tabby-agentdeck 1.2.3 → 1.2.4

package/CHANGELOG.md

@@ -5,6 +5,16 @@ The tag points at the commit that first introduced that version, and `test/tags.
 
 Korean release notes for the current version are at the top of [`docs/REFERENCE.ko.md`](docs/REFERENCE.ko.md).
 
+## 1.2.4 — 2026-09-30
+
+- Stop launching Codex every minute for account checks. Refresh credentials only
+  near expiry and stop automatic checks after five minutes of failures until a
+  successful new login, for both Codex and Claude.
+- Block Git network access in the temporary Codex authentication helper to avoid
+  repeated marketplace downloads and disk consumption.
+- Bound mailbox hook execution time so stalled or trickling responses cannot
+  hold up the agent's tool hooks.
+
 ## 1.2.3 — 2026-09-30
 
 - Keep sidebar click targets alive during status updates so mouse tab switching

package/dist/accountRefreshPolicy.d.ts

@@ -0,0 +1,13 @@
+export declare const REFRESH_WINDOW_MS: number;
+export declare const REFRESH_RETRY_MS = 60000;
+export interface AccountRefreshState {
+    generation: string;
+    firstFailureAt?: number;
+    nextAttemptAt?: number;
+    blocked?: boolean;
+}
+export declare function accountRefreshState(home: string, now?: number): AccountRefreshState;
+export declare function recordRefreshFailure(home: string, generation: string, now?: number): AccountRefreshState;
+export declare function recordRefreshSuccess(home: string, generation: string): void;
+/** Only a completed, identity-verified login resets a disabled account. */
+export declare function resetAccountRefreshAfterLogin(home: string): void;

package/dist/accountSession.d.ts

@@ -8,6 +8,7 @@ export interface QuotaSnapshot {
 export declare function registerAccountSource(account: SavedAccount, home?: string): void;
 /** Select only identity-checked credentials. A newer live CLI token wins over an old private copy. */
 export declare function synchronizeClaudeAuth(account: SavedAccount): string;
+export declare function codexRefreshDeadline(auth: any): number;
 export declare function ensureAccountSession(account: SavedAccount, forceRefresh?: boolean): Promise<void>;
 export declare function cachedAccountQuotas(account: SavedAccount): QuotaSnapshot | null;
 export declare function recordAccountUsage(account: SavedAccount, meta: MetaInput & {

package/dist/accounts.d.ts

@@ -48,7 +48,7 @@ export declare function accountCliRoots(): string[];
 export declare function parseQuotas(provider: AccountProvider, body: any): AccountQuota[];
 /** The app-server snapshot omits model_usage, which currently reports Astra availability, not a percentage. */
 export declare function parseCodexUsage(body: any): AccountQuota[];
-export declare function authenticateAccount(account: SavedAccount): Promise<void>;
+export declare function authenticateAccount(account: SavedAccount, refreshToken?: boolean): Promise<void>;
 export declare function fetchAccountQuotas(account: SavedAccount): Promise<AccountQuota[]>;
 export type LoginBrowser = (url: string, account: SavedAccount, cancel: () => void) => Promise<() => void>;
 /** First login is completed by the user; the saved authentication is reused afterwards. */