fix(auth): clarify OpenCode import limit failures

Author: ndycode

lib/codex-manager.ts

@@ -4363,17 +4363,19 @@ async function runAuthLogin(): Promise<number> {
 					console.log("No OpenCode account pool was detected.");
 					continue;
 				}
-				if (
-					!assessment.backup.valid ||
-					!assessment.eligibleForRestore ||
-					assessment.wouldExceedLimit
-				) {
+				if (!assessment.backup.valid || !assessment.eligibleForRestore) {
 					const assessmentErrorLabel = assessment.error
 						? formatRedactedFilesystemError(assessment.error)
 						: "OpenCode account pool is not importable.";
 					console.log(assessmentErrorLabel);
 					continue;
 				}
+				if (assessment.wouldExceedLimit) {
+					console.log(
+						`Import would exceed the account limit (${assessment.currentAccountCount ?? "?"} current, ${assessment.mergedAccountCount ?? "?"} after import). Remove accounts first.`,
+					);
+					continue;
+				}
 				const backupLabel = basename(assessment.backup.path);
 				const confirmed = await confirm(
 					`Import OpenCode accounts from ${backupLabel}?`,

test/codex-manager-cli.test.ts

@@ -1122,7 +1122,11 @@ describe("codex manager cli commands", () => {
 			error: "",
 		};
 		assessOpencodeAccountPoolMock.mockResolvedValue(assessment);
-		importAccountsMock.mockRejectedValueOnce(new Error("import locked"));
+		const importError = makeErrnoError(
+			"operation not permitted, open 'C:\\Users\\alice\\AppData\\Local\\OpenCode\\openai-codex-accounts.json'",
+			"EPERM",
+		);
+		importAccountsMock.mockRejectedValueOnce(importError);
 		confirmMock.mockResolvedValueOnce(true);
 		promptLoginModeMock
 			.mockResolvedValueOnce({ mode: "import-opencode" })
@@ -1137,11 +1141,14 @@ describe("codex manager cli commands", () => {
 			"/mock/.opencode/openai-codex-accounts.json",
 		);
 		expect(promptLoginModeMock).toHaveBeenCalledTimes(2);
+		expect(errorSpy).toHaveBeenCalledWith(
+			"Import failed: EPERM: operation not permitted, open 'openai-codex-accounts.json'",
+		);
 		expect(
 			errorSpy.mock.calls.some(([message]) =>
-				String(message).includes("Import failed:")
+				String(message).includes("C:\\Users\\alice\\AppData\\Local\\OpenCode"),
 			),
-		).toBe(true);
+		).toBe(false);
 		errorSpy.mockRestore();
 	});
 
@@ -1178,6 +1185,8 @@ describe("codex manager cli commands", () => {
 	it.each([
 		{
 			label: "would exceed the account limit",
+			expectedLog:
+				"Import would exceed the account limit (2 current, 5 after import). Remove accounts first.",
 			assessment: {
 				backup: {
 					name: "openai-codex-accounts.json",
@@ -1206,6 +1215,7 @@ describe("codex manager cli commands", () => {
 		},
 		{
 			label: "is not eligible for restore",
+			expectedLog: "OpenCode account pool is not importable.",
 			assessment: {
 				backup: {
 					name: "openai-codex-accounts.json",
@@ -1234,7 +1244,7 @@ describe("codex manager cli commands", () => {
 		},
 	])(
 		"skips confirmation and import when the OpenCode assessment $label",
-		async ({ assessment }) => {
+		async ({ assessment, expectedLog }) => {
 			setInteractiveTTY(true);
 			loadAccountsMock.mockResolvedValue({
 				version: 3,
@@ -1253,6 +1263,7 @@ describe("codex manager cli commands", () => {
 			promptLoginModeMock
 				.mockResolvedValueOnce({ mode: "import-opencode" })
 				.mockResolvedValueOnce({ mode: "cancel" });
+			const logSpy = vi.spyOn(console, "log").mockImplementation(() => {});
 			const { runCodexMultiAuthCli } = await import("../lib/codex-manager.js");
 
 			const exitCode = await runCodexMultiAuthCli(["auth", "login"]);
@@ -1262,6 +1273,8 @@ describe("codex manager cli commands", () => {
 			expect(confirmMock).not.toHaveBeenCalled();
 			expect(importAccountsMock).not.toHaveBeenCalled();
 			expect(promptLoginModeMock).toHaveBeenCalledTimes(2);
+			expect(logSpy).toHaveBeenCalledWith(expectedLog);
+			logSpy.mockRestore();
 		},
 	);