@byokit/accounts 0.6.0 → 0.7.0

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 ## Unreleased
 
+## 0.7.0 (2026-09-30)
+
+- Add the portable `chatgptPlan` adapter for a host-validated official token-sharing session, checking
+  ChatGPT plan usage consent on every access. Uses subscription billing and never falls back to an API key
+  (billed per use); the host owns sign-in, identity verification, storage and refresh per person.
+
 ## 0.6.0 (2026-09-30)
 
 - `respond` and `Accounts.respond` accept `originator` (or set it once on `Accounts`): the app's own originator header value. Default: 'byokit', as before.

package/README.md

@@ -276,3 +276,18 @@ tests and demos sign in and ask end to end with no account. Point the kit at it
 ## License
 
 Apache-2.0. See [LICENSE](LICENSE) and [NOTICE](../../NOTICE).
+
+## Official ChatGPT plan token-sharing adapter
+
+`chatgptPlan({ session })`, also exported from `@byokit/accounts/chatgpt-plan`, binds a single person's
+validated [official token-sharing session](https://developers.openai.com/siwc/token-sharing-open-source) to a
+consumer such as `@byokit/decide`. `session(signal)` returns `{ accessToken, scopes }` after the host's own
+sign-in integration validates identity and refreshes tokens. The adapter checks `resource.invoke` and
+`chatgpt.tokens.use.direct` on every access; missing consent throws `UnsupportedAccountError` with
+`code: 'unsupported_account'`. Billing is `subscription`, with no API-key fallback.
+
+The host follows [official registration/sign-in](https://developers.openai.com/siwc/token-sharing-open-source/sign-in),
+including ID-token signature/issuer/audience/nonce verification and protected per-person storage. Plan usage is
+available to eligible open-source/local apps; paid/remote apps require approval. This adapter does not start an
+OAuth flow and does not convert the existing Codex `Accounts.login()` credential into a token-sharing session.
+It reads no environment or files, and remains portable to browsers and React Native.

package/dist/chatgpt-plan.d.ts

@@ -0,0 +1,21 @@
+/** A host-owned, validated Sign in with ChatGPT token-sharing session. The host completes the official
+ * OAuth flow (including ID-token verification), stores it per person, and refreshes it before returning it.
+ * This adapter never discovers credentials, starts a login, or substitutes a Codex credential. */
+export type ChatGPTPlanSession = {
+    accessToken: string;
+    scopes: readonly string[];
+};
+export type ChatGPTPlanAccount = {
+    readonly billing: 'subscription';
+    access(signal: AbortSignal): Promise<string>;
+};
+/** The selected account, consent or model cannot support this request. Never falls back to API billing. */
+export declare class UnsupportedAccountError extends Error {
+    readonly code = "unsupported_account";
+    constructor(message: string);
+}
+/** Bind one person's official token-sharing session to this app. Eligibility and identity verification
+ * belong to the host's sign-in integration; granted plan-usage scopes are checked on every request. */
+export declare function chatgptPlan(o: {
+    session(signal: AbortSignal): Promise<ChatGPTPlanSession>;
+}): ChatGPTPlanAccount;

package/dist/chatgpt-plan.js

@@ -0,0 +1,20 @@
+/** The selected account, consent or model cannot support this request. Never falls back to API billing. */
+export class UnsupportedAccountError extends Error {
+    code = 'unsupported_account';
+    constructor(message) { super(message); this.name = 'UnsupportedAccountError'; }
+}
+/** Bind one person's official token-sharing session to this app. Eligibility and identity verification
+ * belong to the host's sign-in integration; granted plan-usage scopes are checked on every request. */
+export function chatgptPlan(o) {
+    return {
+        billing: 'subscription',
+        async access(signal) {
+            const session = await o.session(signal);
+            if (!session || !Array.isArray(session.scopes) || !session.scopes.includes('chatgpt.tokens.use.direct') ||
+                !session.scopes.includes('resource.invoke') || typeof session.accessToken !== 'string' || !session.accessToken.trim()) {
+                throw new UnsupportedAccountError('ChatGPT plan usage needs a consented token-sharing session.');
+            }
+            return session.accessToken;
+        },
+    };
+}

package/dist/portable.d.ts

@@ -5,3 +5,4 @@ export { REST_MS, classify, type Kind } from './limits.ts';
 export { ResponseError, isFunctionCall, limitResponse, respond, sseReader, type Ask, type ResponseFunctionCall, type ResponseInputItem, type ResponseOutputItem, type ResponseOutputMessage, type ResponseReasoning, type ResponseResult, type ResponseStreamEvent, type ResponseText, type ResponseTextFormat, type ResponseTool, type ResponseToolChoice } from './responses.ts';
 export { browserStore, memoryStore, recordStore, secureStore, type SecureStoreLike } from './stores.ts';
 export { WORDS, billingWords, callbackPage, clock, failure, say, signInError, type WordKey, type Why } from './words.ts';
+export { chatgptPlan, UnsupportedAccountError, type ChatGPTPlanAccount, type ChatGPTPlanSession } from './chatgpt-plan.ts';

package/dist/portable.js

@@ -7,3 +7,4 @@ export { REST_MS, classify } from "./limits.js";
 export { ResponseError, isFunctionCall, limitResponse, respond, sseReader } from "./responses.js";
 export { browserStore, memoryStore, recordStore, secureStore } from "./stores.js";
 export { WORDS, billingWords, callbackPage, clock, failure, say, signInError } from "./words.js";
+export { chatgptPlan, UnsupportedAccountError } from "./chatgpt-plan.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@byokit/accounts",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "Sign in with the AI plan you already pay for, into your app's own store.",
   "license": "Apache-2.0",
   "type": "module",
@@ -32,6 +32,10 @@
     "./testing": {
       "types": "./dist/testing/index.d.ts",
       "default": "./dist/testing/index.js"
+    },
+    "./chatgpt-plan": {
+      "types": "./dist/chatgpt-plan.d.ts",
+      "default": "./dist/chatgpt-plan.js"
     }
   },
   "files": [