@darkjd/opencode-openai-codex-auth 4.10.1

package/LICENSE

@@ -0,0 +1,37 @@
+MIT License with Usage Disclaimer
+
+Copyright (c) 2024-2025 numman-ali
+
+USAGE NOTICE AND DISCLAIMER:
+This software is provided for personal development use only. Users must comply
+with OpenAI's Terms of Service (https://openai.com/policies/terms-of-use/) and
+Usage Policies (https://openai.com/policies/usage-policies/) when using this
+software to access OpenAI services.
+
+The authors and contributors are not responsible for any violations of
+third-party terms of service. For commercial use or production applications,
+obtain proper API access from OpenAI directly through the OpenAI Platform
+(https://platform.openai.com/).
+
+This software uses OpenAI's official OAuth authentication system and is not
+affiliated with, endorsed by, or sponsored by OpenAI.
+
+---
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice, usage notice, and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,137 @@
+![Image 1: opencode-openai-codex-auth](assets/readme-hero.svg)
+  
+  
+**Originally created by [Numman Ali](https://x.com/nummanali) · Actively maintained fork by [JDis03](https://github.com/JDis03)**
+
+> 🔀 **Fork notice**: The upstream repo ([numman-ali/opencode-openai-codex-auth](https://github.com/numman-ali/opencode-openai-codex-auth)) has had no commits since **2026-01-09** (v4.4.0) and open PRs/issues are unreviewed. This fork continues active development (new models, the data-driven model registry, bug fixes) under the same MIT license. Full credit to Numman Ali for creating the original project.
+
+[![Twitter Follow](https://img.shields.io/twitter/follow/nummanali?style=social)](https://x.com/nummanali)
+[![Tests](https://github.com/JDis03/opencode-openai-codex-auth/actions/workflows/ci.yml/badge.svg)](https://github.com/JDis03/opencode-openai-codex-auth/actions)
+**OpenCode 2 + ChatGPT Codex OAuth.**
+[Install](#-quick-start) · [Models](#-models) · [Configuration](#-configuration) · [Docs](#-docs)
+
+---
+## 💡 Philosophy
+> **"One config. Every model."**
+OpenCode should feel effortless. This plugin connects OpenCode 2 to ChatGPT Codex OAuth, with bundled model presets and request transformations.
+```
+┌─────────────────────────────────────────────────────────┐
+│                                                         │
+│  ChatGPT OAuth → Codex backend → OpenCode               │
+│  Install the plugin, connect, then choose a model.      │
+│                                                         │
+└─────────────────────────────────────────────────────────┘
+```
+---
+## 🚀 Quick Start
+```bash
+opencode plugin add @darkjd/opencode-openai-codex-auth
+opencode auth login
+# Choose openai → "ChatGPT Plus/Pro (Codex Auth)"
+opencode run --model 'openai/gpt-6-sol#medium' "Say hello"
+```
+
+OpenCode 2 installs packages from its `plugins` configuration. The old `npx opencode-openai-codex-auth` installer writes OpenCode 1 config and is **not** bundled with this scoped OpenCode 2 package. To remove the plugin, use `opencode plugin remove @darkjd/opencode-openai-codex-auth`. Existing OpenCode 1 users should keep their working 4.9.0 installation; the V1 entrypoint remains exported as `@darkjd/opencode-openai-codex-auth/legacy` for manual integrations.
+---
+## 🆕 OpenCode 2
+OpenCode 2 uses a completely new plugin API — V1 plugins (including every release of this
+package before this one) do not load at all under OpenCode 2, they fail a schema check
+before any of their code runs. This package now ships a native V2 entrypoint alongside the
+unchanged V1 one, auto-selected by `exports`:
+
+- The package root (`@darkjd/opencode-openai-codex-auth`) resolves to the **V2** implementation.
+- `@darkjd/opencode-openai-codex-auth/legacy` resolves to the **original V1** implementation, for
+  anyone still running OpenCode 1.
+
+**How it works under V2**: OpenCode 2 ships its own built-in ChatGPT/Codex OAuth handling
+for the `openai` integration (the `ChatGPT Pro/Plus (browser/headless)` methods you may
+already see in `opencode auth login`) — but that native path does **not** apply Codex CLI
+system instructions, the CODEX_MODE bridge prompt, model-registry-based reasoning
+normalization, or the Skills/MCP passthrough this plugin has always provided. This plugin's
+V2 build registers native `http.request`/`http.response` session hooks (scoped to the
+`openai` provider) to keep applying all of that, plus its **own** OAuth integration method —
+**ChatGPT Plus/Pro (Codex Auth)** — with a stable file-based credential store, since V2's
+plugin API has no way to import an existing OAuth credential into its built-in connection
+store.
+
+**You must complete this plugin's own OAuth method once** for `openai` to route through it:
+```bash
+opencode auth login
+# select "openai" → "ChatGPT Plus/Pro (Codex Auth)"
+```
+Merely installing the plugin (or already being logged in via OpenCode 2's native ChatGPT
+methods) is not enough — an existing V1 `auth.json` credential is imported automatically as
+a read-only fallback for token use, but it cannot make OpenCode 2 treat `openai` as
+"actively connected" through this plugin's method; only completing that method's login flow
+does. See `specs/opencode-v2-plugin-port.md` for the full root-cause investigation.
+---
+## 📦 Models
+- **gpt-6-astra** (low/medium/high/xhigh/max; `gpt-6` alias) — no `none` support
+- **gpt-6-sol** (none/low/medium/high/xhigh/max)
+- **gpt-6-luna** (none/low/medium/high/xhigh/max)
+- **gpt-5.6-sol** (none/low/medium/high/xhigh/max; `gpt-5.6` alias)
+- **gpt-5.6-terra** (none/low/medium/high/xhigh/max)
+- **gpt-5.6-luna** (none/low/medium/high/xhigh/max)
+- **gpt-5.2** (none/low/medium/high/xhigh)
+- **gpt-5.2-codex** (low/medium/high/xhigh)
+- **gpt-5.1-codex-max** (low/medium/high/xhigh)
+- **gpt-5.1-codex** (low/medium/high)
+- **gpt-5.1-codex-mini** (medium/high)
+- **gpt-5.1** (none/low/medium/high)
+
+### Additional GPT-6 catalog IDs
+
+CodeNomad/OpenCode currently lists these GPT-6 variants:
+
+- `gpt-6-sol-pro`
+- `gpt-6-sol-fast`
+- `gpt-6-luna-pro`
+- `gpt-6-luna-fast`
+
+These are separate model IDs, not reasoning variants. They are visible in the local OpenCode catalog, but are **not yet verified by this plugin against the ChatGPT Codex backend**. The current Codex CLI account catalog lists the base `gpt-6-sol` and `gpt-6-luna` models, but not these four IDs.
+
+---
+## 🧩 Configuration
+OpenCode 2 installs the plugin with `opencode plugin add` and obtains its model catalog from OpenCode; no OpenCode 1 config template is needed. The repository's `config/opencode-modern.json` and `config/opencode-legacy.json` are historical **OpenCode 1 examples** and are not shipped in the scoped npm package. Do not paste their `plugin` entry into OpenCode 2.
+---
+## 🔄 Model Registry (maintainer notes)
+Model normalization, reasoning capabilities, and prompt-family selection are
+driven by a single data file: `lib/request/helpers/model-registry-data.ts`.
+Adding support for a new OpenAI model is normally **one entry in that file**,
+not a plugin-wide patch.
+
+For even faster turnaround (no npm release required to get a brand-new model
+recognized), point the plugin at a JSON overlay hosted anywhere you control:
+```json
+// ~/.opencode/openai-codex-auth-config.json
+{ "codexMode": true, "modelRegistryUrl": "https://raw.githubusercontent.com/<you>/<repo>/main/model-registry.json" }
+```
+or via `OPENCODE_CODEX_MODEL_REGISTRY_URL` (env var takes precedence). The
+overlay is fetched with ETag caching (checked at most every 15 minutes) and
+merged with the bundled registry; it's entirely opt-in — nothing is fetched
+unless you configure a URL, and any failure silently falls back to the
+bundled defaults.
+---
+## ✅ Features
+- ChatGPT Plus/Pro OAuth authentication (official flow)
+- Data-driven model registry: new models add cleanly, with an optional
+  self-hosted JSON overlay for instant updates between releases
+- GPT‑5.6 Sol/Terra/Luna support, including `max` reasoning effort
+- Variant system support (v1.0.210+) + legacy presets
+- Multimodal input enabled for all models
+- Usage‑aware errors + automatic token refresh
+- **Skills + MCP parity with Anthropic sessions**: OpenCode's `<available_skills>`
+  catalog and `<mcp_instructions>` block now reach Codex too, instead of being
+  silently dropped — same capability awareness Claude sessions already had
+---
+## 📚 Docs
+- Getting Started: `docs/getting-started.md`
+- Configuration: `docs/configuration.md`
+- Troubleshooting: `docs/troubleshooting.md`
+- Architecture: `docs/development/ARCHITECTURE.md`
+---
+## ⚠️ Usage Notice
+This plugin is for **personal development use** with your own ChatGPT Plus/Pro subscription.
+For production or multi‑user applications, use the OpenAI Platform API.
+
+**Built for developers who value simplicity.**

package/assets/opencode-logo-ornate-dark.svg

@@ -0,0 +1,18 @@
+<svg width="234" height="42" viewBox="0 0 234 42" fill="none" xmlns="http://www.w3.org/2000/svg">
+<path d="M18 30H6V18H18V30Z" fill="#4B4646"/>
+<path d="M18 12H6V30H18V12ZM24 36H0V6H24V36Z" fill="#B7B1B1"/>
+<path d="M48 30H36V18H48V30Z" fill="#4B4646"/>
+<path d="M36 30H48V12H36V30ZM54 36H36V42H30V6H54V36Z" fill="#B7B1B1"/>
+<path d="M84 24V30H66V24H84Z" fill="#4B4646"/>
+<path d="M84 24H66V30H84V36H60V6H84V24ZM66 18H78V12H66V18Z" fill="#B7B1B1"/>
+<path d="M108 36H96V18H108V36Z" fill="#4B4646"/>
+<path d="M108 12H96V36H90V6H108V12ZM114 36H108V12H114V36Z" fill="#B7B1B1"/>
+<path d="M144 30H126V18H144V30Z" fill="#4B4646"/>
+<path d="M144 12H126V30H144V36H120V6H144V12Z" fill="#F1ECEC"/>
+<path d="M168 30H156V18H168V30Z" fill="#4B4646"/>
+<path d="M168 12H156V30H168V12ZM174 36H150V6H174V36Z" fill="#F1ECEC"/>
+<path d="M198 30H186V18H198V30Z" fill="#4B4646"/>
+<path d="M198 12H186V30H198V12ZM204 36H180V6H198V0H204V36Z" fill="#F1ECEC"/>
+<path d="M234 24V30H216V24H234Z" fill="#4B4646"/>
+<path d="M216 12V18H228V12H216ZM234 24H216V30H234V36H210V6H234V24Z" fill="#F1ECEC"/>
+</svg>

package/assets/readme-hero.svg

@@ -0,0 +1,31 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="300" viewBox="0 0 1200 300" role="img" aria-label="OpenCode Codex OAuth">
+  <defs>
+    <linearGradient id="bg" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0%" stop-color="#0f172a" />
+      <stop offset="100%" stop-color="#1f2937" />
+    </linearGradient>
+    <linearGradient id="accent" x1="0" y1="0" x2="1" y2="0">
+      <stop offset="0%" stop-color="#38bdf8" />
+      <stop offset="100%" stop-color="#22d3ee" />
+    </linearGradient>
+  </defs>
+  <rect width="1200" height="300" rx="28" fill="url(#bg)" />
+  <g opacity="0.12">
+    <circle cx="1020" cy="70" r="120" fill="#38bdf8" />
+    <circle cx="150" cy="260" r="140" fill="#22d3ee" />
+  </g>
+  <g fill="none" stroke="url(#accent)" stroke-width="8" stroke-linecap="round" stroke-linejoin="round">
+    <path d="M160 95 L100 150 L160 205" />
+    <path d="M280 95 L340 150 L280 205" />
+    <path d="M205 80 L235 220" />
+  </g>
+  <text x="420" y="120" fill="#e2e8f0" font-size="42" font-family="'IBM Plex Sans','Segoe UI',Arial,sans-serif" font-weight="600">
+    OpenCode Codex OAuth
+  </text>
+  <text x="420" y="170" fill="#cbd5f5" font-size="24" font-family="'IBM Plex Sans','Segoe UI',Arial,sans-serif">
+    ChatGPT Plus/Pro auth for GPT-5.2 and Codex models
+  </text>
+  <text x="420" y="220" fill="#7dd3fc" font-size="18" font-family="'IBM Plex Sans','Segoe UI',Arial,sans-serif">
+    One-command install, modern variants, full tool support
+  </text>
+</svg>

package/dist/index.d.ts

@@ -0,0 +1,42 @@
+/**
+ * OpenAI ChatGPT (Codex) OAuth Authentication Plugin for opencode
+ *
+ * COMPLIANCE NOTICE:
+ * This plugin uses OpenAI's official OAuth authentication flow (the same method
+ * used by OpenAI's official Codex CLI at https://github.com/openai/codex).
+ *
+ * INTENDED USE: Personal development and coding assistance with your own
+ * ChatGPT Plus/Pro subscription.
+ *
+ * NOT INTENDED FOR: Commercial resale, multi-user services, high-volume
+ * automated extraction, or any use that violates OpenAI's Terms of Service.
+ *
+ * Users are responsible for ensuring their usage complies with:
+ * - OpenAI Terms of Use: https://openai.com/policies/terms-of-use/
+ * - OpenAI Usage Policies: https://openai.com/policies/usage-policies/
+ *
+ * For production applications, use the OpenAI Platform API: https://platform.openai.com/
+ *
+ * @license MIT with Usage Disclaimer (see LICENSE file)
+ * @author numman-ali
+ * @repository https://github.com/JDis03/opencode-openai-codex-auth
+ */
+import type { Plugin } from "@opencode-ai/plugin";
+/**
+ * OpenAI Codex OAuth authentication plugin for opencode
+ *
+ * This plugin enables opencode to use OpenAI's Codex backend via ChatGPT Plus/Pro
+ * OAuth authentication, allowing users to leverage their ChatGPT subscription
+ * instead of OpenAI Platform API credits.
+ *
+ * @example
+ * ```json
+ * {
+ *   "plugin": ["opencode-openai-codex-auth"],
+ *   "model": "openai/gpt-5-codex"
+ * }
+ * ```
+ */
+export declare const OpenAIAuthPlugin: Plugin;
+export default OpenAIAuthPlugin;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAe,MAAM,qBAAqB,CAAC;AAsC/D;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,gBAAgB,EAAE,MA+N9B,CAAC;AAEF,eAAe,gBAAgB,CAAC"}

package/dist/index.js

@@ -0,0 +1,226 @@
+/**
+ * OpenAI ChatGPT (Codex) OAuth Authentication Plugin for opencode
+ *
+ * COMPLIANCE NOTICE:
+ * This plugin uses OpenAI's official OAuth authentication flow (the same method
+ * used by OpenAI's official Codex CLI at https://github.com/openai/codex).
+ *
+ * INTENDED USE: Personal development and coding assistance with your own
+ * ChatGPT Plus/Pro subscription.
+ *
+ * NOT INTENDED FOR: Commercial resale, multi-user services, high-volume
+ * automated extraction, or any use that violates OpenAI's Terms of Service.
+ *
+ * Users are responsible for ensuring their usage complies with:
+ * - OpenAI Terms of Use: https://openai.com/policies/terms-of-use/
+ * - OpenAI Usage Policies: https://openai.com/policies/usage-policies/
+ *
+ * For production applications, use the OpenAI Platform API: https://platform.openai.com/
+ *
+ * @license MIT with Usage Disclaimer (see LICENSE file)
+ * @author numman-ali
+ * @repository https://github.com/JDis03/opencode-openai-codex-auth
+ */
+import { createAuthorizationFlow, decodeJWT, exchangeAuthorizationCode, parseAuthorizationInput, REDIRECT_URI, } from "./lib/auth/auth.js";
+import { openBrowserUrl } from "./lib/auth/browser.js";
+import { startLocalOAuthServer } from "./lib/auth/server.js";
+import { getCodexMode, loadPluginConfig } from "./lib/config.js";
+import { configureModelRegistrySource } from "./lib/request/helpers/model-registry.js";
+import { AUTH_LABELS, CODEX_BASE_URL, DUMMY_API_KEY, ERROR_MESSAGES, JWT_CLAIM_PATH, LOG_STAGES, PLUGIN_NAME, PROVIDER_ID, } from "./lib/constants.js";
+import { logRequest, logDebug } from "./lib/logger.js";
+import { createCodexHeaders, extractRequestUrl, handleErrorResponse, handleSuccessResponse, refreshAndUpdateToken, rewriteUrlForCodex, shouldRefreshToken, transformRequestForCodex, } from "./lib/request/fetch-helpers.js";
+/**
+ * OpenAI Codex OAuth authentication plugin for opencode
+ *
+ * This plugin enables opencode to use OpenAI's Codex backend via ChatGPT Plus/Pro
+ * OAuth authentication, allowing users to leverage their ChatGPT subscription
+ * instead of OpenAI Platform API credits.
+ *
+ * @example
+ * ```json
+ * {
+ *   "plugin": ["opencode-openai-codex-auth"],
+ *   "model": "openai/gpt-5-codex"
+ * }
+ * ```
+ */
+export const OpenAIAuthPlugin = async ({ client }) => {
+    const buildManualOAuthFlow = (pkce, url) => ({
+        url,
+        method: "code",
+        instructions: AUTH_LABELS.INSTRUCTIONS_MANUAL,
+        callback: async (input) => {
+            const parsed = parseAuthorizationInput(input);
+            if (!parsed.code) {
+                return { type: "failed" };
+            }
+            const tokens = await exchangeAuthorizationCode(parsed.code, pkce.verifier, REDIRECT_URI);
+            return tokens?.type === "success" ? tokens : { type: "failed" };
+        },
+    });
+    return {
+        auth: {
+            provider: PROVIDER_ID,
+            /**
+             * Loader function that configures OAuth authentication and request handling
+             *
+             * This function:
+             * 1. Validates OAuth authentication
+             * 2. Extracts ChatGPT account ID from access token
+             * 3. Loads user configuration from opencode.json
+             * 4. Fetches Codex system instructions from GitHub (cached)
+             * 5. Returns SDK configuration with custom fetch implementation
+             *
+             * @param getAuth - Function to retrieve current auth state
+             * @param provider - Provider configuration from opencode.json
+             * @returns SDK configuration object or empty object for non-OAuth auth
+             */
+            async loader(getAuth, provider) {
+                const auth = await getAuth();
+                // Only handle OAuth auth type, skip API key auth
+                if (auth.type !== "oauth") {
+                    return {};
+                }
+                // Extract ChatGPT account ID from JWT access token
+                const decoded = decodeJWT(auth.access);
+                const accountId = decoded?.[JWT_CLAIM_PATH]?.chatgpt_account_id;
+                if (!accountId) {
+                    logDebug(`[${PLUGIN_NAME}] ${ERROR_MESSAGES.NO_ACCOUNT_ID} (skipping plugin)`);
+                    return {};
+                }
+                // Extract user configuration (global + per-model options)
+                const providerConfig = provider;
+                const userConfig = {
+                    global: providerConfig?.options || {},
+                    models: providerConfig?.models || {},
+                };
+                // Load plugin configuration and determine CODEX_MODE
+                // Priority: CODEX_MODE env var > config file > default (true)
+                const pluginConfig = loadPluginConfig();
+                const codexMode = getCodexMode(pluginConfig);
+                // Opt-in: if a remote model registry overlay URL is configured,
+                // enable periodic background refresh (never blocks a request).
+                configureModelRegistrySource(pluginConfig.modelRegistryUrl);
+                // Return SDK configuration
+                return {
+                    apiKey: DUMMY_API_KEY,
+                    baseURL: CODEX_BASE_URL,
+                    /**
+                     * Custom fetch implementation for Codex API
+                     *
+                     * Handles:
+                     * - Token refresh when expired
+                     * - URL rewriting for Codex backend
+                     * - Request body transformation
+                     * - OAuth header injection
+                     * - SSE to JSON conversion for non-tool requests
+                     * - Error handling and logging
+                     *
+                     * @param input - Request URL or Request object
+                     * @param init - Request options
+                     * @returns Response from Codex API
+                     */
+                    async fetch(input, init) {
+                        // Step 1: Check and refresh token if needed
+                        let currentAuth = await getAuth();
+                        if (shouldRefreshToken(currentAuth)) {
+                            currentAuth = await refreshAndUpdateToken(currentAuth, client);
+                        }
+                        // Step 2: Extract and rewrite URL for Codex backend
+                        const originalUrl = extractRequestUrl(input);
+                        const url = rewriteUrlForCodex(originalUrl);
+                        // Step 3: Transform request body with model-specific Codex instructions
+                        // Instructions are fetched per model family (codex-max, codex, gpt-5.1)
+                        // Capture original stream value before transformation
+                        // generateText() sends no stream field, streamText() sends stream=true
+                        const originalBody = init?.body ? JSON.parse(init.body) : {};
+                        const isStreaming = originalBody.stream === true;
+                        const transformation = await transformRequestForCodex(init, url, userConfig, codexMode);
+                        const requestInit = transformation?.updatedInit ?? init;
+                        // Step 4: Create headers with OAuth and ChatGPT account info
+                        const accessToken = currentAuth.type === "oauth" ? currentAuth.access : "";
+                        const headers = createCodexHeaders(requestInit, accountId, accessToken, {
+                            model: transformation?.body.model,
+                            promptCacheKey: transformation?.body?.prompt_cache_key,
+                        });
+                        // Step 5: Make request to Codex API
+                        const response = await fetch(url, {
+                            ...requestInit,
+                            headers,
+                        });
+                        // Step 6: Log response
+                        logRequest(LOG_STAGES.RESPONSE, {
+                            status: response.status,
+                            ok: response.ok,
+                            statusText: response.statusText,
+                            headers: Object.fromEntries(response.headers.entries()),
+                        });
+                        // Step 7: Handle error or success response
+                        if (!response.ok) {
+                            return await handleErrorResponse(response);
+                        }
+                        return await handleSuccessResponse(response, isStreaming);
+                    },
+                };
+            },
+            methods: [
+                {
+                    label: AUTH_LABELS.OAUTH,
+                    type: "oauth",
+                    /**
+                     * OAuth authorization flow
+                     *
+                     * Steps:
+                     * 1. Generate PKCE challenge and state for security
+                     * 2. Start local OAuth callback server on port 1455
+                     * 3. Open browser to OpenAI authorization page
+                     * 4. Wait for user to complete login
+                     * 5. Exchange authorization code for tokens
+                     *
+                     * @returns Authorization flow configuration
+                     */
+                    authorize: async () => {
+                        const { pkce, state, url } = await createAuthorizationFlow();
+                        const serverInfo = await startLocalOAuthServer({ state });
+                        // Attempt to open browser automatically
+                        openBrowserUrl(url);
+                        if (!serverInfo.ready) {
+                            serverInfo.close();
+                            return buildManualOAuthFlow(pkce, url);
+                        }
+                        return {
+                            url,
+                            method: "auto",
+                            instructions: AUTH_LABELS.INSTRUCTIONS,
+                            callback: async () => {
+                                const result = await serverInfo.waitForCode(state);
+                                serverInfo.close();
+                                if (!result) {
+                                    return { type: "failed" };
+                                }
+                                const tokens = await exchangeAuthorizationCode(result.code, pkce.verifier, REDIRECT_URI);
+                                return tokens?.type === "success"
+                                    ? tokens
+                                    : { type: "failed" };
+                            },
+                        };
+                    },
+                },
+                {
+                    label: AUTH_LABELS.OAUTH_MANUAL,
+                    type: "oauth",
+                    authorize: async () => {
+                        const { pkce, url } = await createAuthorizationFlow();
+                        return buildManualOAuthFlow(pkce, url);
+                    },
+                },
+                {
+                    label: AUTH_LABELS.API_KEY,
+                    type: "api",
+                },
+            ],
+        },
+    };
+};
+export default OpenAIAuthPlugin;
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,OAAO,EACN,uBAAuB,EACvB,SAAS,EACT,yBAAyB,EACzB,uBAAuB,EACvB,YAAY,GACZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,4BAA4B,EAAE,MAAM,yCAAyC,CAAC;AACvF,OAAO,EACN,WAAW,EACX,cAAc,EACd,aAAa,EACb,cAAc,EACd,cAAc,EACd,UAAU,EAGV,WAAW,EACX,WAAW,GACX,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EACN,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,EAClB,wBAAwB,GACxB,MAAM,gCAAgC,CAAC;AAGxC;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAW,KAAK,EAAE,EAAE,MAAM,EAAe,EAAE,EAAE;IACzE,MAAM,oBAAoB,GAAG,CAAC,IAA0B,EAAE,GAAW,EAAE,EAAE,CAAC,CAAC;QAC1E,GAAG;QACH,MAAM,EAAE,MAAe;QACvB,YAAY,EAAE,WAAW,CAAC,mBAAmB;QAC7C,QAAQ,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;YACjC,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;YAC9C,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBAClB,OAAO,EAAE,IAAI,EAAE,QAAiB,EAAE,CAAC;YACpC,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAC7C,MAAM,CAAC,IAAI,EACX,IAAI,CAAC,QAAQ,EACb,YAAY,CACZ,CAAC;YACF,OAAO,MAAM,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,CAAC;QAC1E,CAAC;KACD,CAAC,CAAC;IACH,OAAO;QACN,IAAI,EAAE;YACL,QAAQ,EAAE,WAAW;YACrB;;;;;;;;;;;;;eAaG;YACH,KAAK,CAAC,MAAM,CAAC,OAA4B,EAAE,QAAiB;gBAC3D,MAAM,IAAI,GAAG,MAAM,OAAO,EAAE,CAAC;gBAE7B,iDAAiD;gBACjD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC3B,OAAO,EAAE,CAAC;gBACX,CAAC;gBAED,mDAAmD;gBACnD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACvC,MAAM,SAAS,GAAG,OAAO,EAAE,CAAC,cAAc,CAAC,EAAE,kBAAkB,CAAC;gBAEhE,IAAI,CAAC,SAAS,EAAE,CAAC;oBAChB,QAAQ,CACP,IAAI,WAAW,KAAK,cAAc,CAAC,aAAa,oBAAoB,CACpE,CAAC;oBACF,OAAO,EAAE,CAAC;gBACX,CAAC;gBACD,0DAA0D;gBAC1D,MAAM,cAAc,GAAG,QAEX,CAAC;gBACb,MAAM,UAAU,GAAe;oBAC9B,MAAM,EAAE,cAAc,EAAE,OAAO,IAAI,EAAE;oBACrC,MAAM,EAAE,cAAc,EAAE,MAAM,IAAI,EAAE;iBACpC,CAAC;gBAEF,qDAAqD;gBACrD,8DAA8D;gBAC9D,MAAM,YAAY,GAAG,gBAAgB,EAAE,CAAC;gBACxC,MAAM,SAAS,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;gBAE7C,gEAAgE;gBAChE,+DAA+D;gBAC/D,4BAA4B,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;gBAE5D,2BAA2B;gBAC3B,OAAO;oBACN,MAAM,EAAE,aAAa;oBACrB,OAAO,EAAE,cAAc;oBACvB;;;;;;;;;;;;;;uBAcG;oBACH,KAAK,CAAC,KAAK,CACV,KAA6B,EAC7B,IAAkB;wBAElB,4CAA4C;wBAC5C,IAAI,WAAW,GAAG,MAAM,OAAO,EAAE,CAAC;wBAClC,IAAI,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;4BACrC,WAAW,GAAG,MAAM,qBAAqB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;wBAChE,CAAC;wBAED,oDAAoD;wBACpD,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;wBAC7C,MAAM,GAAG,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;wBAE5C,wEAAwE;wBACxE,wEAAwE;wBACxE,sDAAsD;wBACtD,uEAAuE;wBACvE,MAAM,YAAY,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;wBACvE,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,KAAK,IAAI,CAAC;wBAEjD,MAAM,cAAc,GAAG,MAAM,wBAAwB,CACpD,IAAI,EACJ,GAAG,EACH,UAAU,EACV,SAAS,CACT,CAAC;wBACF,MAAM,WAAW,GAAG,cAAc,EAAE,WAAW,IAAI,IAAI,CAAC;wBAExD,6DAA6D;wBAC7D,MAAM,WAAW,GAChB,WAAW,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;wBACxD,MAAM,OAAO,GAAG,kBAAkB,CACjC,WAAW,EACX,SAAS,EACT,WAAW,EACX;4BACC,KAAK,EAAE,cAAc,EAAE,IAAI,CAAC,KAAK;4BACjC,cAAc,EAAG,cAAc,EAAE,IAAY,EAAE,gBAAgB;yBAC/D,CACD,CAAC;wBAEF,oCAAoC;wBACpC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;4BACjC,GAAG,WAAW;4BACd,OAAO;yBACP,CAAC,CAAC;wBAEH,uBAAuB;wBACvB,UAAU,CAAC,UAAU,CAAC,QAAQ,EAAE;4BAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;4BACvB,EAAE,EAAE,QAAQ,CAAC,EAAE;4BACf,UAAU,EAAE,QAAQ,CAAC,UAAU;4BAC/B,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;yBACvD,CAAC,CAAC;wBAEH,2CAA2C;wBAC3C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;4BAClB,OAAO,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;wBAC5C,CAAC;wBAED,OAAO,MAAM,qBAAqB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;oBAC3D,CAAC;iBACD,CAAC;YACH,CAAC;YACA,OAAO,EAAE;gBACR;oBACC,KAAK,EAAE,WAAW,CAAC,KAAK;oBACxB,IAAI,EAAE,OAAgB;oBACvB;;;;;;;;;;;uBAWG;oBACH,SAAS,EAAE,KAAK,IAAI,EAAE;wBACrB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,uBAAuB,EAAE,CAAC;wBAC7D,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;wBAE1D,wCAAwC;wBACxC,cAAc,CAAC,GAAG,CAAC,CAAC;wBAEpB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;4BACvB,UAAU,CAAC,KAAK,EAAE,CAAC;4BACnB,OAAO,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;wBACxC,CAAC;wBAED,OAAO;4BACN,GAAG;4BACH,MAAM,EAAE,MAAe;4BACvB,YAAY,EAAE,WAAW,CAAC,YAAY;4BACtC,QAAQ,EAAE,KAAK,IAAI,EAAE;gCACpB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;gCACnD,UAAU,CAAC,KAAK,EAAE,CAAC;gCAEnB,IAAI,CAAC,MAAM,EAAE,CAAC;oCACb,OAAO,EAAE,IAAI,EAAE,QAAiB,EAAE,CAAC;gCACpC,CAAC;gCAED,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAC7C,MAAM,CAAC,IAAI,EACX,IAAI,CAAC,QAAQ,EACb,YAAY,CACZ,CAAC;gCAEF,OAAO,MAAM,EAAE,IAAI,KAAK,SAAS;oCAChC,CAAC,CAAC,MAAM;oCACR,CAAC,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,CAAC;4BAChC,CAAC;yBACD,CAAC;oBACH,CAAC;iBACA;gBACD;oBACC,KAAK,EAAE,WAAW,CAAC,YAAY;oBAC/B,IAAI,EAAE,OAAgB;oBACtB,SAAS,EAAE,KAAK,IAAI,EAAE;wBACrB,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,uBAAuB,EAAE,CAAC;wBACtD,OAAO,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;oBACxC,CAAC;iBACD;gBACD;oBACC,KAAK,EAAE,WAAW,CAAC,OAAO;oBAC1B,IAAI,EAAE,KAAc;iBACpB;aACF;SACD;KACD,CAAC;AACH,CAAC,CAAC;AAEF,eAAe,gBAAgB,CAAC"}

package/dist/lib/auth/auth.d.ts

@@ -0,0 +1,43 @@
+import type { AuthorizationFlow, TokenResult, ParsedAuthInput, JWTPayload } from "../types.js";
+export declare const CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
+export declare const AUTHORIZE_URL = "https://auth.openai.com/oauth/authorize";
+export declare const TOKEN_URL = "https://auth.openai.com/oauth/token";
+export declare const REDIRECT_URI = "http://localhost:1455/auth/callback";
+export declare const SCOPE = "openid profile email offline_access";
+/**
+ * Generate a random state value for OAuth flow
+ * @returns Random hex string
+ */
+export declare function createState(): string;
+/**
+ * Parse authorization code and state from user input
+ * @param input - User input (URL, code#state, or just code)
+ * @returns Parsed authorization data
+ */
+export declare function parseAuthorizationInput(input: string): ParsedAuthInput;
+/**
+ * Exchange authorization code for access and refresh tokens
+ * @param code - Authorization code from OAuth flow
+ * @param verifier - PKCE verifier
+ * @param redirectUri - OAuth redirect URI
+ * @returns Token result
+ */
+export declare function exchangeAuthorizationCode(code: string, verifier: string, redirectUri?: string): Promise<TokenResult>;
+/**
+ * Decode a JWT token to extract payload
+ * @param token - JWT token to decode
+ * @returns Decoded payload or null if invalid
+ */
+export declare function decodeJWT(token: string): JWTPayload | null;
+/**
+ * Refresh access token using refresh token
+ * @param refreshToken - Refresh token
+ * @returns Token result
+ */
+export declare function refreshAccessToken(refreshToken: string): Promise<TokenResult>;
+/**
+ * Create OAuth authorization flow
+ * @returns Authorization flow details
+ */
+export declare function createAuthorizationFlow(): Promise<AuthorizationFlow>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/lib/auth/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../lib/auth/auth.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAY,iBAAiB,EAAE,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzG,eAAO,MAAM,SAAS,iCAAiC,CAAC;AACxD,eAAO,MAAM,aAAa,4CAA4C,CAAC;AACvE,eAAO,MAAM,SAAS,wCAAwC,CAAC;AAC/D,eAAO,MAAM,YAAY,wCAAwC,CAAC;AAClE,eAAO,MAAM,KAAK,wCAAwC,CAAC;AAE3D;;;GAGG;AACH,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAwBtE;AAED;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAC9C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,WAAW,GAAE,MAAqB,GAChC,OAAO,CAAC,WAAW,CAAC,CAoCtB;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAU1D;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAkDnF;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAiB1E"}