@giovannijecha/jecode 0.1.9 → 0.2.0

package/dist/provider-commands.js

@@ -2,8 +2,9 @@
 import { heading } from "./tui/picker.js";
 import { PROVIDERS } from "./providers/index.js";
 import { readSettings } from "./settings.js";
-import { askForKey } from "./credential-commands.js";
+import { authenticationNeed, ensureProviderAuthentication, } from "./credential-commands.js";
 import { providerFailure } from "./provider-errors.js";
+import { providerLabel } from "./provider-label.js";
 /**
  * The provider menu.
  *
@@ -34,32 +35,22 @@ export async function providersCommand(session, host, behavior = {}) {
     // Picking the provider already in use is not a no-op when it cannot run:
     // it is how the user asks to fix the reason it cannot.
     if (chosen.id === session.provider.id) {
-        const blocked = chosen.blocked();
-        if (blocked !== undefined) {
-            if (!isCredentialBlocker(chosen, blocked)) {
-                host.emit({ kind: "notice", text: blocked, tone: "error" });
-                return false;
-            }
-            await askForKey(chosen.keyVar, host, session.palette);
-            if (chosen.blocked() !== undefined)
-                return false;
-        }
-        return true;
+        if (!(await ensureProviderAuthentication(chosen, session, host)))
+            return false;
+        return session.model === ""
+            ? modelsCommand(session, host, { announce: false, save: behavior.save })
+            : true;
     }
     // A provider that cannot run is worth one offer to fix it, here, rather
     // than a note telling the user to leave and export something.
     const blocked = chosen.blocked();
     if (blocked !== undefined) {
-        if (!isCredentialBlocker(chosen, blocked)) {
-            host.emit({ kind: "notice", text: blocked, tone: "error" });
-            return false;
-        }
-        await askForKey(chosen.keyVar, host, session.palette);
+        await ensureProviderAuthentication(chosen, session, host);
         const still = chosen.blocked();
         if (still !== undefined) {
             host.emit({
                 kind: "notice",
-                text: `${providerName(chosen.id)} still needs an API key · provider unchanged`,
+                text: `${providerLabel(chosen.id)} still needs ${authenticationNeed(chosen)} · provider unchanged`,
                 tone: "warn",
             });
             return false;
@@ -77,6 +68,13 @@ export async function providersCommand(session, host, behavior = {}) {
     session.model = readSettings().models?.[chosen.id] ?? chosen.defaultModel;
     session.config.providerId = chosen.id;
     session.config.model = session.model;
+    if (session.model === "" && !(await modelsCommand(session, host, { announce: false, save: false }))) {
+        session.provider = before.provider;
+        session.model = before.model;
+        session.config.providerId = before.providerId;
+        session.config.model = before.configModel;
+        return false;
+    }
     if (behavior.save !== false) {
         const saved = readSettings();
         const models = { ...saved.models };
@@ -111,16 +109,12 @@ export async function modelsCommand(session, host, behavior = {}) {
     // to pick a model, and "go and export a variable" is not an answer.
     const blocked = provider.blocked();
     if (blocked !== undefined) {
-        if (!isCredentialBlocker(provider, blocked)) {
-            host.emit({ kind: "notice", text: blocked, tone: "error" });
-            return false;
-        }
-        await askForKey(provider.keyVar, host, session.palette);
+        await ensureProviderAuthentication(provider, session, host);
         const still = provider.blocked();
         if (still !== undefined) {
             host.emit({
                 kind: "notice",
-                text: `${providerName(provider.id)} still needs an API key`,
+                text: `${providerLabel(provider.id)} still needs ${authenticationNeed(provider)}`,
                 tone: "warn",
             });
             return false;
@@ -182,12 +176,6 @@ function chooser(host) {
     }
     return host.choose;
 }
-function providerName(id) {
-    return id === "" ? "Provider" : `${id[0]?.toUpperCase() ?? ""}${id.slice(1)}`;
-}
-function isCredentialBlocker(provider, blocked) {
-    return blocked.startsWith(`${provider.keyVar} `);
-}
 async function saveDefaults(host, patch) {
     if (host.saveSettings === undefined)
         return true;

package/dist/provider-label.js

@@ -0,0 +1,10 @@
+// Stable human-facing names for provider identifiers.
+export function providerLabel(id) {
+    switch (id) {
+        case "anthropic": return "Anthropic";
+        case "openai": return "OpenAI";
+        case "openai-codex": return "OpenAI Codex";
+        case "ollama": return "Ollama";
+        default: return id === "" ? "Provider" : `${id[0]?.toUpperCase() ?? ""}${id.slice(1)}`;
+    }
+}

package/dist/providers/anthropic.js

@@ -27,7 +27,7 @@ export const anthropic = {
     // Sonnet is the default because it is the one that can be left running.
     // Opus via `--model claude-opus-5`, Haiku via `--model claude-haiku-4-5`.
     defaultModel: "claude-sonnet-5",
-    keyVar: KEY,
+    auth: { kind: "api-key", keyVar: KEY },
     blocked() {
         return apiKey() === undefined ? `${KEY} is not set` : undefined;
     },

package/dist/providers/index.js

@@ -1,7 +1,8 @@
 import { anthropic } from "./anthropic.js";
 import { openai } from "./openai.js";
+import { openaiCodex } from "./openai-codex.js";
 import { configureOllama, ollama } from "./ollama.js";
-export const PROVIDERS = [anthropic, openai, ollama];
+export const PROVIDERS = [anthropic, openai, openaiCodex, ollama];
 export function providerNames() {
     return PROVIDERS.map((provider) => provider.id);
 }

package/dist/providers/ollama.js

@@ -25,7 +25,7 @@ export function ollamaConnection() {
 export const ollama = {
     id: "ollama",
     defaultModel: "",
-    keyVar: KEY,
+    auth: { kind: "api-key", keyVar: KEY },
     // The only provider whose key is conditional: a daemon on this machine is
     // reached over loopback and asks for nothing, so demanding a key there
     // would be an invented requirement.

package/dist/providers/openai-codex.js

@@ -0,0 +1,114 @@
+// ChatGPT-backed Codex Responses, kept separate from the OpenAI API provider.
+import { randomUUID } from "node:crypto";
+import { openAICodexAccount } from "../accounts.js";
+import { openAIAuthorization } from "../openai-account.js";
+import { applicationVersion } from "../version.js";
+import { getJson, postSse } from "./http.js";
+import { assembleOpenAI } from "./openai-stream.js";
+import { fromWireResponse, stopNotice, toWireItems, toWireTool, } from "./openai-wire.js";
+const ID = "openai-codex";
+const BASE = "https://chatgpt.com/backend-api/codex";
+// Jecode's product version is unrelated to the Codex protocol gate. OpenAI's
+// own catalogue updater uses this sentinel to request the complete current
+// manifest; Jecode then keeps only entries explicitly visible in that manifest.
+const CATALOG_COMPATIBILITY_VERSION = "99.99.99";
+const SESSION_ID = randomUUID();
+const MAX_CATALOG_ITEMS = 4_000;
+const MAX_MODELS = 1_000;
+const MAX_MODEL_CHARS = 256;
+export const openaiCodex = {
+    id: ID,
+    defaultModel: "",
+    auth: { kind: "oauth", account: ID, label: "ChatGPT" },
+    blocked() {
+        return openAICodexAccount() === undefined ? "ChatGPT account is not connected" : undefined;
+    },
+    location: () => "cloud",
+    async models(signal, onStatus) {
+        return withAuthorization(async (authorization) => {
+            const body = await getJson(`${BASE}/models?client_version=${CATALOG_COMPATIBILITY_VERSION}`, headers(authorization, randomUUID()), signal, onStatus);
+            return modelIds(body);
+        }, signal, onStatus);
+    },
+    async send(req) {
+        return withAuthorization(async (authorization) => {
+            const events = await postSse(`${BASE}/responses`, {
+                ...headers(authorization, randomUUID()),
+                "openai-beta": "responses=experimental",
+            }, {
+                model: req.model,
+                store: false,
+                stream: true,
+                instructions: req.system,
+                input: req.messages.flatMap((message) => toWireItems(message, ID)),
+                tools: req.tools.map(toWireTool),
+                tool_choice: "auto",
+                parallel_tool_calls: true,
+                reasoning: { effort: req.effort, summary: "auto" },
+                text: { verbosity: "low" },
+                include: ["reasoning.encrypted_content"],
+                prompt_cache_key: SESSION_ID,
+            }, req.signal, req.onStatus);
+            const data = await assembleOpenAI(events, req.onStream);
+            const notice = stopNotice(data);
+            if (notice !== undefined)
+                req.onStream?.({ kind: "text", text: `\n${notice}` });
+            return fromWireResponse(data, ID);
+        }, req.signal, req.onStatus);
+    },
+};
+async function withAuthorization(operation, signal, onStatus) {
+    let authorization = await openAIAuthorization(undefined, signal, onStatus);
+    try {
+        return await operation(authorization);
+    }
+    catch (error) {
+        if (statusOf(error) !== 401)
+            throw error;
+        authorization = await openAIAuthorization(authorization.accessToken, signal, onStatus);
+        return operation(authorization);
+    }
+}
+function headers(authorization, requestId) {
+    const version = applicationVersion();
+    return {
+        authorization: `Bearer ${authorization.accessToken}`,
+        "chatgpt-account-id": authorization.accountId,
+        originator: "jecode",
+        "user-agent": `jecode/${version} (${process.platform}; ${process.arch})`,
+        "session-id": SESSION_ID,
+        "x-client-request-id": requestId,
+    };
+}
+function modelIds(value) {
+    const source = record(value) && Array.isArray(value["models"]) ? value["models"] : undefined;
+    if (source === undefined)
+        throw new Error("OpenAI Codex did not return a model list");
+    const seen = new Set();
+    return source
+        .slice(0, MAX_CATALOG_ITEMS)
+        .flatMap((entry) => {
+        if (!record(entry))
+            return [];
+        const id = entry["slug"];
+        if (typeof id !== "string" ||
+            id === "" ||
+            id.length > MAX_MODEL_CHARS ||
+            entry["visibility"] !== "list" ||
+            seen.has(id))
+            return [];
+        seen.add(id);
+        return [{ id, priority: typeof entry["priority"] === "number" ? entry["priority"] : 0 }];
+    })
+        .sort((left, right) => left.priority - right.priority)
+        .slice(0, MAX_MODELS)
+        .map((entry) => entry.id);
+}
+function statusOf(error) {
+    return typeof error === "object" && error !== null && "status" in error
+        ? error.status
+        : undefined;
+}
+function record(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}

package/dist/providers/openai-stream.js

@@ -1,12 +1,11 @@
 // Reassembling an OpenAI Responses reply from its event stream.
 //
-// Unlike Anthropic, this stream ends with the whole finished response in
-// `response.completed`, so there is nothing to rebuild: the deltas drive the
-// display, and the final event is taken as authoritative. Items collected
-// along the way are only a fallback for a stream that ends without it.
+// Unlike Anthropic, a standard Responses stream ends with the whole finished
+// response in `response.completed`. The ChatGPT Codex backend can instead send
+// an empty final `output` after complete `response.output_item.done` events, so
+// those streamed items remain the fallback when the final envelope is empty.
 export async function assembleOpenAI(events, onStream) {
     const items = [];
-    let completed;
     let refusal = false;
     for await (const raw of events) {
         const event = raw;
@@ -29,11 +28,10 @@ export async function assembleOpenAI(events, onStream) {
                 if (event.item !== undefined)
                     items.push(event.item);
                 break;
+            case "response.done":
             case "response.completed":
             case "response.incomplete":
-                if (event.response !== undefined)
-                    completed = event.response;
-                break;
+                return reconcileOutput(event.response, items);
             case "response.failed": {
                 const response = event.response;
                 throw new Error(`openai stream error: ${response?.error?.message ?? "unspecified"}`);
@@ -44,5 +42,11 @@ export async function assembleOpenAI(events, onStream) {
                 break;
         }
     }
-    return completed ?? { output: items };
+    return { output: items };
+}
+function reconcileOutput(completed, items) {
+    if (completed === undefined)
+        return { output: items };
+    const finalCount = Array.isArray(completed.output) ? completed.output.length : 0;
+    return items.length > finalCount ? { ...completed, output: items } : completed;
 }

package/dist/providers/openai-wire.js

@@ -14,8 +14,8 @@ export function toWireTool(tool) {
         parameters: tool.input,
     };
 }
-export function toWireItems(message) {
-    if (message.rawFrom === "openai" && Array.isArray(message.raw)) {
+export function toWireItems(message, providerId = "openai") {
+    if (message.rawFrom === providerId && Array.isArray(message.raw)) {
         return message.raw;
     }
     const items = [];
@@ -50,7 +50,7 @@ export function stopNotice(data) {
         ? "[truncated: hit max_output_tokens — raise --max-tokens]"
         : `[incomplete: ${reason}]`;
 }
-export function fromWireResponse(data) {
+export function fromWireResponse(data, providerId = "openai") {
     const raw = Array.isArray(data.output) ? data.output : [];
     const content = [];
     for (const entry of raw) {
@@ -81,7 +81,7 @@ export function fromWireResponse(data) {
     const notice = stopNotice(data);
     if (notice !== undefined)
         content.push({ kind: "text", text: notice });
-    return { role: "assistant", content, raw, rawFrom: "openai", usage: normalizeUsage(data) };
+    return { role: "assistant", content, raw, rawFrom: providerId, usage: normalizeUsage(data) };
 }
 function normalizeUsage(data) {
     const usage = data.usage;

package/dist/providers/openai.js

@@ -23,7 +23,7 @@ const NON_TEXT_MODE = /(?:^|[-_])(audio|realtime|transcribe|tts)(?:[-_]|$)/;
 export const openai = {
     id: "openai",
     defaultModel: "gpt-5",
-    keyVar: KEY,
+    auth: { kind: "api-key", keyVar: KEY },
     blocked() {
         return apiKey() === undefined ? `${KEY} is not set` : undefined;
     },
@@ -41,7 +41,7 @@ export const openai = {
         const events = await postSse(ENDPOINT, headers(key), {
             model: req.model,
             instructions: req.system,
-            input: req.messages.flatMap(toWireItems),
+            input: req.messages.flatMap((message) => toWireItems(message)),
             tools: req.tools.map(toWireTool),
             max_output_tokens: req.maxTokens,
             reasoning: { effort: normalizeEffort(req.effort), summary: "auto" },

package/dist/providers/sse.js

@@ -76,6 +76,6 @@ function parseData(chunk) {
         return JSON.parse(data);
     }
     catch {
-        return undefined;
+        throw new Error("SSE event contained invalid JSON");
     }
 }

package/dist/settings-command.js

@@ -75,13 +75,21 @@ function settingsItems(values) {
                 }]),
         { action: "model", option: { label: "model", hint: values.model || "choose a model" } },
         { action: "effort", option: { label: "effort", hint: values.effort } },
-        { action: "maxTokens", option: { label: "max output tokens", hint: String(values.maxTokens) } },
+        ...(values.maxTokens === undefined
+            ? []
+            : [{
+                    action: "maxTokens",
+                    option: { label: "max output tokens", hint: String(values.maxTokens) },
+                }]),
         { action: "maxSteps", option: { label: "max tool steps", hint: String(values.maxSteps) } },
         {
             action: "reducedMotion",
             option: { label: "reduced motion", hint: values.reducedMotion ? "on" : "off" },
         },
-        { action: "credentials", option: { label: "credentials", hint: "manage API keys" } },
+        {
+            action: "credentials",
+            option: { label: "authentication", hint: "manage API keys and accounts" },
+        },
     ];
 }
 function settingsValues(session) {
@@ -90,7 +98,7 @@ function settingsValues(session) {
         model: session.model,
         ...(session.provider.id === "ollama" ? { ollamaConnection: ollamaConnectionHint() } : {}),
         effort: session.config.effort,
-        maxTokens: session.config.maxTokens,
+        ...(session.provider.id === "openai-codex" ? {} : { maxTokens: session.config.maxTokens }),
         maxSteps: session.config.maxSteps,
         reducedMotion: session.config.reducedMotion,
     };

package/dist/tui/app-workflows.js

@@ -5,6 +5,7 @@ import { updateSettings } from "../settings.js";
 import { saveTranscript } from "../transcript-export.js";
 import { recordUsage } from "../usage.js";
 import { answerAt } from "./approve.js";
+import { cancel as cancelOpen } from "./overlay.js";
 import { controllerOptions, turnFailure } from "./session-view.js";
 import { transcribe } from "./turn.js";
 const WAITING = "Waiting";
@@ -26,6 +27,10 @@ export function appWorkflows(options) {
                     state.open = { picker, settle: resolve };
                     options.render();
                 }),
+                dismiss: () => {
+                    state.open = state.open === undefined ? undefined : cancelOpen(state.open);
+                    options.render();
+                },
                 type: (field) => new Promise((resolve) => {
                     state.open = { field, settle: resolve };
                     options.render();

package/dist/tui/feedback.js

@@ -1,4 +1,5 @@
 // Operational feedback belongs in the footer, not in the conversation.
+import { providerLabel } from "../provider-label.js";
 const INFO_MS = 2_200;
 const WARN_MS = 4_200;
 const ERROR_MS = 6_000;
@@ -50,23 +51,26 @@ export function commandFeedback(block) {
 /** Explain why a model turn cannot start, without exposing configuration internals. */
 export function turnBlocker(session) {
     const blocked = session.provider.blocked();
-    if (blocked !== undefined && !blocked.startsWith(`${session.provider.keyVar} `)) {
+    const auth = session.provider.auth;
+    const expected = auth.kind === "api-key"
+        ? blocked?.startsWith(`${auth.keyVar} `) === true
+        : blocked !== undefined;
+    if (blocked !== undefined && !expected) {
         return { text: blocked, tone: "error" };
     }
     if (blocked !== undefined) {
         return {
-            text: `${providerName(session.provider.id)} needs an API key · /settings`,
+            text: auth.kind === "oauth"
+                ? `${providerLabel(session.provider.id)} needs ${auth.label} sign-in · /settings`
+                : `${providerLabel(session.provider.id)} needs an API key · /settings`,
             tone: "warn",
         };
     }
     if (session.model === "") {
         return {
-            text: `${providerName(session.provider.id)} needs a model · /models`,
+            text: `${providerLabel(session.provider.id)} needs a model · /models`,
             tone: "warn",
         };
     }
     return undefined;
 }
-function providerName(id) {
-    return id === "" ? "Provider" : `${id[0]?.toUpperCase() ?? ""}${id.slice(1)}`;
-}

package/dist/tui/session-view.js

@@ -26,10 +26,16 @@ export function turnFailure(session, error, aborted) {
         return { kind: "notice", text: "[interrupted]", tone: "warn" };
     let text = providerFailure(session.provider, error);
     if (/\b401\b/.test(text)) {
-        const source = credentialSource(session.provider.keyVar);
-        text += source === "environment"
-            ? ` · update ${session.provider.keyVar} in the environment and restart`
-            : " · check credentials with /settings";
+        const auth = session.provider.auth;
+        if (auth.kind === "oauth") {
+            text += ` · reconnect ${auth.label} in /settings`;
+        }
+        else {
+            const source = credentialSource(auth.keyVar);
+            text += source === "environment"
+                ? ` · update ${auth.keyVar} in the environment and restart`
+                : " · check credentials with /settings";
+        }
     }
     return { kind: "notice", text, tone: "error" };
 }

package/dist/version.js

@@ -0,0 +1,14 @@
+// The package version is runtime identity, not configuration.
+import { readFileSync } from "node:fs";
+import * as path from "node:path";
+let cached;
+export function applicationVersion() {
+    if (cached !== undefined)
+        return cached;
+    const manifest = JSON.parse(readFileSync(path.resolve(import.meta.dirname, "..", "package.json"), "utf8"));
+    if (typeof manifest.version !== "string" || manifest.version === "") {
+        throw new Error("package version is missing");
+    }
+    cached = manifest.version;
+    return cached;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@giovannijecha/jecode",
-  "version": "0.1.9",
+  "version": "0.2.0",
   "description": "An owned coding agent with zero external runtime dependencies.",
   "license": "MIT",
   "repository": {
@@ -16,12 +16,16 @@
     "terminal",
     "tui",
     "ollama",
+    "openai",
+    "chatgpt",
+    "oauth",
     "typescript"
   ],
   "type": "module",
   "files": [
     "bin/",
     "dist/",
+    "docs/assets/brand/jeco-256.png",
     "LICENSE",
     "README.md"
   ],