oc-codex-multi-auth 6.14.3 → 6.15.0

package/README.md

@@ -293,6 +293,52 @@ Primary config files:
 - `~/.config/opencode/tui.json`
 - `~/.opencode/openai-codex-auth-config.json`
 
+### Desktop quota notifications
+
+Quota notifications are an optional macOS-only feature. While the plugin is
+running, it checks all enabled accounts and alerts through Notification Center
+when the best remaining 5-hour or weekly pool quota crosses 25%, 10%, or 0%.
+The feature is disabled by default.
+
+Each line reports the enabled account with the most headroom in that window,
+together with that same account's reset time, so the pair always describes a
+quota that one account actually has. Windows a plan has switched off are
+skipped rather than counted as full. Account identities are omitted for
+readability and lock-screen privacy:
+
+```text
+5h: 10% | resets 22:30
+Weekly: 72% | resets 22:30 on Aug 30
+```
+
+```json
+{
+  "quotaNotifications": {
+    "enabled": true,
+    "intervalMs": 1800000,
+    "notifyEveryCheck": false,
+    "thresholds": [25, 10, 0]
+  }
+}
+```
+
+Add the object above to `~/.opencode/openai-codex-auth-config.json`, or set
+`CODEX_AUTH_QUOTA_NOTIFICATIONS=1`, then quit and restart OpenCode. The minimum
+interval is 30 seconds. If macOS blocks the alert, allow notifications for
+the process shown in **System Settings > Notifications**. The setting is
+ignored on Windows and Linux.
+
+Set `"notifyEveryCheck": true` to show the aggregate quota notification after
+every successful poll interval instead of only when a configured threshold is
+crossed. Set `"thresholds": []` to turn threshold alerts off entirely; pair it
+with `"notifyEveryCheck": true` or the monitor has nothing to deliver and stops
+polling.
+
+Delivery state lives beside the accounts file the alerts are computed from, so
+OpenCode processes working in the same account scope show only one alert per
+interval. With the default `perProjectAccounts`, that scope is one project:
+two projects have separate account pools and therefore alert independently.
+
 ### Route models to preferred accounts
 
 Use `modelAccountPools` to assign one or more preferred ChatGPT accounts or Business seats to a

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAMH,OAAO,KAAK,EAAE,MAAM,EAAe,MAAM,qBAAqB,CAAC;AAsU/D;;;;;;;;;;;;;;;GAeG;AAEH,eAAO,MAAM,iBAAiB,EAAE,MAq8H/B,CAAC;AAEF,eAAO,MAAM,gBAAgB,QAAoB,CAAC;AAElD,eAAe,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAMH,OAAO,KAAK,EAAE,MAAM,EAAe,MAAM,qBAAqB,CAAC;AAuU/D;;;;;;;;;;;;;;;GAeG;AAEH,eAAO,MAAM,iBAAiB,EAAE,MAq9H/B,CAAC;AAEF,eAAO,MAAM,gBAAgB,QAAoB,CAAC;AAElD,eAAe,iBAAiB,CAAC"}

package/dist/index.js

@@ -36,6 +36,7 @@ import { promptAddAnotherAccount, promptLoginMode } from "./lib/cli.js";
 import { getCodexMode, getRequestTransformMode, getFastSession, getFastSessionStrategy, getFastSessionMaxInputItems, getRetryProfile, getRetryBudgetOverrides, getRateLimitToastDebounceMs, getRetryAllAccountsMaxRetries, getRetryAllAccountsMaxWaitMs, getRetryAllAccountsRateLimited, getFallbackToGpt52OnUnsupportedGpt53, getUnsupportedCodexPolicy, getUnsupportedCodexFallbackChain, getTokenRefreshSkewMs, getSessionRecovery, getAutoResume, getAutoUpdate, getToastDurationMs, getAccountToastsEnabled, getPerProjectAccounts, getEmptyResponseMaxRetries, getEmptyResponseRetryDelayMs, getPidOffsetEnabled, getRotationStrategy, getModelAccountPool, getModelAccountPoolMode, getFetchTimeoutMs, getStreamStallTimeoutMs, getCodexTuiV2, getCodexTuiColorProfile, getCodexTuiGlyphMode, getBeginnerSafeMode, getCodexTuiMaskEmail, loadPluginConfig, } from "./lib/config.js";
 import { AUTH_LABELS, CODEX_BASE_URL, DUMMY_API_KEY, LOG_STAGES, PLUGIN_NAME, PROVIDER_ID, ACCOUNT_LIMITS, } from "./lib/constants.js";
 import { initLogger, logRequest, logDebug, logInfo, logWarn, logError, setCorrelationId, clearCorrelationId, } from "./lib/logger.js";
+import { createQuotaMonitor } from "./lib/quota-notifications.js";
 import { checkAndNotify } from "./lib/auto-update-checker.js";
 import { handleContextOverflow } from "./lib/context-overflow.js";
 import { AccountManager, extractAccountEmail, extractAccountId, formatAccountLabel, formatWaitTime, sanitizeEmail, shouldUpdateAccountIdFromToken, resolveRequestAccountId, parseRateLimitReason, lookupCodexCliTokensByEmail, } from "./lib/accounts.js";
@@ -314,7 +315,9 @@ export const OpenAIOAuthPlugin = async ({ client }) => {
                 return "No authorization code found. Paste the full callback URL (e.g., http://localhost:1455/auth/callback?code=...). If browser callback keeps failing, retry with Device Code.";
             }
             if (!parsed.state) {
-                return "Missing OAuth state. Paste the full callback URL including both code and state parameters. If needed, retry with Device Code.";
+                return parsed.source === "raw"
+                    ? "That is a bare authorization code. This flow needs the full callback URL, including the state parameter (e.g., http://localhost:1455/auth/callback?code=...&state=...). If needed, retry with Device Code."
+                    : "Missing OAuth state. Paste the full callback URL including both code and state parameters. If needed, retry with Device Code.";
             }
             if (parsed.state !== expectedState) {
                 return "OAuth state mismatch. Restart login and paste the callback URL generated for this login attempt, or retry with Device Code.";
@@ -1126,10 +1129,22 @@ export const OpenAIOAuthPlugin = async ({ client }) => {
             });
         }
     };
+    // Created here, after `invalidateAccountManagerCache`, because the
+    // monitor refreshes access tokens unattended. A refresh rotates the
+    // single-use refresh token durably on disk, so the cached
+    // AccountManager holding the old one must be dropped or its debounced
+    // save clobbers the rotation (see `reloadCachedAccountManager` above).
+    const quotaMonitor = createQuotaMonitor({
+        onCredentialsPersisted: invalidateAccountManagerCache,
+    });
     // Event handler for session recovery and account selection
     const eventHandler = async (input) => {
         try {
             const { event } = input;
+            if (event.type === "server.instance.disposed") {
+                quotaMonitor.dispose();
+                return;
+            }
             // Handle TUI account selection events
             // Accepts generic selection events with an index property
             if (event.type === "account.select" ||
@@ -1236,6 +1251,7 @@ export const OpenAIOAuthPlugin = async ({ client }) => {
     const startupPerProjectAccounts = getPerProjectAccounts(startupPluginConfig);
     setStoragePath(startupPerProjectAccounts ? process.cwd() : null);
     await backfillHostOpenAIAuthFromPool();
+    quotaMonitor.start();
     return {
         event: eventHandler,
         auth: {