@iam-brain/opencode-codex-auth 0.1.3

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 iam-brain
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,111 @@
+# opencode-codex-auth
+
+[![CI](https://github.com/iam-brain/opencode-codex-auth/actions/workflows/ci.yml/badge.svg)](https://github.com/iam-brain/opencode-codex-auth/actions/workflows/ci.yml)
+[![npm version](https://img.shields.io/npm/v/%40iam-brain%2Fopencode-codex-auth.svg)](https://www.npmjs.com/package/@iam-brain/opencode-codex-auth)
+
+OpenCode plugin for OpenAI ChatGPT OAuth with multi-account management, Codex-compatible request modes, and dynamic model behavior controls.
+
+Quick links: `docs/getting-started.md` · `docs/configuration.md` · `docs/multi-account.md` · `docs/troubleshooting.md`
+
+## Why this plugin
+
+- Uses ChatGPT OAuth instead of API keys for OpenAI provider flows.
+- Keeps account rotation state in a plugin-owned store (`codex-accounts.json`).
+- Supports `native`, `codex`, and experimental `collab` runtime modes.
+- Adds account-manager UX to `opencode auth login` (quotas, toggles, scoped deletes, transfer).
+
+## Quick start
+
+Install and register the plugin (recommended):
+
+```bash
+npx -y @iam-brain/opencode-codex-auth
+```
+
+Then authenticate:
+
+```bash
+opencode auth login
+```
+
+Use an OpenAI model through OpenCode:
+
+```bash
+opencode run "say hi" --model=openai/gpt-5.2
+```
+
+## Usage notice
+
+This plugin is intended for personal development use with your own ChatGPT account. For production multi-user systems, use the OpenAI Platform API.
+
+## Install behavior
+
+By default, `npx -y @iam-brain/opencode-codex-auth` runs the installer.
+
+The installer does two things:
+
+1. Ensures `@iam-brain/opencode-codex-auth@latest` is present in `~/.config/opencode/opencode.json`.
+2. Installs Codex collaboration agent templates in `~/.config/opencode/agents/` as disabled files:
+   - `Codex Orchestrator.md.disabled`
+   - `Codex Default.md.disabled`
+   - `Codex Plan.md.disabled`
+   - `Codex Execute.md.disabled`
+   - `Codex Review.md.disabled`
+   - `Codex Compact.md.disabled`
+3. Creates `~/.config/opencode/codex-config.json` with defaults when missing.
+
+At plugin startup, files are reconciled against runtime mode:
+
+- `mode: "collab"` -> `.md.disabled` files are activated to `.md`
+- `mode: "native"` or `mode: "codex"` -> Codex agents are disabled to `.md.disabled`
+
+To install only the agent templates (no `opencode.json` edits):
+
+```bash
+npx -y @iam-brain/opencode-codex-auth install-agents
+```
+
+## Config split
+
+Keep `opencode.json` minimal (plugin enablement only). Put runtime behavior in:
+
+- `~/.config/opencode/codex-config.json`
+
+Canonical config/env docs are in `docs/configuration.md`.
+
+Schemas for user-edited JSON files are in:
+
+- `schemas/codex-config.schema.json`
+- `schemas/opencode.schema.json`
+
+## Runtime modes
+
+- `native`: native-plugin style identity/headers.
+- `codex`: codex-rs style identity/headers.
+- `collab`: Codex collaboration profile wiring (WIP / untested; not recommended for production).
+
+## Account storage
+
+- Provider auth marker: `~/.local/share/opencode/auth.json`
+- Plugin multi-account store: `~/.config/opencode/codex-accounts.json`
+
+Legacy sources can be imported explicitly from the auth menu:
+
+- `~/.config/opencode/openai-codex-accounts.json`
+- `~/.local/share/opencode/auth.json`
+
+## Documentation
+
+- Docs portal: `docs/README.md`
+- Getting started: `docs/getting-started.md`
+- Configuration: `docs/configuration.md`
+- Multi-account: `docs/multi-account.md`
+- Troubleshooting: `docs/troubleshooting.md`
+- Development docs: `docs/development/`
+
+## Development
+
+```bash
+npm install
+npm run verify
+```

package/dist/bin/opencode-codex-auth.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=opencode-codex-auth.d.ts.map

package/dist/bin/opencode-codex-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode-codex-auth.d.ts","sourceRoot":"","sources":["../../bin/opencode-codex-auth.ts"],"names":[],"mappings":""}

package/dist/bin/opencode-codex-auth.js

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+import { runInstallerCli } from "../lib/installer-cli.js";
+const args = process.argv.slice(2);
+runInstallerCli(args)
+    .then((code) => {
+    process.exitCode = code;
+})
+    .catch((error) => {
+    const message = error instanceof Error ? error.message : String(error);
+    process.stderr.write(`${message}\n`);
+    process.exitCode = 1;
+});
+//# sourceMappingURL=opencode-codex-auth.js.map

package/dist/bin/opencode-codex-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode-codex-auth.js","sourceRoot":"","sources":["../../bin/opencode-codex-auth.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAEzD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AAElC,eAAe,CAAC,IAAI,CAAC;KAClB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;IACb,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAA;AACzB,CAAC,CAAC;KACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAA;IACpC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;AACtB,CAAC,CAAC,CAAA"}

package/dist/bin/opencode-openai-multi.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=opencode-openai-multi.d.ts.map

package/dist/bin/opencode-openai-multi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode-openai-multi.d.ts","sourceRoot":"","sources":["../../bin/opencode-openai-multi.ts"],"names":[],"mappings":""}

package/dist/bin/opencode-openai-multi.js

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+import { runInstallerCli } from "../lib/installer-cli.js";
+const args = process.argv.slice(2);
+runInstallerCli(args)
+    .then((code) => {
+    process.exitCode = code;
+})
+    .catch((error) => {
+    const message = error instanceof Error ? error.message : String(error);
+    process.stderr.write(`${message}\n`);
+    process.exitCode = 1;
+});
+//# sourceMappingURL=opencode-openai-multi.js.map

package/dist/bin/opencode-openai-multi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode-openai-multi.js","sourceRoot":"","sources":["../../bin/opencode-openai-multi.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAEzD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AAElC,eAAe,CAAC,IAAI,CAAC;KAClB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;IACb,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAA;AACzB,CAAC,CAAC;KACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAA;IACpC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;AACtB,CAAC,CAAC,CAAA"}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+import type { Plugin } from "@opencode-ai/plugin";
+export declare const OpenAIMultiAuthPlugin: Plugin;
+export default OpenAIMultiAuthPlugin;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAmCjD,eAAO,MAAM,qBAAqB,EAAE,MAyInC,CAAA;AAED,eAAe,qBAAqB,CAAA"}

package/dist/index.js

@@ -0,0 +1,137 @@
+import { tool } from "@opencode-ai/plugin";
+import { listAccountsForTools, removeAccountByIndex, switchAccountByIndex, toggleAccountEnabledByIndex } from "./lib/accounts-tools";
+import { CodexAuthPlugin, refreshAccessToken } from "./lib/codex-native";
+import { ensureDefaultConfigFile, getCompatInputSanitizerEnabled, getCustomSettings, getDebugEnabled, getHeaderSnapshotsEnabled, getMode, getPidOffsetEnabled, getPersonality, getProactiveRefreshBufferMs, getProactiveRefreshEnabled, getSpoofMode, getQuietMode, loadConfigFile, resolveConfig } from "./lib/config";
+import { createLogger } from "./lib/logger";
+import { reconcileOrchestratorAgentsState } from "./lib/orchestrator-agents";
+import { runOneProactiveRefreshTick } from "./lib/proactive-refresh";
+import { toolOutputForStatus } from "./lib/codex-status-tool";
+import { requireOpenAIMultiOauthAuth, saveAuthStorage } from "./lib/storage";
+import { switchToolMessage } from "./lib/tools-output";
+let scheduler;
+export const OpenAIMultiAuthPlugin = async (input) => {
+    if (scheduler) {
+        scheduler.stop();
+        scheduler = undefined;
+    }
+    await ensureDefaultConfigFile({ env: process.env }).catch(() => { });
+    const cfg = resolveConfig({
+        env: process.env,
+        file: loadConfigFile({ env: process.env })
+    });
+    const runtimeMode = getMode(cfg);
+    const log = createLogger({ debug: getDebugEnabled(cfg) });
+    try {
+        const reconcile = await reconcileOrchestratorAgentsState({
+            enabled: runtimeMode === "collab"
+        });
+        if (reconcile.renamed.length > 0) {
+            log.debug("orchestrator agent state reconciled", {
+                enabled: reconcile.enabled,
+                renamed: reconcile.renamed.length
+            });
+        }
+    }
+    catch (error) {
+        log.debug("orchestrator agent state reconcile failed", {
+            error: error instanceof Error ? error.message : String(error)
+        });
+    }
+    if (getProactiveRefreshEnabled(cfg)) {
+        const bufferMs = getProactiveRefreshBufferMs(cfg);
+        const timer = setInterval(() => {
+            runOneProactiveRefreshTick({
+                now: Date.now,
+                bufferMs,
+                refresh: async (refreshToken) => {
+                    const tokens = await refreshAccessToken(refreshToken);
+                    return {
+                        access: tokens.access_token,
+                        refresh: tokens.refresh_token,
+                        expires: Date.now() + (tokens.expires_in ?? 3600) * 1000
+                    };
+                }
+            }).catch(() => { });
+        }, 60_000);
+        scheduler = { stop: () => clearInterval(timer) };
+    }
+    log.debug("plugin init");
+    const hooks = await CodexAuthPlugin(input, {
+        log,
+        personality: getPersonality(cfg),
+        mode: runtimeMode,
+        quietMode: getQuietMode(cfg),
+        pidOffsetEnabled: getPidOffsetEnabled(cfg),
+        spoofMode: getSpoofMode(cfg),
+        compatInputSanitizer: getCompatInputSanitizerEnabled(cfg),
+        headerSnapshots: getHeaderSnapshotsEnabled(cfg),
+        customSettings: getCustomSettings(cfg)
+    });
+    const z = tool.schema;
+    hooks.tool = {
+        ...hooks.tool,
+        "codex-status": tool({
+            description: "Show the status and usage limits of all configured Codex accounts.",
+            args: {},
+            execute: async () => {
+                return toolOutputForStatus();
+            }
+        }),
+        "codex-switch-accounts": tool({
+            description: "Switch the active OpenAI account by 1-based index.",
+            args: { index: z.number().int().min(1) },
+            execute: async ({ index }) => {
+                let message = "";
+                await saveAuthStorage(undefined, (authFile) => {
+                    const openai = requireOpenAIMultiOauthAuth(authFile);
+                    const row = listAccountsForTools(openai)[index - 1];
+                    const next = switchAccountByIndex(openai, index);
+                    authFile.openai = next;
+                    message = switchToolMessage({ email: row?.email, plan: row?.plan, index1: index });
+                });
+                return message;
+            }
+        }),
+        "codex-toggle-account": tool({
+            description: "Toggle enabled/disabled for an OpenAI account by 1-based index.",
+            args: { index: z.number().int().min(1) },
+            execute: async ({ index }) => {
+                let message = "";
+                await saveAuthStorage(undefined, (authFile) => {
+                    const openai = requireOpenAIMultiOauthAuth(authFile);
+                    const row = listAccountsForTools(openai)[index - 1];
+                    const next = toggleAccountEnabledByIndex(openai, index);
+                    authFile.openai = next;
+                    const label = row?.email ?? "account";
+                    const plan = row?.plan ? ` (${row.plan})` : "";
+                    const enabled = listAccountsForTools(next).find((r) => r.identityKey === row?.identityKey)?.enabled === true;
+                    message = `Toggled #${index}: ${label}${plan} -> ${enabled ? "enabled" : "disabled"}`;
+                });
+                return message;
+            }
+        }),
+        "codex-remove-account": tool({
+            description: "Remove an OpenAI account by 1-based index (requires confirm).",
+            args: { index: z.number().int().min(1), confirm: z.boolean().optional() },
+            execute: async ({ index, confirm }) => {
+                if (confirm !== true) {
+                    return "Refusing to remove account without confirm: true";
+                }
+                let message = "";
+                await saveAuthStorage(undefined, (authFile) => {
+                    const openai = requireOpenAIMultiOauthAuth(authFile);
+                    const row = listAccountsForTools(openai)[index - 1];
+                    const next = removeAccountByIndex(openai, index);
+                    authFile.openai = next;
+                    const label = row?.email ?? "account";
+                    const plan = row?.plan ? ` (${row.plan})` : "";
+                    message = `Removed #${index}: ${label}${plan}`;
+                });
+                return message;
+            }
+        })
+    };
+    return hooks;
+};
+export default OpenAIMultiAuthPlugin;
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAA;AAE1C,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,2BAA2B,EAC5B,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AACxE,OAAO,EACL,uBAAuB,EACvB,8BAA8B,EAC9B,iBAAiB,EACjB,eAAe,EACf,yBAAyB,EACzB,OAAO,EACP,mBAAmB,EACnB,cAAc,EACd,2BAA2B,EAC3B,0BAA0B,EAC1B,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,aAAa,EACd,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,gCAAgC,EAAE,MAAM,2BAA2B,CAAA;AAC5E,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAA;AAC7D,OAAO,EAAE,2BAA2B,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAEtD,IAAI,SAA2C,CAAA;AAE/C,MAAM,CAAC,MAAM,qBAAqB,GAAW,KAAK,EAAE,KAAK,EAAE,EAAE;IAC3D,IAAI,SAAS,EAAE,CAAC;QACd,SAAS,CAAC,IAAI,EAAE,CAAA;QAChB,SAAS,GAAG,SAAS,CAAA;IACvB,CAAC;IAED,MAAM,uBAAuB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAEnE,MAAM,GAAG,GAAG,aAAa,CAAC;QACxB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,IAAI,EAAE,cAAc,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;KAC3C,CAAC,CAAA;IACF,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IAChC,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAEzD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,gCAAgC,CAAC;YACvD,OAAO,EAAE,WAAW,KAAK,QAAQ;SAClC,CAAC,CAAA;QACF,IAAI,SAAS,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,KAAK,CAAC,qCAAqC,EAAE;gBAC/C,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,MAAM;aAClC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,KAAK,CAAC,2CAA2C,EAAE;YACrD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,0BAA0B,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAA;QACjD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC7B,0BAA0B,CAAC;gBACzB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,QAAQ;gBACR,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;oBAC9B,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,YAAY,CAAC,CAAA;oBACrD,OAAO;wBACL,MAAM,EAAE,MAAM,CAAC,YAAY;wBAC3B,OAAO,EAAE,MAAM,CAAC,aAAa;wBAC7B,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,IAAI;qBACzD,CAAA;gBACH,CAAC;aACF,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACpB,CAAC,EAAE,MAAM,CAAC,CAAA;QACV,SAAS,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAA;IAClD,CAAC;IAED,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;IACxB,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE;QACzC,GAAG;QACH,WAAW,EAAE,cAAc,CAAC,GAAG,CAAC;QAChC,IAAI,EAAE,WAAW;QACjB,SAAS,EAAE,YAAY,CAAC,GAAG,CAAC;QAC5B,gBAAgB,EAAE,mBAAmB,CAAC,GAAG,CAAC;QAC1C,SAAS,EAAE,YAAY,CAAC,GAAG,CAAC;QAC5B,oBAAoB,EAAE,8BAA8B,CAAC,GAAG,CAAC;QACzD,eAAe,EAAE,yBAAyB,CAAC,GAAG,CAAC;QAC/C,cAAc,EAAE,iBAAiB,CAAC,GAAG,CAAC;KACvC,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAA;IAErB,KAAK,CAAC,IAAI,GAAG;QACX,GAAG,KAAK,CAAC,IAAI;QACb,cAAc,EAAE,IAAI,CAAC;YACnB,WAAW,EAAE,oEAAoE;YACjF,IAAI,EAAE,EAAE;YACR,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,OAAO,mBAAmB,EAAE,CAAA;YAC9B,CAAC;SACF,CAAC;QACF,uBAAuB,EAAE,IAAI,CAAC;YAC5B,WAAW,EAAE,oDAAoD;YACjE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YACxC,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC3B,IAAI,OAAO,GAAG,EAAE,CAAA;gBAEhB,MAAM,eAAe,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;oBAC5C,MAAM,MAAM,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAA;oBACpD,MAAM,GAAG,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;oBACnD,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;oBAChD,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAA;oBACtB,OAAO,GAAG,iBAAiB,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;gBACpF,CAAC,CAAC,CAAA;gBAEF,OAAO,OAAO,CAAA;YAChB,CAAC;SACF,CAAC;QACF,sBAAsB,EAAE,IAAI,CAAC;YAC3B,WAAW,EAAE,iEAAiE;YAC9E,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YACxC,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC3B,IAAI,OAAO,GAAG,EAAE,CAAA;gBAEhB,MAAM,eAAe,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;oBAC5C,MAAM,MAAM,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAA;oBACpD,MAAM,GAAG,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;oBACnD,MAAM,IAAI,GAAG,2BAA2B,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;oBACvD,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAA;oBACtB,MAAM,KAAK,GAAG,GAAG,EAAE,KAAK,IAAI,SAAS,CAAA;oBACrC,MAAM,IAAI,GAAG,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;oBAC9C,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,GAAG,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,IAAI,CAAA;oBAC5G,OAAO,GAAG,YAAY,KAAK,KAAK,KAAK,GAAG,IAAI,OAAO,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;gBACvF,CAAC,CAAC,CAAA;gBAEF,OAAO,OAAO,CAAA;YAChB,CAAC;SACF,CAAC;QACF,sBAAsB,EAAE,IAAI,CAAC;YAC3B,WAAW,EAAE,+DAA+D;YAC5E,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE;YACzE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;gBACpC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;oBACrB,OAAO,kDAAkD,CAAA;gBAC3D,CAAC;gBAED,IAAI,OAAO,GAAG,EAAE,CAAA;gBAEhB,MAAM,eAAe,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;oBAC5C,MAAM,MAAM,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAA;oBACpD,MAAM,GAAG,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;oBACnD,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;oBAChD,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAA;oBACtB,MAAM,KAAK,GAAG,GAAG,EAAE,KAAK,IAAI,SAAS,CAAA;oBACrC,MAAM,IAAI,GAAG,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;oBAC9C,OAAO,GAAG,YAAY,KAAK,KAAK,KAAK,GAAG,IAAI,EAAE,CAAA;gBAChD,CAAC,CAAC,CAAA;gBAEF,OAAO,OAAO,CAAA;YAChB,CAAC;SACF,CAAC;KACH,CAAA;IAED,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED,eAAe,qBAAqB,CAAA"}

package/dist/lib/accounts-tools.d.ts

@@ -0,0 +1,14 @@
+import type { OpenAIMultiOauthAuth } from "./types";
+export type ToolAccountRow = {
+    displayIndex: number;
+    identityKey: string;
+    email?: string;
+    plan?: string;
+    enabled: boolean;
+    isActive: boolean;
+};
+export declare function listAccountsForTools(openai: OpenAIMultiOauthAuth): ToolAccountRow[];
+export declare function switchAccountByIndex(openai: OpenAIMultiOauthAuth, index1: number): OpenAIMultiOauthAuth;
+export declare function toggleAccountEnabledByIndex(openai: OpenAIMultiOauthAuth, index1: number): OpenAIMultiOauthAuth;
+export declare function removeAccountByIndex(openai: OpenAIMultiOauthAuth, index1: number): OpenAIMultiOauthAuth;
+//# sourceMappingURL=accounts-tools.d.ts.map

package/dist/lib/accounts-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounts-tools.d.ts","sourceRoot":"","sources":["../../lib/accounts-tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAiB,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAElE,MAAM,MAAM,cAAc,GAAG;IAC3B,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,OAAO,CAAA;IAChB,QAAQ,EAAE,OAAO,CAAA;CAClB,CAAA;AA2CD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,GAAG,cAAc,EAAE,CASnF;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,GAAG,oBAAoB,CAIvG;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,GAAG,oBAAoB,CAmB9G;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,GAAG,oBAAoB,CA2BvG"}

package/dist/lib/accounts-tools.js

@@ -0,0 +1,100 @@
+function buildToolRows(openai) {
+    return openai.accounts
+        .flatMap((account, accountIndex) => {
+        if (typeof account.identityKey !== "string" || account.identityKey.length === 0) {
+            return [];
+        }
+        return [{
+                accountIndex,
+                identityKey: account.identityKey,
+                email: account.email,
+                plan: account.plan,
+                enabled: account.enabled !== false,
+                isActive: openai.activeIdentityKey === account.identityKey
+            }];
+    })
+        .map((row, i) => ({
+        ...row,
+        displayIndex: i + 1
+    }));
+}
+function resolveToolAccount(openai, index1) {
+    if (!Number.isInteger(index1))
+        throw new Error("Invalid account index");
+    if (index1 < 1)
+        throw new Error("Invalid account index");
+    const rows = buildToolRows(openai);
+    const row = rows[index1 - 1];
+    if (!row)
+        throw new Error("Invalid account index");
+    const account = openai.accounts[row.accountIndex];
+    if (!account?.identityKey)
+        throw new Error("Target account missing identityKey");
+    return account;
+}
+export function listAccountsForTools(openai) {
+    return buildToolRows(openai).map((row) => ({
+        displayIndex: row.displayIndex,
+        identityKey: row.identityKey,
+        email: row.email,
+        plan: row.plan,
+        enabled: row.enabled,
+        isActive: row.isActive
+    }));
+}
+export function switchAccountByIndex(openai, index1) {
+    const target = resolveToolAccount(openai, index1);
+    if (target.enabled === false)
+        throw new Error("Target account is disabled");
+    return { ...openai, activeIdentityKey: target.identityKey };
+}
+export function toggleAccountEnabledByIndex(openai, index1) {
+    if (!Number.isInteger(index1))
+        throw new Error("Invalid account index");
+    if (index1 < 1)
+        throw new Error("Invalid account index");
+    const rows = buildToolRows(openai);
+    const row = rows[index1 - 1];
+    if (!row)
+        throw new Error("Invalid account index");
+    const idx = row.accountIndex;
+    if (idx < 0)
+        throw new Error("Target account missing identityKey");
+    const target = openai.accounts[idx];
+    if (!target?.identityKey)
+        throw new Error("Target account missing identityKey");
+    const nextAccounts = [...openai.accounts];
+    nextAccounts[idx] = {
+        ...target,
+        enabled: target.enabled === false
+    };
+    return { ...openai, accounts: nextAccounts };
+}
+export function removeAccountByIndex(openai, index1) {
+    if (!Number.isInteger(index1))
+        throw new Error("Invalid account index");
+    if (index1 < 1)
+        throw new Error("Invalid account index");
+    const rows = buildToolRows(openai);
+    const row = rows[index1 - 1];
+    if (!row)
+        throw new Error("Invalid account index");
+    const idx = row.accountIndex;
+    if (idx < 0)
+        throw new Error("Target account missing identityKey");
+    const removed = openai.accounts[idx];
+    const accounts = openai.accounts.filter((_, i) => i !== idx);
+    let activeIdentityKey = openai.activeIdentityKey;
+    if (removed?.identityKey && openai.activeIdentityKey === removed.identityKey) {
+        const forward = accounts.slice(idx).find((a) => a.enabled !== false && a.identityKey);
+        const backward = accounts.slice(0, idx).reverse().find((a) => a.enabled !== false && a.identityKey);
+        const fallback = forward ?? backward;
+        activeIdentityKey = fallback?.identityKey;
+    }
+    return {
+        ...openai,
+        accounts,
+        ...(activeIdentityKey ? { activeIdentityKey } : { activeIdentityKey: undefined })
+    };
+}
+//# sourceMappingURL=accounts-tools.js.map

package/dist/lib/accounts-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounts-tools.js","sourceRoot":"","sources":["../../lib/accounts-tools.ts"],"names":[],"mappings":"AAeA,SAAS,aAAa,CAAC,MAA4B;IACjD,OAAO,MAAM,CAAC,QAAQ;SACnB,OAAO,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE;QACjC,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChF,OAAO,EAAE,CAAA;QACX,CAAC;QACD,OAAO,CAAC;gBACN,YAAY;gBACZ,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,OAAO,CAAC,OAAO,KAAK,KAAK;gBAClC,QAAQ,EAAE,MAAM,CAAC,iBAAiB,KAAK,OAAO,CAAC,WAAW;aAC3D,CAAC,CAAA;IACJ,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAChB,GAAG,GAAG;QACN,YAAY,EAAE,CAAC,GAAG,CAAC;KACpB,CAAC,CAAC,CAAA;AACP,CAAC;AAED,SAAS,kBAAkB,CACzB,MAA4B,EAC5B,MAAc;IAEd,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IACvE,IAAI,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IAExD,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC5B,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IAElD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IACjD,IAAI,CAAC,OAAO,EAAE,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IAChF,OAAO,OAAkD,CAAA;AAC3D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAA4B;IAC/D,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACzC,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;KACvB,CAAC,CAAC,CAAA;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAA4B,EAAE,MAAc;IAC/E,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjD,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IAC3E,OAAO,EAAE,GAAG,MAAM,EAAE,iBAAiB,EAAE,MAAM,CAAC,WAAW,EAAE,CAAA;AAC7D,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAA4B,EAAE,MAAc;IACtF,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IACvE,IAAI,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IAExD,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC5B,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IAElD,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAA;IAC5B,IAAI,GAAG,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IAClE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;IACnC,IAAI,CAAC,MAAM,EAAE,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IAE/E,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;IACzC,YAAY,CAAC,GAAG,CAAC,GAAG;QAClB,GAAG,MAAM;QACT,OAAO,EAAE,MAAM,CAAC,OAAO,KAAK,KAAK;KAClC,CAAA;IACD,OAAO,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAA;AAC9C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAA4B,EAAE,MAAc;IAC/E,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IACvE,IAAI,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IAExD,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC5B,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IAElD,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAA;IAC5B,IAAI,GAAG,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IAElE,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;IACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAA;IAC5D,IAAI,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAA;IAEhD,IAAI,OAAO,EAAE,WAAW,IAAI,MAAM,CAAC,iBAAiB,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;QAC7E,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,WAAW,CAAC,CAAA;QACrF,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,WAAW,CAAC,CAAA;QACnG,MAAM,QAAQ,GAAG,OAAO,IAAI,QAAQ,CAAA;QACpC,iBAAiB,GAAG,QAAQ,EAAE,WAAW,CAAA;IAC3C,CAAC;IAED,OAAO;QACL,GAAG,MAAM;QACT,QAAQ;QACR,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC;KAClF,CAAA;AACH,CAAC"}

package/dist/lib/claims.d.ts

@@ -0,0 +1,20 @@
+export interface IdTokenClaims {
+    chatgpt_account_id?: string;
+    email?: string;
+    plan?: string;
+    organizations?: Array<{
+        id: string;
+    }>;
+    "https://api.openai.com/auth"?: {
+        chatgpt_account_id?: string;
+        chatgpt_plan_type?: string;
+    };
+    "https://api.openai.com/profile"?: {
+        email?: string;
+    };
+}
+export declare function parseJwtClaims(token: string): IdTokenClaims | undefined;
+export declare function extractAccountIdFromClaims(claims: IdTokenClaims | undefined): string | undefined;
+export declare function extractEmailFromClaims(claims: IdTokenClaims | undefined): string | undefined;
+export declare function extractPlanFromClaims(claims: IdTokenClaims | undefined): string | undefined;
+//# sourceMappingURL=claims.d.ts.map

package/dist/lib/claims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claims.d.ts","sourceRoot":"","sources":["../../lib/claims.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,aAAa;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,aAAa,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACrC,6BAA6B,CAAC,EAAE;QAAE,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC3F,gCAAgC,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACtD;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAgBvE;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAOhG;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAG5F;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAG3F"}

package/dist/lib/claims.js

@@ -0,0 +1,37 @@
+export function parseJwtClaims(token) {
+    const parts = token.split(".");
+    if (parts.length !== 3)
+        return undefined;
+    try {
+        const parsed = JSON.parse(Buffer.from(parts[1], "base64url").toString());
+        if (typeof parsed !== "object" || parsed === null)
+            return undefined;
+        if (Array.isArray(parsed))
+            return undefined;
+        const proto = Object.getPrototypeOf(parsed);
+        if (proto !== Object.prototype && proto !== null)
+            return undefined;
+        return parsed;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function extractAccountIdFromClaims(claims) {
+    if (!claims)
+        return undefined;
+    return (claims.chatgpt_account_id ||
+        claims["https://api.openai.com/auth"]?.chatgpt_account_id ||
+        claims.organizations?.[0]?.id);
+}
+export function extractEmailFromClaims(claims) {
+    if (!claims)
+        return undefined;
+    return claims.email || claims["https://api.openai.com/profile"]?.email;
+}
+export function extractPlanFromClaims(claims) {
+    if (!claims)
+        return undefined;
+    return claims.plan || claims["https://api.openai.com/auth"]?.chatgpt_plan_type;
+}
+//# sourceMappingURL=claims.js.map

package/dist/lib/claims.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claims.js","sourceRoot":"","sources":["../../lib/claims.ts"],"names":[],"mappings":"AASA,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAExC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA;QACjF,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,SAAS,CAAA;QACnE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAA;QAE3C,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;QAC3C,IAAI,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,SAAS,CAAA;QAElE,OAAO,MAAuB,CAAA;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,MAAiC;IAC1E,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAC7B,OAAO,CACL,MAAM,CAAC,kBAAkB;QACzB,MAAM,CAAC,6BAA6B,CAAC,EAAE,kBAAkB;QACzD,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9B,CAAA;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAiC;IACtE,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAC7B,OAAO,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,gCAAgC,CAAC,EAAE,KAAK,CAAA;AACxE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAiC;IACrE,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAC7B,OAAO,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,6BAA6B,CAAC,EAAE,iBAAiB,CAAA;AAChF,CAAC"}

package/dist/lib/codex-native.d.ts

@@ -0,0 +1,74 @@
+import type { Hooks, PluginInput } from "@opencode-ai/plugin";
+import { type IdTokenClaims } from "./claims";
+import type { Logger } from "./logger";
+import type { AccountRecord, OpenAIAuthMode, OpenAIOAuthDomain } from "./types";
+import type { CodexSpoofMode, CustomSettings, PersonalityOption, PluginRuntimeMode } from "./config";
+type BrowserOpenInvocation = {
+    command: string;
+    args: string[];
+};
+export declare function browserOpenInvocationFor(url: string, platform?: NodeJS.Platform): BrowserOpenInvocation;
+export declare function tryOpenUrlInBrowser(url: string, log?: Logger): Promise<boolean>;
+type PkceCodes = {
+    verifier: string;
+    challenge: string;
+};
+declare function generatePKCE(): Promise<PkceCodes>;
+export declare function extractAccountIdFromClaims(claims: IdTokenClaims | undefined): string | undefined;
+type TokensWithClaims = {
+    id_token?: string;
+    access_token?: string;
+};
+export declare function extractAccountId(tokens: TokensWithClaims | undefined): string | undefined;
+export type TokenResponse = {
+    id_token?: string;
+    access_token: string;
+    refresh_token: string;
+    expires_in?: number;
+};
+declare function buildAuthorizeUrl(redirectUri: string, pkce: PkceCodes, state: string, originator: "opencode" | "codex_cli_rs"): string;
+export declare const __testOnly: {
+    buildAuthorizeUrl: typeof buildAuthorizeUrl;
+    generatePKCE: typeof generatePKCE;
+    buildOAuthSuccessHtml: typeof buildOAuthSuccessHtml;
+    buildOAuthErrorHtml: typeof buildOAuthErrorHtml;
+    composeCodexSuccessRedirectUrl: typeof composeCodexSuccessRedirectUrl;
+    modeForRuntimeMode: typeof modeForRuntimeMode;
+    buildCodexUserAgent: typeof buildCodexUserAgent;
+    resolveRequestUserAgent: typeof resolveRequestUserAgent;
+    resolveHookAgentName: typeof resolveHookAgentName;
+    resolveCollaborationModeKind: typeof resolveCollaborationModeKind;
+    resolveSubagentHeaderValue: typeof resolveSubagentHeaderValue;
+    stopOAuthServer: typeof stopOAuthServer;
+};
+export declare function refreshAccessToken(refreshToken: string): Promise<TokenResponse>;
+declare function composeCodexSuccessRedirectUrl(tokens: TokenResponse, options?: {
+    issuer?: string;
+    port?: number;
+}): string;
+declare function buildOAuthSuccessHtml(mode?: CodexSpoofMode): string;
+declare function buildOAuthErrorHtml(error: string): string;
+declare function stopOAuthServer(): void;
+declare function modeForRuntimeMode(runtimeMode: PluginRuntimeMode): OpenAIAuthMode;
+export declare function upsertAccount(openai: OpenAIOAuthDomain, incoming: AccountRecord): AccountRecord;
+type CodexOriginator = "codex_cli_rs" | "codex_exec";
+declare function buildCodexUserAgent(originator: CodexOriginator): string;
+declare function resolveRequestUserAgent(spoofMode: CodexSpoofMode, originator: CodexOriginator): string;
+type CodexCollaborationModeKind = "plan" | "code" | "execute" | "pair_programming";
+declare function resolveHookAgentName(agent: unknown): string | undefined;
+declare function resolveCollaborationModeKind(agent: unknown): CodexCollaborationModeKind;
+declare function resolveSubagentHeaderValue(agent: unknown): string | undefined;
+export type CodexAuthPluginOptions = {
+    log?: Logger;
+    personality?: PersonalityOption;
+    customSettings?: CustomSettings;
+    mode?: PluginRuntimeMode;
+    quietMode?: boolean;
+    pidOffsetEnabled?: boolean;
+    spoofMode?: CodexSpoofMode;
+    compatInputSanitizer?: boolean;
+    headerSnapshots?: boolean;
+};
+export declare function CodexAuthPlugin(input: PluginInput, opts?: CodexAuthPluginOptions): Promise<Hooks>;
+export {};
+//# sourceMappingURL=codex-native.d.ts.map

package/dist/lib/codex-native.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-native.d.ts","sourceRoot":"","sources":["../../lib/codex-native.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAS7D,OAAO,EAKL,KAAK,aAAa,EACnB,MAAM,UAAU,CAAA;AAuBjB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AACtC,OAAO,KAAK,EAEV,aAAa,EAEb,cAAc,EACd,iBAAiB,EAClB,MAAM,SAAS,CAAA;AAEhB,OAAO,KAAK,EACV,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,UAAU,CAAA;AAiFjB,KAAK,qBAAqB,GAAG;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,EAAE,CAAA;CACf,CAAA;AAED,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,MAAM,EACX,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,qBAAqB,CAQvB;AAED,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,MAAM,EACX,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,OAAO,CAAC,CAoBlB;AAWD,KAAK,SAAS,GAAG;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,iBAAe,YAAY,IAAI,OAAO,CAAC,SAAS,CAAC,CAKhD;AAcD,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,GACxE,MAAM,GACN,SAAS,CAEZ;AAED,KAAK,gBAAgB,GAAG;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAazF;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAWD,iBAAS,iBAAiB,CACxB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,SAAS,EACf,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,UAAU,GAAG,cAAc,GACtC,MAAM,CAiBR;AAED,eAAO,MAAM,UAAU;;;;;;;;;;;;;CAatB,CAAA;AAyBD,wBAAsB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAoCrF;AAsBD,iBAAS,8BAA8B,CACrC,MAAM,EAAE,aAAa,EACrB,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/C,MAAM,CAuBR;AAED,iBAAS,qBAAqB,CAAC,IAAI,GAAE,cAAwB,GAAG,MAAM,CAyCrE;AAED,iBAAS,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CA0ClD;AAkLD,iBAAS,eAAe,IAAI,IAAI,CAM/B;AA0DD,iBAAS,kBAAkB,CAAC,WAAW,EAAE,iBAAiB,GAAG,cAAc,CAE1E;AAiCD,wBAAgB,aAAa,CAC3B,MAAM,EAAE,iBAAiB,EACzB,QAAQ,EAAE,aAAa,GACtB,aAAa,CAyDf;AAsBD,KAAK,eAAe,GAAG,cAAc,GAAG,YAAY,CAAA;AAuMpD,iBAAS,mBAAmB,CAAC,UAAU,EAAE,eAAe,GAAG,MAAM,CAKhE;AAED,iBAAS,uBAAuB,CAAC,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,eAAe,GAAG,MAAM,CAG/F;AAED,KAAK,0BAA0B,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,kBAAkB,CAAA;AAOlF,iBAAS,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAKhE;AAwDD,iBAAS,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,0BAA0B,CAGhF;AAkBD,iBAAS,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CA6BtE;AAsMD,MAAM,MAAM,sBAAsB,GAAG;IACnC,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,iBAAiB,CAAA;IAC/B,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B,IAAI,CAAC,EAAE,iBAAiB,CAAA;IACxB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,SAAS,CAAC,EAAE,cAAc,CAAA;IAC1B,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAC9B,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B,CAAA;AAyVD,wBAAsB,eAAe,CACnC,KAAK,EAAE,WAAW,EAClB,IAAI,GAAE,sBAA2B,GAChC,OAAO,CAAC,KAAK,CAAC,CAglChB"}