@codemieai/code 0.13.1 → 0.14.0

package/dist/cli/commands/proxy/connectors/codex-config-toml.js

@@ -0,0 +1,218 @@
+/**
+ * Pure string surgery for the CodeMie-managed regions of `~/.codex/config.toml`.
+ *
+ * Nothing here touches the filesystem, the network, or the logger. The Codex
+ * config file is user-owned, so the managed content is spliced in as delimited
+ * text rather than round-tripped through a TOML serializer: `@iarna/toml`'s
+ * `stringify` discards comments and key order, which would silently rewrite the
+ * user's file on every connect.
+ *
+ * TOML permits bare top-level keys only *before* the first table header, so the
+ * managed content cannot be one contiguous block. It is two regions: a header
+ * region prepended to the file (holding `model_provider` and `model`) and a
+ * table region appended to it (holding `[model_providers.codemie]`).
+ */
+export const HEADER_OPEN = '# >>> codemie proxy connect (codex-desktop) header - managed block, do not edit';
+export const HEADER_CLOSE = '# <<< codemie proxy connect (codex-desktop) header';
+export const TABLE_OPEN = '# >>> codemie proxy connect (codex-desktop) provider - managed block, do not edit';
+export const TABLE_CLOSE = '# <<< codemie proxy connect (codex-desktop) provider';
+/**
+ * A line is a sentinel when it equals one after trimming.
+ *
+ * Trailing whitespace and a stray `\r` are tolerated because this file is
+ * rewritten by the Codex desktop app and by editors on Windows, a supported
+ * platform. Matching strictly would make a sentinel unrecognizable to the
+ * cutter while still looking managed to the reader — which duplicates the
+ * managed block into the user's file.
+ */
+function isSentinel(line, sentinel) {
+    return line.trim() === sentinel;
+}
+function locate(text, open, close) {
+    const lines = text.split('\n');
+    const openLine = lines.findIndex((line) => isSentinel(line, open));
+    if (openLine === -1)
+        return null;
+    const closeLine = lines.findIndex((line, index) => index > openLine && isSentinel(line, close));
+    if (closeLine === -1)
+        return null;
+    // Character offsets of the whole-line span, so callers can slice text.
+    const start = lines.slice(0, openLine).reduce((n, line) => n + line.length + 1, 0);
+    const end = lines.slice(0, closeLine + 1).reduce((n, line) => n + line.length + 1, 0) - 1;
+    return { start, end };
+}
+/**
+ * Locate both managed regions. A region whose close sentinel is missing is
+ * reported as absent rather than guessed at — a truncated block is treated as
+ * unmanaged text so the writer never deletes content it cannot delimit.
+ */
+export function findManagedRegions(text) {
+    return {
+        header: locate(text, HEADER_OPEN, HEADER_CLOSE),
+        table: locate(text, TABLE_OPEN, TABLE_CLOSE),
+    };
+}
+/** Marks a user key the connector commented out so it can be restored verbatim. */
+export const DISPLACED_PREFIX = '#codemie-displaced# ';
+/** Top-level keys the managed header region owns and therefore must displace. */
+const DISPLACED_KEYS = ['model', 'model_provider'];
+const DISPLACED_KEY_PATTERN = new RegExp(`^\\s*(?:${DISPLACED_KEYS.join('|')})\\s*=`);
+/** A line opening a TOML table, after which bare keys belong to that table. */
+function isTableHeader(line) {
+    return /^\s*\[/.test(line);
+}
+/**
+ * Comment out unmanaged root-level `model` / `model_provider` assignments.
+ *
+ * Only the document root matters: once the scan passes the first table header,
+ * any same-named key belongs to that table and is none of our business.
+ * Idempotent — a line already carrying `DISPLACED_PREFIX` is left alone.
+ */
+export function commentDisplacedKeys(text) {
+    let inRootScope = true;
+    return text
+        .split('\n')
+        .map((line) => {
+        if (isTableHeader(line)) {
+            inRootScope = false;
+            return line;
+        }
+        if (!inRootScope)
+            return line;
+        if (line.startsWith(DISPLACED_PREFIX))
+            return line;
+        if (!DISPLACED_KEY_PATTERN.test(line))
+            return line;
+        return `${DISPLACED_PREFIX}${line}`;
+    })
+        .join('\n');
+}
+/** Exact inverse of `commentDisplacedKeys`. */
+export function restoreDisplacedKeys(text) {
+    return text
+        .split('\n')
+        .map((line) => (line.startsWith(DISPLACED_PREFIX) ? line.slice(DISPLACED_PREFIX.length) : line))
+        .join('\n');
+}
+/**
+ * Remove both managed regions, line by line.
+ *
+ * Line-based rather than offset-based on purpose: `spliceManagedBlocks` inserts
+ * each region as whole lines plus exactly one blank separator line, so removing
+ * whole lines plus exactly one separator is its precise inverse. Slicing by
+ * character offset cannot express "and the blank line that came with it", which
+ * is what makes `strip(splice(x)) === x` hold here.
+ */
+/** Index of the matching close sentinel after `from`, or -1 when unterminated. */
+function findClose(lines, from, close) {
+    for (let i = from + 1; i < lines.length; i++) {
+        if (isSentinel(lines[i], close))
+            return i;
+    }
+    return -1;
+}
+function cutRegionLines(text) {
+    const lines = text.split('\n');
+    const keep = [];
+    let i = 0;
+    while (i < lines.length) {
+        if (isSentinel(lines[i], HEADER_OPEN)) {
+            const closeAt = findClose(lines, i, HEADER_CLOSE);
+            if (closeAt === -1) {
+                // Unterminated region: keep the line verbatim rather than consuming the
+                // rest of the file. Deleting to EOF here would destroy a user config
+                // whose close marker was removed, and would contradict
+                // findManagedRegions, which reports such a region as absent.
+                keep.push(lines[i]);
+                i++;
+                continue;
+            }
+            i = closeAt + 1;
+            // The header chunk owns exactly one blank line after it.
+            if (i < lines.length && lines[i].trim() === '')
+                i++;
+            continue;
+        }
+        if (isSentinel(lines[i], TABLE_OPEN)) {
+            const closeAt = findClose(lines, i, TABLE_CLOSE);
+            if (closeAt === -1) {
+                keep.push(lines[i]);
+                i++;
+                continue;
+            }
+            // The table chunk owns exactly one blank line before it.
+            if (keep.length > 0 && keep[keep.length - 1].trim() === '')
+                keep.pop();
+            i = closeAt + 1;
+            continue;
+        }
+        keep.push(lines[i]);
+        i++;
+    }
+    return keep.join('\n');
+}
+/** Normalize to `''` or text terminated by exactly one newline. */
+function normalizeBase(text) {
+    if (text.trim() === '')
+        return '';
+    return text.endsWith('\n') ? text : `${text}\n`;
+}
+/**
+ * Insert both managed regions, replacing any that already exist. The header is
+ * prepended (TOML bare keys must precede the first table header) and the table
+ * is appended. Every line outside the two regions is preserved verbatim.
+ */
+export function spliceManagedBlocks(text, blocks) {
+    const base = normalizeBase(commentDisplacedKeys(cutRegionLines(text)));
+    const header = [HEADER_OPEN, blocks.header, HEADER_CLOSE].join('\n');
+    const table = [TABLE_OPEN, blocks.table, TABLE_CLOSE].join('\n');
+    if (base === '')
+        return `${header}\n\n${table}\n`;
+    return `${header}\n\n${base}\n${table}\n`;
+}
+/**
+ * Remove both managed regions and restore any keys the splice displaced,
+ * yielding the text the file held before `spliceManagedBlocks` ran.
+ */
+export function stripManagedRegions(text) {
+    const restored = restoreDisplacedKeys(cutRegionLines(text));
+    if (restored.trim() === '')
+        return '';
+    return restored.endsWith('\n') ? restored : `${restored}\n`;
+}
+/** The provider id CodeMie owns in the user's Codex config. */
+export const CODEMIE_PROVIDER_ID = 'codemie';
+/** Escape a value for a TOML basic string. */
+function toTomlString(value) {
+    const escaped = value
+        .replace(/\\/g, '\\\\')
+        .replace(/"/g, '\\"')
+        .replace(/\n/g, '\\n');
+    return `"${escaped}"`;
+}
+/**
+ * Render the two managed region bodies.
+ *
+ * `wire_api` is always `responses`: Codex removed the `chat` wire API in
+ * February 2026, so a custom provider declaring anything else fails at startup.
+ * The gateway key travels as a static `http_headers` entry rather than an
+ * `env_key`, because a desktop app does not inherit the shell environment — and
+ * never via `~/.codex/auth.json`, because writing there flips the app into
+ * API-key auth mode and disables its ChatGPT-account features.
+ */
+export function buildManagedBlocks(input) {
+    const header = [
+        `model_provider = ${toTomlString(CODEMIE_PROVIDER_ID)}`,
+        `model = ${toTomlString(input.model)}`,
+    ].join('\n');
+    const table = [
+        `[model_providers.${CODEMIE_PROVIDER_ID}]`,
+        `name = ${toTomlString('CodeMie')}`,
+        `base_url = ${toTomlString(input.baseUrl)}`,
+        'wire_api = "responses"',
+        `[model_providers.${CODEMIE_PROVIDER_ID}.http_headers]`,
+        `Authorization = ${toTomlString(`Bearer ${input.gatewayKey}`)}`,
+    ].join('\n');
+    return { header, table };
+}
+//# sourceMappingURL=codex-config-toml.js.map

package/dist/cli/commands/proxy/connectors/codex-config-toml.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-config-toml.js","sourceRoot":"","sources":["../../../../../src/cli/commands/proxy/connectors/codex-config-toml.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,iFAAiF,CAAC;AAC7G,MAAM,CAAC,MAAM,YAAY,GAAG,oDAAoD,CAAC;AACjF,MAAM,CAAC,MAAM,UAAU,GAAG,mFAAmF,CAAC;AAC9G,MAAM,CAAC,MAAM,WAAW,GAAG,sDAAsD,CAAC;AAalF;;;;;;;;GAQG;AACH,SAAS,UAAU,CAAC,IAAY,EAAE,QAAgB;IAChD,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,QAAQ,CAAC;AAClC,CAAC;AAED,SAAS,MAAM,CAAC,IAAY,EAAE,IAAY,EAAE,KAAa;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACnE,IAAI,QAAQ,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAChG,IAAI,SAAS,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAElC,uEAAuE;IACvE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACnF,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;IAC1F,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACxB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC;QAC/C,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;AAEvD,iFAAiF;AACjF,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;AAEnD,MAAM,qBAAqB,GAAG,IAAI,MAAM,CAAC,WAAW,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAEtF,+EAA+E;AAC/E,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,IAAI,WAAW,GAAG,IAAI,CAAC;IAEvB,OAAO,IAAI;SACR,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,WAAW,GAAG,KAAK,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAC9B,IAAI,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC;YAAE,OAAO,IAAI,CAAC;QACnD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnD,OAAO,GAAG,gBAAgB,GAAG,IAAI,EAAE,CAAC;IACtC,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,IAAI;SACR,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SAC/F,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AASD;;;;;;;;GAQG;AACH,kFAAkF;AAClF,SAAS,SAAS,CAAC,KAAe,EAAE,IAAY,EAAE,KAAa;IAC7D,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,CAAC,GAAG,CAAC,CAAC;IAEV,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;YAClD,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;gBACnB,wEAAwE;gBACxE,qEAAqE;gBACrE,uDAAuD;gBACvD,6DAA6D;gBAC7D,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpB,CAAC,EAAE,CAAC;gBACJ,SAAS;YACX,CAAC;YACD,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC;YAChB,yDAAyD;YACzD,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,CAAC,EAAE,CAAC;YACpD,SAAS;QACX,CAAC;QACD,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,EAAE,WAAW,CAAC,CAAC;YACjD,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;gBACnB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpB,CAAC,EAAE,CAAC;gBACJ,SAAS;YACX,CAAC;YACD,yDAAyD;YACzD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,IAAI,CAAC,GAAG,EAAE,CAAC;YACvE,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC,EAAE,CAAC;IACN,CAAC;IAED,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,mEAAmE;AACnE,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAClC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,MAAqB;IACrE,MAAM,IAAI,GAAG,aAAa,CAAC,oBAAoB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAEvE,MAAM,MAAM,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEjE,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,GAAG,MAAM,OAAO,KAAK,IAAI,CAAC;IAClD,OAAO,GAAG,MAAM,OAAO,IAAI,KAAK,KAAK,IAAI,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IACtC,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,CAAC;AAC9D,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAAC;AAQ7C,8CAA8C;AAC9C,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,OAAO,GAAG,KAAK;SAClB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACzB,OAAO,IAAI,OAAO,GAAG,CAAC;AACxB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAwB;IACzD,MAAM,MAAM,GAAG;QACb,oBAAoB,YAAY,CAAC,mBAAmB,CAAC,EAAE;QACvD,WAAW,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;KACvC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,KAAK,GAAG;QACZ,oBAAoB,mBAAmB,GAAG;QAC1C,UAAU,YAAY,CAAC,SAAS,CAAC,EAAE;QACnC,cAAc,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;QAC3C,wBAAwB;QACxB,oBAAoB,mBAAmB,gBAAgB;QACvD,mBAAmB,YAAY,CAAC,UAAU,KAAK,CAAC,UAAU,EAAE,CAAC,EAAE;KAChE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC"}

package/dist/cli/commands/proxy/connectors/codex-desktop.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Resolve the config file the desktop app reads.
+ *
+ * Deliberately NOT `getCodexHomePath()` from the codex agent plugin. That helper
+ * is used by code paths which redirect `CODEX_HOME` to a CodeMie-isolated home
+ * for the CLI they spawn, and the desktop app never reads that home. A
+ * `CODEX_HOME` visible here belongs to the user, and upstream documents the app
+ * respecting it, so it is honoured.
+ */
+export declare function getCodexDesktopConfigPath(): string;
+/** Where the connector records what it owns, mirroring the Claude Desktop precedent. */
+export declare function getCodexDesktopStatePath(): string;
+/** Install locations for the ChatGPT desktop app, which is what ships Codex. */
+export declare function getCodexDesktopAppCandidates(): string[];
+/** First candidate path that exists, or null. */
+export declare function findCodexDesktopApp(candidates?: string[]): string | null;
+/** Suffix for the pre-connect snapshot of the user's Codex config. */
+export declare const BACKUP_SUFFIX = ".codemie-backup";
+/**
+ * Snapshot the config only when CodeMie does not already own part of it.
+ *
+ * Keyed on marker presence rather than backup presence on purpose. Once our
+ * block is in the file, the existing backup is the true pre-CodeMie original and
+ * must not be replaced by a copy that already contains our block — which is the
+ * bug the Kimi hook injector's create-once backup has.
+ */
+export declare function backupIfUnmanaged(configPath: string, currentText: string): Promise<string | null>;
+/**
+ * Discover Codex-compatible model ids through the local proxy.
+ *
+ * Discovery goes through the proxy rather than the backend so the connector
+ * exercises exactly the path the app will use — a broken proxy fails here,
+ * before the config is written, rather than after.
+ */
+export declare function discoverCodexModels(proxyUrl: string, gatewayKey: string): Promise<string[]>;
+/**
+ * Choose the model to pin.
+ *
+ * An explicit request is resolved with the same rule the proxy applies to
+ * in-flight requests, so `--model gpt-5.6-luna` — the undated name the app's
+ * model picker displays — pins the dated deployment behind it rather than being
+ * rejected. Anything with no CodeMie equivalent is an error here: at connect
+ * time the user is present and can be told, so silently substituting would mean
+ * they run something other than what they asked for.
+ */
+export declare function selectCodexModel(discovered: string[], requested?: string): string;
+export interface CodexDesktopState {
+    configPath: string;
+    backupPath: string | null;
+    model: string;
+    writtenAt: string;
+}
+export interface WriteCodexDesktopConfigOptions {
+    configPath: string;
+    statePath: string;
+    proxyUrl: string;
+    baseUrl: string;
+    gatewayKey: string;
+    model: string;
+    force?: boolean;
+}
+/**
+ * Splice the managed block into the user's Codex config and record ownership.
+ *
+ * The marker state is written BEFORE the config on purpose. If the config write
+ * then fails, the marker over-claims — and removal is idempotent, so that is
+ * harmless. The reverse order is genuinely unsafe: a written config with no
+ * marker is one CodeMie can no longer recognize as its own.
+ */
+export declare function writeCodexDesktopConfig(options: WriteCodexDesktopConfigOptions): Promise<CodexDesktopState>;
+export interface RemoveCodexDesktopResult {
+    removed: boolean;
+    usedBackup: boolean;
+    configPath: string | null;
+}
+/**
+ * Remove the managed block, restoring the file to its pre-connect content.
+ *
+ * The surgical strip is the primary path rather than a wholesale backup restore:
+ * a blind restore would also throw away any edits the user made to their Codex
+ * config while connected. The backup is the fallback for when stripping cannot
+ * produce a parseable file.
+ */
+export declare function removeCodexDesktopConfig(statePath?: string): Promise<RemoveCodexDesktopResult>;
+//# sourceMappingURL=codex-desktop.d.ts.map

package/dist/cli/commands/proxy/connectors/codex-desktop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-desktop.d.ts","sourceRoot":"","sources":["../../../../../src/cli/commands/proxy/connectors/codex-desktop.ts"],"names":[],"mappings":"AAiCA;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,IAAI,MAAM,CAGlD;AAED,wFAAwF;AACxF,wBAAgB,wBAAwB,IAAI,MAAM,CAEjD;AAED,gFAAgF;AAChF,wBAAgB,4BAA4B,IAAI,MAAM,EAAE,CAiBvD;AAED,iDAAiD;AACjD,wBAAgB,mBAAmB,CACjC,UAAU,GAAE,MAAM,EAAmC,GACpD,MAAM,GAAG,IAAI,CAEf;AAKD,sEAAsE;AACtE,eAAO,MAAM,aAAa,oBAAoB,CAAC;AAE/C;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAwBxB;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,EAAE,CAAC,CAqCnB;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAYjF;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,8BAA8B;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAoBD;;;;;;;GAOG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,8BAA8B,GACtC,OAAO,CAAC,iBAAiB,CAAC,CA6D5B;AAoBD,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,wBAAsB,wBAAwB,CAC5C,SAAS,GAAE,MAAmC,GAC7C,OAAO,CAAC,wBAAwB,CAAC,CA2DnC"}

package/dist/cli/commands/proxy/connectors/codex-desktop.js

@@ -0,0 +1,299 @@
+/**
+ * Connector that points the Codex desktop app (Codex inside the ChatGPT desktop
+ * app) at the local CodeMie proxy by splicing a managed provider block into the
+ * user's `~/.codex/config.toml`.
+ *
+ * CodeMie never installs, launches or patches the app — the shared config file
+ * that the app and the Codex CLI both read is the whole integration seam.
+ */
+import { existsSync } from 'node:fs';
+import { copyFile, readFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import TOML from '@iarna/toml';
+import { rankCodexModelIdsByRecency } from '../../../../agents/plugins/codex/codex-models.js';
+import { ConfigurationError } from '../../../../utils/errors.js';
+import { logger } from '../../../../utils/logger.js';
+import { getCodemiePath } from '../../../../utils/paths.js';
+import { sanitizeLogArgs } from '../../../../utils/security.js';
+import { CODEMIE_PROVIDER_ID, buildManagedBlocks, findManagedRegions, spliceManagedBlocks, stripManagedRegions, } from './codex-config-toml.js';
+import { resolveCodexDeployment } from '../../../../providers/plugins/sso/proxy/plugins/codex-model-resolver.js';
+import { writeAtomically } from './vscode.js';
+/**
+ * Resolve the config file the desktop app reads.
+ *
+ * Deliberately NOT `getCodexHomePath()` from the codex agent plugin. That helper
+ * is used by code paths which redirect `CODEX_HOME` to a CodeMie-isolated home
+ * for the CLI they spawn, and the desktop app never reads that home. A
+ * `CODEX_HOME` visible here belongs to the user, and upstream documents the app
+ * respecting it, so it is honoured.
+ */
+export function getCodexDesktopConfigPath() {
+    const codexHome = process.env.CODEX_HOME || join(homedir(), '.codex');
+    return join(codexHome, 'config.toml');
+}
+/** Where the connector records what it owns, mirroring the Claude Desktop precedent. */
+export function getCodexDesktopStatePath() {
+    return getCodemiePath('proxy', 'codex-desktop-state.json');
+}
+/** Install locations for the ChatGPT desktop app, which is what ships Codex. */
+export function getCodexDesktopAppCandidates() {
+    const home = homedir();
+    if (process.platform === 'darwin') {
+        return [
+            '/Applications/ChatGPT.app',
+            join(home, 'Applications', 'ChatGPT.app'),
+        ];
+    }
+    if (process.platform === 'win32') {
+        const localAppData = process.env.LOCALAPPDATA ?? join(home, 'AppData', 'Local');
+        const programFiles = process.env.ProgramFiles ?? 'C:\\Program Files';
+        return [
+            join(localAppData, 'Programs', 'ChatGPT'),
+            join(programFiles, 'ChatGPT'),
+        ];
+    }
+    return [];
+}
+/** First candidate path that exists, or null. */
+export function findCodexDesktopApp(candidates = getCodexDesktopAppCandidates()) {
+    return candidates.find((candidate) => existsSync(candidate)) ?? null;
+}
+/** Bound on the connect-time model listing. */
+const MODEL_LIST_TIMEOUT_MS = 15000;
+/** Suffix for the pre-connect snapshot of the user's Codex config. */
+export const BACKUP_SUFFIX = '.codemie-backup';
+/**
+ * Snapshot the config only when CodeMie does not already own part of it.
+ *
+ * Keyed on marker presence rather than backup presence on purpose. Once our
+ * block is in the file, the existing backup is the true pre-CodeMie original and
+ * must not be replaced by a copy that already contains our block — which is the
+ * bug the Kimi hook injector's create-once backup has.
+ */
+export async function backupIfUnmanaged(configPath, currentText) {
+    if (!existsSync(configPath))
+        return null;
+    const backupPath = `${configPath}${BACKUP_SUFFIX}`;
+    const regions = findManagedRegions(currentText);
+    const alreadyManaged = regions.header !== null || regions.table !== null;
+    if (alreadyManaged) {
+        if (existsSync(backupPath)) {
+            logger.debug('[proxy] Codex config already managed; keeping existing backup', { backupPath });
+            return backupPath;
+        }
+        // Managed but the backup is gone. Copying the file as-is would enshrine our
+        // own block — bearer token included — as the "pre-connect original", and a
+        // later disconnect fallback would restore the credential. Reconstruct the
+        // original by stripping the managed regions instead.
+        await writeAtomically(backupPath, stripManagedRegions(currentText));
+        logger.debug('[proxy] Rebuilt missing Codex config backup without managed content', { backupPath });
+        return backupPath;
+    }
+    await copyFile(configPath, backupPath);
+    logger.debug('[proxy] Backed up Codex config', { configPath, backupPath });
+    return backupPath;
+}
+/**
+ * Discover Codex-compatible model ids through the local proxy.
+ *
+ * Discovery goes through the proxy rather than the backend so the connector
+ * exercises exactly the path the app will use — a broken proxy fails here,
+ * before the config is written, rather than after.
+ */
+export async function discoverCodexModels(proxyUrl, gatewayKey) {
+    const url = new URL('/v1/llm_models?include_all=true', proxyUrl).toString();
+    let response;
+    try {
+        response = await fetch(url, {
+            headers: { Authorization: `Bearer ${gatewayKey}` },
+            // A proxy that accepts the socket but never answers would otherwise hang
+            // `proxy connect` indefinitely, after the daemon has already started.
+            signal: AbortSignal.timeout(MODEL_LIST_TIMEOUT_MS),
+        });
+    }
+    catch (error) {
+        throw new ConfigurationError(`Could not reach the local proxy at ${proxyUrl} to list models: ` +
+            `${error instanceof Error ? error.message : String(error)}`);
+    }
+    if (!response.ok) {
+        throw new ConfigurationError(`Local proxy returned ${response.status} for ${url}.`);
+    }
+    const payload = (await response.json());
+    const entries = Array.isArray(payload) ? payload : (payload.data ?? []);
+    // Ranked newest-first. The gateway's own order is arbitrary and in practice
+    // lists the oldest GPT-5 first, so taking entries[0] would pin a stale model.
+    const ids = rankCodexModelIdsByRecency(entries);
+    if (ids.length === 0) {
+        throw new ConfigurationError('The local proxy exposes no GPT/Codex-compatible model. ' +
+            'Enable a GPT-5/Codex deployment in CodeMie, then re-run this command.');
+    }
+    return ids;
+}
+/**
+ * Choose the model to pin.
+ *
+ * An explicit request is resolved with the same rule the proxy applies to
+ * in-flight requests, so `--model gpt-5.6-luna` — the undated name the app's
+ * model picker displays — pins the dated deployment behind it rather than being
+ * rejected. Anything with no CodeMie equivalent is an error here: at connect
+ * time the user is present and can be told, so silently substituting would mean
+ * they run something other than what they asked for.
+ */
+export function selectCodexModel(discovered, requested) {
+    if (requested === undefined)
+        return discovered[0];
+    if (requested.trim() === '') {
+        throw new ConfigurationError('--model was given an empty value.');
+    }
+    const resolution = resolveCodexDeployment(requested.trim(), discovered, undefined);
+    if (resolution.kind === 'exact' || resolution.kind === 'resolved')
+        return resolution.model;
+    throw new ConfigurationError(`Model "${requested}" is not available through the proxy. Available: ${discovered.join(', ')}`);
+}
+/** Read the config, or empty text when the file does not exist yet. */
+async function readConfigText(configPath) {
+    if (!existsSync(configPath))
+        return '';
+    return readFile(configPath, 'utf-8');
+}
+/** Parse for validation only — the file itself is never re-serialized. */
+function parseOrThrow(text, configPath) {
+    try {
+        return TOML.parse(text);
+    }
+    catch (error) {
+        throw new ConfigurationError(`Codex config at ${configPath} is not valid TOML and was not changed: ` +
+            `${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+/**
+ * Splice the managed block into the user's Codex config and record ownership.
+ *
+ * The marker state is written BEFORE the config on purpose. If the config write
+ * then fails, the marker over-claims — and removal is idempotent, so that is
+ * harmless. The reverse order is genuinely unsafe: a written config with no
+ * marker is one CodeMie can no longer recognize as its own.
+ */
+export async function writeCodexDesktopConfig(options) {
+    const currentText = await readConfigText(options.configPath);
+    // Validate and check for conflicts before touching anything on disk.
+    if (currentText.trim() !== '') {
+        const parsed = parseOrThrow(currentText, options.configPath);
+        const active = parsed.model_provider;
+        if (!options.force && typeof active === 'string' && active !== CODEMIE_PROVIDER_ID) {
+            throw new ConfigurationError(`Codex config already selects model_provider "${active}". ` +
+                'Re-run with --force to replace it with the CodeMie provider.');
+        }
+    }
+    const backupPath = await backupIfUnmanaged(options.configPath, currentText);
+    const state = {
+        configPath: options.configPath,
+        backupPath,
+        model: options.model,
+        writtenAt: new Date().toISOString(),
+    };
+    await writeAtomically(options.statePath, `${JSON.stringify(state, null, 2)}\n`);
+    const blocks = buildManagedBlocks({
+        baseUrl: options.baseUrl,
+        gatewayKey: options.gatewayKey,
+        model: options.model,
+    });
+    const next = spliceManagedBlocks(currentText, blocks);
+    // Validate what we are about to write, not just what we read. Every splice
+    // edge case — a duplicated region, an unrecognized quoted key, a value that
+    // escaping did not cover — surfaces here instead of landing a broken
+    // config.toml on the user's disk.
+    try {
+        TOML.parse(next);
+    }
+    catch (error) {
+        throw new ConfigurationError(`Refusing to write ${options.configPath}: the result would not be valid TOML ` +
+            `(${error instanceof Error ? error.message : String(error)}). The file is unchanged.`);
+    }
+    await writeAtomically(options.configPath, next);
+    // The gateway key is deliberately absent: sanitizeLogArgs redacts by key name,
+    // and `gatewayKey` matches none of its patterns, so passing it would write the
+    // credential to the log in cleartext. Nothing here needs it.
+    logger.info('[proxy] Codex desktop configuration written', ...sanitizeLogArgs({
+        configPath: options.configPath,
+        backupPath,
+        model: options.model,
+        baseUrl: options.baseUrl,
+    }));
+    return state;
+}
+/**
+ * Throw when a stripped config still carries CodeMie-owned keys.
+ *
+ * The post-strip check for disconnect: a parseable result that still selects the
+ * CodeMie provider means removal did not actually happen, which is what occurs
+ * when the managed sentinels have been lost.
+ */
+function assertNoCodeMieKeys(parsed) {
+    if (parsed.model_provider === CODEMIE_PROVIDER_ID) {
+        throw new Error(`model_provider is still "${CODEMIE_PROVIDER_ID}"`);
+    }
+    const providers = parsed.model_providers;
+    if (providers !== null && typeof providers === 'object'
+        && CODEMIE_PROVIDER_ID in providers) {
+        throw new Error(`model_providers.${CODEMIE_PROVIDER_ID} is still present`);
+    }
+}
+/**
+ * Remove the managed block, restoring the file to its pre-connect content.
+ *
+ * The surgical strip is the primary path rather than a wholesale backup restore:
+ * a blind restore would also throw away any edits the user made to their Codex
+ * config while connected. The backup is the fallback for when stripping cannot
+ * produce a parseable file.
+ */
+export async function removeCodexDesktopConfig(statePath = getCodexDesktopStatePath()) {
+    if (!existsSync(statePath)) {
+        return { removed: false, usedBackup: false, configPath: null };
+    }
+    const raw = await readFile(statePath, 'utf-8');
+    if (raw.trim() === '') {
+        return { removed: false, usedBackup: false, configPath: null };
+    }
+    let state;
+    try {
+        state = JSON.parse(raw);
+    }
+    catch (error) {
+        throw new ConfigurationError(`CodeMie Codex desktop state at ${statePath} is unreadable: ` +
+            `${error instanceof Error ? error.message : String(error)}`);
+    }
+    if (!existsSync(state.configPath)) {
+        await writeAtomically(statePath, '');
+        return { removed: false, usedBackup: false, configPath: state.configPath };
+    }
+    const currentText = await readFile(state.configPath, 'utf-8');
+    const stripped = stripManagedRegions(currentText);
+    let nextText = stripped;
+    let usedBackup = false;
+    try {
+        if (stripped.trim() !== '') {
+            const parsed = TOML.parse(stripped);
+            // Parsing is not enough: if the sentinels were lost the strip is a silent
+            // no-op, and reporting success would leave the CodeMie provider — and its
+            // bearer header — in the user's config.
+            assertNoCodeMieKeys(parsed);
+        }
+    }
+    catch {
+        if (!state.backupPath || !existsSync(state.backupPath)) {
+            throw new ConfigurationError(`Could not cleanly remove the CodeMie block from ${state.configPath} ` +
+                '(the managed markers appear to be damaged or missing) and no backup is ' +
+                `available to restore. Remove the model_provider and [model_providers.${CODEMIE_PROVIDER_ID}] ` +
+                'entries by hand.');
+        }
+        nextText = await readFile(state.backupPath, 'utf-8');
+        usedBackup = true;
+        logger.warn('[proxy] Surgical removal of the CodeMie Codex block failed; restored the backup', ...sanitizeLogArgs({ configPath: state.configPath, backupPath: state.backupPath }));
+    }
+    await writeAtomically(state.configPath, nextText);
+    await writeAtomically(statePath, '');
+    return { removed: true, usedBackup, configPath: state.configPath };
+}
+//# sourceMappingURL=codex-desktop.js.map

package/dist/cli/commands/proxy/connectors/codex-desktop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-desktop.js","sourceRoot":"","sources":["../../../../../src/cli/commands/proxy/connectors/codex-desktop.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,aAAa,CAAC;AAE/B,OAAO,EAAE,0BAA0B,EAAE,MAAM,wCAAwC,CAAC;AAEpF,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,sBAAsB,EAAE,MAAM,+DAA+D,CAAC;AAEvG,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB;IACvC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;AACxC,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,wBAAwB;IACtC,OAAO,cAAc,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;AAC7D,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,4BAA4B;IAC1C,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO;YACL,2BAA2B;YAC3B,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,aAAa,CAAC;SAC1C,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAChF,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,mBAAmB,CAAC;QACrE,OAAO;YACL,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,SAAS,CAAC;YACzC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC;SAC9B,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,mBAAmB,CACjC,aAAuB,4BAA4B,EAAE;IAErD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC;AACvE,CAAC;AAED,+CAA+C;AAC/C,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAEpC,sEAAsE;AACtE,MAAM,CAAC,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAE/C;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,UAAkB,EAClB,WAAmB;IAEnB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzC,MAAM,UAAU,GAAG,GAAG,UAAU,GAAG,aAAa,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC;IAEzE,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,KAAK,CAAC,+DAA+D,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;YAC9F,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,4EAA4E;QAC5E,2EAA2E;QAC3E,0EAA0E;QAC1E,qDAAqD;QACrD,MAAM,eAAe,CAAC,UAAU,EAAE,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC;QACpE,MAAM,CAAC,KAAK,CAAC,qEAAqE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QACpG,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACvC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;IAC3E,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAgB,EAChB,UAAkB;IAElB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,iCAAiC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;IAE5E,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC1B,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,UAAU,EAAE,EAAE;YAClD,yEAAyE;YACzE,sEAAsE;YACtE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,qBAAqB,CAAC;SACnD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,kBAAkB,CAC1B,sCAAsC,QAAQ,mBAAmB;YACjE,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC5D,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,kBAAkB,CAAC,wBAAwB,QAAQ,CAAC,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuC,CAAC;IAC9E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAExE,4EAA4E;IAC5E,8EAA8E;IAC9E,MAAM,GAAG,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAEhD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,kBAAkB,CAC1B,yDAAyD;YACzD,uEAAuE,CACxE,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAoB,EAAE,SAAkB;IACvE,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,kBAAkB,CAAC,mCAAmC,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,UAAU,GAAG,sBAAsB,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IACnF,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,IAAI,UAAU,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAE3F,MAAM,IAAI,kBAAkB,CAC1B,UAAU,SAAS,oDAAoD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/F,CAAC;AACJ,CAAC;AAmBD,uEAAuE;AACvE,KAAK,UAAU,cAAc,CAAC,UAAkB;IAC9C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,OAAO,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AACvC,CAAC;AAED,0EAA0E;AAC1E,SAAS,YAAY,CAAC,IAAY,EAAE,UAAkB;IACpD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,kBAAkB,CAC1B,mBAAmB,UAAU,0CAA0C;YACvE,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC5D,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAuC;IAEvC,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAE7D,qEAAqE;IACrE,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,mBAAmB,EAAE,CAAC;YACnF,MAAM,IAAI,kBAAkB,CAC1B,gDAAgD,MAAM,KAAK;gBAC3D,8DAA8D,CAC/D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAE5E,MAAM,KAAK,GAAsB;QAC/B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,UAAU;QACV,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,MAAM,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAEhF,MAAM,MAAM,GAAG,kBAAkB,CAAC;QAChC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,mBAAmB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAEtD,2EAA2E;IAC3E,4EAA4E;IAC5E,qEAAqE;IACrE,kCAAkC;IAClC,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,kBAAkB,CAC1B,qBAAqB,OAAO,CAAC,UAAU,uCAAuC;YAC9E,IAAI,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,CACtF,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAEhD,+EAA+E;IAC/E,+EAA+E;IAC/E,6DAA6D;IAC7D,MAAM,CAAC,IAAI,CACT,6CAA6C,EAC7C,GAAG,eAAe,CAAC;QACjB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,UAAU;QACV,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CACH,CAAC;IAEF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,MAA+B;IAC1D,IAAI,MAAM,CAAC,cAAc,KAAK,mBAAmB,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,4BAA4B,mBAAmB,GAAG,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC;IACzC,IAAI,SAAS,KAAK,IAAI,IAAI,OAAO,SAAS,KAAK,QAAQ;WAClD,mBAAmB,IAAK,SAAqC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,mBAAmB,mBAAmB,mBAAmB,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAQD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,YAAoB,wBAAwB,EAAE;IAE9C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACjE,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC/C,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACjE,CAAC;IAED,IAAI,KAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,kBAAkB,CAC1B,kCAAkC,SAAS,kBAAkB;YAC7D,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC5D,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,MAAM,eAAe,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACrC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;IAC7E,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAElD,IAAI,QAAQ,GAAG,QAAQ,CAAC;IACxB,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,CAAC;QACH,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA4B,CAAC;YAC/D,0EAA0E;YAC1E,0EAA0E;YAC1E,wCAAwC;YACxC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,kBAAkB,CAC1B,mDAAmD,KAAK,CAAC,UAAU,GAAG;gBACtE,yEAAyE;gBACzE,wEAAwE,mBAAmB,IAAI;gBAC/F,kBAAkB,CACnB,CAAC;QACJ,CAAC;QACD,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACrD,UAAU,GAAG,IAAI,CAAC;QAClB,MAAM,CAAC,IAAI,CACT,iFAAiF,EACjF,GAAG,eAAe,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CACnF,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAClD,MAAM,eAAe,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAErC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;AACrE,CAAC"}

package/dist/cli/commands/proxy/connectors/vscode-claude-code.d.ts

@@ -0,0 +1,26 @@
+export interface WriteVsCodeClaudeCodeConfigResult {
+    written: boolean;
+    path: string;
+}
+/**
+ * Resolve the VS Code Claude Code extension's `settings.json` path for the given
+ * VS Code edition, mirroring `vscode.ts`'s `getVsCodeLanguageModelsPath` — including its
+ * throw when the product's user-data directory doesn't exist, so a missing edition fails
+ * loudly instead of silently writing into a directory tree nothing will ever read.
+ */
+export declare function getVsCodeClaudeCodeSettingsPath(insiders?: boolean): string;
+/**
+ * Write CodeMie's managed `claudeCode.*` keys into the VS Code Claude Code extension's
+ * `settings.json` at an explicit path. Preserves every unrelated top-level key and every
+ * unrelated `claudeCode.environmentVariables` entry (e.g. keys the user set manually) —
+ * only `ANTHROPIC_BASE_URL`/`ANTHROPIC_AUTH_TOKEN` entries and `disableLoginPrompt` are
+ * CodeMie-managed and get overwritten.
+ */
+export declare function writeVsCodeClaudeCodeConfigAtPath(configPath: string, gatewayUrl: string, gatewayKey: string): Promise<WriteVsCodeClaudeCodeConfigResult>;
+/**
+ * Write CodeMie's managed `claudeCode.*` keys into the current user's VS Code (or VS Code
+ * Insiders) `settings.json`, so the bundled Claude Code extension routes through the local
+ * gateway daemon without a Claude.ai OAuth login prompt.
+ */
+export declare function writeVsCodeClaudeCodeConfig(gatewayUrl: string, gatewayKey: string, insiders?: boolean): Promise<WriteVsCodeClaudeCodeConfigResult>;
+//# sourceMappingURL=vscode-claude-code.d.ts.map