@iam-brain/opencode-codex-auth 0.3.0 → 0.3.2

package/dist/lib/codex-native/auth-menu-quotas.js

@@ -0,0 +1,111 @@
+import { extractEmailFromClaims, extractPlanFromClaims, parseJwtClaims } from "../claims";
+import { loadSnapshots, saveSnapshots } from "../codex-status-storage";
+import { fetchQuotaSnapshotFromBackend } from "../codex-quota-fetch";
+import { defaultSnapshotsPath } from "../paths";
+import { resolveRequestUserAgent } from "./client-identity";
+import { resolveCodexOriginator } from "./originator";
+import { hydrateAccountIdentityFromAccessClaims } from "./accounts";
+import { extractAccountId, refreshAccessToken } from "./oauth-utils";
+import { ensureOpenAIOAuthDomain, listOpenAIOAuthDomains, loadAuthStorage, saveAuthStorage } from "../storage";
+const AUTH_MENU_QUOTA_SNAPSHOT_TTL_MS = 60_000;
+const AUTH_MENU_QUOTA_FAILURE_COOLDOWN_MS = 30_000;
+const AUTH_MENU_QUOTA_FETCH_TIMEOUT_MS = 5000;
+export async function refreshQuotaSnapshotsForAuthMenu(input) {
+    const auth = await loadAuthStorage();
+    const snapshotPath = defaultSnapshotsPath();
+    const existingSnapshots = await loadSnapshots(snapshotPath).catch(() => ({}));
+    const snapshotUpdates = {};
+    for (const { mode, domain } of listOpenAIOAuthDomains(auth)) {
+        for (let index = 0; index < domain.accounts.length; index += 1) {
+            const account = domain.accounts[index];
+            if (!account || account.enabled === false)
+                continue;
+            hydrateAccountIdentityFromAccessClaims(account);
+            const identityKey = account.identityKey;
+            const now = Date.now();
+            if (identityKey) {
+                const cooldownUntil = input.cooldownByIdentity.get(identityKey);
+                if (typeof cooldownUntil === "number" && cooldownUntil > now)
+                    continue;
+                const existing = existingSnapshots[identityKey];
+                if (existing &&
+                    typeof existing.updatedAt === "number" &&
+                    Number.isFinite(existing.updatedAt) &&
+                    now - existing.updatedAt < AUTH_MENU_QUOTA_SNAPSHOT_TTL_MS) {
+                    continue;
+                }
+            }
+            let accessToken = typeof account.access === "string" && account.access.length > 0 ? account.access : undefined;
+            const expired = typeof account.expires === "number" && Number.isFinite(account.expires) && account.expires <= now;
+            if ((!accessToken || expired) && account.refresh) {
+                try {
+                    await saveAuthStorage(undefined, async (authFile) => {
+                        const current = ensureOpenAIOAuthDomain(authFile, mode);
+                        const target = current.accounts[index];
+                        if (!target || target.enabled === false || !target.refresh)
+                            return authFile;
+                        const tokens = await refreshAccessToken(target.refresh);
+                        const refreshedAt = Date.now();
+                        const claims = parseJwtClaims(tokens.id_token ?? tokens.access_token);
+                        target.refresh = tokens.refresh_token;
+                        target.access = tokens.access_token;
+                        target.expires = refreshedAt + (tokens.expires_in ?? 3600) * 1000;
+                        target.accountId = extractAccountId(tokens) || target.accountId;
+                        target.email = extractEmailFromClaims(claims) || target.email;
+                        target.plan = extractPlanFromClaims(claims) || target.plan;
+                        target.lastUsed = refreshedAt;
+                        hydrateAccountIdentityFromAccessClaims(target);
+                        account.refresh = target.refresh;
+                        account.access = target.access;
+                        account.expires = target.expires;
+                        account.accountId = target.accountId;
+                        account.email = target.email;
+                        account.plan = target.plan;
+                        account.identityKey = target.identityKey;
+                        accessToken = target.access;
+                        return authFile;
+                    });
+                }
+                catch (error) {
+                    if (identityKey) {
+                        input.cooldownByIdentity.set(identityKey, Date.now() + AUTH_MENU_QUOTA_FAILURE_COOLDOWN_MS);
+                    }
+                    input.log?.debug("quota check refresh failed", {
+                        index,
+                        mode,
+                        error: error instanceof Error ? error.message : String(error)
+                    });
+                }
+            }
+            if (!accessToken)
+                continue;
+            if (!account.identityKey) {
+                hydrateAccountIdentityFromAccessClaims(account);
+            }
+            if (!account.identityKey)
+                continue;
+            const snapshot = await fetchQuotaSnapshotFromBackend({
+                accessToken,
+                accountId: account.accountId,
+                now: Date.now(),
+                modelFamily: "gpt-5.3-codex",
+                userAgent: resolveRequestUserAgent(input.spoofMode, resolveCodexOriginator(input.spoofMode)),
+                log: input.log,
+                timeoutMs: AUTH_MENU_QUOTA_FETCH_TIMEOUT_MS
+            });
+            if (!snapshot) {
+                input.cooldownByIdentity.set(account.identityKey, Date.now() + AUTH_MENU_QUOTA_FAILURE_COOLDOWN_MS);
+                continue;
+            }
+            input.cooldownByIdentity.delete(account.identityKey);
+            snapshotUpdates[account.identityKey] = snapshot;
+        }
+    }
+    if (Object.keys(snapshotUpdates).length === 0)
+        return;
+    await saveSnapshots(snapshotPath, (current) => ({
+        ...current,
+        ...snapshotUpdates
+    }));
+}
+//# sourceMappingURL=auth-menu-quotas.js.map

package/dist/lib/codex-native/auth-menu-quotas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-menu-quotas.js","sourceRoot":"","sources":["../../../lib/codex-native/auth-menu-quotas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AACzF,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACtE,OAAO,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAA;AAGpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AAE/C,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAA;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AACrD,OAAO,EAAE,sCAAsC,EAAE,MAAM,YAAY,CAAA;AACnE,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAA;AACpE,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAE9G,MAAM,+BAA+B,GAAG,MAAM,CAAA;AAC9C,MAAM,mCAAmC,GAAG,MAAM,CAAA;AAClD,MAAM,gCAAgC,GAAG,IAAI,CAAA;AAQ7C,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,KAAiC;IACtF,MAAM,IAAI,GAAG,MAAM,eAAe,EAAE,CAAA;IACpC,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAA;IAC3C,MAAM,iBAAiB,GAA2C,MAAM,aAAa,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACrH,MAAM,eAAe,GAA2C,EAAE,CAAA;IAElE,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;YACtC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK;gBAAE,SAAQ;YAEnD,sCAAsC,CAAC,OAAO,CAAC,CAAA;YAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;YACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACtB,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,aAAa,GAAG,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;gBAC/D,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,GAAG,GAAG;oBAAE,SAAQ;gBACtE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAA;gBAC/C,IACE,QAAQ;oBACR,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ;oBACtC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;oBACnC,GAAG,GAAG,QAAQ,CAAC,SAAS,GAAG,+BAA+B,EAC1D,CAAC;oBACD,SAAQ;gBACV,CAAC;YACH,CAAC;YAED,IAAI,WAAW,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;YAC9G,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,IAAI,GAAG,CAAA;YAEjH,IAAI,CAAC,CAAC,WAAW,IAAI,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACjD,IAAI,CAAC;oBACH,MAAM,eAAe,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;wBAClD,MAAM,OAAO,GAAG,uBAAuB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;wBACvD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;wBACtC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO;4BAAE,OAAO,QAAQ,CAAA;wBAE3E,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;wBACvD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;wBAC9B,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,YAAY,CAAC,CAAA;wBAErE,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,aAAa,CAAA;wBACrC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,YAAY,CAAA;wBACnC,MAAM,CAAC,OAAO,GAAG,WAAW,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,IAAI,CAAA;wBACjE,MAAM,CAAC,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,CAAA;wBAC/D,MAAM,CAAC,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAA;wBAC7D,MAAM,CAAC,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAA;wBAC1D,MAAM,CAAC,QAAQ,GAAG,WAAW,CAAA;wBAC7B,sCAAsC,CAAC,MAAM,CAAC,CAAA;wBAE9C,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;wBAChC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;wBAC9B,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;wBAChC,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;wBACpC,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAA;wBAC5B,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAA;wBAC1B,OAAO,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAA;wBACxC,WAAW,GAAG,MAAM,CAAC,MAAM,CAAA;wBAE3B,OAAO,QAAQ,CAAA;oBACjB,CAAC,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,WAAW,EAAE,CAAC;wBAChB,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,mCAAmC,CAAC,CAAA;oBAC7F,CAAC;oBACD,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,4BAA4B,EAAE;wBAC7C,KAAK;wBACL,IAAI;wBACJ,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;YAED,IAAI,CAAC,WAAW;gBAAE,SAAQ;YAE1B,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;gBACzB,sCAAsC,CAAC,OAAO,CAAC,CAAA;YACjD,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,WAAW;gBAAE,SAAQ;YAElC,MAAM,QAAQ,GAAG,MAAM,6BAA6B,CAAC;gBACnD,WAAW;gBACX,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;gBACf,WAAW,EAAE,eAAe;gBAC5B,SAAS,EAAE,uBAAuB,CAAC,KAAK,CAAC,SAAS,EAAE,sBAAsB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAC5F,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,SAAS,EAAE,gCAAgC;aAC5C,CAAC,CAAA;YACF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,mCAAmC,CAAC,CAAA;gBACnG,SAAQ;YACV,CAAC;YAED,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;YAEpD,eAAe,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,QAAQ,CAAA;QACjD,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAErD,MAAM,aAAa,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC9C,GAAG,OAAO;QACV,GAAG,eAAe;KACnB,CAAC,CAAC,CAAA;AACL,CAAC"}

package/dist/lib/codex-native/catalog-sync.d.ts

@@ -0,0 +1,28 @@
+import type { PersonalityOption } from "../config";
+import type { Logger } from "../logger";
+import { type CodexModelInfo } from "../model-catalog";
+import type { OpenAIAuthMode, RotationStrategy } from "../types";
+type CatalogHeaders = {
+    originator: string;
+    userAgent: string;
+    clientVersion: string;
+    versionHeader: string;
+    openaiBeta?: string;
+};
+export declare function initializeCatalogSync(input: {
+    authMode: OpenAIAuthMode;
+    pidOffsetEnabled: boolean;
+    rotationStrategy?: RotationStrategy;
+    resolveCatalogHeaders: () => CatalogHeaders;
+    providerModels: Record<string, Record<string, unknown>>;
+    fallbackModels: string[];
+    personality?: PersonalityOption;
+    log?: Logger;
+    getLastCatalogModels: () => CodexModelInfo[] | undefined;
+    setLastCatalogModels: (models: CodexModelInfo[] | undefined) => void;
+}): Promise<(auth: {
+    accessToken?: string;
+    accountId?: string;
+}) => Promise<CodexModelInfo[] | undefined>>;
+export {};
+//# sourceMappingURL=catalog-sync.d.ts.map

package/dist/lib/codex-native/catalog-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-sync.d.ts","sourceRoot":"","sources":["../../../lib/codex-native/catalog-sync.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAA2D,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAC/G,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAGhE,KAAK,cAAc,GAAG;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,MAAM,CAAA;IACrB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,QAAQ,EAAE,cAAc,CAAA;IACxB,gBAAgB,EAAE,OAAO,CAAA;IACzB,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IACnC,qBAAqB,EAAE,MAAM,cAAc,CAAA;IAC3C,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IACvD,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,WAAW,CAAC,EAAE,iBAAiB,CAAA;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,oBAAoB,EAAE,MAAM,cAAc,EAAE,GAAG,SAAS,CAAA;IACxD,oBAAoB,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,SAAS,KAAK,IAAI,CAAA;CACrE,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC,cAAc,EAAE,GAAG,SAAS,CAAC,CAAC,CAmCzG"}

package/dist/lib/codex-native/catalog-sync.js

@@ -0,0 +1,36 @@
+import { applyCodexCatalogToProviderModels, getCodexModelCatalog } from "../model-catalog";
+import { selectCatalogAuthCandidate } from "./catalog-auth";
+export async function initializeCatalogSync(input) {
+    const catalogAuth = await selectCatalogAuthCandidate(input.authMode, input.pidOffsetEnabled, input.rotationStrategy);
+    const applyCatalogModels = (models) => {
+        if (models) {
+            input.setLastCatalogModels(models);
+        }
+        applyCodexCatalogToProviderModels({
+            providerModels: input.providerModels,
+            catalogModels: models ?? input.getLastCatalogModels(),
+            fallbackModels: input.fallbackModels,
+            personality: input.personality
+        });
+    };
+    const initialCatalog = await getCodexModelCatalog({
+        accessToken: catalogAuth.accessToken,
+        accountId: catalogAuth.accountId,
+        ...input.resolveCatalogHeaders(),
+        onEvent: (event) => input.log?.debug("codex model catalog", event)
+    });
+    applyCatalogModels(initialCatalog);
+    return async (auth) => {
+        if (!auth.accessToken)
+            return undefined;
+        const refreshedCatalog = await getCodexModelCatalog({
+            accessToken: auth.accessToken,
+            accountId: auth.accountId,
+            ...input.resolveCatalogHeaders(),
+            onEvent: (event) => input.log?.debug("codex model catalog", event)
+        });
+        applyCatalogModels(refreshedCatalog);
+        return refreshedCatalog;
+    };
+}
+//# sourceMappingURL=catalog-sync.js.map

package/dist/lib/codex-native/catalog-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-sync.js","sourceRoot":"","sources":["../../../lib/codex-native/catalog-sync.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iCAAiC,EAAE,oBAAoB,EAAuB,MAAM,kBAAkB,CAAA;AAE/G,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAA;AAU3D,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAW3C;IACC,MAAM,WAAW,GAAG,MAAM,0BAA0B,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAA;IAEpH,MAAM,kBAAkB,GAAG,CAAC,MAAoC,EAAQ,EAAE;QACxE,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAA;QACpC,CAAC;QACD,iCAAiC,CAAC;YAChC,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,aAAa,EAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,EAAE;YACrD,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC,CAAA;IACJ,CAAC,CAAA;IAED,MAAM,cAAc,GAAG,MAAM,oBAAoB,CAAC;QAChD,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,GAAG,KAAK,CAAC,qBAAqB,EAAE;QAChC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC;KACnE,CAAC,CAAA;IAEF,kBAAkB,CAAC,cAAc,CAAC,CAAA;IAElC,OAAO,KAAK,EAAE,IAAkD,EAAyC,EAAE;QACzG,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO,SAAS,CAAA;QACvC,MAAM,gBAAgB,GAAG,MAAM,oBAAoB,CAAC;YAClD,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG,KAAK,CAAC,qBAAqB,EAAE;YAChC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC;SACnE,CAAC,CAAA;QACF,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;QACpC,OAAO,gBAAgB,CAAA;IACzB,CAAC,CAAA;AACH,CAAC"}

package/dist/lib/codex-native/chat-hooks.d.ts

@@ -0,0 +1,76 @@
+import type { PluginInput } from "@opencode-ai/plugin";
+import type { BehaviorSettings, CodexSpoofMode, PersonalityOption } from "../config";
+import type { CodexModelInfo } from "../model-catalog";
+import { applyCodexRuntimeDefaultsToParams } from "./request-transform";
+export declare function handleChatMessageHook(input: {
+    hookInput: {
+        model?: {
+            providerID?: string;
+        };
+        sessionID: string;
+    };
+    output: {
+        parts: unknown[];
+    };
+    client: PluginInput["client"] | undefined;
+}): Promise<void>;
+export declare function handleChatParamsHook(input: {
+    hookInput: {
+        model: {
+            providerID?: string;
+            options?: unknown;
+            id: string;
+            api?: {
+                id?: string;
+            };
+            capabilities?: {
+                toolcall?: boolean;
+            };
+        };
+        message: unknown;
+    };
+    output: Parameters<typeof applyCodexRuntimeDefaultsToParams>[0]["output"];
+    lastCatalogModels: CodexModelInfo[] | undefined;
+    behaviorSettings?: BehaviorSettings;
+    fallbackPersonality?: PersonalityOption;
+    spoofMode: CodexSpoofMode;
+}): Promise<void>;
+export declare function handleChatHeadersHook(input: {
+    hookInput: {
+        model: {
+            providerID?: string;
+        };
+        sessionID: string;
+    };
+    output: {
+        headers: Record<string, unknown>;
+    };
+    spoofMode: CodexSpoofMode;
+    internalCollaborationModeHeader: string;
+}): Promise<void>;
+export declare function handleSessionCompactingHook(input: {
+    enabled: boolean;
+    hookInput: {
+        sessionID: string;
+    };
+    output: {
+        prompt?: string;
+    };
+    client: PluginInput["client"] | undefined;
+    summaryPrefixSessions: Set<string>;
+    compactPrompt: string;
+}): Promise<void>;
+export declare function handleTextCompleteHook(input: {
+    enabled: boolean;
+    hookInput: {
+        sessionID: string;
+        messageID: string;
+    };
+    output: {
+        text: string;
+    };
+    client: PluginInput["client"] | undefined;
+    summaryPrefixSessions: Set<string>;
+    compactSummaryPrefix: string;
+}): Promise<void>;
+//# sourceMappingURL=chat-hooks.d.ts.map

package/dist/lib/codex-native/chat-hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-hooks.d.ts","sourceRoot":"","sources":["../../../lib/codex-native/chat-hooks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAEtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AACpF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAEtD,OAAO,EACL,iCAAiC,EAQlC,MAAM,qBAAqB,CAAA;AAoB5B,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,SAAS,EAAE;QAAE,KAAK,CAAC,EAAE;YAAE,UAAU,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;IACjE,MAAM,EAAE;QAAE,KAAK,EAAE,OAAO,EAAE,CAAA;KAAE,CAAA;IAC5B,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAA;CAC1C,GAAG,OAAO,CAAC,IAAI,CAAC,CAahB;AAED,wBAAsB,oBAAoB,CAAC,KAAK,EAAE;IAChD,SAAS,EAAE;QACT,KAAK,EAAE;YACL,UAAU,CAAC,EAAE,MAAM,CAAA;YACnB,OAAO,CAAC,EAAE,OAAO,CAAA;YACjB,EAAE,EAAE,MAAM,CAAA;YACV,GAAG,CAAC,EAAE;gBAAE,EAAE,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;YACrB,YAAY,CAAC,EAAE;gBAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;aAAE,CAAA;SACtC,CAAA;QACD,OAAO,EAAE,OAAO,CAAA;KACjB,CAAA;IACD,MAAM,EAAE,UAAU,CAAC,OAAO,iCAAiC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;IACzE,iBAAiB,EAAE,cAAc,EAAE,GAAG,SAAS,CAAA;IAC/C,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IACnC,mBAAmB,CAAC,EAAE,iBAAiB,CAAA;IACvC,SAAS,EAAE,cAAc,CAAA;CAC1B,GAAG,OAAO,CAAC,IAAI,CAAC,CAsEhB;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,SAAS,EAAE;QAAE,KAAK,EAAE;YAAE,UAAU,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;IAChE,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAA;IAC5C,SAAS,EAAE,cAAc,CAAA;IACzB,+BAA+B,EAAE,MAAM,CAAA;CACxC,GAAG,OAAO,CAAC,IAAI,CAAC,CAYhB;AAED,wBAAsB,2BAA2B,CAAC,KAAK,EAAE;IACvD,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;IAChC,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC3B,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAA;IACzC,qBAAqB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IAClC,aAAa,EAAE,MAAM,CAAA;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CAMhB;AAED,wBAAsB,sBAAsB,CAAC,KAAK,EAAE;IAClD,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;IACnD,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IACxB,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAA;IACzC,qBAAqB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IAClC,oBAAoB,EAAE,MAAM,CAAA;CAC7B,GAAG,OAAO,CAAC,IAAI,CAAC,CAchB"}

package/dist/lib/codex-native/chat-hooks.js

@@ -0,0 +1,136 @@
+import { getRuntimeDefaultsForModel, resolveInstructionsForModel } from "../model-catalog";
+import { applyCodexRuntimeDefaultsToParams, findCatalogModelForCandidates, getModelLookupCandidates, getModelThinkingSummariesOverride, getModelVerbosityEnabledOverride, getModelVerbosityOverride, getVariantLookupCandidates, resolvePersonalityForModel } from "./request-transform";
+import { resolveRequestUserAgent } from "./client-identity";
+import { resolveCodexOriginator } from "./originator";
+import { asString, getMessageProviderID, isRecord, readSessionMessageInfo, sessionUsesOpenAIProvider } from "./session-messages";
+function normalizeVerbositySetting(value) {
+    if (typeof value !== "string")
+        return undefined;
+    const normalized = value.trim().toLowerCase();
+    if (normalized === "default" || normalized === "low" || normalized === "medium" || normalized === "high") {
+        return normalized;
+    }
+    return undefined;
+}
+export async function handleChatMessageHook(input) {
+    const directProviderID = input.hookInput.model?.providerID;
+    const isOpenAI = directProviderID === "openai" ||
+        (directProviderID === undefined && (await sessionUsesOpenAIProvider(input.client, input.hookInput.sessionID)));
+    if (!isOpenAI)
+        return;
+    for (const part of input.output.parts) {
+        const partRecord = part;
+        if (asString(partRecord.type) !== "subtask")
+            continue;
+        if ((asString(partRecord.command) ?? "").trim().toLowerCase() !== "review")
+            continue;
+        partRecord.agent = "Codex Review";
+    }
+}
+export async function handleChatParamsHook(input) {
+    if (input.hookInput.model.providerID !== "openai")
+        return;
+    const modelOptions = isRecord(input.hookInput.model.options) ? input.hookInput.model.options : {};
+    const modelCandidates = getModelLookupCandidates({
+        id: input.hookInput.model.id,
+        api: { id: input.hookInput.model.api?.id }
+    });
+    const variantCandidates = getVariantLookupCandidates({
+        message: input.hookInput.message,
+        modelCandidates
+    });
+    const catalogModelFallback = findCatalogModelForCandidates(input.lastCatalogModels, modelCandidates);
+    const effectivePersonality = resolvePersonalityForModel({
+        behaviorSettings: input.behaviorSettings,
+        modelCandidates,
+        variantCandidates,
+        fallback: input.fallbackPersonality
+    });
+    const modelThinkingSummariesOverride = getModelThinkingSummariesOverride(input.behaviorSettings, modelCandidates, variantCandidates);
+    const modelVerbosityEnabledOverride = getModelVerbosityEnabledOverride(input.behaviorSettings, modelCandidates, variantCandidates);
+    const modelVerbosityOverride = getModelVerbosityOverride(input.behaviorSettings, modelCandidates, variantCandidates);
+    const globalBehavior = input.behaviorSettings?.global;
+    const globalVerbosityEnabled = typeof globalBehavior?.verbosityEnabled === "boolean" ? globalBehavior.verbosityEnabled : undefined;
+    const globalVerbosity = normalizeVerbositySetting(globalBehavior?.verbosity);
+    const catalogModelFromOptions = isRecord(modelOptions.codexCatalogModel)
+        ? modelOptions.codexCatalogModel
+        : undefined;
+    let renderedCatalogInstructions = catalogModelFromOptions
+        ? resolveInstructionsForModel(catalogModelFromOptions, effectivePersonality)
+        : undefined;
+    if (!renderedCatalogInstructions && catalogModelFallback) {
+        if (!catalogModelFromOptions) {
+            modelOptions.codexCatalogModel = catalogModelFallback;
+        }
+        renderedCatalogInstructions = resolveInstructionsForModel(catalogModelFallback, effectivePersonality);
+        const defaults = getRuntimeDefaultsForModel(catalogModelFallback);
+        if (defaults) {
+            modelOptions.codexRuntimeDefaults = defaults;
+        }
+    }
+    if (renderedCatalogInstructions) {
+        modelOptions.codexInstructions = renderedCatalogInstructions;
+    }
+    else {
+        const directModelInstructions = asString(input.hookInput.model.instructions);
+        if (directModelInstructions) {
+            modelOptions.codexInstructions = directModelInstructions;
+        }
+        else if (asString(modelOptions.codexInstructions) === undefined) {
+            delete modelOptions.codexInstructions;
+        }
+    }
+    applyCodexRuntimeDefaultsToParams({
+        modelOptions,
+        modelToolCallCapable: input.hookInput.model.capabilities?.toolcall,
+        thinkingSummariesOverride: modelThinkingSummariesOverride ?? globalBehavior?.thinkingSummaries,
+        verbosityEnabledOverride: modelVerbosityEnabledOverride ?? globalVerbosityEnabled,
+        verbosityOverride: modelVerbosityOverride ?? globalVerbosity,
+        preferCodexInstructions: input.spoofMode === "codex",
+        output: input.output
+    });
+}
+export async function handleChatHeadersHook(input) {
+    if (input.hookInput.model.providerID !== "openai")
+        return;
+    const originator = resolveCodexOriginator(input.spoofMode);
+    input.output.headers.originator = originator;
+    input.output.headers["User-Agent"] = resolveRequestUserAgent(input.spoofMode, originator);
+    input.output.headers.session_id = input.hookInput.sessionID;
+    delete input.output.headers["OpenAI-Beta"];
+    delete input.output.headers.conversation_id;
+    if (input.spoofMode !== "native") {
+        delete input.output.headers["x-openai-subagent"];
+        delete input.output.headers[input.internalCollaborationModeHeader];
+    }
+}
+export async function handleSessionCompactingHook(input) {
+    if (!input.enabled)
+        return;
+    if (await sessionUsesOpenAIProvider(input.client, input.hookInput.sessionID)) {
+        input.output.prompt = input.compactPrompt;
+        input.summaryPrefixSessions.add(input.hookInput.sessionID);
+    }
+}
+export async function handleTextCompleteHook(input) {
+    if (!input.enabled)
+        return;
+    if (!input.summaryPrefixSessions.has(input.hookInput.sessionID))
+        return;
+    const info = await readSessionMessageInfo(input.client, input.hookInput.sessionID, input.hookInput.messageID);
+    input.summaryPrefixSessions.delete(input.hookInput.sessionID);
+    if (!info)
+        return;
+    if (asString(info.role) !== "assistant")
+        return;
+    if (asString(info.agent) !== "compaction")
+        return;
+    if (info.summary !== true)
+        return;
+    if (getMessageProviderID(info) !== "openai")
+        return;
+    if (input.output.text.startsWith(input.compactSummaryPrefix))
+        return;
+    input.output.text = `${input.compactSummaryPrefix}\n${input.output.text.trimStart()}`;
+}
+//# sourceMappingURL=chat-hooks.js.map

package/dist/lib/codex-native/chat-hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-hooks.js","sourceRoot":"","sources":["../../../lib/codex-native/chat-hooks.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAA;AAC1F,OAAO,EACL,iCAAiC,EACjC,6BAA6B,EAC7B,wBAAwB,EACxB,iCAAiC,EACjC,gCAAgC,EAChC,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,EAC3B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAA;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AACrD,OAAO,EACL,QAAQ,EACR,oBAAoB,EACpB,QAAQ,EACR,sBAAsB,EACtB,yBAAyB,EAC1B,MAAM,oBAAoB,CAAA;AAE3B,SAAS,yBAAyB,CAAC,KAAc;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IAC/C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC7C,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QACzG,OAAO,UAAU,CAAA;IACnB,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAI3C;IACC,MAAM,gBAAgB,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,CAAA;IAC1D,MAAM,QAAQ,GACZ,gBAAgB,KAAK,QAAQ;QAC7B,CAAC,gBAAgB,KAAK,SAAS,IAAI,CAAC,MAAM,yBAAyB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IAChH,IAAI,CAAC,QAAQ;QAAE,OAAM;IAErB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,IAA+B,CAAA;QAClD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,SAAS;YAAE,SAAQ;QACrD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,QAAQ;YAAE,SAAQ;QACpF,UAAU,CAAC,KAAK,GAAG,cAAc,CAAA;IACnC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAgB1C;IACC,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAM;IACzD,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAA;IACjG,MAAM,eAAe,GAAG,wBAAwB,CAAC;QAC/C,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE;QAC5B,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE;KAC3C,CAAC,CAAA;IACF,MAAM,iBAAiB,GAAG,0BAA0B,CAAC;QACnD,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO;QAChC,eAAe;KAChB,CAAC,CAAA;IACF,MAAM,oBAAoB,GAAG,6BAA6B,CAAC,KAAK,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAA;IACpG,MAAM,oBAAoB,GAAG,0BAA0B,CAAC;QACtD,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,eAAe;QACf,iBAAiB;QACjB,QAAQ,EAAE,KAAK,CAAC,mBAAmB;KACpC,CAAC,CAAA;IACF,MAAM,8BAA8B,GAAG,iCAAiC,CACtE,KAAK,CAAC,gBAAgB,EACtB,eAAe,EACf,iBAAiB,CAClB,CAAA;IACD,MAAM,6BAA6B,GAAG,gCAAgC,CACpE,KAAK,CAAC,gBAAgB,EACtB,eAAe,EACf,iBAAiB,CAClB,CAAA;IACD,MAAM,sBAAsB,GAAG,yBAAyB,CAAC,KAAK,CAAC,gBAAgB,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAA;IACpH,MAAM,cAAc,GAAG,KAAK,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACrD,MAAM,sBAAsB,GAC1B,OAAO,cAAc,EAAE,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAA;IACrG,MAAM,eAAe,GAAG,yBAAyB,CAAC,cAAc,EAAE,SAAS,CAAC,CAAA;IAC5E,MAAM,uBAAuB,GAAG,QAAQ,CAAC,YAAY,CAAC,iBAAiB,CAAC;QACtE,CAAC,CAAE,YAAY,CAAC,iBAAoC;QACpD,CAAC,CAAC,SAAS,CAAA;IACb,IAAI,2BAA2B,GAAG,uBAAuB;QACvD,CAAC,CAAC,2BAA2B,CAAC,uBAAuB,EAAE,oBAAoB,CAAC;QAC5E,CAAC,CAAC,SAAS,CAAA;IAEb,IAAI,CAAC,2BAA2B,IAAI,oBAAoB,EAAE,CAAC;QACzD,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAC7B,YAAY,CAAC,iBAAiB,GAAG,oBAAoB,CAAA;QACvD,CAAC;QACD,2BAA2B,GAAG,2BAA2B,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAA;QACrG,MAAM,QAAQ,GAAG,0BAA0B,CAAC,oBAAoB,CAAC,CAAA;QACjE,IAAI,QAAQ,EAAE,CAAC;YACb,YAAY,CAAC,oBAAoB,GAAG,QAAQ,CAAA;QAC9C,CAAC;IACH,CAAC;IAED,IAAI,2BAA2B,EAAE,CAAC;QAChC,YAAY,CAAC,iBAAiB,GAAG,2BAA2B,CAAA;IAC9D,CAAC;SAAM,CAAC;QACN,MAAM,uBAAuB,GAAG,QAAQ,CAAE,KAAK,CAAC,SAAS,CAAC,KAAiC,CAAC,YAAY,CAAC,CAAA;QACzG,IAAI,uBAAuB,EAAE,CAAC;YAC5B,YAAY,CAAC,iBAAiB,GAAG,uBAAuB,CAAA;QAC1D,CAAC;aAAM,IAAI,QAAQ,CAAC,YAAY,CAAC,iBAAiB,CAAC,KAAK,SAAS,EAAE,CAAC;YAClE,OAAO,YAAY,CAAC,iBAAiB,CAAA;QACvC,CAAC;IACH,CAAC;IACD,iCAAiC,CAAC;QAChC,YAAY;QACZ,oBAAoB,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ;QAClE,yBAAyB,EAAE,8BAA8B,IAAI,cAAc,EAAE,iBAAiB;QAC9F,wBAAwB,EAAE,6BAA6B,IAAI,sBAAsB;QACjF,iBAAiB,EAAE,sBAAsB,IAAI,eAAe;QAC5D,uBAAuB,EAAE,KAAK,CAAC,SAAS,KAAK,OAAO;QACpD,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAK3C;IACC,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAM;IACzD,MAAM,UAAU,GAAG,sBAAsB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAC1D,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,GAAG,UAAU,CAAA;IAC5C,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,uBAAuB,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;IACzF,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,SAAS,CAAA;IAC3D,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;IAC1C,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAA;IAC3C,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAA;QAChD,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAA;IACpE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAOjD;IACC,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAM;IAC1B,IAAI,MAAM,yBAAyB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7E,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,aAAa,CAAA;QACzC,KAAK,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IAC5D,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAO5C;IACC,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAM;IAC1B,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC;QAAE,OAAM;IAEvE,MAAM,IAAI,GAAG,MAAM,sBAAsB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IAC7G,KAAK,CAAC,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IAC7D,IAAI,CAAC,IAAI;QAAE,OAAM;IACjB,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,WAAW;QAAE,OAAM;IAC/C,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,YAAY;QAAE,OAAM;IACjD,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;QAAE,OAAM;IACjC,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,QAAQ;QAAE,OAAM;IACnD,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,oBAAoB,CAAC;QAAE,OAAM;IAEpE,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,GAAG,KAAK,CAAC,oBAAoB,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAA;AACvF,CAAC"}

package/dist/lib/codex-native/oauth-auth-methods.d.ts

@@ -0,0 +1,45 @@
+import type { CodexSpoofMode } from "../config";
+import type { OpenAIAuthMode } from "../types";
+import { type PkceCodes, type TokenResponse } from "./oauth-utils";
+type OAuthSuccess = {
+    type: "success";
+    refresh: string;
+    access: string;
+    expires: number;
+    accountId?: string;
+};
+type OAuthFailure = {
+    type: "failed";
+};
+type OAuthCallbackResult = OAuthSuccess | OAuthFailure;
+type OAuthAuthorizePayload = {
+    url: string;
+    instructions: string;
+    method: "auto";
+    callback: () => Promise<OAuthCallbackResult>;
+};
+type AuthMenuResult = "add" | "exit";
+type BrowserAuthorizeDeps = {
+    authMode: OpenAIAuthMode;
+    spoofMode: CodexSpoofMode;
+    runInteractiveAuthMenu: (options: {
+        allowExit: boolean;
+    }) => Promise<AuthMenuResult>;
+    startOAuthServer: () => Promise<{
+        redirectUri: string;
+    }>;
+    waitForOAuthCallback: (pkce: PkceCodes, state: string, authMode: OpenAIAuthMode) => Promise<TokenResponse>;
+    scheduleOAuthServerStop: (delayMs: number, reason: "success" | "error" | "other") => void;
+    persistOAuthTokens: (tokens: TokenResponse) => Promise<void>;
+    openAuthUrl: (url: string) => void;
+    shutdownGraceMs: number;
+    shutdownErrorGraceMs: number;
+};
+type HeadlessAuthorizeDeps = {
+    spoofMode: CodexSpoofMode;
+    persistOAuthTokens: (tokens: TokenResponse) => Promise<void>;
+};
+export declare function createBrowserOAuthAuthorize(deps: BrowserAuthorizeDeps): (inputs?: Record<string, string>) => Promise<OAuthAuthorizePayload>;
+export declare function createHeadlessOAuthAuthorize(deps: HeadlessAuthorizeDeps): () => Promise<OAuthAuthorizePayload>;
+export {};
+//# sourceMappingURL=oauth-auth-methods.d.ts.map

package/dist/lib/codex-native/oauth-auth-methods.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-auth-methods.d.ts","sourceRoot":"","sources":["../../../lib/codex-native/oauth-auth-methods.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAC/C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AAG9C,OAAO,EAYL,KAAK,SAAS,EACd,KAAK,aAAa,EACnB,MAAM,eAAe,CAAA;AAEtB,KAAK,YAAY,GAAG;IAClB,IAAI,EAAE,SAAS,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,KAAK,YAAY,GAAG;IAClB,IAAI,EAAE,QAAQ,CAAA;CACf,CAAA;AAED,KAAK,mBAAmB,GAAG,YAAY,GAAG,YAAY,CAAA;AAEtD,KAAK,qBAAqB,GAAG;IAC3B,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAA;CAC7C,CAAA;AAED,KAAK,cAAc,GAAG,KAAK,GAAG,MAAM,CAAA;AAEpC,KAAK,oBAAoB,GAAG;IAC1B,QAAQ,EAAE,cAAc,CAAA;IACxB,SAAS,EAAE,cAAc,CAAA;IACzB,sBAAsB,EAAE,CAAC,OAAO,EAAE;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,cAAc,CAAC,CAAA;IACpF,gBAAgB,EAAE,MAAM,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACxD,oBAAoB,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,KAAK,OAAO,CAAC,aAAa,CAAC,CAAA;IAC1G,uBAAuB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,KAAK,IAAI,CAAA;IACzF,kBAAkB,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5D,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;IAClC,eAAe,EAAE,MAAM,CAAA;IACvB,oBAAoB,EAAE,MAAM,CAAA;CAC7B,CAAA;AAED,KAAK,qBAAqB,GAAG;IAC3B,SAAS,EAAE,cAAc,CAAA;IACzB,kBAAkB,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7D,CAAA;AAYD,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,oBAAoB,IACtD,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAG,OAAO,CAAC,qBAAqB,CAAC,CA+G/E;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,qBAAqB,SACrD,OAAO,CAAC,qBAAqB,CAAC,CA6FhD"}

package/dist/lib/codex-native/oauth-auth-methods.js

@@ -0,0 +1,171 @@
+import { resolveRequestUserAgent } from "./client-identity";
+import { resolveCodexOriginator } from "./originator";
+import { buildAuthorizeUrl, CLIENT_ID, extractAccountId, fetchWithTimeout, generatePKCE, generateState, ISSUER, OAUTH_DEVICE_AUTH_TIMEOUT_MS, OAUTH_HTTP_TIMEOUT_MS, OAUTH_POLLING_SAFETY_MARGIN_MS, sleep } from "./oauth-utils";
+function toOAuthSuccess(tokens) {
+    return {
+        type: "success",
+        refresh: tokens.refresh_token,
+        access: tokens.access_token,
+        expires: Date.now() + (tokens.expires_in ?? 3600) * 1000,
+        accountId: extractAccountId(tokens)
+    };
+}
+export function createBrowserOAuthAuthorize(deps) {
+    return async (inputs) => {
+        const runSingleBrowserOAuthInline = async () => {
+            const { redirectUri } = await deps.startOAuthServer();
+            const pkce = await generatePKCE();
+            const state = generateState();
+            const authUrl = buildAuthorizeUrl(redirectUri, pkce, state, deps.spoofMode === "codex" ? "codex_cli_rs" : "opencode");
+            const callbackPromise = deps.waitForOAuthCallback(pkce, state, deps.authMode);
+            deps.openAuthUrl(authUrl);
+            process.stdout.write(`\nGo to: ${authUrl}\n`);
+            process.stdout.write("Complete authorization in your browser. This window will close automatically.\n");
+            let authFailed = false;
+            try {
+                const tokens = await callbackPromise;
+                await deps.persistOAuthTokens(tokens);
+                process.stdout.write("\nAccount added.\n\n");
+                return tokens;
+            }
+            catch (error) {
+                authFailed = true;
+                const reason = error instanceof Error ? error.message : "Authorization failed";
+                process.stdout.write(`\nAuthorization failed: ${reason}\n\n`);
+                return null;
+            }
+            finally {
+                deps.scheduleOAuthServerStop(authFailed ? deps.shutdownErrorGraceMs : deps.shutdownGraceMs, authFailed ? "error" : "success");
+            }
+        };
+        const runInteractiveBrowserAuthLoop = async () => {
+            let lastAddedTokens;
+            while (true) {
+                const menuResult = await deps.runInteractiveAuthMenu({ allowExit: true });
+                if (menuResult === "exit") {
+                    if (!lastAddedTokens) {
+                        return {
+                            url: "",
+                            method: "auto",
+                            instructions: "Login cancelled.",
+                            callback: async () => ({ type: "failed" })
+                        };
+                    }
+                    const latest = lastAddedTokens;
+                    return {
+                        url: "",
+                        method: "auto",
+                        instructions: "",
+                        callback: async () => toOAuthSuccess(latest)
+                    };
+                }
+                const tokens = await runSingleBrowserOAuthInline();
+                if (tokens) {
+                    lastAddedTokens = tokens;
+                    continue;
+                }
+                return {
+                    url: "",
+                    method: "auto",
+                    instructions: "Authorization failed.",
+                    callback: async () => ({ type: "failed" })
+                };
+            }
+        };
+        if (inputs && process.env.OPENCODE_NO_BROWSER !== "1" && process.stdin.isTTY && process.stdout.isTTY) {
+            return runInteractiveBrowserAuthLoop();
+        }
+        const { redirectUri } = await deps.startOAuthServer();
+        const pkce = await generatePKCE();
+        const state = generateState();
+        const authUrl = buildAuthorizeUrl(redirectUri, pkce, state, deps.spoofMode === "codex" ? "codex_cli_rs" : "opencode");
+        const callbackPromise = deps.waitForOAuthCallback(pkce, state, deps.authMode);
+        deps.openAuthUrl(authUrl);
+        return {
+            url: authUrl,
+            instructions: "Complete authorization in your browser. If you close the tab early, cancel (Ctrl+C) and retry.",
+            method: "auto",
+            callback: async () => {
+                let authFailed = false;
+                try {
+                    const tokens = await callbackPromise;
+                    await deps.persistOAuthTokens(tokens);
+                    return toOAuthSuccess(tokens);
+                }
+                catch {
+                    authFailed = true;
+                    return { type: "failed" };
+                }
+                finally {
+                    deps.scheduleOAuthServerStop(authFailed ? deps.shutdownErrorGraceMs : deps.shutdownGraceMs, authFailed ? "error" : "success");
+                }
+            }
+        };
+    };
+}
+export function createHeadlessOAuthAuthorize(deps) {
+    return async () => {
+        const deviceResponse = await fetchWithTimeout(`${ISSUER}/api/accounts/deviceauth/usercode`, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                "User-Agent": resolveRequestUserAgent(deps.spoofMode, resolveCodexOriginator(deps.spoofMode))
+            },
+            body: JSON.stringify({ client_id: CLIENT_ID })
+        }, OAUTH_HTTP_TIMEOUT_MS);
+        if (!deviceResponse.ok) {
+            throw new Error("Failed to initiate device authorization");
+        }
+        const deviceData = (await deviceResponse.json());
+        const interval = Math.max(parseInt(deviceData.interval) || 5, 1) * 1000;
+        return {
+            url: `${ISSUER}/codex/device`,
+            instructions: `Enter code: ${deviceData.user_code}`,
+            method: "auto",
+            async callback() {
+                const startedAt = Date.now();
+                while (true) {
+                    if (Date.now() - startedAt > OAUTH_DEVICE_AUTH_TIMEOUT_MS) {
+                        return { type: "failed" };
+                    }
+                    const response = await fetchWithTimeout(`${ISSUER}/api/accounts/deviceauth/token`, {
+                        method: "POST",
+                        headers: {
+                            "Content-Type": "application/json",
+                            "User-Agent": resolveRequestUserAgent(deps.spoofMode, resolveCodexOriginator(deps.spoofMode))
+                        },
+                        body: JSON.stringify({
+                            device_auth_id: deviceData.device_auth_id,
+                            user_code: deviceData.user_code
+                        })
+                    }, OAUTH_HTTP_TIMEOUT_MS);
+                    if (response.ok) {
+                        const data = (await response.json());
+                        const tokenResponse = await fetchWithTimeout(`${ISSUER}/oauth/token`, {
+                            method: "POST",
+                            headers: { "Content-Type": "application/x-www-form-urlencoded" },
+                            body: new URLSearchParams({
+                                grant_type: "authorization_code",
+                                code: data.authorization_code,
+                                redirect_uri: `${ISSUER}/deviceauth/callback`,
+                                client_id: CLIENT_ID,
+                                code_verifier: data.code_verifier
+                            }).toString()
+                        }, OAUTH_HTTP_TIMEOUT_MS);
+                        if (!tokenResponse.ok) {
+                            throw new Error(`Token exchange failed: ${tokenResponse.status}`);
+                        }
+                        const tokens = (await tokenResponse.json());
+                        await deps.persistOAuthTokens(tokens);
+                        return toOAuthSuccess(tokens);
+                    }
+                    if (response.status !== 403 && response.status !== 404) {
+                        return { type: "failed" };
+                    }
+                    await sleep(interval + OAUTH_POLLING_SAFETY_MARGIN_MS);
+                }
+            }
+        };
+    };
+}
+//# sourceMappingURL=oauth-auth-methods.js.map