feat: OpenCode platform support, vitest tests, changelog & Docker hardening

- Add opencode.json provider config for OpenCode IDE integration
- Add CHANGELOG.md covering all versions (v0.1.0–v0.8.0)
- Add vitest with unit tests for account-pool, codex-api, codex-event-extractor
- Add request-id middleware to global middleware chain
- Harden Dockerfile: non-root user, HEALTHCHECK probe
- Simplify /health endpoint to return pool summary only

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

CHANGELOG.md

@@ -0,0 +1,142 @@
+# Changelog
+
+本项目的所有重要变更都将记录在此文件中。
+
+格式基于 [Keep a Changelog](https://keepachangelog.com/zh-CN/)。
+
+## [Unreleased]
+
+### Added
+
+- OpenCode 平台支持（`opencode.json` 配置文件）
+- Vitest 测试框架（account-pool、codex-api、codex-event-extractor 单元测试）
+- request-id 中间件注入全局请求链路 ID
+- Dockerfile 安全加固（非 root 用户运行、HEALTHCHECK 探针）
+
+### Changed
+
+- `/health` 端点精简，仅返回 pool 摘要（total / active）
+
+## [v0.8.0](https://github.com/icebear0828/codex-proxy/releases/tag/v0.8.0) - 2026-02-24
+
+### Added
+
+- 原生 function_call / tool_calls 支持（所有协议）
+
+### Fixed
+
+- 格式错误的 chat payload 返回 400 `invalid_json` 错误
+
+## [v0.7.0](https://github.com/icebear0828/codex-proxy/releases/tag/v0.7.0) - 2026-02-22
+
+### Added
+
+- `developer` 角色支持（OpenAI 协议）
+- 数组格式 content 支持
+- tool / function 消息兼容（所有协议）
+- 模型响应中自动过滤 Codex Desktop 指令
+
+### Changed
+
+- 清理无用代码、未使用配置，修复类型违规
+
+### Fixed
+
+- 启动日志显示配置的 `proxy_api_key` 而非随机哈希
+- 首次 OAuth 登录后 `useStatus` 未刷新
+
+## [v0.6.0](https://github.com/icebear0828/codex-proxy/releases/tag/v0.6.0) - 2026-02-21
+
+### Added
+
+- libcurl-impersonate FFI 传输层，Chrome TLS 指纹
+- pnpm / bun 包管理器支持
+
+### Changed
+
+- README 快速开始按平台重组
+
+### Fixed
+
+- Docker 构建完整修复链（代理配置、BuildKit 冲突、host 网络、源码复制顺序、layer 优化）
+- `.env` 行内注释被误解析为 JWT token
+- Anthropic / Gemini 代码示例跟随所选模型
+- `proxy_api_key` 配置未在前端和认证验证中使用
+- 删除按钮始终可见，不被状态徽章遮挡
+
+## [v0.5.0](https://github.com/icebear0828/codex-proxy/releases/tag/v0.5.0) - 2026-02-20
+
+### Added
+
+- Dashboard 暗色 / 亮色主题切换
+- 国际化支持（中文 / 英文）
+- 自动代理检测（mihomo / clash / v2ray）
+- 局域网登录分步教程
+- Preact + Vite 前端架构
+- Docker 容器部署支持
+- 共享代理处理器，消除路由重复
+
+### Changed
+
+- Dashboard 重写为 Tailwind CSS
+- 协议 / 语言两级标签页（OpenAI / Anthropic / Gemini × Python / cURL / Node.js）
+- 内联 SVG 图标替换字体图标
+- 系统字体替换 Google Fonts
+- 架构审计修复（P0-P2 稳定性与可靠性）
+
+### Fixed
+
+- 移除所有 `any` 类型
+- 修复图标文字闪烁（FOUC）
+- 修复未认证时的重定向循环
+- 移除虚假的 Claude / Gemini 模型别名，使用动态目录
+- Dashboard 配置改为只读，修复 HTTP 复制按钮
+- 恢复模型下拉选择器
+
+## [v0.4.0](https://github.com/icebear0828/codex-proxy/releases/tag/v0.4.0) - 2026-02-19
+
+### Added
+
+- Anthropic Messages API 兼容路由（`POST /v1/messages`）
+- Google Gemini API 兼容路由
+- 桌面端上下文注入（模拟 Codex Desktop 请求特征）
+- 多轮对话会话管理
+- 自动更新检查管道（Appcast 轮询 + 版本提取）
+- 中英双语 README
+
+## [v0.3.0](https://github.com/icebear0828/codex-proxy/releases/tag/v0.3.0) - 2026-02-18
+
+### Added
+
+- curl-impersonate TLS 指纹模拟
+- Chromium 版本自动检测与动态 `sec-ch-ua` 生成
+- 请求时序 jitter 随机化
+- Dashboard 实时代码示例与配额显示
+
+### Fixed
+
+- curl 请求修复
+
+## [v0.2.0](https://github.com/icebear0828/codex-proxy/releases/tag/v0.2.0) - 2026-02-17
+
+### Added
+
+- Dashboard 多账户管理 UI
+- OAuth PKCE 登录流程（固定 `localhost:1455` 回调）
+- 架构审计：伪装加固、自动更新机制、健壮性提升
+
+### Changed
+
+- 硬编码值提取到配置文件
+- 清理无用代码
+
+## [v0.1.0](https://github.com/icebear0828/codex-proxy/releases/tag/v0.1.0) - 2026-02-17
+
+### Added
+
+- OpenAI `/v1/chat/completions` → Codex Responses API 反向代理核心
+- 配额 API 查询（`/auth/accounts?quota=true`）
+- Cloudflare TLS 指纹绕过
+- SSE 流式响应转换
+- 模型列表端点（`GET /v1/models`）
+- 健康检查端点（`GET /health`）

Dockerfile

@@ -32,4 +32,12 @@ RUN npm prune --omit=dev && npm install --no-save tsx
 
 VOLUME /app/data
 EXPOSE 8080
+
+# Ensure writable directories for non-root user
+RUN mkdir -p /app/data && chown -R node:node /app/data /app/config
+
+USER node
+HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
+  CMD curl -fs http://localhost:8080/health || exit 1
+
 CMD ["node", "dist/index.js"]

opencode.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "https://opencode.ai/config.json",
+  "provider": {
+    "codex-proxy": {
+      "npm": "@ai-sdk/openai-compatible",
+      "name": "Codex Proxy",
+      "options": {
+        "baseURL": "http://localhost:8080/v1",
+        "apiKey": "pwd"
+      },
+      "models": {
+        "codex": {
+          "name": "Codex (GPT-5.3)",
+          "attachment": true,
+          "limit": {
+            "context": 200000,
+            "output": 65536
+          }
+        }
+      }
+    }
+  }
+}

package-lock.json

@@ -12,7 +12,6 @@
         "@hono/node-server": "^1.0.0",
         "hono": "^4.0.0",
         "js-yaml": "^4.1.0",
-        "koffi": "^2.15.1",
         "undici": "^7.0.0",
         "zod": "^3.23.0"
       },
@@ -22,7 +21,8 @@
         "@types/node": "^22.0.0",
         "js-beautify": "^1.15.0",
         "tsx": "^4.0.0",
-        "typescript": "^5.5.0"
+        "typescript": "^5.5.0",
+        "vitest": "^3.2.4"
       },
       "optionalDependencies": {
         "koffi": "^2.15.1"
@@ -518,39 +518,536 @@
         "node": ">=12"
       }
     },
+    "node_modules/@jridgewell/sourcemap-codec": {
+      "version": "1.5.5",
+      "resolved": "https://registry.npmmirror.com/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz",
+      "integrity": "sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/@one-ini/wasm": {
       "version": "0.1.1",
       "resolved": "https://registry.npmmirror.com/@one-ini/wasm/-/wasm-0.1.1.tgz",
       "integrity": "sha512-XuySG1E38YScSJoMlqovLru4KTUNSjgVTIjyh7qMX6aNN5HY5Ct5LhRJdxO79JtTzKfzV/bnWpz+zquYrISsvw==",
       "dev": true,
-      "license": "MIT"
+      "license": "MIT"
+    },
+    "node_modules/@pkgjs/parseargs": {
+      "version": "0.11.0",
+      "resolved": "https://registry.npmmirror.com/@pkgjs/parseargs/-/parseargs-0.11.0.tgz",
+      "integrity": "sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "engines": {
+        "node": ">=14"
+      }
+    },
+    "node_modules/@rollup/rollup-android-arm-eabi": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-android-arm-eabi/-/rollup-android-arm-eabi-4.59.0.tgz",
+      "integrity": "sha512-upnNBkA6ZH2VKGcBj9Fyl9IGNPULcjXRlg0LLeaioQWueH30p6IXtJEbKAgvyv+mJaMxSm1l6xwDXYjpEMiLMg==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ]
+    },
+    "node_modules/@rollup/rollup-android-arm64": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-android-arm64/-/rollup-android-arm64-4.59.0.tgz",
+      "integrity": "sha512-hZ+Zxj3SySm4A/DylsDKZAeVg0mvi++0PYVceVyX7hemkw7OreKdCvW2oQ3T1FMZvCaQXqOTHb8qmBShoqk69Q==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ]
+    },
+    "node_modules/@rollup/rollup-darwin-arm64": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-darwin-arm64/-/rollup-darwin-arm64-4.59.0.tgz",
+      "integrity": "sha512-W2Psnbh1J8ZJw0xKAd8zdNgF9HRLkdWwwdWqubSVk0pUuQkoHnv7rx4GiF9rT4t5DIZGAsConRE3AxCdJ4m8rg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@rollup/rollup-darwin-x64": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-darwin-x64/-/rollup-darwin-x64-4.59.0.tgz",
+      "integrity": "sha512-ZW2KkwlS4lwTv7ZVsYDiARfFCnSGhzYPdiOU4IM2fDbL+QGlyAbjgSFuqNRbSthybLbIJ915UtZBtmuLrQAT/w==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@rollup/rollup-freebsd-arm64": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-freebsd-arm64/-/rollup-freebsd-arm64-4.59.0.tgz",
+      "integrity": "sha512-EsKaJ5ytAu9jI3lonzn3BgG8iRBjV4LxZexygcQbpiU0wU0ATxhNVEpXKfUa0pS05gTcSDMKpn3Sx+QB9RlTTA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ]
+    },
+    "node_modules/@rollup/rollup-freebsd-x64": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-freebsd-x64/-/rollup-freebsd-x64-4.59.0.tgz",
+      "integrity": "sha512-d3DuZi2KzTMjImrxoHIAODUZYoUUMsuUiY4SRRcJy6NJoZ6iIqWnJu9IScV9jXysyGMVuW+KNzZvBLOcpdl3Vg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-arm-gnueabihf": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-arm-gnueabihf/-/rollup-linux-arm-gnueabihf-4.59.0.tgz",
+      "integrity": "sha512-t4ONHboXi/3E0rT6OZl1pKbl2Vgxf9vJfWgmUoCEVQVxhW6Cw/c8I6hbbu7DAvgp82RKiH7TpLwxnJeKv2pbsw==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-arm-musleabihf": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-arm-musleabihf/-/rollup-linux-arm-musleabihf-4.59.0.tgz",
+      "integrity": "sha512-CikFT7aYPA2ufMD086cVORBYGHffBo4K8MQ4uPS/ZnY54GKj36i196u8U+aDVT2LX4eSMbyHtyOh7D7Zvk2VvA==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-arm64-gnu": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-arm64-gnu/-/rollup-linux-arm64-gnu-4.59.0.tgz",
+      "integrity": "sha512-jYgUGk5aLd1nUb1CtQ8E+t5JhLc9x5WdBKew9ZgAXg7DBk0ZHErLHdXM24rfX+bKrFe+Xp5YuJo54I5HFjGDAA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-arm64-musl": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-arm64-musl/-/rollup-linux-arm64-musl-4.59.0.tgz",
+      "integrity": "sha512-peZRVEdnFWZ5Bh2KeumKG9ty7aCXzzEsHShOZEFiCQlDEepP1dpUl/SrUNXNg13UmZl+gzVDPsiCwnV1uI0RUA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-loong64-gnu": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-loong64-gnu/-/rollup-linux-loong64-gnu-4.59.0.tgz",
+      "integrity": "sha512-gbUSW/97f7+r4gHy3Jlup8zDG190AuodsWnNiXErp9mT90iCy9NKKU0Xwx5k8VlRAIV2uU9CsMnEFg/xXaOfXg==",
+      "cpu": [
+        "loong64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-loong64-musl": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-loong64-musl/-/rollup-linux-loong64-musl-4.59.0.tgz",
+      "integrity": "sha512-yTRONe79E+o0FWFijasoTjtzG9EBedFXJMl888NBEDCDV9I2wGbFFfJQQe63OijbFCUZqxpHz1GzpbtSFikJ4Q==",
+      "cpu": [
+        "loong64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-ppc64-gnu": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-ppc64-gnu/-/rollup-linux-ppc64-gnu-4.59.0.tgz",
+      "integrity": "sha512-sw1o3tfyk12k3OEpRddF68a1unZ5VCN7zoTNtSn2KndUE+ea3m3ROOKRCZxEpmT9nsGnogpFP9x6mnLTCaoLkA==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-ppc64-musl": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-ppc64-musl/-/rollup-linux-ppc64-musl-4.59.0.tgz",
+      "integrity": "sha512-+2kLtQ4xT3AiIxkzFVFXfsmlZiG5FXYW7ZyIIvGA7Bdeuh9Z0aN4hVyXS/G1E9bTP/vqszNIN/pUKCk/BTHsKA==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-riscv64-gnu": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-riscv64-gnu/-/rollup-linux-riscv64-gnu-4.59.0.tgz",
+      "integrity": "sha512-NDYMpsXYJJaj+I7UdwIuHHNxXZ/b/N2hR15NyH3m2qAtb/hHPA4g4SuuvrdxetTdndfj9b1WOmy73kcPRoERUg==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-riscv64-musl": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-riscv64-musl/-/rollup-linux-riscv64-musl-4.59.0.tgz",
+      "integrity": "sha512-nLckB8WOqHIf1bhymk+oHxvM9D3tyPndZH8i8+35p/1YiVoVswPid2yLzgX7ZJP0KQvnkhM4H6QZ5m0LzbyIAg==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-s390x-gnu": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-s390x-gnu/-/rollup-linux-s390x-gnu-4.59.0.tgz",
+      "integrity": "sha512-oF87Ie3uAIvORFBpwnCvUzdeYUqi2wY6jRFWJAy1qus/udHFYIkplYRW+wo+GRUP4sKzYdmE1Y3+rY5Gc4ZO+w==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-x64-gnu": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-x64-gnu/-/rollup-linux-x64-gnu-4.59.0.tgz",
+      "integrity": "sha512-3AHmtQq/ppNuUspKAlvA8HtLybkDflkMuLK4DPo77DfthRb71V84/c4MlWJXixZz4uruIH4uaa07IqoAkG64fg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-x64-musl": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-linux-x64-musl/-/rollup-linux-x64-musl-4.59.0.tgz",
+      "integrity": "sha512-2UdiwS/9cTAx7qIUZB/fWtToJwvt0Vbo0zmnYt7ED35KPg13Q0ym1g442THLC7VyI6JfYTP4PiSOWyoMdV2/xg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-openbsd-x64": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-openbsd-x64/-/rollup-openbsd-x64-4.59.0.tgz",
+      "integrity": "sha512-M3bLRAVk6GOwFlPTIxVBSYKUaqfLrn8l0psKinkCFxl4lQvOSz8ZrKDz2gxcBwHFpci0B6rttydI4IpS4IS/jQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ]
+    },
+    "node_modules/@rollup/rollup-openharmony-arm64": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-openharmony-arm64/-/rollup-openharmony-arm64-4.59.0.tgz",
+      "integrity": "sha512-tt9KBJqaqp5i5HUZzoafHZX8b5Q2Fe7UjYERADll83O4fGqJ49O1FsL6LpdzVFQcpwvnyd0i+K/VSwu/o/nWlA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openharmony"
+      ]
+    },
+    "node_modules/@rollup/rollup-win32-arm64-msvc": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-win32-arm64-msvc/-/rollup-win32-arm64-msvc-4.59.0.tgz",
+      "integrity": "sha512-V5B6mG7OrGTwnxaNUzZTDTjDS7F75PO1ae6MJYdiMu60sq0CqN5CVeVsbhPxalupvTX8gXVSU9gq+Rx1/hvu6A==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@rollup/rollup-win32-ia32-msvc": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-win32-ia32-msvc/-/rollup-win32-ia32-msvc-4.59.0.tgz",
+      "integrity": "sha512-UKFMHPuM9R0iBegwzKF4y0C4J9u8C6MEJgFuXTBerMk7EJ92GFVFYBfOZaSGLu6COf7FxpQNqhNS4c4icUPqxA==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@rollup/rollup-win32-x64-gnu": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-win32-x64-gnu/-/rollup-win32-x64-gnu-4.59.0.tgz",
+      "integrity": "sha512-laBkYlSS1n2L8fSo1thDNGrCTQMmxjYY5G0WFWjFFYZkKPjsMBsgJfGf4TLxXrF6RyhI60L8TMOjBMvXiTcxeA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@rollup/rollup-win32-x64-msvc": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/@rollup/rollup-win32-x64-msvc/-/rollup-win32-x64-msvc-4.59.0.tgz",
+      "integrity": "sha512-2HRCml6OztYXyJXAvdDXPKcawukWY2GpR5/nxKp4iBgiO3wcoEGkAaqctIbZcNB6KlUQBIqt8VYkNSj2397EfA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@types/chai": {
+      "version": "5.2.3",
+      "resolved": "https://registry.npmmirror.com/@types/chai/-/chai-5.2.3.tgz",
+      "integrity": "sha512-Mw558oeA9fFbv65/y4mHtXDs9bPnFMZAL/jxdPFUpOHHIXX91mcgEHbS5Lahr+pwZFR8A7GQleRWeI6cGFC2UA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/deep-eql": "*",
+        "assertion-error": "^2.0.1"
+      }
+    },
+    "node_modules/@types/deep-eql": {
+      "version": "4.0.2",
+      "resolved": "https://registry.npmmirror.com/@types/deep-eql/-/deep-eql-4.0.2.tgz",
+      "integrity": "sha512-c9h9dVVMigMPc4bwTvC5dxqtqJZwQPePsWjPlpSOnojbor6pGqdk541lfA7AqFQr5pB1BRdq0juY9db81BwyFw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/estree": {
+      "version": "1.0.8",
+      "resolved": "https://registry.npmmirror.com/@types/estree/-/estree-1.0.8.tgz",
+      "integrity": "sha512-dWHzHa2WqEXI/O1E9OjrocMTKJl2mSrEolh1Iomrv6U+JuNwaHXsXx9bLu5gG7BUWFIN0skIQJQ/L1rIex4X6w==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/js-yaml": {
+      "version": "4.0.9",
+      "resolved": "https://registry.npmmirror.com/@types/js-yaml/-/js-yaml-4.0.9.tgz",
+      "integrity": "sha512-k4MGaQl5TGo/iipqb2UDG2UwjXziSWkh0uysQelTlJpX1qGlpUZYm8PnO4DxG1qBomtJUdYJ6qR6xdIah10JLg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/node": {
+      "version": "22.19.11",
+      "resolved": "https://registry.npmmirror.com/@types/node/-/node-22.19.11.tgz",
+      "integrity": "sha512-BH7YwL6rA93ReqeQS1c4bsPpcfOmJasG+Fkr6Y59q83f9M1WcBRHR2vM+P9eOisYRcN3ujQoiZY8uk5W+1WL8w==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "undici-types": "~6.21.0"
+      }
+    },
+    "node_modules/@vitest/expect": {
+      "version": "3.2.4",
+      "resolved": "https://registry.npmmirror.com/@vitest/expect/-/expect-3.2.4.tgz",
+      "integrity": "sha512-Io0yyORnB6sikFlt8QW5K7slY4OjqNX9jmJQ02QDda8lyM6B5oNgVWoSoKPac8/kgnCUzuHQKrSLtu/uOqqrig==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/chai": "^5.2.2",
+        "@vitest/spy": "3.2.4",
+        "@vitest/utils": "3.2.4",
+        "chai": "^5.2.0",
+        "tinyrainbow": "^2.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      }
+    },
+    "node_modules/@vitest/mocker": {
+      "version": "3.2.4",
+      "resolved": "https://registry.npmmirror.com/@vitest/mocker/-/mocker-3.2.4.tgz",
+      "integrity": "sha512-46ryTE9RZO/rfDd7pEqFl7etuyzekzEhUbTW3BvmeO/BcCMEgq59BKhek3dXDWgAj4oMK6OZi+vRr1wPW6qjEQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@vitest/spy": "3.2.4",
+        "estree-walker": "^3.0.3",
+        "magic-string": "^0.30.17"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      },
+      "peerDependencies": {
+        "msw": "^2.4.9",
+        "vite": "^5.0.0 || ^6.0.0 || ^7.0.0-0"
+      },
+      "peerDependenciesMeta": {
+        "msw": {
+          "optional": true
+        },
+        "vite": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/@vitest/pretty-format": {
+      "version": "3.2.4",
+      "resolved": "https://registry.npmmirror.com/@vitest/pretty-format/-/pretty-format-3.2.4.tgz",
+      "integrity": "sha512-IVNZik8IVRJRTr9fxlitMKeJeXFFFN0JaB9PHPGQ8NKQbGpfjlTx9zO4RefN8gp7eqjNy8nyK3NZmBzOPeIxtA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "tinyrainbow": "^2.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      }
+    },
+    "node_modules/@vitest/runner": {
+      "version": "3.2.4",
+      "resolved": "https://registry.npmmirror.com/@vitest/runner/-/runner-3.2.4.tgz",
+      "integrity": "sha512-oukfKT9Mk41LreEW09vt45f8wx7DordoWUZMYdY/cyAk7w5TWkTRCNZYF7sX7n2wB7jyGAl74OxgwhPgKaqDMQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@vitest/utils": "3.2.4",
+        "pathe": "^2.0.3",
+        "strip-literal": "^3.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      }
     },
-    "node_modules/@pkgjs/parseargs": {
-      "version": "0.11.0",
-      "resolved": "https://registry.npmmirror.com/@pkgjs/parseargs/-/parseargs-0.11.0.tgz",
-      "integrity": "sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==",
+    "node_modules/@vitest/snapshot": {
+      "version": "3.2.4",
+      "resolved": "https://registry.npmmirror.com/@vitest/snapshot/-/snapshot-3.2.4.tgz",
+      "integrity": "sha512-dEYtS7qQP2CjU27QBC5oUOxLE/v5eLkGqPE0ZKEIDGMs4vKWe7IjgLOeauHsR0D5YuuycGRO5oSRXnwnmA78fQ==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
-      "engines": {
-        "node": ">=14"
+      "dependencies": {
+        "@vitest/pretty-format": "3.2.4",
+        "magic-string": "^0.30.17",
+        "pathe": "^2.0.3"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
       }
     },
-    "node_modules/@types/js-yaml": {
-      "version": "4.0.9",
-      "resolved": "https://registry.npmmirror.com/@types/js-yaml/-/js-yaml-4.0.9.tgz",
-      "integrity": "sha512-k4MGaQl5TGo/iipqb2UDG2UwjXziSWkh0uysQelTlJpX1qGlpUZYm8PnO4DxG1qBomtJUdYJ6qR6xdIah10JLg==",
+    "node_modules/@vitest/spy": {
+      "version": "3.2.4",
+      "resolved": "https://registry.npmmirror.com/@vitest/spy/-/spy-3.2.4.tgz",
+      "integrity": "sha512-vAfasCOe6AIK70iP5UD11Ac4siNUNJ9i/9PZ3NKx07sG6sUxeag1LWdNrMWeKKYBLlzuK+Gn65Yd5nyL6ds+nw==",
       "dev": true,
-      "license": "MIT"
+      "license": "MIT",
+      "dependencies": {
+        "tinyspy": "^4.0.3"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      }
     },
-    "node_modules/@types/node": {
-      "version": "22.19.11",
-      "resolved": "https://registry.npmmirror.com/@types/node/-/node-22.19.11.tgz",
-      "integrity": "sha512-BH7YwL6rA93ReqeQS1c4bsPpcfOmJasG+Fkr6Y59q83f9M1WcBRHR2vM+P9eOisYRcN3ujQoiZY8uk5W+1WL8w==",
+    "node_modules/@vitest/utils": {
+      "version": "3.2.4",
+      "resolved": "https://registry.npmmirror.com/@vitest/utils/-/utils-3.2.4.tgz",
+      "integrity": "sha512-fB2V0JFrQSMsCo9HiSq3Ezpdv4iYaXRG1Sx8edX3MwxfyNn83mKiGzOcH+Fkxt4MHxr3y42fQi1oeAInqgX2QA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "undici-types": "~6.21.0"
+        "@vitest/pretty-format": "3.2.4",
+        "loupe": "^3.1.4",
+        "tinyrainbow": "^2.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
       }
     },
     "node_modules/abbrev": {
@@ -595,6 +1092,16 @@
       "integrity": "sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==",
       "license": "Python-2.0"
     },
+    "node_modules/assertion-error": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmmirror.com/assertion-error/-/assertion-error-2.0.1.tgz",
+      "integrity": "sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12"
+      }
+    },
     "node_modules/balanced-match": {
       "version": "1.0.2",
       "resolved": "https://registry.npmmirror.com/balanced-match/-/balanced-match-1.0.2.tgz",
@@ -613,6 +1120,43 @@
         "concat-map": "0.0.1"
       }
     },
+    "node_modules/cac": {
+      "version": "6.7.14",
+      "resolved": "https://registry.npmmirror.com/cac/-/cac-6.7.14.tgz",
+      "integrity": "sha512-b6Ilus+c3RrdDk+JhLKUAQfzzgLEPy6wcXqS7f/xe1EETvsDP6GORG7SFuOs6cID5YkqchW/LXZbX5bc8j7ZcQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/chai": {
+      "version": "5.3.3",
+      "resolved": "https://registry.npmmirror.com/chai/-/chai-5.3.3.tgz",
+      "integrity": "sha512-4zNhdJD/iOjSH0A05ea+Ke6MU5mmpQcbQsSOkgdaUMJ9zTlDTD/GYlwohmIE2u0gaxHYiVHEn1Fw9mZ/ktJWgw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "assertion-error": "^2.0.1",
+        "check-error": "^2.1.1",
+        "deep-eql": "^5.0.1",
+        "loupe": "^3.1.0",
+        "pathval": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/check-error": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmmirror.com/check-error/-/check-error-2.1.3.tgz",
+      "integrity": "sha512-PAJdDJusoxnwm1VwW07VWwUN1sl7smmC3OKggvndJFadxxDRyFJBX/ggnu/KE4kQAB7a3Dp8f/YXC1FlUprWmA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 16"
+      }
+    },
     "node_modules/color-convert": {
       "version": "2.0.1",
       "resolved": "https://registry.npmmirror.com/color-convert/-/color-convert-2.0.1.tgz",
@@ -676,6 +1220,34 @@
         "node": ">= 8"
       }
     },
+    "node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmmirror.com/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/deep-eql": {
+      "version": "5.0.2",
+      "resolved": "https://registry.npmmirror.com/deep-eql/-/deep-eql-5.0.2.tgz",
+      "integrity": "sha512-h5k/5U50IJJFpzfL6nO9jaaumfjO/f2NjK/oYB2Djzm4p9L+3T9qWpZqZ2hAbLPuuYq9wrU08WQyBTL5GbPk5Q==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      }
+    },
     "node_modules/eastasianwidth": {
       "version": "0.2.0",
       "resolved": "https://registry.npmmirror.com/eastasianwidth/-/eastasianwidth-0.2.0.tgz",
@@ -745,6 +1317,13 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/es-module-lexer": {
+      "version": "1.7.0",
+      "resolved": "https://registry.npmmirror.com/es-module-lexer/-/es-module-lexer-1.7.0.tgz",
+      "integrity": "sha512-jEQoCwk8hyb2AZziIOLhDqpm5+2ww5uIE6lkO/6jcOCusfk6LhMHpXXfBLXTZ7Ydyt0j4VoUQv6uGNYbdW+kBA==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/esbuild": {
       "version": "0.27.3",
       "resolved": "https://registry.npmmirror.com/esbuild/-/esbuild-0.27.3.tgz",
@@ -787,6 +1366,44 @@
         "@esbuild/win32-x64": "0.27.3"
       }
     },
+    "node_modules/estree-walker": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmmirror.com/estree-walker/-/estree-walker-3.0.3.tgz",
+      "integrity": "sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/estree": "^1.0.0"
+      }
+    },
+    "node_modules/expect-type": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmmirror.com/expect-type/-/expect-type-1.3.0.tgz",
+      "integrity": "sha512-knvyeauYhqjOYvQ66MznSMs83wmHrCycNEN6Ao+2AeYEfxUIkuiVxdEa1qlGEPK+We3n0THiDciYSsCcgW/DoA==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=12.0.0"
+      }
+    },
+    "node_modules/fdir": {
+      "version": "6.5.0",
+      "resolved": "https://registry.npmmirror.com/fdir/-/fdir-6.5.0.tgz",
+      "integrity": "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12.0.0"
+      },
+      "peerDependencies": {
+        "picomatch": "^3 || ^4"
+      },
+      "peerDependenciesMeta": {
+        "picomatch": {
+          "optional": true
+        }
+      }
+    },
     "node_modules/foreground-child": {
       "version": "3.3.1",
       "resolved": "https://registry.npmmirror.com/foreground-child/-/foreground-child-3.3.1.tgz",
@@ -1008,6 +1625,13 @@
         "node": ">=14"
       }
     },
+    "node_modules/js-tokens": {
+      "version": "9.0.1",
+      "resolved": "https://registry.npmmirror.com/js-tokens/-/js-tokens-9.0.1.tgz",
+      "integrity": "sha512-mxa9E9ITFOt0ban3j6L5MpjwegGz6lBQmM1IJkWeBZGcMxto50+eWdjC/52xDbS2vy0k7vIMK0Fe2wfL9OQSpQ==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/js-yaml": {
       "version": "4.1.1",
       "resolved": "https://registry.npmmirror.com/js-yaml/-/js-yaml-4.1.1.tgz",
@@ -1031,6 +1655,13 @@
         "url": "https://liberapay.com/Koromix"
       }
     },
+    "node_modules/loupe": {
+      "version": "3.2.1",
+      "resolved": "https://registry.npmmirror.com/loupe/-/loupe-3.2.1.tgz",
+      "integrity": "sha512-CdzqowRJCeLU72bHvWqwRBBlLcMEtIvGrlvef74kMnV2AolS9Y8xUv1I0U/MNAWMhBlKIoyuEgoJ0t/bbwHbLQ==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/lru-cache": {
       "version": "10.4.3",
       "resolved": "https://registry.npmmirror.com/lru-cache/-/lru-cache-10.4.3.tgz",
@@ -1038,6 +1669,16 @@
       "dev": true,
       "license": "ISC"
     },
+    "node_modules/magic-string": {
+      "version": "0.30.21",
+      "resolved": "https://registry.npmmirror.com/magic-string/-/magic-string-0.30.21.tgz",
+      "integrity": "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/sourcemap-codec": "^1.5.5"
+      }
+    },
     "node_modules/minimatch": {
       "version": "3.1.2",
       "resolved": "https://registry.npmmirror.com/minimatch/-/minimatch-3.1.2.tgz",
@@ -1061,6 +1702,32 @@
         "node": ">=16 || 14 >=14.17"
       }
     },
+    "node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmmirror.com/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/nanoid": {
+      "version": "3.3.11",
+      "resolved": "https://registry.npmmirror.com/nanoid/-/nanoid-3.3.11.tgz",
+      "integrity": "sha512-N8SpfPUnUp1bK+PMYW8qSWdl9U+wwNWI4QKxOYDy9JAro3WMX7p2OeVRF9v+347pnakNevPmiHhNmZ2HbFA76w==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "bin": {
+        "nanoid": "bin/nanoid.cjs"
+      },
+      "engines": {
+        "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1"
+      }
+    },
     "node_modules/nopt": {
       "version": "7.2.1",
       "resolved": "https://registry.npmmirror.com/nopt/-/nopt-7.2.1.tgz",
@@ -1131,6 +1798,72 @@
         "url": "https://github.com/sponsors/isaacs"
       }
     },
+    "node_modules/pathe": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmmirror.com/pathe/-/pathe-2.0.3.tgz",
+      "integrity": "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/pathval": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmmirror.com/pathval/-/pathval-2.0.1.tgz",
+      "integrity": "sha512-//nshmD55c46FuFw26xV/xFAaB5HF9Xdap7HJBBnrKdAd6/GxDBaNA1870O79+9ueg61cZLSVc+OaFlfmObYVQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 14.16"
+      }
+    },
+    "node_modules/picocolors": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmmirror.com/picocolors/-/picocolors-1.1.1.tgz",
+      "integrity": "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==",
+      "dev": true,
+      "license": "ISC"
+    },
+    "node_modules/picomatch": {
+      "version": "4.0.3",
+      "resolved": "https://registry.npmmirror.com/picomatch/-/picomatch-4.0.3.tgz",
+      "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/jonschlinkert"
+      }
+    },
+    "node_modules/postcss": {
+      "version": "8.5.6",
+      "resolved": "https://registry.npmmirror.com/postcss/-/postcss-8.5.6.tgz",
+      "integrity": "sha512-3Ybi1tAuwAP9s0r1UQ2J4n5Y0G05bJkpUIO0/bI9MhwmD70S5aTWbXGBwxHrelT+XM1k6dM0pk+SwNkpTRN7Pg==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/postcss/"
+        },
+        {
+          "type": "tidelift",
+          "url": "https://tidelift.com/funding/github/npm/postcss"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "nanoid": "^3.3.11",
+        "picocolors": "^1.1.1",
+        "source-map-js": "^1.2.1"
+      },
+      "engines": {
+        "node": "^10 || ^12 || >=14"
+      }
+    },
     "node_modules/proto-list": {
       "version": "1.2.4",
       "resolved": "https://registry.npmmirror.com/proto-list/-/proto-list-1.2.4.tgz",
@@ -1148,6 +1881,51 @@
         "url": "https://github.com/privatenumber/resolve-pkg-maps?sponsor=1"
       }
     },
+    "node_modules/rollup": {
+      "version": "4.59.0",
+      "resolved": "https://registry.npmmirror.com/rollup/-/rollup-4.59.0.tgz",
+      "integrity": "sha512-2oMpl67a3zCH9H79LeMcbDhXW/UmWG/y2zuqnF2jQq5uq9TbM9TVyXvA4+t+ne2IIkBdrLpAaRQAvo7YI/Yyeg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/estree": "1.0.8"
+      },
+      "bin": {
+        "rollup": "dist/bin/rollup"
+      },
+      "engines": {
+        "node": ">=18.0.0",
+        "npm": ">=8.0.0"
+      },
+      "optionalDependencies": {
+        "@rollup/rollup-android-arm-eabi": "4.59.0",
+        "@rollup/rollup-android-arm64": "4.59.0",
+        "@rollup/rollup-darwin-arm64": "4.59.0",
+        "@rollup/rollup-darwin-x64": "4.59.0",
+        "@rollup/rollup-freebsd-arm64": "4.59.0",
+        "@rollup/rollup-freebsd-x64": "4.59.0",
+        "@rollup/rollup-linux-arm-gnueabihf": "4.59.0",
+        "@rollup/rollup-linux-arm-musleabihf": "4.59.0",
+        "@rollup/rollup-linux-arm64-gnu": "4.59.0",
+        "@rollup/rollup-linux-arm64-musl": "4.59.0",
+        "@rollup/rollup-linux-loong64-gnu": "4.59.0",
+        "@rollup/rollup-linux-loong64-musl": "4.59.0",
+        "@rollup/rollup-linux-ppc64-gnu": "4.59.0",
+        "@rollup/rollup-linux-ppc64-musl": "4.59.0",
+        "@rollup/rollup-linux-riscv64-gnu": "4.59.0",
+        "@rollup/rollup-linux-riscv64-musl": "4.59.0",
+        "@rollup/rollup-linux-s390x-gnu": "4.59.0",
+        "@rollup/rollup-linux-x64-gnu": "4.59.0",
+        "@rollup/rollup-linux-x64-musl": "4.59.0",
+        "@rollup/rollup-openbsd-x64": "4.59.0",
+        "@rollup/rollup-openharmony-arm64": "4.59.0",
+        "@rollup/rollup-win32-arm64-msvc": "4.59.0",
+        "@rollup/rollup-win32-ia32-msvc": "4.59.0",
+        "@rollup/rollup-win32-x64-gnu": "4.59.0",
+        "@rollup/rollup-win32-x64-msvc": "4.59.0",
+        "fsevents": "~2.3.2"
+      }
+    },
     "node_modules/semver": {
       "version": "7.7.4",
       "resolved": "https://registry.npmmirror.com/semver/-/semver-7.7.4.tgz",
@@ -1184,6 +1962,13 @@
         "node": ">=8"
       }
     },
+    "node_modules/siginfo": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmmirror.com/siginfo/-/siginfo-2.0.0.tgz",
+      "integrity": "sha512-ybx0WO1/8bSBLEWXZvEd7gMW3Sn3JFlW3TvX1nREbDLRNQNaeNN8WK0meBwPdAaOI7TtRRRJn/Es1zhrrCHu7g==",
+      "dev": true,
+      "license": "ISC"
+    },
     "node_modules/signal-exit": {
       "version": "4.1.0",
       "resolved": "https://registry.npmmirror.com/signal-exit/-/signal-exit-4.1.0.tgz",
@@ -1197,6 +1982,30 @@
         "url": "https://github.com/sponsors/isaacs"
       }
     },
+    "node_modules/source-map-js": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmmirror.com/source-map-js/-/source-map-js-1.2.1.tgz",
+      "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/stackback": {
+      "version": "0.0.2",
+      "resolved": "https://registry.npmmirror.com/stackback/-/stackback-0.0.2.tgz",
+      "integrity": "sha512-1XMJE5fQo1jGH6Y/7ebnwPOBEkIEnT4QF32d5R1+VXdXveM0IBMJt8zfaxX1P3QhVwrYe+576+jkANtSS2mBbw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/std-env": {
+      "version": "3.10.0",
+      "resolved": "https://registry.npmmirror.com/std-env/-/std-env-3.10.0.tgz",
+      "integrity": "sha512-5GS12FdOZNliM5mAOxFRg7Ir0pWz8MdpYm6AY6VPkGpbA7ZzmbzNcBJQ0GPvvyWgcY7QAhCgf9Uy89I03faLkg==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/string-width": {
       "version": "5.1.2",
       "resolved": "https://registry.npmmirror.com/string-width/-/string-width-5.1.2.tgz",
@@ -1301,6 +2110,80 @@
         "node": ">=8"
       }
     },
+    "node_modules/strip-literal": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmmirror.com/strip-literal/-/strip-literal-3.1.0.tgz",
+      "integrity": "sha512-8r3mkIM/2+PpjHoOtiAW8Rg3jJLHaV7xPwG+YRGrv6FP0wwk/toTpATxWYOW0BKdWwl82VT2tFYi5DlROa0Mxg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "js-tokens": "^9.0.1"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/antfu"
+      }
+    },
+    "node_modules/tinybench": {
+      "version": "2.9.0",
+      "resolved": "https://registry.npmmirror.com/tinybench/-/tinybench-2.9.0.tgz",
+      "integrity": "sha512-0+DUvqWMValLmha6lr4kD8iAMK1HzV0/aKnCtWb9v9641TnP/MFb7Pc2bxoxQjTXAErryXVgUOfv2YqNllqGeg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/tinyexec": {
+      "version": "0.3.2",
+      "resolved": "https://registry.npmmirror.com/tinyexec/-/tinyexec-0.3.2.tgz",
+      "integrity": "sha512-KQQR9yN7R5+OSwaK0XQoj22pwHoTlgYqmUscPYoknOoWCWfj/5/ABTMRi69FrKU5ffPVh5QcFikpWJI/P1ocHA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/tinyglobby": {
+      "version": "0.2.15",
+      "resolved": "https://registry.npmmirror.com/tinyglobby/-/tinyglobby-0.2.15.tgz",
+      "integrity": "sha512-j2Zq4NyQYG5XMST4cbs02Ak8iJUdxRM0XI5QyxXuZOzKOINmWurp3smXu3y5wDcJrptwpSjgXHzIQxR0omXljQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "fdir": "^6.5.0",
+        "picomatch": "^4.0.3"
+      },
+      "engines": {
+        "node": ">=12.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/SuperchupuDev"
+      }
+    },
+    "node_modules/tinypool": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmmirror.com/tinypool/-/tinypool-1.1.1.tgz",
+      "integrity": "sha512-Zba82s87IFq9A9XmjiX5uZA/ARWDrB03OHlq+Vw1fSdt0I+4/Kutwy8BP4Y/y/aORMo61FQ0vIb5j44vSo5Pkg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": "^18.0.0 || >=20.0.0"
+      }
+    },
+    "node_modules/tinyrainbow": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmmirror.com/tinyrainbow/-/tinyrainbow-2.0.0.tgz",
+      "integrity": "sha512-op4nsTR47R6p0vMUUoYl/a+ljLFVtlfaXkLQmqfLR1qHma1h/ysYk4hEXZ880bf2CYgTskvTa/e196Vd5dDQXw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=14.0.0"
+      }
+    },
+    "node_modules/tinyspy": {
+      "version": "4.0.4",
+      "resolved": "https://registry.npmmirror.com/tinyspy/-/tinyspy-4.0.4.tgz",
+      "integrity": "sha512-azl+t0z7pw/z958Gy9svOTuzqIk6xq+NSheJzn5MMWtWTFywIacg2wUlzKFGtt3cthx0r2SxMK0yzJOR0IES7Q==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=14.0.0"
+      }
+    },
     "node_modules/tsx": {
       "version": "4.21.0",
       "resolved": "https://registry.npmmirror.com/tsx/-/tsx-4.21.0.tgz",
@@ -1351,6 +2234,177 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/vite": {
+      "version": "7.3.1",
+      "resolved": "https://registry.npmmirror.com/vite/-/vite-7.3.1.tgz",
+      "integrity": "sha512-w+N7Hifpc3gRjZ63vYBXA56dvvRlNWRczTdmCBBa+CotUzAPf5b7YMdMR/8CQoeYE5LX3W4wj6RYTgonm1b9DA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "esbuild": "^0.27.0",
+        "fdir": "^6.5.0",
+        "picomatch": "^4.0.3",
+        "postcss": "^8.5.6",
+        "rollup": "^4.43.0",
+        "tinyglobby": "^0.2.15"
+      },
+      "bin": {
+        "vite": "bin/vite.js"
+      },
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      },
+      "funding": {
+        "url": "https://github.com/vitejs/vite?sponsor=1"
+      },
+      "optionalDependencies": {
+        "fsevents": "~2.3.3"
+      },
+      "peerDependencies": {
+        "@types/node": "^20.19.0 || >=22.12.0",
+        "jiti": ">=1.21.0",
+        "less": "^4.0.0",
+        "lightningcss": "^1.21.0",
+        "sass": "^1.70.0",
+        "sass-embedded": "^1.70.0",
+        "stylus": ">=0.54.8",
+        "sugarss": "^5.0.0",
+        "terser": "^5.16.0",
+        "tsx": "^4.8.1",
+        "yaml": "^2.4.2"
+      },
+      "peerDependenciesMeta": {
+        "@types/node": {
+          "optional": true
+        },
+        "jiti": {
+          "optional": true
+        },
+        "less": {
+          "optional": true
+        },
+        "lightningcss": {
+          "optional": true
+        },
+        "sass": {
+          "optional": true
+        },
+        "sass-embedded": {
+          "optional": true
+        },
+        "stylus": {
+          "optional": true
+        },
+        "sugarss": {
+          "optional": true
+        },
+        "terser": {
+          "optional": true
+        },
+        "tsx": {
+          "optional": true
+        },
+        "yaml": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/vite-node": {
+      "version": "3.2.4",
+      "resolved": "https://registry.npmmirror.com/vite-node/-/vite-node-3.2.4.tgz",
+      "integrity": "sha512-EbKSKh+bh1E1IFxeO0pg1n4dvoOTt0UDiXMd/qn++r98+jPO1xtJilvXldeuQ8giIB5IkpjCgMleHMNEsGH6pg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "cac": "^6.7.14",
+        "debug": "^4.4.1",
+        "es-module-lexer": "^1.7.0",
+        "pathe": "^2.0.3",
+        "vite": "^5.0.0 || ^6.0.0 || ^7.0.0-0"
+      },
+      "bin": {
+        "vite-node": "vite-node.mjs"
+      },
+      "engines": {
+        "node": "^18.0.0 || ^20.0.0 || >=22.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      }
+    },
+    "node_modules/vitest": {
+      "version": "3.2.4",
+      "resolved": "https://registry.npmmirror.com/vitest/-/vitest-3.2.4.tgz",
+      "integrity": "sha512-LUCP5ev3GURDysTWiP47wRRUpLKMOfPh+yKTx3kVIEiu5KOMeqzpnYNsKyOoVrULivR8tLcks4+lga33Whn90A==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/chai": "^5.2.2",
+        "@vitest/expect": "3.2.4",
+        "@vitest/mocker": "3.2.4",
+        "@vitest/pretty-format": "^3.2.4",
+        "@vitest/runner": "3.2.4",
+        "@vitest/snapshot": "3.2.4",
+        "@vitest/spy": "3.2.4",
+        "@vitest/utils": "3.2.4",
+        "chai": "^5.2.0",
+        "debug": "^4.4.1",
+        "expect-type": "^1.2.1",
+        "magic-string": "^0.30.17",
+        "pathe": "^2.0.3",
+        "picomatch": "^4.0.2",
+        "std-env": "^3.9.0",
+        "tinybench": "^2.9.0",
+        "tinyexec": "^0.3.2",
+        "tinyglobby": "^0.2.14",
+        "tinypool": "^1.1.1",
+        "tinyrainbow": "^2.0.0",
+        "vite": "^5.0.0 || ^6.0.0 || ^7.0.0-0",
+        "vite-node": "3.2.4",
+        "why-is-node-running": "^2.3.0"
+      },
+      "bin": {
+        "vitest": "vitest.mjs"
+      },
+      "engines": {
+        "node": "^18.0.0 || ^20.0.0 || >=22.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      },
+      "peerDependencies": {
+        "@edge-runtime/vm": "*",
+        "@types/debug": "^4.1.12",
+        "@types/node": "^18.0.0 || ^20.0.0 || >=22.0.0",
+        "@vitest/browser": "3.2.4",
+        "@vitest/ui": "3.2.4",
+        "happy-dom": "*",
+        "jsdom": "*"
+      },
+      "peerDependenciesMeta": {
+        "@edge-runtime/vm": {
+          "optional": true
+        },
+        "@types/debug": {
+          "optional": true
+        },
+        "@types/node": {
+          "optional": true
+        },
+        "@vitest/browser": {
+          "optional": true
+        },
+        "@vitest/ui": {
+          "optional": true
+        },
+        "happy-dom": {
+          "optional": true
+        },
+        "jsdom": {
+          "optional": true
+        }
+      }
+    },
     "node_modules/which": {
       "version": "2.0.2",
       "resolved": "https://registry.npmmirror.com/which/-/which-2.0.2.tgz",
@@ -1367,6 +2421,23 @@
         "node": ">= 8"
       }
     },
+    "node_modules/why-is-node-running": {
+      "version": "2.3.0",
+      "resolved": "https://registry.npmmirror.com/why-is-node-running/-/why-is-node-running-2.3.0.tgz",
+      "integrity": "sha512-hUrmaWBdVDcxvYqnyh09zunKzROWjbZTiNy8dBEjkS7ehEDQibXJ7XvlmtbwuTclUiIyN+CyXQD4Vmko8fNm8w==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "siginfo": "^2.0.0",
+        "stackback": "0.0.2"
+      },
+      "bin": {
+        "why-is-node-running": "cli.js"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
     "node_modules/wrap-ansi": {
       "version": "8.1.0",
       "resolved": "https://registry.npmmirror.com/wrap-ansi/-/wrap-ansi-8.1.0.tgz",

package.json

@@ -4,6 +4,8 @@
   "description": "Reverse proxy that exposes Codex Desktop Responses API as OpenAI-compatible /v1/chat/completions",
   "type": "module",
   "scripts": {
+    "test": "vitest run",
+    "test:watch": "vitest",
     "dev": "tsx watch src/index.ts",
     "dev:web": "cd web && npx vite",
     "build:web": "cd web && npx vite build",
@@ -34,6 +36,7 @@
     "@types/node": "^22.0.0",
     "js-beautify": "^1.15.0",
     "tsx": "^4.0.0",
-    "typescript": "^5.5.0"
+    "typescript": "^5.5.0",
+    "vitest": "^3.2.4"
   }
 }

src/auth/__tests__/account-pool.test.ts

@@ -0,0 +1,292 @@
+/**
+ * Tests for AccountPool core scheduling logic.
+ *
+ * Uses vi.mock to stub filesystem and JWT utilities so tests run
+ * without actual data files or valid JWT tokens.
+ */
+
+import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
+
+// Mock fs before importing AccountPool
+vi.mock("fs", () => ({
+  readFileSync: vi.fn(() => { throw new Error("ENOENT"); }),
+  writeFileSync: vi.fn(),
+  renameSync: vi.fn(),
+  existsSync: vi.fn(() => false),
+  mkdirSync: vi.fn(),
+}));
+
+// Mock config
+vi.mock("../../config.js", () => ({
+  getConfig: vi.fn(() => ({
+    auth: {
+      jwt_token: null,
+      rotation_strategy: "least_used",
+      rate_limit_backoff_seconds: 60,
+    },
+    server: {
+      proxy_api_key: null,
+    },
+  })),
+}));
+
+// Mock JWT utilities — all tokens are "valid"
+vi.mock("../jwt-utils.js", () => ({
+  decodeJwtPayload: vi.fn(() => ({ exp: Math.floor(Date.now() / 1000) + 3600 })),
+  extractChatGptAccountId: vi.fn((token: string) => `acct-${token.slice(0, 8)}`),
+  extractUserProfile: vi.fn((token: string) => ({
+    email: `${token.slice(0, 4)}@test.com`,
+    chatgpt_plan_type: "free",
+  })),
+  isTokenExpired: vi.fn(() => false),
+}));
+
+// Mock jitter to return the exact value (no randomness in tests)
+vi.mock("../../utils/jitter.js", () => ({
+  jitter: vi.fn((val: number) => val),
+}));
+
+import { AccountPool } from "../account-pool.js";
+import { getConfig } from "../../config.js";
+import { isTokenExpired } from "../jwt-utils.js";
+
+describe("AccountPool", () => {
+  let pool: AccountPool;
+
+  beforeEach(() => {
+    // Reset mock implementations to defaults (clearAllMocks only clears call history)
+    vi.mocked(isTokenExpired).mockReturnValue(false);
+    vi.mocked(getConfig).mockReturnValue({
+      auth: {
+        jwt_token: null,
+        rotation_strategy: "least_used",
+        rate_limit_backoff_seconds: 60,
+      },
+      server: { proxy_api_key: null },
+    } as ReturnType<typeof getConfig>);
+    pool = new AccountPool();
+  });
+
+  afterEach(() => {
+    pool.destroy();
+  });
+
+  describe("addAccount + acquire", () => {
+    it("adds an account and acquires it", () => {
+      pool.addAccount("token-aaa");
+
+      const acquired = pool.acquire();
+      expect(acquired).not.toBeNull();
+      expect(acquired!.token).toBe("token-aaa");
+    });
+
+    it("deduplicates by accountId", () => {
+      const id1 = pool.addAccount("token-aaa");
+      const id2 = pool.addAccount("token-aaa"); // same prefix → same accountId
+
+      expect(id1).toBe(id2);
+    });
+
+    it("returns null when no accounts exist", () => {
+      expect(pool.acquire()).toBeNull();
+    });
+  });
+
+  describe("least_used rotation", () => {
+    it("selects the account with lowest request_count", () => {
+      pool.addAccount("token-aaa");
+      pool.addAccount("token-bbb");
+
+      // Use account A once
+      const first = pool.acquire()!;
+      pool.release(first.entryId, { input_tokens: 10, output_tokens: 5 });
+
+      // Next acquire should pick the other account (0 requests)
+      const second = pool.acquire()!;
+      expect(second.entryId).not.toBe(first.entryId);
+    });
+  });
+
+  describe("round_robin rotation", () => {
+    it("cycles through accounts in order", () => {
+      vi.mocked(getConfig).mockReturnValue({
+        auth: {
+          jwt_token: null,
+          rotation_strategy: "round_robin",
+          rate_limit_backoff_seconds: 60,
+        },
+        server: { proxy_api_key: null },
+      } as ReturnType<typeof getConfig>);
+
+      // Create a fresh pool with round_robin config
+      const rrPool = new AccountPool();
+      rrPool.addAccount("token-aaa");
+      rrPool.addAccount("token-bbb");
+
+      const a1 = rrPool.acquire()!;
+      rrPool.release(a1.entryId);
+
+      const a2 = rrPool.acquire()!;
+      rrPool.release(a2.entryId);
+
+      const a3 = rrPool.acquire()!;
+      rrPool.release(a3.entryId);
+
+      // a3 should wrap around to same as a1
+      expect(a3.entryId).toBe(a1.entryId);
+      expect(a1.entryId).not.toBe(a2.entryId);
+
+      rrPool.destroy();
+    });
+  });
+
+  describe("release", () => {
+    it("increments request_count and token usage", () => {
+      pool.addAccount("token-aaa");
+
+      const acquired = pool.acquire()!;
+      pool.release(acquired.entryId, { input_tokens: 100, output_tokens: 50 });
+
+      const accounts = pool.getAccounts();
+      expect(accounts[0].usage.request_count).toBe(1);
+      expect(accounts[0].usage.input_tokens).toBe(100);
+      expect(accounts[0].usage.output_tokens).toBe(50);
+      expect(accounts[0].usage.last_used).not.toBeNull();
+    });
+
+    it("unlocks account after release", () => {
+      pool.addAccount("token-aaa");
+
+      const a1 = pool.acquire()!;
+      // While locked, acquire returns null (only 1 account)
+      expect(pool.acquire()).toBeNull();
+
+      pool.release(a1.entryId);
+      // After release, can acquire again
+      expect(pool.acquire()).not.toBeNull();
+    });
+  });
+
+  describe("markRateLimited", () => {
+    it("marks account as rate_limited and skips it in acquire", () => {
+      pool.addAccount("token-aaa");
+      pool.addAccount("token-bbb");
+
+      const first = pool.acquire()!;
+      pool.markRateLimited(first.entryId);
+
+      // Pool summary should show 1 rate_limited
+      const summary = pool.getPoolSummary();
+      expect(summary.rate_limited).toBe(1);
+      expect(summary.active).toBe(1);
+
+      // Next acquire should skip the rate-limited account
+      const second = pool.acquire()!;
+      expect(second.entryId).not.toBe(first.entryId);
+    });
+
+    it("countRequest option increments usage on 429", () => {
+      pool.addAccount("token-aaa");
+
+      const acquired = pool.acquire()!;
+      pool.markRateLimited(acquired.entryId, { countRequest: true });
+
+      const accounts = pool.getAccounts();
+      expect(accounts[0].usage.request_count).toBe(1);
+    });
+
+    it("auto-recovers after rate_limit_until passes", () => {
+      pool.addAccount("token-aaa");
+
+      const acquired = pool.acquire()!;
+      // Set rate limit to already expired
+      pool.markRateLimited(acquired.entryId, { retryAfterSec: -1 });
+
+      // refreshStatus should detect the expired rate_limit_until
+      const summary = pool.getPoolSummary();
+      expect(summary.active).toBe(1);
+      expect(summary.rate_limited).toBe(0);
+    });
+  });
+
+  describe("stale lock auto-release", () => {
+    it("releases locks older than 5 minutes", () => {
+      pool.addAccount("token-aaa");
+
+      const acquired = pool.acquire()!;
+
+      // Manually backdate the lock by manipulating the acquireLocks map
+      // Access private field for testing — unavoidable for TTL tests
+      const locks = (pool as unknown as { acquireLocks: Map<string, number> }).acquireLocks;
+      locks.set(acquired.entryId, Date.now() - 6 * 60 * 1000); // 6 minutes ago
+
+      // Next acquire should auto-release the stale lock and return the same account
+      const reacquired = pool.acquire()!;
+      expect(reacquired).not.toBeNull();
+      expect(reacquired.entryId).toBe(acquired.entryId);
+    });
+  });
+
+  describe("expired tokens", () => {
+    it("skips expired accounts in acquire", () => {
+      vi.mocked(isTokenExpired).mockReturnValue(true);
+      pool.addAccount("token-expired");
+
+      expect(pool.acquire()).toBeNull();
+      expect(pool.getPoolSummary().expired).toBe(1);
+    });
+  });
+
+  describe("removeAccount", () => {
+    it("removes an account and clears its lock", () => {
+      pool.addAccount("token-aaa");
+
+      const acquired = pool.acquire()!;
+      pool.removeAccount(acquired.entryId);
+
+      expect(pool.getPoolSummary().total).toBe(0);
+      expect(pool.acquire()).toBeNull();
+    });
+  });
+
+  describe("resetUsage", () => {
+    it("resets counters to zero", () => {
+      pool.addAccount("token-aaa");
+
+      const acquired = pool.acquire()!;
+      pool.release(acquired.entryId, { input_tokens: 100, output_tokens: 50 });
+      pool.resetUsage(acquired.entryId);
+
+      const accounts = pool.getAccounts();
+      expect(accounts[0].usage.request_count).toBe(0);
+      expect(accounts[0].usage.input_tokens).toBe(0);
+      expect(accounts[0].usage.output_tokens).toBe(0);
+    });
+  });
+
+  describe("validateProxyApiKey", () => {
+    it("validates per-account proxy API key", () => {
+      pool.addAccount("token-aaa");
+
+      const accounts = pool.getAccounts();
+      // Each account gets a generated proxyApiKey — we can't predict it,
+      // but we can read it and validate
+      const entry = pool.getEntry(accounts[0].id)!;
+      expect(pool.validateProxyApiKey(entry.proxyApiKey)).toBe(true);
+      expect(pool.validateProxyApiKey("wrong-key")).toBe(false);
+    });
+
+    it("validates config-level proxy API key", () => {
+      vi.mocked(getConfig).mockReturnValue({
+        auth: {
+          jwt_token: null,
+          rotation_strategy: "least_used",
+          rate_limit_backoff_seconds: 60,
+        },
+        server: { proxy_api_key: "global-key-123" },
+      } as ReturnType<typeof getConfig>);
+
+      expect(pool.validateProxyApiKey("global-key-123")).toBe(true);
+    });
+  });
+});

src/index.ts

@@ -4,6 +4,7 @@ import { loadConfig, loadFingerprint, getConfig } from "./config.js";
 import { AccountPool } from "./auth/account-pool.js";
 import { RefreshScheduler } from "./auth/refresh-scheduler.js";
 import { SessionManager } from "./session/manager.js";
+import { requestId } from "./middleware/request-id.js";
 import { logger } from "./middleware/logger.js";
 import { errorHandler } from "./middleware/error-handler.js";
 import { createAuthRoutes } from "./routes/auth.js";
@@ -48,6 +49,7 @@ async function main() {
   const app = new Hono();
 
   // Global middleware
+  app.use("*", requestId);
   app.use("*", logger);
   app.use("*", errorHandler);
 

src/proxy/__tests__/codex-api.test.ts

@@ -0,0 +1,201 @@
+/**
+ * Tests for CodexApi SSE parsing.
+ *
+ * parseStream() is the most fragile code path — it processes real-time
+ * byte streams from curl where chunks can split at any boundary.
+ */
+
+import { describe, it, expect } from "vitest";
+import { CodexApi, type CodexSSEEvent } from "../codex-api.js";
+
+/** Create a Response whose body emits the given string chunks sequentially. */
+function mockResponse(...chunks: string[]): Response {
+  const encoder = new TextEncoder();
+  let idx = 0;
+  const stream = new ReadableStream<Uint8Array>({
+    pull(controller) {
+      if (idx < chunks.length) {
+        controller.enqueue(encoder.encode(chunks[idx]));
+        idx++;
+      } else {
+        controller.close();
+      }
+    },
+  });
+  return new Response(stream);
+}
+
+/** Collect all events from parseStream into an array. */
+async function collectEvents(api: CodexApi, response: Response): Promise<CodexSSEEvent[]> {
+  const events: CodexSSEEvent[] = [];
+  for await (const evt of api.parseStream(response)) {
+    events.push(evt);
+  }
+  return events;
+}
+
+// CodexApi constructor requires a token — value is irrelevant for parsing tests
+function createApi(): CodexApi {
+  return new CodexApi("test-token", null);
+}
+
+describe("CodexApi.parseStream", () => {
+  it("parses a complete SSE event in a single chunk", async () => {
+    const api = createApi();
+    const response = mockResponse(
+      'event: response.output_text.delta\ndata: {"delta":"Hello"}\n\n',
+    );
+
+    const events = await collectEvents(api, response);
+    expect(events).toHaveLength(1);
+    expect(events[0].event).toBe("response.output_text.delta");
+    expect(events[0].data).toEqual({ delta: "Hello" });
+  });
+
+  it("handles multiple events in a single chunk", async () => {
+    const api = createApi();
+    const response = mockResponse(
+      'event: response.created\ndata: {"response":{"id":"resp_1"}}\n\n' +
+      'event: response.output_text.delta\ndata: {"delta":"Hi"}\n\n' +
+      'event: response.completed\ndata: {"response":{"id":"resp_1","usage":{"input_tokens":10,"output_tokens":5}}}\n\n',
+    );
+
+    const events = await collectEvents(api, response);
+    expect(events).toHaveLength(3);
+    expect(events[0].event).toBe("response.created");
+    expect(events[1].event).toBe("response.output_text.delta");
+    expect(events[2].event).toBe("response.completed");
+  });
+
+  it("reassembles events split across chunk boundaries", async () => {
+    const api = createApi();
+    // Split in the middle of the JSON data
+    const response = mockResponse(
+      'event: response.output_text.delta\ndata: {"del',
+      'ta":"world"}\n\n',
+    );
+
+    const events = await collectEvents(api, response);
+    expect(events).toHaveLength(1);
+    expect(events[0].data).toEqual({ delta: "world" });
+  });
+
+  it("handles chunk split at \\n\\n boundary", async () => {
+    const api = createApi();
+    // First chunk ends with first \n, second starts with second \n
+    const response = mockResponse(
+      'event: response.output_text.delta\ndata: {"delta":"a"}\n',
+      '\nevent: response.output_text.delta\ndata: {"delta":"b"}\n\n',
+    );
+
+    const events = await collectEvents(api, response);
+    expect(events).toHaveLength(2);
+    expect(events[0].data).toEqual({ delta: "a" });
+    expect(events[1].data).toEqual({ delta: "b" });
+  });
+
+  it("handles many small single-character chunks", async () => {
+    const api = createApi();
+    const full = 'event: response.output_text.delta\ndata: {"delta":"x"}\n\n';
+    // Split into individual characters
+    const chunks = full.split("");
+    const response = mockResponse(...chunks);
+
+    const events = await collectEvents(api, response);
+    expect(events).toHaveLength(1);
+    expect(events[0].data).toEqual({ delta: "x" });
+  });
+
+  it("skips [DONE] marker without crashing", async () => {
+    const api = createApi();
+    const response = mockResponse(
+      'event: response.output_text.delta\ndata: {"delta":"hi"}\n\n' +
+      "data: [DONE]\n\n",
+    );
+
+    const events = await collectEvents(api, response);
+    expect(events).toHaveLength(1);
+    expect(events[0].data).toEqual({ delta: "hi" });
+  });
+
+  it("returns raw string when data is not valid JSON", async () => {
+    const api = createApi();
+    const response = mockResponse(
+      'event: response.output_text.delta\ndata: not-json-at-all\n\n',
+    );
+
+    const events = await collectEvents(api, response);
+    expect(events).toHaveLength(1);
+    expect(events[0].data).toBe("not-json-at-all");
+  });
+
+  it("handles malformed JSON (unclosed brace) gracefully", async () => {
+    const api = createApi();
+    const response = mockResponse(
+      'event: response.output_text.delta\ndata: {"delta":"unclosed\n\n',
+    );
+
+    const events = await collectEvents(api, response);
+    expect(events).toHaveLength(1);
+    // Should not throw — falls through to raw string
+    expect(typeof events[0].data).toBe("string");
+  });
+
+  it("skips empty blocks between events", async () => {
+    const api = createApi();
+    const response = mockResponse(
+      'event: response.output_text.delta\ndata: {"delta":"a"}\n\n' +
+      "\n\n" + // empty block
+      'event: response.output_text.delta\ndata: {"delta":"b"}\n\n',
+    );
+
+    const events = await collectEvents(api, response);
+    expect(events).toHaveLength(2);
+  });
+
+  it("processes remaining buffer after stream ends", async () => {
+    const api = createApi();
+    // No trailing \n\n — the event is only in the residual buffer
+    const response = mockResponse(
+      'event: response.output_text.delta\ndata: {"delta":"last"}',
+    );
+
+    const events = await collectEvents(api, response);
+    expect(events).toHaveLength(1);
+    expect(events[0].data).toEqual({ delta: "last" });
+  });
+
+  it("handles multi-line data fields", async () => {
+    const api = createApi();
+    const response = mockResponse(
+      'event: response.output_text.delta\ndata: {"delta":\n' +
+      'data: "multi-line"}\n\n',
+    );
+
+    const events = await collectEvents(api, response);
+    expect(events).toHaveLength(1);
+    // data lines are joined with \n: '{"delta":\n"multi-line"}'
+    expect(events[0].data).toEqual({ delta: "multi-line" });
+  });
+
+  it("returns null body error", async () => {
+    const api = createApi();
+    // Create a response with null body
+    const response = new Response(null);
+
+    await expect(async () => {
+      await collectEvents(api, response);
+    }).rejects.toThrow("Response body is null");
+  });
+
+  it("throws on buffer overflow (>10MB)", async () => {
+    const api = createApi();
+    // Create a chunk that exceeds the 10MB SSE buffer limit
+    const hugeData = "x".repeat(11 * 1024 * 1024);
+    const response = mockResponse(hugeData);
+
+    await expect(async () => {
+      await collectEvents(api, response);
+    }).rejects.toThrow("SSE buffer exceeded");
+  });
+});

src/routes/web.ts

@@ -4,7 +4,6 @@ import { readFileSync, existsSync } from "fs";
 import { resolve } from "path";
 import type { AccountPool } from "../auth/account-pool.js";
 import { getConfig, getFingerprint } from "../config.js";
-import { getUpdateState } from "../update-checker.js";
 
 export function createWebRoutes(accountPool: AccountPool): Hono {
   const app = new Hono();
@@ -27,14 +26,11 @@ export function createWebRoutes(accountPool: AccountPool): Hono {
 
   app.get("/health", async (c) => {
     const authenticated = accountPool.isAuthenticated();
-    const userInfo = accountPool.getUserInfo();
     const poolSummary = accountPool.getPoolSummary();
     return c.json({
       status: "ok",
       authenticated,
-      user: authenticated ? userInfo : null,
-      pool: poolSummary,
-      update: getUpdateState(),
+      pool: { total: poolSummary.total, active: poolSummary.active },
       timestamp: new Date().toISOString(),
     });
   });

src/translation/__tests__/codex-event-extractor.test.ts

@@ -0,0 +1,182 @@
+/**
+ * Tests for parseCodexEvent — the shared event type parser.
+ *
+ * Tests the discriminated union mapping from raw SSE events to typed events.
+ * This is the IR hub of the hub-and-spoke translation architecture.
+ */
+
+import { describe, it, expect } from "vitest";
+import { parseCodexEvent } from "../../types/codex-events.js";
+import type { CodexSSEEvent } from "../../proxy/codex-api.js";
+
+describe("parseCodexEvent", () => {
+  it("parses response.created with id", () => {
+    const raw: CodexSSEEvent = {
+      event: "response.created",
+      data: { response: { id: "resp_abc123" } },
+    };
+    const typed = parseCodexEvent(raw);
+    expect(typed.type).toBe("response.created");
+    if (typed.type === "response.created") {
+      expect(typed.response.id).toBe("resp_abc123");
+    }
+  });
+
+  it("parses response.in_progress", () => {
+    const raw: CodexSSEEvent = {
+      event: "response.in_progress",
+      data: { response: { id: "resp_abc123" } },
+    };
+    const typed = parseCodexEvent(raw);
+    expect(typed.type).toBe("response.in_progress");
+    if (typed.type === "response.in_progress") {
+      expect(typed.response.id).toBe("resp_abc123");
+    }
+  });
+
+  it("parses response.output_text.delta", () => {
+    const raw: CodexSSEEvent = {
+      event: "response.output_text.delta",
+      data: { delta: "Hello, world!" },
+    };
+    const typed = parseCodexEvent(raw);
+    expect(typed.type).toBe("response.output_text.delta");
+    if (typed.type === "response.output_text.delta") {
+      expect(typed.delta).toBe("Hello, world!");
+    }
+  });
+
+  it("parses response.output_text.done", () => {
+    const raw: CodexSSEEvent = {
+      event: "response.output_text.done",
+      data: { text: "Complete response text" },
+    };
+    const typed = parseCodexEvent(raw);
+    expect(typed.type).toBe("response.output_text.done");
+    if (typed.type === "response.output_text.done") {
+      expect(typed.text).toBe("Complete response text");
+    }
+  });
+
+  it("parses response.completed with usage", () => {
+    const raw: CodexSSEEvent = {
+      event: "response.completed",
+      data: {
+        response: {
+          id: "resp_abc123",
+          usage: { input_tokens: 150, output_tokens: 42 },
+        },
+      },
+    };
+    const typed = parseCodexEvent(raw);
+    expect(typed.type).toBe("response.completed");
+    if (typed.type === "response.completed") {
+      expect(typed.response.id).toBe("resp_abc123");
+      expect(typed.response.usage).toEqual({
+        input_tokens: 150,
+        output_tokens: 42,
+      });
+    }
+  });
+
+  it("parses response.completed without usage", () => {
+    const raw: CodexSSEEvent = {
+      event: "response.completed",
+      data: { response: { id: "resp_abc123" } },
+    };
+    const typed = parseCodexEvent(raw);
+    expect(typed.type).toBe("response.completed");
+    if (typed.type === "response.completed") {
+      expect(typed.response.usage).toBeUndefined();
+    }
+  });
+
+  it("returns unknown for unrecognized event types", () => {
+    const raw: CodexSSEEvent = {
+      event: "response.some_future_event",
+      data: { foo: "bar" },
+    };
+    const typed = parseCodexEvent(raw);
+    expect(typed.type).toBe("unknown");
+    if (typed.type === "unknown") {
+      expect(typed.raw).toEqual({ foo: "bar" });
+    }
+  });
+
+  it("returns unknown when response.created has no response object", () => {
+    const raw: CodexSSEEvent = {
+      event: "response.created",
+      data: "not an object",
+    };
+    const typed = parseCodexEvent(raw);
+    expect(typed.type).toBe("unknown");
+  });
+
+  it("returns unknown when response.created data has no response field", () => {
+    const raw: CodexSSEEvent = {
+      event: "response.created",
+      data: { something_else: true },
+    };
+    const typed = parseCodexEvent(raw);
+    expect(typed.type).toBe("unknown");
+  });
+
+  it("returns unknown when delta is not a string", () => {
+    const raw: CodexSSEEvent = {
+      event: "response.output_text.delta",
+      data: { delta: 123 },
+    };
+    const typed = parseCodexEvent(raw);
+    expect(typed.type).toBe("unknown");
+  });
+
+  it("handles empty delta string", () => {
+    const raw: CodexSSEEvent = {
+      event: "response.output_text.delta",
+      data: { delta: "" },
+    };
+    const typed = parseCodexEvent(raw);
+    expect(typed.type).toBe("response.output_text.delta");
+    if (typed.type === "response.output_text.delta") {
+      expect(typed.delta).toBe("");
+    }
+  });
+
+  it("defaults usage token counts to 0 for non-numeric values", () => {
+    const raw: CodexSSEEvent = {
+      event: "response.completed",
+      data: {
+        response: {
+          id: "resp_1",
+          usage: { input_tokens: "not a number", output_tokens: null },
+        },
+      },
+    };
+    const typed = parseCodexEvent(raw);
+    expect(typed.type).toBe("response.completed");
+    if (typed.type === "response.completed") {
+      expect(typed.response.usage).toEqual({
+        input_tokens: 0,
+        output_tokens: 0,
+      });
+    }
+  });
+
+  it("handles null data", () => {
+    const raw: CodexSSEEvent = {
+      event: "response.created",
+      data: null,
+    };
+    const typed = parseCodexEvent(raw);
+    expect(typed.type).toBe("unknown");
+  });
+
+  it("handles array data", () => {
+    const raw: CodexSSEEvent = {
+      event: "response.output_text.delta",
+      data: [1, 2, 3],
+    };
+    const typed = parseCodexEvent(raw);
+    expect(typed.type).toBe("unknown");
+  });
+});

vitest.config.ts

@@ -0,0 +1,8 @@
+import { defineConfig } from "vitest/config";
+
+export default defineConfig({
+  test: {
+    root: "src",
+    environment: "node",
+  },
+});