sidekick-shared 0.21.3 → 0.21.5

package/README.md

@@ -47,7 +47,7 @@ npm install sidekick-shared
 | **Model Info & Pricing**        | Model family parsing (Anthropic / OpenAI / Google, including legacy `claude-3-opus-…` and `claude-3-5-sonnet-…` IDs), context-window lookup (including Fable 5 / Opus 4.8 / Opus 4.7 / Sonnet 4.7 1M and GPT-5.x variants), pricing tables with optional LiteLLM hydration, null-aware cost (`calculateCost()`), provenance-preserving cost (`calculateCostWithProvenance()`, `mergeCostSources()`), and display helpers (`shortModelName()`, `getModelDisplayInfo()`, `compareModelIds()`, `sortModelIds()`, `formatCost()`) |
 | **Quota Polling**               | `QuotaPoller` class with exponential backoff, active/idle intervals, and cached fallback                                                                                                                                                                                                                                                                                                                                                                                                                                      |
 | **Multi-Provider Quota**        | `MultiProviderQuotaService` orchestrates Claude polling + peak-hours + account labels + Codex/z.ai quota updates behind one typed event stream. `CodexQuotaWatcher` watches the active Codex rollout for live rate limits with snapshot fallback; z.ai quota uses the API resolver with snapshot fallback                                                                                                                                                                                                                     |
-| **Accounts**                    | Multi-provider account registry (v2) with per-provider active account, save/switch/remove, v1 migration, `ensureDefaultAccounts()` for first-run bootstrap of the active system Claude/Codex credentials as a "Default" saved account, and `getActiveAccountStatus()` for a single-pass active-account read across providers                                                                                                                                                                                                  |
+| **Accounts**                    | Multi-provider account registry (v2) with per-provider active account, save/switch/remove, v1 migration, `ensureDefaultAccounts()` for first-run bootstrap of the active system Claude/Codex credentials as a "Default" saved account, `getActiveAccountStatus()` for a single-pass active-account read across providers, and live-first `resolveActiveClaudeAccount()` / `resolveActiveCodexAccount()` that report the currently logged-in account (self-healing the saved pointer) for display                              |
 | **Account Management 2.0**      | Provider-neutral acquisition + switching: `beginAccountLogin()` / `getAccountLoginStatus()` / `finalizeAccountLogin()` / `spawnAccountLogin()` drive a TTY-less, profile-isolated login that doesn't disturb the active account until finalization; `listAllAccounts()` and `switchAccount()` expose a shared switcher across Claude and Codex. Claude accounts get canonical profile homes with account-scoped macOS keychain suffixes and startup migration from legacy flat backups                                        |
 | **Terminal sync & auto-switch** | Opt-in terminal profile pointers, shell-hook/launcher helpers, and a default-off `AutoSwitchController` (`decideAutoSwitch()`) that moves to a healthier saved account when quota crosses a configured threshold                                                                                                                                                                                                                                                                                                              |
 | **Codex Profiles**              | Codex account lifecycle — prepare, finalize, switch, remove — switching atomically swaps the profile's backed-up credentials into the system `~/.codex/auth.json`, with rotated-token staleness protection, one-time dual-home migration, and legacy multi-home session monitoring                                                                                                                                                                                                                                            |
@@ -359,6 +359,21 @@ console.log(status.claude.present, status.claude.email);
 console.log(status.codex.present, status.codex.label);
 ```
 
+For display surfaces that must reflect the **currently logged-in** account — even after a native `claude /login` or `codex login` outside Sidekick — use the live-first resolvers. They prefer the live provider auth (`~/.claude/.claude.json` oauthAccount; the `~/.codex/auth.json` id_token JWT) over the saved `activeByProvider` pointer, fall back to the registry, and self-heal the saved pointer on an unambiguous match (best-effort, never creating or deleting profiles):
+
+```typescript
+import { resolveActiveClaudeAccount, resolveActiveCodexAccount } from 'sidekick-shared';
+import type { ResolvedActiveAccount } from 'sidekick-shared';
+
+const claude: ResolvedActiveAccount = resolveActiveClaudeAccount();
+// source: 'live'  → identity came from the live provider auth (label filled when it matches a saved profile)
+// source: 'registry' → no usable live identity; fell back to the saved active pointer
+// source: 'none'  → neither a live identity nor a saved active account
+console.log(claude.email, claude.label, claude.source);
+
+const codex = resolveActiveCodexAccount();
+```
+
 ### Track cost provenance for honest UI rollups
 
 ```typescript

package/dist/accountRegistry.d.ts

@@ -19,6 +19,23 @@ export interface SavedAccountRegistry {
     activeByProvider: Record<AccountProviderId, string | null>;
     accounts: SavedAccountProfile[];
 }
+/**
+ * The currently active account resolved from the *live* provider auth, with the
+ * saved registry used only to enrich the display label.
+ *
+ * - `source: 'live'`   — identity came from the provider's live auth file. This
+ *   is the source of truth; `label` is filled in only when the live identity
+ *   matches a saved profile.
+ * - `source: 'registry'` — no usable live identity (logged out, api-key auth,
+ *   unparseable token); fell back to the saved active pointer.
+ * - `source: 'none'`   — neither a live identity nor a saved active account.
+ */
+export interface ResolvedActiveAccount {
+    email?: string;
+    label?: string;
+    providerAccountId?: string;
+    source: 'live' | 'registry' | 'none';
+}
 export declare function getAccountsDir(): string;
 export declare function readSavedAccountRegistry(): SavedAccountRegistry | null;
 export declare function writeSavedAccountRegistry(registry: SavedAccountRegistry): void;

package/dist/accountStatus.js

@@ -14,23 +14,20 @@ function errorMessage(error) {
  */
 function getActiveAccountStatus(error) {
     try {
-        const claudeAccount = (0, accounts_1.readActiveClaudeAccount)();
-        const codexAccount = (0, codexProfiles_1.getActiveCodexAccount)();
-        const claude = claudeAccount
+        const claudeAccount = (0, accounts_1.resolveActiveClaudeAccount)();
+        const codexAccount = (0, codexProfiles_1.resolveActiveCodexAccount)();
+        const claude = claudeAccount.source !== 'none'
             ? {
                 present: true,
                 email: claudeAccount.email,
-                label: claudeAccount.email,
+                label: claudeAccount.label ?? claudeAccount.email,
             }
             : { present: false };
-        const codex = codexAccount
+        const codex = codexAccount.source !== 'none'
             ? {
                 present: true,
-                email: codexAccount.email ?? codexAccount.metadata?.email,
-                label: codexAccount.label ??
-                    codexAccount.email ??
-                    codexAccount.metadata?.email ??
-                    codexAccount.id,
+                email: codexAccount.email,
+                label: codexAccount.label ?? codexAccount.email ?? codexAccount.providerAccountId,
             }
             : { present: false };
         return {

package/dist/accounts.d.ts

@@ -4,6 +4,7 @@
  * Handles saving, listing, switching, and removing Claude accounts.
  * Both the VS Code extension and CLI consume this module.
  */
+import { type ResolvedActiveAccount } from './accountRegistry';
 export interface AccountEntry {
     uuid: string;
     email: string;
@@ -38,4 +39,16 @@ export declare function reconcileClaudeAuthState(): void;
 export declare function removeAccount(uuid: string): AccountManagerResult;
 export declare function listAccounts(): AccountEntry[];
 export declare function getActiveAccount(): AccountEntry | null;
+/**
+ * Resolves the *currently logged-in* Claude account for display, preferring the
+ * live `~/.claude/.claude.json` identity over the saved registry pointer (which
+ * only sidekick's own switch flow updates and therefore goes stale after a native
+ * `claude /login`).
+ *
+ * Safe self-heal: when the live account matches a saved profile (by account UUID,
+ * email as fallback) that isn't the current active pointer, the pointer is
+ * re-pointed so registry-keyed data tracks reality too. Never creates or deletes
+ * profiles; an unknown live account is shown as-is with no label and no write.
+ */
+export declare function resolveActiveClaudeAccount(): ResolvedActiveAccount;
 export declare function isMultiAccountEnabled(): boolean;

package/dist/accounts.js

@@ -50,6 +50,7 @@ exports.reconcileClaudeAuthState = reconcileClaudeAuthState;
 exports.removeAccount = removeAccount;
 exports.listAccounts = listAccounts;
 exports.getActiveAccount = getActiveAccount;
+exports.resolveActiveClaudeAccount = resolveActiveClaudeAccount;
 exports.isMultiAccountEnabled = isMultiAccountEnabled;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
@@ -513,6 +514,55 @@ function getActiveAccount() {
         addedAt: active.addedAt,
     };
 }
+/**
+ * Resolves the *currently logged-in* Claude account for display, preferring the
+ * live `~/.claude/.claude.json` identity over the saved registry pointer (which
+ * only sidekick's own switch flow updates and therefore goes stale after a native
+ * `claude /login`).
+ *
+ * Safe self-heal: when the live account matches a saved profile (by account UUID,
+ * email as fallback) that isn't the current active pointer, the pointer is
+ * re-pointed so registry-keyed data tracks reality too. Never creates or deletes
+ * profiles; an unknown live account is shown as-is with no label and no write.
+ */
+function resolveActiveClaudeAccount() {
+    const live = readActiveClaudeAccount();
+    if (live) {
+        const profiles = (0, accountRegistry_1.listSavedAccountProfiles)('claude-code');
+        const match = profiles.find((p) => (p.providerAccountId ?? p.id) === live.uuid) ??
+            profiles.find((p) => (p.email ?? p.metadata?.email) === live.email);
+        if (match) {
+            const active = (0, accountRegistry_1.getActiveSavedAccount)('claude-code');
+            if (!active || active.id !== match.id) {
+                // Self-heal is best-effort: a registry write failure (read-only/full
+                // disk) must never break display or extension activation. We still
+                // return the correct live identity below.
+                try {
+                    (0, accountRegistry_1.setActiveSavedAccount)('claude-code', match.id);
+                }
+                catch {
+                    /* keep going with the live identity */
+                }
+            }
+        }
+        return {
+            email: live.email,
+            label: match?.label,
+            providerAccountId: live.uuid,
+            source: 'live',
+        };
+    }
+    const active = getActiveAccount();
+    if (active) {
+        return {
+            email: active.email,
+            label: active.label,
+            providerAccountId: active.uuid,
+            source: 'registry',
+        };
+    }
+    return { source: 'none' };
+}
 function isMultiAccountEnabled() {
     return (0, accountRegistry_1.listSavedAccountProfiles)('claude-code').length >= 1;
 }

package/dist/codexProfiles.d.ts

@@ -1,4 +1,4 @@
-import type { AccountIdentityMetadata, SavedAccountProfile } from './accountRegistry';
+import type { AccountIdentityMetadata, ResolvedActiveAccount, SavedAccountProfile } from './accountRegistry';
 import type { AccountManagerResult } from './accounts';
 export interface CodexAccountManagerResult extends AccountManagerResult {
     needsLogin?: boolean;
@@ -14,6 +14,20 @@ export declare function isCodexProfileAuthenticated(codexHome: string): boolean;
 export declare function listCodexAccounts(): SavedAccountProfile[];
 export declare function getActiveCodexAccount(): SavedAccountProfile | null;
 export declare function resolveSidekickCodexHome(): string;
+/**
+ * Resolves the *currently logged-in* Codex account for display, preferring the
+ * live `auth.json` identity over the saved registry pointer (which only sidekick's
+ * own switch flow updates and therefore goes stale after a native `codex login`).
+ *
+ * Uses the cheap JWT decode from `auth.json` directly — NOT `readCodexAccountMetadata`,
+ * whose fallback spawns `codex login status` (a multi-second subprocess) unsuitable
+ * for a render path.
+ *
+ * Safe self-heal: when the live identity unambiguously matches a saved profile that
+ * isn't the current active pointer, the pointer is re-pointed so registry-keyed data
+ * (quota history, auto-switch) tracks reality too. Never creates or deletes profiles.
+ */
+export declare function resolveActiveCodexAccount(): ResolvedActiveAccount;
 export declare function getCodexExecutionEnv(baseEnv?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
 export declare function prepareCodexAccount(label: string): CodexAccountManagerResult;
 export declare function finalizeCodexAccount(profileId: string, opts?: {

package/dist/codexProfiles.js

@@ -42,6 +42,7 @@ exports.isCodexProfileAuthenticated = isCodexProfileAuthenticated;
 exports.listCodexAccounts = listCodexAccounts;
 exports.getActiveCodexAccount = getActiveCodexAccount;
 exports.resolveSidekickCodexHome = resolveSidekickCodexHome;
+exports.resolveActiveCodexAccount = resolveActiveCodexAccount;
 exports.getCodexExecutionEnv = getCodexExecutionEnv;
 exports.prepareCodexAccount = prepareCodexAccount;
 exports.finalizeCodexAccount = finalizeCodexAccount;
@@ -346,6 +347,56 @@ function resolveSidekickCodexHome() {
     // home (or an explicit CODEX_HOME) is always the single live home.
     return getSystemCodexHome();
 }
+/**
+ * Resolves the *currently logged-in* Codex account for display, preferring the
+ * live `auth.json` identity over the saved registry pointer (which only sidekick's
+ * own switch flow updates and therefore goes stale after a native `codex login`).
+ *
+ * Uses the cheap JWT decode from `auth.json` directly — NOT `readCodexAccountMetadata`,
+ * whose fallback spawns `codex login status` (a multi-second subprocess) unsuitable
+ * for a render path.
+ *
+ * Safe self-heal: when the live identity unambiguously matches a saved profile that
+ * isn't the current active pointer, the pointer is re-pointed so registry-keyed data
+ * (quota history, auto-switch) tracks reality too. Never creates or deletes profiles.
+ */
+function resolveActiveCodexAccount() {
+    const identity = readAuthIdentityFromRaw(readFileOrNull(path.join(resolveSidekickCodexHome(), 'auth.json')));
+    if (identity && (identity.email || identity.workspaceId)) {
+        const match = findProfileForIdentity(identity);
+        if (match) {
+            const active = (0, accountRegistry_1.getActiveSavedAccount)('codex');
+            if (!active || active.id !== match.id) {
+                // Self-heal is best-effort: a registry write failure (read-only/full
+                // disk) must never break display, extension activation, or the quota
+                // watcher's hot path. We still return the correct live identity below.
+                try {
+                    (0, accountRegistry_1.setActiveSavedAccount)('codex', match.id);
+                }
+                catch {
+                    /* keep going with the live identity */
+                }
+            }
+        }
+        return {
+            email: identity.email ?? match?.email ?? match?.metadata?.email,
+            label: match?.label,
+            providerAccountId: match?.providerAccountId ?? identity.workspaceId,
+            source: 'live',
+        };
+    }
+    // api-key auth, unparseable token, or logged out → fall back to the registry.
+    const active = getActiveCodexAccount();
+    if (active) {
+        return {
+            email: active.email ?? active.metadata?.email,
+            label: active.label,
+            providerAccountId: active.providerAccountId,
+            source: 'registry',
+        };
+    }
+    return { source: 'none' };
+}
 function getCodexExecutionEnv(baseEnv = process.env) {
     return {
         ...baseEnv,

package/dist/codexQuota.js

@@ -44,6 +44,7 @@ const codexProfiles_1 = require("./codexProfiles");
 const quotaSnapshots_1 = require("./quotaSnapshots");
 const quota_1 = require("./quota");
 const codex_1 = require("./providers/codex");
+const codex_2 = require("./types/codex");
 const DEFAULT_TAIL_BYTES = 2 * 1024 * 1024;
 const DEFAULT_MAX_SESSION_FILES = 50;
 const CHATGPT_USAGE_URL = 'https://chatgpt.com/backend-api/wham/usage';
@@ -54,11 +55,19 @@ function timestampMs(value, fallbackMs = 0) {
     return Number.isFinite(ms) ? ms : fallbackMs;
 }
 // Codex can report slightly different percentages for the same reset window
-// across recent sessions. Prefer newer reset windows, then the highest observed
-// same-window utilization so local fallbacks do not under-report quota usage.
+// across recent sessions. Prefer the aggregate plan family ("codex") over
+// model/feature-specific families (which can read 0% while the plan is busy),
+// then newer reset windows, then the highest observed same-window utilization so
+// local fallbacks do not under-report quota usage.
 function isPreferredQuotaHit(candidate, current) {
     if (!current)
         return true;
+    // Family rank first: an aggregate hit always outranks a model-specific one, so a
+    // freshly-used per-model family (e.g. codex_bengalfox at 0%) can never mask the plan quota.
+    const candidateAggregate = (0, codex_2.isAggregateCodexLimit)(candidate.quota.limitId);
+    const currentAggregate = (0, codex_2.isAggregateCodexLimit)(current.quota.limitId);
+    if (candidateAggregate !== currentAggregate)
+        return candidateAggregate;
     const candidatePrimaryReset = timestampMs(candidate.quota.fiveHour.resetsAt);
     const currentPrimaryReset = timestampMs(current.quota.fiveHour.resetsAt);
     if (candidatePrimaryReset !== currentPrimaryReset)
@@ -464,7 +473,11 @@ function readLatestQuotaFromRollout(sessionPath, maxTailBytes, source) {
             const firstNewline = text.indexOf('\n');
             text = firstNewline >= 0 ? text.slice(firstNewline + 1) : '';
         }
+        // Scan from the end for the latest aggregate ("codex") rate-limit sample, which
+        // is what the plan quota represents. Keep the latest sample of any family as a
+        // fallback so a model-only session still surfaces something.
         const lines = text.split('\n');
+        let fallback = null;
         for (let i = lines.length - 1; i >= 0; i--) {
             const line = lines[i].trim();
             if (!line || !line.includes('rate_limits'))
@@ -474,13 +487,20 @@ function readLatestQuotaFromRollout(sessionPath, maxTailBytes, source) {
                 if (parsed.type !== 'event_msg' || parsed.payload?.type !== 'token_count')
                     continue;
                 const quota = quotaFromCodexRateLimits(parsed.payload.rate_limits, source, parsed.timestamp ?? new Date(stat.mtime).toISOString());
-                if (quota)
-                    return { quota, filePath: sessionPath, mtimeMs: stat.mtime.getTime() };
+                if (!quota)
+                    continue;
+                const hit = { quota, filePath: sessionPath, mtimeMs: stat.mtime.getTime() };
+                if ((0, codex_2.isAggregateCodexLimit)(quota.limitId))
+                    return hit;
+                if (!fallback)
+                    fallback = hit;
             }
             catch {
                 // Ignore malformed or partial lines.
             }
         }
+        if (fallback)
+            return fallback;
     }
     catch {
         return null;

package/dist/codexQuotaWatcher.js

@@ -96,7 +96,15 @@ class CodexQuotaWatcher {
         this.discoveryPollIntervalMs =
             options.discoveryPollIntervalMs ?? DEFAULT_DISCOVERY_POLL_INTERVAL_MS;
         this.providerFactory = options.providerFactory ?? (() => new codex_1.CodexProvider());
-        this.getActiveAccount = options.getActiveAccount ?? codexProfiles_1.getActiveCodexAccount;
+        // Self-heal the registry pointer to the live login before reading it, so the
+        // history key (account.id) and the display label track the currently
+        // logged-in account even after a native `codex login`. Overridable for tests.
+        this.getActiveAccount =
+            options.getActiveAccount ??
+                (() => {
+                    (0, codexProfiles_1.resolveActiveCodexAccount)();
+                    return (0, codexProfiles_1.getActiveCodexAccount)();
+                });
         this.readSnapshot = options.readSnapshot ?? quotaSnapshots_1.readQuotaSnapshot;
         this.writeSnapshot = options.writeSnapshot ?? quotaSnapshots_1.writeQuotaSnapshot;
         this.watchFile = options.watchFile ?? fs.watch;

package/dist/index.d.ts

@@ -4,6 +4,7 @@
 export type { SessionEvent, ClaudeSessionEvent, MessageUsage, SessionMessage, TokenUsage, ToolCall, ToolAnalytics, TimelineEvent, PendingToolCall, TaskStatus as SessionTaskStatus, TrackedTask, TaskState, SubagentStats, PendingUserRequest, ResponseLatency, LatencyStats, PlanStep, PlanState, SessionStats, CompactionEvent, TruncationEvent, ContextAttribution, TurnAttribution, ContextSizePoint, PermissionMode, PermissionModeChange, } from './types/sessionEvent';
 export type { OpenCodeSession, OpenCodeMessage, OpenCodePart, OpenCodeTextPart, OpenCodeReasoningPart, OpenCodeToolInvocationPart, OpenCodeCompactionPart, OpenCodeDbToolPart, OpenCodeStepStartPart, OpenCodeStepFinishPart, OpenCodePatchPart, OpenCodeSubtaskPart, OpenCodeAgentPart, OpenCodeFilePart, OpenCodeRetryPart, OpenCodeSnapshotPart, OpenCodeProject, DbProject as OpenCodeDbProject, DbSession as OpenCodeDbSession, DbMessage as OpenCodeDbMessage, DbPart as OpenCodeDbPart, } from './types/opencode';
 export type { CodexRolloutLine, CodexSessionMeta, CodexResponseItem, CodexMessageItem, CodexContentPart, CodexReasoningItem, CodexFunctionCallItem, CodexFunctionCallOutputItem, CodexLocalShellCallItem, CodexWebSearchCallItem, CodexCustomToolCallItem, CodexCustomToolCallOutputItem, CodexCompacted, CodexTurnContext, CodexEventMsg, CodexEvent, CodexTurnStartedEvent, CodexTurnCompleteEvent, CodexTaskStartedEvent, CodexTaskCompleteEvent, CodexTurnAbortedEvent, CodexTokenCountEvent, CodexTokenUsage, CodexRateLimits, CodexAgentMessageEvent, CodexAgentReasoningEvent, CodexUserMessageEvent, CodexExecCommandBeginEvent, CodexExecCommandEndEvent, CodexMcpToolCallBeginEvent, CodexMcpToolCallEndEvent, CodexErrorEvent, CodexContextCompactedEvent, CodexPatchAppliedEvent, CodexBackgroundEvent, CodexGenericEvent, CodexDbThread, CodexReasoningSummary, } from './types/codex';
+export { isAggregateCodexLimit } from './types/codex';
 export type { PersistedTask, TaskPersistenceStore, TaskStatus } from './types/taskPersistence';
 export { TASK_PERSISTENCE_SCHEMA_VERSION, normalizeTaskStatus } from './types/taskPersistence';
 export type { DecisionEntry, DecisionLogStore, DecisionSource } from './types/decisionLog';
@@ -93,17 +94,17 @@ export { readClaudeMaxCredentials, readClaudeMaxAccessTokenSync } from './creden
 export type { ClaudeMaxCredentials } from './credentials';
 export { ensureDefaultAccounts } from './ensureDefaultAccounts';
 export type { EnsureDefaultAccountStatus, EnsureDefaultAccountsOptions, EnsureDefaultAccountsResult, } from './ensureDefaultAccounts';
-export { readAccountRegistry, writeAccountRegistry, readActiveClaudeAccount, addCurrentAccount, switchToAccount, resolveActiveClaudeHome, applyActiveClaudeToLiveHome, reconcileClaudeAuthState, removeAccount, listAccounts, getActiveAccount, isMultiAccountEnabled, } from './accounts';
+export { readAccountRegistry, writeAccountRegistry, readActiveClaudeAccount, addCurrentAccount, switchToAccount, resolveActiveClaudeHome, applyActiveClaudeToLiveHome, reconcileClaudeAuthState, removeAccount, listAccounts, getActiveAccount, resolveActiveClaudeAccount, isMultiAccountEnabled, } from './accounts';
 export type { AccountEntry, AccountRegistry, ActiveAccountInfo, AccountManagerResult, } from './accounts';
 export { beginAccountLogin, getAccountLoginStatus, finalizeAccountLogin, spawnAccountLogin, switchAccount, listAllAccounts, resolveClaudeLoginCommand, } from './accountManager';
 export type { AccountLoginCommand, AccountLoginState, AccountLoginStatus, BeginAccountLoginResult, FinalizeAccountLoginOptions, ListAllAccountsResult, SpawnAccountLoginOptions, } from './accountManager';
 export { getAccountsDir, readSavedAccountRegistry, writeSavedAccountRegistry, listSavedAccountProfiles, getActiveSavedAccount, upsertSavedAccountProfile, setActiveSavedAccount, replaceSavedAccountProfiles, removeSavedAccountProfile, } from './accountRegistry';
-export type { AccountProviderId, AccountIdentityMetadata, SavedAccountProfile, SavedAccountRegistry, } from './accountRegistry';
+export type { AccountProviderId, AccountIdentityMetadata, ResolvedActiveAccount, SavedAccountProfile, SavedAccountRegistry, } from './accountRegistry';
 export { getActiveAccountStatus } from './accountStatus';
 export type { ActiveAccountStatus, ActiveProviderAccountStatus } from './accountStatus';
 export { getClaudeProfilesDir, getClaudeProfileHome, claudeKeychainSuffix, claudeKeychainService, isClaudeProfileAuthenticated, readClaudeProfileIdentity, } from './claudeProfiles';
 export type { ClaudeProfileIdentity } from './claudeProfiles';
-export { getCodexProfilesDir, getCodexProfileHome, getCodexMonitoringHomes, getSystemCodexHome, listCodexAccounts, getActiveCodexAccount, resolveSidekickCodexHome, getCodexExecutionEnv, prepareCodexAccount, finalizeCodexAccount, switchToCodexAccount, removeCodexAccount, } from './codexProfiles';
+export { getCodexProfilesDir, getCodexProfileHome, getCodexMonitoringHomes, getSystemCodexHome, listCodexAccounts, getActiveCodexAccount, resolveActiveCodexAccount, resolveSidekickCodexHome, getCodexExecutionEnv, prepareCodexAccount, finalizeCodexAccount, switchToCodexAccount, removeCodexAccount, } from './codexProfiles';
 export type { CodexAccountManagerResult } from './codexProfiles';
 export { setTerminalActiveProfile, installShellHook, uninstallShellHook, isShellHookInstalled, writeLauncher, removeLauncher, } from './terminalSync';
 export { DEFAULT_AUTO_SWITCH_CONFIG, decideAutoSwitch, AutoSwitchController } from './autoSwitch';

package/dist/index.js

@@ -3,12 +3,14 @@
  * Public API for sidekick-shared.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.discoverSessionDirectory = exports.getClaudeSessionDirectory = exports.encodeClaudeWorkspacePath = exports.detectSessionActivity = exports.extractTaskInfo = exports.scanSubagentDir = exports.normalizeCodexToolInput = exports.normalizeCodexToolName = exports.extractPatchFilePaths = exports.CodexRolloutParser = exports.parseDbPartData = exports.parseDbMessageData = exports.convertOpenCodeMessage = exports.detectPlanModeFromText = exports.normalizeToolInput = exports.normalizeToolName = exports.TRUNCATION_PATTERNS = exports.JsonlParser = exports.CodexProvider = exports.getOpenCodeDataDir = exports.OpenCodeProvider = exports.ClaudeCodeProvider = exports.getAllDetectedProviders = exports.detectProvider = exports.readClaudeCodePlanFiles = exports.getPlanAnalytics = exports.writePlans = exports.getLatestPlan = exports.readPlans = exports.readLatestHandoff = exports.readHistory = exports.readNotes = exports.readDecisions = exports.readTasks = exports.getProjectSlugRaw = exports.getProjectSlug = exports.encodeWorkspacePath = exports.getGlobalDataPath = exports.getProjectDataPath = exports.getConfigDir = exports.MAX_PLANS_PER_PROJECT = exports.PLAN_SCHEMA_VERSION = exports.createEmptyTokenTotals = exports.HISTORICAL_DATA_SCHEMA_VERSION = exports.STALENESS_THRESHOLDS = exports.IMPORTANCE_DECAY_FACTORS = exports.KNOWLEDGE_NOTE_SCHEMA_VERSION = exports.DECISION_LOG_SCHEMA_VERSION = exports.normalizeTaskStatus = exports.TASK_PERSISTENCE_SCHEMA_VERSION = void 0;
-exports.highlightEvent = exports.formatSessionJson = exports.formatSessionMarkdown = exports.formatSessionText = exports.classifyNoise = exports.shouldMergeWithPrevious = exports.classifyFollowEvent = exports.classifyMessage = exports.getSoftNoiseReason = exports.isHardNoiseFollowEvent = exports.isHardNoise = exports.formatToolSummary = exports.formatTokenCount = exports.formatDurationMs = exports.createJsonlTail = exports.toFollowEvents = exports.createWatcher = exports.parseChangelog = exports.extractProposedPlanShared = exports.parsePlanMarkdownShared = exports.PlanExtractor = exports.segmentAssistantTurn = exports.reasoningSummary = exports.isAssistantTurnSubagentTool = exports.extractTurnSubagents = exports.assistantTurnEventsFromSessionEvents = exports.readSessionContextSnapshot = exports.createSessionContextProjector = exports.calculateSessionContextPressure = exports.buildSessionContextSnapshot = exports.composeContext = exports.FilterEngine = exports.searchSessions = exports.CodexDatabase = exports.OpenCodeDatabase = exports.discoverDebugLogs = exports.collapseDuplicates = exports.filterByLevel = exports.parseDebugLog = exports.scanSubagentTraces = exports.findAllSessionsWithWorktrees = exports.discoverWorktreeSiblings = exports.resolveWorktreeMainRepo = exports.getAllClaudeProjectFolders = exports.decodeEncodedPath = exports.getMostRecentlyActiveSessionDir = exports.findSubdirectorySessionDirs = exports.findSessionsInDirectory = exports.findAllClaudeSessions = exports.findActiveClaudeSession = void 0;
-exports.setActiveSavedAccount = exports.upsertSavedAccountProfile = exports.getActiveSavedAccount = exports.listSavedAccountProfiles = exports.writeSavedAccountRegistry = exports.readSavedAccountRegistry = exports.getAccountsDir = exports.resolveClaudeLoginCommand = exports.listAllAccounts = exports.switchAccount = exports.spawnAccountLogin = exports.finalizeAccountLogin = exports.getAccountLoginStatus = exports.beginAccountLogin = exports.isMultiAccountEnabled = exports.getActiveAccount = exports.listAccounts = exports.removeAccount = exports.reconcileClaudeAuthState = exports.applyActiveClaudeToLiveHome = exports.resolveActiveClaudeHome = exports.switchToAccount = exports.addCurrentAccount = exports.readActiveClaudeAccount = exports.writeAccountRegistry = exports.readAccountRegistry = exports.ensureDefaultAccounts = exports.readClaudeMaxAccessTokenSync = exports.readClaudeMaxCredentials = exports.writeActiveCredentials = exports.readActiveCredentials = exports.openInBrowser = exports.parseTranscriptFromEvents = exports.parseTranscript = exports.generateHtmlReport = exports.PatternExtractor = exports.HeatmapTracker = exports.FrequencyTracker = exports.getSnapshotPath = exports.isSnapshotValid = exports.deleteSnapshot = exports.loadSnapshot = exports.saveSnapshot = exports.parseTodoDependencies = exports.EventAggregator = exports.getRandomPhrase = exports.PHRASE_CATEGORIES = exports.ALL_PHRASES = exports.HIGHLIGHT_CSS = exports.clearHighlightCache = void 0;
-exports.CodexQuotaWatcher = exports.resolveCodexQuotaFromLocalSources = exports.resolveCodexQuota = exports.readLatestCodexQuotaFromRollouts = exports.quotaFromCodexRateLimits = exports.fetchCodexQuotaFromApi = exports.getWorkspaceIdFromPath = exports.pruneQuotaHistory = exports.readQuotaHistoryDailyBuckets = exports.readQuotaHistoryRange = exports.appendQuotaHistorySample = exports.writeQuotaSnapshot = exports.readQuotaSnapshot = exports.QuotaPoller = exports.describeQuotaFailure = exports.withQuotaProjections = exports.projectQuotaWindow = exports.fetchQuota = exports.SEVEN_DAY_WINDOW_MS = exports.FIVE_HOUR_WINDOW_MS = exports.AutoSwitchController = exports.decideAutoSwitch = exports.DEFAULT_AUTO_SWITCH_CONFIG = exports.removeLauncher = exports.writeLauncher = exports.isShellHookInstalled = exports.uninstallShellHook = exports.installShellHook = exports.setTerminalActiveProfile = exports.removeCodexAccount = exports.switchToCodexAccount = exports.finalizeCodexAccount = exports.prepareCodexAccount = exports.getCodexExecutionEnv = exports.resolveSidekickCodexHome = exports.getActiveCodexAccount = exports.listCodexAccounts = exports.getSystemCodexHome = exports.getCodexMonitoringHomes = exports.getCodexProfileHome = exports.getCodexProfilesDir = exports.readClaudeProfileIdentity = exports.isClaudeProfileAuthenticated = exports.claudeKeychainService = exports.claudeKeychainSuffix = exports.getClaudeProfileHome = exports.getClaudeProfilesDir = exports.getActiveAccountStatus = exports.removeSavedAccountProfile = exports.replaceSavedAccountProfiles = void 0;
-exports.permissionModeSchema = exports.sessionEventSchema = exports.sessionMessageSchema = exports.messageUsageSchema = exports.gatherAssetsForCwd = exports.codexSessions = exports.readCodexAssets = exports.claudeSessions = exports.readClaudeAssets = exports.extractCommands = exports.extractFilePaths = exports.extractUrls = exports.extractToolCalls = exports.extractToolCall = exports.extractTokenUsage = exports.LITELLM_CATALOG_URL = exports.normalizeLiteLlmCatalog = exports.hydratePricingCatalog = exports.formatCost = exports.sortModelIds = exports.compareModelIds = exports.getModelDisplayInfo = exports.shortModelName = exports.mergeCostSources = exports.calculateCostWithProvenance = exports.calculateCostWithPricing = exports.calculateCost = exports.getModelInfo = exports.getModelPricing = exports.parseModelId = exports.DEFAULT_CONTEXT_WINDOW = exports.getModelContextWindowSize = exports.MultiProviderQuotaService = exports.resolveZaiQuota = exports.readZaiCredentials = exports.quotaStateFromZaiQuotaLimitPayload = exports.fetchZaiQuotaFromApi = exports.ZaiQuotaWatcher = exports.ZAI_TIER_BUDGETS = exports.ZAI_PROVIDER_IDS = exports.ZAI_PROMPT_INVOCATIONS = exports.turnTokenWeight = exports.rowsToZaiTurnsAndErrors = exports.resolveZaiTier = exports.parseZaiQuotaError = exports.makeUnavailableZaiQuotaState = exports.isZaiProviderId = exports.inferZaiQuotaState = exports.extractNextFlushTime = exports.accumulateZaiUsage = void 0;
-exports.scopePeakHoursToSessionProvider = exports.isClaudeCodeSessionProvider = exports.fetchPeakHoursStatus = exports.createPeakHoursNotApplicableState = exports.fetchOpenAIStatus = exports.fetchProviderStatus = exports.assistantTurnToolRefSchema = exports.assistantTurnToolGroupStepSchema = exports.assistantTurnTimelineItemSchema = exports.assistantTurnSubagentStatusSchema = exports.assistantTurnSubagentSchema = exports.assistantTurnReasoningTimelineItemSchema = exports.assistantTurnProjectionSchema = exports.assistantTurnProcessStepSchema = exports.assistantTurnProcessSchema = exports.assistantTurnNarrationStepSchema = exports.assistantTurnEventTypeSchema = exports.assistantTurnEventSchema = exports.listAllAccountsResultSchema = exports.savedAccountProfileSchema = exports.accountEntrySchema = exports.accountLoginStatusSchema = exports.beginAccountLoginResultSchema = exports.accountManagerResultSchema = exports.accountProviderIdSchema = exports.activeAccountStatusSchema = exports.activeProviderAccountStatusSchema = exports.quotaHistoryDailyBucketSchema = exports.quotaHistorySampleSchema = exports.quotaHistoryRuntimeProviderSchema = exports.providerQuotaMapSchema = exports.zaiProviderQuotaStateSchema = exports.codexProviderQuotaStateSchema = exports.claudeProviderQuotaStateSchema = exports.providerQuotaStateSchema = exports.runtimeQuotaProviderSchema = exports.quotaFailureDescriptorSchema = exports.peakHoursStateSchema = exports.quotaSourceSchema = exports.quotaProviderIdSchema = exports.quotaFailureKindSchema = exports.quotaStateSchema = exports.quotaWindowSchema = exports.extractSessionEvents = void 0;
+exports.getClaudeSessionDirectory = exports.encodeClaudeWorkspacePath = exports.detectSessionActivity = exports.extractTaskInfo = exports.scanSubagentDir = exports.normalizeCodexToolInput = exports.normalizeCodexToolName = exports.extractPatchFilePaths = exports.CodexRolloutParser = exports.parseDbPartData = exports.parseDbMessageData = exports.convertOpenCodeMessage = exports.detectPlanModeFromText = exports.normalizeToolInput = exports.normalizeToolName = exports.TRUNCATION_PATTERNS = exports.JsonlParser = exports.CodexProvider = exports.getOpenCodeDataDir = exports.OpenCodeProvider = exports.ClaudeCodeProvider = exports.getAllDetectedProviders = exports.detectProvider = exports.readClaudeCodePlanFiles = exports.getPlanAnalytics = exports.writePlans = exports.getLatestPlan = exports.readPlans = exports.readLatestHandoff = exports.readHistory = exports.readNotes = exports.readDecisions = exports.readTasks = exports.getProjectSlugRaw = exports.getProjectSlug = exports.encodeWorkspacePath = exports.getGlobalDataPath = exports.getProjectDataPath = exports.getConfigDir = exports.MAX_PLANS_PER_PROJECT = exports.PLAN_SCHEMA_VERSION = exports.createEmptyTokenTotals = exports.HISTORICAL_DATA_SCHEMA_VERSION = exports.STALENESS_THRESHOLDS = exports.IMPORTANCE_DECAY_FACTORS = exports.KNOWLEDGE_NOTE_SCHEMA_VERSION = exports.DECISION_LOG_SCHEMA_VERSION = exports.normalizeTaskStatus = exports.TASK_PERSISTENCE_SCHEMA_VERSION = exports.isAggregateCodexLimit = void 0;
+exports.formatSessionJson = exports.formatSessionMarkdown = exports.formatSessionText = exports.classifyNoise = exports.shouldMergeWithPrevious = exports.classifyFollowEvent = exports.classifyMessage = exports.getSoftNoiseReason = exports.isHardNoiseFollowEvent = exports.isHardNoise = exports.formatToolSummary = exports.formatTokenCount = exports.formatDurationMs = exports.createJsonlTail = exports.toFollowEvents = exports.createWatcher = exports.parseChangelog = exports.extractProposedPlanShared = exports.parsePlanMarkdownShared = exports.PlanExtractor = exports.segmentAssistantTurn = exports.reasoningSummary = exports.isAssistantTurnSubagentTool = exports.extractTurnSubagents = exports.assistantTurnEventsFromSessionEvents = exports.readSessionContextSnapshot = exports.createSessionContextProjector = exports.calculateSessionContextPressure = exports.buildSessionContextSnapshot = exports.composeContext = exports.FilterEngine = exports.searchSessions = exports.CodexDatabase = exports.OpenCodeDatabase = exports.discoverDebugLogs = exports.collapseDuplicates = exports.filterByLevel = exports.parseDebugLog = exports.scanSubagentTraces = exports.findAllSessionsWithWorktrees = exports.discoverWorktreeSiblings = exports.resolveWorktreeMainRepo = exports.getAllClaudeProjectFolders = exports.decodeEncodedPath = exports.getMostRecentlyActiveSessionDir = exports.findSubdirectorySessionDirs = exports.findSessionsInDirectory = exports.findAllClaudeSessions = exports.findActiveClaudeSession = exports.discoverSessionDirectory = void 0;
+exports.getActiveSavedAccount = exports.listSavedAccountProfiles = exports.writeSavedAccountRegistry = exports.readSavedAccountRegistry = exports.getAccountsDir = exports.resolveClaudeLoginCommand = exports.listAllAccounts = exports.switchAccount = exports.spawnAccountLogin = exports.finalizeAccountLogin = exports.getAccountLoginStatus = exports.beginAccountLogin = exports.isMultiAccountEnabled = exports.resolveActiveClaudeAccount = exports.getActiveAccount = exports.listAccounts = exports.removeAccount = exports.reconcileClaudeAuthState = exports.applyActiveClaudeToLiveHome = exports.resolveActiveClaudeHome = exports.switchToAccount = exports.addCurrentAccount = exports.readActiveClaudeAccount = exports.writeAccountRegistry = exports.readAccountRegistry = exports.ensureDefaultAccounts = exports.readClaudeMaxAccessTokenSync = exports.readClaudeMaxCredentials = exports.writeActiveCredentials = exports.readActiveCredentials = exports.openInBrowser = exports.parseTranscriptFromEvents = exports.parseTranscript = exports.generateHtmlReport = exports.PatternExtractor = exports.HeatmapTracker = exports.FrequencyTracker = exports.getSnapshotPath = exports.isSnapshotValid = exports.deleteSnapshot = exports.loadSnapshot = exports.saveSnapshot = exports.parseTodoDependencies = exports.EventAggregator = exports.getRandomPhrase = exports.PHRASE_CATEGORIES = exports.ALL_PHRASES = exports.HIGHLIGHT_CSS = exports.clearHighlightCache = exports.highlightEvent = void 0;
+exports.readLatestCodexQuotaFromRollouts = exports.quotaFromCodexRateLimits = exports.fetchCodexQuotaFromApi = exports.getWorkspaceIdFromPath = exports.pruneQuotaHistory = exports.readQuotaHistoryDailyBuckets = exports.readQuotaHistoryRange = exports.appendQuotaHistorySample = exports.writeQuotaSnapshot = exports.readQuotaSnapshot = exports.QuotaPoller = exports.describeQuotaFailure = exports.withQuotaProjections = exports.projectQuotaWindow = exports.fetchQuota = exports.SEVEN_DAY_WINDOW_MS = exports.FIVE_HOUR_WINDOW_MS = exports.AutoSwitchController = exports.decideAutoSwitch = exports.DEFAULT_AUTO_SWITCH_CONFIG = exports.removeLauncher = exports.writeLauncher = exports.isShellHookInstalled = exports.uninstallShellHook = exports.installShellHook = exports.setTerminalActiveProfile = exports.removeCodexAccount = exports.switchToCodexAccount = exports.finalizeCodexAccount = exports.prepareCodexAccount = exports.getCodexExecutionEnv = exports.resolveSidekickCodexHome = exports.resolveActiveCodexAccount = exports.getActiveCodexAccount = exports.listCodexAccounts = exports.getSystemCodexHome = exports.getCodexMonitoringHomes = exports.getCodexProfileHome = exports.getCodexProfilesDir = exports.readClaudeProfileIdentity = exports.isClaudeProfileAuthenticated = exports.claudeKeychainService = exports.claudeKeychainSuffix = exports.getClaudeProfileHome = exports.getClaudeProfilesDir = exports.getActiveAccountStatus = exports.removeSavedAccountProfile = exports.replaceSavedAccountProfiles = exports.setActiveSavedAccount = exports.upsertSavedAccountProfile = void 0;
+exports.messageUsageSchema = exports.gatherAssetsForCwd = exports.codexSessions = exports.readCodexAssets = exports.claudeSessions = exports.readClaudeAssets = exports.extractCommands = exports.extractFilePaths = exports.extractUrls = exports.extractToolCalls = exports.extractToolCall = exports.extractTokenUsage = exports.LITELLM_CATALOG_URL = exports.normalizeLiteLlmCatalog = exports.hydratePricingCatalog = exports.formatCost = exports.sortModelIds = exports.compareModelIds = exports.getModelDisplayInfo = exports.shortModelName = exports.mergeCostSources = exports.calculateCostWithProvenance = exports.calculateCostWithPricing = exports.calculateCost = exports.getModelInfo = exports.getModelPricing = exports.parseModelId = exports.DEFAULT_CONTEXT_WINDOW = exports.getModelContextWindowSize = exports.MultiProviderQuotaService = exports.resolveZaiQuota = exports.readZaiCredentials = exports.quotaStateFromZaiQuotaLimitPayload = exports.fetchZaiQuotaFromApi = exports.ZaiQuotaWatcher = exports.ZAI_TIER_BUDGETS = exports.ZAI_PROVIDER_IDS = exports.ZAI_PROMPT_INVOCATIONS = exports.turnTokenWeight = exports.rowsToZaiTurnsAndErrors = exports.resolveZaiTier = exports.parseZaiQuotaError = exports.makeUnavailableZaiQuotaState = exports.isZaiProviderId = exports.inferZaiQuotaState = exports.extractNextFlushTime = exports.accumulateZaiUsage = exports.CodexQuotaWatcher = exports.resolveCodexQuotaFromLocalSources = exports.resolveCodexQuota = void 0;
+exports.scopePeakHoursToSessionProvider = exports.isClaudeCodeSessionProvider = exports.fetchPeakHoursStatus = exports.createPeakHoursNotApplicableState = exports.fetchOpenAIStatus = exports.fetchProviderStatus = exports.assistantTurnToolRefSchema = exports.assistantTurnToolGroupStepSchema = exports.assistantTurnTimelineItemSchema = exports.assistantTurnSubagentStatusSchema = exports.assistantTurnSubagentSchema = exports.assistantTurnReasoningTimelineItemSchema = exports.assistantTurnProjectionSchema = exports.assistantTurnProcessStepSchema = exports.assistantTurnProcessSchema = exports.assistantTurnNarrationStepSchema = exports.assistantTurnEventTypeSchema = exports.assistantTurnEventSchema = exports.listAllAccountsResultSchema = exports.savedAccountProfileSchema = exports.accountEntrySchema = exports.accountLoginStatusSchema = exports.beginAccountLoginResultSchema = exports.accountManagerResultSchema = exports.accountProviderIdSchema = exports.activeAccountStatusSchema = exports.activeProviderAccountStatusSchema = exports.quotaHistoryDailyBucketSchema = exports.quotaHistorySampleSchema = exports.quotaHistoryRuntimeProviderSchema = exports.providerQuotaMapSchema = exports.zaiProviderQuotaStateSchema = exports.codexProviderQuotaStateSchema = exports.claudeProviderQuotaStateSchema = exports.providerQuotaStateSchema = exports.runtimeQuotaProviderSchema = exports.quotaFailureDescriptorSchema = exports.peakHoursStateSchema = exports.quotaSourceSchema = exports.quotaProviderIdSchema = exports.quotaFailureKindSchema = exports.quotaStateSchema = exports.quotaWindowSchema = exports.extractSessionEvents = exports.permissionModeSchema = exports.sessionEventSchema = exports.sessionMessageSchema = void 0;
+var codex_1 = require("./types/codex");
+Object.defineProperty(exports, "isAggregateCodexLimit", { enumerable: true, get: function () { return codex_1.isAggregateCodexLimit; } });
 var taskPersistence_1 = require("./types/taskPersistence");
 Object.defineProperty(exports, "TASK_PERSISTENCE_SCHEMA_VERSION", { enumerable: true, get: function () { return taskPersistence_1.TASK_PERSISTENCE_SCHEMA_VERSION; } });
 Object.defineProperty(exports, "normalizeTaskStatus", { enumerable: true, get: function () { return taskPersistence_1.normalizeTaskStatus; } });
@@ -57,8 +59,8 @@ Object.defineProperty(exports, "ClaudeCodeProvider", { enumerable: true, get: fu
 var openCode_1 = require("./providers/openCode");
 Object.defineProperty(exports, "OpenCodeProvider", { enumerable: true, get: function () { return openCode_1.OpenCodeProvider; } });
 Object.defineProperty(exports, "getOpenCodeDataDir", { enumerable: true, get: function () { return openCode_1.getOpenCodeDataDir; } });
-var codex_1 = require("./providers/codex");
-Object.defineProperty(exports, "CodexProvider", { enumerable: true, get: function () { return codex_1.CodexProvider; } });
+var codex_2 = require("./providers/codex");
+Object.defineProperty(exports, "CodexProvider", { enumerable: true, get: function () { return codex_2.CodexProvider; } });
 // Parsers — JSONL
 var jsonl_1 = require("./parsers/jsonl");
 Object.defineProperty(exports, "JsonlParser", { enumerable: true, get: function () { return jsonl_1.JsonlParser; } });
@@ -220,6 +222,7 @@ Object.defineProperty(exports, "reconcileClaudeAuthState", { enumerable: true, g
 Object.defineProperty(exports, "removeAccount", { enumerable: true, get: function () { return accounts_1.removeAccount; } });
 Object.defineProperty(exports, "listAccounts", { enumerable: true, get: function () { return accounts_1.listAccounts; } });
 Object.defineProperty(exports, "getActiveAccount", { enumerable: true, get: function () { return accounts_1.getActiveAccount; } });
+Object.defineProperty(exports, "resolveActiveClaudeAccount", { enumerable: true, get: function () { return accounts_1.resolveActiveClaudeAccount; } });
 Object.defineProperty(exports, "isMultiAccountEnabled", { enumerable: true, get: function () { return accounts_1.isMultiAccountEnabled; } });
 var accountManager_1 = require("./accountManager");
 Object.defineProperty(exports, "beginAccountLogin", { enumerable: true, get: function () { return accountManager_1.beginAccountLogin; } });
@@ -255,6 +258,7 @@ Object.defineProperty(exports, "getCodexMonitoringHomes", { enumerable: true, ge
 Object.defineProperty(exports, "getSystemCodexHome", { enumerable: true, get: function () { return codexProfiles_1.getSystemCodexHome; } });
 Object.defineProperty(exports, "listCodexAccounts", { enumerable: true, get: function () { return codexProfiles_1.listCodexAccounts; } });
 Object.defineProperty(exports, "getActiveCodexAccount", { enumerable: true, get: function () { return codexProfiles_1.getActiveCodexAccount; } });
+Object.defineProperty(exports, "resolveActiveCodexAccount", { enumerable: true, get: function () { return codexProfiles_1.resolveActiveCodexAccount; } });
 Object.defineProperty(exports, "resolveSidekickCodexHome", { enumerable: true, get: function () { return codexProfiles_1.resolveSidekickCodexHome; } });
 Object.defineProperty(exports, "getCodexExecutionEnv", { enumerable: true, get: function () { return codexProfiles_1.getCodexExecutionEnv; } });
 Object.defineProperty(exports, "prepareCodexAccount", { enumerable: true, get: function () { return codexProfiles_1.prepareCodexAccount; } });

package/dist/multiProviderQuotaService.d.ts

@@ -1,4 +1,4 @@
-import { readActiveClaudeAccount } from './accounts';
+import { resolveActiveClaudeAccount } from './accounts';
 import type { ClaudeMaxCredentials } from './credentials';
 import type { PeakHoursState } from './peakHours';
 import type { QuotaState } from './quota';
@@ -25,7 +25,7 @@ export interface MultiProviderQuotaServiceOptions {
     codexWatcher?: CodexWatcherLike | null;
     zaiWatcher?: ZaiWatcherLike | null;
     readClaudeCredentials?: () => Promise<ClaudeMaxCredentials | null>;
-    readClaudeAccount?: typeof readActiveClaudeAccount;
+    readClaudeAccount?: typeof resolveActiveClaudeAccount;
     fetchClaudeQuota?: (accessToken: string) => Promise<QuotaState>;
     fetchPeakHours?: () => Promise<PeakHoursState>;
     log?: Logger;

package/dist/multiProviderQuotaService.js

@@ -82,7 +82,7 @@ class MultiProviderQuotaService {
         this.peakHoursCacheMaxAgeMs = options.peakHoursCacheMaxAgeMs ?? PEAK_HOURS_CACHE_MAX_AGE_MS;
         this.includePeakHours = options.includePeakHours ?? true;
         this.readClaudeCredentials = options.readClaudeCredentials ?? credentials_1.readClaudeMaxCredentials;
-        this.readClaudeAccount = options.readClaudeAccount ?? accounts_1.readActiveClaudeAccount;
+        this.readClaudeAccount = options.readClaudeAccount ?? accounts_1.resolveActiveClaudeAccount;
         this.fetchClaudeQuota = options.fetchClaudeQuota ?? quota_1.fetchQuota;
         this.fetchPeakHours = options.fetchPeakHours ?? peakHours_1.fetchPeakHoursStatus;
         this.log = options.log;
@@ -353,7 +353,8 @@ class MultiProviderQuotaService {
         this.timer = setTimeout(() => void this.poll(), delay);
     }
     withClaudeAccountDetails(state) {
-        const accountEmail = this.readClaudeAccount()?.email;
+        const resolved = this.readClaudeAccount();
+        const accountEmail = resolved.email;
         if (!accountEmail) {
             const nextState = { ...state };
             delete nextState.accountLabel;
@@ -362,7 +363,7 @@ class MultiProviderQuotaService {
         }
         return {
             ...state,
-            accountLabel: accountEmail,
+            accountLabel: resolved.label ?? accountEmail,
             accountDetail: accountEmail,
         };
     }

package/dist/parsers/codexParser.d.ts

@@ -43,6 +43,7 @@ export declare class CodexRolloutParser {
     private lastTokenUsage;
     private modelContextWindow;
     private lastRateLimits;
+    private hasAggregateRateLimits;
     private inPlanMode;
     private emittedToolUseIds;
     private patchExpandedToolUseIds;

package/dist/parsers/codexParser.js

@@ -16,6 +16,7 @@ exports.CodexRolloutParser = void 0;
 exports.normalizeCodexToolName = normalizeCodexToolName;
 exports.normalizeCodexToolInput = normalizeCodexToolInput;
 exports.extractPatchFilePaths = extractPatchFilePaths;
+const codex_1 = require("../types/codex");
 const openCodeParser_1 = require("./openCodeParser");
 function normalizeRateLimits(rateLimits) {
     if (!rateLimits?.primary && !rateLimits?.secondary)
@@ -126,6 +127,7 @@ class CodexRolloutParser {
     lastTokenUsage = null;
     modelContextWindow = null;
     lastRateLimits = null;
+    hasAggregateRateLimits = false;
     inPlanMode = false;
     emittedToolUseIds = new Set();
     patchExpandedToolUseIds = new Map();
@@ -177,6 +179,7 @@ class CodexRolloutParser {
         this.lastTokenUsage = null;
         this.modelContextWindow = null;
         this.lastRateLimits = null;
+        this.hasAggregateRateLimits = false;
         this.inPlanMode = false;
         this.emittedToolUseIds.clear();
         this.patchExpandedToolUseIds.clear();
@@ -493,9 +496,19 @@ class CodexRolloutParser {
                 if (e.info?.model_context_window) {
                     this.modelContextWindow = e.info.model_context_window;
                 }
-                // Store rate_limits if provided (subscription quota data)
+                // Store rate_limits if provided (subscription quota data). Codex interleaves
+                // multiple families (aggregate "codex" plus per-model ones like codex_bengalfox);
+                // keep the latest aggregate sample so a trailing model-specific event at 0% does
+                // not mask the plan quota. Fall back to a non-aggregate sample only until an
+                // aggregate one has been seen.
                 if (e.rate_limits) {
-                    this.lastRateLimits = e.rate_limits;
+                    if ((0, codex_1.isAggregateCodexLimit)(e.rate_limits.limit_id)) {
+                        this.lastRateLimits = e.rate_limits;
+                        this.hasAggregateRateLimits = true;
+                    }
+                    else if (!this.hasAggregateRateLimits) {
+                        this.lastRateLimits = e.rate_limits;
+                    }
                 }
                 // Usage data is nested under info.last_token_usage (info can be null)
                 const usage = e.info?.last_token_usage || e.info?.total_token_usage;

package/dist/quotaSnapshots.js

@@ -39,6 +39,7 @@ const crypto = __importStar(require("crypto"));
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const paths_1 = require("./paths");
+const codex_1 = require("./types/codex");
 function getQuotaSnapshotPath() {
     return path.join((0, paths_1.getConfigDir)(), 'quota-snapshots.json');
 }
@@ -94,6 +95,15 @@ function windowResetMs(value) {
 // Preserve the best-known same-window snapshot while still allowing lower
 // utilization after Codex advances to a newer reset window.
 function shouldKeepExistingSnapshot(existing, next) {
+    // Family rank first (Codex): the aggregate plan-quota family ("codex") must never be
+    // replaced or blocked by a model/feature-specific family (e.g. codex_bengalfox), whose
+    // later-resetting 0% window would otherwise win the reset-window comparison below. This
+    // is a no-op for providers whose limitId is consistent across samples (Claude: absent;
+    // z.ai: zai-*), where both sides share the same aggregate-ness.
+    const existingAggregate = (0, codex_1.isAggregateCodexLimit)(existing.limitId);
+    const nextAggregate = (0, codex_1.isAggregateCodexLimit)(next.limitId);
+    if (existingAggregate !== nextAggregate)
+        return existingAggregate;
     const existingPrimaryReset = windowResetMs(existing.fiveHour.resetsAt);
     const nextPrimaryReset = windowResetMs(next.fiveHour.resetsAt);
     if (existingPrimaryReset !== nextPrimaryReset)

package/dist/schemas/assistantTurn.d.ts

@@ -8,9 +8,9 @@ import { z } from 'zod';
 export declare const assistantTurnEventTypeSchema: z.ZodEnum<{
     status: "status";
     error: "error";
+    text: "text";
     tool_use: "tool_use";
     tool_result: "tool_result";
-    text: "text";
     progress: "progress";
     thinking: "thinking";
     delta: "delta";
@@ -19,9 +19,9 @@ export declare const assistantTurnEventSchema: z.ZodObject<{
     eventType: z.ZodEnum<{
         status: "status";
         error: "error";
+        text: "text";
         tool_use: "tool_use";
         tool_result: "tool_result";
-        text: "text";
         progress: "progress";
         thinking: "thinking";
         delta: "delta";

package/dist/schemas/sessionEvent.d.ts

@@ -41,10 +41,10 @@ export declare const sessionEventSchema: z.ZodObject<{
     type: z.ZodEnum<{
         user: "user";
         assistant: "assistant";
+        system: "system";
         tool_use: "tool_use";
         tool_result: "tool_result";
         summary: "summary";
-        system: "system";
     }>;
     message: z.ZodObject<{
         role: z.ZodString;

package/dist/types/codex.d.ts

@@ -192,6 +192,15 @@ export interface CodexRateLimits {
     plan_type?: string;
     rate_limit_reached_type?: string;
 }
+/**
+ * Codex reports several rate-limit families per session, keyed by `limit_id`.
+ * The aggregate plan quota — what the usage API surfaces — is `limit_id: "codex"`
+ * (or absent on older payloads). Model/feature-specific families (e.g.
+ * `codex_bengalfox`, `premium`) report their own windows and can read 0% while the
+ * plan is heavily used, so they must never mask the aggregate in the standard
+ * quota view. Returns true only for the aggregate family.
+ */
+export declare function isAggregateCodexLimit(limitId?: string | null): boolean;
 export interface CodexTokenUsage {
     input_tokens: number;
     cached_input_tokens?: number;

package/dist/types/codex.js

@@ -12,3 +12,15 @@
  * @module types/codex
  */
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.isAggregateCodexLimit = isAggregateCodexLimit;
+/**
+ * Codex reports several rate-limit families per session, keyed by `limit_id`.
+ * The aggregate plan quota — what the usage API surfaces — is `limit_id: "codex"`
+ * (or absent on older payloads). Model/feature-specific families (e.g.
+ * `codex_bengalfox`, `premium`) report their own windows and can read 0% while the
+ * plan is heavily used, so they must never mask the aggregate in the standard
+ * quota view. Returns true only for the aggregate family.
+ */
+function isAggregateCodexLimit(limitId) {
+    return !limitId || limitId === 'codex';
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sidekick-shared",
-  "version": "0.21.3",
+  "version": "0.21.5",
   "description": "Shared data access layer for Sidekick — readers, types, providers, credentials, quota",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",