAG3C,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC;IAkD1C;;;;;;;;;;;;;OAaG;IACG,qBAAqB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;IAoBrE;;;OAGG;IACH,eAAe,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM;IAIhD;;;;;;;OAOG;IACH,iBAAiB,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI;IAIhD;;;;OAIG;IACH,kCAAkC,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM;CAmBnE"}

package/dist/lib/accounts/recovery.js

@@ -0,0 +1,229 @@
+/**
+ * Recovery + hydration surface for {@link AccountManager}.
+ *
+ * Covers:
+ *  - auth-failure counter bookkeeping (per refresh token, serialized)
+ *  - cross-process hydration from the Codex CLI `~/.codex/accounts.json`
+ *  - merge-safe removal of all accounts sharing a refresh token
+ */
+import { existsSync, promises as fs } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { sanitizeEmail, shouldUpdateAccountIdFromToken, } from "../auth/token-utils.js";
+import { decodeJWT } from "../auth/auth.js";
+import { createLogger } from "../logger.js";
+import { CodexCliAccountsSchema } from "../schemas.js";
+import { nowMs } from "../utils.js";
+const log = createLogger("accounts");
+const CODEX_CLI_ACCOUNTS_PATH = join(homedir(), ".codex", "accounts.json");
+const CODEX_CLI_CACHE_TTL_MS = 5_000;
+let codexCliTokenCache = null;
+let codexCliTokenCacheLoadedAt = 0;
+function extractExpiresAtFromAccessToken(accessToken) {
+    const decoded = decodeJWT(accessToken);
+    const exp = decoded?.exp;
+    if (typeof exp === "number" && Number.isFinite(exp)) {
+        // JWT exp is in seconds since epoch.
+        return exp * 1000;
+    }
+    return undefined;
+}
+async function getCodexCliTokenCache() {
+    const syncEnabled = process.env.CODEX_AUTH_SYNC_CODEX_CLI !== "0";
+    const skip = !syncEnabled ||
+        process.env.VITEST_WORKER_ID !== undefined ||
+        process.env.NODE_ENV === "test";
+    if (skip)
+        return null;
+    const now = nowMs();
+    if (codexCliTokenCache && now - codexCliTokenCacheLoadedAt < CODEX_CLI_CACHE_TTL_MS) {
+        return codexCliTokenCache;
+    }
+    codexCliTokenCacheLoadedAt = now;
+    if (!existsSync(CODEX_CLI_ACCOUNTS_PATH)) {
+        codexCliTokenCache = null;
+        return null;
+    }
+    try {
+        const raw = await fs.readFile(CODEX_CLI_ACCOUNTS_PATH, "utf-8");
+        const rawParsed = JSON.parse(raw);
+        // Cross-process trust boundary: the Codex CLI accounts file is produced
+        // by a separate process on disk and may be stale, truncated, tampered
+        // with, or produced by a version whose shape we do not recognise. We
+        // MUST validate through the Zod schema before reading any field; a
+        // parse failure is a warn+skip, never a throw (audit top-20 #11).
+        const validation = CodexCliAccountsSchema.safeParse(rawParsed);
+        if (!validation.success) {
+            log.warn("Codex CLI accounts cache failed validation; ignoring", {
+                issues: validation.error.issues.length,
+                firstPath: validation.error.issues[0]?.path.join(".") ?? "(root)",
+            });
+            codexCliTokenCache = null;
+            return null;
+        }
+        const validated = validation.data;
+        const entries = Array.isArray(validated.accounts) ? validated.accounts : [];
+        const next = new Map();
+        for (const entry of entries) {
+            const email = sanitizeEmail(typeof entry.email === "string" ? entry.email : undefined);
+            if (!email)
+                continue;
+            const accountId = typeof entry.accountId === "string" && entry.accountId.trim()
+                ? entry.accountId.trim()
+                : undefined;
+            const tokens = entry.auth?.tokens;
+            const accessToken = typeof tokens?.access_token === "string" && tokens.access_token.trim()
+                ? tokens.access_token.trim()
+                : undefined;
+            const refreshToken = typeof tokens?.refresh_token === "string" && tokens.refresh_token.trim()
+                ? tokens.refresh_token.trim()
+                : undefined;
+            if (!accessToken)
+                continue;
+            next.set(email, {
+                accessToken,
+                expiresAt: extractExpiresAtFromAccessToken(accessToken),
+                refreshToken,
+                accountId,
+            });
+        }
+        codexCliTokenCache = next;
+        return codexCliTokenCache;
+    }
+    catch (error) {
+        log.debug("Failed to read Codex CLI accounts cache", { error: String(error) });
+        codexCliTokenCache = null;
+        return null;
+    }
+}
+export async function lookupCodexCliTokensByEmail(email) {
+    const normalized = sanitizeEmail(email);
+    if (!normalized)
+        return null;
+    const cache = await getCodexCliTokenCache();
+    const cached = cache?.get(normalized);
+    return cached ? { ...cached } : null;
+}
+export class AccountRecovery {
+    state;
+    persistence;
+    constructor(state, persistence) {
+        this.state = state;
+        this.persistence = persistence;
+    }
+    async hydrateFromCodexCli() {
+        const cache = await getCodexCliTokenCache();
+        if (!cache || cache.size === 0)
+            return;
+        const now = nowMs();
+        let changed = false;
+        for (const account of this.state.accounts) {
+            const email = sanitizeEmail(account.email);
+            if (!email)
+                continue;
+            const cached = cache.get(email);
+            if (!cached)
+                continue;
+            if (typeof cached.expiresAt === "number" && cached.expiresAt <= now) {
+                continue;
+            }
+            const missingOrExpired = !account.access || account.expires === undefined || account.expires <= now;
+            if (missingOrExpired) {
+                account.access = cached.accessToken;
+                if (typeof cached.expiresAt === "number") {
+                    account.expires = cached.expiresAt;
+                }
+                changed = true;
+            }
+            if (!account.accountId &&
+                cached.accountId &&
+                shouldUpdateAccountIdFromToken(account.accountIdSource, account.accountId)) {
+                account.accountId = cached.accountId;
+                account.accountIdSource = account.accountIdSource ?? "token";
+                changed = true;
+            }
+        }
+        if (!changed)
+            return;
+        try {
+            await this.persistence.saveToDisk();
+        }
+        catch (error) {
+            log.debug("Failed to persist Codex CLI cache hydration", {
+                error: String(error),
+            });
+        }
+    }
+    /**
+     * Atomically increment the auth-failure counter for the account's refresh
+     * token and return the post-increment value.
+     *
+     * The read-modify-write is serialized through a per-refresh-token promise
+     * chain so that concurrent callers (for example, two org-variant accounts
+     * sharing a refresh token that fail auth simultaneously) cannot lose an
+     * increment. Without serialization both callers could read the same stale
+     * value, both compute `+1`, and both write the same result — masking a hard
+     * auth failure and causing the manager to keep hammering a dead token.
+     *
+     * Callers must `await` the returned promise before branching on the
+     * threshold (see `index.ts` auth-refresh failure path).
+     */
+    async incrementAuthFailures(account) {
+        const key = account.refreshToken;
+        const prev = this.state.incrementAuthFailuresChain.get(key) ?? Promise.resolve(0);
+        const next = prev.then(() => {
+            const currentFailures = this.state.authFailuresByRefreshToken.get(key) ?? 0;
+            const newFailures = currentFailures + 1;
+            this.state.authFailuresByRefreshToken.set(key, newFailures);
+            return newFailures;
+        });
+        this.state.incrementAuthFailuresChain.set(key, next);
+        try {
+            return await next;
+        }
+        finally {
+            // Drop the chain entry only if no later caller has already replaced it.
+            if (this.state.incrementAuthFailuresChain.get(key) === next) {
+                this.state.incrementAuthFailuresChain.delete(key);
+            }
+        }
+    }
+    /**
+     * Return the current auth-failure counter for the account's refresh token
+     * without mutating state. Intended for tests and diagnostics.
+     */
+    getAuthFailures(account) {
+        return this.state.authFailuresByRefreshToken.get(account.refreshToken) ?? 0;
+    }
+    /**
+     * Clear the authentication failure counter for the given account's refresh token.
+     *
+     * Notes:
+     * - Failure counts are tracked per refresh token (not per account), so this clears
+     *   shared failure state for all org variants that reuse the same token.
+     * - Failure counts are in-memory only for the current AccountManager instance.
+     */
+    clearAuthFailures(account) {
+        this.state.authFailuresByRefreshToken.delete(account.refreshToken);
+    }
+    /**
+     * Remove all accounts that share the same refreshToken as the given account.
+     * This is used when auth refresh fails to remove all org variants together.
+     * @returns Number of accounts removed
+     */
+    removeAccountsWithSameRefreshToken(account) {
+        const refreshToken = account.refreshToken;
+        // Snapshot first because removeAccount mutates the accounts array.
+        const accountsToRemove = this.state.accounts.filter((acc) => acc.refreshToken === refreshToken);
+        let removedCount = 0;
+        for (const accountToRemove of accountsToRemove) {
+            if (this.state.removeAccount(accountToRemove)) {
+                removedCount++;
+            }
+        }
+        // Clear stale auth failure state for this refresh token
+        this.state.authFailuresByRefreshToken.delete(refreshToken);
+        return removedCount;
+    }
+}
+//# sourceMappingURL=recovery.js.map

package/dist/lib/accounts/recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery.js","sourceRoot":"","sources":["../../../lib/accounts/recovery.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACN,aAAa,EACb,8BAA8B,GAC9B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAIpC,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;AASrC,MAAM,uBAAuB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;AAC3E,MAAM,sBAAsB,GAAG,KAAK,CAAC;AACrC,IAAI,kBAAkB,GAAgD,IAAI,CAAC;AAC3E,IAAI,0BAA0B,GAAG,CAAC,CAAC;AAEnC,SAAS,+BAA+B,CAAC,WAAmB;IAC3D,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,CAAC;IACzB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,qCAAqC;QACrC,OAAO,GAAG,GAAG,IAAI,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,qBAAqB;IACnC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,GAAG,CAAC;IAClE,MAAM,IAAI,GACT,CAAC,WAAW;QACZ,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,SAAS;QAC1C,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC;IACjC,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAEtB,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;IACpB,IAAI,kBAAkB,IAAI,GAAG,GAAG,0BAA0B,GAAG,sBAAsB,EAAE,CAAC;QACrF,OAAO,kBAAkB,CAAC;IAC3B,CAAC;IACD,0BAA0B,GAAG,GAAG,CAAC;IAEjC,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC1C,kBAAkB,GAAG,IAAI,CAAC;QAC1B,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;QAChE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAE7C,wEAAwE;QACxE,sEAAsE;QACtE,qEAAqE;QACrE,mEAAmE;QACnE,kEAAkE;QAClE,MAAM,UAAU,GAAG,sBAAsB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACzB,GAAG,CAAC,IAAI,CAAC,sDAAsD,EAAE;gBAChE,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM;gBACtC,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ;aACjE,CAAC,CAAC;YACH,kBAAkB,GAAG,IAAI,CAAC;YAC1B,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC;QAClC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAE5E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAmC,CAAC;QACxD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,aAAa,CAC1B,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CACzD,CAAC;YACF,IAAI,CAAC,KAAK;gBAAE,SAAS;YAErB,MAAM,SAAS,GACd,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE;gBAC5D,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE;gBACxB,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC;YAClC,MAAM,WAAW,GAChB,OAAO,MAAM,EAAE,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE;gBACrE,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE;gBAC5B,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,YAAY,GACjB,OAAO,MAAM,EAAE,aAAa,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE;gBACvE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE;gBAC7B,CAAC,CAAC,SAAS,CAAC;YAEd,IAAI,CAAC,WAAW;gBAAE,SAAS;YAE3B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE;gBACf,WAAW;gBACX,SAAS,EAAE,+BAA+B,CAAC,WAAW,CAAC;gBACvD,YAAY;gBACZ,SAAS;aACT,CAAC,CAAC;QACJ,CAAC;QAED,kBAAkB,GAAG,IAAI,CAAC;QAC1B,OAAO,kBAAkB,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,GAAG,CAAC,KAAK,CAAC,yCAAyC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/E,kBAAkB,GAAG,IAAI,CAAC;QAC1B,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAChD,KAAyB;IAEzB,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,KAAK,GAAG,MAAM,qBAAqB,EAAE,CAAC;IAC5C,MAAM,MAAM,GAAG,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IACtC,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACtC,CAAC;AAED,MAAM,OAAO,eAAe;IAET;IACA;IAFlB,YACkB,KAAmB,EACnB,WAA+B;QAD/B,UAAK,GAAL,KAAK,CAAc;QACnB,gBAAW,GAAX,WAAW,CAAoB;IAC9C,CAAC;IAEJ,KAAK,CAAC,mBAAmB;QACxB,MAAM,KAAK,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO;QAEvC,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;QACpB,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,KAAK;gBAAE,SAAS;YAErB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,CAAC,MAAM;gBAAE,SAAS;YAEtB,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;gBACrE,SAAS;YACV,CAAC;YAED,MAAM,gBAAgB,GACrB,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,IAAI,GAAG,CAAC;YAC5E,IAAI,gBAAgB,EAAE,CAAC;gBACtB,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC;gBACpC,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;oBAC1C,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC;gBACpC,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC;YAChB,CAAC;YAED,IACC,CAAC,OAAO,CAAC,SAAS;gBAClB,MAAM,CAAC,SAAS;gBAChB,8BAA8B,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,SAAS,CAAC,EACzE,CAAC;gBACF,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;gBACrC,OAAO,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC;gBAC7D,OAAO,GAAG,IAAI,CAAC;YAChB,CAAC;QACF,CAAC;QAED,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,GAAG,CAAC,KAAK,CAAC,6CAA6C,EAAE;gBACxD,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;aACpB,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,qBAAqB,CAAC,OAAuB;QAClD,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAClF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YAC3B,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC5E,MAAM,WAAW,GAAG,eAAe,GAAG,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YAC5D,OAAO,WAAW,CAAC;QACpB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC;YACJ,OAAO,MAAM,IAAI,CAAC;QACnB,CAAC;gBAAS,CAAC;YACV,wEAAwE;YACxE,IAAI,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC7D,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACnD,CAAC;QACF,CAAC;IACF,CAAC;IAED;;;OAGG;IACH,eAAe,CAAC,OAAuB;QACtC,OAAO,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC7E,CAAC;IAED;;;;;;;OAOG;IACH,iBAAiB,CAAC,OAAuB;QACxC,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACpE,CAAC;IAED;;;;OAIG;IACH,kCAAkC,CAAC,OAAuB;QACzD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QAC1C,mEAAmE;QACnE,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAClD,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,KAAK,YAAY,CAC1C,CAAC;QACF,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,KAAK,MAAM,eAAe,IAAI,gBAAgB,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC/C,YAAY,EAAE,CAAC;YAChB,CAAC;QACF,CAAC;QAED,wDAAwD;QACxD,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAE3D,OAAO,YAAY,CAAC;IACrB,CAAC;CACD"}

package/dist/lib/accounts/rotation.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Rotation + rate-limit + cooldown surface for {@link AccountManager}.
+ *
+ * Pure logic module: all state mutations land on a shared {@link AccountState}
+ * reference. Integrates with the health and token-bucket trackers in
+ * `lib/rotation.ts` (note: that file is the hybrid selection algorithm; this
+ * module is the manager-facing wrapper that wires it to `AccountState`).
+ */
+import type { ModelFamily } from "../prompts/codex.js";
+import { type HybridSelectionOptions } from "../rotation.js";
+import type { CooldownReason } from "../storage.js";
+import { type RateLimitReason } from "./rate-limits.js";
+import type { AccountState, ManagedAccount } from "./state.js";
+export declare class AccountRotation {
+    private readonly state;
+    constructor(state: AccountState);
+    getCurrentOrNextForFamily(family: ModelFamily, model?: string | null): ManagedAccount | null;
+    getNextForFamily(family: ModelFamily, model?: string | null): ManagedAccount | null;
+    getCurrentOrNextForFamilyHybrid(family: ModelFamily, model?: string | null, options?: HybridSelectionOptions): ManagedAccount | null;
+    recordSuccess(account: ManagedAccount, family: ModelFamily, model?: string | null): void;
+    recordRateLimit(account: ManagedAccount, family: ModelFamily, model?: string | null): void;
+    recordFailure(account: ManagedAccount, family: ModelFamily, model?: string | null): void;
+    consumeToken(account: ManagedAccount, family: ModelFamily, model?: string | null): boolean;
+    /**
+     * Refund a token consumed within the refund window (30 seconds).
+     * Use this when a request fails due to network errors (not rate limits).
+     * @returns true if refund was successful, false if no valid consumption found
+     */
+    refundToken(account: ManagedAccount, family: ModelFamily, model?: string | null): boolean;
+    markRateLimited(account: ManagedAccount, retryAfterMs: number, family: ModelFamily, model?: string | null): void;
+    markRateLimitedWithReason(account: ManagedAccount, retryAfterMs: number, family: ModelFamily, reason: RateLimitReason, model?: string | null): void;
+    markAccountCoolingDown(account: ManagedAccount, cooldownMs: number, reason: CooldownReason): void;
+    /**
+     * Mark every in-memory account sharing a refresh token as cooling down.
+     * @returns Number of live accounts updated.
+     */
+    markAccountsWithRefreshTokenCoolingDown(refreshToken: string, cooldownMs: number, reason: CooldownReason): number;
+    getMinWaitTimeForFamily(family: ModelFamily, model?: string | null): number;
+}
+//# sourceMappingURL=rotation.d.ts.map

package/dist/lib/accounts/rotation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rotation.d.ts","sourceRoot":"","sources":["../../../lib/accounts/rotation.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAKN,KAAK,sBAAsB,EAC3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,OAAO,EAIN,KAAK,eAAe,EACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE/D,qBAAa,eAAe;IACf,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,YAAY;IAEhD,yBAAyB,CACxB,MAAM,EAAE,WAAW,EACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GACnB,cAAc,GAAG,IAAI;IA6BxB,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,cAAc,GAAG,IAAI;IA4BnF,+BAA+B,CAC9B,MAAM,EAAE,WAAW,EACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,EACrB,OAAO,CAAC,EAAE,sBAAsB,GAC9B,cAAc,GAAG,IAAI;IA8DxB,aAAa,CACZ,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,WAAW,EACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GACnB,IAAI;IAKP,eAAe,CACd,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,WAAW,EACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GACnB,IAAI;IAMP,aAAa,CACZ,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,WAAW,EACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GACnB,IAAI;IAKP,YAAY,CACX,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,WAAW,EACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GACnB,OAAO;IAKV;;;;OAIG;IACH,WAAW,CACV,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,WAAW,EACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GACnB,OAAO;IAKV,eAAe,CACd,OAAO,EAAE,cAAc,EACvB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,WAAW,EACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GACnB,IAAI;IAIP,yBAAyB,CACxB,OAAO,EAAE,cAAc,EACvB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,WAAW,EACnB,MAAM,EAAE,eAAe,EACvB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GACnB,IAAI;IAeP,sBAAsB,CACrB,OAAO,EAAE,cAAc,EACvB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,cAAc,GACpB,IAAI;IAMP;;;OAGG;IACH,uCAAuC,CACtC,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,cAAc,GACpB,MAAM;IAUT,uBAAuB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM;CAuC3E"}