@byokit/accounts 0.5.0 → 0.7.0

package/CHANGELOG.md

@@ -2,7 +2,19 @@
 
 ## Unreleased
 
-## 0.5.0 (2026-09-29)
+## 0.7.0 (2026-09-30)
+
+- Add the portable `chatgptPlan` adapter for a host-validated official token-sharing session, checking
+  ChatGPT plan usage consent on every access. Uses subscription billing and never falls back to an API key
+  (billed per use); the host owns sign-in, identity verification, storage and refresh per person.
+
+## 0.6.0 (2026-09-30)
+
+- `respond` and `Accounts.respond` accept `originator` (or set it once on `Accounts`): the app's own originator header value. Default: 'byokit', as before.
+- FIX: a garbled streamed answer no longer arrives as an empty string with HTTP 200: a data line the parser cannot read now throws a ResponseError the app can show.
+- FIX: a stream that ends with no words, no completed answer and no tool calls now throws instead of resolving to an empty string.
+- FIX: the answer is the words as they streamed in; the completed envelope is only used when nothing streamed. Apps whose completed envelope carries no text no longer see their streamed words replaced by an empty answer.
+- FIX: streamed answers split on bare-CR line endings too, so a backend that separates events with carriage returns no longer yields an empty answer.
 
 - `respond` passes the whole question through: a message array (many turns, pictures with `input_image`, a `function_call` with its `function_call_output`), `tools` and `tool_choice` (the app's own function tools and built-ins, including `image_generation`), how hard the model thinks (`reasoning.effort`), and how long the answer is with the shape it must follow (`text.verbosity`, `text.format`). With `tools` the result is the text with every output item (`isFunctionCall` spots a call); without, the plain text as before. `onEvent` sees each tool call and output item as it streams.
 

package/README.md

@@ -276,3 +276,18 @@ tests and demos sign in and ask end to end with no account. Point the kit at it
 ## License
 
 Apache-2.0. See [LICENSE](LICENSE) and [NOTICE](../../NOTICE).
+
+## Official ChatGPT plan token-sharing adapter
+
+`chatgptPlan({ session })`, also exported from `@byokit/accounts/chatgpt-plan`, binds a single person's
+validated [official token-sharing session](https://developers.openai.com/siwc/token-sharing-open-source) to a
+consumer such as `@byokit/decide`. `session(signal)` returns `{ accessToken, scopes }` after the host's own
+sign-in integration validates identity and refreshes tokens. The adapter checks `resource.invoke` and
+`chatgpt.tokens.use.direct` on every access; missing consent throws `UnsupportedAccountError` with
+`code: 'unsupported_account'`. Billing is `subscription`, with no API-key fallback.
+
+The host follows [official registration/sign-in](https://developers.openai.com/siwc/token-sharing-open-source/sign-in),
+including ID-token signature/issuer/audience/nonce verification and protected per-person storage. Plan usage is
+available to eligible open-source/local apps; paid/remote apps require approval. This adapter does not start an
+OAuth flow and does not convert the existing Codex `Accounts.login()` credential into a token-sharing session.
+It reads no environment or files, and remains portable to browsers and React Native.

package/dist/accounts.d.ts

@@ -67,6 +67,8 @@ export type AccountsOptions<M extends Member = Member> = {
     apiBase?: string;
     /** The fetch `respond` asks with: one that streams on a phone (Expo's `expo/fetch`). Default: the platform's. */
     fetch?: typeof fetch;
+    /** The originator header `respond` sends. Default: 'byokit'. */
+    originator?: string;
 };
 /** The ChatGPT plan behind a sign-in, from its own token: a work plan (Business, Enterprise, Edu) follows the employer's rules. */
 export declare function planOf(access: string): {

package/dist/accounts.js

@@ -236,7 +236,7 @@ export class Accounts {
         if (!access || c?.type !== 'oauth')
             throw new ResponseError(say('status.signedOut', { name: p.name }), 'signed_out');
         try {
-            const base = { ...ask, access, accountId: String(c.accountId ?? ''), model: ask.model ?? p.models.strong, base: this.opts.apiBase, fetch: this.opts.fetch };
+            const base = { ...ask, access, accountId: String(c.accountId ?? ''), model: ask.model ?? p.models.strong, base: this.opts.apiBase, fetch: this.opts.fetch, originator: ask.originator ?? this.opts.originator };
             return ask.tools ? await respond({ ...base, tools: ask.tools }) : await respond({ ...base, tools: undefined });
         }
         catch (e) {

package/dist/chatgpt-plan.d.ts

@@ -0,0 +1,21 @@
+/** A host-owned, validated Sign in with ChatGPT token-sharing session. The host completes the official
+ * OAuth flow (including ID-token verification), stores it per person, and refreshes it before returning it.
+ * This adapter never discovers credentials, starts a login, or substitutes a Codex credential. */
+export type ChatGPTPlanSession = {
+    accessToken: string;
+    scopes: readonly string[];
+};
+export type ChatGPTPlanAccount = {
+    readonly billing: 'subscription';
+    access(signal: AbortSignal): Promise<string>;
+};
+/** The selected account, consent or model cannot support this request. Never falls back to API billing. */
+export declare class UnsupportedAccountError extends Error {
+    readonly code = "unsupported_account";
+    constructor(message: string);
+}
+/** Bind one person's official token-sharing session to this app. Eligibility and identity verification
+ * belong to the host's sign-in integration; granted plan-usage scopes are checked on every request. */
+export declare function chatgptPlan(o: {
+    session(signal: AbortSignal): Promise<ChatGPTPlanSession>;
+}): ChatGPTPlanAccount;

package/dist/chatgpt-plan.js

@@ -0,0 +1,20 @@
+/** The selected account, consent or model cannot support this request. Never falls back to API billing. */
+export class UnsupportedAccountError extends Error {
+    code = 'unsupported_account';
+    constructor(message) { super(message); this.name = 'UnsupportedAccountError'; }
+}
+/** Bind one person's official token-sharing session to this app. Eligibility and identity verification
+ * belong to the host's sign-in integration; granted plan-usage scopes are checked on every request. */
+export function chatgptPlan(o) {
+    return {
+        billing: 'subscription',
+        async access(signal) {
+            const session = await o.session(signal);
+            if (!session || !Array.isArray(session.scopes) || !session.scopes.includes('chatgpt.tokens.use.direct') ||
+                !session.scopes.includes('resource.invoke') || typeof session.accessToken !== 'string' || !session.accessToken.trim()) {
+                throw new UnsupportedAccountError('ChatGPT plan usage needs a consented token-sharing session.');
+            }
+            return session.accessToken;
+        },
+    };
+}

package/dist/portable.d.ts

@@ -5,3 +5,4 @@ export { REST_MS, classify, type Kind } from './limits.ts';
 export { ResponseError, isFunctionCall, limitResponse, respond, sseReader, type Ask, type ResponseFunctionCall, type ResponseInputItem, type ResponseOutputItem, type ResponseOutputMessage, type ResponseReasoning, type ResponseResult, type ResponseStreamEvent, type ResponseText, type ResponseTextFormat, type ResponseTool, type ResponseToolChoice } from './responses.ts';
 export { browserStore, memoryStore, recordStore, secureStore, type SecureStoreLike } from './stores.ts';
 export { WORDS, billingWords, callbackPage, clock, failure, say, signInError, type WordKey, type Why } from './words.ts';
+export { chatgptPlan, UnsupportedAccountError, type ChatGPTPlanAccount, type ChatGPTPlanSession } from './chatgpt-plan.ts';

package/dist/portable.js

@@ -7,3 +7,4 @@ export { REST_MS, classify } from "./limits.js";
 export { ResponseError, isFunctionCall, limitResponse, respond, sseReader } from "./responses.js";
 export { browserStore, memoryStore, recordStore, secureStore } from "./stores.js";
 export { WORDS, billingWords, callbackPage, clock, failure, say, signInError } from "./words.js";
+export { chatgptPlan, UnsupportedAccountError } from "./chatgpt-plan.js";

package/dist/responses.d.ts

@@ -147,7 +147,9 @@ export type ResponseStreamEvent = {
 };
 /** Reads a streamed answer (fixtures/conformance/sse.json): `push` each piece as it arrives, `end` for the whole text,
  *  `result` for the text with every output item. `onEvent` sees each tool call and output item as it lands.
- *  An error event throws a ResponseError. */
+ *  Events split on any blank line (LF, CRLF or bare CR). A data line that is not JSON throws a ResponseError;
+ *  a stream ending with nothing to show throws too. The text is the streamed deltas; the completed envelope
+ *  only fills in when no deltas arrived. An error event throws a ResponseError. */
 export declare function sseReader(onText?: (delta: string) => void, onEvent?: (event: ResponseStreamEvent) => void): {
     push(chunk: string): void;
     end(): string;
@@ -174,6 +176,8 @@ export type Ask = {
     /** Each tool call and output item as it lands. */
     onEvent?: (event: ResponseStreamEvent) => void;
     signal?: AbortSignal;
+    /** The app's own originator header value. Default: 'byokit'. */
+    originator?: string;
 };
 type Access = {
     access: string;

package/dist/responses.js

@@ -39,7 +39,9 @@ const itemKey = (item, fallback) => typeof item.call_id === 'string' ? item.call
 export const isFunctionCall = (item) => isRecord(item) && item.type === 'function_call' && typeof item.name === 'string' && typeof item.arguments === 'string';
 /** Reads a streamed answer (fixtures/conformance/sse.json): `push` each piece as it arrives, `end` for the whole text,
  *  `result` for the text with every output item. `onEvent` sees each tool call and output item as it lands.
- *  An error event throws a ResponseError. */
+ *  Events split on any blank line (LF, CRLF or bare CR). A data line that is not JSON throws a ResponseError;
+ *  a stream ending with nothing to show throws too. The text is the streamed deltas; the completed envelope
+ *  only fills in when no deltas arrived. An error event throws a ResponseError. */
 export function sseReader(onText, onEvent) {
     let buffer = '', text = '', completed;
     let done = false, finished;
@@ -68,7 +70,7 @@ export function sseReader(onText, onEvent) {
             e = JSON.parse(data);
         }
         catch {
-            return;
+            throw new ResponseError("ChatGPT's answer could not be read.", null);
         }
         if (e.type === 'response.output_text.delta' && typeof e.delta === 'string') {
             text += e.delta;
@@ -114,8 +116,14 @@ export function sseReader(onText, onEvent) {
         }
     };
     const drain = (final) => {
-        const blocks = buffer.replace(/\r\n/g, '\n').split('\n\n');
-        buffer = final ? '' : blocks.pop();
+        // A trailing CR may be a bare-CR line ending or half of a chunk-split CRLF: hold it until more arrives.
+        let tail = '';
+        if (!final && buffer.endsWith('\r')) {
+            tail = '\r';
+            buffer = buffer.slice(0, -1);
+        }
+        const blocks = buffer.replace(/\r\n/g, '\n').replace(/\r/g, '\n').split('\n\n');
+        buffer = (final ? '' : blocks.pop()) + tail;
         for (const b of blocks)
             event(b);
     };
@@ -124,12 +132,11 @@ export function sseReader(onText, onEvent) {
             drain(true);
             if (!done)
                 throw new ResponseError('ChatGPT stopped before completing its answer.', 'network');
-            let whole = text;
-            if (completed !== undefined && completed !== text) {
-                if (completed.startsWith(text))
-                    onText?.(completed.slice(text.length));
-                whole = completed;
-            }
+            const whole = text !== '' ? text : (completed ?? '');
+            if (whole === '' && output.length === 0)
+                throw new ResponseError('ChatGPT stopped before completing its answer.', 'network');
+            if (text === '' && whole !== '')
+                onText?.(whole);
             finished = { text: whole, output };
         }
         return finished;
@@ -150,7 +157,7 @@ export async function respond(o) {
         method: 'POST', signal: o.signal,
         headers: {
             'content-type': 'application/json', accept: 'text/event-stream', authorization: `Bearer ${o.access}`,
-            'chatgpt-account-id': o.accountId, 'OpenAI-Beta': 'responses=experimental', originator: 'byokit',
+            'chatgpt-account-id': o.accountId, 'OpenAI-Beta': 'responses=experimental', originator: o.originator ?? 'byokit',
         },
         body: JSON.stringify({
             model: o.model, store: false, stream: true, instructions: o.instructions, input,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@byokit/accounts",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "description": "Sign in with the AI plan you already pay for, into your app's own store.",
   "license": "Apache-2.0",
   "type": "module",
@@ -32,6 +32,10 @@
     "./testing": {
       "types": "./dist/testing/index.d.ts",
       "default": "./dist/testing/index.js"
+    },
+    "./chatgpt-plan": {
+      "types": "./dist/chatgpt-plan.d.ts",
+      "default": "./dist/chatgpt-plan.js"
     }
   },
   "files": [