@f5-sales-demo/xcsh 21.46.11 → 21.47.0

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@f5-sales-demo/xcsh",
-	"version": "21.46.11",
+	"version": "21.47.0",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"homepage": "https://github.com/f5-sales-demo/xcsh",
 	"author": "Can Boluk",
@@ -66,13 +66,13 @@
 	},
 	"dependencies": {
 		"@agentclientprotocol/sdk": "1.4.0",
-		"@f5-sales-demo/pi-agent-core": "21.46.11",
-		"@f5-sales-demo/pi-ai": "21.46.11",
-		"@f5-sales-demo/pi-natives": "21.46.11",
-		"@f5-sales-demo/pi-resource-management": "21.46.11",
-		"@f5-sales-demo/pi-tui": "21.46.11",
-		"@f5-sales-demo/pi-utils": "21.46.11",
-		"@f5-sales-demo/xcsh-stats": "21.46.11",
+		"@f5-sales-demo/pi-agent-core": "21.47.0",
+		"@f5-sales-demo/pi-ai": "21.47.0",
+		"@f5-sales-demo/pi-natives": "21.47.0",
+		"@f5-sales-demo/pi-resource-management": "21.47.0",
+		"@f5-sales-demo/pi-tui": "21.47.0",
+		"@f5-sales-demo/pi-utils": "21.47.0",
+		"@f5-sales-demo/xcsh-stats": "21.47.0",
 		"@mozilla/readability": "^0.6",
 		"@sinclair/typebox": "0.34.52",
 		"@tobilu/qmd": "2.8.3",

package/src/cli/openai-device-auth.ts

@@ -0,0 +1,38 @@
+import { AuthCredentialStore } from "@f5-sales-demo/pi-ai/auth-storage";
+import { loginOpenAICodex, type OpenAICodexLoginOptions } from "@f5-sales-demo/pi-ai/utils/oauth/openai-codex";
+import type { OAuthAuthInfo, OAuthCredentials, OAuthPrompt } from "@f5-sales-demo/pi-ai/utils/oauth/types";
+
+type CredentialStore = Pick<AuthCredentialStore, "close" | "saveOAuth">;
+
+export type OpenAIDeviceAuthDependencies = {
+	openStore?: () => Promise<CredentialStore>;
+	login?: (options: OpenAICodexLoginOptions) => Promise<OAuthCredentials>;
+	onAuth?: (info: OAuthAuthInfo) => void;
+	onProgress?: (message: string) => void;
+	onPrompt?: (prompt: OAuthPrompt) => Promise<string>;
+};
+
+function reportAuth(info: OAuthAuthInfo): void {
+	if (info.kind === "device" && info.userCode) {
+		process.stdout.write(`Open ${info.url} and enter the one-time code: ${info.userCode}\n`);
+		return;
+	}
+	process.stdout.write(`Open this URL in your browser:\n${info.url}\n`);
+}
+
+/** Run the ChatGPT device-code flow without starting a local callback listener. */
+export async function runOpenAIDeviceAuthLogin(dependencies: OpenAIDeviceAuthDependencies = {}): Promise<void> {
+	const store = await (dependencies.openStore ?? (() => AuthCredentialStore.open()))();
+	try {
+		const credentials = await (dependencies.login ?? loginOpenAICodex)({
+			method: "device",
+			onAuth: dependencies.onAuth ?? reportAuth,
+			onProgress: dependencies.onProgress ?? (message => process.stdout.write(`${message}\n`)),
+			onPrompt: dependencies.onPrompt,
+		});
+		store.saveOAuth("openai-codex", credentials);
+		process.stdout.write("ChatGPT credentials saved.\n");
+	} finally {
+		store.close();
+	}
+}

package/src/cli.ts

@@ -75,6 +75,7 @@ const commands: CommandEntry[] = [
 	},
 	{ name: "jupyter", load: () => import("./commands/jupyter").then(m => m.default) },
 	{ name: "lifecycle", load: () => import("./commands/lifecycle").then(m => m.default) },
+	{ name: "login", load: () => import("./commands/login").then(m => m.default) },
 	{ name: "manager", load: () => import("./commands/manager").then(m => m.default) },
 	{ name: "office", load: () => import("./commands/office").then(m => m.default) },
 	{ name: "plugin", load: () => import("./commands/plugin").then(m => m.default) },

package/src/commands/login.ts

@@ -0,0 +1,18 @@
+import { Command, Flags } from "@f5-sales-demo/pi-utils/cli";
+import { runOpenAIDeviceAuthLogin } from "../cli/openai-device-auth";
+
+/** Authenticate ChatGPT through a device-code flow suitable for SSH and headless terminals. */
+export default class Login extends Command {
+	static description = "Authenticate ChatGPT using a device code";
+	static flags = {
+		"device-auth": Flags.boolean({ description: "Use ChatGPT device-code authentication", default: false }),
+	};
+
+	async run(): Promise<void> {
+		const { flags } = await this.parse(Login);
+		if (!flags["device-auth"]) {
+			throw new Error("Use xcsh login --device-auth to authenticate ChatGPT with a device code.");
+		}
+		await runOpenAIDeviceAuthLogin();
+	}
+}