@darkjd/opencode-openai-codex-auth 4.10.1

package/dist/lib/types.d.ts

@@ -0,0 +1,178 @@
+import type { Auth, Provider, Model } from "@opencode-ai/sdk";
+/**
+ * Plugin configuration from ~/.opencode/openai-codex-auth-config.json
+ */
+export interface PluginConfig {
+    /**
+     * Enable CODEX_MODE (Codex-OpenCode bridge prompt instead of tool remap)
+     * @default true
+     */
+    codexMode?: boolean;
+    /**
+     * Optional URL to a remotely-hosted model registry overlay (JSON array of
+     * ModelRegistryEntry objects — see lib/request/helpers/model-registry-data.ts).
+     * When set, the plugin periodically (every 15 min, ETag-cached) checks this
+     * URL for updates and merges them with the bundled model registry, so a
+     * maintainer can ship recognition for a new model without a full npm
+     * release. Opt-in only — unset by default. Can also be set via the
+     * OPENCODE_CODEX_MODEL_REGISTRY_URL environment variable, which takes
+     * precedence over this field.
+     */
+    modelRegistryUrl?: string;
+}
+/**
+ * User configuration structure from opencode.json
+ */
+export interface UserConfig {
+    global: ConfigOptions;
+    models: {
+        [modelName: string]: {
+            options?: ConfigOptions;
+            variants?: Record<string, (ConfigOptions & {
+                disabled?: boolean;
+            }) | undefined>;
+            [key: string]: unknown;
+        };
+    };
+}
+/**
+ * Configuration options for reasoning and text settings
+ */
+export interface ConfigOptions {
+    reasoningEffort?: "none" | "minimal" | "low" | "medium" | "high" | "xhigh" | "max";
+    reasoningSummary?: "auto" | "concise" | "detailed" | "off" | "on";
+    textVerbosity?: "low" | "medium" | "high";
+    include?: string[];
+}
+/**
+ * Reasoning configuration for requests
+ */
+export interface ReasoningConfig {
+    effort: "none" | "minimal" | "low" | "medium" | "high" | "xhigh" | "max";
+    summary: "auto" | "concise" | "detailed" | "off" | "on";
+}
+/**
+ * OAuth server information
+ */
+export interface OAuthServerInfo {
+    port: number;
+    ready: boolean;
+    close: () => void;
+    waitForCode: (state: string) => Promise<{
+        code: string;
+    } | null>;
+}
+/**
+ * PKCE challenge and verifier
+ */
+export interface PKCEPair {
+    challenge: string;
+    verifier: string;
+}
+/**
+ * Authorization flow result
+ */
+export interface AuthorizationFlow {
+    pkce: PKCEPair;
+    state: string;
+    url: string;
+}
+/**
+ * Token exchange success result
+ */
+export interface TokenSuccess {
+    type: "success";
+    access: string;
+    refresh: string;
+    expires: number;
+}
+/**
+ * Token exchange failure result
+ */
+export interface TokenFailure {
+    type: "failed";
+}
+/**
+ * Token exchange result
+ */
+export type TokenResult = TokenSuccess | TokenFailure;
+/**
+ * Parsed authorization input
+ */
+export interface ParsedAuthInput {
+    code?: string;
+    state?: string;
+}
+/**
+ * JWT payload with ChatGPT account info
+ */
+export interface JWTPayload {
+    "https://api.openai.com/auth"?: {
+        chatgpt_account_id?: string;
+    };
+    [key: string]: unknown;
+}
+/**
+ * Message input item
+ */
+export interface InputItem {
+    id?: string;
+    type: string;
+    role: string;
+    content?: unknown;
+    [key: string]: unknown;
+}
+/**
+ * Request body structure
+ */
+export interface RequestBody {
+    model: string;
+    store?: boolean;
+    stream?: boolean;
+    instructions?: string;
+    input?: InputItem[];
+    tools?: unknown;
+    reasoning?: Partial<ReasoningConfig>;
+    text?: {
+        verbosity?: "low" | "medium" | "high";
+    };
+    include?: string[];
+    providerOptions?: {
+        openai?: Partial<ConfigOptions> & {
+            store?: boolean;
+            include?: string[];
+        };
+        [key: string]: unknown;
+    };
+    /** Stable key to enable prompt-token caching on Codex backend */
+    prompt_cache_key?: string;
+    max_output_tokens?: number;
+    max_completion_tokens?: number;
+    [key: string]: unknown;
+}
+/**
+ * SSE event data structure
+ */
+export interface SSEEventData {
+    type: string;
+    response?: unknown;
+    [key: string]: unknown;
+}
+/**
+ * Cache metadata for Codex instructions
+ */
+export interface CacheMetadata {
+    etag: string | null;
+    tag: string;
+    lastChecked: number;
+    url: string;
+}
+/**
+ * GitHub release data
+ */
+export interface GitHubRelease {
+    tag_name: string;
+    [key: string]: unknown;
+}
+export type { Auth, Provider, Model };
+//# sourceMappingURL=types.d.ts.map

package/dist/lib/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../lib/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAE9D;;GAEG;AACH,MAAM,WAAW,YAAY;IAC5B;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;;;OASG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IAC1B,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE;QACP,CAAC,SAAS,EAAE,MAAM,GAAG;YACpB,OAAO,CAAC,EAAE,aAAa,CAAC;YACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,aAAa,GAAG;gBAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;aAAE,CAAC,GAAG,SAAS,CAAC,CAAC;YAChF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;SACvB,CAAC;KACF,CAAC;CACF;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC7B,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,CAAC;IACnF,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,KAAK,GAAG,IAAI,CAAC;IAClE,aAAa,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC1C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC/B,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,CAAC;IACzE,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,KAAK,GAAG,IAAI,CAAC;CACxD;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;CACjE;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IACjC,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACZ;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,QAAQ,CAAC;CACf;AAED;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,YAAY,CAAC;AAEtD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IAC1B,6BAA6B,CAAC,EAAE;QAC/B,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACzB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACrC,IAAI,CAAC,EAAE;QACN,SAAS,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;KACtC,CAAC;IACF,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,eAAe,CAAC,EAAE;QACjB,MAAM,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG;YAAE,KAAK,CAAC,EAAE,OAAO,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;QAC1E,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACvB,CAAC;IACF,iEAAiE;IACjE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;CACZ;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACvB;AAGD,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC"}

package/dist/lib/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/lib/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../lib/types.ts"],"names":[],"mappings":""}

package/dist/v2.d.ts

@@ -0,0 +1,34 @@
+/**
+ * OpenCode 2 native plugin entrypoint.
+ *
+ * V1 plugin implementations (a bare async function default export) do not
+ * run under OpenCode 2 at all — the loader rejects them with a SchemaError
+ * before any of their code runs. This file is a from-scratch V2 port that
+ * reuses every existing business-logic module under lib/ unchanged (model
+ * normalization, Codex instructions, CODEX_MODE bridge, skill-catalog
+ * passthrough, SSE→JSON conversion, etc.) behind V2's native `http.request`
+ * / `http.response` session hooks instead of a custom `fetch` override.
+ *
+ * The V1 entrypoint remains available unchanged at "./legacy" for users
+ * still running OpenCode 1 (see package.json's dual "exports").
+ *
+ * See specs/opencode-v2-plugin-port.md for the root-cause investigation
+ * (confirmed empirically against a real OpenCode 2.0.15 instance) and
+ * design rationale behind every choice below.
+ */
+import { Plugin } from "@opencode/plugin";
+import type { SessionHttpRequest, SessionHttpResponse } from "@opencode/plugin/promise/session";
+import { type V2Credentials } from "./lib/auth/v2-storage.js";
+/**
+ * Exported separately so hook wiring can be exercised in tests without a
+ * live OpenCode 2 host (same pattern as dark-auth's createV2Hooks()).
+ */
+export declare function createV2Hooks(): {
+    request: (event: SessionHttpRequest) => Promise<void>;
+    response: (event: SessionHttpResponse) => Promise<void>;
+    getCredentials: () => V2Credentials | null;
+    ensureFreshCredentials: () => Promise<V2Credentials | null>;
+};
+declare const _default: Plugin.Plugin;
+export default _default;
+//# sourceMappingURL=v2.d.ts.map

package/dist/v2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2.d.ts","sourceRoot":"","sources":["../v2.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,MAAM,EAAmB,MAAM,kBAAkB,CAAC;AAC3D,OAAO,KAAK,EACX,kBAAkB,EAClB,mBAAmB,EACnB,MAAM,kCAAkC,CAAC;AAU1C,OAAO,EAIN,KAAK,aAAa,EAClB,MAAM,0BAA0B,CAAC;AAmDlC;;;GAGG;AACH,wBAAgB,aAAa;qBAuDE,kBAAkB,KAAG,OAAO,CAAC,IAAI,CAAC;sBAsDjC,mBAAmB,KAAG,OAAO,CAAC,IAAI,CAAC;0BAnGvC,aAAa,GAAG,IAAI;kCAeN,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;EAgGtE;;AAED,wBAoGG"}

package/dist/v2.js

@@ -0,0 +1,259 @@
+/**
+ * OpenCode 2 native plugin entrypoint.
+ *
+ * V1 plugin implementations (a bare async function default export) do not
+ * run under OpenCode 2 at all — the loader rejects them with a SchemaError
+ * before any of their code runs. This file is a from-scratch V2 port that
+ * reuses every existing business-logic module under lib/ unchanged (model
+ * normalization, Codex instructions, CODEX_MODE bridge, skill-catalog
+ * passthrough, SSE→JSON conversion, etc.) behind V2's native `http.request`
+ * / `http.response` session hooks instead of a custom `fetch` override.
+ *
+ * The V1 entrypoint remains available unchanged at "./legacy" for users
+ * still running OpenCode 1 (see package.json's dual "exports").
+ *
+ * See specs/opencode-v2-plugin-port.md for the root-cause investigation
+ * (confirmed empirically against a real OpenCode 2.0.15 instance) and
+ * design rationale behind every choice below.
+ */
+import { Plugin } from "@opencode/plugin";
+import { createAuthorizationFlow, decodeJWT, exchangeAuthorizationCode, parseAuthorizationInput, refreshAccessToken, } from "./lib/auth/auth.js";
+import { openBrowserUrl } from "./lib/auth/browser.js";
+import { startLocalOAuthServer } from "./lib/auth/server.js";
+import { importLegacyV1Credentials, loadV2Credentials, saveV2Credentials, } from "./lib/auth/v2-storage.js";
+import { getCodexMode, loadPluginConfig } from "./lib/config.js";
+import { configureModelRegistrySource } from "./lib/request/helpers/model-registry.js";
+import { AUTH_LABELS, JWT_CLAIM_PATH, URL_PATHS, } from "./lib/constants.js";
+import { logDebug } from "./lib/logger.js";
+import { createCodexHeaders, handleErrorResponse, handleSuccessResponse, rewriteUrlForCodex, transformRequestForCodex, } from "./lib/request/fetch-helpers.js";
+/** Distinct from OpenCode's own built-in "chatgpt-browser"/"chatgpt-headless" methods. */
+const METHOD_ID = "codex-auth";
+const INTEGRATION_ID = "openai";
+/**
+ * Matches an outgoing OpenAI Responses API request before Codex-backend URL
+ * rewriting. Mirrors the intent of the V1 fetch()'s URL_PATHS.RESPONSES
+ * check, and (like dark-auth's anthropicMessages() helper) guards every
+ * hook against firing for unrelated "openai" traffic.
+ */
+function isResponsesRequest(request) {
+    try {
+        const url = new URL(request.url);
+        return (request.method === "POST" &&
+            url.pathname.includes(URL_PATHS.RESPONSES));
+    }
+    catch {
+        return false;
+    }
+}
+function toOAuthCredential(creds) {
+    return {
+        type: "oauth",
+        methodID: METHOD_ID,
+        access: creds.access,
+        refresh: creds.refresh,
+        expires: creds.expires,
+    };
+}
+/**
+ * Exported separately so hook wiring can be exercised in tests without a
+ * live OpenCode 2 host (same pattern as dark-auth's createV2Hooks()).
+ */
+export function createV2Hooks() {
+    // Per-session streaming flag, set in the request hook and consumed once
+    // by the matching response hook. Request bodies are one-shot streams, so
+    // this is cheaper than re-reading event.request in the response hook.
+    const streamingBySession = new Map();
+    let cachedCredentials = null;
+    let cachedAccountId;
+    let refreshPromise = null;
+    function getCredentials() {
+        if (cachedCredentials)
+            return cachedCredentials;
+        cachedCredentials = loadV2Credentials() ?? importLegacyV1Credentials();
+        return cachedCredentials;
+    }
+    function accountIdFor(creds) {
+        if (creds.accountId)
+            return creds.accountId;
+        if (cachedAccountId)
+            return cachedAccountId;
+        const decoded = decodeJWT(creds.access);
+        const accountId = decoded?.[JWT_CLAIM_PATH]?.chatgpt_account_id;
+        if (accountId)
+            cachedAccountId = accountId;
+        return accountId;
+    }
+    async function ensureFreshCredentials() {
+        const current = getCredentials();
+        if (!current)
+            return null;
+        if (current.expires > Date.now() + 60_000)
+            return current;
+        if (!refreshPromise) {
+            refreshPromise = (async () => {
+                const result = await refreshAccessToken(current.refresh);
+                if (result.type !== "success")
+                    return null;
+                const updated = {
+                    access: result.access,
+                    refresh: result.refresh,
+                    expires: result.expires,
+                    accountId: cachedAccountId,
+                };
+                cachedCredentials = updated;
+                saveV2Credentials(updated);
+                return updated;
+            })().finally(() => {
+                refreshPromise = null;
+            });
+        }
+        return refreshPromise;
+    }
+    const pluginConfig = loadPluginConfig();
+    const codexMode = getCodexMode(pluginConfig);
+    configureModelRegistrySource(pluginConfig.modelRegistryUrl);
+    const userConfig = { global: {}, models: {} };
+    async function request(event) {
+        if (!isResponsesRequest(event.request))
+            return;
+        const credentials = await ensureFreshCredentials();
+        if (!credentials) {
+            throw new Error("[openai-codex-plugin] No ChatGPT/Codex credentials found. Authenticate via the 'ChatGPT Plus/Pro (Codex Auth)' method first.");
+        }
+        const accountId = accountIdFor(credentials);
+        if (!accountId) {
+            throw new Error("[openai-codex-plugin] Failed to extract accountId from token.");
+        }
+        const original = event.request;
+        const originalBody = original.body ? await original.clone().text() : "";
+        const parsedBody = originalBody ? JSON.parse(originalBody) : {};
+        const isStreaming = parsedBody.stream === true;
+        streamingBySession.set(event.sessionID, isStreaming);
+        const url = rewriteUrlForCodex(original.url);
+        const transformation = await transformRequestForCodex({ body: originalBody }, url, userConfig, codexMode);
+        const transformedBody = transformation?.body;
+        const finalBody = transformedBody
+            ? JSON.stringify(transformedBody)
+            : originalBody;
+        const headers = createCodexHeaders({ headers: original.headers }, accountId, credentials.access, {
+            model: transformedBody?.model,
+            promptCacheKey: transformedBody
+                ?.prompt_cache_key,
+        });
+        event.request = new Request(url, {
+            method: original.method,
+            headers,
+            body: finalBody,
+            signal: original.signal,
+            redirect: original.redirect,
+        });
+    }
+    async function response(event) {
+        if (!event.request.url.includes(URL_PATHS.CODEX_RESPONSES))
+            return;
+        const isStreaming = streamingBySession.get(event.sessionID) ?? false;
+        streamingBySession.delete(event.sessionID);
+        event.response = event.response.ok
+            ? await handleSuccessResponse(event.response, isStreaming)
+            : await handleErrorResponse(event.response);
+    }
+    return { request, response, getCredentials, ensureFreshCredentials };
+}
+export default Plugin.define({
+    id: "opencode-openai-codex-auth",
+    async setup(ctx) {
+        const hooks = createV2Hooks();
+        await ctx.session.hook("http.request", hooks.request, {
+            providerID: INTEGRATION_ID,
+        });
+        await ctx.session.hook("http.response", hooks.response, {
+            providerID: INTEGRATION_ID,
+        });
+        // V2's integration method can own new logins; there is no public API
+        // to import an existing OAuth credential into its connection store at
+        // setup (same limitation documented by dark-auth for Anthropic). This
+        // plugin's own file-based store (lib/auth/v2-storage.ts) is what the
+        // http.request hook above actually reads from, independent of which
+        // method OpenCode 2 shows as "active" for the integration — but the
+        // user must still complete THIS method once so OpenCode 2 treats
+        // "openai" as connected and routes model requests through it.
+        await ctx.integration.transform((editor) => {
+            if (!editor.get(INTEGRATION_ID))
+                return;
+            editor.method.update({
+                integrationID: INTEGRATION_ID,
+                method: {
+                    id: METHOD_ID,
+                    type: "oauth",
+                    label: AUTH_LABELS.OAUTH_V2,
+                },
+                authorize: async () => {
+                    const { pkce, state, url } = await createAuthorizationFlow();
+                    const serverInfo = await startLocalOAuthServer({ state });
+                    if (!serverInfo.ready) {
+                        return {
+                            url,
+                            instructions: AUTH_LABELS.INSTRUCTIONS_MANUAL,
+                            mode: "code",
+                            callback: async (code) => {
+                                const parsed = parseAuthorizationInput(code);
+                                if (!parsed.code)
+                                    throw new Error("[openai-codex-plugin] Missing authorization code");
+                                const tokens = await exchangeAuthorizationCode(parsed.code, pkce.verifier);
+                                if (tokens.type !== "success") {
+                                    throw new Error("[openai-codex-plugin] OAuth exchange failed");
+                                }
+                                const creds = {
+                                    access: tokens.access,
+                                    refresh: tokens.refresh,
+                                    expires: tokens.expires,
+                                };
+                                saveV2Credentials(creds);
+                                return toOAuthCredential(creds);
+                            },
+                        };
+                    }
+                    openBrowserUrl(url);
+                    const callback = (async () => {
+                        const result = await serverInfo.waitForCode(state);
+                        serverInfo.close();
+                        if (!result)
+                            throw new Error("[openai-codex-plugin] OAuth callback timed out");
+                        const tokens = await exchangeAuthorizationCode(result.code, pkce.verifier);
+                        if (tokens.type !== "success") {
+                            throw new Error("[openai-codex-plugin] OAuth exchange failed");
+                        }
+                        const creds = {
+                            access: tokens.access,
+                            refresh: tokens.refresh,
+                            expires: tokens.expires,
+                        };
+                        saveV2Credentials(creds);
+                        return toOAuthCredential(creds);
+                    })();
+                    return {
+                        url,
+                        instructions: AUTH_LABELS.INSTRUCTIONS,
+                        mode: "auto",
+                        callback,
+                    };
+                },
+                refresh: async (credential) => {
+                    const result = await refreshAccessToken(credential.refresh);
+                    if (result.type !== "success") {
+                        throw new Error("[openai-codex-plugin] OAuth refresh failed");
+                    }
+                    const creds = {
+                        access: result.access,
+                        refresh: result.refresh,
+                        expires: result.expires,
+                    };
+                    saveV2Credentials(creds);
+                    return toOAuthCredential(creds);
+                },
+            });
+        });
+        logDebug("[openai-codex-plugin] V2 plugin setup complete");
+    },
+});
+//# sourceMappingURL=v2.js.map

package/dist/v2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2.js","sourceRoot":"","sources":["../v2.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,MAAM,EAAmB,MAAM,kBAAkB,CAAC;AAK3D,OAAO,EACN,uBAAuB,EACvB,SAAS,EACT,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EACN,yBAAyB,EACzB,iBAAiB,EACjB,iBAAiB,GAEjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,4BAA4B,EAAE,MAAM,yCAAyC,CAAC;AACvF,OAAO,EACN,WAAW,EAEX,cAAc,EACd,SAAS,GACT,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EACN,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,EAClB,wBAAwB,GACxB,MAAM,gCAAgC,CAAC;AAGxC,0FAA0F;AAC1F,MAAM,SAAS,GAAG,YAAY,CAAC;AAC/B,MAAM,cAAc,GAAG,QAAQ,CAAC;AAEhC;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,OAAgB;IAC3C,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,OAAO,CACN,OAAO,CAAC,MAAM,KAAK,MAAM;YACzB,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAC1C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAoB;IAC9C,OAAO;QACN,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,SAAyC;QACnD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;KACtB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa;IAC5B,wEAAwE;IACxE,yEAAyE;IACzE,sEAAsE;IACtE,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAmB,CAAC;IAEtD,IAAI,iBAAiB,GAAyB,IAAI,CAAC;IACnD,IAAI,eAAmC,CAAC;IACxC,IAAI,cAAc,GAAyC,IAAI,CAAC;IAEhE,SAAS,cAAc;QACtB,IAAI,iBAAiB;YAAE,OAAO,iBAAiB,CAAC;QAChD,iBAAiB,GAAG,iBAAiB,EAAE,IAAI,yBAAyB,EAAE,CAAC;QACvE,OAAO,iBAAiB,CAAC;IAC1B,CAAC;IAED,SAAS,YAAY,CAAC,KAAoB;QACzC,IAAI,KAAK,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC,SAAS,CAAC;QAC5C,IAAI,eAAe;YAAE,OAAO,eAAe,CAAC;QAC5C,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,OAAO,EAAE,CAAC,cAAc,CAAC,EAAE,kBAAkB,CAAC;QAChE,IAAI,SAAS;YAAE,eAAe,GAAG,SAAS,CAAC;QAC3C,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,KAAK,UAAU,sBAAsB;QACpC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,IAAI,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;YAAE,OAAO,OAAO,CAAC;QAE1D,IAAI,CAAC,cAAc,EAAE,CAAC;YACrB,cAAc,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC5B,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACzD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;oBAAE,OAAO,IAAI,CAAC;gBAC3C,MAAM,OAAO,GAAkB;oBAC9B,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,SAAS,EAAE,eAAe;iBAC1B,CAAC;gBACF,iBAAiB,GAAG,OAAO,CAAC;gBAC5B,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBAC3B,OAAO,OAAO,CAAC;YAChB,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;gBACjB,cAAc,GAAG,IAAI,CAAC;YACvB,CAAC,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,cAAc,CAAC;IACvB,CAAC;IAED,MAAM,YAAY,GAAG,gBAAgB,EAAE,CAAC;IACxC,MAAM,SAAS,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IAC7C,4BAA4B,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAe,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAE1D,KAAK,UAAU,OAAO,CAAC,KAAyB;QAC/C,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,OAAO;QAE/C,MAAM,WAAW,GAAG,MAAM,sBAAsB,EAAE,CAAC;QACnD,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CACd,8HAA8H,CAC9H,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACd,+DAA+D,CAC/D,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC;QAC/B,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,KAAK,IAAI,CAAC;QAC/C,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAErD,MAAM,GAAG,GAAG,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,cAAc,GAAG,MAAM,wBAAwB,CACpD,EAAE,IAAI,EAAE,YAAY,EAAE,EACtB,GAAG,EACH,UAAU,EACV,SAAS,CACT,CAAC;QACF,MAAM,eAAe,GAAG,cAAc,EAAE,IAAI,CAAC;QAC7C,MAAM,SAAS,GAAG,eAAe;YAChC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC;YACjC,CAAC,CAAC,YAAY,CAAC;QAEhB,MAAM,OAAO,GAAG,kBAAkB,CACjC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,EAC7B,SAAS,EACT,WAAW,CAAC,MAAM,EAClB;YACC,KAAK,EAAE,eAAe,EAAE,KAAK;YAC7B,cAAc,EAAG,eAA6D;gBAC7E,EAAE,gBAAgB;SACnB,CACD,CAAC;QAEF,KAAK,CAAC,OAAO,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO;YACP,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC3B,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,QAAQ,CAAC,KAA0B;QACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,eAAe,CAAC;YAAE,OAAO;QAEnE,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC;QACrE,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAE3C,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE;YACjC,CAAC,CAAC,MAAM,qBAAqB,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC;YAC1D,CAAC,CAAC,MAAM,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,sBAAsB,EAAE,CAAC;AACtE,CAAC;AAED,eAAe,MAAM,CAAC,MAAM,CAAC;IAC5B,EAAE,EAAE,4BAA4B;IAChC,KAAK,CAAC,KAAK,CAAC,GAAG;QACd,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;QAE9B,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,OAAO,EAAE;YACrD,UAAU,EAAE,cAAc;SAC1B,CAAC,CAAC;QACH,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,QAAQ,EAAE;YACvD,UAAU,EAAE,cAAc;SAC1B,CAAC,CAAC;QAEH,qEAAqE;QACrE,sEAAsE;QACtE,sEAAsE;QACtE,qEAAqE;QACrE,oEAAoE;QACpE,oEAAoE;QACpE,iEAAiE;QACjE,8DAA8D;QAC9D,MAAM,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE;YAC1C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC;gBAAE,OAAO;YACxC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;gBACpB,aAAa,EAAE,cAAc;gBAC7B,MAAM,EAAE;oBACP,EAAE,EAAE,SAAS;oBACb,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,WAAW,CAAC,QAAQ;iBAC3B;gBACD,SAAS,EAAE,KAAK,IAAI,EAAE;oBACrB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,uBAAuB,EAAE,CAAC;oBAC7D,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;oBAE1D,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;wBACvB,OAAO;4BACN,GAAG;4BACH,YAAY,EAAE,WAAW,CAAC,mBAAmB;4BAC7C,IAAI,EAAE,MAAe;4BACrB,QAAQ,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE;gCAChC,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;gCAC7C,IAAI,CAAC,MAAM,CAAC,IAAI;oCAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;gCACtF,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;gCAC3E,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oCAC/B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;gCAChE,CAAC;gCACD,MAAM,KAAK,GAAkB;oCAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;oCACrB,OAAO,EAAE,MAAM,CAAC,OAAO;oCACvB,OAAO,EAAE,MAAM,CAAC,OAAO;iCACvB,CAAC;gCACF,iBAAiB,CAAC,KAAK,CAAC,CAAC;gCACzB,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;4BACjC,CAAC;yBACD,CAAC;oBACH,CAAC;oBAED,cAAc,CAAC,GAAG,CAAC,CAAC;oBAEpB,MAAM,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;wBAC5B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;wBACnD,UAAU,CAAC,KAAK,EAAE,CAAC;wBACnB,IAAI,CAAC,MAAM;4BAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;wBAC/E,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;wBAC3E,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;4BAC/B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;wBAChE,CAAC;wBACD,MAAM,KAAK,GAAkB;4BAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;4BACrB,OAAO,EAAE,MAAM,CAAC,OAAO;4BACvB,OAAO,EAAE,MAAM,CAAC,OAAO;yBACvB,CAAC;wBACF,iBAAiB,CAAC,KAAK,CAAC,CAAC;wBACzB,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;oBACjC,CAAC,CAAC,EAAE,CAAC;oBAEL,OAAO;wBACN,GAAG;wBACH,YAAY,EAAE,WAAW,CAAC,YAAY;wBACtC,IAAI,EAAE,MAAe;wBACrB,QAAQ;qBACR,CAAC;gBACH,CAAC;gBACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;oBAC7B,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;oBAC5D,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;wBAC/B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;oBAC/D,CAAC;oBACD,MAAM,KAAK,GAAkB;wBAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,OAAO,EAAE,MAAM,CAAC,OAAO;qBACvB,CAAC;oBACF,iBAAiB,CAAC,KAAK,CAAC,CAAC;oBACzB,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBACjC,CAAC;aACD,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,gDAAgD,CAAC,CAAC;IAC5D,CAAC;CACD,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,87 @@
+{
+  "name": "@darkjd/opencode-openai-codex-auth",
+  "version": "4.10.1",
+  "description": "OpenAI ChatGPT (Codex backend) OAuth auth plugin for opencode - use your ChatGPT Plus/Pro subscription instead of API credits",
+  "main": "./dist/v2.js",
+  "types": "./dist/v2.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/v2.d.ts",
+      "default": "./dist/v2.js"
+    },
+    "./legacy": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "type": "module",
+  "license": "MIT",
+  "author": "Numman Ali",
+  "contributors": [
+    "JDis03 (active fork maintainer — https://github.com/JDis03)"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/JDis03/opencode-openai-codex-auth.git"
+  },
+  "keywords": [
+    "opencode",
+    "openai",
+    "codex",
+    "chatgpt",
+    "oauth",
+    "gpt-5",
+    "plugin",
+    "auth",
+    "chatgpt-plus",
+    "chatgpt-pro"
+  ],
+  "homepage": "https://github.com/JDis03/opencode-openai-codex-auth#readme",
+  "bugs": {
+    "url": "https://github.com/JDis03/opencode-openai-codex-auth/issues"
+  },
+  "scripts": {
+    "build": "tsc && cp lib/oauth-success.html dist/lib/",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:ui": "vitest --ui",
+    "test:coverage": "vitest run --coverage"
+  },
+  "files": [
+    "dist/",
+    "assets/",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "peerDependencies": {
+    "@opencode-ai/plugin": "^1.0.150"
+  },
+  "peerDependenciesMeta": {
+    "@opencode-ai/plugin": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@opencode-ai/plugin": "^1.0.150",
+    "@opencode-ai/sdk": "^1.0.150",
+    "@opencode/plugin": "^2.0.16",
+    "@types/node": "^24.6.2",
+    "@vitest/ui": "^3.2.4",
+    "typescript": "^5.9.3",
+    "vitest": "^3.2.4"
+  },
+  "dependencies": {
+    "@opencode/plugin": "^2.0.15",
+    "@openauthjs/openauth": "^0.4.3",
+    "hono": "^4.10.4",
+    "jsonc-parser": "^3.3.1"
+  },
+  "overrides": {
+    "hono": "^4.10.4",
+    "vite": "^7.1.12"
+  }
+}