oh-my-codex-pennix 0.18.13

package/dist/agents/native-config.js

@@ -0,0 +1,285 @@
+/**
+ * Native agent config generators for Codex CLI.
+ * Writes standalone TOML files under ~/.codex/agents/ or ./.codex/agents/.
+ */
+import { existsSync, readFileSync } from "fs";
+import { mkdir, readFile, writeFile } from "fs/promises";
+import { join } from "path";
+import { AGENT_DEFINITIONS } from "./definitions.js";
+import { readCatalogManifest } from "../catalog/reader.js";
+import { getInstallableNativeAgentNames } from "./policy.js";
+import { getCodexConfigRootModelProvider, getEnvConfiguredStandardDefaultModel, getAgentReasoningOverride, getMainDefaultModel, getSparkDefaultModel, getStandardDefaultModel, } from "../config/models.js";
+import { getRootModelName } from "../config/generator.js";
+import { codexAgentsDir } from "../utils/paths.js";
+export const EXACT_GPT_5_4_MINI_MODEL = "gpt-5.4-mini";
+export const EXACT_RESEARCHER_MODEL = EXACT_GPT_5_4_MINI_MODEL;
+const POSTURE_OVERLAYS = {
+    "frontier-orchestrator": [
+        "<posture_overlay>",
+        "",
+        "You are operating in the frontier-orchestrator posture.",
+        "- Prioritize intent classification before implementation.",
+        "- Default to delegation and orchestration when specialists exist.",
+        "- Treat the first decision as a routing problem: research vs planning vs implementation vs verification.",
+        "- Challenge flawed user assumptions concisely before execution when the design is likely to cause avoidable problems.",
+        "- Preserve explicit executor handoff boundaries: do not absorb deep implementation work when a specialized executor is more appropriate.",
+        "",
+        "</posture_overlay>",
+    ].join("\n"),
+    "deep-worker": [
+        "<posture_overlay>",
+        "",
+        "You are operating in the deep-worker posture.",
+        "- Once the task is clearly implementation-oriented, bias toward direct execution and end-to-end completion.",
+        "- Explore first, then implement minimal changes that match existing patterns.",
+        "- Keep verification strict: diagnostics, tests, and build evidence are mandatory before claiming completion.",
+        "- Escalate only after materially different approaches fail or when architecture tradeoffs exceed local implementation scope.",
+        "",
+        "</posture_overlay>",
+    ].join("\n"),
+    "fast-lane": [
+        "<posture_overlay>",
+        "",
+        "You are operating in the fast-lane posture.",
+        "- Optimize for fast triage, search, lightweight synthesis, and narrow routing decisions.",
+        "- Do not start deep implementation unless the task is tightly bounded and obvious.",
+        "- If the task expands beyond quick classification or lightweight execution, escalate to a frontier-orchestrator or deep-worker role.",
+        "- Keep responses quality-first, scope-aware, and conservative under ambiguity; avoid empty verbosity and reflexive tool escalation.",
+        "",
+        "</posture_overlay>",
+    ].join("\n"),
+};
+const MODEL_CLASS_OVERLAYS = {
+    frontier: [
+        "<model_class_guidance>",
+        "",
+        "This role is tuned for frontier-class models.",
+        "- Use the model's steerability for coordination, tradeoff reasoning, and precise delegation.",
+        "- Favor clean routing decisions over impulsive implementation.",
+        "",
+        "</model_class_guidance>",
+    ].join("\n"),
+    standard: [
+        "<model_class_guidance>",
+        "",
+        "This role is tuned for standard-capability models.",
+        "- Balance autonomy with clear boundaries.",
+        "- Prefer explicit verification and narrow scope control over speculative reasoning.",
+        "",
+        "</model_class_guidance>",
+    ].join("\n"),
+    fast: [
+        "<model_class_guidance>",
+        "",
+        "This role is tuned for fast/low-latency models.",
+        "- Prefer quick search, synthesis, and routing over prolonged reasoning.",
+        "- Escalate rather than bluff when deeper work is required.",
+        "",
+        "</model_class_guidance>",
+    ].join("\n"),
+};
+const EXACT_MINI_MODEL_OVERLAY = [
+    "<exact_model_guidance>",
+    "",
+    `This role is executing under the exact ${EXACT_GPT_5_4_MINI_MODEL} model.`,
+    "- Use a strict execution order: inspect -> plan -> act -> verify.",
+    "- Treat completion criteria as explicit: only report done after the requested work is implemented and fresh verification passes.",
+    "- If requirements are ambiguous or a blocker appears, state the blocker plainly and stop guessing until the missing decision is resolved.",
+    "- Do not bluff, pad, or invent results; report missing evidence and incomplete work honestly.",
+    "",
+    "</exact_model_guidance>",
+].join("\n");
+const NATIVE_SUBAGENT_LEAF_GUARD = [
+    "<native_subagent_leaf_guard>",
+    "",
+    "Leaf native subagent: do not call Task, spawn_agent, or native child agents.",
+    "Use local tools; report missing specialist coverage to the leader.",
+    "",
+    "</native_subagent_leaf_guard>",
+].join("\n");
+function readConfigTomlContent(codexHomeOverride, provided) {
+    if (typeof provided === "string")
+        return provided;
+    const configPath = join(codexHomeOverride ?? process.env.CODEX_HOME ?? "", "config.toml");
+    if (codexHomeOverride && existsSync(configPath)) {
+        return readFileSync(configPath, "utf-8");
+    }
+    return "";
+}
+function resolveFrontierModel(options) {
+    const configTomlContent = readConfigTomlContent(options.codexHomeOverride, options.configTomlContent);
+    return getRootModelName(configTomlContent)
+        ?? getMainDefaultModel(options.codexHomeOverride);
+}
+function resolveStandardModel(options) {
+    const explicitStandardModel = getEnvConfiguredStandardDefaultModel(options.env ?? process.env, options.codexHomeOverride);
+    if (explicitStandardModel)
+        return explicitStandardModel;
+    return getStandardDefaultModel(options.codexHomeOverride);
+}
+function resolveAgentModel(agent, options = {}) {
+    if (agent.exactModel) {
+        return agent.exactModel;
+    }
+    if (agent.name === "executor") {
+        return resolveFrontierModel(options);
+    }
+    switch (agent.modelClass) {
+        case "frontier":
+            return resolveFrontierModel(options);
+        case "fast":
+            return getSparkDefaultModel(options.codexHomeOverride);
+        case "standard":
+        default:
+            return resolveStandardModel(options);
+    }
+}
+function isExactMiniModel(resolvedModel) {
+    return resolvedModel?.trim() === EXACT_GPT_5_4_MINI_MODEL;
+}
+export function composeRoleInstructions(promptContent, metadata, resolvedModel, options = {}) {
+    const instructions = stripFrontmatter(promptContent);
+    const parts = [instructions];
+    if (metadata) {
+        parts.push("", POSTURE_OVERLAYS[metadata.posture], "", MODEL_CLASS_OVERLAYS[metadata.modelClass]);
+    }
+    if (isExactMiniModel(resolvedModel)) {
+        parts.push("", EXACT_MINI_MODEL_OVERLAY);
+    }
+    if (options.nativeAgent === true && metadata?.nativeSubagentDelegation !== "allowed") {
+        parts.push("", NATIVE_SUBAGENT_LEAF_GUARD);
+    }
+    const metadataLines = [];
+    if (metadata) {
+        metadataLines.push("## OMX Agent Metadata", `- role: ${metadata.name}`, `- posture: ${metadata.posture}`, `- model_class: ${metadata.modelClass}`, `- routing_role: ${metadata.routingRole}`);
+        if (options.nativeAgent === true && metadata.nativeSubagentDelegation) {
+            metadataLines.push(`- native_subagent_delegation: ${metadata.nativeSubagentDelegation}`);
+        }
+    }
+    if (resolvedModel) {
+        if (metadataLines.length === 0) {
+            metadataLines.push("## OMX Agent Metadata");
+        }
+        metadataLines.push(`- resolved_model: ${resolvedModel}`);
+    }
+    if (metadataLines.length > 0) {
+        parts.push("", ...metadataLines);
+    }
+    return parts.join("\n");
+}
+export function composeRoleInstructionsForRole(roleName, promptContent, resolvedModel) {
+    const agent = AGENT_DEFINITIONS[roleName];
+    return composeRoleInstructions(promptContent, agent
+        ? {
+            name: agent.name,
+            posture: agent.posture,
+            modelClass: agent.modelClass,
+            routingRole: agent.routingRole,
+            nativeSubagentDelegation: agent.nativeSubagentDelegation,
+        }
+        : null, resolvedModel);
+}
+/**
+ * Strip YAML frontmatter (between --- markers) from markdown content.
+ */
+export function stripFrontmatter(content) {
+    const match = content.match(/^---\r?\n[\s\S]*?\r?\n---\r?\n?/);
+    if (match) {
+        return content.slice(match[0].length).trim();
+    }
+    return content.trim();
+}
+/**
+ * Escape content for TOML triple-quoted strings.
+ * TOML """ strings only need to escape sequences of 3+ consecutive quotes.
+ */
+function escapeTomlMultiline(s) {
+    return s.replace(/"{3,}/g, (match) => match.split("").join("\\"));
+}
+function escapeTomlBasicString(s) {
+    return s.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+}
+export function generateStandaloneAgentToml(config) {
+    const lines = [
+        `# oh-my-codex agent: ${config.name}`,
+        `name = "${escapeTomlBasicString(config.name)}"`,
+        `description = "${escapeTomlBasicString(config.description)}"`,
+    ];
+    if (config.model) {
+        lines.push(`model = "${escapeTomlBasicString(config.model)}"`);
+    }
+    if (config.modelProvider) {
+        lines.push(`model_provider = "${escapeTomlBasicString(config.modelProvider)}"`);
+    }
+    if (config.reasoningEffort) {
+        lines.push(`model_reasoning_effort = "${config.reasoningEffort}"`);
+    }
+    if (typeof config.developerInstructions === "string" &&
+        config.developerInstructions.trim().length > 0) {
+        const escapedInstructions = escapeTomlMultiline(config.developerInstructions);
+        lines.push('developer_instructions = """', escapedInstructions, '"""');
+    }
+    lines.push("");
+    return lines.join("\n");
+}
+/**
+ * Generate TOML content for a prompt-backed OMX role agent.
+ */
+export function generateAgentToml(agent, promptContent, options = {}) {
+    const resolvedModel = resolveAgentModel(agent, options);
+    const resolvedModelProvider = getCodexConfigRootModelProvider(options.codexHomeOverride);
+    return generateStandaloneAgentToml({
+        name: agent.name,
+        description: agent.description,
+        developerInstructions: composeRoleInstructions(promptContent, agent, resolvedModel, { nativeAgent: true }),
+        model: resolvedModel,
+        modelProvider: resolvedModelProvider,
+        reasoningEffort: getAgentReasoningOverride(agent.name, options.codexHomeOverride)
+            ?? agent.reasoningEffort,
+    });
+}
+/**
+ * Install prompt-backed native agent config .toml files to ~/.codex/agents/
+ * Returns the number of agent files written.
+ */
+export async function installNativeAgentConfigs(pkgRoot, options = {}) {
+    const { force = false, dryRun = false, verbose = false, agentsDir = codexAgentsDir(), catalogManifest, allowUncatalogedDefinitions = false, } = options;
+    const codexHomeOverride = join(agentsDir, "..");
+    if (!dryRun) {
+        await mkdir(agentsDir, { recursive: true });
+    }
+    let count = 0;
+    const installableAgentNames = allowUncatalogedDefinitions
+        ? new Set(Object.keys(AGENT_DEFINITIONS))
+        : getInstallableNativeAgentNames(catalogManifest ?? readCatalogManifest(pkgRoot));
+    for (const name of [...installableAgentNames].sort()) {
+        const agent = AGENT_DEFINITIONS[name];
+        if (!agent) {
+            if (verbose)
+                console.log(`  skip ${name} (no agent definition)`);
+            continue;
+        }
+        const promptPath = join(pkgRoot, "prompts", `${name}.md`);
+        if (!existsSync(promptPath)) {
+            if (verbose)
+                console.log(`  skip ${name} (no prompt file)`);
+            continue;
+        }
+        const dst = join(agentsDir, `${name}.toml`);
+        if (!force && existsSync(dst)) {
+            if (verbose)
+                console.log(`  skip ${name} (already exists)`);
+            continue;
+        }
+        const promptContent = await readFile(promptPath, "utf-8");
+        const toml = generateAgentToml(agent, promptContent, { codexHomeOverride });
+        if (!dryRun) {
+            await writeFile(dst, toml);
+        }
+        if (verbose)
+            console.log(`  ${name}.toml`);
+        count += 1;
+    }
+    return count;
+}
+//# sourceMappingURL=native-config.js.map

package/dist/agents/native-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-config.js","sourceRoot":"","sources":["../../src/agents/native-config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAmB,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,EAAE,8BAA8B,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EACL,+BAA+B,EAC/B,oCAAoC,EACpC,yBAAyB,EACzB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,MAAM,CAAC,MAAM,wBAAwB,GAAG,cAAc,CAAC;AACvD,MAAM,CAAC,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AAE/D,MAAM,gBAAgB,GAA+C;IACnE,uBAAuB,EAAE;QACvB,mBAAmB;QACnB,EAAE;QACF,yDAAyD;QACzD,2DAA2D;QAC3D,mEAAmE;QACnE,0GAA0G;QAC1G,uHAAuH;QACvH,0IAA0I;QAC1I,EAAE;QACF,oBAAoB;KACrB,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ,aAAa,EAAE;QACb,mBAAmB;QACnB,EAAE;QACF,+CAA+C;QAC/C,6GAA6G;QAC7G,+EAA+E;QAC/E,8GAA8G;QAC9G,8HAA8H;QAC9H,EAAE;QACF,oBAAoB;KACrB,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ,WAAW,EAAE;QACX,mBAAmB;QACnB,EAAE;QACF,6CAA6C;QAC7C,0FAA0F;QAC1F,oFAAoF;QACpF,sIAAsI;QACtI,qIAAqI;QACrI,EAAE;QACF,oBAAoB;KACrB,CAAC,IAAI,CAAC,IAAI,CAAC;CACb,CAAC;AAEF,MAAM,oBAAoB,GAAkD;IAC1E,QAAQ,EAAE;QACR,wBAAwB;QACxB,EAAE;QACF,+CAA+C;QAC/C,8FAA8F;QAC9F,gEAAgE;QAChE,EAAE;QACF,yBAAyB;KAC1B,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ,QAAQ,EAAE;QACR,wBAAwB;QACxB,EAAE;QACF,oDAAoD;QACpD,2CAA2C;QAC3C,qFAAqF;QACrF,EAAE;QACF,yBAAyB;KAC1B,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ,IAAI,EAAE;QACJ,wBAAwB;QACxB,EAAE;QACF,iDAAiD;QACjD,yEAAyE;QACzE,4DAA4D;QAC5D,EAAE;QACF,yBAAyB;KAC1B,CAAC,IAAI,CAAC,IAAI,CAAC;CACb,CAAC;AAEF,MAAM,wBAAwB,GAAG;IAC/B,wBAAwB;IACxB,EAAE;IACF,0CAA0C,wBAAwB,SAAS;IAC3E,mEAAmE;IACnE,kIAAkI;IAClI,2IAA2I;IAC3I,+FAA+F;IAC/F,EAAE;IACF,yBAAyB;CAC1B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,0BAA0B,GAAG;IACjC,8BAA8B;IAC9B,EAAE;IACF,8EAA8E;IAC9E,oEAAoE;IACpE,EAAE;IACF,+BAA+B;CAChC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AA6Bb,SAAS,qBAAqB,CAC5B,iBAA0B,EAC1B,QAAiB;IAEjB,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAClD,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,aAAa,CAAC,CAAC;IAC1F,IAAI,iBAAiB,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAChD,OAAO,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAoC;IAChE,MAAM,iBAAiB,GAAG,qBAAqB,CAC7C,OAAO,CAAC,iBAAiB,EACzB,OAAO,CAAC,iBAAiB,CAC1B,CAAC;IACF,OAAO,gBAAgB,CAAC,iBAAiB,CAAC;WACrC,mBAAmB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAoC;IAChE,MAAM,qBAAqB,GAAG,oCAAoC,CAChE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAC1B,OAAO,CAAC,iBAAiB,CAC1B,CAAC;IAEF,IAAI,qBAAqB;QAAE,OAAO,qBAAqB,CAAC;IACxD,OAAO,uBAAuB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAsB,EACtB,UAAuC,EAAE;IAEzC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC,UAAU,CAAC;IAC1B,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,QAAQ,KAAK,CAAC,UAAU,EAAE,CAAC;QACzB,KAAK,UAAU;YACb,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACvC,KAAK,MAAM;YACT,OAAO,oBAAoB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACzD,KAAK,UAAU,CAAC;QAChB;YACE,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,aAA6B;IACrD,OAAO,aAAa,EAAE,IAAI,EAAE,KAAK,wBAAwB,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,aAAqB,EACrB,QAAwC,EACxC,aAAsB,EACtB,UAA0C,EAAE;IAE5C,MAAM,YAAY,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,CAAC,YAAY,CAAC,CAAC;IAE7B,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,CAAC,IAAI,CACR,EAAE,EACF,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAClC,EAAE,EACF,oBAAoB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAC1C,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,wBAAwB,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,IAAI,QAAQ,EAAE,wBAAwB,KAAK,SAAS,EAAE,CAAC;QACrF,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,0BAA0B,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,aAAa,GAAG,EAAE,CAAC;IACzB,IAAI,QAAQ,EAAE,CAAC;QACb,aAAa,CAAC,IAAI,CAChB,uBAAuB,EACvB,WAAW,QAAQ,CAAC,IAAI,EAAE,EAC1B,cAAc,QAAQ,CAAC,OAAO,EAAE,EAChC,kBAAkB,QAAQ,CAAC,UAAU,EAAE,EACvC,mBAAmB,QAAQ,CAAC,WAAW,EAAE,CAC1C,CAAC;QACF,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,IAAI,QAAQ,CAAC,wBAAwB,EAAE,CAAC;YACtE,aAAa,CAAC,IAAI,CAAC,iCAAiC,QAAQ,CAAC,wBAAwB,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IACD,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,aAAa,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAC9C,CAAC;QACD,aAAa,CAAC,IAAI,CAAC,qBAAqB,aAAa,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,aAAa,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,QAAgB,EAChB,aAAqB,EACrB,aAAsB;IAEtB,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC1C,OAAO,uBAAuB,CAC5B,aAAa,EACb,KAAK;QACH,CAAC,CAAC;YACE,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;SACzD;QACH,CAAC,CAAC,IAAI,EACR,aAAa,CACd,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC/D,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,CAAS;IACpC,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,qBAAqB,CAAC,CAAS;IACtC,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,MAAkC;IAElC,MAAM,KAAK,GAAG;QACZ,wBAAwB,MAAM,CAAC,IAAI,EAAE;QACrC,WAAW,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG;QAChD,kBAAkB,qBAAqB,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG;KAC/D,CAAC;IAEF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,YAAY,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,qBAAqB,qBAAqB,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,6BAA6B,MAAM,CAAC,eAAe,GAAG,CAAC,CAAC;IACrE,CAAC;IACD,IACE,OAAO,MAAM,CAAC,qBAAqB,KAAK,QAAQ;QAChD,MAAM,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAC9C,CAAC;QACD,MAAM,mBAAmB,GAAG,mBAAmB,CAC7C,MAAM,CAAC,qBAAqB,CAC7B,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,8BAA8B,EAAE,mBAAmB,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAsB,EACtB,aAAqB,EACrB,UAAuC,EAAE;IAEzC,MAAM,aAAa,GAAG,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACxD,MAAM,qBAAqB,GAAG,+BAA+B,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACzF,OAAO,2BAA2B,CAAC;QACjC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,qBAAqB,EAAE,uBAAuB,CAC5C,aAAa,EACb,KAAK,EACL,aAAa,EACb,EAAE,WAAW,EAAE,IAAI,EAAE,CACtB;QACD,KAAK,EAAE,aAAa;QACpB,aAAa,EAAE,qBAAqB;QACpC,eAAe,EAAE,yBAAyB,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,iBAAiB,CAAC;eAC5E,KAAK,CAAC,eAAe;KAC3B,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAe,EACf,UAOI,EAAE;IAEN,MAAM,EACJ,KAAK,GAAG,KAAK,EACb,MAAM,GAAG,KAAK,EACd,OAAO,GAAG,KAAK,EACf,SAAS,GAAG,cAAc,EAAE,EAC5B,eAAe,EACf,2BAA2B,GAAG,KAAK,GACpC,GAAG,OAAO,CAAC;IACZ,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAEhD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,MAAM,qBAAqB,GAAG,2BAA2B;QACvD,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACzC,CAAC,CAAC,8BAA8B,CAAC,eAAe,IAAI,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IAEpF,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,qBAAqB,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,OAAO;gBAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,wBAAwB,CAAC,CAAC;YACjE,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,KAAK,CAAC,CAAC;QAC1D,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,IAAI,OAAO;gBAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,mBAAmB,CAAC,CAAC;YAC5D,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,IAAI,OAAO;gBAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,mBAAmB,CAAC,CAAC;YAC5D,SAAS;QACX,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAE5E,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC;QAC3C,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/agents/policy.d.ts

@@ -0,0 +1,10 @@
+import type { CatalogAgentEntry, CatalogEntryStatus, CatalogManifest } from "../catalog/schema.js";
+export declare const NON_NATIVE_AGENT_PROMPT_ASSETS: Set<string>;
+export declare function isNativeAgentInstallableStatus(status: CatalogEntryStatus | string | undefined): boolean;
+export declare function getCatalogAgentStatusByName(manifest: Pick<CatalogManifest, "agents">): Map<string, CatalogEntryStatus>;
+export declare function getCatalogAgentByName(manifest: Pick<CatalogManifest, "agents">): Map<string, CatalogAgentEntry>;
+export declare function getInstallableNativeAgentNames(manifest: Pick<CatalogManifest, "agents">): Set<string>;
+export declare function getNonInstallableNativeAgentNames(manifest: Pick<CatalogManifest, "agents">): Set<string>;
+export declare function isSetupPromptAssetName(promptName: string, manifest: Pick<CatalogManifest, "agents">): boolean;
+export declare function assertNativeAgentCanonicalTargets(manifest: Pick<CatalogManifest, "agents">): void;
+//# sourceMappingURL=policy.d.ts.map

package/dist/agents/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/agents/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EAChB,MAAM,sBAAsB,CAAC;AAE9B,eAAO,MAAM,8BAA8B,aAIzC,CAAC;AAEH,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,kBAAkB,GAAG,MAAM,GAAG,SAAS,GAC9C,OAAO,CAET;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,GACxC,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAEjC;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,GACxC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAEhC;AAED,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,GACxC,GAAG,CAAC,MAAM,CAAC,CAMb;AAED,wBAAgB,iCAAiC,CAC/C,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,GACxC,GAAG,CAAC,MAAM,CAAC,CAMb;AAED,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,GACxC,OAAO,CAKT;AAED,wBAAgB,iCAAiC,CAC/C,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,GACxC,IAAI,CAwCN"}

package/dist/agents/policy.js

@@ -0,0 +1,61 @@
+export const NON_NATIVE_AGENT_PROMPT_ASSETS = new Set([
+    "explore-harness",
+    "sisyphus-lite",
+    "team-orchestrator",
+]);
+export function isNativeAgentInstallableStatus(status) {
+    return status === "active" || status === "internal";
+}
+export function getCatalogAgentStatusByName(manifest) {
+    return new Map(manifest.agents.map((agent) => [agent.name, agent.status]));
+}
+export function getCatalogAgentByName(manifest) {
+    return new Map(manifest.agents.map((agent) => [agent.name, agent]));
+}
+export function getInstallableNativeAgentNames(manifest) {
+    return new Set(manifest.agents
+        .filter((agent) => isNativeAgentInstallableStatus(agent.status))
+        .map((agent) => agent.name));
+}
+export function getNonInstallableNativeAgentNames(manifest) {
+    return new Set(manifest.agents
+        .filter((agent) => !isNativeAgentInstallableStatus(agent.status))
+        .map((agent) => agent.name));
+}
+export function isSetupPromptAssetName(promptName, manifest) {
+    return (manifest.agents.some((agent) => agent.name === promptName) ||
+        NON_NATIVE_AGENT_PROMPT_ASSETS.has(promptName));
+}
+export function assertNativeAgentCanonicalTargets(manifest) {
+    const byName = getCatalogAgentByName(manifest);
+    for (const agent of manifest.agents) {
+        if (agent.status !== "alias" && agent.status !== "merged")
+            continue;
+        if (!agent.canonical) {
+            throw new Error([
+                "native_agent_canonical_invalid",
+                `agent=${agent.name}`,
+                "message=alias/merged native agents must declare a canonical target",
+            ].join("\n"));
+        }
+        const canonical = byName.get(agent.canonical);
+        if (!canonical) {
+            throw new Error([
+                "native_agent_canonical_invalid",
+                `agent=${agent.name}`,
+                `canonical=${agent.canonical}`,
+                "message=canonical native agent target is not listed in the catalog",
+            ].join("\n"));
+        }
+        if (!isNativeAgentInstallableStatus(canonical.status)) {
+            throw new Error([
+                "native_agent_canonical_invalid",
+                `agent=${agent.name}`,
+                `canonical=${agent.canonical}`,
+                `canonical_status=${canonical.status}`,
+                "message=canonical native agent target must be directly installable",
+            ].join("\n"));
+        }
+    }
+}
+//# sourceMappingURL=policy.js.map

package/dist/agents/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/agents/policy.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,GAAG,CAAC;IACpD,iBAAiB;IACjB,eAAe;IACf,mBAAmB;CACpB,CAAC,CAAC;AAEH,MAAM,UAAU,8BAA8B,CAC5C,MAA+C;IAE/C,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,UAAU,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,QAAyC;IAEzC,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAAyC;IAEzC,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,QAAyC;IAEzC,OAAO,IAAI,GAAG,CACZ,QAAQ,CAAC,MAAM;SACZ,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,8BAA8B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;SAC/D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAC9B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,QAAyC;IAEzC,OAAO,IAAI,GAAG,CACZ,QAAQ,CAAC,MAAM;SACZ,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,8BAA8B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;SAChE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAC9B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,UAAkB,EAClB,QAAyC;IAEzC,OAAO,CACL,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC;QAC1D,8BAA8B,CAAC,GAAG,CAAC,UAAU,CAAC,CAC/C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,QAAyC;IAEzC,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAE/C,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ;YAAE,SAAS;QAEpE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb;gBACE,gCAAgC;gBAChC,SAAS,KAAK,CAAC,IAAI,EAAE;gBACrB,oEAAoE;aACrE,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb;gBACE,gCAAgC;gBAChC,SAAS,KAAK,CAAC,IAAI,EAAE;gBACrB,aAAa,KAAK,CAAC,SAAS,EAAE;gBAC9B,oEAAoE;aACrE,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,8BAA8B,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CACb;gBACE,gCAAgC;gBAChC,SAAS,KAAK,CAAC,IAAI,EAAE;gBACrB,aAAa,KAAK,CAAC,SAAS,EAAE;gBAC9B,oBAAoB,SAAS,CAAC,MAAM,EAAE;gBACtC,oEAAoE;aACrE,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/auth/__tests__/config-sessions.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=config-sessions.test.d.ts.map

package/dist/auth/__tests__/config-sessions.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-sessions.test.d.ts","sourceRoot":"","sources":["../../../src/auth/__tests__/config-sessions.test.ts"],"names":[],"mappings":""}

package/dist/auth/__tests__/config-sessions.test.js

@@ -0,0 +1,48 @@
+import { describe, it } from "node:test";
+import assert from "node:assert/strict";
+import { mkdir, mkdtemp, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { readAuthConfig } from "../config.js";
+import { findLatestRolloutSession } from "../sessions.js";
+describe("auth config", () => {
+    it("merges project keys over user keys per absent key fallback", async () => {
+        const home = await mkdtemp(join(tmpdir(), "omx-auth-config-home-"));
+        const wd = await mkdtemp(join(tmpdir(), "omx-auth-config-wd-"));
+        try {
+            await mkdir(join(home, ".omx"), { recursive: true });
+            await writeFile(join(home, ".omx", "config.toml"), '[omx.auth]\nrotation = "priority"\npriority = ["user"]\nquota_patterns = ["custom-quota"]\n');
+            await mkdir(join(wd, ".omx"), { recursive: true });
+            await writeFile(join(wd, ".omx", "config.toml"), '[omx.auth]\npriority = ["project"]\n');
+            const config = await readAuthConfig(wd, home);
+            assert.equal(config.rotation, "priority");
+            assert.deepEqual(config.priority, ["project"]);
+            assert.deepEqual(config.quotaPatterns, ["custom-quota"]);
+        }
+        finally {
+            await rm(home, { recursive: true, force: true });
+            await rm(wd, { recursive: true, force: true });
+        }
+    });
+});
+describe("Codex rollout session heuristic", () => {
+    it("returns newest rollout id by mtime", async () => {
+        const home = await mkdtemp(join(tmpdir(), "omx-auth-sessions-"));
+        try {
+            const dir = join(home, "sessions", "2026", "05", "24");
+            await mkdir(dir, { recursive: true });
+            const oldPath = join(dir, "rollout-old.jsonl");
+            const newPath = join(dir, "rollout-new.jsonl");
+            await writeFile(oldPath, "{}\n");
+            await new Promise((resolve) => setTimeout(resolve, 10));
+            await writeFile(newPath, "{}\n");
+            const latest = await findLatestRolloutSession(home);
+            assert.equal(latest?.id, "new");
+            assert.equal(latest?.path, newPath);
+        }
+        finally {
+            await rm(home, { recursive: true, force: true });
+        }
+    });
+});
+//# sourceMappingURL=config-sessions.test.js.map

package/dist/auth/__tests__/config-sessions.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-sessions.test.js","sourceRoot":"","sources":["../../../src/auth/__tests__/config-sessions.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;QACpE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACrD,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,6FAA6F,CAAC,CAAC;YAClJ,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,MAAM,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,sCAAsC,CAAC,CAAC;YACzF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC9C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC1C,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;YAC/C,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;QAC3D,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACjD,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACvD,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;YAC/C,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACjC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;YACxD,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACjC,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,IAAI,CAAC,CAAC;YACpD,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;YAChC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACtC,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/auth/__tests__/quota-rotation.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=quota-rotation.test.d.ts.map

package/dist/auth/__tests__/quota-rotation.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quota-rotation.test.d.ts","sourceRoot":"","sources":["../../../src/auth/__tests__/quota-rotation.test.ts"],"names":[],"mappings":""}

package/dist/auth/__tests__/quota-rotation.test.js

@@ -0,0 +1,33 @@
+import { describe, it } from "node:test";
+import assert from "node:assert/strict";
+import { isQuotaError } from "../quota-detector.js";
+import { buildRotationPlan, nextSlotAfter } from "../rotation.js";
+import { redactAuthSecrets } from "../redact.js";
+describe("quota detector", () => {
+    it("matches structured and stderr quota signals", () => {
+        assert.equal(isQuotaError({ structuredError: { status: 429, message: "too many requests" } }), true);
+        assert.equal(isQuotaError({ stderr: "Error: quota exceeded for this account" }), true);
+        assert.equal(isQuotaError({ stderr: "HTTP 429 rate limit" }), true);
+        assert.equal(isQuotaError({ stderr: "syntax error" }), false);
+    });
+});
+describe("auth rotation", () => {
+    const slots = ["a", "b", "c"].map((slot) => ({ slot, createdAt: "now", updatedAt: "now" }));
+    it("defaults to round-robin from the current slot", () => {
+        assert.deepEqual(buildRotationPlan(slots, { rotation: "round-robin", priority: [] }, "b").order, ["b", "c", "a"]);
+    });
+    it("supports priority order and exhausted skipping", () => {
+        const order = buildRotationPlan(slots, { rotation: "priority", priority: ["c", "a"] }, "b").order;
+        assert.deepEqual(order, ["c", "a", "b"]);
+        assert.equal(nextSlotAfter(order, "c", new Set(["c"])), "a");
+        assert.equal(nextSlotAfter(order, "a", new Set(["a", "b", "c"])), undefined);
+    });
+    it("manual mode does not plan automatic rotation", () => {
+        assert.deepEqual(buildRotationPlan(slots, { rotation: "manual", priority: [] }, "b").order, ["b"]);
+    });
+    it("redacts token-shaped values", () => {
+        const redacted = redactAuthSecrets('access_token:"secret-value" Bearer abc.def sk-test-secret123');
+        assert.doesNotMatch(redacted, /secret-value|abc\.def|sk-test-secret123/);
+    });
+});
+//# sourceMappingURL=quota-rotation.test.js.map

package/dist/auth/__tests__/quota-rotation.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quota-rotation.test.js","sourceRoot":"","sources":["../../../src/auth/__tests__/quota-rotation.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,mBAAmB,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QACrG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QACvF,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QACpE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAE5F,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACpH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC;QAClG,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,8DAA8D,CAAC,CAAC;QACnG,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,yCAAyC,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/auth/__tests__/redact.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=redact.test.d.ts.map

package/dist/auth/__tests__/redact.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.test.d.ts","sourceRoot":"","sources":["../../../src/auth/__tests__/redact.test.ts"],"names":[],"mappings":""}

package/dist/auth/__tests__/redact.test.js

@@ -0,0 +1,20 @@
+import { describe, it } from "node:test";
+import assert from "node:assert/strict";
+import { redactAuthSecrets } from "../redact.js";
+describe("auth secret redaction", () => {
+    it("redacts JSON quoted OAuth token fields while preserving key names", () => {
+        const redacted = redactAuthSecrets('{"access_token":"sentinel-secret","refresh_token":"refresh-secret","id_token":"id-secret","safe":"visible"}');
+        assert.doesNotMatch(redacted, /sentinel-secret|refresh-secret|id-secret/);
+        assert.match(redacted, /"access_token"\s*:\s*"\[REDACTED\]"/);
+        assert.match(redacted, /"refresh_token"\s*:\s*"\[REDACTED\]"/);
+        assert.match(redacted, /"id_token"\s*:\s*"\[REDACTED\]"/);
+        assert.match(redacted, /"safe":"visible"/);
+    });
+    it("redacts JSON OAuth token fields with whitespace and escaped content", () => {
+        const redacted = redactAuthSecrets('{ "access_token" : "sentinel-\\"secret", "refresh_token" : "refresh-secret" }');
+        assert.doesNotMatch(redacted, /sentinel|refresh-secret/);
+        assert.match(redacted, /"access_token"\s*:\s*"\[REDACTED\]"/);
+        assert.match(redacted, /"refresh_token"\s*:\s*"\[REDACTED\]"/);
+    });
+});
+//# sourceMappingURL=redact.test.js.map

package/dist/auth/__tests__/redact.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.test.js","sourceRoot":"","sources":["../../../src/auth/__tests__/redact.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,QAAQ,GAAG,iBAAiB,CAChC,6GAA6G,CAC9G,CAAC;QAEF,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,0CAA0C,CAAC,CAAC;QAC1E,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,qCAAqC,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,sCAAsC,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,iCAAiC,CAAC,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,QAAQ,GAAG,iBAAiB,CAChC,+EAA+E,CAChF,CAAC;QAEF,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,qCAAqC,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,sCAAsC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/auth/__tests__/storage.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=storage.test.d.ts.map

package/dist/auth/__tests__/storage.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.test.d.ts","sourceRoot":"","sources":["../../../src/auth/__tests__/storage.test.ts"],"names":[],"mappings":""}