oc-codex-multi-auth 6.0.0

package/dist/lib/parallel-probe.d.ts

@@ -0,0 +1,28 @@
+import type { ManagedAccount, AccountManager } from "./accounts.js";
+import type { ModelFamily } from "./prompts/codex.js";
+export interface ProbeCandidate {
+    account: ManagedAccount;
+    controller: AbortController;
+}
+export interface ProbeResult<T> {
+    type: "success" | "failure";
+    account: ManagedAccount;
+    response?: T;
+    error?: Error;
+}
+export interface ParallelProbeOptions {
+    maxConcurrency: number;
+    timeoutMs: number;
+}
+/**
+ * Get top N candidates ranked by hybrid score WITHOUT mutating AccountManager state.
+ * Uses getAccountsSnapshot() and ranks by health + tokens + freshness.
+ */
+export declare function getTopCandidates(accountManager: AccountManager, modelFamily: ModelFamily, model: string | null, maxCandidates: number): ManagedAccount[];
+/**
+ * Probe accounts in parallel with first-success-wins racing.
+ * Immediately aborts losing candidates when a winner is found.
+ */
+export declare function probeAccountsInParallel<T>(candidates: ProbeCandidate[], probeFn: (account: ManagedAccount, signal: AbortSignal) => Promise<T>, _options?: Partial<ParallelProbeOptions>): Promise<ProbeResult<T> | null>;
+export declare function createProbeCandidates(accounts: ManagedAccount[]): ProbeCandidate[];
+//# sourceMappingURL=parallel-probe.d.ts.map

package/dist/lib/parallel-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parallel-probe.d.ts","sourceRoot":"","sources":["../../lib/parallel-probe.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAWtD,MAAM,WAAW,cAAc;IAC9B,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,eAAe,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW,CAAC,CAAC;IAC7B,IAAI,EAAE,SAAS,GAAG,SAAS,CAAC;IAC5B,OAAO,EAAE,cAAc,CAAC;IACxB,QAAQ,CAAC,EAAE,CAAC,CAAC;IACb,KAAK,CAAC,EAAE,KAAK,CAAC;CACd;AAED,MAAM,WAAW,oBAAoB;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC/B,cAAc,EAAE,cAAc,EAC9B,WAAW,EAAE,WAAW,EACxB,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,aAAa,EAAE,MAAM,GACnB,cAAc,EAAE,CAuClB;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAAC,CAAC,EAC9C,UAAU,EAAE,cAAc,EAAE,EAC5B,OAAO,EAAE,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,EACrE,QAAQ,GAAE,OAAO,CAAC,oBAAoB,CAAM,GAC1C,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CA8ChC;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,cAAc,EAAE,CAKlF"}

package/dist/lib/parallel-probe.js

@@ -0,0 +1,97 @@
+import { createLogger } from "./logger.js";
+import { getHealthTracker, getTokenTracker, } from "./rotation.js";
+import { clearExpiredRateLimits, isRateLimitedForFamily } from "./accounts/rate-limits.js";
+const log = createLogger("parallel-probe");
+/**
+ * Get top N candidates ranked by hybrid score WITHOUT mutating AccountManager state.
+ * Uses getAccountsSnapshot() and ranks by health + tokens + freshness.
+ */
+export function getTopCandidates(accountManager, modelFamily, model, maxCandidates) {
+    const accounts = accountManager.getAccountsSnapshot();
+    if (accounts.length === 0)
+        return [];
+    const quotaKey = model ? `${modelFamily}:${model}` : modelFamily;
+    const healthTracker = getHealthTracker();
+    const tokenTracker = getTokenTracker();
+    const accountsWithMetrics = [];
+    for (const account of accounts) {
+        clearExpiredRateLimits(account);
+        const isRateLimited = isRateLimitedForFamily(account, modelFamily, model);
+        const isCoolingDown = account.coolingDownUntil !== undefined && account.coolingDownUntil > Date.now();
+        const isAvailable = !isRateLimited && !isCoolingDown;
+        accountsWithMetrics.push({
+            index: account.index,
+            isAvailable,
+            lastUsed: account.lastUsed,
+            account,
+        });
+    }
+    const available = accountsWithMetrics.filter((a) => a.isAvailable);
+    if (available.length === 0)
+        return [];
+    const now = Date.now();
+    const scored = available.map((a) => {
+        const health = healthTracker.getScore(a.index, quotaKey);
+        const tokens = tokenTracker.getTokens(a.index, quotaKey);
+        const hoursSinceUsed = (now - a.lastUsed) / (1000 * 60 * 60);
+        const score = health * 2 + tokens * 5 + hoursSinceUsed * 2.0;
+        return { ...a, score };
+    });
+    scored.sort((a, b) => b.score - a.score);
+    return scored.slice(0, maxCandidates).map((s) => s.account);
+}
+/**
+ * Probe accounts in parallel with first-success-wins racing.
+ * Immediately aborts losing candidates when a winner is found.
+ */
+export async function probeAccountsInParallel(candidates, probeFn, _options = {}) {
+    if (candidates.length === 0) {
+        return null;
+    }
+    if (candidates.length === 1) {
+        const candidate = candidates[0];
+        if (!candidate)
+            return null;
+        const { account, controller } = candidate;
+        try {
+            const response = await probeFn(account, controller.signal);
+            return { type: "success", account, response };
+        }
+        catch (error) {
+            return { type: "failure", account, error: error };
+        }
+    }
+    log.debug(`Probing ${candidates.length} accounts in parallel`);
+    let winner = null;
+    let resolvedCount = 0;
+    return new Promise((resolve) => {
+        for (const { account, controller } of candidates) {
+            probeFn(account, controller.signal)
+                .then((response) => {
+                if (!winner) {
+                    winner = { type: "success", account, response };
+                    log.debug(`Parallel probe succeeded with account ${account.index + 1}`);
+                    for (const c of candidates) {
+                        if (c.account.index !== account.index) {
+                            c.controller.abort();
+                        }
+                    }
+                    resolve(winner);
+                }
+            })
+                .catch((_error) => {
+                resolvedCount++;
+                if (resolvedCount === candidates.length && !winner) {
+                    resolve(null);
+                }
+            });
+        }
+    });
+}
+export function createProbeCandidates(accounts) {
+    return accounts.map((account) => ({
+        account,
+        controller: new AbortController(),
+    }));
+}
+//# sourceMappingURL=parallel-probe.js.map

package/dist/lib/parallel-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parallel-probe.js","sourceRoot":"","sources":["../../lib/parallel-probe.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACN,gBAAgB,EAChB,eAAe,GAEf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAE3F,MAAM,GAAG,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;AAmB3C;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC/B,cAA8B,EAC9B,WAAwB,EACxB,KAAoB,EACpB,aAAqB;IAErB,MAAM,QAAQ,GAAG,cAAc,CAAC,mBAAmB,EAAE,CAAC;IACtD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAErC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;IACjE,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;IAEvC,MAAM,mBAAmB,GAAyD,EAAE,CAAC;IAErF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,aAAa,GAAG,sBAAsB,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QAC1E,MAAM,aAAa,GAAG,OAAO,CAAC,gBAAgB,KAAK,SAAS,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtG,MAAM,WAAW,GAAG,CAAC,aAAa,IAAI,CAAC,aAAa,CAAC;QAErD,mBAAmB,CAAC,IAAI,CAAC;YACxB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,WAAW;YACX,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,OAAO;SACP,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACnE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACzD,MAAM,cAAc,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,cAAc,GAAG,GAAG,CAAC;QAC7D,OAAO,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAEzC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAC7D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,UAA4B,EAC5B,OAAqE,EACrE,WAA0C,EAAE;IAE5C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAC5B,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,SAAS,CAAC;QAC1C,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;YAC3D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,KAAc,EAAE,CAAC;QAC5D,CAAC;IACF,CAAC;IAED,GAAG,CAAC,KAAK,CAAC,WAAW,UAAU,CAAC,MAAM,uBAAuB,CAAC,CAAC;IAE/D,IAAI,MAAM,GAA0B,IAAI,CAAC;IACzC,IAAI,aAAa,GAAG,CAAC,CAAC;IAEtB,OAAO,IAAI,OAAO,CAAwB,CAAC,OAAO,EAAE,EAAE;QACrD,KAAK,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,UAAU,EAAE,CAAC;YAClD,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC;iBACjC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;gBAClB,IAAI,CAAC,MAAM,EAAE,CAAC;oBACb,MAAM,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;oBAChD,GAAG,CAAC,KAAK,CAAC,yCAAyC,OAAO,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;oBAExE,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;wBAC5B,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;4BACvC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;wBACtB,CAAC;oBACF,CAAC;oBACD,OAAO,CAAC,MAAM,CAAC,CAAC;gBACjB,CAAC;YACF,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE;gBACjB,aAAa,EAAE,CAAC;gBAChB,IAAI,aAAa,KAAK,UAAU,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;oBACpD,OAAO,CAAC,IAAI,CAAC,CAAC;gBACf,CAAC;YACF,CAAC,CAAC,CAAC;QACL,CAAC;IACF,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAA0B;IAC/D,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACjC,OAAO;QACP,UAAU,EAAE,IAAI,eAAe,EAAE;KACjC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/proactive-refresh.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Proactive Token Refresh Module
+ *
+ * Refreshes OAuth tokens before they expire to prevent auth failures mid-request.
+ * Default buffer: 5 minutes before expiry (configurable via tokenRefreshSkewMs).
+ *
+ * This is a production hardening feature that:
+ * - Reduces mid-request auth failures
+ * - Improves user experience with seamless token rotation
+ * - Works alongside the existing reactive refresh in fetch-helpers
+ */
+import type { ManagedAccount } from "./accounts.js";
+import type { TokenResult } from "./types.js";
+/** Default buffer before expiry to trigger proactive refresh (5 minutes) */
+export declare const DEFAULT_PROACTIVE_BUFFER_MS: number;
+/** Minimum buffer to prevent unnecessary refreshes (30 seconds) */
+export declare const MIN_PROACTIVE_BUFFER_MS: number;
+/**
+ * Result of a proactive refresh operation.
+ */
+export interface ProactiveRefreshResult {
+    refreshed: boolean;
+    tokenResult?: TokenResult;
+    reason: "not_needed" | "no_refresh_token" | "success" | "failed" | "exception";
+    errorMessage?: string;
+}
+/**
+ * Determines if an account's token should be proactively refreshed.
+ *
+ * @param account - The managed account to check
+ * @param bufferMs - Time buffer before expiry to trigger refresh (default: 5 minutes)
+ * @returns True if token is approaching expiry and should be refreshed
+ */
+export declare function shouldRefreshProactively(account: ManagedAccount, bufferMs?: number): boolean;
+/**
+ * Calculates milliseconds until an account's token expires.
+ *
+ * @param account - The managed account to check
+ * @returns Milliseconds until expiry, or Infinity if no expiry set
+ */
+export declare function getTimeUntilExpiry(account: ManagedAccount): number;
+/**
+ * Proactively refreshes an account's token if it's approaching expiry.
+ *
+ * @param account - The managed account to refresh
+ * @param bufferMs - Time buffer before expiry to trigger refresh
+ * @returns Result indicating whether refresh was performed and outcome
+ */
+export declare function proactiveRefreshAccount(account: ManagedAccount, bufferMs?: number): Promise<ProactiveRefreshResult>;
+/**
+ * Refreshes all accounts that are approaching token expiry.
+ *
+ * @param accounts - Array of managed accounts to check
+ * @param bufferMs - Time buffer before expiry to trigger refresh
+ * @returns Map of account index to refresh result
+ */
+export declare function refreshExpiringAccounts(accounts: ManagedAccount[], bufferMs?: number): Promise<Map<number, ProactiveRefreshResult>>;
+/**
+ * Updates a ManagedAccount with fresh token data from a successful refresh.
+ *
+ * @param account - The account to update
+ * @param result - Successful token refresh result
+ */
+export declare function applyRefreshResult(account: ManagedAccount, result: Extract<TokenResult, {
+    type: "success";
+}>): void;
+//# sourceMappingURL=proactive-refresh.d.ts.map

package/dist/lib/proactive-refresh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proactive-refresh.d.ts","sourceRoot":"","sources":["../../lib/proactive-refresh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAI9C,4EAA4E;AAC5E,eAAO,MAAM,2BAA2B,QAAgB,CAAC;AAEzD,mEAAmE;AACnE,eAAO,MAAM,uBAAuB,QAAY,CAAC;AAEjD;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACtC,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,MAAM,EAAE,YAAY,GAAG,kBAAkB,GAAG,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACvC,OAAO,EAAE,cAAc,EACvB,QAAQ,GAAE,MAAoC,GAC5C,OAAO,CAoBT;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM,CAKlE;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC5C,OAAO,EAAE,cAAc,EACvB,QAAQ,GAAE,MAAoC,GAC5C,OAAO,CAAC,sBAAsB,CAAC,CAoCjC;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC5C,QAAQ,EAAE,cAAc,EAAE,EAC1B,QAAQ,GAAE,MAAoC,GAC5C,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC,CA2D9C;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CACjC,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC,GAC/C,IAAI,CAMN"}

package/dist/lib/proactive-refresh.js

@@ -0,0 +1,161 @@
+/**
+ * Proactive Token Refresh Module
+ *
+ * Refreshes OAuth tokens before they expire to prevent auth failures mid-request.
+ * Default buffer: 5 minutes before expiry (configurable via tokenRefreshSkewMs).
+ *
+ * This is a production hardening feature that:
+ * - Reduces mid-request auth failures
+ * - Improves user experience with seamless token rotation
+ * - Works alongside the existing reactive refresh in fetch-helpers
+ */
+import { queuedRefresh } from "./refresh-queue.js";
+import { createLogger } from "./logger.js";
+const log = createLogger("proactive-refresh");
+/** Default buffer before expiry to trigger proactive refresh (5 minutes) */
+export const DEFAULT_PROACTIVE_BUFFER_MS = 5 * 60 * 1000;
+/** Minimum buffer to prevent unnecessary refreshes (30 seconds) */
+export const MIN_PROACTIVE_BUFFER_MS = 30 * 1000;
+/**
+ * Determines if an account's token should be proactively refreshed.
+ *
+ * @param account - The managed account to check
+ * @param bufferMs - Time buffer before expiry to trigger refresh (default: 5 minutes)
+ * @returns True if token is approaching expiry and should be refreshed
+ */
+export function shouldRefreshProactively(account, bufferMs = DEFAULT_PROACTIVE_BUFFER_MS) {
+    // No expiry set - can't determine if refresh is needed
+    if (account.expires === undefined) {
+        return false;
+    }
+    // No access token - definitely needs refresh
+    if (!account.access) {
+        return true;
+    }
+    // Clamp buffer to minimum
+    const safeBufferMs = Math.max(MIN_PROACTIVE_BUFFER_MS, bufferMs);
+    // Check if token expires within buffer window
+    const now = Date.now();
+    const expiresAt = account.expires;
+    const refreshThreshold = expiresAt - safeBufferMs;
+    return now >= refreshThreshold;
+}
+/**
+ * Calculates milliseconds until an account's token expires.
+ *
+ * @param account - The managed account to check
+ * @returns Milliseconds until expiry, or Infinity if no expiry set
+ */
+export function getTimeUntilExpiry(account) {
+    if (account.expires === undefined) {
+        return Infinity;
+    }
+    return Math.max(0, account.expires - Date.now());
+}
+/**
+ * Proactively refreshes an account's token if it's approaching expiry.
+ *
+ * @param account - The managed account to refresh
+ * @param bufferMs - Time buffer before expiry to trigger refresh
+ * @returns Result indicating whether refresh was performed and outcome
+ */
+export async function proactiveRefreshAccount(account, bufferMs = DEFAULT_PROACTIVE_BUFFER_MS) {
+    if (!shouldRefreshProactively(account, bufferMs)) {
+        return { refreshed: false, reason: "not_needed" };
+    }
+    if (!account.refreshToken) {
+        log.warn("Cannot proactively refresh account without refresh token", {
+            accountIndex: account.index,
+        });
+        return { refreshed: false, reason: "no_refresh_token" };
+    }
+    const timeUntilExpiry = getTimeUntilExpiry(account);
+    log.info("Proactively refreshing token", {
+        accountIndex: account.index,
+        email: account.email,
+        expiresInMs: timeUntilExpiry,
+        expiresInMinutes: Math.round(timeUntilExpiry / 60000),
+    });
+    const result = await queuedRefresh(account.refreshToken);
+    if (result.type === "success") {
+        log.info("Proactive refresh succeeded", {
+            accountIndex: account.index,
+            email: account.email,
+        });
+        return { refreshed: true, tokenResult: result, reason: "success" };
+    }
+    log.warn("Proactive refresh failed", {
+        accountIndex: account.index,
+        email: account.email,
+        failureReason: result.reason,
+    });
+    return { refreshed: true, tokenResult: result, reason: "failed" };
+}
+/**
+ * Refreshes all accounts that are approaching token expiry.
+ *
+ * @param accounts - Array of managed accounts to check
+ * @param bufferMs - Time buffer before expiry to trigger refresh
+ * @returns Map of account index to refresh result
+ */
+export async function refreshExpiringAccounts(accounts, bufferMs = DEFAULT_PROACTIVE_BUFFER_MS) {
+    const results = new Map();
+    const accountsToRefresh = accounts.filter((a) => shouldRefreshProactively(a, bufferMs));
+    if (accountsToRefresh.length === 0) {
+        log.debug("No accounts need proactive refresh");
+        return results;
+    }
+    log.info(`Proactively refreshing ${accountsToRefresh.length} account(s)`);
+    // Refresh in parallel for efficiency
+    const refreshPromises = accountsToRefresh.map(async (account) => {
+        try {
+            const result = await proactiveRefreshAccount(account, bufferMs);
+            return { index: account.index, result };
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            log.error("Unhandled exception during proactive refresh", {
+                accountId: account.accountId,
+                error: errorMessage,
+            });
+            const exceptionResult = {
+                refreshed: false,
+                reason: "exception",
+                errorMessage,
+            };
+            return {
+                index: account.index,
+                result: exceptionResult,
+            };
+        }
+    });
+    const outcomes = await Promise.all(refreshPromises);
+    for (const { index, result } of outcomes) {
+        results.set(index, result);
+    }
+    // Log summary
+    const succeeded = Array.from(results.values()).filter((r) => r.reason === "success").length;
+    const failed = Array.from(results.values()).filter((r) => r.reason === "failed").length;
+    if (succeeded > 0 || failed > 0) {
+        log.info("Proactive refresh complete", {
+            total: accountsToRefresh.length,
+            succeeded,
+            failed,
+        });
+    }
+    return results;
+}
+/**
+ * Updates a ManagedAccount with fresh token data from a successful refresh.
+ *
+ * @param account - The account to update
+ * @param result - Successful token refresh result
+ */
+export function applyRefreshResult(account, result) {
+    account.access = result.access;
+    account.expires = result.expires;
+    if (result.refresh !== account.refreshToken) {
+        account.refreshToken = result.refresh;
+    }
+}
+//# sourceMappingURL=proactive-refresh.js.map

package/dist/lib/proactive-refresh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proactive-refresh.js","sourceRoot":"","sources":["../../lib/proactive-refresh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,MAAM,GAAG,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAC;AAE9C,4EAA4E;AAC5E,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEzD,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,CAAC;AAYjD;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACvC,OAAuB,EACvB,WAAmB,2BAA2B;IAE9C,uDAAuD;IACvD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC;IACd,CAAC;IAED,6CAA6C;IAC7C,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,0BAA0B;IAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,uBAAuB,EAAE,QAAQ,CAAC,CAAC;IAEjE,8CAA8C;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IAClC,MAAM,gBAAgB,GAAG,SAAS,GAAG,YAAY,CAAC;IAElD,OAAO,GAAG,IAAI,gBAAgB,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAuB;IACzD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,OAAuB,EACvB,WAAmB,2BAA2B;IAE9C,IAAI,CAAC,wBAAwB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACnD,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,0DAA0D,EAAE;YACpE,YAAY,EAAE,OAAO,CAAC,KAAK;SAC3B,CAAC,CAAC;QACH,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,eAAe,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACpD,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE;QACxC,YAAY,EAAE,OAAO,CAAC,KAAK;QAC3B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,WAAW,EAAE,eAAe;QAC5B,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,KAAK,CAAC;KACrD,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAEzD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE;YACvC,YAAY,EAAE,OAAO,CAAC,KAAK;YAC3B,KAAK,EAAE,OAAO,CAAC,KAAK;SACpB,CAAC,CAAC;QACH,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACpE,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE;QACpC,YAAY,EAAE,OAAO,CAAC,KAAK;QAC3B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,aAAa,EAAE,MAAM,CAAC,MAAM;KAC5B,CAAC,CAAC;IACH,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACnE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,QAA0B,EAC1B,WAAmB,2BAA2B;IAE9C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkC,CAAC;IAC1D,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/C,wBAAwB,CAAC,CAAC,EAAE,QAAQ,CAAC,CACrC,CAAC;IAEF,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,GAAG,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAChD,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,0BAA0B,iBAAiB,CAAC,MAAM,aAAa,CAAC,CAAC;IAE1E,qCAAqC;IACrC,MAAM,eAAe,GAAG,iBAAiB,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC/D,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAChE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5E,GAAG,CAAC,KAAK,CAAC,8CAA8C,EAAE;gBACzD,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,KAAK,EAAE,YAAY;aACnB,CAAC,CAAC;YACH,MAAM,eAAe,GAA2B;gBAC/C,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,WAAW;gBACnB,YAAY;aACZ,CAAC;YACF,OAAO;gBACN,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,MAAM,EAAE,eAAe;aACvB,CAAC;QACH,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAEpD,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED,cAAc;IACd,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CACpD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAC7B,CAAC,MAAM,CAAC;IACT,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CACjD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAC5B,CAAC,MAAM,CAAC;IAET,IAAI,SAAS,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE;YACtC,KAAK,EAAE,iBAAiB,CAAC,MAAM;YAC/B,SAAS;YACT,MAAM;SACN,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CACjC,OAAuB,EACvB,MAAiD;IAEjD,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/B,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IACjC,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,YAAY,EAAE,CAAC;QAC7C,OAAO,CAAC,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC;IACvC,CAAC;AACF,CAAC"}

package/dist/lib/prompts/codex-opencode-bridge.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Codex-OpenCode Bridge Prompt
+ *
+ * This prompt bridges Codex CLI instructions to the OpenCode environment.
+ * It focuses on runtime-tool authority, schema discipline, and execution guardrails
+ * to avoid tool-name drift across OpenCode versions.
+ *
+ * Token Count: ~450 tokens (~90% reduction vs full OpenCode prompt)
+ */
+export declare const CODEX_OPENCODE_BRIDGE = "# Codex Running in OpenCode\n\nYou are running Codex through OpenCode, an open-source terminal coding assistant.\n\n## Runtime Tooling Rule (Highest Priority)\n\n<critical_rule priority=\"0\">\nTreat the runtime tool manifest as the only authoritative tool list.\n- Call ONLY tool names listed in that manifest.\n- Do NOT translate, alias, or rename tool names.\n- If a base instruction references a tool name that is not listed, ignore that alias and use the listed names only.\n</critical_rule>\n\n## Tool-Call Guardrails\n\n- Follow the current tool schema exactly for parameters.\n- Do not invent wrapper namespaces unless they are explicitly listed as tools.\n- If no explicit parallel helper tool is listed, run calls sequentially.\n- If a tool call fails validation, correct arguments to match schema and retry.\n\n## Planning & Modes\n\n- Never call `update_plan`, `read_plan`, or similarly named aliases.\n- Use planning tools only if they are explicitly listed in the runtime manifest.\n- `request_user_input` is Plan-mode only; never call it in Default mode.\n\n## Path & Execution Discipline\n\n- Follow per-tool path conventions from the active schema; do not assume absolute/relative behavior.\n- Prefer specialized tools over shell when an equivalent listed tool exists.\n- Use non-destructive checks before destructive commands.\n\n## Verification Checklist\n\nBefore each tool call:\n1. Is the tool name exactly listed in the runtime manifest?\n2. Do arguments match the listed schema?\n3. Am I avoiding unlisted aliases and wrapper namespaces?\n4. Am I following mode/path constraints for this environment?\n\nIf any answer is NO, correct it before proceeding.\n\n## OpenCode Working Style\n\n**Communication:**\n- Send brief preambles before tool calls.\n- Provide concise progress updates during longer tasks.\n\n**Execution:**\n- Continue working until the user request is fully resolved.\n- Do not return partial solutions unless blocked.\n\n**Code Approach:**\n- New projects: be creative and deliberate.\n- Existing codebases: make precise, minimal changes aligned to request.\n\n**Testing:**\n- If tests exist, run focused tests first, then broader validation.\n\n## What Remains from Codex\n\nSandbox policies, approvals, final formatting, git protocols, and file reference formats still follow Codex instructions.\n\n## Approvals & Safety\n\n- Treat destructive commands (for example `rm`, `git reset --hard`) as requiring explicit user request or approval.\n- Never run `git reset --hard`, `git checkout --`, or force deletes unless explicitly requested.\n- When uncertain, prefer non-destructive verification first.";
+export declare const renderCodexOpenCodeBridge: (toolNames: readonly string[]) => string;
+export interface CodexOpenCodeBridgeMeta {
+    estimatedTokens: number;
+    reductionVsCurrent: string;
+    reductionVsToolRemap: string;
+    protects: string[];
+    omits: string[];
+}
+export declare const CODEX_OPENCODE_BRIDGE_META: CodexOpenCodeBridgeMeta;
+//# sourceMappingURL=codex-opencode-bridge.d.ts.map

package/dist/lib/prompts/codex-opencode-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-opencode-bridge.d.ts","sourceRoot":"","sources":["../../../lib/prompts/codex-opencode-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,eAAO,MAAM,qBAAqB,ylFAmE2B,CAAC;AAe9D,eAAO,MAAM,yBAAyB,GAAI,WAAW,SAAS,MAAM,EAAE,KAAG,MAexE,CAAC;AAEF,MAAM,WAAW,uBAAuB;IACvC,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,eAAO,MAAM,0BAA0B,EAAE,uBAoBxC,CAAC"}

package/dist/lib/prompts/codex-opencode-bridge.js

@@ -0,0 +1,126 @@
+/**
+ * Codex-OpenCode Bridge Prompt
+ *
+ * This prompt bridges Codex CLI instructions to the OpenCode environment.
+ * It focuses on runtime-tool authority, schema discipline, and execution guardrails
+ * to avoid tool-name drift across OpenCode versions.
+ *
+ * Token Count: ~450 tokens (~90% reduction vs full OpenCode prompt)
+ */
+export const CODEX_OPENCODE_BRIDGE = `# Codex Running in OpenCode
+
+You are running Codex through OpenCode, an open-source terminal coding assistant.
+
+## Runtime Tooling Rule (Highest Priority)
+
+<critical_rule priority="0">
+Treat the runtime tool manifest as the only authoritative tool list.
+- Call ONLY tool names listed in that manifest.
+- Do NOT translate, alias, or rename tool names.
+- If a base instruction references a tool name that is not listed, ignore that alias and use the listed names only.
+</critical_rule>
+
+## Tool-Call Guardrails
+
+- Follow the current tool schema exactly for parameters.
+- Do not invent wrapper namespaces unless they are explicitly listed as tools.
+- If no explicit parallel helper tool is listed, run calls sequentially.
+- If a tool call fails validation, correct arguments to match schema and retry.
+
+## Planning & Modes
+
+- Never call \`update_plan\`, \`read_plan\`, or similarly named aliases.
+- Use planning tools only if they are explicitly listed in the runtime manifest.
+- \`request_user_input\` is Plan-mode only; never call it in Default mode.
+
+## Path & Execution Discipline
+
+- Follow per-tool path conventions from the active schema; do not assume absolute/relative behavior.
+- Prefer specialized tools over shell when an equivalent listed tool exists.
+- Use non-destructive checks before destructive commands.
+
+## Verification Checklist
+
+Before each tool call:
+1. Is the tool name exactly listed in the runtime manifest?
+2. Do arguments match the listed schema?
+3. Am I avoiding unlisted aliases and wrapper namespaces?
+4. Am I following mode/path constraints for this environment?
+
+If any answer is NO, correct it before proceeding.
+
+## OpenCode Working Style
+
+**Communication:**
+- Send brief preambles before tool calls.
+- Provide concise progress updates during longer tasks.
+
+**Execution:**
+- Continue working until the user request is fully resolved.
+- Do not return partial solutions unless blocked.
+
+**Code Approach:**
+- New projects: be creative and deliberate.
+- Existing codebases: make precise, minimal changes aligned to request.
+
+**Testing:**
+- If tests exist, run focused tests first, then broader validation.
+
+## What Remains from Codex
+
+Sandbox policies, approvals, final formatting, git protocols, and file reference formats still follow Codex instructions.
+
+## Approvals & Safety
+
+- Treat destructive commands (for example \`rm\`, \`git reset --hard\`) as requiring explicit user request or approval.
+- Never run \`git reset --hard\`, \`git checkout --\`, or force deletes unless explicitly requested.
+- When uncertain, prefer non-destructive verification first.`;
+const MAX_MANIFEST_TOOLS = 32;
+const normalizeRuntimeToolNames = (toolNames) => {
+    const unique = new Set();
+    for (const rawName of toolNames) {
+        const name = rawName.trim();
+        if (!name)
+            continue;
+        if (unique.size >= MAX_MANIFEST_TOOLS)
+            break;
+        unique.add(name);
+    }
+    return Array.from(unique);
+};
+export const renderCodexOpenCodeBridge = (toolNames) => {
+    const runtimeToolNames = normalizeRuntimeToolNames(toolNames);
+    if (runtimeToolNames.length === 0) {
+        return CODEX_OPENCODE_BRIDGE;
+    }
+    const manifest = [
+        "## Runtime Tool Manifest",
+        "The host has provided these exact tool names for this request:",
+        ...runtimeToolNames.map((name) => `- \`${name}\``),
+        "",
+        "Do not translate tool names. Use the exact names above.",
+    ].join("\n");
+    return `${manifest}\n\n${CODEX_OPENCODE_BRIDGE}`;
+};
+export const CODEX_OPENCODE_BRIDGE_META = {
+    estimatedTokens: 500,
+    reductionVsCurrent: "88%",
+    reductionVsToolRemap: "15%",
+    protects: [
+        "Tool name drift across OpenCode versions",
+        "Tool alias hallucinations (apply_patch/patch mismatch)",
+        "Planning alias hallucinations (update_plan/read_plan)",
+        "Missing tool awareness",
+        "Unknown tool-name hallucinations",
+        "Premature yielding to user",
+        "Over-modification of existing code",
+        "Environment confusion",
+    ],
+    omits: [
+        "Sandbox details (in Codex)",
+        "Formatting rules (in Codex)",
+        "Tool schemas (in tool JSONs)",
+        "Git protocols (in Codex)",
+    ],
+};
+//# sourceMappingURL=codex-opencode-bridge.js.map

package/dist/lib/prompts/codex-opencode-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-opencode-bridge.js","sourceRoot":"","sources":["../../../lib/prompts/codex-opencode-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6DAmEwB,CAAC;AAE9D,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B,MAAM,yBAAyB,GAAG,CAAC,SAA4B,EAAY,EAAE;IAC5E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,MAAM,CAAC,IAAI,IAAI,kBAAkB;YAAE,MAAM;QAC7C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,SAA4B,EAAU,EAAE;IACjF,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,SAAS,CAAC,CAAC;IAC9D,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,qBAAqB,CAAC;IAC9B,CAAC;IAED,MAAM,QAAQ,GAAG;QAChB,0BAA0B;QAC1B,gEAAgE;QAChE,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,IAAI,CAAC;QAClD,EAAE;QACF,yDAAyD;KACzD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,OAAO,GAAG,QAAQ,OAAO,qBAAqB,EAAE,CAAC;AAClD,CAAC,CAAC;AAUF,MAAM,CAAC,MAAM,0BAA0B,GAA4B;IAClE,eAAe,EAAE,GAAG;IACpB,kBAAkB,EAAE,KAAK;IACzB,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE;QACT,0CAA0C;QAC1C,wDAAwD;QACxD,uDAAuD;QACvD,wBAAwB;QACxB,kCAAkC;QAClC,4BAA4B;QAC5B,oCAAoC;QACpC,uBAAuB;KACvB;IACD,KAAK,EAAE;QACN,4BAA4B;QAC5B,6BAA6B;QAC7B,8BAA8B;QAC9B,0BAA0B;KAC1B;CACD,CAAC"}

package/dist/lib/prompts/codex.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Clear the memory cache - exposed for testing
+ * @internal
+ */
+export declare function __clearCacheForTesting(): void;
+/**
+ * Model family type for prompt selection
+ * Maps to different system prompts in the Codex CLI
+ */
+export type ModelFamily = "gpt-5-codex" | "codex-max" | "codex" | "gpt-5.4" | "gpt-5.4-mini" | "gpt-5.4-pro" | "gpt-5.2" | "gpt-5.1";
+/**
+ * All supported model families
+ * Used for per-family account rotation and rate limit tracking
+ */
+export declare const MODEL_FAMILIES: readonly ModelFamily[];
+/**
+ * Determine the model family based on the normalized model name
+ * @param normalizedModel - The normalized model name (e.g., "gpt-5-codex", "gpt-5.1-codex-max", "gpt-5.2", "gpt-5.1")
+ * @returns The model family for prompt selection
+ */
+export declare function getModelFamily(normalizedModel: string): ModelFamily;
+/**
+ * Fetch Codex instructions from GitHub with ETag-based caching
+ * Uses HTTP conditional requests to efficiently check for updates
+ * Always fetches from the latest release tag, not main branch
+ *
+ * Rate limit protection: Only checks GitHub if cache is older than 15 minutes
+ *
+ * @param normalizedModel - The normalized model name (optional, defaults to "gpt-5-codex")
+ * @returns Codex instructions for the specified model family
+ */
+export declare function getCodexInstructions(normalizedModel?: string): Promise<string>;
+/**
+ * Prewarm instruction caches for the provided models/families.
+ */
+export declare function prewarmCodexInstructions(models?: string[]): void;
+/**
+ * Tool remapping instructions for opencode tools
+ */
+export declare const TOOL_REMAP_MESSAGE = "<user_instructions priority=\"0\">\n<environment_override priority=\"0\">\nYOU ARE IN A DIFFERENT ENVIRONMENT. These instructions override ALL previous tool references.\n</environment_override>\n\n<tool_replacements priority=\"0\">\n<critical_rule priority=\"0\">\nPatch-edit tool names differ by runtime (for example: apply_patch, patch, edit).\n- Always use the exact tool names listed in the active tool schema/manifest\n- If the schema exposes apply_patch, call apply_patch directly\n- If the schema exposes patch/edit instead, use patch/edit as listed\n- Never invent aliases or auto-translate tool names\n</critical_rule>\n\n<critical_rule priority=\"0\">\n\u274C UPDATE_PLAN DOES NOT EXIST \u2192 \u2705 USE \"todowrite\" INSTEAD\n- NEVER use: update_plan, updatePlan\n- ALWAYS use: todowrite for ALL task/plan operations\n- Use todoread to read current plan\n- Before plan operations: Verify you're using \"todowrite\", NOT \"update_plan\"\n</critical_rule>\n</tool_replacements>\n\n<available_tools priority=\"0\">\nNote: This list is illustrative. Always defer to the active tool schema/manifest.\nFile Operations:\n  \u2022 write  - Create new files\n  \u2022 edit   - Modify existing files with string replacement\n  \u2022 patch  - Apply diff patches\n  \u2022 apply_patch - Apply diff patches (alternate runtime name; use whichever the schema exposes)\n  \u2022 read   - Read file contents\n\nSearch/Discovery:\n  \u2022 grep   - Search file contents\n  \u2022 glob   - Find files by pattern\n  \u2022 list   - List directories\n\nExecution:\n  \u2022 bash   - Run shell commands\n\nNetwork:\n  \u2022 webfetch - Fetch web content\n\nTask Management:\n  \u2022 todowrite - Manage tasks/plans (REPLACES update_plan)\n  \u2022 todoread  - Read current plan\n</available_tools>\n\n<tool_call_guardrails priority=\"0\">\n- Call only tool names listed in the active tool schema.\n- Do not invent wrapper namespaces (for example functions.task or multi_tool_use.parallel) unless explicitly listed.\n- Follow each tool's required path format instead of forcing absolute or relative paths globally.\n</tool_call_guardrails>\n\n<substitution_rules priority=\"0\">\nBase instruction says:    Correct behaviour:\napply_patch/patch      \u2192   use the exact tool name from the active schema (no renaming)\nupdate_plan           \u2192   todowrite\nread_plan             \u2192   todoread\n</substitution_rules>\n\n<verification_checklist priority=\"0\">\nBefore file/plan modifications:\n1. Am I using the exact patch/edit (including apply_patch when exposed) tool name listed by the active schema?\n2. Am I using \"todowrite\" NOT \"update_plan\"?\n3. Is this tool in the approved list above?\n4. Am I following the active tool schema (including path format)?\n\nIf ANY answer is NO \u2192 STOP and correct before proceeding.\n</verification_checklist>\n\n<safety_rules priority=\"0\">\n- Never run destructive git commands (`git reset --hard`, `git checkout --`) unless explicitly requested by the user.\n- Never call `request_user_input` unless collaboration mode is explicitly Plan mode.\n</safety_rules>\n</user_instructions>";
+//# sourceMappingURL=codex.d.ts.map

package/dist/lib/prompts/codex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../../../lib/prompts/codex.ts"],"names":[],"mappings":"AAuBA;;;GAGG;AACH,wBAAgB,sBAAsB,IAAI,IAAI,CAI7C;AAWD;;;GAGG;AACH,MAAM,MAAM,WAAW,GACpB,aAAa,GACb,WAAW,GACX,OAAO,GACP,SAAS,GACT,cAAc,GACd,aAAa,GACb,SAAS,GACT,SAAS,CAAC;AAEb;;;GAGG;AACH,eAAO,MAAM,cAAc,EAAE,SAAS,WAAW,EASvC,CAAC;AAkCX;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,eAAe,EAAE,MAAM,GAAG,WAAW,CAqCnE;AAwED;;;;;;;;;GASG;AACH,wBAAsB,oBAAoB,CACzC,eAAe,SAAgB,GAC7B,OAAO,CAAC,MAAM,CAAC,CAuFjB;AAsGD;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,GAAE,MAAM,EAAO,GAAG,IAAI,CAUpE;AAED;;GAEG;AACH,eAAO,MAAM,kBAAkB,mkGA2EV,CAAC"}