@agimon-ai/po-core 0.0.0-alpha.2 → 0.0.0-alpha.21

package/dist/src/services/chatgptLogin/index.cjs

@@ -0,0 +1,230 @@
+const require_runtime = require("../../../_virtual/_rolldown/runtime.cjs");
+const require_core = require("../piSettings/core.cjs");
+const require_sync = require("../piSettings/sync.cjs");
+require("../../../runtimePiSettings.cjs");
+const require_index = require("../chatgptAuth/index.cjs");
+let node_crypto = require("node:crypto");
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path, 1);
+let node_http = require("node:http");
+let _earendil_works_pi_coding_agent = require("@earendil-works/pi-coding-agent");
+//#region src/services/chatgptLogin/index.ts
+const CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
+const AUTH_ORIGIN = "https://auth.openai.com";
+const TOKEN_URL = `${AUTH_ORIGIN}/oauth/token`;
+/** Realtime voice needs the connector scopes that Pi's own ChatGPT login does not request. */
+const SCOPE = "openid profile email offline_access api.connectors.read api.connectors.invoke";
+const CALLBACK_HOST = "127.0.0.1";
+const CALLBACK_PORT = 1455;
+const CALLBACK_PATH = "/auth/callback";
+/** The redirect registered for this OAuth client; the browser reaches the listener through localhost. */
+const REDIRECT_URI = `http://localhost:${CALLBACK_PORT}${CALLBACK_PATH}`;
+const MAX_TOKEN_RESPONSE_BYTES = 1048576;
+const TOKEN_TIMEOUT_MS = 3e4;
+function record(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+async function requestTokens(body, previousRefresh, signal) {
+	const bounded = AbortSignal.any([AbortSignal.timeout(TOKEN_TIMEOUT_MS), ...signal ? [signal] : []]);
+	const response = await fetch(TOKEN_URL, {
+		method: "POST",
+		headers: { "content-type": "application/x-www-form-urlencoded" },
+		body,
+		redirect: "error",
+		signal: bounded
+	});
+	if (!response.ok) {
+		await response.body?.cancel().catch(() => void 0);
+		throw new Error(`ChatGPT sign-in was rejected (HTTP ${response.status}). Sign in again.`);
+	}
+	const json = await require_index.readBoundedJson(response, MAX_TOKEN_RESPONSE_BYTES, bounded);
+	const access = record(json) ? json.access_token : void 0;
+	const refresh = record(json) ? json.refresh_token ?? previousRefresh : void 0;
+	const expiresIn = record(json) ? json.expires_in : void 0;
+	if (typeof access !== "string" || typeof refresh !== "string" || typeof expiresIn !== "number" || expiresIn <= 0) throw new Error("ChatGPT sign-in returned an invalid token response.");
+	const accountId = require_index.accountIdOf(access);
+	if (!accountId) throw new Error("ChatGPT sign-in did not include a ChatGPT account.");
+	return {
+		access,
+		refresh,
+		expires: Date.now() + expiresIn * 1e3,
+		accountId
+	};
+}
+function sameState(supplied, expected) {
+	const left = Buffer.from(supplied ?? "");
+	const right = Buffer.from(expected);
+	return left.length === right.length && (0, node_crypto.timingSafeEqual)(left, right);
+}
+/** The authorization code from a redirect URL; pasted input must carry the expected state. */
+function codeFromRedirect(url, state) {
+	for (const name of [
+		"state",
+		"code",
+		"error"
+	]) if (url.searchParams.getAll(name).length > 1) throw new Error("The sign-in address is invalid.");
+	if (!sameState(url.searchParams.get("state"), state)) throw new Error("The sign-in address does not match this attempt.");
+	if (url.searchParams.get("error")) throw new Error("ChatGPT sign-in was declined.");
+	const code = url.searchParams.get("code");
+	if (!code || code.trim() !== code) throw new Error("The sign-in address has no authorization code.");
+	return code;
+}
+/** Listens for the browser redirect on the registered loopback port; rejects when the port is taken. */
+async function listenForCode(state, signal) {
+	const server = (0, node_http.createServer)();
+	let resolveCode;
+	let rejectCode;
+	const code = new Promise((resolve, reject) => {
+		resolveCode = resolve;
+		rejectCode = reject;
+	});
+	code.catch(() => void 0);
+	server.on("request", (request, response) => {
+		const reply = (status, text) => {
+			response.writeHead(status, {
+				"content-type": "text/plain; charset=utf-8",
+				"cache-control": "no-store"
+			});
+			response.end(text);
+		};
+		const url = new URL(request.url ?? "/", REDIRECT_URI);
+		if (request.method !== "GET" || url.pathname !== CALLBACK_PATH) return reply(404, "Not found.");
+		try {
+			resolveCode(codeFromRedirect(url, state));
+			reply(200, "Signed in. You can close this page.");
+		} catch (error) {
+			if (sameState(url.searchParams.get("state"), state)) rejectCode(error);
+			reply(400, "Sign-in could not be completed.");
+		}
+	});
+	await new Promise((resolve, reject) => {
+		server.once("error", reject);
+		server.listen({
+			host: CALLBACK_HOST,
+			port: CALLBACK_PORT,
+			exclusive: true
+		}, () => {
+			server.off("error", reject);
+			resolve();
+		});
+	});
+	const close = () => {
+		server.close();
+		server.closeAllConnections();
+	};
+	signal?.addEventListener("abort", close, { once: true });
+	return {
+		code,
+		close
+	};
+}
+async function login(callbacks) {
+	const { signal } = callbacks;
+	const verifier = (0, node_crypto.randomBytes)(64).toString("base64url");
+	const state = (0, node_crypto.randomBytes)(32).toString("base64url");
+	const authorize = new URL(`${AUTH_ORIGIN}/oauth/authorize`);
+	authorize.search = new URLSearchParams({
+		response_type: "code",
+		client_id: CLIENT_ID,
+		redirect_uri: REDIRECT_URI,
+		scope: SCOPE,
+		code_challenge: (0, node_crypto.createHash)("sha256").update(verifier).digest("base64url"),
+		code_challenge_method: "S256",
+		id_token_add_organizations: "true",
+		state
+	}).toString();
+	const callback = await listenForCode(state, signal).catch(() => void 0);
+	try {
+		callbacks.onAuth({
+			url: authorize.toString(),
+			instructions: "Sign in in your browser. If it does not return here, paste the address it lands on."
+		});
+		const pasted = (callbacks.onManualCodeInput?.() ?? callbacks.onPrompt({
+			message: "Paste the address your browser lands on",
+			placeholder: REDIRECT_URI
+		})).then((input) => {
+			if (!URL.canParse(input.trim())) throw new Error("Paste the full address from your browser.");
+			return codeFromRedirect(new URL(input.trim()), state);
+		});
+		const code = await (callback ? Promise.race([callback.code, pasted]) : pasted);
+		signal?.throwIfAborted();
+		return await requestTokens(new URLSearchParams({
+			grant_type: "authorization_code",
+			client_id: CLIENT_ID,
+			code,
+			code_verifier: verifier,
+			redirect_uri: REDIRECT_URI
+		}), void 0, signal);
+	} finally {
+		callback?.close();
+	}
+}
+const chatgptAuthProvider = {
+	name: require_index.CHATGPT_AUTH_PROVIDER_NAME,
+	oauth: {
+		name: require_index.CHATGPT_AUTH_PROVIDER_NAME,
+		isSubscription: true,
+		login,
+		refreshToken: (credentials, signal) => requestTokens(new URLSearchParams({
+			grant_type: "refresh_token",
+			client_id: CLIENT_ID,
+			refresh_token: credentials.refresh
+		}), credentials.refresh, signal),
+		getApiKey: (credentials) => credentials.access
+	}
+};
+/** Adds the shared sign-in to a Pi model runtime: its Providers row, /login entry, refresh and storage. */
+function registerChatgptAuthProvider(runtime) {
+	runtime.registerProvider(require_index.CHATGPT_AUTH_PROVIDER_ID, chatgptAuthProvider);
+}
+/**
+* Reads the shared sign-in outside a session (Voice runs at the hub). It opens the same auth.json
+* a session uses; Pi's file lock keeps refreshes from different runtimes from racing.
+*/
+function createChatgptAuthReader(options) {
+	let loading;
+	const runtime = () => {
+		loading ??= (async () => {
+			const agentDirectory = require_core.piAgentDirectory(options.environment, options.homeDirectory);
+			const directory = require_sync.modelConfigDirectory(agentDirectory, options.homeDirectory);
+			const created = await _earendil_works_pi_coding_agent.ModelRuntime.create({
+				authPath: node_path.default.join(directory, "auth.json"),
+				modelsPath: node_path.default.join(directory, "models.json"),
+				refreshOnCreate: false
+			});
+			registerChatgptAuthProvider(created);
+			return created;
+		})().catch((error) => {
+			loading = void 0;
+			throw error;
+		});
+		return loading;
+	};
+	const fresh = async (signal) => {
+		const current = await runtime();
+		await current.refresh({
+			allowNetwork: false,
+			providers: [require_index.CHATGPT_AUTH_PROVIDER_ID],
+			...signal ? { signal } : {}
+		});
+		return current;
+	};
+	return {
+		/** Whether the shared sign-in exists on disk. No network call; the same check `credentials` runs first. */
+		async signedIn(signal) {
+			return (await fresh(signal)).isUsingSubscription(require_index.CHATGPT_AUTH_PROVIDER_ID);
+		},
+		async credentials(loginMessage, signal) {
+			const current = await fresh(signal);
+			return require_index.chatgptCredentials({
+				available: () => current.isUsingSubscription(require_index.CHATGPT_AUTH_PROVIDER_ID),
+				getAuth: (authSignal) => current.getAuth(require_index.CHATGPT_AUTH_PROVIDER_ID, authSignal ? { signal: authSignal } : {})
+			}, loginMessage, signal);
+		}
+	};
+}
+//#endregion
+exports.createChatgptAuthReader = createChatgptAuthReader;
+exports.registerChatgptAuthProvider = registerChatgptAuthProvider;
+
+//# sourceMappingURL=index.cjs.map

package/dist/src/services/chatgptLogin/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["readBoundedJson","accountIdOf","timingSafeEqual","createServer","randomBytes","createHash","CHATGPT_AUTH_PROVIDER_NAME","CHATGPT_AUTH_PROVIDER_ID","piAgentDirectory","modelConfigDirectory","ModelRuntime","path","chatgptCredentials"],"sources":["../../../../src/services/chatgptLogin/index.ts"],"sourcesContent":["/*\n * Portions of this file are adapted from OpenAI Codex at commit 5ecb3afd1b, by way of po-voice.\n * Copyright OpenAI. Licensed under the Apache License, Version 2.0.\n */\n\nimport { createHash, randomBytes, timingSafeEqual } from 'node:crypto';\nimport { createServer } from 'node:http';\nimport path from 'node:path';\n\nimport { ModelRuntime, type ProviderConfig } from '@earendil-works/pi-coding-agent';\n\nimport {\n  accountIdOf,\n  CHATGPT_AUTH_PROVIDER_ID,\n  CHATGPT_AUTH_PROVIDER_NAME,\n  chatgptCredentials,\n  readBoundedJson,\n} from '../chatgptAuth';\nimport { modelConfigDirectory, piAgentDirectory } from '../piSettings';\n\nconst CLIENT_ID = 'app_EMoamEEZ73f0CkXaXp7hrann';\nconst AUTH_ORIGIN = 'https://auth.openai.com';\nconst TOKEN_URL = `${AUTH_ORIGIN}/oauth/token`;\n/** Realtime voice needs the connector scopes that Pi's own ChatGPT login does not request. */\nconst SCOPE = 'openid profile email offline_access api.connectors.read api.connectors.invoke';\nconst CALLBACK_HOST = '127.0.0.1';\nconst CALLBACK_PORT = 1455;\nconst CALLBACK_PATH = '/auth/callback';\n/** The redirect registered for this OAuth client; the browser reaches the listener through localhost. */\nconst REDIRECT_URI = `http://localhost:${CALLBACK_PORT}${CALLBACK_PATH}`;\nconst MAX_TOKEN_RESPONSE_BYTES = 1024 * 1024;\nconst TOKEN_TIMEOUT_MS = 30_000;\n\ntype ChatgptOAuth = NonNullable<ProviderConfig['oauth']>;\ntype LoginCallbacks = Parameters<ChatgptOAuth['login']>[0];\ntype OAuthCredentials = Awaited<ReturnType<ChatgptOAuth['login']>>;\n\nfunction record(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nasync function requestTokens(\n  body: URLSearchParams,\n  previousRefresh: string | undefined,\n  signal: AbortSignal | undefined,\n): Promise<OAuthCredentials> {\n  const bounded = AbortSignal.any([AbortSignal.timeout(TOKEN_TIMEOUT_MS), ...(signal ? [signal] : [])]);\n  const response = await fetch(TOKEN_URL, {\n    method: 'POST',\n    headers: { 'content-type': 'application/x-www-form-urlencoded' },\n    body,\n    redirect: 'error',\n    signal: bounded,\n  });\n  if (!response.ok) {\n    await response.body?.cancel().catch(() => undefined); // The body may echo tokens; it is never read.\n    throw new Error(`ChatGPT sign-in was rejected (HTTP ${response.status}). Sign in again.`);\n  }\n  const json = await readBoundedJson(response, MAX_TOKEN_RESPONSE_BYTES, bounded);\n  const access = record(json) ? json.access_token : undefined;\n  const refresh = record(json) ? (json.refresh_token ?? previousRefresh) : undefined;\n  const expiresIn = record(json) ? json.expires_in : undefined;\n  if (typeof access !== 'string' || typeof refresh !== 'string' || typeof expiresIn !== 'number' || expiresIn <= 0)\n    throw new Error('ChatGPT sign-in returned an invalid token response.');\n  const accountId = accountIdOf(access);\n  if (!accountId) throw new Error('ChatGPT sign-in did not include a ChatGPT account.');\n  return { access, refresh, expires: Date.now() + expiresIn * 1000, accountId };\n}\n\nfunction sameState(supplied: string | null, expected: string): boolean {\n  const left = Buffer.from(supplied ?? '');\n  const right = Buffer.from(expected);\n  return left.length === right.length && timingSafeEqual(left, right);\n}\n\n/** The authorization code from a redirect URL; pasted input must carry the expected state. */\nfunction codeFromRedirect(url: URL, state: string): string {\n  for (const name of ['state', 'code', 'error'])\n    if (url.searchParams.getAll(name).length > 1) throw new Error('The sign-in address is invalid.');\n  if (!sameState(url.searchParams.get('state'), state))\n    throw new Error('The sign-in address does not match this attempt.');\n  if (url.searchParams.get('error')) throw new Error('ChatGPT sign-in was declined.');\n  const code = url.searchParams.get('code');\n  if (!code || code.trim() !== code) throw new Error('The sign-in address has no authorization code.');\n  return code;\n}\n\n/** Listens for the browser redirect on the registered loopback port; rejects when the port is taken. */\nasync function listenForCode(state: string, signal: AbortSignal | undefined) {\n  const server = createServer();\n  let resolveCode!: (code: string) => void;\n  let rejectCode!: (error: Error) => void;\n  const code = new Promise<string>((resolve, reject) => {\n    resolveCode = resolve;\n    rejectCode = reject;\n  });\n  code.catch(() => undefined); // Observed by the caller's race; never an unhandled rejection.\n  server.on('request', (request, response) => {\n    const reply = (status: number, text: string): void => {\n      response.writeHead(status, { 'content-type': 'text/plain; charset=utf-8', 'cache-control': 'no-store' });\n      response.end(text);\n    };\n    const url = new URL(request.url ?? '/', REDIRECT_URI);\n    if (request.method !== 'GET' || url.pathname !== CALLBACK_PATH) return reply(404, 'Not found.');\n    try {\n      resolveCode(codeFromRedirect(url, state));\n      reply(200, 'Signed in. You can close this page.');\n    } catch (error) {\n      // A stray or forged request must not end the attempt; only a matching declined redirect does.\n      if (sameState(url.searchParams.get('state'), state)) rejectCode(error as Error);\n      reply(400, 'Sign-in could not be completed.');\n    }\n  });\n  await new Promise<void>((resolve, reject) => {\n    server.once('error', reject);\n    server.listen({ host: CALLBACK_HOST, port: CALLBACK_PORT, exclusive: true }, () => {\n      server.off('error', reject);\n      resolve();\n    });\n  });\n  const close = (): void => {\n    server.close();\n    server.closeAllConnections();\n  };\n  signal?.addEventListener('abort', close, { once: true });\n  return { code, close };\n}\n\nasync function login(callbacks: LoginCallbacks): Promise<OAuthCredentials> {\n  const { signal } = callbacks;\n  const verifier = randomBytes(64).toString('base64url');\n  const state = randomBytes(32).toString('base64url');\n  const authorize = new URL(`${AUTH_ORIGIN}/oauth/authorize`);\n  authorize.search = new URLSearchParams({\n    response_type: 'code',\n    client_id: CLIENT_ID,\n    redirect_uri: REDIRECT_URI,\n    scope: SCOPE,\n    code_challenge: createHash('sha256').update(verifier).digest('base64url'),\n    code_challenge_method: 'S256',\n    id_token_add_organizations: 'true',\n    state,\n  }).toString();\n  // Port 1455 is shared with Codex and Pi's own ChatGPT login; when it is taken, the pasted address still works.\n  const callback = await listenForCode(state, signal).catch(() => undefined);\n  try {\n    callbacks.onAuth({\n      url: authorize.toString(),\n      instructions: 'Sign in in your browser. If it does not return here, paste the address it lands on.',\n    });\n    const pasted = (\n      callbacks.onManualCodeInput?.() ??\n      callbacks.onPrompt({ message: 'Paste the address your browser lands on', placeholder: REDIRECT_URI })\n    ).then((input) => {\n      if (!URL.canParse(input.trim())) throw new Error('Paste the full address from your browser.');\n      return codeFromRedirect(new URL(input.trim()), state);\n    });\n    const code = await (callback ? Promise.race([callback.code, pasted]) : pasted);\n    signal?.throwIfAborted();\n    return await requestTokens(\n      new URLSearchParams({\n        grant_type: 'authorization_code',\n        client_id: CLIENT_ID,\n        code,\n        code_verifier: verifier,\n        redirect_uri: REDIRECT_URI,\n      }),\n      undefined,\n      signal,\n    );\n  } finally {\n    callback?.close();\n  }\n}\n\nconst chatgptAuthProvider: ProviderConfig = {\n  name: CHATGPT_AUTH_PROVIDER_NAME,\n  oauth: {\n    name: CHATGPT_AUTH_PROVIDER_NAME,\n    isSubscription: true,\n    login,\n    refreshToken: (credentials, signal) =>\n      requestTokens(\n        new URLSearchParams({ grant_type: 'refresh_token', client_id: CLIENT_ID, refresh_token: credentials.refresh }),\n        credentials.refresh,\n        signal,\n      ),\n    getApiKey: (credentials) => credentials.access,\n  },\n};\n\n/** Adds the shared sign-in to a Pi model runtime: its Providers row, /login entry, refresh and storage. */\nexport function registerChatgptAuthProvider(runtime: Pick<ModelRuntime, 'registerProvider'>): void {\n  runtime.registerProvider(CHATGPT_AUTH_PROVIDER_ID, chatgptAuthProvider);\n}\n\n/**\n * Reads the shared sign-in outside a session (Voice runs at the hub). It opens the same auth.json\n * a session uses; Pi's file lock keeps refreshes from different runtimes from racing.\n */\nexport function createChatgptAuthReader(options: {\n  environment?: Readonly<Record<string, string | undefined>>;\n  homeDirectory?: string;\n}) {\n  let loading: Promise<ModelRuntime> | undefined;\n  const runtime = (): Promise<ModelRuntime> => {\n    loading ??= (async () => {\n      const agentDirectory = piAgentDirectory(options.environment, options.homeDirectory);\n      const directory = modelConfigDirectory(agentDirectory, options.homeDirectory);\n      const created = await ModelRuntime.create({\n        authPath: path.join(directory, 'auth.json'),\n        modelsPath: path.join(directory, 'models.json'),\n        refreshOnCreate: false,\n      });\n      registerChatgptAuthProvider(created);\n      return created;\n    })().catch((error: unknown) => {\n      loading = undefined; // A failed open is retried on the next use rather than pinned.\n      throw error;\n    });\n    return loading;\n  };\n  // Sign-in happens in another runtime (the Providers page or a session), so re-read the file first.\n  const fresh = async (signal?: AbortSignal): Promise<ModelRuntime> => {\n    const current = await runtime();\n    await current.refresh({\n      allowNetwork: false,\n      providers: [CHATGPT_AUTH_PROVIDER_ID],\n      ...(signal ? { signal } : {}),\n    });\n    return current;\n  };\n  return {\n    /** Whether the shared sign-in exists on disk. No network call; the same check `credentials` runs first. */\n    async signedIn(signal?: AbortSignal): Promise<boolean> {\n      return (await fresh(signal)).isUsingSubscription(CHATGPT_AUTH_PROVIDER_ID);\n    },\n    async credentials(loginMessage: string, signal?: AbortSignal): Promise<{ token: string; accountId: string }> {\n      const current = await fresh(signal);\n      return chatgptCredentials(\n        {\n          available: () => current.isUsingSubscription(CHATGPT_AUTH_PROVIDER_ID),\n          getAuth: (authSignal) => current.getAuth(CHATGPT_AUTH_PROVIDER_ID, authSignal ? { signal: authSignal } : {}),\n        },\n        loginMessage,\n        signal,\n      );\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;AAoBA,MAAM,YAAY;AAClB,MAAM,cAAc;AACpB,MAAM,YAAY,GAAG,YAAY;;AAEjC,MAAM,QAAQ;AACd,MAAM,gBAAgB;AACtB,MAAM,gBAAgB;AACtB,MAAM,gBAAgB;;AAEtB,MAAM,eAAe,oBAAoB,gBAAgB;AACzD,MAAM,2BAA2B;AACjC,MAAM,mBAAmB;AAMzB,SAAS,OAAO,OAAkD;CAChE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,eAAe,cACb,MACA,iBACA,QAC2B;CAC3B,MAAM,UAAU,YAAY,IAAI,CAAC,YAAY,QAAQ,gBAAgB,GAAG,GAAI,SAAS,CAAC,MAAM,IAAI,CAAC,CAAE,CAAC;CACpG,MAAM,WAAW,MAAM,MAAM,WAAW;EACtC,QAAQ;EACR,SAAS,EAAE,gBAAgB,oCAAoC;EAC/D;EACA,UAAU;EACV,QAAQ;CACV,CAAC;CACD,IAAI,CAAC,SAAS,IAAI;EAChB,MAAM,SAAS,MAAM,OAAO,CAAC,CAAC,YAAY,KAAA,CAAS;EACnD,MAAM,IAAI,MAAM,sCAAsC,SAAS,OAAO,kBAAkB;CAC1F;CACA,MAAM,OAAO,MAAMA,cAAAA,gBAAgB,UAAU,0BAA0B,OAAO;CAC9E,MAAM,SAAS,OAAO,IAAI,IAAI,KAAK,eAAe,KAAA;CAClD,MAAM,UAAU,OAAO,IAAI,IAAK,KAAK,iBAAiB,kBAAmB,KAAA;CACzE,MAAM,YAAY,OAAO,IAAI,IAAI,KAAK,aAAa,KAAA;CACnD,IAAI,OAAO,WAAW,YAAY,OAAO,YAAY,YAAY,OAAO,cAAc,YAAY,aAAa,GAC7G,MAAM,IAAI,MAAM,qDAAqD;CACvE,MAAM,YAAYC,cAAAA,YAAY,MAAM;CACpC,IAAI,CAAC,WAAW,MAAM,IAAI,MAAM,oDAAoD;CACpF,OAAO;EAAE;EAAQ;EAAS,SAAS,KAAK,IAAI,IAAI,YAAY;EAAM;CAAU;AAC9E;AAEA,SAAS,UAAU,UAAyB,UAA2B;CACrE,MAAM,OAAO,OAAO,KAAK,YAAY,EAAE;CACvC,MAAM,QAAQ,OAAO,KAAK,QAAQ;CAClC,OAAO,KAAK,WAAW,MAAM,WAAA,GAAUC,YAAAA,gBAAAA,CAAgB,MAAM,KAAK;AACpE;;AAGA,SAAS,iBAAiB,KAAU,OAAuB;CACzD,KAAK,MAAM,QAAQ;EAAC;EAAS;EAAQ;CAAO,GAC1C,IAAI,IAAI,aAAa,OAAO,IAAI,CAAC,CAAC,SAAS,GAAG,MAAM,IAAI,MAAM,iCAAiC;CACjG,IAAI,CAAC,UAAU,IAAI,aAAa,IAAI,OAAO,GAAG,KAAK,GACjD,MAAM,IAAI,MAAM,kDAAkD;CACpE,IAAI,IAAI,aAAa,IAAI,OAAO,GAAG,MAAM,IAAI,MAAM,+BAA+B;CAClF,MAAM,OAAO,IAAI,aAAa,IAAI,MAAM;CACxC,IAAI,CAAC,QAAQ,KAAK,KAAK,MAAM,MAAM,MAAM,IAAI,MAAM,gDAAgD;CACnG,OAAO;AACT;;AAGA,eAAe,cAAc,OAAe,QAAiC;CAC3E,MAAM,UAAA,GAASC,UAAAA,aAAAA,CAAa;CAC5B,IAAI;CACJ,IAAI;CACJ,MAAM,OAAO,IAAI,SAAiB,SAAS,WAAW;EACpD,cAAc;EACd,aAAa;CACf,CAAC;CACD,KAAK,YAAY,KAAA,CAAS;CAC1B,OAAO,GAAG,YAAY,SAAS,aAAa;EAC1C,MAAM,SAAS,QAAgB,SAAuB;GACpD,SAAS,UAAU,QAAQ;IAAE,gBAAgB;IAA6B,iBAAiB;GAAW,CAAC;GACvG,SAAS,IAAI,IAAI;EACnB;EACA,MAAM,MAAM,IAAI,IAAI,QAAQ,OAAO,KAAK,YAAY;EACpD,IAAI,QAAQ,WAAW,SAAS,IAAI,aAAa,eAAe,OAAO,MAAM,KAAK,YAAY;EAC9F,IAAI;GACF,YAAY,iBAAiB,KAAK,KAAK,CAAC;GACxC,MAAM,KAAK,qCAAqC;EAClD,SAAS,OAAO;GAEd,IAAI,UAAU,IAAI,aAAa,IAAI,OAAO,GAAG,KAAK,GAAG,WAAW,KAAc;GAC9E,MAAM,KAAK,iCAAiC;EAC9C;CACF,CAAC;CACD,MAAM,IAAI,SAAe,SAAS,WAAW;EAC3C,OAAO,KAAK,SAAS,MAAM;EAC3B,OAAO,OAAO;GAAE,MAAM;GAAe,MAAM;GAAe,WAAW;EAAK,SAAS;GACjF,OAAO,IAAI,SAAS,MAAM;GAC1B,QAAQ;EACV,CAAC;CACH,CAAC;CACD,MAAM,cAAoB;EACxB,OAAO,MAAM;EACb,OAAO,oBAAoB;CAC7B;CACA,QAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;CACvD,OAAO;EAAE;EAAM;CAAM;AACvB;AAEA,eAAe,MAAM,WAAsD;CACzE,MAAM,EAAE,WAAW;CACnB,MAAM,YAAA,GAAWC,YAAAA,YAAAA,CAAY,EAAE,CAAC,CAAC,SAAS,WAAW;CACrD,MAAM,SAAA,GAAQA,YAAAA,YAAAA,CAAY,EAAE,CAAC,CAAC,SAAS,WAAW;CAClD,MAAM,YAAY,IAAI,IAAI,GAAG,YAAY,iBAAiB;CAC1D,UAAU,SAAS,IAAI,gBAAgB;EACrC,eAAe;EACf,WAAW;EACX,cAAc;EACd,OAAO;EACP,iBAAA,GAAgBC,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,OAAO,WAAW;EACxE,uBAAuB;EACvB,4BAA4B;EAC5B;CACF,CAAC,CAAC,CAAC,SAAS;CAEZ,MAAM,WAAW,MAAM,cAAc,OAAO,MAAM,CAAC,CAAC,YAAY,KAAA,CAAS;CACzE,IAAI;EACF,UAAU,OAAO;GACf,KAAK,UAAU,SAAS;GACxB,cAAc;EAChB,CAAC;EACD,MAAM,UACJ,UAAU,oBAAoB,KAC9B,UAAU,SAAS;GAAE,SAAS;GAA2C,aAAa;EAAa,CAAC,EAAA,CACpG,MAAM,UAAU;GAChB,IAAI,CAAC,IAAI,SAAS,MAAM,KAAK,CAAC,GAAG,MAAM,IAAI,MAAM,2CAA2C;GAC5F,OAAO,iBAAiB,IAAI,IAAI,MAAM,KAAK,CAAC,GAAG,KAAK;EACtD,CAAC;EACD,MAAM,OAAO,OAAO,WAAW,QAAQ,KAAK,CAAC,SAAS,MAAM,MAAM,CAAC,IAAI;EACvE,QAAQ,eAAe;EACvB,OAAO,MAAM,cACX,IAAI,gBAAgB;GAClB,YAAY;GACZ,WAAW;GACX;GACA,eAAe;GACf,cAAc;EAChB,CAAC,GACD,KAAA,GACA,MACF;CACF,UAAU;EACR,UAAU,MAAM;CAClB;AACF;AAEA,MAAM,sBAAsC;CAC1C,MAAMC,cAAAA;CACN,OAAO;EACL,MAAMA,cAAAA;EACN,gBAAgB;EAChB;EACA,eAAe,aAAa,WAC1B,cACE,IAAI,gBAAgB;GAAE,YAAY;GAAiB,WAAW;GAAW,eAAe,YAAY;EAAQ,CAAC,GAC7G,YAAY,SACZ,MACF;EACF,YAAY,gBAAgB,YAAY;CAC1C;AACF;;AAGA,SAAgB,4BAA4B,SAAuD;CACjG,QAAQ,iBAAiBC,cAAAA,0BAA0B,mBAAmB;AACxE;;;;;AAMA,SAAgB,wBAAwB,SAGrC;CACD,IAAI;CACJ,MAAM,gBAAuC;EAC3C,aAAa,YAAY;GACvB,MAAM,iBAAiBC,aAAAA,iBAAiB,QAAQ,aAAa,QAAQ,aAAa;GAClF,MAAM,YAAYC,aAAAA,qBAAqB,gBAAgB,QAAQ,aAAa;GAC5E,MAAM,UAAU,MAAMC,gCAAAA,aAAa,OAAO;IACxC,UAAUC,UAAAA,QAAK,KAAK,WAAW,WAAW;IAC1C,YAAYA,UAAAA,QAAK,KAAK,WAAW,aAAa;IAC9C,iBAAiB;GACnB,CAAC;GACD,4BAA4B,OAAO;GACnC,OAAO;EACT,EAAA,CAAG,CAAC,CAAC,OAAO,UAAmB;GAC7B,UAAU,KAAA;GACV,MAAM;EACR,CAAC;EACD,OAAO;CACT;CAEA,MAAM,QAAQ,OAAO,WAAgD;EACnE,MAAM,UAAU,MAAM,QAAQ;EAC9B,MAAM,QAAQ,QAAQ;GACpB,cAAc;GACd,WAAW,CAACJ,cAAAA,wBAAwB;GACpC,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;EAC7B,CAAC;EACD,OAAO;CACT;CACA,OAAO;;EAEL,MAAM,SAAS,QAAwC;GACrD,QAAQ,MAAM,MAAM,MAAM,EAAA,CAAG,oBAAoBA,cAAAA,wBAAwB;EAC3E;EACA,MAAM,YAAY,cAAsB,QAAqE;GAC3G,MAAM,UAAU,MAAM,MAAM,MAAM;GAClC,OAAOK,cAAAA,mBACL;IACE,iBAAiB,QAAQ,oBAAoBL,cAAAA,wBAAwB;IACrE,UAAU,eAAe,QAAQ,QAAQA,cAAAA,0BAA0B,aAAa,EAAE,QAAQ,WAAW,IAAI,CAAC,CAAC;GAC7G,GACA,cACA,MACF;EACF;CACF;AACF"}

package/dist/src/services/chatgptLogin/index.d.mts

@@ -0,0 +1,21 @@
+import { ModelRuntime } from "@earendil-works/pi-coding-agent";
+//#region src/services/chatgptLogin/index.d.ts
+/** Adds the shared sign-in to a Pi model runtime: its Providers row, /login entry, refresh and storage. */
+export declare function registerChatgptAuthProvider(runtime: Pick<ModelRuntime, 'registerProvider'>): void;
+/**
+ * Reads the shared sign-in outside a session (Voice runs at the hub). It opens the same auth.json
+ * a session uses; Pi's file lock keeps refreshes from different runtimes from racing.
+ */
+export declare function createChatgptAuthReader(options: {
+  environment?: Readonly<Record<string, string | undefined>>;
+  homeDirectory?: string;
+}): {
+  /** Whether the shared sign-in exists on disk. No network call; the same check `credentials` runs first. */
+  signedIn(signal?: AbortSignal): Promise<boolean>;
+  credentials(loginMessage: string, signal?: AbortSignal): Promise<{
+    token: string;
+    accountId: string;
+  }>;
+};
+//#endregion
+//# sourceMappingURL=index.d.mts.map

package/dist/src/services/chatgptLogin/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../src/services/chatgptLogin/index.ts"],"mappings":";;;wBAgMgB,4BAA4B,SAAS,KAAK;;;;;wBAQ1C,wBAAwB;EACtC,cAAc,SAAS;EACvB;;;EAgCQ,SAAQ,SAAU,cAAc;EAGhC,YAAW,sBAAqB,SAAW,cAAc;IAAU;IAAe"}

package/dist/src/services/chatgptLogin/index.mjs

@@ -0,0 +1,227 @@
+import { piAgentDirectory } from "../piSettings/core.mjs";
+import { modelConfigDirectory } from "../piSettings/sync.mjs";
+import "../../../runtimePiSettings.mjs";
+import { CHATGPT_AUTH_PROVIDER_ID, CHATGPT_AUTH_PROVIDER_NAME, accountIdOf, chatgptCredentials, readBoundedJson } from "../chatgptAuth/index.mjs";
+import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
+import path from "node:path";
+import { createServer } from "node:http";
+import { ModelRuntime } from "@earendil-works/pi-coding-agent";
+//#region src/services/chatgptLogin/index.ts
+const CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
+const AUTH_ORIGIN = "https://auth.openai.com";
+const TOKEN_URL = `${AUTH_ORIGIN}/oauth/token`;
+/** Realtime voice needs the connector scopes that Pi's own ChatGPT login does not request. */
+const SCOPE = "openid profile email offline_access api.connectors.read api.connectors.invoke";
+const CALLBACK_HOST = "127.0.0.1";
+const CALLBACK_PORT = 1455;
+const CALLBACK_PATH = "/auth/callback";
+/** The redirect registered for this OAuth client; the browser reaches the listener through localhost. */
+const REDIRECT_URI = `http://localhost:${CALLBACK_PORT}${CALLBACK_PATH}`;
+const MAX_TOKEN_RESPONSE_BYTES = 1048576;
+const TOKEN_TIMEOUT_MS = 3e4;
+function record(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+async function requestTokens(body, previousRefresh, signal) {
+	const bounded = AbortSignal.any([AbortSignal.timeout(TOKEN_TIMEOUT_MS), ...signal ? [signal] : []]);
+	const response = await fetch(TOKEN_URL, {
+		method: "POST",
+		headers: { "content-type": "application/x-www-form-urlencoded" },
+		body,
+		redirect: "error",
+		signal: bounded
+	});
+	if (!response.ok) {
+		await response.body?.cancel().catch(() => void 0);
+		throw new Error(`ChatGPT sign-in was rejected (HTTP ${response.status}). Sign in again.`);
+	}
+	const json = await readBoundedJson(response, MAX_TOKEN_RESPONSE_BYTES, bounded);
+	const access = record(json) ? json.access_token : void 0;
+	const refresh = record(json) ? json.refresh_token ?? previousRefresh : void 0;
+	const expiresIn = record(json) ? json.expires_in : void 0;
+	if (typeof access !== "string" || typeof refresh !== "string" || typeof expiresIn !== "number" || expiresIn <= 0) throw new Error("ChatGPT sign-in returned an invalid token response.");
+	const accountId = accountIdOf(access);
+	if (!accountId) throw new Error("ChatGPT sign-in did not include a ChatGPT account.");
+	return {
+		access,
+		refresh,
+		expires: Date.now() + expiresIn * 1e3,
+		accountId
+	};
+}
+function sameState(supplied, expected) {
+	const left = Buffer.from(supplied ?? "");
+	const right = Buffer.from(expected);
+	return left.length === right.length && timingSafeEqual(left, right);
+}
+/** The authorization code from a redirect URL; pasted input must carry the expected state. */
+function codeFromRedirect(url, state) {
+	for (const name of [
+		"state",
+		"code",
+		"error"
+	]) if (url.searchParams.getAll(name).length > 1) throw new Error("The sign-in address is invalid.");
+	if (!sameState(url.searchParams.get("state"), state)) throw new Error("The sign-in address does not match this attempt.");
+	if (url.searchParams.get("error")) throw new Error("ChatGPT sign-in was declined.");
+	const code = url.searchParams.get("code");
+	if (!code || code.trim() !== code) throw new Error("The sign-in address has no authorization code.");
+	return code;
+}
+/** Listens for the browser redirect on the registered loopback port; rejects when the port is taken. */
+async function listenForCode(state, signal) {
+	const server = createServer();
+	let resolveCode;
+	let rejectCode;
+	const code = new Promise((resolve, reject) => {
+		resolveCode = resolve;
+		rejectCode = reject;
+	});
+	code.catch(() => void 0);
+	server.on("request", (request, response) => {
+		const reply = (status, text) => {
+			response.writeHead(status, {
+				"content-type": "text/plain; charset=utf-8",
+				"cache-control": "no-store"
+			});
+			response.end(text);
+		};
+		const url = new URL(request.url ?? "/", REDIRECT_URI);
+		if (request.method !== "GET" || url.pathname !== CALLBACK_PATH) return reply(404, "Not found.");
+		try {
+			resolveCode(codeFromRedirect(url, state));
+			reply(200, "Signed in. You can close this page.");
+		} catch (error) {
+			if (sameState(url.searchParams.get("state"), state)) rejectCode(error);
+			reply(400, "Sign-in could not be completed.");
+		}
+	});
+	await new Promise((resolve, reject) => {
+		server.once("error", reject);
+		server.listen({
+			host: CALLBACK_HOST,
+			port: CALLBACK_PORT,
+			exclusive: true
+		}, () => {
+			server.off("error", reject);
+			resolve();
+		});
+	});
+	const close = () => {
+		server.close();
+		server.closeAllConnections();
+	};
+	signal?.addEventListener("abort", close, { once: true });
+	return {
+		code,
+		close
+	};
+}
+async function login(callbacks) {
+	const { signal } = callbacks;
+	const verifier = randomBytes(64).toString("base64url");
+	const state = randomBytes(32).toString("base64url");
+	const authorize = new URL(`${AUTH_ORIGIN}/oauth/authorize`);
+	authorize.search = new URLSearchParams({
+		response_type: "code",
+		client_id: CLIENT_ID,
+		redirect_uri: REDIRECT_URI,
+		scope: SCOPE,
+		code_challenge: createHash("sha256").update(verifier).digest("base64url"),
+		code_challenge_method: "S256",
+		id_token_add_organizations: "true",
+		state
+	}).toString();
+	const callback = await listenForCode(state, signal).catch(() => void 0);
+	try {
+		callbacks.onAuth({
+			url: authorize.toString(),
+			instructions: "Sign in in your browser. If it does not return here, paste the address it lands on."
+		});
+		const pasted = (callbacks.onManualCodeInput?.() ?? callbacks.onPrompt({
+			message: "Paste the address your browser lands on",
+			placeholder: REDIRECT_URI
+		})).then((input) => {
+			if (!URL.canParse(input.trim())) throw new Error("Paste the full address from your browser.");
+			return codeFromRedirect(new URL(input.trim()), state);
+		});
+		const code = await (callback ? Promise.race([callback.code, pasted]) : pasted);
+		signal?.throwIfAborted();
+		return await requestTokens(new URLSearchParams({
+			grant_type: "authorization_code",
+			client_id: CLIENT_ID,
+			code,
+			code_verifier: verifier,
+			redirect_uri: REDIRECT_URI
+		}), void 0, signal);
+	} finally {
+		callback?.close();
+	}
+}
+const chatgptAuthProvider = {
+	name: CHATGPT_AUTH_PROVIDER_NAME,
+	oauth: {
+		name: CHATGPT_AUTH_PROVIDER_NAME,
+		isSubscription: true,
+		login,
+		refreshToken: (credentials, signal) => requestTokens(new URLSearchParams({
+			grant_type: "refresh_token",
+			client_id: CLIENT_ID,
+			refresh_token: credentials.refresh
+		}), credentials.refresh, signal),
+		getApiKey: (credentials) => credentials.access
+	}
+};
+/** Adds the shared sign-in to a Pi model runtime: its Providers row, /login entry, refresh and storage. */
+function registerChatgptAuthProvider(runtime) {
+	runtime.registerProvider(CHATGPT_AUTH_PROVIDER_ID, chatgptAuthProvider);
+}
+/**
+* Reads the shared sign-in outside a session (Voice runs at the hub). It opens the same auth.json
+* a session uses; Pi's file lock keeps refreshes from different runtimes from racing.
+*/
+function createChatgptAuthReader(options) {
+	let loading;
+	const runtime = () => {
+		loading ??= (async () => {
+			const agentDirectory = piAgentDirectory(options.environment, options.homeDirectory);
+			const directory = modelConfigDirectory(agentDirectory, options.homeDirectory);
+			const created = await ModelRuntime.create({
+				authPath: path.join(directory, "auth.json"),
+				modelsPath: path.join(directory, "models.json"),
+				refreshOnCreate: false
+			});
+			registerChatgptAuthProvider(created);
+			return created;
+		})().catch((error) => {
+			loading = void 0;
+			throw error;
+		});
+		return loading;
+	};
+	const fresh = async (signal) => {
+		const current = await runtime();
+		await current.refresh({
+			allowNetwork: false,
+			providers: [CHATGPT_AUTH_PROVIDER_ID],
+			...signal ? { signal } : {}
+		});
+		return current;
+	};
+	return {
+		/** Whether the shared sign-in exists on disk. No network call; the same check `credentials` runs first. */
+		async signedIn(signal) {
+			return (await fresh(signal)).isUsingSubscription(CHATGPT_AUTH_PROVIDER_ID);
+		},
+		async credentials(loginMessage, signal) {
+			const current = await fresh(signal);
+			return chatgptCredentials({
+				available: () => current.isUsingSubscription(CHATGPT_AUTH_PROVIDER_ID),
+				getAuth: (authSignal) => current.getAuth(CHATGPT_AUTH_PROVIDER_ID, authSignal ? { signal: authSignal } : {})
+			}, loginMessage, signal);
+		}
+	};
+}
+//#endregion
+export { createChatgptAuthReader, registerChatgptAuthProvider };
+
+//# sourceMappingURL=index.mjs.map

package/dist/src/services/chatgptLogin/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/services/chatgptLogin/index.ts"],"sourcesContent":["/*\n * Portions of this file are adapted from OpenAI Codex at commit 5ecb3afd1b, by way of po-voice.\n * Copyright OpenAI. Licensed under the Apache License, Version 2.0.\n */\n\nimport { createHash, randomBytes, timingSafeEqual } from 'node:crypto';\nimport { createServer } from 'node:http';\nimport path from 'node:path';\n\nimport { ModelRuntime, type ProviderConfig } from '@earendil-works/pi-coding-agent';\n\nimport {\n  accountIdOf,\n  CHATGPT_AUTH_PROVIDER_ID,\n  CHATGPT_AUTH_PROVIDER_NAME,\n  chatgptCredentials,\n  readBoundedJson,\n} from '../chatgptAuth';\nimport { modelConfigDirectory, piAgentDirectory } from '../piSettings';\n\nconst CLIENT_ID = 'app_EMoamEEZ73f0CkXaXp7hrann';\nconst AUTH_ORIGIN = 'https://auth.openai.com';\nconst TOKEN_URL = `${AUTH_ORIGIN}/oauth/token`;\n/** Realtime voice needs the connector scopes that Pi's own ChatGPT login does not request. */\nconst SCOPE = 'openid profile email offline_access api.connectors.read api.connectors.invoke';\nconst CALLBACK_HOST = '127.0.0.1';\nconst CALLBACK_PORT = 1455;\nconst CALLBACK_PATH = '/auth/callback';\n/** The redirect registered for this OAuth client; the browser reaches the listener through localhost. */\nconst REDIRECT_URI = `http://localhost:${CALLBACK_PORT}${CALLBACK_PATH}`;\nconst MAX_TOKEN_RESPONSE_BYTES = 1024 * 1024;\nconst TOKEN_TIMEOUT_MS = 30_000;\n\ntype ChatgptOAuth = NonNullable<ProviderConfig['oauth']>;\ntype LoginCallbacks = Parameters<ChatgptOAuth['login']>[0];\ntype OAuthCredentials = Awaited<ReturnType<ChatgptOAuth['login']>>;\n\nfunction record(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nasync function requestTokens(\n  body: URLSearchParams,\n  previousRefresh: string | undefined,\n  signal: AbortSignal | undefined,\n): Promise<OAuthCredentials> {\n  const bounded = AbortSignal.any([AbortSignal.timeout(TOKEN_TIMEOUT_MS), ...(signal ? [signal] : [])]);\n  const response = await fetch(TOKEN_URL, {\n    method: 'POST',\n    headers: { 'content-type': 'application/x-www-form-urlencoded' },\n    body,\n    redirect: 'error',\n    signal: bounded,\n  });\n  if (!response.ok) {\n    await response.body?.cancel().catch(() => undefined); // The body may echo tokens; it is never read.\n    throw new Error(`ChatGPT sign-in was rejected (HTTP ${response.status}). Sign in again.`);\n  }\n  const json = await readBoundedJson(response, MAX_TOKEN_RESPONSE_BYTES, bounded);\n  const access = record(json) ? json.access_token : undefined;\n  const refresh = record(json) ? (json.refresh_token ?? previousRefresh) : undefined;\n  const expiresIn = record(json) ? json.expires_in : undefined;\n  if (typeof access !== 'string' || typeof refresh !== 'string' || typeof expiresIn !== 'number' || expiresIn <= 0)\n    throw new Error('ChatGPT sign-in returned an invalid token response.');\n  const accountId = accountIdOf(access);\n  if (!accountId) throw new Error('ChatGPT sign-in did not include a ChatGPT account.');\n  return { access, refresh, expires: Date.now() + expiresIn * 1000, accountId };\n}\n\nfunction sameState(supplied: string | null, expected: string): boolean {\n  const left = Buffer.from(supplied ?? '');\n  const right = Buffer.from(expected);\n  return left.length === right.length && timingSafeEqual(left, right);\n}\n\n/** The authorization code from a redirect URL; pasted input must carry the expected state. */\nfunction codeFromRedirect(url: URL, state: string): string {\n  for (const name of ['state', 'code', 'error'])\n    if (url.searchParams.getAll(name).length > 1) throw new Error('The sign-in address is invalid.');\n  if (!sameState(url.searchParams.get('state'), state))\n    throw new Error('The sign-in address does not match this attempt.');\n  if (url.searchParams.get('error')) throw new Error('ChatGPT sign-in was declined.');\n  const code = url.searchParams.get('code');\n  if (!code || code.trim() !== code) throw new Error('The sign-in address has no authorization code.');\n  return code;\n}\n\n/** Listens for the browser redirect on the registered loopback port; rejects when the port is taken. */\nasync function listenForCode(state: string, signal: AbortSignal | undefined) {\n  const server = createServer();\n  let resolveCode!: (code: string) => void;\n  let rejectCode!: (error: Error) => void;\n  const code = new Promise<string>((resolve, reject) => {\n    resolveCode = resolve;\n    rejectCode = reject;\n  });\n  code.catch(() => undefined); // Observed by the caller's race; never an unhandled rejection.\n  server.on('request', (request, response) => {\n    const reply = (status: number, text: string): void => {\n      response.writeHead(status, { 'content-type': 'text/plain; charset=utf-8', 'cache-control': 'no-store' });\n      response.end(text);\n    };\n    const url = new URL(request.url ?? '/', REDIRECT_URI);\n    if (request.method !== 'GET' || url.pathname !== CALLBACK_PATH) return reply(404, 'Not found.');\n    try {\n      resolveCode(codeFromRedirect(url, state));\n      reply(200, 'Signed in. You can close this page.');\n    } catch (error) {\n      // A stray or forged request must not end the attempt; only a matching declined redirect does.\n      if (sameState(url.searchParams.get('state'), state)) rejectCode(error as Error);\n      reply(400, 'Sign-in could not be completed.');\n    }\n  });\n  await new Promise<void>((resolve, reject) => {\n    server.once('error', reject);\n    server.listen({ host: CALLBACK_HOST, port: CALLBACK_PORT, exclusive: true }, () => {\n      server.off('error', reject);\n      resolve();\n    });\n  });\n  const close = (): void => {\n    server.close();\n    server.closeAllConnections();\n  };\n  signal?.addEventListener('abort', close, { once: true });\n  return { code, close };\n}\n\nasync function login(callbacks: LoginCallbacks): Promise<OAuthCredentials> {\n  const { signal } = callbacks;\n  const verifier = randomBytes(64).toString('base64url');\n  const state = randomBytes(32).toString('base64url');\n  const authorize = new URL(`${AUTH_ORIGIN}/oauth/authorize`);\n  authorize.search = new URLSearchParams({\n    response_type: 'code',\n    client_id: CLIENT_ID,\n    redirect_uri: REDIRECT_URI,\n    scope: SCOPE,\n    code_challenge: createHash('sha256').update(verifier).digest('base64url'),\n    code_challenge_method: 'S256',\n    id_token_add_organizations: 'true',\n    state,\n  }).toString();\n  // Port 1455 is shared with Codex and Pi's own ChatGPT login; when it is taken, the pasted address still works.\n  const callback = await listenForCode(state, signal).catch(() => undefined);\n  try {\n    callbacks.onAuth({\n      url: authorize.toString(),\n      instructions: 'Sign in in your browser. If it does not return here, paste the address it lands on.',\n    });\n    const pasted = (\n      callbacks.onManualCodeInput?.() ??\n      callbacks.onPrompt({ message: 'Paste the address your browser lands on', placeholder: REDIRECT_URI })\n    ).then((input) => {\n      if (!URL.canParse(input.trim())) throw new Error('Paste the full address from your browser.');\n      return codeFromRedirect(new URL(input.trim()), state);\n    });\n    const code = await (callback ? Promise.race([callback.code, pasted]) : pasted);\n    signal?.throwIfAborted();\n    return await requestTokens(\n      new URLSearchParams({\n        grant_type: 'authorization_code',\n        client_id: CLIENT_ID,\n        code,\n        code_verifier: verifier,\n        redirect_uri: REDIRECT_URI,\n      }),\n      undefined,\n      signal,\n    );\n  } finally {\n    callback?.close();\n  }\n}\n\nconst chatgptAuthProvider: ProviderConfig = {\n  name: CHATGPT_AUTH_PROVIDER_NAME,\n  oauth: {\n    name: CHATGPT_AUTH_PROVIDER_NAME,\n    isSubscription: true,\n    login,\n    refreshToken: (credentials, signal) =>\n      requestTokens(\n        new URLSearchParams({ grant_type: 'refresh_token', client_id: CLIENT_ID, refresh_token: credentials.refresh }),\n        credentials.refresh,\n        signal,\n      ),\n    getApiKey: (credentials) => credentials.access,\n  },\n};\n\n/** Adds the shared sign-in to a Pi model runtime: its Providers row, /login entry, refresh and storage. */\nexport function registerChatgptAuthProvider(runtime: Pick<ModelRuntime, 'registerProvider'>): void {\n  runtime.registerProvider(CHATGPT_AUTH_PROVIDER_ID, chatgptAuthProvider);\n}\n\n/**\n * Reads the shared sign-in outside a session (Voice runs at the hub). It opens the same auth.json\n * a session uses; Pi's file lock keeps refreshes from different runtimes from racing.\n */\nexport function createChatgptAuthReader(options: {\n  environment?: Readonly<Record<string, string | undefined>>;\n  homeDirectory?: string;\n}) {\n  let loading: Promise<ModelRuntime> | undefined;\n  const runtime = (): Promise<ModelRuntime> => {\n    loading ??= (async () => {\n      const agentDirectory = piAgentDirectory(options.environment, options.homeDirectory);\n      const directory = modelConfigDirectory(agentDirectory, options.homeDirectory);\n      const created = await ModelRuntime.create({\n        authPath: path.join(directory, 'auth.json'),\n        modelsPath: path.join(directory, 'models.json'),\n        refreshOnCreate: false,\n      });\n      registerChatgptAuthProvider(created);\n      return created;\n    })().catch((error: unknown) => {\n      loading = undefined; // A failed open is retried on the next use rather than pinned.\n      throw error;\n    });\n    return loading;\n  };\n  // Sign-in happens in another runtime (the Providers page or a session), so re-read the file first.\n  const fresh = async (signal?: AbortSignal): Promise<ModelRuntime> => {\n    const current = await runtime();\n    await current.refresh({\n      allowNetwork: false,\n      providers: [CHATGPT_AUTH_PROVIDER_ID],\n      ...(signal ? { signal } : {}),\n    });\n    return current;\n  };\n  return {\n    /** Whether the shared sign-in exists on disk. No network call; the same check `credentials` runs first. */\n    async signedIn(signal?: AbortSignal): Promise<boolean> {\n      return (await fresh(signal)).isUsingSubscription(CHATGPT_AUTH_PROVIDER_ID);\n    },\n    async credentials(loginMessage: string, signal?: AbortSignal): Promise<{ token: string; accountId: string }> {\n      const current = await fresh(signal);\n      return chatgptCredentials(\n        {\n          available: () => current.isUsingSubscription(CHATGPT_AUTH_PROVIDER_ID),\n          getAuth: (authSignal) => current.getAuth(CHATGPT_AUTH_PROVIDER_ID, authSignal ? { signal: authSignal } : {}),\n        },\n        loginMessage,\n        signal,\n      );\n    },\n  };\n}\n"],"mappings":";;;;;;;;;AAoBA,MAAM,YAAY;AAClB,MAAM,cAAc;AACpB,MAAM,YAAY,GAAG,YAAY;;AAEjC,MAAM,QAAQ;AACd,MAAM,gBAAgB;AACtB,MAAM,gBAAgB;AACtB,MAAM,gBAAgB;;AAEtB,MAAM,eAAe,oBAAoB,gBAAgB;AACzD,MAAM,2BAA2B;AACjC,MAAM,mBAAmB;AAMzB,SAAS,OAAO,OAAkD;CAChE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,eAAe,cACb,MACA,iBACA,QAC2B;CAC3B,MAAM,UAAU,YAAY,IAAI,CAAC,YAAY,QAAQ,gBAAgB,GAAG,GAAI,SAAS,CAAC,MAAM,IAAI,CAAC,CAAE,CAAC;CACpG,MAAM,WAAW,MAAM,MAAM,WAAW;EACtC,QAAQ;EACR,SAAS,EAAE,gBAAgB,oCAAoC;EAC/D;EACA,UAAU;EACV,QAAQ;CACV,CAAC;CACD,IAAI,CAAC,SAAS,IAAI;EAChB,MAAM,SAAS,MAAM,OAAO,CAAC,CAAC,YAAY,KAAA,CAAS;EACnD,MAAM,IAAI,MAAM,sCAAsC,SAAS,OAAO,kBAAkB;CAC1F;CACA,MAAM,OAAO,MAAM,gBAAgB,UAAU,0BAA0B,OAAO;CAC9E,MAAM,SAAS,OAAO,IAAI,IAAI,KAAK,eAAe,KAAA;CAClD,MAAM,UAAU,OAAO,IAAI,IAAK,KAAK,iBAAiB,kBAAmB,KAAA;CACzE,MAAM,YAAY,OAAO,IAAI,IAAI,KAAK,aAAa,KAAA;CACnD,IAAI,OAAO,WAAW,YAAY,OAAO,YAAY,YAAY,OAAO,cAAc,YAAY,aAAa,GAC7G,MAAM,IAAI,MAAM,qDAAqD;CACvE,MAAM,YAAY,YAAY,MAAM;CACpC,IAAI,CAAC,WAAW,MAAM,IAAI,MAAM,oDAAoD;CACpF,OAAO;EAAE;EAAQ;EAAS,SAAS,KAAK,IAAI,IAAI,YAAY;EAAM;CAAU;AAC9E;AAEA,SAAS,UAAU,UAAyB,UAA2B;CACrE,MAAM,OAAO,OAAO,KAAK,YAAY,EAAE;CACvC,MAAM,QAAQ,OAAO,KAAK,QAAQ;CAClC,OAAO,KAAK,WAAW,MAAM,UAAU,gBAAgB,MAAM,KAAK;AACpE;;AAGA,SAAS,iBAAiB,KAAU,OAAuB;CACzD,KAAK,MAAM,QAAQ;EAAC;EAAS;EAAQ;CAAO,GAC1C,IAAI,IAAI,aAAa,OAAO,IAAI,CAAC,CAAC,SAAS,GAAG,MAAM,IAAI,MAAM,iCAAiC;CACjG,IAAI,CAAC,UAAU,IAAI,aAAa,IAAI,OAAO,GAAG,KAAK,GACjD,MAAM,IAAI,MAAM,kDAAkD;CACpE,IAAI,IAAI,aAAa,IAAI,OAAO,GAAG,MAAM,IAAI,MAAM,+BAA+B;CAClF,MAAM,OAAO,IAAI,aAAa,IAAI,MAAM;CACxC,IAAI,CAAC,QAAQ,KAAK,KAAK,MAAM,MAAM,MAAM,IAAI,MAAM,gDAAgD;CACnG,OAAO;AACT;;AAGA,eAAe,cAAc,OAAe,QAAiC;CAC3E,MAAM,SAAS,aAAa;CAC5B,IAAI;CACJ,IAAI;CACJ,MAAM,OAAO,IAAI,SAAiB,SAAS,WAAW;EACpD,cAAc;EACd,aAAa;CACf,CAAC;CACD,KAAK,YAAY,KAAA,CAAS;CAC1B,OAAO,GAAG,YAAY,SAAS,aAAa;EAC1C,MAAM,SAAS,QAAgB,SAAuB;GACpD,SAAS,UAAU,QAAQ;IAAE,gBAAgB;IAA6B,iBAAiB;GAAW,CAAC;GACvG,SAAS,IAAI,IAAI;EACnB;EACA,MAAM,MAAM,IAAI,IAAI,QAAQ,OAAO,KAAK,YAAY;EACpD,IAAI,QAAQ,WAAW,SAAS,IAAI,aAAa,eAAe,OAAO,MAAM,KAAK,YAAY;EAC9F,IAAI;GACF,YAAY,iBAAiB,KAAK,KAAK,CAAC;GACxC,MAAM,KAAK,qCAAqC;EAClD,SAAS,OAAO;GAEd,IAAI,UAAU,IAAI,aAAa,IAAI,OAAO,GAAG,KAAK,GAAG,WAAW,KAAc;GAC9E,MAAM,KAAK,iCAAiC;EAC9C;CACF,CAAC;CACD,MAAM,IAAI,SAAe,SAAS,WAAW;EAC3C,OAAO,KAAK,SAAS,MAAM;EAC3B,OAAO,OAAO;GAAE,MAAM;GAAe,MAAM;GAAe,WAAW;EAAK,SAAS;GACjF,OAAO,IAAI,SAAS,MAAM;GAC1B,QAAQ;EACV,CAAC;CACH,CAAC;CACD,MAAM,cAAoB;EACxB,OAAO,MAAM;EACb,OAAO,oBAAoB;CAC7B;CACA,QAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;CACvD,OAAO;EAAE;EAAM;CAAM;AACvB;AAEA,eAAe,MAAM,WAAsD;CACzE,MAAM,EAAE,WAAW;CACnB,MAAM,WAAW,YAAY,EAAE,CAAC,CAAC,SAAS,WAAW;CACrD,MAAM,QAAQ,YAAY,EAAE,CAAC,CAAC,SAAS,WAAW;CAClD,MAAM,YAAY,IAAI,IAAI,GAAG,YAAY,iBAAiB;CAC1D,UAAU,SAAS,IAAI,gBAAgB;EACrC,eAAe;EACf,WAAW;EACX,cAAc;EACd,OAAO;EACP,gBAAgB,WAAW,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,OAAO,WAAW;EACxE,uBAAuB;EACvB,4BAA4B;EAC5B;CACF,CAAC,CAAC,CAAC,SAAS;CAEZ,MAAM,WAAW,MAAM,cAAc,OAAO,MAAM,CAAC,CAAC,YAAY,KAAA,CAAS;CACzE,IAAI;EACF,UAAU,OAAO;GACf,KAAK,UAAU,SAAS;GACxB,cAAc;EAChB,CAAC;EACD,MAAM,UACJ,UAAU,oBAAoB,KAC9B,UAAU,SAAS;GAAE,SAAS;GAA2C,aAAa;EAAa,CAAC,EAAA,CACpG,MAAM,UAAU;GAChB,IAAI,CAAC,IAAI,SAAS,MAAM,KAAK,CAAC,GAAG,MAAM,IAAI,MAAM,2CAA2C;GAC5F,OAAO,iBAAiB,IAAI,IAAI,MAAM,KAAK,CAAC,GAAG,KAAK;EACtD,CAAC;EACD,MAAM,OAAO,OAAO,WAAW,QAAQ,KAAK,CAAC,SAAS,MAAM,MAAM,CAAC,IAAI;EACvE,QAAQ,eAAe;EACvB,OAAO,MAAM,cACX,IAAI,gBAAgB;GAClB,YAAY;GACZ,WAAW;GACX;GACA,eAAe;GACf,cAAc;EAChB,CAAC,GACD,KAAA,GACA,MACF;CACF,UAAU;EACR,UAAU,MAAM;CAClB;AACF;AAEA,MAAM,sBAAsC;CAC1C,MAAM;CACN,OAAO;EACL,MAAM;EACN,gBAAgB;EAChB;EACA,eAAe,aAAa,WAC1B,cACE,IAAI,gBAAgB;GAAE,YAAY;GAAiB,WAAW;GAAW,eAAe,YAAY;EAAQ,CAAC,GAC7G,YAAY,SACZ,MACF;EACF,YAAY,gBAAgB,YAAY;CAC1C;AACF;;AAGA,SAAgB,4BAA4B,SAAuD;CACjG,QAAQ,iBAAiB,0BAA0B,mBAAmB;AACxE;;;;;AAMA,SAAgB,wBAAwB,SAGrC;CACD,IAAI;CACJ,MAAM,gBAAuC;EAC3C,aAAa,YAAY;GACvB,MAAM,iBAAiB,iBAAiB,QAAQ,aAAa,QAAQ,aAAa;GAClF,MAAM,YAAY,qBAAqB,gBAAgB,QAAQ,aAAa;GAC5E,MAAM,UAAU,MAAM,aAAa,OAAO;IACxC,UAAU,KAAK,KAAK,WAAW,WAAW;IAC1C,YAAY,KAAK,KAAK,WAAW,aAAa;IAC9C,iBAAiB;GACnB,CAAC;GACD,4BAA4B,OAAO;GACnC,OAAO;EACT,EAAA,CAAG,CAAC,CAAC,OAAO,UAAmB;GAC7B,UAAU,KAAA;GACV,MAAM;EACR,CAAC;EACD,OAAO;CACT;CAEA,MAAM,QAAQ,OAAO,WAAgD;EACnE,MAAM,UAAU,MAAM,QAAQ;EAC9B,MAAM,QAAQ,QAAQ;GACpB,cAAc;GACd,WAAW,CAAC,wBAAwB;GACpC,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;EAC7B,CAAC;EACD,OAAO;CACT;CACA,OAAO;;EAEL,MAAM,SAAS,QAAwC;GACrD,QAAQ,MAAM,MAAM,MAAM,EAAA,CAAG,oBAAoB,wBAAwB;EAC3E;EACA,MAAM,YAAY,cAAsB,QAAqE;GAC3G,MAAM,UAAU,MAAM,MAAM,MAAM;GAClC,OAAO,mBACL;IACE,iBAAiB,QAAQ,oBAAoB,wBAAwB;IACrE,UAAU,eAAe,QAAQ,QAAQ,0BAA0B,aAAa,EAAE,QAAQ,WAAW,IAAI,CAAC,CAAC;GAC7G,GACA,cACA,MACF;EACF;CACF;AACF"}

package/dist/src/services/chatgptWebSearch/index.cjs

@@ -48,7 +48,7 @@ function conversationInput(conversation) {
 		};
 	});
 }
-/** Host-only transport: authentication never crosses the facet boundary. */
+/** Host-only transport: authentication never crosses the package boundary. */
 function createChatgptWebSearchClient(dependencies) {
 	return { async search(request) {
 		const { signal } = request;

package/dist/src/services/chatgptWebSearch/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["CHATGPT_SIGN_IN_HINT","chatgptCredentials","readBoundedJson"],"sources":["../../../../src/services/chatgptWebSearch/index.ts"],"sourcesContent":["import type { DoomHeadlessExecutionContext } from '../../schemas/headless';\nimport { CHATGPT_SIGN_IN_HINT, chatgptCredentials, readBoundedJson } from '../chatgptAuth';\nimport type { ChatgptBackendDependencies } from '../chatgptImages/type';\n\nconst ENDPOINT = 'https://chatgpt.com/backend-api/codex/alpha/search';\nconst MAX_OUTPUT_TOKENS = 10_000; // Codex models.json tool truncation budget.\nconst MAX_COMMANDS_BYTES = 64 * 1024;\n// Fits the layer's ~20k-character excerpt even when every character needs a six-byte JSON escape.\nconst MAX_CONVERSATION_BYTES = 256 * 1024;\nconst MAX_CONVERSATION_ITEMS = 16;\nconst MAX_RESPONSE_BYTES = 4 * 1024 * 1024;\nconst MAX_RESULTS = 100;\nconst LOGIN_MESSAGE = `Web search needs a ChatGPT sign-in. ${CHATGPT_SIGN_IN_HINT}`;\nconst INVALID_RESPONSE = 'Web search returned an invalid response.';\nconst FAILED = 'Web search request failed.';\nconst ACCESS = { cached: false, indexed: 'indexed', live: true } as const;\n// ponytail: copy of Pi's defaultModelPerProvider['openai-codex'] (model-resolver.js), which Pi does not export.\n// Used when the chat model is not a ChatGPT model; goes stale when Pi's catalog moves.\nconst DEFAULT_MODEL = 'gpt-6.1-sol';\n\nexport type WebSearchRequest = Parameters<NonNullable<DoomHeadlessExecutionContext['webSearch']>['search']>[0] & {\n  sessionId: string;\n  /** The active ChatGPT model id; omitted when the chat model belongs to another provider. */\n  model?: string;\n};\n\nfunction record(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\n/** Detaches caller data into plain JSON so the wire body is exactly what was validated. */\nfunction boundedJson(value: unknown, limit: number, message: string): unknown {\n  let json: string | undefined;\n  try {\n    json = JSON.stringify(value);\n  } catch {\n    throw new Error(message);\n  }\n  if (json === undefined || Buffer.byteLength(json) > limit) throw new Error(message);\n  return JSON.parse(json) as unknown;\n}\n\nfunction conversationInput(conversation: unknown) {\n  if (conversation === undefined) return undefined;\n  const message = 'Invalid web search conversation.';\n  if (!Array.isArray(conversation) || conversation.length > MAX_CONVERSATION_ITEMS) throw new Error(message);\n  const items = boundedJson(conversation, MAX_CONVERSATION_BYTES, message) as unknown[];\n  if (items.length === 0) return undefined;\n  return items.map((item) => {\n    if (\n      !record(item) ||\n      (item.role !== 'user' && item.role !== 'assistant') ||\n      typeof item.text !== 'string' ||\n      !item.text\n    )\n      throw new Error(message);\n    return {\n      type: 'message',\n      role: item.role,\n      content: [{ type: item.role === 'user' ? 'input_text' : 'output_text', text: item.text }],\n    };\n  });\n}\n\n/** Host-only transport: authentication never crosses the facet boundary. */\nexport function createChatgptWebSearchClient(dependencies: ChatgptBackendDependencies) {\n  return {\n    async search(request: WebSearchRequest): Promise<{ output: string; results?: Record<string, unknown>[] }> {\n      const { signal } = request;\n      signal?.throwIfAborted();\n      if (!record(request.commands) || Object.keys(request.commands).length === 0)\n        throw new Error('Invalid web search commands.');\n      const commands = boundedJson(request.commands, MAX_COMMANDS_BYTES, 'Invalid web search commands.');\n      const input = conversationInput(request.conversation);\n      if (!Object.hasOwn(ACCESS, request.access)) throw new Error('Invalid web search access mode.');\n      const model = request.model ?? DEFAULT_MODEL;\n      if (typeof model !== 'string' || !/^[A-Za-z0-9._:-]{1,128}$/.test(model))\n        throw new Error('Invalid web search model.');\n      if (typeof request.sessionId !== 'string' || !/^[\\x21-\\x7e]{1,256}$/.test(request.sessionId))\n        throw new Error('Invalid web search session.');\n      const { token, accountId } = await chatgptCredentials(dependencies, LOGIN_MESSAGE, signal);\n      let response: Response;\n      try {\n        response = await (dependencies.fetch ?? globalThis.fetch)(ENDPOINT, {\n          method: 'POST',\n          redirect: 'error',\n          signal,\n          headers: {\n            Authorization: `Bearer ${token}`,\n            'chatgpt-account-id': accountId,\n            originator: 'po_web_search',\n            'User-Agent': '@agimon-ai/po-web-search',\n            'Content-Type': 'application/json',\n            Accept: 'application/json',\n          },\n          body: JSON.stringify({\n            id: request.sessionId,\n            model,\n            ...(input ? { input } : {}),\n            commands,\n            settings: { allowed_callers: ['direct'], external_web_access: ACCESS[request.access] },\n            max_output_tokens: MAX_OUTPUT_TOKENS,\n          }),\n        });\n      } catch {\n        signal?.throwIfAborted();\n        throw new Error(FAILED);\n      }\n      if (!response.ok) {\n        await response.body?.cancel().catch(() => undefined);\n        if (response.status === 401) throw new Error(LOGIN_MESSAGE);\n        if (response.status === 403) throw new Error('Web search is not available for this ChatGPT account.');\n        if (response.status === 429) {\n          const retry = response.headers.get('retry-after');\n          throw new Error(\n            `Web search quota reached.${retry && /^\\d{1,6}$/.test(retry) ? ` Try again in ${retry} seconds.` : ''}`,\n          );\n        }\n        throw new Error(`Web search request failed (HTTP ${response.status}).`);\n      }\n      let body: unknown;\n      try {\n        body = await readBoundedJson(response, MAX_RESPONSE_BYTES, signal);\n      } catch {\n        signal?.throwIfAborted();\n        throw new Error(INVALID_RESPONSE);\n      }\n      if (!record(body) || typeof body.output !== 'string') throw new Error(INVALID_RESPONSE);\n      const output = body.output.trim() ? body.output : 'Web search returned no results.';\n      // `results` is display-only, so a malformed list is dropped rather than failing the search.\n      const results =\n        Array.isArray(body.results) && body.results.length <= MAX_RESULTS && body.results.every(record)\n          ? body.results\n          : undefined;\n      return results ? { output, results } : { output };\n    },\n  };\n}\n"],"mappings":";;AAIA,MAAM,WAAW;AACjB,MAAM,oBAAoB;AAC1B,MAAM,qBAAqB;AAE3B,MAAM,yBAAyB;AAC/B,MAAM,yBAAyB;AAC/B,MAAM,qBAAqB;AAC3B,MAAM,cAAc;AACpB,MAAM,gBAAgB,uCAAuCA,cAAAA;AAC7D,MAAM,mBAAmB;AACzB,MAAM,SAAS;AACf,MAAM,SAAS;CAAE,QAAQ;CAAO,SAAS;CAAW,MAAM;AAAK;AAG/D,MAAM,gBAAgB;AAQtB,SAAS,OAAO,OAAkD;CAChE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;;AAGA,SAAS,YAAY,OAAgB,OAAe,SAA0B;CAC5E,IAAI;CACJ,IAAI;EACF,OAAO,KAAK,UAAU,KAAK;CAC7B,QAAQ;EACN,MAAM,IAAI,MAAM,OAAO;CACzB;CACA,IAAI,SAAS,KAAA,KAAa,OAAO,WAAW,IAAI,IAAI,OAAO,MAAM,IAAI,MAAM,OAAO;CAClF,OAAO,KAAK,MAAM,IAAI;AACxB;AAEA,SAAS,kBAAkB,cAAuB;CAChD,IAAI,iBAAiB,KAAA,GAAW,OAAO,KAAA;CACvC,MAAM,UAAU;CAChB,IAAI,CAAC,MAAM,QAAQ,YAAY,KAAK,aAAa,SAAS,wBAAwB,MAAM,IAAI,MAAM,OAAO;CACzG,MAAM,QAAQ,YAAY,cAAc,wBAAwB,OAAO;CACvE,IAAI,MAAM,WAAW,GAAG,OAAO,KAAA;CAC/B,OAAO,MAAM,KAAK,SAAS;EACzB,IACE,CAAC,OAAO,IAAI,KACX,KAAK,SAAS,UAAU,KAAK,SAAS,eACvC,OAAO,KAAK,SAAS,YACrB,CAAC,KAAK,MAEN,MAAM,IAAI,MAAM,OAAO;EACzB,OAAO;GACL,MAAM;GACN,MAAM,KAAK;GACX,SAAS,CAAC;IAAE,MAAM,KAAK,SAAS,SAAS,eAAe;IAAe,MAAM,KAAK;GAAK,CAAC;EAC1F;CACF,CAAC;AACH;;AAGA,SAAgB,6BAA6B,cAA0C;CACrF,OAAO,EACL,MAAM,OAAO,SAA6F;EACxG,MAAM,EAAE,WAAW;EACnB,QAAQ,eAAe;EACvB,IAAI,CAAC,OAAO,QAAQ,QAAQ,KAAK,OAAO,KAAK,QAAQ,QAAQ,CAAC,CAAC,WAAW,GACxE,MAAM,IAAI,MAAM,8BAA8B;EAChD,MAAM,WAAW,YAAY,QAAQ,UAAU,oBAAoB,8BAA8B;EACjG,MAAM,QAAQ,kBAAkB,QAAQ,YAAY;EACpD,IAAI,CAAC,OAAO,OAAO,QAAQ,QAAQ,MAAM,GAAG,MAAM,IAAI,MAAM,iCAAiC;EAC7F,MAAM,QAAQ,QAAQ,SAAS;EAC/B,IAAI,OAAO,UAAU,YAAY,CAAC,2BAA2B,KAAK,KAAK,GACrE,MAAM,IAAI,MAAM,2BAA2B;EAC7C,IAAI,OAAO,QAAQ,cAAc,YAAY,CAAC,uBAAuB,KAAK,QAAQ,SAAS,GACzF,MAAM,IAAI,MAAM,6BAA6B;EAC/C,MAAM,EAAE,OAAO,cAAc,MAAMC,cAAAA,mBAAmB,cAAc,eAAe,MAAM;EACzF,IAAI;EACJ,IAAI;GACF,WAAW,OAAO,aAAa,SAAS,WAAW,MAAA,CAAO,UAAU;IAClE,QAAQ;IACR,UAAU;IACV;IACA,SAAS;KACP,eAAe,UAAU;KACzB,sBAAsB;KACtB,YAAY;KACZ,cAAc;KACd,gBAAgB;KAChB,QAAQ;IACV;IACA,MAAM,KAAK,UAAU;KACnB,IAAI,QAAQ;KACZ;KACA,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;KACzB;KACA,UAAU;MAAE,iBAAiB,CAAC,QAAQ;MAAG,qBAAqB,OAAO,QAAQ;KAAQ;KACrF,mBAAmB;IACrB,CAAC;GACH,CAAC;EACH,QAAQ;GACN,QAAQ,eAAe;GACvB,MAAM,IAAI,MAAM,MAAM;EACxB;EACA,IAAI,CAAC,SAAS,IAAI;GAChB,MAAM,SAAS,MAAM,OAAO,CAAC,CAAC,YAAY,KAAA,CAAS;GACnD,IAAI,SAAS,WAAW,KAAK,MAAM,IAAI,MAAM,aAAa;GAC1D,IAAI,SAAS,WAAW,KAAK,MAAM,IAAI,MAAM,uDAAuD;GACpG,IAAI,SAAS,WAAW,KAAK;IAC3B,MAAM,QAAQ,SAAS,QAAQ,IAAI,aAAa;IAChD,MAAM,IAAI,MACR,4BAA4B,SAAS,YAAY,KAAK,KAAK,IAAI,iBAAiB,MAAM,aAAa,IACrG;GACF;GACA,MAAM,IAAI,MAAM,mCAAmC,SAAS,OAAO,GAAG;EACxE;EACA,IAAI;EACJ,IAAI;GACF,OAAO,MAAMC,cAAAA,gBAAgB,UAAU,oBAAoB,MAAM;EACnE,QAAQ;GACN,QAAQ,eAAe;GACvB,MAAM,IAAI,MAAM,gBAAgB;EAClC;EACA,IAAI,CAAC,OAAO,IAAI,KAAK,OAAO,KAAK,WAAW,UAAU,MAAM,IAAI,MAAM,gBAAgB;EACtF,MAAM,SAAS,KAAK,OAAO,KAAK,IAAI,KAAK,SAAS;EAElD,MAAM,UACJ,MAAM,QAAQ,KAAK,OAAO,KAAK,KAAK,QAAQ,UAAU,eAAe,KAAK,QAAQ,MAAM,MAAM,IAC1F,KAAK,UACL,KAAA;EACN,OAAO,UAAU;GAAE;GAAQ;EAAQ,IAAI,EAAE,OAAO;CAClD,EACF;AACF"}
+{"version":3,"file":"index.cjs","names":["CHATGPT_SIGN_IN_HINT","chatgptCredentials","readBoundedJson"],"sources":["../../../../src/services/chatgptWebSearch/index.ts"],"sourcesContent":["import type { PoHeadlessExecutionContext } from '../../schemas/headless';\nimport { CHATGPT_SIGN_IN_HINT, chatgptCredentials, readBoundedJson } from '../chatgptAuth';\nimport type { ChatgptBackendDependencies } from '../chatgptImages/type';\n\nconst ENDPOINT = 'https://chatgpt.com/backend-api/codex/alpha/search';\nconst MAX_OUTPUT_TOKENS = 10_000; // Codex models.json tool truncation budget.\nconst MAX_COMMANDS_BYTES = 64 * 1024;\n// Fits the layer's ~20k-character excerpt even when every character needs a six-byte JSON escape.\nconst MAX_CONVERSATION_BYTES = 256 * 1024;\nconst MAX_CONVERSATION_ITEMS = 16;\nconst MAX_RESPONSE_BYTES = 4 * 1024 * 1024;\nconst MAX_RESULTS = 100;\nconst LOGIN_MESSAGE = `Web search needs a ChatGPT sign-in. ${CHATGPT_SIGN_IN_HINT}`;\nconst INVALID_RESPONSE = 'Web search returned an invalid response.';\nconst FAILED = 'Web search request failed.';\nconst ACCESS = { cached: false, indexed: 'indexed', live: true } as const;\n// ponytail: copy of Pi's defaultModelPerProvider['openai-codex'] (model-resolver.js), which Pi does not export.\n// Used when the chat model is not a ChatGPT model; goes stale when Pi's catalog moves.\nconst DEFAULT_MODEL = 'gpt-6.1-sol';\n\nexport type WebSearchRequest = Parameters<NonNullable<PoHeadlessExecutionContext['webSearch']>['search']>[0] & {\n  sessionId: string;\n  /** The active ChatGPT model id; omitted when the chat model belongs to another provider. */\n  model?: string;\n};\n\nfunction record(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\n/** Detaches caller data into plain JSON so the wire body is exactly what was validated. */\nfunction boundedJson(value: unknown, limit: number, message: string): unknown {\n  let json: string | undefined;\n  try {\n    json = JSON.stringify(value);\n  } catch {\n    throw new Error(message);\n  }\n  if (json === undefined || Buffer.byteLength(json) > limit) throw new Error(message);\n  return JSON.parse(json) as unknown;\n}\n\nfunction conversationInput(conversation: unknown) {\n  if (conversation === undefined) return undefined;\n  const message = 'Invalid web search conversation.';\n  if (!Array.isArray(conversation) || conversation.length > MAX_CONVERSATION_ITEMS) throw new Error(message);\n  const items = boundedJson(conversation, MAX_CONVERSATION_BYTES, message) as unknown[];\n  if (items.length === 0) return undefined;\n  return items.map((item) => {\n    if (\n      !record(item) ||\n      (item.role !== 'user' && item.role !== 'assistant') ||\n      typeof item.text !== 'string' ||\n      !item.text\n    )\n      throw new Error(message);\n    return {\n      type: 'message',\n      role: item.role,\n      content: [{ type: item.role === 'user' ? 'input_text' : 'output_text', text: item.text }],\n    };\n  });\n}\n\n/** Host-only transport: authentication never crosses the package boundary. */\nexport function createChatgptWebSearchClient(dependencies: ChatgptBackendDependencies) {\n  return {\n    async search(request: WebSearchRequest): Promise<{ output: string; results?: Record<string, unknown>[] }> {\n      const { signal } = request;\n      signal?.throwIfAborted();\n      if (!record(request.commands) || Object.keys(request.commands).length === 0)\n        throw new Error('Invalid web search commands.');\n      const commands = boundedJson(request.commands, MAX_COMMANDS_BYTES, 'Invalid web search commands.');\n      const input = conversationInput(request.conversation);\n      if (!Object.hasOwn(ACCESS, request.access)) throw new Error('Invalid web search access mode.');\n      const model = request.model ?? DEFAULT_MODEL;\n      if (typeof model !== 'string' || !/^[A-Za-z0-9._:-]{1,128}$/.test(model))\n        throw new Error('Invalid web search model.');\n      if (typeof request.sessionId !== 'string' || !/^[\\x21-\\x7e]{1,256}$/.test(request.sessionId))\n        throw new Error('Invalid web search session.');\n      const { token, accountId } = await chatgptCredentials(dependencies, LOGIN_MESSAGE, signal);\n      let response: Response;\n      try {\n        response = await (dependencies.fetch ?? globalThis.fetch)(ENDPOINT, {\n          method: 'POST',\n          redirect: 'error',\n          signal,\n          headers: {\n            Authorization: `Bearer ${token}`,\n            'chatgpt-account-id': accountId,\n            originator: 'po_web_search',\n            'User-Agent': '@agimon-ai/po-web-search',\n            'Content-Type': 'application/json',\n            Accept: 'application/json',\n          },\n          body: JSON.stringify({\n            id: request.sessionId,\n            model,\n            ...(input ? { input } : {}),\n            commands,\n            settings: { allowed_callers: ['direct'], external_web_access: ACCESS[request.access] },\n            max_output_tokens: MAX_OUTPUT_TOKENS,\n          }),\n        });\n      } catch {\n        signal?.throwIfAborted();\n        throw new Error(FAILED);\n      }\n      if (!response.ok) {\n        await response.body?.cancel().catch(() => undefined);\n        if (response.status === 401) throw new Error(LOGIN_MESSAGE);\n        if (response.status === 403) throw new Error('Web search is not available for this ChatGPT account.');\n        if (response.status === 429) {\n          const retry = response.headers.get('retry-after');\n          throw new Error(\n            `Web search quota reached.${retry && /^\\d{1,6}$/.test(retry) ? ` Try again in ${retry} seconds.` : ''}`,\n          );\n        }\n        throw new Error(`Web search request failed (HTTP ${response.status}).`);\n      }\n      let body: unknown;\n      try {\n        body = await readBoundedJson(response, MAX_RESPONSE_BYTES, signal);\n      } catch {\n        signal?.throwIfAborted();\n        throw new Error(INVALID_RESPONSE);\n      }\n      if (!record(body) || typeof body.output !== 'string') throw new Error(INVALID_RESPONSE);\n      const output = body.output.trim() ? body.output : 'Web search returned no results.';\n      // `results` is display-only, so a malformed list is dropped rather than failing the search.\n      const results =\n        Array.isArray(body.results) && body.results.length <= MAX_RESULTS && body.results.every(record)\n          ? body.results\n          : undefined;\n      return results ? { output, results } : { output };\n    },\n  };\n}\n"],"mappings":";;AAIA,MAAM,WAAW;AACjB,MAAM,oBAAoB;AAC1B,MAAM,qBAAqB;AAE3B,MAAM,yBAAyB;AAC/B,MAAM,yBAAyB;AAC/B,MAAM,qBAAqB;AAC3B,MAAM,cAAc;AACpB,MAAM,gBAAgB,uCAAuCA,cAAAA;AAC7D,MAAM,mBAAmB;AACzB,MAAM,SAAS;AACf,MAAM,SAAS;CAAE,QAAQ;CAAO,SAAS;CAAW,MAAM;AAAK;AAG/D,MAAM,gBAAgB;AAQtB,SAAS,OAAO,OAAkD;CAChE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;;AAGA,SAAS,YAAY,OAAgB,OAAe,SAA0B;CAC5E,IAAI;CACJ,IAAI;EACF,OAAO,KAAK,UAAU,KAAK;CAC7B,QAAQ;EACN,MAAM,IAAI,MAAM,OAAO;CACzB;CACA,IAAI,SAAS,KAAA,KAAa,OAAO,WAAW,IAAI,IAAI,OAAO,MAAM,IAAI,MAAM,OAAO;CAClF,OAAO,KAAK,MAAM,IAAI;AACxB;AAEA,SAAS,kBAAkB,cAAuB;CAChD,IAAI,iBAAiB,KAAA,GAAW,OAAO,KAAA;CACvC,MAAM,UAAU;CAChB,IAAI,CAAC,MAAM,QAAQ,YAAY,KAAK,aAAa,SAAS,wBAAwB,MAAM,IAAI,MAAM,OAAO;CACzG,MAAM,QAAQ,YAAY,cAAc,wBAAwB,OAAO;CACvE,IAAI,MAAM,WAAW,GAAG,OAAO,KAAA;CAC/B,OAAO,MAAM,KAAK,SAAS;EACzB,IACE,CAAC,OAAO,IAAI,KACX,KAAK,SAAS,UAAU,KAAK,SAAS,eACvC,OAAO,KAAK,SAAS,YACrB,CAAC,KAAK,MAEN,MAAM,IAAI,MAAM,OAAO;EACzB,OAAO;GACL,MAAM;GACN,MAAM,KAAK;GACX,SAAS,CAAC;IAAE,MAAM,KAAK,SAAS,SAAS,eAAe;IAAe,MAAM,KAAK;GAAK,CAAC;EAC1F;CACF,CAAC;AACH;;AAGA,SAAgB,6BAA6B,cAA0C;CACrF,OAAO,EACL,MAAM,OAAO,SAA6F;EACxG,MAAM,EAAE,WAAW;EACnB,QAAQ,eAAe;EACvB,IAAI,CAAC,OAAO,QAAQ,QAAQ,KAAK,OAAO,KAAK,QAAQ,QAAQ,CAAC,CAAC,WAAW,GACxE,MAAM,IAAI,MAAM,8BAA8B;EAChD,MAAM,WAAW,YAAY,QAAQ,UAAU,oBAAoB,8BAA8B;EACjG,MAAM,QAAQ,kBAAkB,QAAQ,YAAY;EACpD,IAAI,CAAC,OAAO,OAAO,QAAQ,QAAQ,MAAM,GAAG,MAAM,IAAI,MAAM,iCAAiC;EAC7F,MAAM,QAAQ,QAAQ,SAAS;EAC/B,IAAI,OAAO,UAAU,YAAY,CAAC,2BAA2B,KAAK,KAAK,GACrE,MAAM,IAAI,MAAM,2BAA2B;EAC7C,IAAI,OAAO,QAAQ,cAAc,YAAY,CAAC,uBAAuB,KAAK,QAAQ,SAAS,GACzF,MAAM,IAAI,MAAM,6BAA6B;EAC/C,MAAM,EAAE,OAAO,cAAc,MAAMC,cAAAA,mBAAmB,cAAc,eAAe,MAAM;EACzF,IAAI;EACJ,IAAI;GACF,WAAW,OAAO,aAAa,SAAS,WAAW,MAAA,CAAO,UAAU;IAClE,QAAQ;IACR,UAAU;IACV;IACA,SAAS;KACP,eAAe,UAAU;KACzB,sBAAsB;KACtB,YAAY;KACZ,cAAc;KACd,gBAAgB;KAChB,QAAQ;IACV;IACA,MAAM,KAAK,UAAU;KACnB,IAAI,QAAQ;KACZ;KACA,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;KACzB;KACA,UAAU;MAAE,iBAAiB,CAAC,QAAQ;MAAG,qBAAqB,OAAO,QAAQ;KAAQ;KACrF,mBAAmB;IACrB,CAAC;GACH,CAAC;EACH,QAAQ;GACN,QAAQ,eAAe;GACvB,MAAM,IAAI,MAAM,MAAM;EACxB;EACA,IAAI,CAAC,SAAS,IAAI;GAChB,MAAM,SAAS,MAAM,OAAO,CAAC,CAAC,YAAY,KAAA,CAAS;GACnD,IAAI,SAAS,WAAW,KAAK,MAAM,IAAI,MAAM,aAAa;GAC1D,IAAI,SAAS,WAAW,KAAK,MAAM,IAAI,MAAM,uDAAuD;GACpG,IAAI,SAAS,WAAW,KAAK;IAC3B,MAAM,QAAQ,SAAS,QAAQ,IAAI,aAAa;IAChD,MAAM,IAAI,MACR,4BAA4B,SAAS,YAAY,KAAK,KAAK,IAAI,iBAAiB,MAAM,aAAa,IACrG;GACF;GACA,MAAM,IAAI,MAAM,mCAAmC,SAAS,OAAO,GAAG;EACxE;EACA,IAAI;EACJ,IAAI;GACF,OAAO,MAAMC,cAAAA,gBAAgB,UAAU,oBAAoB,MAAM;EACnE,QAAQ;GACN,QAAQ,eAAe;GACvB,MAAM,IAAI,MAAM,gBAAgB;EAClC;EACA,IAAI,CAAC,OAAO,IAAI,KAAK,OAAO,KAAK,WAAW,UAAU,MAAM,IAAI,MAAM,gBAAgB;EACtF,MAAM,SAAS,KAAK,OAAO,KAAK,IAAI,KAAK,SAAS;EAElD,MAAM,UACJ,MAAM,QAAQ,KAAK,OAAO,KAAK,KAAK,QAAQ,UAAU,eAAe,KAAK,QAAQ,MAAM,MAAM,IAC1F,KAAK,UACL,KAAA;EACN,OAAO,UAAU;GAAE;GAAQ;EAAQ,IAAI,EAAE,OAAO;CAClD,EACF;AACF"}

package/dist/src/services/chatgptWebSearch/index.mjs

@@ -48,7 +48,7 @@ function conversationInput(conversation) {
 		};
 	});
 }
-/** Host-only transport: authentication never crosses the facet boundary. */
+/** Host-only transport: authentication never crosses the package boundary. */
 function createChatgptWebSearchClient(dependencies) {
 	return { async search(request) {
 		const { signal } = request;