Add an experimental Codex session supervisor

lib/codex-manager/settings-hub.ts

@@ -186,6 +186,7 @@ type ThemeConfigAction =
 
 type BackendToggleSettingKey =
 	| "liveAccountSync"
+	| "codexCliSessionSupervisor"
 	| "sessionAffinity"
 	| "proactiveRefreshGuardian"
 	| "retryAllAccountsRateLimited"
@@ -272,6 +273,7 @@ type SettingsHubAction =
 	| { type: "back" };
 
 type ExperimentalSettingsAction =
+	| { type: "toggle-session-supervisor" }
 	| { type: "sync" }
 	| { type: "backup" }
 	| { type: "toggle-refresh-guardian" }
@@ -300,9 +302,10 @@ function getExperimentalSelectOptions(
 function mapExperimentalMenuHotkey(
 	raw: string,
 ): ExperimentalSettingsAction | undefined {
-	if (raw === "1") return { type: "sync" };
-	if (raw === "2") return { type: "backup" };
-	if (raw === "3") return { type: "toggle-refresh-guardian" };
+	if (raw === "1") return { type: "toggle-session-supervisor" };
+	if (raw === "2") return { type: "sync" };
+	if (raw === "3") return { type: "backup" };
+	if (raw === "4") return { type: "toggle-refresh-guardian" };
 	if (raw === "[" || raw === "-") return { type: "decrease-refresh-interval" };
 	if (raw === "]" || raw === "+") return { type: "increase-refresh-interval" };
 	const lower = raw.toLowerCase();
@@ -323,6 +326,11 @@ const BACKEND_TOGGLE_OPTIONS: BackendToggleSettingOption[] = [
 		label: "Enable Live Sync",
 		description: "Keep accounts synced when files change in another window.",
 	},
+	{
+		key: "codexCliSessionSupervisor",
+		label: "Enable Session Resume Supervisor",
+		description: "Wrap interactive Codex sessions so they can relaunch with resume after rotation.",
+	},
 	{
 		key: "sessionAffinity",
 		label: "Enable Session Affinity",
@@ -2568,6 +2576,11 @@ async function promptExperimentalSettings(
 	while (true) {
 		const action = await select<ExperimentalSettingsAction>(
 			[
+				{
+					label: `${formatDashboardSettingState(draft.codexCliSessionSupervisor ?? BACKEND_DEFAULTS.codexCliSessionSupervisor ?? false)} ${UI_COPY.settings.experimentalSessionSupervisor}`,
+					value: { type: "toggle-session-supervisor" },
+					color: "yellow",
+				},
 				{
 					label: UI_COPY.settings.experimentalSync,
 					value: { type: "sync" },
@@ -2619,6 +2632,17 @@ async function promptExperimentalSettings(
 		);
 		if (!action || action.type === "back") return null;
 		if (action.type === "save") return draft;
+		if (action.type === "toggle-session-supervisor") {
+			draft = {
+				...draft,
+				codexCliSessionSupervisor: !(
+					draft.codexCliSessionSupervisor ??
+					BACKEND_DEFAULTS.codexCliSessionSupervisor ??
+					false
+				),
+			};
+			continue;
+		}
 		if (action.type === "toggle-refresh-guardian") {
 			draft = {
 				...draft,

lib/config.ts

@@ -145,6 +145,7 @@ export const DEFAULT_PLUGIN_CONFIG: PluginConfig = {
 	liveAccountSync: true,
 	liveAccountSyncDebounceMs: 250,
 	liveAccountSyncPollMs: 2_000,
+	codexCliSessionSupervisor: false,
 	sessionAffinity: true,
 	sessionAffinityTtlMs: 20 * 60_000,
 	sessionAffinityMaxEntries: 512,
@@ -857,6 +858,25 @@ export function getLiveAccountSyncPollMs(pluginConfig: PluginConfig): number {
 	);
 }
 
+/**
+ * Determines whether the CLI session supervisor wrapper is enabled.
+ *
+ * This accessor is synchronous, side-effect free, and safe for concurrent reads.
+ * It performs no filesystem I/O and does not expose token material.
+ *
+ * @param pluginConfig - The plugin configuration object used as the non-environment fallback
+ * @returns `true` when the session supervisor should wrap interactive Codex sessions
+ */
+export function getCodexCliSessionSupervisor(
+	pluginConfig: PluginConfig,
+): boolean {
+	return resolveBooleanSetting(
+		"CODEX_AUTH_CLI_SESSION_SUPERVISOR",
+		pluginConfig.codexCliSessionSupervisor,
+		false,
+	);
+}
+
 /**
  * Indicates whether session affinity is enabled.
  *

lib/quota-probe.ts

@@ -305,6 +305,13 @@ export interface ProbeCodexQuotaOptions {
 	model?: string;
 	fallbackModels?: readonly string[];
 	timeoutMs?: number;
+	signal?: AbortSignal;
+}
+
+function createAbortError(message: string): Error {
+	const error = new Error(message);
+	error.name = "AbortError";
+	return error;
 }
 
 /**
@@ -331,6 +338,9 @@ export async function fetchCodexQuotaSnapshot(
 	let lastError: Error | null = null;
 
 	for (const model of models) {
+		if (options.signal?.aborted) {
+			throw createAbortError("Quota probe aborted");
+		}
 		try {
 			const instructions = await getCodexInstructions(model);
 			const probeBody: RequestBody = {
@@ -356,6 +366,12 @@ export async function fetchCodexQuotaSnapshot(
 			headers.set("content-type", "application/json");
 
 			const controller = new AbortController();
+			const onAbort = () => controller.abort(options.signal?.reason);
+			if (options.signal?.aborted) {
+				controller.abort(options.signal.reason);
+			} else {
+				options.signal?.addEventListener("abort", onAbort, { once: true });
+			}
 			const timeout = setTimeout(() => controller.abort(), timeoutMs);
 			let response: Response;
 			try {
@@ -367,6 +383,7 @@ export async function fetchCodexQuotaSnapshot(
 				});
 			} finally {
 				clearTimeout(timeout);
+				options.signal?.removeEventListener("abort", onAbort);
 			}
 
 			const snapshotBase = parseQuotaSnapshotBase(response.headers, response.status);
@@ -406,9 +423,16 @@ export async function fetchCodexQuotaSnapshot(
 			}
 			lastError = new Error("Codex response did not include quota headers");
 		} catch (error) {
+			if (options.signal?.aborted) {
+				throw error instanceof Error ? error : createAbortError("Quota probe aborted");
+			}
 			lastError = error instanceof Error ? error : new Error(String(error));
 		}
 	}
 
+	if (options.signal?.aborted) {
+		throw createAbortError("Quota probe aborted");
+	}
+
 	throw lastError ?? new Error("Failed to fetch quotas");
 }

lib/schemas.ts

@@ -44,6 +44,7 @@ export const PluginConfigSchema = z.object({
 	liveAccountSync: z.boolean().optional(),
 	liveAccountSyncDebounceMs: z.number().min(50).optional(),
 	liveAccountSyncPollMs: z.number().min(500).optional(),
+	codexCliSessionSupervisor: z.boolean().optional(),
 	sessionAffinity: z.boolean().optional(),
 	sessionAffinityTtlMs: z.number().min(1_000).optional(),
 	sessionAffinityMaxEntries: z.number().min(8).optional(),

lib/ui/copy.ts

@@ -95,9 +95,10 @@ export const UI_COPY = {
 		experimentalTitle: "Experimental",
 		experimentalSubtitle: "Preview sync and backup actions before they become stable",
 		experimentalHelpMenu:
-			"Enter Select | 1 Sync | 2 Backup | 3 Guard | [ - Down | ] + Up | S Save | Q Back",
+			"Enter Select | 1 Supervisor | 2 Sync | 3 Backup | 4 Guard | [ - Down | ] + Up | S Save | Q Back",
 		experimentalHelpPreview: "Enter Select | A Apply | Q Back",
 		experimentalHelpStatus: "Enter Select | Q Back",
+		experimentalSessionSupervisor: "Enable Session Resume Supervisor",
 		experimentalSync: "Sync Accounts to oc-chatgpt-multi-auth",
 		experimentalApplySync: "Apply Sync",
 		experimentalBackup: "Save Pool Backup",

package.json

@@ -51,6 +51,7 @@
 		"test:model-matrix": "node scripts/test-model-matrix.js",
 		"test:model-matrix:smoke": "node scripts/test-model-matrix.js --smoke",
 		"test:model-matrix:report": "node scripts/test-model-matrix.js --smoke --report-json=.tmp/model-matrix-report.json",
+		"test:session-supervisor:smoke": "vitest run test/codex-supervisor.test.ts test/codex-bin-wrapper.test.ts test/plugin-config.test.ts test/quota-probe.test.ts test/settings-hub-utils.test.ts",
 		"clean:repo": "node scripts/repo-hygiene.js clean --mode aggressive",
 		"clean:repo:check": "node scripts/repo-hygiene.js check",
 		"bench:edit-formats": "node scripts/benchmark-edit-formats.mjs --preset=codex-core",

scripts/codex-routing.js

@@ -12,6 +12,8 @@ const AUTH_SUBCOMMANDS = new Set([
 	"fix",
 	"doctor",
 ]);
+const COMMAND_FLAGS_WITH_VALUE = new Set(["-c", "--config"]);
+const HELP_OR_VERSION_FLAGS = new Set(["--help", "-h", "--version"]);
 
 export function normalizeAuthAlias(args) {
 	if (args.length >= 2 && args[0] === "multi" && args[1] === "auth") {
@@ -32,4 +34,93 @@ export function shouldHandleMultiAuthAuth(args) {
 	return AUTH_SUBCOMMANDS.has(subcommand);
 }
 
+export function findPrimaryCodexCommand(args) {
+	let expectFlagValue = false;
+	let stopOptionParsing = false;
+
+	for (let index = 0; index < args.length; index += 1) {
+		const normalizedArg = `${args[index] ?? ""}`.trim().toLowerCase();
+		if (normalizedArg.length === 0) {
+			continue;
+		}
+		if (expectFlagValue) {
+			expectFlagValue = false;
+			continue;
+		}
+		if (!stopOptionParsing && normalizedArg === "--") {
+			stopOptionParsing = true;
+			continue;
+		}
+		if (!stopOptionParsing) {
+			if (COMMAND_FLAGS_WITH_VALUE.has(normalizedArg)) {
+				expectFlagValue = true;
+				continue;
+			}
+			if (normalizedArg.startsWith("--config=")) {
+				continue;
+			}
+			if (normalizedArg.startsWith("-")) {
+				continue;
+			}
+		}
+		return {
+			command: normalizedArg,
+			index,
+		};
+	}
+
+	return null;
+}
+
+export function hasTopLevelHelpOrVersionFlag(args) {
+	let expectFlagValue = false;
+
+	for (let index = 0; index < args.length; index += 1) {
+		const normalizedArg = `${args[index] ?? ""}`.trim().toLowerCase();
+		if (normalizedArg.length === 0) {
+			continue;
+		}
+		if (expectFlagValue) {
+			expectFlagValue = false;
+			continue;
+		}
+		if (normalizedArg === "--") {
+			return false;
+		}
+		if (HELP_OR_VERSION_FLAGS.has(normalizedArg)) {
+			return true;
+		}
+		if (COMMAND_FLAGS_WITH_VALUE.has(normalizedArg)) {
+			expectFlagValue = true;
+			continue;
+		}
+		if (normalizedArg.startsWith("--config=")) {
+			continue;
+		}
+		if (normalizedArg.startsWith("-")) {
+			continue;
+		}
+		return false;
+	}
+
+	return false;
+}
+
+export function splitCodexCommandArgs(args) {
+	const primaryCommand = findPrimaryCodexCommand(args);
+	if (!primaryCommand) {
+		return {
+			leadingArgs: [...args],
+			command: null,
+			trailingArgs: [],
+		};
+	}
+
+	return {
+		leadingArgs: args.slice(0, primaryCommand.index),
+		command: primaryCommand.command,
+		trailingArgs: args.slice(primaryCommand.index + 1),
+	};
+}
+
 export { AUTH_SUBCOMMANDS };