@iam-brain/opencode-codex-auth 0.1.16 → 0.2.0

package/dist/lib/codex-native/collaboration.js

@@ -0,0 +1,126 @@
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function asString(value) {
+    if (typeof value !== "string")
+        return undefined;
+    const trimmed = value.trim();
+    return trimmed ? trimmed : undefined;
+}
+export function resolveHookAgentName(agent) {
+    const direct = asString(agent);
+    if (direct)
+        return direct;
+    if (!isRecord(agent))
+        return undefined;
+    return asString(agent.name) ?? asString(agent.agent);
+}
+function normalizeAgentNameForCollaboration(agentName) {
+    return agentName.trim().toLowerCase().replace(/\s+/g, "-");
+}
+function tokenizeAgentName(normalizedAgentName) {
+    return normalizedAgentName
+        .split(/[-./:_]+/)
+        .map((token) => token.trim())
+        .filter((token) => token.length > 0);
+}
+function isPluginCollaborationAgent(normalizedAgentName) {
+    const tokens = tokenizeAgentName(normalizedAgentName);
+    if (tokens.length === 0)
+        return false;
+    if (tokens[0] !== "codex")
+        return false;
+    return tokens.some((token) => [
+        "orchestrator",
+        "default",
+        "code",
+        "plan",
+        "planner",
+        "execute",
+        "pair",
+        "pairprogramming",
+        "review",
+        "compact",
+        "compaction"
+    ].includes(token));
+}
+function resolveCollaborationModeKindFromName(normalizedAgentName) {
+    const tokens = tokenizeAgentName(normalizedAgentName);
+    if (tokens.includes("plan") || tokens.includes("planner"))
+        return "plan";
+    if (tokens.includes("execute"))
+        return "execute";
+    if (tokens.includes("pair") || tokens.includes("pairprogramming"))
+        return "pair_programming";
+    return "code";
+}
+export function resolveCollaborationProfile(agent) {
+    const name = resolveHookAgentName(agent);
+    if (!name)
+        return { enabled: false };
+    const normalizedAgentName = normalizeAgentNameForCollaboration(name);
+    if (!isPluginCollaborationAgent(normalizedAgentName)) {
+        return { enabled: false, normalizedAgentName };
+    }
+    return {
+        enabled: true,
+        normalizedAgentName,
+        kind: resolveCollaborationModeKindFromName(normalizedAgentName)
+    };
+}
+export function resolveCollaborationModeKind(agent) {
+    const profile = resolveCollaborationProfile(agent);
+    return profile.kind ?? "code";
+}
+export function resolveCollaborationInstructions(kind, instructions) {
+    if (kind === "plan")
+        return instructions.plan;
+    if (kind === "execute")
+        return instructions.execute;
+    if (kind === "pair_programming")
+        return instructions.pairProgramming;
+    return instructions.code;
+}
+export function mergeInstructions(base, extra) {
+    const normalizedExtra = extra.trim();
+    if (!normalizedExtra)
+        return base?.trim() ?? "";
+    const normalizedBase = base?.trim();
+    if (!normalizedBase)
+        return normalizedExtra;
+    if (normalizedBase.includes(normalizedExtra))
+        return normalizedBase;
+    return `${normalizedBase}\n\n${normalizedExtra}`;
+}
+export function resolveSubagentHeaderValue(agent) {
+    const profile = resolveCollaborationProfile(agent);
+    const normalized = profile.normalizedAgentName;
+    if (!profile.enabled || !normalized) {
+        return undefined;
+    }
+    const tokens = tokenizeAgentName(normalized);
+    const isCodexPrimary = tokens[0] === "codex" &&
+        (tokens.includes("orchestrator") ||
+            tokens.includes("default") ||
+            tokens.includes("code") ||
+            tokens.includes("plan") ||
+            tokens.includes("planner") ||
+            tokens.includes("execute") ||
+            tokens.includes("pair") ||
+            tokens.includes("pairprogramming"));
+    if (isCodexPrimary) {
+        return undefined;
+    }
+    if (tokens.includes("plan") || tokens.includes("planner")) {
+        return undefined;
+    }
+    if (normalized === "compaction") {
+        return "compact";
+    }
+    if (normalized.includes("review"))
+        return "review";
+    if (normalized.includes("compact") || normalized.includes("compaction"))
+        return "compact";
+    return "collab_spawn";
+}
+//# sourceMappingURL=collaboration.js.map

package/dist/lib/codex-native/collaboration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collaboration.js","sourceRoot":"","sources":["../../../lib/codex-native/collaboration.ts"],"names":[],"mappings":"AAeA,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC5B,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;AACtC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC9B,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IACzB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACtC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;AACtD,CAAC;AAED,SAAS,kCAAkC,CAAC,SAAiB;IAC3D,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AAC5D,CAAC;AAED,SAAS,iBAAiB,CAAC,mBAA2B;IACpD,OAAO,mBAAmB;SACvB,KAAK,CAAC,UAAU,CAAC;SACjB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AACxC,CAAC;AAED,SAAS,0BAA0B,CAAC,mBAA2B;IAC7D,MAAM,MAAM,GAAG,iBAAiB,CAAC,mBAAmB,CAAC,CAAA;IACrD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO;QAAE,OAAO,KAAK,CAAA;IACvC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC3B;QACE,cAAc;QACd,SAAS;QACT,MAAM;QACN,MAAM;QACN,SAAS;QACT,SAAS;QACT,MAAM;QACN,iBAAiB;QACjB,QAAQ;QACR,SAAS;QACT,YAAY;KACb,CAAC,QAAQ,CAAC,KAAK,CAAC,CAClB,CAAA;AACH,CAAC;AAED,SAAS,oCAAoC,CAAC,mBAA2B;IACvE,MAAM,MAAM,GAAG,iBAAiB,CAAC,mBAAmB,CAAC,CAAA;IACrD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,MAAM,CAAA;IACxE,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAA;IAChD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAAE,OAAO,kBAAkB,CAAA;IAC5F,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACxD,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAA;IACxC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IACpC,MAAM,mBAAmB,GAAG,kCAAkC,CAAC,IAAI,CAAC,CAAA;IACpE,IAAI,CAAC,0BAA0B,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAA;IAChD,CAAC;IACD,OAAO;QACL,OAAO,EAAE,IAAI;QACb,mBAAmB;QACnB,IAAI,EAAE,oCAAoC,CAAC,mBAAmB,CAAC;KAChE,CAAA;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACzD,MAAM,OAAO,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAA;IAClD,OAAO,OAAO,CAAC,IAAI,IAAI,MAAM,CAAA;AAC/B,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,IAAgC,EAChC,YAA6C;IAE7C,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,YAAY,CAAC,IAAI,CAAA;IAC7C,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC,OAAO,CAAA;IACnD,IAAI,IAAI,KAAK,kBAAkB;QAAE,OAAO,YAAY,CAAC,eAAe,CAAA;IACpE,OAAO,YAAY,CAAC,IAAI,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAwB,EAAE,KAAa;IACvE,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IACpC,IAAI,CAAC,eAAe;QAAE,OAAO,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IAC/C,MAAM,cAAc,GAAG,IAAI,EAAE,IAAI,EAAE,CAAA;IACnC,IAAI,CAAC,cAAc;QAAE,OAAO,eAAe,CAAA;IAC3C,IAAI,cAAc,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO,cAAc,CAAA;IACnE,OAAO,GAAG,cAAc,OAAO,eAAe,EAAE,CAAA;AAClD,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,MAAM,OAAO,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAA;IAClD,MAAM,UAAU,GAAG,OAAO,CAAC,mBAAmB,CAAA;IAC9C,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;QACpC,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAA;IAC5C,MAAM,cAAc,GAClB,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO;QACrB,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC;YAC9B,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC1B,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YACvB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YACvB,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC1B,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC1B,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YACvB,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAA;IACvC,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1D,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;QAChC,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAA;IAClD,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,SAAS,CAAA;IACzF,OAAO,cAAc,CAAA;AACvB,CAAC"}

package/dist/lib/codex-native/oauth-server.d.ts

@@ -0,0 +1,28 @@
+import type { OpenAIAuthMode } from "../types";
+type OAuthServerStopReason = "success" | "error" | "other";
+type OAuthServerControllerInput<TPkce, TTokens> = {
+    port: number;
+    loopbackHost: string;
+    callbackOrigin: string;
+    callbackUri: string;
+    callbackPath: string;
+    callbackTimeoutMs: number;
+    debugLogDir?: string;
+    debugLogFile?: string;
+    buildOAuthErrorHtml: (error: string) => string;
+    buildOAuthSuccessHtml: (mode: "native" | "codex") => string;
+    composeCodexSuccessRedirectUrl: (tokens: TTokens) => string;
+    exchangeCodeForTokens: (code: string, redirectUri: string, pkce: TPkce) => Promise<TTokens>;
+};
+export declare function createOAuthServerController<TPkce, TTokens>(input: OAuthServerControllerInput<TPkce, TTokens>): {
+    isDebugEnabled: () => boolean;
+    emitDebug: (event: string, meta?: Record<string, unknown>) => void;
+    start: () => Promise<{
+        redirectUri: string;
+    }>;
+    stop: () => void;
+    scheduleStop: (delayMs: number, reason: OAuthServerStopReason) => void;
+    waitForCallback: (pkce: TPkce, state: string, authMode: OpenAIAuthMode) => Promise<TTokens>;
+};
+export {};
+//# sourceMappingURL=oauth-server.d.ts.map

package/dist/lib/codex-native/oauth-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-server.d.ts","sourceRoot":"","sources":["../../../lib/codex-native/oauth-server.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AAE9C,KAAK,qBAAqB,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAA;AAE1D,KAAK,0BAA0B,CAAC,KAAK,EAAE,OAAO,IAAI;IAChD,IAAI,EAAE,MAAM,CAAA;IACZ,YAAY,EAAE,MAAM,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,iBAAiB,EAAE,MAAM,CAAA;IACzB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,mBAAmB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;IAC9C,qBAAqB,EAAE,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,KAAK,MAAM,CAAA;IAC3D,8BAA8B,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,MAAM,CAAA;IAC3D,qBAAqB,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CAC5F,CAAA;AAUD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,EACxD,KAAK,EAAE,0BAA0B,CAAC,KAAK,EAAE,OAAO,CAAC,GAChD;IACD,cAAc,EAAE,MAAM,OAAO,CAAA;IAC7B,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;IAClE,KAAK,EAAE,MAAM,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC7C,IAAI,EAAE,MAAM,IAAI,CAAA;IAChB,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,KAAK,IAAI,CAAA;IACtE,eAAe,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CAC5F,CAmRA"}

package/dist/lib/codex-native/oauth-server.js

@@ -0,0 +1,267 @@
+import http from "node:http";
+import os from "node:os";
+import path from "node:path";
+import { appendFileSync, chmodSync, mkdirSync } from "node:fs";
+export function createOAuthServerController(input) {
+    const debugLogDir = input.debugLogDir ?? path.join(os.homedir(), ".config", "opencode", "logs", "codex-plugin");
+    const debugLogFile = input.debugLogFile ?? path.join(debugLogDir, "oauth-lifecycle.log");
+    let oauthServer;
+    let pendingOAuth;
+    let oauthServerCloseTimer;
+    function isDebugEnabled() {
+        const raw = process.env.CODEX_AUTH_DEBUG?.trim().toLowerCase();
+        return raw === "1" || raw === "true" || raw === "yes" || raw === "on";
+    }
+    function emitDebug(event, meta = {}) {
+        if (!isDebugEnabled())
+            return;
+        const payload = {
+            ts: new Date().toISOString(),
+            pid: process.pid,
+            event,
+            ...meta
+        };
+        const line = JSON.stringify(payload);
+        try {
+            console.error(`[codex-auth-debug] ${line}`);
+        }
+        catch {
+            // best effort stderr logging
+        }
+        try {
+            mkdirSync(debugLogDir, { recursive: true, mode: 0o700 });
+            appendFileSync(debugLogFile, `${line}\n`, { encoding: "utf8", mode: 0o600 });
+            chmodSync(debugLogFile, 0o600);
+        }
+        catch {
+            // best effort file logging
+        }
+    }
+    function clearCloseTimer() {
+        if (!oauthServerCloseTimer)
+            return;
+        clearTimeout(oauthServerCloseTimer);
+        oauthServerCloseTimer = undefined;
+    }
+    function isLoopbackRemoteAddress(remoteAddress) {
+        if (!remoteAddress)
+            return false;
+        const normalized = remoteAddress.split("%")[0]?.toLowerCase();
+        return normalized === "127.0.0.1" || normalized === "::1" || normalized === "::ffff:127.0.0.1";
+    }
+    function setResponseHeaders(res, options) {
+        res.setHeader("Cache-Control", "no-store");
+        res.setHeader("Pragma", "no-cache");
+        res.setHeader("Referrer-Policy", "no-referrer");
+        res.setHeader("X-Content-Type-Options", "nosniff");
+        if (options?.contentType) {
+            res.setHeader("Content-Type", options.contentType);
+        }
+        if (options?.isHtml) {
+            res.setHeader("Content-Security-Policy", "default-src 'none'; style-src 'unsafe-inline'; script-src 'unsafe-inline'; img-src data:; base-uri 'none'; form-action 'none'; frame-ancestors 'none'");
+        }
+    }
+    async function start() {
+        clearCloseTimer();
+        if (oauthServer) {
+            emitDebug("server_reuse", { port: input.port });
+            return { redirectUri: input.callbackUri };
+        }
+        emitDebug("server_starting", { port: input.port });
+        oauthServer = http.createServer((req, res) => {
+            try {
+                if (!isLoopbackRemoteAddress(req.socket.remoteAddress)) {
+                    emitDebug("callback_rejected_non_loopback", {
+                        remoteAddress: req.socket.remoteAddress
+                    });
+                    res.statusCode = 403;
+                    setResponseHeaders(res, { contentType: "text/plain; charset=utf-8" });
+                    res.end("Forbidden");
+                    return;
+                }
+                const url = new URL(req.url ?? "/", input.callbackOrigin);
+                const sendHtml = (status, html) => {
+                    res.statusCode = status;
+                    setResponseHeaders(res, { contentType: "text/html; charset=utf-8", isHtml: true });
+                    res.end(html);
+                };
+                const redirect = (location) => {
+                    res.statusCode = 302;
+                    setResponseHeaders(res, { contentType: "text/plain; charset=utf-8" });
+                    res.setHeader("Location", location);
+                    res.end();
+                };
+                if (url.pathname === input.callbackPath) {
+                    const code = url.searchParams.get("code");
+                    const state = url.searchParams.get("state");
+                    const error = url.searchParams.get("error");
+                    const errorDescription = url.searchParams.get("error_description");
+                    emitDebug("callback_hit", {
+                        hasCode: Boolean(code),
+                        hasState: Boolean(state),
+                        hasError: Boolean(error)
+                    });
+                    if (error) {
+                        const errorMsg = errorDescription || error;
+                        emitDebug("callback_error", { reason: errorMsg });
+                        pendingOAuth?.reject(new Error(errorMsg));
+                        pendingOAuth = undefined;
+                        sendHtml(200, input.buildOAuthErrorHtml(errorMsg));
+                        return;
+                    }
+                    if (!code) {
+                        const errorMsg = "Missing authorization code";
+                        emitDebug("callback_error", { reason: errorMsg });
+                        pendingOAuth?.reject(new Error(errorMsg));
+                        pendingOAuth = undefined;
+                        sendHtml(400, input.buildOAuthErrorHtml(errorMsg));
+                        return;
+                    }
+                    if (!pendingOAuth || state !== pendingOAuth.state) {
+                        const errorMsg = "Invalid state - potential CSRF attack";
+                        emitDebug("callback_error", { reason: errorMsg });
+                        pendingOAuth?.reject(new Error(errorMsg));
+                        pendingOAuth = undefined;
+                        sendHtml(400, input.buildOAuthErrorHtml(errorMsg));
+                        return;
+                    }
+                    const current = pendingOAuth;
+                    pendingOAuth = undefined;
+                    emitDebug("token_exchange_start", { authMode: current.authMode });
+                    input
+                        .exchangeCodeForTokens(code, input.callbackUri, current.pkce)
+                        .then((tokens) => {
+                        current.resolve(tokens);
+                        emitDebug("token_exchange_success", { authMode: current.authMode });
+                        if (res.writableEnded)
+                            return;
+                        if (current.authMode === "codex") {
+                            redirect(input.composeCodexSuccessRedirectUrl(tokens));
+                            return;
+                        }
+                        sendHtml(200, input.buildOAuthSuccessHtml("native"));
+                    })
+                        .catch((err) => {
+                        const oauthError = err instanceof Error ? err : new Error(String(err));
+                        current.reject(oauthError);
+                        emitDebug("token_exchange_error", { error: oauthError.message });
+                        if (res.writableEnded)
+                            return;
+                        sendHtml(500, input.buildOAuthErrorHtml(oauthError.message));
+                    });
+                    return;
+                }
+                if (url.pathname === "/success") {
+                    emitDebug("callback_success_page");
+                    sendHtml(200, input.buildOAuthSuccessHtml("codex"));
+                    return;
+                }
+                if (url.pathname === "/cancel") {
+                    emitDebug("callback_cancel");
+                    pendingOAuth?.reject(new Error("Login cancelled"));
+                    pendingOAuth = undefined;
+                    res.statusCode = 200;
+                    setResponseHeaders(res, { contentType: "text/plain; charset=utf-8" });
+                    res.end("Login cancelled");
+                    return;
+                }
+                res.statusCode = 404;
+                setResponseHeaders(res, { contentType: "text/plain; charset=utf-8" });
+                res.end("Not found");
+            }
+            catch (error) {
+                res.statusCode = 500;
+                setResponseHeaders(res, { contentType: "text/plain; charset=utf-8" });
+                res.end(`Server error: ${error.message}`);
+            }
+        });
+        try {
+            await new Promise((resolve, reject) => {
+                oauthServer?.once("error", reject);
+                oauthServer?.listen(input.port, input.loopbackHost, () => resolve());
+            });
+            emitDebug("server_started", { port: input.port });
+        }
+        catch (error) {
+            emitDebug("server_start_error", {
+                error: error instanceof Error ? error.message : String(error)
+            });
+            const server = oauthServer;
+            oauthServer = undefined;
+            try {
+                server?.close();
+            }
+            catch {
+                // best-effort cleanup
+            }
+            throw error;
+        }
+        return { redirectUri: input.callbackUri };
+    }
+    function stop() {
+        clearCloseTimer();
+        emitDebug("server_stopping", { hadPendingOAuth: Boolean(pendingOAuth) });
+        oauthServer?.close();
+        oauthServer = undefined;
+        emitDebug("server_stopped");
+    }
+    function scheduleStop(delayMs, reason) {
+        if (!oauthServer)
+            return;
+        clearCloseTimer();
+        emitDebug("server_stop_scheduled", { delayMs, reason });
+        oauthServerCloseTimer = setTimeout(() => {
+            oauthServerCloseTimer = undefined;
+            if (pendingOAuth)
+                return;
+            emitDebug("server_stop_timer_fired", { reason });
+            stop();
+        }, delayMs);
+    }
+    function waitForCallback(pkce, state, authMode) {
+        emitDebug("callback_wait_start", {
+            authMode,
+            stateTail: state.slice(-6)
+        });
+        return new Promise((resolve, reject) => {
+            let settled = false;
+            const resolveOnce = (tokens) => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(timeout);
+                emitDebug("callback_wait_resolved", { authMode });
+                resolve(tokens);
+            };
+            const rejectOnce = (error) => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(timeout);
+                emitDebug("callback_wait_rejected", { authMode, error: error.message });
+                reject(error);
+            };
+            const timeout = setTimeout(() => {
+                pendingOAuth = undefined;
+                emitDebug("callback_wait_timeout", { authMode, timeoutMs: input.callbackTimeoutMs });
+                rejectOnce(new Error("OAuth callback timeout - authorization took too long"));
+            }, input.callbackTimeoutMs);
+            pendingOAuth = {
+                pkce,
+                state,
+                authMode,
+                resolve: resolveOnce,
+                reject: rejectOnce
+            };
+        });
+    }
+    return {
+        isDebugEnabled,
+        emitDebug,
+        start,
+        stop,
+        scheduleStop,
+        waitForCallback
+    };
+}
+//# sourceMappingURL=oauth-server.js.map

package/dist/lib/codex-native/oauth-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-server.js","sourceRoot":"","sources":["../../../lib/codex-native/oauth-server.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AA6B9D,MAAM,UAAU,2BAA2B,CACzC,KAAiD;IASjD,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,CAAC,CAAA;IAC/G,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAA;IAExF,IAAI,WAAoC,CAAA;IACxC,IAAI,YAAsD,CAAA;IAC1D,IAAI,qBAAgE,CAAA;IAEpE,SAAS,cAAc;QACrB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QAC9D,OAAO,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,IAAI,CAAA;IACvE,CAAC;IAED,SAAS,SAAS,CAAC,KAAa,EAAE,OAAgC,EAAE;QAClE,IAAI,CAAC,cAAc,EAAE;YAAE,OAAM;QAC7B,MAAM,OAAO,GAA4B;YACvC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK;YACL,GAAG,IAAI;SACR,CAAA;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QACpC,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAA;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,6BAA6B;QAC/B,CAAC;QACD,IAAI,CAAC;YACH,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YACxD,cAAc,CAAC,YAAY,EAAE,GAAG,IAAI,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YAC5E,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;IACH,CAAC;IAED,SAAS,eAAe;QACtB,IAAI,CAAC,qBAAqB;YAAE,OAAM;QAClC,YAAY,CAAC,qBAAqB,CAAC,CAAA;QACnC,qBAAqB,GAAG,SAAS,CAAA;IACnC,CAAC;IAED,SAAS,uBAAuB,CAAC,aAAiC;QAChE,IAAI,CAAC,aAAa;YAAE,OAAO,KAAK,CAAA;QAChC,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAA;QAC7D,OAAO,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,kBAAkB,CAAA;IAChG,CAAC;IAED,SAAS,kBAAkB,CAAC,GAAwB,EAAE,OAAoD;QACxG,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAA;QAC1C,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;QACnC,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAA;QAC/C,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAA;QAClD,IAAI,OAAO,EAAE,WAAW,EAAE,CAAC;YACzB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;QACpD,CAAC;QACD,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACpB,GAAG,CAAC,SAAS,CACX,yBAAyB,EACzB,uJAAuJ,CACxJ,CAAA;QACH,CAAC;IACH,CAAC;IAED,KAAK,UAAU,KAAK;QAClB,eAAe,EAAE,CAAA;QACjB,IAAI,WAAW,EAAE,CAAC;YAChB,SAAS,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;YAC/C,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAA;QAC3C,CAAC;QAED,SAAS,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;QAClD,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC3C,IAAI,CAAC;gBACH,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;oBACvD,SAAS,CAAC,gCAAgC,EAAE;wBAC1C,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa;qBACxC,CAAC,CAAA;oBACF,GAAG,CAAC,UAAU,GAAG,GAAG,CAAA;oBACpB,kBAAkB,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,2BAA2B,EAAE,CAAC,CAAA;oBACrE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;oBACpB,OAAM;gBACR,CAAC;gBAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,KAAK,CAAC,cAAc,CAAC,CAAA;gBAEzD,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,EAAE;oBAChD,GAAG,CAAC,UAAU,GAAG,MAAM,CAAA;oBACvB,kBAAkB,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,0BAA0B,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;oBAClF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;gBACf,CAAC,CAAA;gBACD,MAAM,QAAQ,GAAG,CAAC,QAAgB,EAAE,EAAE;oBACpC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAA;oBACpB,kBAAkB,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,2BAA2B,EAAE,CAAC,CAAA;oBACrE,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;oBACnC,GAAG,CAAC,GAAG,EAAE,CAAA;gBACX,CAAC,CAAA;gBAED,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;oBACxC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;oBACzC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;oBAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;oBAC3C,MAAM,gBAAgB,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;oBAClE,SAAS,CAAC,cAAc,EAAE;wBACxB,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC;wBACtB,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC;wBACxB,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC;qBACzB,CAAC,CAAA;oBAEF,IAAI,KAAK,EAAE,CAAC;wBACV,MAAM,QAAQ,GAAG,gBAAgB,IAAI,KAAK,CAAA;wBAC1C,SAAS,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;wBACjD,YAAY,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;wBACzC,YAAY,GAAG,SAAS,CAAA;wBACxB,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAA;wBAClD,OAAM;oBACR,CAAC;oBAED,IAAI,CAAC,IAAI,EAAE,CAAC;wBACV,MAAM,QAAQ,GAAG,4BAA4B,CAAA;wBAC7C,SAAS,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;wBACjD,YAAY,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;wBACzC,YAAY,GAAG,SAAS,CAAA;wBACxB,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAA;wBAClD,OAAM;oBACR,CAAC;oBAED,IAAI,CAAC,YAAY,IAAI,KAAK,KAAK,YAAY,CAAC,KAAK,EAAE,CAAC;wBAClD,MAAM,QAAQ,GAAG,uCAAuC,CAAA;wBACxD,SAAS,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;wBACjD,YAAY,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;wBACzC,YAAY,GAAG,SAAS,CAAA;wBACxB,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAA;wBAClD,OAAM;oBACR,CAAC;oBAED,MAAM,OAAO,GAAG,YAAY,CAAA;oBAC5B,YAAY,GAAG,SAAS,CAAA;oBACxB,SAAS,CAAC,sBAAsB,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAA;oBACjE,KAAK;yBACF,qBAAqB,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC;yBAC5D,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;wBACf,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;wBACvB,SAAS,CAAC,wBAAwB,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAA;wBACnE,IAAI,GAAG,CAAC,aAAa;4BAAE,OAAM;wBAC7B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;4BACjC,QAAQ,CAAC,KAAK,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC,CAAA;4BACtD,OAAM;wBACR,CAAC;wBACD,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAA;oBACtD,CAAC,CAAC;yBACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;wBACb,MAAM,UAAU,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;wBACtE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;wBAC1B,SAAS,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAA;wBAChE,IAAI,GAAG,CAAC,aAAa;4BAAE,OAAM;wBAC7B,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,mBAAmB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAA;oBAC9D,CAAC,CAAC,CAAA;oBACJ,OAAM;gBACR,CAAC;gBAED,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;oBAChC,SAAS,CAAC,uBAAuB,CAAC,CAAA;oBAClC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAA;oBACnD,OAAM;gBACR,CAAC;gBAED,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC/B,SAAS,CAAC,iBAAiB,CAAC,CAAA;oBAC5B,YAAY,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAA;oBAClD,YAAY,GAAG,SAAS,CAAA;oBACxB,GAAG,CAAC,UAAU,GAAG,GAAG,CAAA;oBACpB,kBAAkB,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,2BAA2B,EAAE,CAAC,CAAA;oBACrE,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;oBAC1B,OAAM;gBACR,CAAC;gBAED,GAAG,CAAC,UAAU,GAAG,GAAG,CAAA;gBACpB,kBAAkB,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,2BAA2B,EAAE,CAAC,CAAA;gBACrE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YACtB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,GAAG,CAAC,UAAU,GAAG,GAAG,CAAA;gBACpB,kBAAkB,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,2BAA2B,EAAE,CAAC,CAAA;gBACrE,GAAG,CAAC,GAAG,CAAC,iBAAkB,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;YACtD,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC;YACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;gBAClC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;YACtE,CAAC,CAAC,CAAA;YACF,SAAS,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,CAAC,oBAAoB,EAAE;gBAC9B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAA;YACF,MAAM,MAAM,GAAG,WAAW,CAAA;YAC1B,WAAW,GAAG,SAAS,CAAA;YACvB,IAAI,CAAC;gBACH,MAAM,EAAE,KAAK,EAAE,CAAA;YACjB,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;QAED,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAA;IAC3C,CAAC;IAED,SAAS,IAAI;QACX,eAAe,EAAE,CAAA;QACjB,SAAS,CAAC,iBAAiB,EAAE,EAAE,eAAe,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;QACxE,WAAW,EAAE,KAAK,EAAE,CAAA;QACpB,WAAW,GAAG,SAAS,CAAA;QACvB,SAAS,CAAC,gBAAgB,CAAC,CAAA;IAC7B,CAAC;IAED,SAAS,YAAY,CAAC,OAAe,EAAE,MAA6B;QAClE,IAAI,CAAC,WAAW;YAAE,OAAM;QACxB,eAAe,EAAE,CAAA;QACjB,SAAS,CAAC,uBAAuB,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;QACvD,qBAAqB,GAAG,UAAU,CAAC,GAAG,EAAE;YACtC,qBAAqB,GAAG,SAAS,CAAA;YACjC,IAAI,YAAY;gBAAE,OAAM;YACxB,SAAS,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;YAChD,IAAI,EAAE,CAAA;QACR,CAAC,EAAE,OAAO,CAAC,CAAA;IACb,CAAC;IAED,SAAS,eAAe,CAAC,IAAW,EAAE,KAAa,EAAE,QAAwB;QAC3E,SAAS,CAAC,qBAAqB,EAAE;YAC/B,QAAQ;YACR,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAC3B,CAAC,CAAA;QACF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,OAAO,GAAG,KAAK,CAAA;YACnB,MAAM,WAAW,GAAG,CAAC,MAAe,EAAE,EAAE;gBACtC,IAAI,OAAO;oBAAE,OAAM;gBACnB,OAAO,GAAG,IAAI,CAAA;gBACd,YAAY,CAAC,OAAO,CAAC,CAAA;gBACrB,SAAS,CAAC,wBAAwB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;gBACjD,OAAO,CAAC,MAAM,CAAC,CAAA;YACjB,CAAC,CAAA;YACD,MAAM,UAAU,GAAG,CAAC,KAAY,EAAE,EAAE;gBAClC,IAAI,OAAO;oBAAE,OAAM;gBACnB,OAAO,GAAG,IAAI,CAAA;gBACd,YAAY,CAAC,OAAO,CAAC,CAAA;gBACrB,SAAS,CAAC,wBAAwB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;gBACvE,MAAM,CAAC,KAAK,CAAC,CAAA;YACf,CAAC,CAAA;YACD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,YAAY,GAAG,SAAS,CAAA;gBACxB,SAAS,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAA;gBACpF,UAAU,CAAC,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC,CAAA;YAC/E,CAAC,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAA;YAE3B,YAAY,GAAG;gBACb,IAAI;gBACJ,KAAK;gBACL,QAAQ;gBACR,OAAO,EAAE,WAAW;gBACpB,MAAM,EAAE,UAAU;aACnB,CAAA;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO;QACL,cAAc;QACd,SAAS;QACT,KAAK;QACL,IAAI;QACJ,YAAY;QACZ,eAAe;KAChB,CAAA;AACH,CAAC"}

package/dist/lib/codex-native/originator.d.ts

@@ -0,0 +1,4 @@
+import type { CodexSpoofMode } from "../config";
+export type CodexOriginator = "opencode" | "codex_cli_rs" | "codex_exec";
+export declare function resolveCodexOriginator(spoofMode: CodexSpoofMode, argv?: string[]): CodexOriginator;
+//# sourceMappingURL=originator.d.ts.map

package/dist/lib/codex-native/originator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"originator.d.ts","sourceRoot":"","sources":["../../../lib/codex-native/originator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAE/C,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,cAAc,GAAG,YAAY,CAAA;AAMxE,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,cAAc,EAAE,IAAI,WAAe,GAAG,eAAe,CAKtG"}

package/dist/lib/codex-native/originator.js

@@ -0,0 +1,12 @@
+function isTuiWorkerInvocation(argv) {
+    return argv.some((entry) => /(?:^|[\\/])tui[\\/]worker\.(?:js|ts)$/i.test(entry));
+}
+export function resolveCodexOriginator(spoofMode, argv = process.argv) {
+    if (spoofMode !== "codex")
+        return "opencode";
+    const normalizedArgv = argv.map((entry) => String(entry));
+    if (isTuiWorkerInvocation(normalizedArgv))
+        return "codex_cli_rs";
+    return normalizedArgv.includes("run") ? "codex_exec" : "codex_cli_rs";
+}
+//# sourceMappingURL=originator.js.map

package/dist/lib/codex-native/originator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"originator.js","sourceRoot":"","sources":["../../../lib/codex-native/originator.ts"],"names":[],"mappings":"AAIA,SAAS,qBAAqB,CAAC,IAAc;IAC3C,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,wCAAwC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;AACnF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,SAAyB,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI;IACnF,IAAI,SAAS,KAAK,OAAO;QAAE,OAAO,UAAU,CAAA;IAC5C,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IACzD,IAAI,qBAAqB,CAAC,cAAc,CAAC;QAAE,OAAO,cAAc,CAAA;IAChE,OAAO,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,CAAA;AACvE,CAAC"}

package/dist/lib/codex-native/request-transform.d.ts

@@ -0,0 +1,50 @@
+import type { CustomSettings, PersonalityOption } from "../config";
+import type { CodexModelInfo } from "../model-catalog";
+type ChatParamsOutput = {
+    temperature: number;
+    topP: number;
+    topK: number;
+    options: Record<string, unknown>;
+};
+export declare function getModelLookupCandidates(model: {
+    id?: string;
+    api?: {
+        id?: string;
+    };
+}): string[];
+export declare function getVariantLookupCandidates(input: {
+    message?: unknown;
+    modelCandidates: string[];
+}): string[];
+export declare function findCatalogModelForCandidates(catalogModels: CodexModelInfo[] | undefined, modelCandidates: string[]): CodexModelInfo | undefined;
+export declare function getModelThinkingSummariesOverride(customSettings: CustomSettings | undefined, modelCandidates: string[], variantCandidates: string[]): boolean | undefined;
+export declare function resolvePersonalityForModel(input: {
+    customSettings?: CustomSettings;
+    modelCandidates: string[];
+    variantCandidates: string[];
+    fallback?: PersonalityOption;
+}): string | undefined;
+export declare function applyCodexRuntimeDefaultsToParams(input: {
+    modelOptions: Record<string, unknown>;
+    modelToolCallCapable: boolean | undefined;
+    thinkingSummariesOverride: boolean | undefined;
+    preferCodexInstructions: boolean;
+    output: ChatParamsOutput;
+}): void;
+export declare function sanitizeOutboundRequestIfNeeded(request: Request, enabled: boolean): Promise<{
+    request: Request;
+    changed: boolean;
+}>;
+export declare function applyCatalogInstructionOverrideToRequest(input: {
+    request: Request;
+    enabled: boolean;
+    catalogModels: CodexModelInfo[] | undefined;
+    customSettings: CustomSettings | undefined;
+    fallbackPersonality: PersonalityOption | undefined;
+}): Promise<{
+    request: Request;
+    changed: boolean;
+    reason: string;
+}>;
+export {};
+//# sourceMappingURL=request-transform.d.ts.map

package/dist/lib/codex-native/request-transform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-transform.d.ts","sourceRoot":"","sources":["../../../lib/codex-native/request-transform.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAClE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAItD,KAAK,gBAAgB,GAAG;IACtB,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACjC,CAAA;AAsED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAAG,MAAM,EAAE,CAiBhG;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,MAAM,EAAE,CAsB5G;AAQD,wBAAgB,6BAA6B,CAC3C,aAAa,EAAE,cAAc,EAAE,GAAG,SAAS,EAC3C,eAAe,EAAE,MAAM,EAAE,GACxB,cAAc,GAAG,SAAS,CAgB5B;AA8CD,wBAAgB,iCAAiC,CAC/C,cAAc,EAAE,cAAc,GAAG,SAAS,EAC1C,eAAe,EAAE,MAAM,EAAE,EACzB,iBAAiB,EAAE,MAAM,EAAE,GAC1B,OAAO,GAAG,SAAS,CAqBrB;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAC3B,QAAQ,CAAC,EAAE,iBAAiB,CAAA;CAC7B,GAAG,MAAM,GAAG,SAAS,CAYrB;AAED,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACrC,oBAAoB,EAAE,OAAO,GAAG,SAAS,CAAA;IACzC,yBAAyB,EAAE,OAAO,GAAG,SAAS,CAAA;IAC9C,uBAAuB,EAAE,OAAO,CAAA;IAChC,MAAM,EAAE,gBAAgB,CAAA;CACzB,GAAG,IAAI,CAkEP;AAED,wBAAsB,+BAA+B,CACnD,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CA8BjD;AAuBD,wBAAsB,wCAAwC,CAAC,KAAK,EAAE;IACpE,OAAO,EAAE,OAAO,CAAA;IAChB,OAAO,EAAE,OAAO,CAAA;IAChB,aAAa,EAAE,cAAc,EAAE,GAAG,SAAS,CAAA;IAC3C,cAAc,EAAE,cAAc,GAAG,SAAS,CAAA;IAC1C,mBAAmB,EAAE,iBAAiB,GAAG,SAAS,CAAA;CACnD,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAqDlE"}