@iam-brain/opencode-codex-auth 0.3.1 → 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (215) hide show
  1. package/README.md +4 -2
  2. package/dist/index.d.ts.map +1 -1
  3. package/dist/index.js +45 -6
  4. package/dist/index.js.map +1 -1
  5. package/dist/lib/accounts-tools.d.ts.map +1 -1
  6. package/dist/lib/accounts-tools.js +88 -4
  7. package/dist/lib/accounts-tools.js.map +1 -1
  8. package/dist/lib/auth-refresh.d.ts +2 -0
  9. package/dist/lib/auth-refresh.d.ts.map +1 -0
  10. package/dist/lib/auth-refresh.js +2 -0
  11. package/dist/lib/auth-refresh.js.map +1 -0
  12. package/dist/lib/cache-io.d.ts +24 -0
  13. package/dist/lib/cache-io.d.ts.map +1 -0
  14. package/dist/lib/cache-io.js +95 -0
  15. package/dist/lib/cache-io.js.map +1 -0
  16. package/dist/lib/cache-lock.d.ts +7 -0
  17. package/dist/lib/cache-lock.d.ts.map +1 -0
  18. package/dist/lib/cache-lock.js +37 -0
  19. package/dist/lib/cache-lock.js.map +1 -0
  20. package/dist/lib/claims.d.ts.map +1 -1
  21. package/dist/lib/claims.js +4 -1
  22. package/dist/lib/claims.js.map +1 -1
  23. package/dist/lib/codex-cache-layout.d.ts +15 -0
  24. package/dist/lib/codex-cache-layout.d.ts.map +1 -0
  25. package/dist/lib/codex-cache-layout.js +52 -0
  26. package/dist/lib/codex-cache-layout.js.map +1 -0
  27. package/dist/lib/codex-native/accounts.d.ts +21 -0
  28. package/dist/lib/codex-native/accounts.d.ts.map +1 -0
  29. package/dist/lib/codex-native/accounts.js +203 -0
  30. package/dist/lib/codex-native/accounts.js.map +1 -0
  31. package/dist/lib/codex-native/acquire-auth.d.ts +22 -0
  32. package/dist/lib/codex-native/acquire-auth.d.ts.map +1 -0
  33. package/dist/lib/codex-native/acquire-auth.js +389 -0
  34. package/dist/lib/codex-native/acquire-auth.js.map +1 -0
  35. package/dist/lib/codex-native/auth-menu-flow.d.ts +9 -0
  36. package/dist/lib/codex-native/auth-menu-flow.d.ts.map +1 -0
  37. package/dist/lib/codex-native/auth-menu-flow.js +304 -0
  38. package/dist/lib/codex-native/auth-menu-flow.js.map +1 -0
  39. package/dist/lib/codex-native/auth-menu-quotas.d.ts +9 -0
  40. package/dist/lib/codex-native/auth-menu-quotas.d.ts.map +1 -0
  41. package/dist/lib/codex-native/auth-menu-quotas.js +213 -0
  42. package/dist/lib/codex-native/auth-menu-quotas.js.map +1 -0
  43. package/dist/lib/codex-native/catalog-auth.d.ts.map +1 -1
  44. package/dist/lib/codex-native/catalog-auth.js +4 -1
  45. package/dist/lib/codex-native/catalog-auth.js.map +1 -1
  46. package/dist/lib/codex-native/catalog-sync.d.ts +28 -0
  47. package/dist/lib/codex-native/catalog-sync.d.ts.map +1 -0
  48. package/dist/lib/codex-native/catalog-sync.js +36 -0
  49. package/dist/lib/codex-native/catalog-sync.js.map +1 -0
  50. package/dist/lib/codex-native/chat-hooks.d.ts +85 -0
  51. package/dist/lib/codex-native/chat-hooks.d.ts.map +1 -0
  52. package/dist/lib/codex-native/chat-hooks.js +175 -0
  53. package/dist/lib/codex-native/chat-hooks.js.map +1 -0
  54. package/dist/lib/codex-native/client-identity.d.ts.map +1 -1
  55. package/dist/lib/codex-native/client-identity.js +55 -40
  56. package/dist/lib/codex-native/client-identity.js.map +1 -1
  57. package/dist/lib/codex-native/collaboration.d.ts +25 -0
  58. package/dist/lib/codex-native/collaboration.d.ts.map +1 -0
  59. package/dist/lib/codex-native/collaboration.js +306 -0
  60. package/dist/lib/codex-native/collaboration.js.map +1 -0
  61. package/dist/lib/codex-native/oauth-auth-methods.d.ts +45 -0
  62. package/dist/lib/codex-native/oauth-auth-methods.d.ts.map +1 -0
  63. package/dist/lib/codex-native/oauth-auth-methods.js +182 -0
  64. package/dist/lib/codex-native/oauth-auth-methods.js.map +1 -0
  65. package/dist/lib/codex-native/oauth-persistence.d.ts +4 -0
  66. package/dist/lib/codex-native/oauth-persistence.d.ts.map +1 -0
  67. package/dist/lib/codex-native/oauth-persistence.js +28 -0
  68. package/dist/lib/codex-native/oauth-persistence.js.map +1 -0
  69. package/dist/lib/codex-native/oauth-server.d.ts.map +1 -1
  70. package/dist/lib/codex-native/oauth-server.js +63 -5
  71. package/dist/lib/codex-native/oauth-server.js.map +1 -1
  72. package/dist/lib/codex-native/oauth-utils.d.ts +51 -0
  73. package/dist/lib/codex-native/oauth-utils.d.ts.map +1 -0
  74. package/dist/lib/codex-native/oauth-utils.js +265 -0
  75. package/dist/lib/codex-native/oauth-utils.js.map +1 -0
  76. package/dist/lib/codex-native/openai-loader-fetch.d.ts +39 -0
  77. package/dist/lib/codex-native/openai-loader-fetch.d.ts.map +1 -0
  78. package/dist/lib/codex-native/openai-loader-fetch.js +337 -0
  79. package/dist/lib/codex-native/openai-loader-fetch.js.map +1 -0
  80. package/dist/lib/codex-native/rate-limit-snapshots.d.ts +2 -0
  81. package/dist/lib/codex-native/rate-limit-snapshots.d.ts.map +1 -0
  82. package/dist/lib/codex-native/rate-limit-snapshots.js +28 -0
  83. package/dist/lib/codex-native/rate-limit-snapshots.js.map +1 -0
  84. package/dist/lib/codex-native/request-routing.d.ts +3 -0
  85. package/dist/lib/codex-native/request-routing.d.ts.map +1 -0
  86. package/dist/lib/codex-native/request-routing.js +41 -0
  87. package/dist/lib/codex-native/request-routing.js.map +1 -0
  88. package/dist/lib/codex-native/request-transform-pipeline.d.ts +20 -0
  89. package/dist/lib/codex-native/request-transform-pipeline.d.ts.map +1 -0
  90. package/dist/lib/codex-native/request-transform-pipeline.js +25 -0
  91. package/dist/lib/codex-native/request-transform-pipeline.js.map +1 -0
  92. package/dist/lib/codex-native/request-transform.d.ts +28 -4
  93. package/dist/lib/codex-native/request-transform.d.ts.map +1 -1
  94. package/dist/lib/codex-native/request-transform.js +347 -41
  95. package/dist/lib/codex-native/request-transform.js.map +1 -1
  96. package/dist/lib/codex-native/session-affinity-state.d.ts +17 -0
  97. package/dist/lib/codex-native/session-affinity-state.d.ts.map +1 -0
  98. package/dist/lib/codex-native/session-affinity-state.js +56 -0
  99. package/dist/lib/codex-native/session-affinity-state.js.map +1 -0
  100. package/dist/lib/codex-native/session-messages.d.ts +8 -0
  101. package/dist/lib/codex-native/session-messages.d.ts.map +1 -0
  102. package/dist/lib/codex-native/session-messages.js +58 -0
  103. package/dist/lib/codex-native/session-messages.js.map +1 -0
  104. package/dist/lib/codex-native.d.ts +12 -30
  105. package/dist/lib/codex-native.d.ts.map +1 -1
  106. package/dist/lib/codex-native.js +141 -1644
  107. package/dist/lib/codex-native.js.map +1 -1
  108. package/dist/lib/codex-prompts-cache.d.ts +17 -0
  109. package/dist/lib/codex-prompts-cache.d.ts.map +1 -0
  110. package/dist/lib/codex-prompts-cache.js +184 -0
  111. package/dist/lib/codex-prompts-cache.js.map +1 -0
  112. package/dist/lib/codex-status-storage.d.ts.map +1 -1
  113. package/dist/lib/codex-status-storage.js +8 -43
  114. package/dist/lib/codex-status-storage.js.map +1 -1
  115. package/dist/lib/codex-status-tool.js +1 -1
  116. package/dist/lib/codex-status-tool.js.map +1 -1
  117. package/dist/lib/codex-status-ui.d.ts.map +1 -1
  118. package/dist/lib/codex-status-ui.js +14 -8
  119. package/dist/lib/codex-status-ui.js.map +1 -1
  120. package/dist/lib/codex-status.d.ts.map +1 -1
  121. package/dist/lib/codex-status.js +28 -2
  122. package/dist/lib/codex-status.js.map +1 -1
  123. package/dist/lib/compat-sanitizer.d.ts.map +1 -1
  124. package/dist/lib/compat-sanitizer.js +5 -4
  125. package/dist/lib/compat-sanitizer.js.map +1 -1
  126. package/dist/lib/config-dir-gitignore.d.ts +3 -0
  127. package/dist/lib/config-dir-gitignore.d.ts.map +1 -0
  128. package/dist/lib/config-dir-gitignore.js +45 -0
  129. package/dist/lib/config-dir-gitignore.js.map +1 -0
  130. package/dist/lib/config.d.ts +30 -11
  131. package/dist/lib/config.d.ts.map +1 -1
  132. package/dist/lib/config.js +359 -153
  133. package/dist/lib/config.js.map +1 -1
  134. package/dist/lib/fetch-orchestrator.d.ts +19 -0
  135. package/dist/lib/fetch-orchestrator.d.ts.map +1 -1
  136. package/dist/lib/fetch-orchestrator.js +33 -6
  137. package/dist/lib/fetch-orchestrator.js.map +1 -1
  138. package/dist/lib/installer-cli.d.ts.map +1 -1
  139. package/dist/lib/installer-cli.js +14 -1
  140. package/dist/lib/installer-cli.js.map +1 -1
  141. package/dist/lib/logger.d.ts.map +1 -1
  142. package/dist/lib/logger.js +4 -1
  143. package/dist/lib/logger.js.map +1 -1
  144. package/dist/lib/model-catalog.d.ts +1 -0
  145. package/dist/lib/model-catalog.d.ts.map +1 -1
  146. package/dist/lib/model-catalog.js +198 -103
  147. package/dist/lib/model-catalog.js.map +1 -1
  148. package/dist/lib/opencode-install.d.ts.map +1 -1
  149. package/dist/lib/opencode-install.js +30 -6
  150. package/dist/lib/opencode-install.js.map +1 -1
  151. package/dist/lib/orchestrator-agent.d.ts +31 -0
  152. package/dist/lib/orchestrator-agent.d.ts.map +1 -0
  153. package/dist/lib/orchestrator-agent.js +268 -0
  154. package/dist/lib/orchestrator-agent.js.map +1 -0
  155. package/dist/lib/paths.d.ts +1 -1
  156. package/dist/lib/paths.d.ts.map +1 -1
  157. package/dist/lib/paths.js +1 -1
  158. package/dist/lib/paths.js.map +1 -1
  159. package/dist/lib/persona-tool-cli.d.ts.map +1 -1
  160. package/dist/lib/persona-tool-cli.js +4 -1
  161. package/dist/lib/persona-tool-cli.js.map +1 -1
  162. package/dist/lib/personalities.d.ts.map +1 -1
  163. package/dist/lib/personalities.js +9 -2
  164. package/dist/lib/personalities.js.map +1 -1
  165. package/dist/lib/personality-command.d.ts.map +1 -1
  166. package/dist/lib/personality-command.js +4 -1
  167. package/dist/lib/personality-command.js.map +1 -1
  168. package/dist/lib/personality-create.d.ts.map +1 -1
  169. package/dist/lib/personality-create.js +5 -1
  170. package/dist/lib/personality-create.js.map +1 -1
  171. package/dist/lib/personality-skill.d.ts.map +1 -1
  172. package/dist/lib/personality-skill.js +4 -1
  173. package/dist/lib/personality-skill.js.map +1 -1
  174. package/dist/lib/prompt-cache-key.d.ts +7 -0
  175. package/dist/lib/prompt-cache-key.d.ts.map +1 -0
  176. package/dist/lib/prompt-cache-key.js +17 -0
  177. package/dist/lib/prompt-cache-key.js.map +1 -0
  178. package/dist/lib/quarantine.d.ts.map +1 -1
  179. package/dist/lib/quarantine.js +22 -5
  180. package/dist/lib/quarantine.js.map +1 -1
  181. package/dist/lib/quota-threshold-alerts.d.ts +31 -0
  182. package/dist/lib/quota-threshold-alerts.d.ts.map +1 -0
  183. package/dist/lib/quota-threshold-alerts.js +97 -0
  184. package/dist/lib/quota-threshold-alerts.js.map +1 -0
  185. package/dist/lib/refresh-queue.d.ts.map +1 -1
  186. package/dist/lib/refresh-queue.js +9 -2
  187. package/dist/lib/refresh-queue.js.map +1 -1
  188. package/dist/lib/remote-cache-fetch.d.ts +28 -0
  189. package/dist/lib/remote-cache-fetch.d.ts.map +1 -0
  190. package/dist/lib/remote-cache-fetch.js +67 -0
  191. package/dist/lib/remote-cache-fetch.js.map +1 -0
  192. package/dist/lib/request-snapshots.d.ts +3 -0
  193. package/dist/lib/request-snapshots.d.ts.map +1 -1
  194. package/dist/lib/request-snapshots.js +88 -13
  195. package/dist/lib/request-snapshots.js.map +1 -1
  196. package/dist/lib/rotation.d.ts +4 -0
  197. package/dist/lib/rotation.d.ts.map +1 -1
  198. package/dist/lib/rotation.js +57 -10
  199. package/dist/lib/rotation.js.map +1 -1
  200. package/dist/lib/session-affinity.d.ts.map +1 -1
  201. package/dist/lib/session-affinity.js +22 -36
  202. package/dist/lib/session-affinity.js.map +1 -1
  203. package/dist/lib/storage.d.ts +8 -5
  204. package/dist/lib/storage.d.ts.map +1 -1
  205. package/dist/lib/storage.js +50 -39
  206. package/dist/lib/storage.js.map +1 -1
  207. package/dist/lib/ui/tty/select.d.ts.map +1 -1
  208. package/dist/lib/ui/tty/select.js +8 -2
  209. package/dist/lib/ui/tty/select.js.map +1 -1
  210. package/dist/lib/util.d.ts +2 -0
  211. package/dist/lib/util.d.ts.map +1 -0
  212. package/dist/lib/util.js +4 -0
  213. package/dist/lib/util.js.map +1 -0
  214. package/package.json +8 -5
  215. package/schemas/codex-config.schema.json +29 -43
@@ -0,0 +1,389 @@
1
+ import { PluginFatalError, formatWaitTime, isPluginFatalError } from "../fatal-errors";
2
+ import { ensureIdentityKey, normalizeEmail, normalizePlan } from "../identity";
3
+ import { createStickySessionState, selectAccount } from "../rotation";
4
+ import { ensureOpenAIOAuthDomain, saveAuthStorage } from "../storage";
5
+ import { parseJwtClaims } from "../claims";
6
+ import { formatAccountLabel } from "./accounts";
7
+ import { extractAccountId, refreshAccessToken } from "./oauth-utils";
8
+ const AUTH_REFRESH_FAILURE_COOLDOWN_MS = 30_000;
9
+ const AUTH_REFRESH_LEASE_MS = 30_000;
10
+ function isOAuthTokenRefreshError(value) {
11
+ return value instanceof Error && ("status" in value || "oauthCode" in value);
12
+ }
13
+ export function createAcquireOpenAIAuthInputDefaults() {
14
+ return {
15
+ stickySessionState: createStickySessionState(),
16
+ hybridSessionState: createStickySessionState()
17
+ };
18
+ }
19
+ export async function acquireOpenAIAuth(input) {
20
+ let access;
21
+ let accountId;
22
+ let identityKey;
23
+ let accountLabel;
24
+ let email;
25
+ let plan;
26
+ const attempted = new Set();
27
+ let sawInvalidGrant = false;
28
+ let sawRefreshFailure = false;
29
+ let sawMissingRefresh = false;
30
+ let sawMissingIdentity = false;
31
+ let totalAccounts = 0;
32
+ let rotationLogged = false;
33
+ let lastSelectionTrace;
34
+ try {
35
+ if (input.isSubagentRequest && input.context?.sessionKey) {
36
+ input.seenSessionKeys.delete(input.context.sessionKey);
37
+ input.stickySessionState.bySessionKey.delete(input.context.sessionKey);
38
+ input.hybridSessionState.bySessionKey.delete(input.context.sessionKey);
39
+ }
40
+ while (true) {
41
+ let refreshClaim;
42
+ let shouldStop = false;
43
+ await saveAuthStorage(undefined, (authFile) => {
44
+ const now = Date.now();
45
+ const openai = authFile.openai;
46
+ if (!openai || openai.type !== "oauth") {
47
+ throw new PluginFatalError({
48
+ message: "Not authenticated with OpenAI. Run `opencode auth login`.",
49
+ status: 401,
50
+ type: "oauth_not_configured",
51
+ param: "auth"
52
+ });
53
+ }
54
+ const domain = ensureOpenAIOAuthDomain(authFile, input.authMode);
55
+ totalAccounts = domain.accounts.length;
56
+ if (domain.accounts.length === 0) {
57
+ throw new PluginFatalError({
58
+ message: `No OpenAI ${input.authMode} accounts configured. Run \`opencode auth login\`.`,
59
+ status: 401,
60
+ type: "no_accounts_configured",
61
+ param: "accounts"
62
+ });
63
+ }
64
+ const enabled = domain.accounts.filter((account) => account.enabled !== false);
65
+ if (enabled.length === 0) {
66
+ throw new PluginFatalError({
67
+ message: `No enabled OpenAI ${input.authMode} accounts available. Enable an account or run \`opencode auth login\`.`,
68
+ status: 403,
69
+ type: "no_enabled_accounts",
70
+ param: "accounts"
71
+ });
72
+ }
73
+ const rotationStrategy = input.configuredRotationStrategy ?? domain.strategy ?? "sticky";
74
+ if (!rotationLogged) {
75
+ input.log?.debug("rotation begin", {
76
+ strategy: rotationStrategy,
77
+ activeIdentityKey: domain.activeIdentityKey,
78
+ totalAccounts: domain.accounts.length,
79
+ enabledAccounts: enabled.length,
80
+ mode: input.authMode,
81
+ sessionKey: input.context?.sessionKey ?? null
82
+ });
83
+ rotationLogged = true;
84
+ }
85
+ if (attempted.size >= domain.accounts.length) {
86
+ shouldStop = true;
87
+ return;
88
+ }
89
+ const sessionState = rotationStrategy === "sticky"
90
+ ? input.stickySessionState
91
+ : rotationStrategy === "hybrid"
92
+ ? input.hybridSessionState
93
+ : undefined;
94
+ const selected = selectAccount({
95
+ accounts: domain.accounts,
96
+ strategy: rotationStrategy,
97
+ activeIdentityKey: domain.activeIdentityKey,
98
+ now,
99
+ stickyPidOffset: input.pidOffsetEnabled,
100
+ stickySessionKey: input.isSubagentRequest ? undefined : input.context?.sessionKey,
101
+ stickySessionState: sessionState,
102
+ onDebug: (event) => {
103
+ lastSelectionTrace = {
104
+ strategy: event.strategy,
105
+ decision: event.decision,
106
+ totalCount: event.totalCount,
107
+ disabledCount: event.disabledCount,
108
+ cooldownCount: event.cooldownCount,
109
+ refreshLeaseCount: event.refreshLeaseCount,
110
+ eligibleCount: event.eligibleCount,
111
+ attemptedCount: attempted.size + (event.selectedIdentityKey ? 1 : 0),
112
+ ...(event.selectedIdentityKey ? { selectedIdentityKey: event.selectedIdentityKey } : null),
113
+ ...(event.activeIdentityKey ? { activeIdentityKey: event.activeIdentityKey } : null),
114
+ ...(event.sessionKey ? { sessionKey: event.sessionKey } : null)
115
+ };
116
+ input.log?.debug("rotation decision", event);
117
+ }
118
+ });
119
+ if (!selected) {
120
+ input.log?.debug("rotation stop: no selectable account", {
121
+ attempted: attempted.size,
122
+ totalAccounts: domain.accounts.length
123
+ });
124
+ shouldStop = true;
125
+ return;
126
+ }
127
+ const selectedIndex = domain.accounts.findIndex((account) => account === selected);
128
+ const attemptKey = selected.identityKey ??
129
+ selected.refresh ??
130
+ (selectedIndex >= 0 ? `idx:${selectedIndex}` : `idx:${attempted.size}`);
131
+ if (attempted.has(attemptKey)) {
132
+ input.log?.debug("rotation stop: duplicate attempt key", {
133
+ attemptKey,
134
+ selectedIdentityKey: selected.identityKey,
135
+ selectedIndex
136
+ });
137
+ shouldStop = true;
138
+ return;
139
+ }
140
+ attempted.add(attemptKey);
141
+ if (!input.isSubagentRequest && input.context?.sessionKey && sessionState) {
142
+ input.persistSessionAffinityState();
143
+ }
144
+ input.log?.debug("rotation candidate selected", {
145
+ attemptKey,
146
+ selectedIdentityKey: selected.identityKey,
147
+ selectedIndex,
148
+ selectedEnabled: selected.enabled !== false,
149
+ selectedCooldownUntil: selected.cooldownUntil ?? null,
150
+ selectedExpires: selected.expires ?? null
151
+ });
152
+ if (lastSelectionTrace) {
153
+ lastSelectionTrace = {
154
+ ...lastSelectionTrace,
155
+ attemptedCount: attempted.size,
156
+ ...(selected.identityKey ? { selectedIdentityKey: selected.identityKey } : null),
157
+ ...(selectedIndex >= 0 ? { selectedIndex } : null),
158
+ attemptKey
159
+ };
160
+ }
161
+ accountLabel = formatAccountLabel(selected, selectedIndex >= 0 ? selectedIndex : 0);
162
+ email = selected.email;
163
+ plan = selected.plan;
164
+ if (selected.access && selected.expires && selected.expires > now) {
165
+ selected.lastUsed = now;
166
+ access = selected.access;
167
+ accountId = selected.accountId;
168
+ identityKey = selected.identityKey;
169
+ if (selected.identityKey)
170
+ domain.activeIdentityKey = selected.identityKey;
171
+ return;
172
+ }
173
+ if (!selected.refresh) {
174
+ sawMissingRefresh = true;
175
+ selected.cooldownUntil = now + AUTH_REFRESH_FAILURE_COOLDOWN_MS;
176
+ return;
177
+ }
178
+ if (!selected.identityKey) {
179
+ sawMissingIdentity = true;
180
+ return;
181
+ }
182
+ const leaseUntil = now + AUTH_REFRESH_LEASE_MS;
183
+ selected.refreshLeaseUntil = leaseUntil;
184
+ refreshClaim = {
185
+ identityKey: selected.identityKey,
186
+ refreshToken: selected.refresh,
187
+ leaseUntil,
188
+ selectedIndex: selectedIndex >= 0 ? selectedIndex : 0
189
+ };
190
+ });
191
+ if (access)
192
+ break;
193
+ if (!refreshClaim) {
194
+ if (shouldStop || (totalAccounts > 0 && attempted.size >= totalAccounts)) {
195
+ break;
196
+ }
197
+ continue;
198
+ }
199
+ try {
200
+ const tokens = await refreshAccessToken(refreshClaim.refreshToken);
201
+ const refreshedExpires = Date.now() + (tokens.expires_in ?? 3600) * 1000;
202
+ const refreshedAccountId = extractAccountId(tokens);
203
+ const claims = parseJwtClaims(tokens.id_token ?? tokens.access_token);
204
+ await saveAuthStorage(undefined, (authFile) => {
205
+ const domain = ensureOpenAIOAuthDomain(authFile, input.authMode);
206
+ const selected = domain.accounts.find((account) => account.identityKey === refreshClaim?.identityKey);
207
+ if (!selected)
208
+ return;
209
+ const now = Date.now();
210
+ if (typeof selected.refreshLeaseUntil !== "number" ||
211
+ selected.refreshLeaseUntil !== refreshClaim?.leaseUntil ||
212
+ selected.refreshLeaseUntil <= now ||
213
+ selected.refresh !== refreshClaim?.refreshToken) {
214
+ if (selected.refreshLeaseUntil === refreshClaim?.leaseUntil) {
215
+ delete selected.refreshLeaseUntil;
216
+ }
217
+ return;
218
+ }
219
+ if (selected.enabled === false) {
220
+ delete selected.refreshLeaseUntil;
221
+ return;
222
+ }
223
+ selected.refresh = tokens.refresh_token;
224
+ selected.access = tokens.access_token;
225
+ selected.expires = refreshedExpires;
226
+ selected.accountId = refreshedAccountId || selected.accountId;
227
+ if (claims?.email)
228
+ selected.email = normalizeEmail(claims.email);
229
+ if (claims?.plan)
230
+ selected.plan = normalizePlan(claims.plan);
231
+ ensureIdentityKey(selected);
232
+ selected.lastUsed = now;
233
+ delete selected.refreshLeaseUntil;
234
+ delete selected.cooldownUntil;
235
+ if (selected.identityKey)
236
+ domain.activeIdentityKey = selected.identityKey;
237
+ accountLabel = formatAccountLabel(selected, refreshClaim?.selectedIndex ?? 0);
238
+ email = selected.email;
239
+ plan = selected.plan;
240
+ access = selected.access;
241
+ accountId = selected.accountId;
242
+ identityKey = selected.identityKey;
243
+ });
244
+ }
245
+ catch (error) {
246
+ const invalidGrant = isOAuthTokenRefreshError(error) && error.oauthCode?.toLowerCase() === "invalid_grant";
247
+ if (invalidGrant) {
248
+ sawInvalidGrant = true;
249
+ }
250
+ else {
251
+ sawRefreshFailure = true;
252
+ }
253
+ await saveAuthStorage(undefined, (authFile) => {
254
+ const domain = ensureOpenAIOAuthDomain(authFile, input.authMode);
255
+ const selected = domain.accounts.find((account) => account.identityKey === refreshClaim?.identityKey);
256
+ if (!selected)
257
+ return;
258
+ if (selected.refreshLeaseUntil !== refreshClaim?.leaseUntil ||
259
+ selected.refresh !== refreshClaim?.refreshToken) {
260
+ return;
261
+ }
262
+ delete selected.refreshLeaseUntil;
263
+ if (invalidGrant) {
264
+ selected.enabled = false;
265
+ delete selected.cooldownUntil;
266
+ return;
267
+ }
268
+ if (selected.enabled === false)
269
+ return;
270
+ selected.cooldownUntil = Date.now() + AUTH_REFRESH_FAILURE_COOLDOWN_MS;
271
+ });
272
+ }
273
+ if (access)
274
+ break;
275
+ if (totalAccounts > 0 && attempted.size >= totalAccounts) {
276
+ break;
277
+ }
278
+ }
279
+ if (!access) {
280
+ await saveAuthStorage(undefined, (authFile) => {
281
+ const now = Date.now();
282
+ const openai = authFile.openai;
283
+ if (!openai || openai.type !== "oauth") {
284
+ throw new PluginFatalError({
285
+ message: "Not authenticated with OpenAI. Run `opencode auth login`.",
286
+ status: 401,
287
+ type: "oauth_not_configured",
288
+ param: "auth"
289
+ });
290
+ }
291
+ const domain = ensureOpenAIOAuthDomain(authFile, input.authMode);
292
+ const enabledAfterAttempts = domain.accounts.filter((account) => account.enabled !== false);
293
+ if (enabledAfterAttempts.length === 0 && sawInvalidGrant) {
294
+ throw new PluginFatalError({
295
+ message: "All enabled OpenAI refresh tokens were rejected (invalid_grant). Run `opencode auth login` to reauthenticate.",
296
+ status: 401,
297
+ type: "refresh_invalid_grant",
298
+ param: "auth"
299
+ });
300
+ }
301
+ const nextAvailableAt = enabledAfterAttempts.reduce((current, account) => {
302
+ const cooldownUntil = typeof account.refreshLeaseUntil === "number" && account.refreshLeaseUntil > now
303
+ ? account.refreshLeaseUntil
304
+ : account.cooldownUntil;
305
+ if (typeof cooldownUntil !== "number" || cooldownUntil <= now)
306
+ return current;
307
+ if (current === undefined || cooldownUntil < current)
308
+ return cooldownUntil;
309
+ return current;
310
+ }, undefined);
311
+ if (nextAvailableAt !== undefined) {
312
+ const waitMs = Math.max(0, nextAvailableAt - now);
313
+ throw new PluginFatalError({
314
+ message: `All enabled OpenAI accounts are cooling down. Try again in ${formatWaitTime(waitMs)} or run \`opencode auth login\`.`,
315
+ status: 429,
316
+ type: "all_accounts_cooling_down",
317
+ param: "accounts"
318
+ });
319
+ }
320
+ if (sawInvalidGrant) {
321
+ throw new PluginFatalError({
322
+ message: "OpenAI refresh token was rejected (invalid_grant). Run `opencode auth login` to reauthenticate this account.",
323
+ status: 401,
324
+ type: "refresh_invalid_grant",
325
+ param: "auth"
326
+ });
327
+ }
328
+ if (sawMissingRefresh) {
329
+ throw new PluginFatalError({
330
+ message: "Selected OpenAI account is missing a refresh token. Run `opencode auth login` to reauthenticate.",
331
+ status: 401,
332
+ type: "missing_refresh_token",
333
+ param: "accounts"
334
+ });
335
+ }
336
+ if (sawMissingIdentity) {
337
+ throw new PluginFatalError({
338
+ message: "Selected OpenAI account is missing identity metadata. Run `opencode auth login` to reauthenticate.",
339
+ status: 401,
340
+ type: "missing_account_identity",
341
+ param: "accounts"
342
+ });
343
+ }
344
+ if (sawRefreshFailure) {
345
+ throw new PluginFatalError({
346
+ message: "Failed to refresh OpenAI access token. Run `opencode auth login` and try again.",
347
+ status: 401,
348
+ type: "refresh_failed",
349
+ param: "auth"
350
+ });
351
+ }
352
+ throw new PluginFatalError({
353
+ message: `No enabled OpenAI ${input.authMode} accounts available. Enable an account or run \`opencode auth login\`.`,
354
+ status: 403,
355
+ type: "no_enabled_accounts",
356
+ param: "accounts"
357
+ });
358
+ });
359
+ }
360
+ }
361
+ catch (error) {
362
+ if (isPluginFatalError(error))
363
+ throw error;
364
+ throw new PluginFatalError({
365
+ message: "Unable to access OpenAI auth storage. Check plugin configuration and run `opencode auth login` if needed.",
366
+ status: 500,
367
+ type: "auth_storage_error",
368
+ param: "auth"
369
+ });
370
+ }
371
+ if (!access) {
372
+ throw new PluginFatalError({
373
+ message: "No valid OpenAI access token available. Run `opencode auth login`.",
374
+ status: 401,
375
+ type: "no_valid_access_token",
376
+ param: "auth"
377
+ });
378
+ }
379
+ return {
380
+ access,
381
+ accountId,
382
+ identityKey,
383
+ accountLabel,
384
+ email,
385
+ plan,
386
+ ...(lastSelectionTrace ? { selectionTrace: lastSelectionTrace } : null)
387
+ };
388
+ }
389
+ //# sourceMappingURL=acquire-auth.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"acquire-auth.js","sourceRoot":"","sources":["../../../lib/codex-native/acquire-auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACtF,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAE9E,OAAO,EAAE,wBAAwB,EAAE,aAAa,EAA2B,MAAM,aAAa,CAAA;AAC9F,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAErE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAC/C,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAA+B,MAAM,eAAe,CAAA;AAEjG,MAAM,gCAAgC,GAAG,MAAM,CAAA;AAC/C,MAAM,qBAAqB,GAAG,MAAM,CAAA;AAEpC,SAAS,wBAAwB,CAAC,KAAc;IAC9C,OAAO,KAAK,YAAY,KAAK,IAAI,CAAC,QAAQ,IAAI,KAAK,IAAI,WAAW,IAAI,KAAK,CAAC,CAAA;AAC9E,CAAC;AAsBD,MAAM,UAAU,oCAAoC;IAIlD,OAAO;QACL,kBAAkB,EAAE,wBAAwB,EAAE;QAC9C,kBAAkB,EAAE,wBAAwB,EAAE;KAC/C,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAA6B;IACnE,IAAI,MAA0B,CAAA;IAC9B,IAAI,SAA6B,CAAA;IACjC,IAAI,WAA+B,CAAA;IACnC,IAAI,YAAgC,CAAA;IACpC,IAAI,KAAyB,CAAA;IAC7B,IAAI,IAAwB,CAAA;IAC5B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAA;IACnC,IAAI,eAAe,GAAG,KAAK,CAAA;IAC3B,IAAI,iBAAiB,GAAG,KAAK,CAAA;IAC7B,IAAI,iBAAiB,GAAG,KAAK,CAAA;IAC7B,IAAI,kBAAkB,GAAG,KAAK,CAAA;IAC9B,IAAI,aAAa,GAAG,CAAC,CAAA;IACrB,IAAI,cAAc,GAAG,KAAK,CAAA;IAC1B,IAAI,kBAAqD,CAAA;IAEzD,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;YACzD,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;YACtD,KAAK,CAAC,kBAAkB,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;YACtE,KAAK,CAAC,kBAAkB,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QACxE,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,YAAsC,CAAA;YAC1C,IAAI,UAAU,GAAG,KAAK,CAAA;YAEtB,MAAM,eAAe,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;gBAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;gBACtB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAA;gBAC9B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBACvC,MAAM,IAAI,gBAAgB,CAAC;wBACzB,OAAO,EAAE,2DAA2D;wBACpE,MAAM,EAAE,GAAG;wBACX,IAAI,EAAE,sBAAsB;wBAC5B,KAAK,EAAE,MAAM;qBACd,CAAC,CAAA;gBACJ,CAAC;gBAED,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;gBAChE,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAA;gBACtC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACjC,MAAM,IAAI,gBAAgB,CAAC;wBACzB,OAAO,EAAE,aAAa,KAAK,CAAC,QAAQ,oDAAoD;wBACxF,MAAM,EAAE,GAAG;wBACX,IAAI,EAAE,wBAAwB;wBAC9B,KAAK,EAAE,UAAU;qBAClB,CAAC,CAAA;gBACJ,CAAC;gBAED,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,CAAA;gBAC9E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,MAAM,IAAI,gBAAgB,CAAC;wBACzB,OAAO,EAAE,qBAAqB,KAAK,CAAC,QAAQ,wEAAwE;wBACpH,MAAM,EAAE,GAAG;wBACX,IAAI,EAAE,qBAAqB;wBAC3B,KAAK,EAAE,UAAU;qBAClB,CAAC,CAAA;gBACJ,CAAC;gBAED,MAAM,gBAAgB,GAAqB,KAAK,CAAC,0BAA0B,IAAI,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAA;gBAC1G,IAAI,CAAC,cAAc,EAAE,CAAC;oBACpB,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,gBAAgB,EAAE;wBACjC,QAAQ,EAAE,gBAAgB;wBAC1B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;wBAC3C,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;wBACrC,eAAe,EAAE,OAAO,CAAC,MAAM;wBAC/B,IAAI,EAAE,KAAK,CAAC,QAAQ;wBACpB,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,IAAI,IAAI;qBAC9C,CAAC,CAAA;oBACF,cAAc,GAAG,IAAI,CAAA;gBACvB,CAAC;gBAED,IAAI,SAAS,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;oBAC7C,UAAU,GAAG,IAAI,CAAA;oBACjB,OAAM;gBACR,CAAC;gBAED,MAAM,YAAY,GAChB,gBAAgB,KAAK,QAAQ;oBAC3B,CAAC,CAAC,KAAK,CAAC,kBAAkB;oBAC1B,CAAC,CAAC,gBAAgB,KAAK,QAAQ;wBAC7B,CAAC,CAAC,KAAK,CAAC,kBAAkB;wBAC1B,CAAC,CAAC,SAAS,CAAA;gBAEjB,MAAM,QAAQ,GAAG,aAAa,CAAC;oBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,QAAQ,EAAE,gBAAgB;oBAC1B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;oBAC3C,GAAG;oBACH,eAAe,EAAE,KAAK,CAAC,gBAAgB;oBACvC,gBAAgB,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU;oBACjF,kBAAkB,EAAE,YAAY;oBAChC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;wBACjB,kBAAkB,GAAG;4BACnB,QAAQ,EAAE,KAAK,CAAC,QAAQ;4BACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;4BACxB,UAAU,EAAE,KAAK,CAAC,UAAU;4BAC5B,aAAa,EAAE,KAAK,CAAC,aAAa;4BAClC,aAAa,EAAE,KAAK,CAAC,aAAa;4BAClC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;4BAC1C,aAAa,EAAE,KAAK,CAAC,aAAa;4BAClC,cAAc,EAAE,SAAS,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;4BACpE,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;4BAC1F,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;4BACpF,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;yBAChE,CAAA;wBACD,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAA;oBAC9C,CAAC;iBACF,CAAC,CAAA;gBAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,sCAAsC,EAAE;wBACvD,SAAS,EAAE,SAAS,CAAC,IAAI;wBACzB,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;qBACtC,CAAC,CAAA;oBACF,UAAU,GAAG,IAAI,CAAA;oBACjB,OAAM;gBACR,CAAC;gBAED,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAA;gBAClF,MAAM,UAAU,GACd,QAAQ,CAAC,WAAW;oBACpB,QAAQ,CAAC,OAAO;oBAChB,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,aAAa,EAAE,CAAC,CAAC,CAAC,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC,CAAA;gBAEzE,IAAI,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC9B,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,sCAAsC,EAAE;wBACvD,UAAU;wBACV,mBAAmB,EAAE,QAAQ,CAAC,WAAW;wBACzC,aAAa;qBACd,CAAC,CAAA;oBACF,UAAU,GAAG,IAAI,CAAA;oBACjB,OAAM;gBACR,CAAC;gBAED,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;gBACzB,IAAI,CAAC,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,OAAO,EAAE,UAAU,IAAI,YAAY,EAAE,CAAC;oBAC1E,KAAK,CAAC,2BAA2B,EAAE,CAAA;gBACrC,CAAC;gBAED,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,6BAA6B,EAAE;oBAC9C,UAAU;oBACV,mBAAmB,EAAE,QAAQ,CAAC,WAAW;oBACzC,aAAa;oBACb,eAAe,EAAE,QAAQ,CAAC,OAAO,KAAK,KAAK;oBAC3C,qBAAqB,EAAE,QAAQ,CAAC,aAAa,IAAI,IAAI;oBACrD,eAAe,EAAE,QAAQ,CAAC,OAAO,IAAI,IAAI;iBAC1C,CAAC,CAAA;gBACF,IAAI,kBAAkB,EAAE,CAAC;oBACvB,kBAAkB,GAAG;wBACnB,GAAG,kBAAkB;wBACrB,cAAc,EAAE,SAAS,CAAC,IAAI;wBAC9B,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;wBAChF,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;wBAClD,UAAU;qBACX,CAAA;gBACH,CAAC;gBAED,YAAY,GAAG,kBAAkB,CAAC,QAAQ,EAAE,aAAa,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;gBACnF,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAA;gBACtB,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAA;gBAEpB,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC;oBAClE,QAAQ,CAAC,QAAQ,GAAG,GAAG,CAAA;oBACvB,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAA;oBACxB,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAA;oBAC9B,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAA;oBAClC,IAAI,QAAQ,CAAC,WAAW;wBAAE,MAAM,CAAC,iBAAiB,GAAG,QAAQ,CAAC,WAAW,CAAA;oBACzE,OAAM;gBACR,CAAC;gBAED,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACtB,iBAAiB,GAAG,IAAI,CAAA;oBACxB,QAAQ,CAAC,aAAa,GAAG,GAAG,GAAG,gCAAgC,CAAA;oBAC/D,OAAM;gBACR,CAAC;gBAED,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;oBAC1B,kBAAkB,GAAG,IAAI,CAAA;oBACzB,OAAM;gBACR,CAAC;gBAED,MAAM,UAAU,GAAG,GAAG,GAAG,qBAAqB,CAAA;gBAC9C,QAAQ,CAAC,iBAAiB,GAAG,UAAU,CAAA;gBACvC,YAAY,GAAG;oBACb,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,YAAY,EAAE,QAAQ,CAAC,OAAO;oBAC9B,UAAU;oBACV,aAAa,EAAE,aAAa,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;iBACtD,CAAA;YACH,CAAC,CAAC,CAAA;YAEF,IAAI,MAAM;gBAAE,MAAK;YACjB,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,IAAI,UAAU,IAAI,CAAC,aAAa,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,IAAI,aAAa,CAAC,EAAE,CAAC;oBACzE,MAAK;gBACP,CAAC;gBACD,SAAQ;YACV,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,YAAY,CAAC,YAAY,CAAC,CAAA;gBAClE,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,IAAI,CAAA;gBACxE,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;gBACnD,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,YAAY,CAAC,CAAA;gBAErE,MAAM,eAAe,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;oBAC5C,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;oBAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,KAAK,YAAY,EAAE,WAAW,CAAC,CAAA;oBACrG,IAAI,CAAC,QAAQ;wBAAE,OAAM;oBAErB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;oBACtB,IACE,OAAO,QAAQ,CAAC,iBAAiB,KAAK,QAAQ;wBAC9C,QAAQ,CAAC,iBAAiB,KAAK,YAAY,EAAE,UAAU;wBACvD,QAAQ,CAAC,iBAAiB,IAAI,GAAG;wBACjC,QAAQ,CAAC,OAAO,KAAK,YAAY,EAAE,YAAY,EAC/C,CAAC;wBACD,IAAI,QAAQ,CAAC,iBAAiB,KAAK,YAAY,EAAE,UAAU,EAAE,CAAC;4BAC5D,OAAO,QAAQ,CAAC,iBAAiB,CAAA;wBACnC,CAAC;wBACD,OAAM;oBACR,CAAC;oBAED,IAAI,QAAQ,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;wBAC/B,OAAO,QAAQ,CAAC,iBAAiB,CAAA;wBACjC,OAAM;oBACR,CAAC;oBAED,QAAQ,CAAC,OAAO,GAAG,MAAM,CAAC,aAAa,CAAA;oBACvC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,YAAY,CAAA;oBACrC,QAAQ,CAAC,OAAO,GAAG,gBAAgB,CAAA;oBACnC,QAAQ,CAAC,SAAS,GAAG,kBAAkB,IAAI,QAAQ,CAAC,SAAS,CAAA;oBAC7D,IAAI,MAAM,EAAE,KAAK;wBAAE,QAAQ,CAAC,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;oBAChE,IAAI,MAAM,EAAE,IAAI;wBAAE,QAAQ,CAAC,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;oBAC5D,iBAAiB,CAAC,QAAQ,CAAC,CAAA;oBAC3B,QAAQ,CAAC,QAAQ,GAAG,GAAG,CAAA;oBACvB,OAAO,QAAQ,CAAC,iBAAiB,CAAA;oBACjC,OAAO,QAAQ,CAAC,aAAa,CAAA;oBAC7B,IAAI,QAAQ,CAAC,WAAW;wBAAE,MAAM,CAAC,iBAAiB,GAAG,QAAQ,CAAC,WAAW,CAAA;oBAEzE,YAAY,GAAG,kBAAkB,CAAC,QAAQ,EAAE,YAAY,EAAE,aAAa,IAAI,CAAC,CAAC,CAAA;oBAC7E,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAA;oBACtB,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAA;oBACpB,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAA;oBACxB,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAA;oBAC9B,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAA;gBACpC,CAAC,CAAC,CAAA;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,YAAY,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,eAAe,CAAA;gBAC1G,IAAI,YAAY,EAAE,CAAC;oBACjB,eAAe,GAAG,IAAI,CAAA;gBACxB,CAAC;qBAAM,CAAC;oBACN,iBAAiB,GAAG,IAAI,CAAA;gBAC1B,CAAC;gBAED,MAAM,eAAe,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;oBAC5C,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;oBAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,KAAK,YAAY,EAAE,WAAW,CAAC,CAAA;oBACrG,IAAI,CAAC,QAAQ;wBAAE,OAAM;oBAErB,IACE,QAAQ,CAAC,iBAAiB,KAAK,YAAY,EAAE,UAAU;wBACvD,QAAQ,CAAC,OAAO,KAAK,YAAY,EAAE,YAAY,EAC/C,CAAC;wBACD,OAAM;oBACR,CAAC;oBAED,OAAO,QAAQ,CAAC,iBAAiB,CAAA;oBACjC,IAAI,YAAY,EAAE,CAAC;wBACjB,QAAQ,CAAC,OAAO,GAAG,KAAK,CAAA;wBACxB,OAAO,QAAQ,CAAC,aAAa,CAAA;wBAC7B,OAAM;oBACR,CAAC;oBAED,IAAI,QAAQ,CAAC,OAAO,KAAK,KAAK;wBAAE,OAAM;oBACtC,QAAQ,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,gCAAgC,CAAA;gBACxE,CAAC,CAAC,CAAA;YACJ,CAAC;YAED,IAAI,MAAM;gBAAE,MAAK;YACjB,IAAI,aAAa,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,IAAI,aAAa,EAAE,CAAC;gBACzD,MAAK;YACP,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,eAAe,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;gBAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;gBACtB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAA;gBAC9B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBACvC,MAAM,IAAI,gBAAgB,CAAC;wBACzB,OAAO,EAAE,2DAA2D;wBACpE,MAAM,EAAE,GAAG;wBACX,IAAI,EAAE,sBAAsB;wBAC5B,KAAK,EAAE,MAAM;qBACd,CAAC,CAAA;gBACJ,CAAC;gBAED,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;gBAChE,MAAM,oBAAoB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,CAAA;gBAC3F,IAAI,oBAAoB,CAAC,MAAM,KAAK,CAAC,IAAI,eAAe,EAAE,CAAC;oBACzD,MAAM,IAAI,gBAAgB,CAAC;wBACzB,OAAO,EACL,+GAA+G;wBACjH,MAAM,EAAE,GAAG;wBACX,IAAI,EAAE,uBAAuB;wBAC7B,KAAK,EAAE,MAAM;qBACd,CAAC,CAAA;gBACJ,CAAC;gBAED,MAAM,eAAe,GAAG,oBAAoB,CAAC,MAAM,CAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;oBAC3F,MAAM,aAAa,GACjB,OAAO,OAAO,CAAC,iBAAiB,KAAK,QAAQ,IAAI,OAAO,CAAC,iBAAiB,GAAG,GAAG;wBAC9E,CAAC,CAAC,OAAO,CAAC,iBAAiB;wBAC3B,CAAC,CAAC,OAAO,CAAC,aAAa,CAAA;oBAC3B,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,IAAI,GAAG;wBAAE,OAAO,OAAO,CAAA;oBAC7E,IAAI,OAAO,KAAK,SAAS,IAAI,aAAa,GAAG,OAAO;wBAAE,OAAO,aAAa,CAAA;oBAC1E,OAAO,OAAO,CAAA;gBAChB,CAAC,EAAE,SAAS,CAAC,CAAA;gBAEb,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;oBAClC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,GAAG,GAAG,CAAC,CAAA;oBACjD,MAAM,IAAI,gBAAgB,CAAC;wBACzB,OAAO,EAAE,8DAA8D,cAAc,CAAC,MAAM,CAAC,kCAAkC;wBAC/H,MAAM,EAAE,GAAG;wBACX,IAAI,EAAE,2BAA2B;wBACjC,KAAK,EAAE,UAAU;qBAClB,CAAC,CAAA;gBACJ,CAAC;gBAED,IAAI,eAAe,EAAE,CAAC;oBACpB,MAAM,IAAI,gBAAgB,CAAC;wBACzB,OAAO,EACL,8GAA8G;wBAChH,MAAM,EAAE,GAAG;wBACX,IAAI,EAAE,uBAAuB;wBAC7B,KAAK,EAAE,MAAM;qBACd,CAAC,CAAA;gBACJ,CAAC;gBAED,IAAI,iBAAiB,EAAE,CAAC;oBACtB,MAAM,IAAI,gBAAgB,CAAC;wBACzB,OAAO,EAAE,kGAAkG;wBAC3G,MAAM,EAAE,GAAG;wBACX,IAAI,EAAE,uBAAuB;wBAC7B,KAAK,EAAE,UAAU;qBAClB,CAAC,CAAA;gBACJ,CAAC;gBAED,IAAI,kBAAkB,EAAE,CAAC;oBACvB,MAAM,IAAI,gBAAgB,CAAC;wBACzB,OAAO,EACL,oGAAoG;wBACtG,MAAM,EAAE,GAAG;wBACX,IAAI,EAAE,0BAA0B;wBAChC,KAAK,EAAE,UAAU;qBAClB,CAAC,CAAA;gBACJ,CAAC;gBAED,IAAI,iBAAiB,EAAE,CAAC;oBACtB,MAAM,IAAI,gBAAgB,CAAC;wBACzB,OAAO,EAAE,iFAAiF;wBAC1F,MAAM,EAAE,GAAG;wBACX,IAAI,EAAE,gBAAgB;wBACtB,KAAK,EAAE,MAAM;qBACd,CAAC,CAAA;gBACJ,CAAC;gBAED,MAAM,IAAI,gBAAgB,CAAC;oBACzB,OAAO,EAAE,qBAAqB,KAAK,CAAC,QAAQ,wEAAwE;oBACpH,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,qBAAqB;oBAC3B,KAAK,EAAE,UAAU;iBAClB,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,kBAAkB,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAA;QAC1C,MAAM,IAAI,gBAAgB,CAAC;YACzB,OAAO,EACL,2GAA2G;YAC7G,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,oBAAoB;YAC1B,KAAK,EAAE,MAAM;SACd,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,gBAAgB,CAAC;YACzB,OAAO,EAAE,oEAAoE;YAC7E,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,uBAAuB;YAC7B,KAAK,EAAE,MAAM;SACd,CAAC,CAAA;IACJ,CAAC;IAED,OAAO;QACL,MAAM;QACN,SAAS;QACT,WAAW;QACX,YAAY;QACZ,KAAK;QACL,IAAI;QACJ,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;KACxE,CAAA;AACH,CAAC"}
@@ -0,0 +1,9 @@
1
+ import type { OpenAIAuthMode } from "../types";
2
+ type RunInteractiveAuthMenuInput = {
3
+ authMode: OpenAIAuthMode;
4
+ allowExit: boolean;
5
+ refreshQuotaSnapshotsForAuthMenu: () => Promise<void>;
6
+ };
7
+ export declare function runInteractiveAuthMenu(input: RunInteractiveAuthMenuInput): Promise<"add" | "exit">;
8
+ export {};
9
+ //# sourceMappingURL=auth-menu-flow.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"auth-menu-flow.d.ts","sourceRoot":"","sources":["../../../lib/codex-native/auth-menu-flow.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AAY9C,KAAK,2BAA2B,GAAG;IACjC,QAAQ,EAAE,cAAc,CAAA;IACxB,SAAS,EAAE,OAAO,CAAA;IAClB,gCAAgC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CACtD,CAAA;AAID,wBAAsB,sBAAsB,CAAC,KAAK,EAAE,2BAA2B,GAAG,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC,CAyTxG"}