@episoda/cli 0.2.213 → 0.2.214

package/dist/daemon/daemon-process.js

@@ -3051,7 +3051,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@episoda/cli",
-      version: "0.2.213",
+      version: "0.2.214",
       description: "CLI tool for Episoda local development workflow orchestration",
       main: "dist/index.js",
       types: "dist/index.d.ts",
@@ -4798,22 +4798,17 @@ async function ensureCodexBinary() {
 // src/agent/providers/codex-config.ts
 var DEFAULT_CODEX_MODEL = "gpt-5.4";
 function generateCodexAuthJson(credentials) {
-  if (!credentials.refreshToken) {
-    throw new Error(
-      "Codex refresh token is missing. Please re-authenticate with Codex in Settings > AI Providers."
-    );
-  }
   const tokens = {
     id_token: credentials.idToken || credentials.accessToken,
     // Fallback to access_token if no id_token
     access_token: credentials.accessToken,
-    refresh_token: credentials.refreshToken
-    // EP1139: Required field
+    refresh_token: ""
   };
   if (credentials.accountId) {
     tokens.account_id = credentials.accountId;
   }
   const authData = {
+    auth_mode: "chatgptAuthTokens",
     OPENAI_API_KEY: null,
     // This null is expected by Codex CLI
     tokens,
@@ -13068,7 +13063,6 @@ async function handlePtySpawn(payload, client) {
     lastOutputAt: Date.now(),
     watchdogTimer: null,
     credentialDirs: bootstrap.cleanupDirs,
-    credentialAuthPath: bootstrap.authPath,
     startup: createStartupState(payload)
   };
   sessions.set(agent_run_id, session);
@@ -13118,7 +13112,7 @@ async function handlePtySpawn(payload, client) {
     }).catch((err) => {
       console.error(`[PTY] Failed to send pty_exit for ${agent_run_id}:`, err.message);
     });
-    syncCredentialUpdateAfterExit(session, agent_run_id, client);
+    cleanupCredentialDirs(session.credentialDirs);
   });
   if (session.startup) {
     armStartupTimeout(session, proc);
@@ -13191,9 +13185,6 @@ function createCredentialBootstrap(payload, agentRunId) {
   if (!bootstrap?.oauth?.access_token) {
     return { env: {}, cleanupDirs: [] };
   }
-  if (bootstrap.provider === "codex" && !bootstrap.oauth.refresh_token) {
-    throw new Error("Codex PTY spawn aborted: refresh_token is missing from credential bundle. Please reconnect Codex in Settings.");
-  }
   const baseDir = fs31.mkdtempSync(path31.join(os14.tmpdir(), `episoda-pty-${agentRunId}-`));
   const cleanupDirs = [baseDir];
   if (bootstrap.provider === "claude") {
@@ -13214,25 +13205,18 @@ function createCredentialBootstrap(payload, agentRunId) {
   }
   const codexHome = path31.join(baseDir, ".codex");
   fs31.mkdirSync(codexHome, { recursive: true });
-  const authPath = path31.join(codexHome, "auth.json");
-  const authPayload = {
-    auth_mode: "chatgpt",
-    OPENAI_API_KEY: null,
-    // EP1473: Codex CLI 0.104.0+ requires last_refresh during token/model bootstrap.
-    // Without it, Codex fails with "Token data is not available" before any work begins.
-    last_refresh: (/* @__PURE__ */ new Date()).toISOString(),
-    tokens: {
-      access_token: bootstrap.oauth.access_token,
-      refresh_token: bootstrap.oauth.refresh_token,
-      id_token: bootstrap.oauth.id_token,
-      account_id: bootstrap.oauth.account_id
-    }
-  };
-  fs31.writeFileSync(authPath, JSON.stringify(authPayload, null, 2), { mode: 384 });
+  const configFiles = generateCodexConfig({
+    accessToken: bootstrap.oauth.access_token,
+    idToken: bootstrap.oauth.id_token,
+    accountId: bootstrap.oauth.account_id
+  }, payload.cwd);
+  fs31.writeFileSync(path31.join(codexHome, "auth.json"), configFiles["auth.json"], { mode: 384 });
+  if (configFiles["config.toml"]) {
+    fs31.writeFileSync(path31.join(codexHome, "config.toml"), configFiles["config.toml"], { mode: 384 });
+  }
   return {
     env: { CODEX_HOME: codexHome },
-    cleanupDirs,
-    authPath
+    cleanupDirs
   };
 }
 function createStartupState(payload) {
@@ -13309,61 +13293,6 @@ function getCodexStartupReadyTimeoutMs() {
   const parsed = Number(process.env.EPISODA_CODEX_READY_TIMEOUT_MS || "8000");
   return Number.isFinite(parsed) && parsed > 0 ? parsed : 8e3;
 }
-function syncCredentialUpdateAfterExit(session, agent_run_id, client) {
-  const authPath = session.credentialAuthPath;
-  if (!authPath) {
-    cleanupCredentialDirs(session.credentialDirs);
-    return;
-  }
-  void fs31.promises.readFile(authPath, "utf8").then((raw) => {
-    const tokens = extractCredentialTokens(raw);
-    if (!tokens.access_token) {
-      console.warn(`[PTY] EP1472: No access_token in auth.json for ${agent_run_id}, skipping credential update`);
-      return;
-    }
-    return client.send({
-      type: "pty_credential_update",
-      agent_run_id,
-      provider: "codex",
-      access_token: tokens.access_token,
-      refresh_token: tokens.refresh_token,
-      id_token: tokens.id_token,
-      account_id: tokens.account_id
-    }).then(() => {
-      console.log(`[PTY] EP1472: pty_credential_update sent for ${agent_run_id}`);
-    }).catch((err) => {
-      console.warn(`[PTY] Failed to send pty_credential_update for ${agent_run_id}:`, err.message);
-    });
-  }).catch((err) => {
-    console.warn(`[PTY] EP1472: Failed to read auth.json for ${agent_run_id}:`, getErrorMessage(err));
-  }).finally(() => {
-    cleanupCredentialDirs(session.credentialDirs);
-  });
-}
-function extractCredentialTokens(raw) {
-  const parsed = JSON.parse(raw);
-  const authRecord = asRecord(parsed);
-  if (!authRecord) return {};
-  const nestedTokens = asRecord(authRecord.tokens);
-  const source = nestedTokens ?? authRecord;
-  return {
-    access_token: pickString(source, "access_token"),
-    refresh_token: pickString(source, "refresh_token"),
-    id_token: pickString(source, "id_token"),
-    account_id: pickString(source, "account_id")
-  };
-}
-function asRecord(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return null;
-  return value;
-}
-function pickString(record, key) {
-  const value = record[key];
-  return typeof value === "string" ? value : void 0;
-}
-function getErrorMessage(error) {
-  return error instanceof Error ? error.message : String(error);
-}
 function cleanupCredentialDirs(dirs) {
   for (const dirPath of dirs) {
     try {