/** @deprecated MiniMax provider-owned CLI profile id; do not use from third-party plugins. */

export const MINIMAX_CLI_PROFILE_ID = "minimax-portal:minimax-cli";

/** File-lock policy for auth profile store reads/writes. */

export const AUTH_STORE_LOCK_OPTIONS = {

retries: {

retries: 10,

factor: 2,

minTimeout: 100,

maxTimeout: 10_000,

randomize: true,

},

stale: 30_000,

} as const;

// Separate from AUTH_STORE_LOCK_OPTIONS for independent tuning: this lock

// serializes the cross-agent OAuth refresh (see issue #26322), whereas

// AUTH_STORE_LOCK_OPTIONS guards per-store refresh updates. Keeping them

// distinct lets us widen the refresh lock's timeout/retry budget without

// affecting the hot-path auth-store writers.

//

// Invariant: OAUTH_REFRESH_CALL_TIMEOUT_MS < OAUTH_REFRESH_LOCK_OPTIONS.stale

// so a legitimate refresh's critical section always finishes well before

// peers would treat the lock as reclaimable. Violating this invariant re-

/** Freshness window for syncing external CLI auth into auth profiles. */

export const EXTERNAL_CLI_SYNC_TTL_MS = 15 * 60 * 1000;

/** Near-expiry threshold that triggers external CLI credential resync. */

export const EXTERNAL_CLI_NEAR_EXPIRY_MS = 10 * 60 * 1000;

/** Auth profile subsystem logger. */

export const log = createSubsystemLogger("agents/auth-profiles");