@jeffreycao/copilot-api 2.5.5 → 2.5.7

package/README.md

@@ -358,7 +358,7 @@ On the GitHub Copilot path, the gateway prefers Copilot's native Anthropic-style
 ## Prerequisites
 
 - Bun (>= 1.2.x)
-- Node.js if you plan to run the published CLI with `npx`
+- Node.js >= 22.13.0 if you plan to run the published CLI with `npx`
 - GitHub account with Copilot subscription only if you want to use the GitHub Copilot provider
 - An API key or OAuth login for at least one configured provider if you want to run without GitHub Copilot
 
@@ -393,7 +393,7 @@ bun run start start
 You can run the project directly using npx:
 
 > [!IMPORTANT]
-> Token usage storage uses Node's built-in `node:sqlite` module when running with `npx`. It is enabled on Node.js >= 22.13.0. On Node.js < 22.13.0, the CLI still starts, but token usage storage is disabled.
+> Token usage storage uses Node's built-in `node:sqlite` module when running with `npx`. It is enabled on Node.js >= 22.13.0. Node.js < 22.13.0 is outside the range declared in `engines`: the CLI still starts, but token usage storage is disabled.
 >
 > If you want token usage storage without upgrading Node.js, run the published CLI with Bun instead: `bunx --bun @jeffreycao/copilot-api@latest start`.
 
@@ -442,13 +442,13 @@ docker compose ps
 
 If `COPILOT_API_GITHUB_TOKEN` or the legacy `GH_TOKEN` is already available in your environment or a private `.env` file, you can skip `--auth login`. A GitHub token authorizes access to GitHub Copilot; it does not replace the gateway API key configured above.
 
-Before every server or authentication run, the one-shot `data-init` service repairs ownership of the mounted data directory. This lets the non-root server reuse files written by an earlier root container, including mode `0600` configuration files. The host directory defaults to `./copilot-data`, matching the earlier Docker instructions; Compose mounts it at `/data` and sets `COPILOT_API_HOME` accordingly. Set `COPILOT_API_DATA_DIR` in the environment or your own `.env` to use an existing directory elsewhere.
+Before every server or authentication run, the one-shot `data-init` service repairs ownership of the gateway's own state in the mounted data directory: `config.json`, `github_token` (including the enterprise `ent_github_token` and OAuth app subdirectories such as `opencode/github_token`), `codex_credentials.json`, `desktop-config.json`, `copilot-api.sqlite*`, `logs/`, and `cache/`. Other files and directories in the mount are left untouched. This lets the non-root server reuse files written by an earlier root container, including mode `0600` configuration files. The host directory defaults to `./copilot-data`, matching the earlier Docker instructions; Compose mounts it at `/data` and sets `COPILOT_API_HOME` accordingly. Set `COPILOT_API_DATA_DIR` in the environment or your own `.env` to use an existing directory elsewhere.
 
 ```dotenv
 COPILOT_API_DATA_DIR=/absolute/path/to/copilot-data
 ```
 
-Create the host directory before the first run. Compose does not auto-create a missing host directory (`create_host_path: false`), so a typo in `COPILOT_API_DATA_DIR` fails fast instead of starting with empty state. The one-shot `data-init` service also refuses unsafe values such as `/` before touching ownership.
+Create the host directory before the first run. Compose does not auto-create a missing host directory (`create_host_path: false`), so a typo in `COPILOT_API_DATA_DIR` fails fast instead of starting with empty state. The one-shot `data-init` service also refuses unsafe values such as `/`, and refuses to run when the mount contains system directories (`/etc`, `/usr`, and so on), which means the path resolved to a system root.
 
 The local endpoint is `http://127.0.0.1:4141`. To publish the gateway on every host interface after configuring a gateway API key, add this to your `.env`:
 
@@ -595,7 +595,7 @@ After starting the server, a URL to the Copilot Usage Dashboard will be displaye
 
 The dashboard provides a user-friendly interface to view your Copilot usage data:
 
-> Token usage history requires Bun or Node.js >= 22.13.0. On Node.js < 22.13.0, the server runs normally but token usage storage is disabled.
+> Token usage history requires Bun or Node.js >= 22.13.0. Node.js < 22.13.0 is outside the range declared in `engines`: the server runs normally but token usage storage is disabled.
 
 - **API Endpoint URL**: The dashboard is pre-configured to fetch data from your local server endpoint via a URL query parameter. You can manually switch this to any other compatible API endpoint.
 - **API Key Authentication**: If API Key authentication is enabled, enter a raw API key (sent as the `x-api-key` header) or `Authorization: Bearer <key>`. Credentials are remembered in the browser's local storage per endpoint origin, and switching to a different endpoint origin does not automatically send the previous credential.

package/README.zh-CN.md

@@ -380,7 +380,7 @@ AI gateway 会从同一个本地端点暴露 OpenAI / Anthropic 兼容 API，让
 ## 前置要求
 
 - Bun（>= 1.2.x）
-- 如果要通过 `npx` 运行已发布 CLI，需要 Node.js
+- 如果要通过 `npx` 运行已发布 CLI，需要 Node.js >= 22.13.0
 - 只有在使用 GitHub Copilot provider 时，才需要已订阅 Copilot 的 GitHub 账号
 - 如果不使用 GitHub Copilot，需要至少一个已配置 provider 的 API key 或 OAuth 登录
 
@@ -421,7 +421,7 @@ bun run start start
 你可以直接用 npx 运行本项目：
 
 > [!IMPORTANT]
-> 通过 `npx` 运行时，token usage 存储会使用 Node 内置的 `node:sqlite` 模块。该能力会在 Node.js >= 22.13.0 时启用；Node.js < 22.13.0 时 CLI 仍可启动，但会禁用 token usage 存储。
+> 通过 `npx` 运行时，token usage 存储会使用 Node 内置的 `node:sqlite` 模块。该能力会在 Node.js >= 22.13.0 时启用；Node.js < 22.13.0 不在 `engines` 声明的支持范围内，CLI 仍可启动，但会禁用 token usage 存储。
 >
 > 如果不升级 Node.js 但仍需要 token usage 存储，可以改用 Bun 运行已发布 CLI：`bunx --bun @jeffreycao/copilot-api@latest start`。
 
@@ -472,13 +472,13 @@ docker compose ps
 
 如果环境变量或用户自己创建的私有 `.env` 中已经设置 `COPILOT_API_GITHUB_TOKEN` 或旧变量 `GH_TOKEN`，可以跳过 `--auth login`。GitHub token 用于访问 GitHub Copilot，不能替代上面配置的 gateway API Key。
 
-每次启动服务或执行认证命令前，一次性的 `data-init` 服务都会修复挂载数据目录的所有权。因此非 root 服务可以直接复用旧 root 容器写入的数据，包括权限为 `0600` 的配置文件。宿主机目录仍默认使用旧 Docker 文档中的 `./copilot-data`；Compose 将它挂载到 `/data`，并设置对应的 `COPILOT_API_HOME`。如需复用其他位置的已有目录，可在环境变量或用户自己的 `.env` 中设置 `COPILOT_API_DATA_DIR`。
+每次启动服务或执行认证命令前，一次性的 `data-init` 服务只会修复挂载目录中属于 gateway 自身的状态文件：`config.json`、`github_token`（含企业版的 `ent_github_token`，以及 `opencode/github_token` 这类 OAuth 应用子目录）、`codex_credentials.json`、`desktop-config.json`、`copilot-api.sqlite*`、`logs/` 和 `cache/`。挂载目录中的其他文件和目录不会被改动。因此非 root 服务可以直接复用旧 root 容器写入的数据，包括权限为 `0600` 的配置文件。宿主机目录仍默认使用旧 Docker 文档中的 `./copilot-data`；Compose 将它挂载到 `/data`，并设置对应的 `COPILOT_API_HOME`。如需复用其他位置的已有目录，可在环境变量或用户自己的 `.env` 中设置 `COPILOT_API_DATA_DIR`。
 
 ```dotenv
 COPILOT_API_DATA_DIR=/absolute/path/to/copilot-data
 ```
 
-首次运行前请先建好宿主机目录。Compose 不会自动创建缺失的宿主机目录（`create_host_path: false`），因此 `COPILOT_API_DATA_DIR` 写错会直接报错，而不会以空状态启动。一次性的 `data-init` 服务在改归属前也会拒绝 `/` 这类危险路径。
+首次运行前请先建好宿主机目录。Compose 不会自动创建缺失的宿主机目录（`create_host_path: false`），因此 `COPILOT_API_DATA_DIR` 写错会直接报错，而不会以空状态启动。一次性的 `data-init` 服务在改归属前会拒绝 `/` 这类危险路径；当挂载内容中出现 `/etc`、`/usr` 等系统目录时（说明路径实际指向了系统根目录）也会直接拒绝运行。
 
 默认本地地址为 `http://127.0.0.1:4141`。配置好 gateway API Key 后，如需监听宿主机所有网卡，可在用户自己的 `.env` 中设置：
 
@@ -633,7 +633,7 @@ cp plugin/opencode/subagent-marker.js ~/.config/opencode/plugins/
 
 看板提供了更易读的 Copilot 用量视图：
 
-> token usage 历史记录需要 Bun 或 Node.js >= 22.13.0。Node.js < 22.13.0 时服务会正常运行，但 token usage 存储会被禁用。
+> token usage 历史记录需要 Bun 或 Node.js >= 22.13.0。Node.js < 22.13.0 不在 `engines` 声明的支持范围内，服务会正常运行，但 token usage 存储会被禁用。
 
 - **API Endpoint URL**：通过 URL 查询参数指定 API endpoints，默认指向本地服务。支持手动切换为其他兼容 endpoints。
 - **API Key 认证**：如果启用了 API Key 认证，可填入原始 API key（默认通过 `x-api-key` 请求头发送）或 `Authorization: Bearer <key>`。凭据会按 endpoint origin 保存在浏览器本地存储中；切换到不同 endpoint origin 时，不会自动携带其他 origin 的凭据。

package/dist/{auth-LJ5y6v6e.js → auth-CMufJUfF.js}

@@ -1,5 +1,5 @@
-import { M as setConfiguredApiKeys, N as PATHS, P as ensurePaths, a as normalizeProviderBaseUrl, c as setProviderConfig, n as getRawProviderConfig, r as isSupportedProviderType, y as SUPPORTED_PROVIDER_TYPES } from "./config-DYtohLpX.js";
-import { J as state, M as getConfiguredApiKeys, P as loginCodex, a as setupGitHubToken, n as persistCodexCredentials } from "./token-DZDtQb7h.js";
+import { M as setConfiguredApiKeys, N as PATHS, P as ensurePaths, a as normalizeProviderBaseUrl, c as setProviderConfig, n as getRawProviderConfig, r as isSupportedProviderType, y as SUPPORTED_PROVIDER_TYPES } from "./config-2Dli6AI8.js";
+import { J as state, M as getConfiguredApiKeys, P as loginCodex, a as setupGitHubToken, n as persistCodexCredentials } from "./token-O2WH6ipn.js";
 import { defineCommand } from "citty";
 import consola from "consola";
 //#region src/lib/quick-providers.ts
@@ -297,7 +297,8 @@ async function configureCustomProvider() {
 	if (!baseUrl) throw new Error("baseUrl must be a non-empty string");
 	const apiKey = await promptRequiredSecret("Enter provider apiKey", "apiKey");
 	const authType = await promptCustomProviderAuthType(type);
-	setProviderConfig(providerName, buildCustomProviderConfig(getRawProviderConfig(providerName) ?? {}, {
+	const existingProviderConfig = getRawProviderConfig(providerName) ?? {};
+	setProviderConfig(providerName, buildCustomProviderConfig(existingProviderConfig, {
 		apiKey,
 		authType,
 		baseUrl,
@@ -310,7 +311,8 @@ async function configureQuickProvider(providerName) {
 	const apiKey = await promptRequiredSecret(`Enter ${providerName} apiKey`, "apiKey");
 	const type = defaultProviderConfig.editableType ? await promptQuickProviderType(defaultProviderConfig.type) : defaultProviderConfig.type;
 	const baseUrl = await promptQuickProviderBaseUrl(defaultProviderConfig.baseUrl);
-	setProviderConfig(providerName, buildCustomProviderConfig(getRawProviderConfig(providerName) ?? {}, {
+	const existingProviderConfig = getRawProviderConfig(providerName) ?? {};
+	setProviderConfig(providerName, buildCustomProviderConfig(existingProviderConfig, {
 		apiKey,
 		baseUrl,
 		pricingCurrency: defaultProviderConfig.pricingCurrency,
@@ -319,7 +321,7 @@ async function configureQuickProvider(providerName) {
 	consola.success(`${AUTH_PROVIDER_LABELS[providerName]} provider '${providerName}' written to ${PATHS.CONFIG_PATH}`);
 }
 async function loginWithCodex() {
-	await persistCodexCredentials(await loginCodex({
+	const credentials = await loginCodex({
 		onAuth(info) {
 			consola.info("Open the following URL to authenticate with Codex:");
 			consola.log(info.url);
@@ -331,7 +333,8 @@ async function loginWithCodex() {
 		onProgress(message) {
 			consola.debug(message);
 		}
-	}), { enableProvider: true });
+	});
+	await persistCodexCredentials(credentials, { enableProvider: true });
 	consola.success(`Codex provider config written to ${PATHS.CONFIG_PATH} and credentials written to ${PATHS.CODEX_CREDENTIAL_PATH}`);
 }
 async function loginWithProvider(provider) {
@@ -356,7 +359,7 @@ async function runProviderSetup() {
 	await loginWithProvider(provider);
 }
 async function runAuthLogin(options) {
-	(await import("./tls-Aq1Dd8E2.js")).enableSystemCACompat();
+	(await import("./tls-uiriilgk.js")).enableSystemCACompat();
 	if (options.verbose) {
 		consola.level = 5;
 		consola.info("Verbose logging enabled");
@@ -396,7 +399,7 @@ function normalizeAuthKeyValue(value) {
 	return normalizedKey;
 }
 async function runAuthKeys(options) {
-	(await import("./tls-Aq1Dd8E2.js")).enableSystemCACompat();
+	(await import("./tls-uiriilgk.js")).enableSystemCACompat();
 	await ensurePaths();
 	const operations = [
 		...options.add !== void 0 ? ["add"] : [],
@@ -441,6 +444,35 @@ async function runAuthKeys(options) {
 	consola.info("Configured API keys:");
 	for (const key of currentKeys) consola.info(`- ${key}`);
 }
+const authLogin = defineCommand({
+	meta: {
+		name: "login",
+		description: "Authenticate or configure a provider without running the server"
+	},
+	args: authArgs,
+	run({ args }) {
+		return runAuthLogin({
+			provider: args.provider,
+			verbose: args.verbose,
+			showToken: args["show-token"]
+		});
+	}
+});
+const authKeys = defineCommand({
+	meta: {
+		name: "keys",
+		description: "Manage gateway API keys (auth.apiKeys) in the config"
+	},
+	args: authKeysArgs,
+	run({ args }) {
+		return runAuthKeys({
+			add: args.add,
+			remove: args.remove,
+			list: args.list,
+			clear: args.clear
+		});
+	}
+});
 const auth = defineCommand({
 	meta: {
 		name: "auth",
@@ -448,35 +480,8 @@ const auth = defineCommand({
 	},
 	args: authArgs,
 	subCommands: {
-		login: defineCommand({
-			meta: {
-				name: "login",
-				description: "Authenticate or configure a provider without running the server"
-			},
-			args: authArgs,
-			run({ args }) {
-				return runAuthLogin({
-					provider: args.provider,
-					verbose: args.verbose,
-					showToken: args["show-token"]
-				});
-			}
-		}),
-		keys: defineCommand({
-			meta: {
-				name: "keys",
-				description: "Manage gateway API keys (auth.apiKeys) in the config"
-			},
-			args: authKeysArgs,
-			run({ args }) {
-				return runAuthKeys({
-					add: args.add,
-					remove: args.remove,
-					list: args.list,
-					clear: args.clear
-				});
-			}
-		})
+		login: authLogin,
+		keys: authKeys
 	},
 	run({ args }) {
 		if ((args._[0] ?? "").trim()) return;
@@ -490,4 +495,4 @@ const auth = defineCommand({
 //#endregion
 export { runProviderSetup as i, runAuthKeys as n, runAuthLogin as r, auth as t };
 
-//# sourceMappingURL=auth-LJ5y6v6e.js.map
+//# sourceMappingURL=auth-CMufJUfF.js.map

package/dist/{auth-LJ5y6v6e.js.map → auth-CMufJUfF.js.map}

@@ -1 +1 @@
-{"version":3,"file":"auth-LJ5y6v6e.js","names":[],"sources":["../src/lib/quick-providers.ts","../src/lib/interactive-prompt.ts","../src/auth.ts"],"sourcesContent":["import type { ProviderType } from \"./config\"\n\ninterface QuickProviderConfig {\n  type: ProviderType\n  baseUrl: string\n  pricingCurrency: string\n  editableType: boolean\n}\n\nexport const QUICK_PROVIDER_CONFIGS = {\n  \"opencode-go\": {\n    type: \"openai-compatible\",\n    baseUrl: \"https://opencode.ai/zen/go\",\n    pricingCurrency: \"USD\",\n    editableType: false,\n  },\n  kimi: {\n    type: \"openai-compatible\",\n    baseUrl: \"https://api.kimi.com/coding\",\n    pricingCurrency: \"USD\",\n    editableType: true,\n  },\n  deepseek: {\n    type: \"anthropic\",\n    baseUrl: \"https://api.deepseek.com/anthropic\",\n    pricingCurrency: \"CNY\",\n    editableType: true,\n  },\n  dashscope: {\n    type: \"openai-compatible\",\n    baseUrl: \"https://dashscope.aliyuncs.com/compatible-mode\",\n    pricingCurrency: \"CNY\",\n    editableType: true,\n  },\n  openrouter: {\n    type: \"anthropic\",\n    baseUrl: \"https://openrouter.ai/api\",\n    pricingCurrency: \"USD\",\n    editableType: false,\n  },\n} satisfies Record<string, QuickProviderConfig>\n\nexport type QuickProviderName = keyof typeof QUICK_PROVIDER_CONFIGS\n","import consola from \"consola\"\n\ninterface PromptSelectOption {\n  label: string\n  value: string\n  hint?: string\n}\n\ninterface TextPromptOptions {\n  type?: \"text\"\n  default?: string\n  initial?: string\n  placeholder?: string\n}\n\ninterface SelectPromptOptions {\n  type: \"select\"\n  initial?: string\n  options: Array<string | PromptSelectOption>\n}\n\nexport type InteractivePromptOptions = SelectPromptOptions | TextPromptOptions\n\ninterface ClackSelectOptions {\n  message: string\n  initialValue?: string\n  options: Array<PromptSelectOption>\n}\n\ninterface ClackTextOptions {\n  message: string\n  defaultValue?: string\n  initialValue?: string\n  placeholder?: string\n}\n\nexport interface ClackPromptBackend {\n  isCancel(value: unknown): boolean\n  select(options: ClackSelectOptions): Promise<string | symbol>\n  text(options: ClackTextOptions): Promise<string | symbol>\n}\n\ninterface PromptRuntime {\n  bunVersion?: string\n  platform: NodeJS.Platform\n  stdinIsTTY?: boolean\n  stdoutIsTTY?: boolean\n  stdoutIsTTYStream?: boolean\n}\n\n// Consola 3.4.2 bundles a prompt implementation that writes keyboard input to\n// tty fd 0. Bun treats that as a real stdin write on Windows and throws EPIPE.\nexport function shouldUseClackPrompt(\n  runtime: PromptRuntime = {\n    bunVersion: process.versions.bun,\n    platform: process.platform,\n    stdinIsTTY: process.stdin.isTTY,\n    stdoutIsTTY: process.stdout.isTTY,\n    stdoutIsTTYStream: typeof process.stdout.getColorDepth === \"function\",\n  },\n): boolean {\n  return Boolean(\n    runtime.platform === \"win32\"\n      && runtime.bunVersion\n      && runtime.stdinIsTTY\n      && runtime.stdoutIsTTY\n      && runtime.stdoutIsTTYStream,\n  )\n}\n\nfunction getCancelValue(options: InteractivePromptOptions): string | undefined {\n  return options.type === \"select\" ?\n      options.initial\n    : (options.default ?? options.initial)\n}\n\nexport async function promptWithClack(\n  message: string,\n  options: InteractivePromptOptions,\n  backend: ClackPromptBackend,\n): Promise<string | undefined> {\n  if (options.type === \"select\") {\n    const value = await backend.select({\n      message,\n      options: options.options.map((option) =>\n        typeof option === \"string\" ? { label: option, value: option } : option,\n      ),\n      initialValue: options.initial,\n    })\n    if (backend.isCancel(value)) {\n      return getCancelValue(options)\n    }\n    return typeof value === \"string\" ? value : undefined\n  }\n\n  const value = await backend.text({\n    message,\n    defaultValue: options.default,\n    initialValue: options.initial,\n    placeholder: options.placeholder,\n  })\n  if (backend.isCancel(value)) {\n    return getCancelValue(options)\n  }\n  return typeof value === \"string\" ? value : undefined\n}\n\nexport async function prompt(\n  message: string,\n  options: InteractivePromptOptions,\n): Promise<string | undefined> {\n  if (!shouldUseClackPrompt()) {\n    if (options.type === \"select\") {\n      const value = await consola.prompt(message, options)\n      return typeof value === \"string\" ? value : undefined\n    }\n    return await consola.prompt(message, options)\n  }\n\n  const clack = await import(\"@clack/prompts\")\n  return await promptWithClack(message, options, clack)\n}\n","#!/usr/bin/env node\n\nimport { defineCommand } from \"citty\"\nimport consola from \"consola\"\n\nimport {\n  getRawProviderConfig,\n  isSupportedProviderType,\n  normalizeProviderBaseUrl,\n  setProviderConfig,\n  setConfiguredApiKeys,\n  SUPPORTED_PROVIDER_TYPES,\n  type ProviderAuthType,\n  type ProviderConfig,\n  type ProviderType,\n} from \"./lib/config\"\nimport { loginCodex } from \"./lib/oauth/codex\"\nimport { PATHS, ensurePaths } from \"./lib/paths\"\nimport { getConfiguredApiKeys } from \"./lib/request-auth\"\nimport {\n  QUICK_PROVIDER_CONFIGS,\n  type QuickProviderName,\n} from \"./lib/quick-providers\"\nimport { prompt } from \"./lib/interactive-prompt\"\nimport { state } from \"./lib/state\"\nimport { persistCodexCredentials, setupGitHubToken } from \"./lib/token\"\n\ninterface RunAuthOptions {\n  provider?: string\n  verbose: boolean\n  showToken: boolean\n}\n\nconst authArgs = {\n  provider: {\n    type: \"string\",\n    description:\n      \"Provider to log in with or configure (copilot, codex, opencode-go, kimi, deepseek, dashscope, openrouter, custom)\",\n  },\n  verbose: {\n    alias: \"v\",\n    type: \"boolean\",\n    default: false,\n    description: \"Enable verbose logging\",\n  },\n  \"show-token\": {\n    type: \"boolean\",\n    default: false,\n    description: \"Show provider access token on auth\",\n  },\n} as const\n\nconst BUILTIN_PROVIDER_NAMES = [\"copilot\", \"codex\"] as const\nconst QUICK_PROVIDER_NAMES = Object.keys(\n  QUICK_PROVIDER_CONFIGS,\n) as Array<QuickProviderName>\nconst AUTH_PROVIDER_NAMES = [\n  ...BUILTIN_PROVIDER_NAMES,\n  ...QUICK_PROVIDER_NAMES,\n  \"custom\",\n] as const\nconst CUSTOM_PROVIDER_AUTH_TYPE_OPTION = \"__default__\"\nconst QUICK_PROVIDER_DEFAULT_TYPE_OPTION = \"__default__\"\nconst CUSTOM_PROVIDER_AUTH_TYPES = [\"x-api-key\", \"authorization\"] as const\n\ntype BuiltinProviderName = (typeof BUILTIN_PROVIDER_NAMES)[number]\ntype AuthProviderName = (typeof AUTH_PROVIDER_NAMES)[number]\ntype CustomProviderAuthType = (typeof CUSTOM_PROVIDER_AUTH_TYPES)[number]\n\nconst BUILTIN_PROVIDER_LABELS: Record<BuiltinProviderName, string> = {\n  copilot: \"GitHub Copilot\",\n  codex: \"OpenAI Codex\",\n}\nconst AUTH_PROVIDER_LABELS: Record<AuthProviderName, string> = {\n  ...BUILTIN_PROVIDER_LABELS,\n  \"opencode-go\": \"OpenCode Go\",\n  kimi: \"Kimi\",\n  deepseek: \"DeepSeek\",\n  dashscope: \"DashScope\",\n  openrouter: \"OpenRouter\",\n  custom: \"Custom provider\",\n}\n\nfunction isAuthProviderName(\n  providerName: string,\n): providerName is AuthProviderName {\n  return AUTH_PROVIDER_NAMES.includes(providerName as AuthProviderName)\n}\n\nfunction isCustomProviderAuthType(\n  value: string,\n): value is CustomProviderAuthType {\n  return CUSTOM_PROVIDER_AUTH_TYPES.includes(value as CustomProviderAuthType)\n}\n\nfunction isQuickProviderName(\n  providerName: AuthProviderName,\n): providerName is QuickProviderName {\n  return QUICK_PROVIDER_NAMES.includes(providerName as QuickProviderName)\n}\n\nasync function resolveProviderSelection(\n  providerArg: string | undefined,\n): Promise<AuthProviderName> {\n  const availableProviders = [...AUTH_PROVIDER_NAMES]\n\n  if (providerArg !== undefined) {\n    const providerName = providerArg.trim()\n    if (!isAuthProviderName(providerName)) {\n      throw new Error(\n        `Unknown provider '${providerArg}'. Expected one of: ${availableProviders.join(\", \")}`,\n      )\n    }\n    return providerName\n  }\n\n  if (availableProviders.length === 1) {\n    return availableProviders[0]\n  }\n\n  const provider = await prompt(\"Select a provider to log in with\", {\n    type: \"select\",\n    options: availableProviders.map((providerName) => ({\n      label: `${AUTH_PROVIDER_LABELS[providerName]} (${providerName})`,\n      value: providerName,\n    })),\n  })\n\n  if (!provider || !isAuthProviderName(provider)) {\n    throw new Error(\"No provider selected\")\n  }\n\n  return provider\n}\n\nfunction assertCustomProviderName(providerName: string): void {\n  if (!providerName) {\n    throw new Error(\"Provider name must be a non-empty string\")\n  }\n\n  if (!/^[A-Za-z0-9][A-Za-z0-9_-]*$/u.test(providerName)) {\n    throw new Error(\n      \"Provider name must start with a letter or number and contain only letters, numbers, underscores, or hyphens\",\n    )\n  }\n\n  if (providerName === \"copilot\" || providerName === \"codex\") {\n    throw new Error(\n      `Provider name '${providerName}' is reserved for a builtin provider`,\n    )\n  }\n}\n\nasync function promptRequiredText(\n  message: string,\n  fieldName: string,\n): Promise<string> {\n  const value = await prompt(message, { type: \"text\" })\n  const normalizedValue = typeof value === \"string\" ? value.trim() : \"\"\n  if (!normalizedValue) {\n    throw new Error(`${fieldName} must be a non-empty string`)\n  }\n  return normalizedValue\n}\n\nfunction canUseMaskedPrompt(): boolean {\n  return Boolean(\n    process.stdin.isTTY\n      && process.stdout.isTTY\n      && typeof process.stdin.setRawMode === \"function\",\n  )\n}\n\nasync function promptMaskedText(message: string): Promise<string> {\n  if (!canUseMaskedPrompt()) {\n    const value = await prompt(message, { type: \"text\" })\n    return typeof value === \"string\" ? value : \"\"\n  }\n\n  return await new Promise<string>((resolve, reject) => {\n    let value = \"\"\n    const rawModeWasEnabled = process.stdin.isRaw === true\n\n    function cleanup(): void {\n      process.stdin.off(\"data\", onData)\n      process.stdin.setRawMode(rawModeWasEnabled)\n      process.stdin.pause()\n    }\n\n    function finish(): void {\n      cleanup()\n      process.stdout.write(\"\\n\")\n      resolve(value)\n    }\n\n    function cancel(): void {\n      cleanup()\n      process.stdout.write(\"\\n\")\n      reject(new Error(\"Prompt cancelled\"))\n    }\n\n    function onData(chunk: Buffer): void {\n      const input = chunk.toString(\"utf8\")\n\n      if (input.startsWith(\"\\u001B\")) {\n        return\n      }\n\n      for (const char of input) {\n        if (char === \"\\u0003\") {\n          cancel()\n          return\n        }\n\n        if (char === \"\\r\" || char === \"\\n\") {\n          finish()\n          return\n        }\n\n        if (char === \"\\b\" || char === \"\\u007F\") {\n          if (value.length > 0) {\n            value = value.slice(0, -1)\n            process.stdout.write(\"\\b \\b\")\n          }\n          continue\n        }\n\n        if (char >= \" \") {\n          value += char\n          process.stdout.write(\"*\")\n        }\n      }\n    }\n\n    process.stdout.write(`${message}: `)\n    process.stdin.setRawMode(true)\n    process.stdin.resume()\n    process.stdin.on(\"data\", onData)\n  })\n}\n\nasync function promptRequiredSecret(\n  message: string,\n  fieldName: string,\n): Promise<string> {\n  const value = await promptMaskedText(message)\n  const normalizedValue = value.trim()\n  if (!normalizedValue) {\n    throw new Error(`${fieldName} must be a non-empty string`)\n  }\n  return normalizedValue\n}\n\nasync function promptCustomProviderName(): Promise<string> {\n  const providerName = await promptRequiredText(\n    \"Enter provider name\",\n    \"Provider name\",\n  )\n  assertCustomProviderName(providerName)\n  return providerName\n}\n\nasync function promptCustomProviderType(): Promise<ProviderType> {\n  const providerType = await prompt(\"Select provider type\", {\n    type: \"select\",\n    options: SUPPORTED_PROVIDER_TYPES.map((type) => ({\n      label: type,\n      value: type,\n    })),\n  })\n\n  if (\n    typeof providerType !== \"string\"\n    || !isSupportedProviderType(providerType)\n  ) {\n    throw new Error(\"No provider type selected\")\n  }\n\n  return providerType\n}\n\nasync function promptQuickProviderType(\n  defaultType: ProviderType,\n): Promise<ProviderType> {\n  const providerType = await prompt(\n    `Select provider type (default: ${defaultType})`,\n    {\n      type: \"select\",\n      options: [\n        {\n          label: `Default (${defaultType})`,\n          value: QUICK_PROVIDER_DEFAULT_TYPE_OPTION,\n        },\n        ...SUPPORTED_PROVIDER_TYPES.map((type) => ({\n          label: type,\n          value: type,\n        })),\n      ],\n    },\n  )\n\n  if (providerType === QUICK_PROVIDER_DEFAULT_TYPE_OPTION) {\n    return defaultType\n  }\n\n  if (\n    typeof providerType === \"string\"\n    && isSupportedProviderType(providerType)\n  ) {\n    return providerType\n  }\n\n  throw new Error(\"No provider type selected\")\n}\n\nfunction getDefaultProviderAuthType(\n  providerType: ProviderType,\n): ProviderAuthType {\n  return providerType === \"anthropic\" ? \"x-api-key\" : \"authorization\"\n}\n\nasync function promptCustomProviderAuthType(\n  providerType: ProviderType,\n): Promise<ProviderAuthType | undefined> {\n  const defaultAuthType = getDefaultProviderAuthType(providerType)\n  const authType = await prompt(\"Select provider auth type\", {\n    type: \"select\",\n    options: [\n      {\n        label: `Default (${defaultAuthType})`,\n        value: CUSTOM_PROVIDER_AUTH_TYPE_OPTION,\n      },\n      ...CUSTOM_PROVIDER_AUTH_TYPES.map((value) => ({\n        label: value,\n        value,\n      })),\n    ],\n  })\n\n  if (authType === CUSTOM_PROVIDER_AUTH_TYPE_OPTION) {\n    return undefined\n  }\n\n  if (typeof authType === \"string\" && isCustomProviderAuthType(authType)) {\n    return authType\n  }\n\n  throw new Error(\"No provider auth type selected\")\n}\n\nasync function promptQuickProviderBaseUrl(\n  defaultBaseUrl: string,\n): Promise<string> {\n  const value = await prompt(\n    `Enter provider baseUrl (default: ${defaultBaseUrl})`,\n    {\n      type: \"text\",\n      default: defaultBaseUrl,\n      initial: defaultBaseUrl,\n    },\n  )\n  const baseUrl = normalizeProviderBaseUrl(\n    typeof value === \"string\" && value.trim() ? value : defaultBaseUrl,\n  )\n  if (!baseUrl) {\n    throw new Error(\"baseUrl must be a non-empty string\")\n  }\n\n  return baseUrl\n}\n\nfunction buildCustomProviderConfig(\n  existingProviderConfig: ProviderConfig,\n  options: {\n    apiKey: string\n    authType?: ProviderAuthType\n    baseUrl: string\n    pricingCurrency?: string\n    type: ProviderType\n  },\n): ProviderConfig {\n  return {\n    type: options.type,\n    enabled: true,\n    baseUrl: options.baseUrl,\n    apiKey: options.apiKey,\n    ...(options.authType ? { authType: options.authType } : {}),\n    pricingCurrency:\n      options.pricingCurrency ?? existingProviderConfig.pricingCurrency,\n    ...(existingProviderConfig.models ?\n      { models: existingProviderConfig.models }\n    : {}),\n  }\n}\n\nasync function configureCustomProvider(): Promise<void> {\n  const providerName = await promptCustomProviderName()\n  const type = await promptCustomProviderType()\n  const baseUrl = normalizeProviderBaseUrl(\n    await promptRequiredText(\"Enter provider baseUrl\", \"baseUrl\"),\n  )\n  if (!baseUrl) {\n    throw new Error(\"baseUrl must be a non-empty string\")\n  }\n\n  const apiKey = await promptRequiredSecret(\"Enter provider apiKey\", \"apiKey\")\n  const authType = await promptCustomProviderAuthType(type)\n  const existingProviderConfig = getRawProviderConfig(providerName) ?? {}\n\n  setProviderConfig(\n    providerName,\n    buildCustomProviderConfig(existingProviderConfig, {\n      apiKey,\n      authType,\n      baseUrl,\n      type,\n    }),\n  )\n\n  consola.success(\n    `Custom provider '${providerName}' written to ${PATHS.CONFIG_PATH}`,\n  )\n}\n\nasync function configureQuickProvider(\n  providerName: QuickProviderName,\n): Promise<void> {\n  const defaultProviderConfig = QUICK_PROVIDER_CONFIGS[providerName]\n  const apiKey = await promptRequiredSecret(\n    `Enter ${providerName} apiKey`,\n    \"apiKey\",\n  )\n  const type =\n    defaultProviderConfig.editableType ?\n      await promptQuickProviderType(defaultProviderConfig.type)\n    : defaultProviderConfig.type\n  const baseUrl = await promptQuickProviderBaseUrl(\n    defaultProviderConfig.baseUrl,\n  )\n  const existingProviderConfig = getRawProviderConfig(providerName) ?? {}\n\n  setProviderConfig(\n    providerName,\n    buildCustomProviderConfig(existingProviderConfig, {\n      apiKey,\n      baseUrl,\n      pricingCurrency: defaultProviderConfig.pricingCurrency,\n      type,\n    }),\n  )\n\n  consola.success(\n    `${AUTH_PROVIDER_LABELS[providerName]} provider '${providerName}' written to ${PATHS.CONFIG_PATH}`,\n  )\n}\n\nasync function loginWithCodex(): Promise<void> {\n  const credentials = await loginCodex({\n    onAuth(info) {\n      consola.info(\"Open the following URL to authenticate with Codex:\")\n      consola.log(info.url)\n      if (info.instructions) {\n        consola.info(info.instructions)\n      }\n    },\n    onPrompt(message) {\n      return prompt(message, { type: \"text\" }).then((value) => value ?? \"\")\n    },\n    onProgress(message) {\n      consola.debug(message)\n    },\n  })\n\n  await persistCodexCredentials(credentials, { enableProvider: true })\n  consola.success(\n    `Codex provider config written to ${PATHS.CONFIG_PATH} and credentials written to ${PATHS.CODEX_CREDENTIAL_PATH}`,\n  )\n}\n\nasync function loginWithProvider(provider: AuthProviderName): Promise<void> {\n  if (provider === \"copilot\") {\n    await setupGitHubToken({ force: true })\n    consola.success(\"GitHub token written to\", PATHS.GITHUB_TOKEN_PATH)\n    return\n  }\n\n  if (provider === \"codex\") {\n    await loginWithCodex()\n    return\n  }\n\n  if (isQuickProviderName(provider)) {\n    await configureQuickProvider(provider)\n    return\n  }\n\n  await configureCustomProvider()\n}\n\nexport async function runProviderSetup(): Promise<void> {\n  const provider = await resolveProviderSelection(undefined)\n  consola.info(`Logging in with ${AUTH_PROVIDER_LABELS[provider]}`)\n  await loginWithProvider(provider)\n}\n\nexport async function runAuthLogin(options: RunAuthOptions): Promise<void> {\n  const tlsModule = await import(\"./lib/tls\")\n  tlsModule.enableSystemCACompat()\n\n  if (options.verbose) {\n    consola.level = 5\n    consola.info(\"Verbose logging enabled\")\n  }\n\n  state.showToken = options.showToken\n\n  await ensurePaths()\n  const provider = await resolveProviderSelection(options.provider)\n\n  consola.info(`Logging in with ${AUTH_PROVIDER_LABELS[provider]}`)\n  await loginWithProvider(provider)\n}\n\nconst authKeysArgs = {\n  add: {\n    alias: \"a\",\n    type: \"string\",\n    description: \"Add an API key for gateway authentication\",\n  },\n  remove: {\n    alias: \"r\",\n    type: \"string\",\n    description: \"Remove an API key\",\n  },\n  list: {\n    alias: \"l\",\n    type: \"boolean\",\n    default: false,\n    description: \"List configured API keys\",\n  },\n  clear: {\n    type: \"boolean\",\n    default: false,\n    description: \"Remove all configured API keys\",\n  },\n} as const\n\ninterface RunAuthKeysOptions {\n  add?: string\n  remove?: string\n  list?: boolean\n  clear?: boolean\n}\n\nfunction normalizeAuthKeyValue(value: string): string {\n  const normalizedKey = value.trim()\n  if (!normalizedKey) {\n    throw new Error(\"API key must be a non-empty string\")\n  }\n  return normalizedKey\n}\n\nexport async function runAuthKeys(options: RunAuthKeysOptions): Promise<void> {\n  const tlsModule = await import(\"./lib/tls\")\n  tlsModule.enableSystemCACompat()\n\n  await ensurePaths()\n\n  const operations = [\n    ...(options.add !== undefined ? [\"add\"] : []),\n    ...(options.remove !== undefined ? [\"remove\"] : []),\n    ...(options.list ? [\"list\"] : []),\n    ...(options.clear ? [\"clear\"] : []),\n  ]\n  if (operations.length > 1) {\n    throw new Error(\n      \"Use only one of --add, --remove, --list, or --clear per invocation\",\n    )\n  }\n\n  const operation = operations[0] ?? \"list\"\n\n  if (operation === \"add\") {\n    const apiKey = normalizeAuthKeyValue(options.add ?? \"\")\n    const currentKeys = getConfiguredApiKeys()\n    if (currentKeys.includes(apiKey)) {\n      consola.info(\n        `API key already configured. ${currentKeys.length} API key(s) configured.`,\n      )\n      return\n    }\n    const storedKeys = setConfiguredApiKeys([...currentKeys, apiKey])\n    consola.success(\n      `API key added to ${PATHS.CONFIG_PATH}. ${storedKeys.length} API key(s) configured.`,\n    )\n    return\n  }\n\n  if (operation === \"remove\") {\n    const apiKey = normalizeAuthKeyValue(options.remove ?? \"\")\n    const currentKeys = getConfiguredApiKeys()\n    if (!currentKeys.includes(apiKey)) {\n      consola.info(\n        `API key not found. ${currentKeys.length} API key(s) configured.`,\n      )\n      return\n    }\n    const storedKeys = setConfiguredApiKeys(\n      currentKeys.filter((key) => key !== apiKey),\n    )\n    consola.success(\n      `API key removed from ${PATHS.CONFIG_PATH}. ${storedKeys.length} API key(s) configured.`,\n    )\n    return\n  }\n\n  if (operation === \"clear\") {\n    setConfiguredApiKeys([])\n    consola.success(`Removed all API keys from ${PATHS.CONFIG_PATH}.`)\n    return\n  }\n\n  const currentKeys = getConfiguredApiKeys()\n  if (currentKeys.length === 0) {\n    consola.info(\n      \"No API keys configured. Run `npx copilot-api auth keys --add <key>` to add one.\",\n    )\n    return\n  }\n  consola.info(\"Configured API keys:\")\n  for (const key of currentKeys) {\n    consola.info(`- ${key}`)\n  }\n}\n\nconst authLogin = defineCommand({\n  meta: {\n    name: \"login\",\n    description:\n      \"Authenticate or configure a provider without running the server\",\n  },\n  args: authArgs,\n  run({ args }) {\n    return runAuthLogin({\n      provider: args.provider,\n      verbose: args.verbose,\n      showToken: args[\"show-token\"],\n    })\n  },\n})\n\nconst authKeys = defineCommand({\n  meta: {\n    name: \"keys\",\n    description: \"Manage gateway API keys (auth.apiKeys) in the config\",\n  },\n  args: authKeysArgs,\n  run({ args }) {\n    return runAuthKeys({\n      add: args.add,\n      remove: args.remove,\n      list: args.list,\n      clear: args.clear,\n    })\n  },\n})\n\nexport const auth = defineCommand({\n  meta: {\n    name: \"auth\",\n    description: \"Run authentication flows without running the server\",\n  },\n  args: authArgs,\n  subCommands: {\n    login: authLogin,\n    keys: authKeys,\n  },\n  run({ args }) {\n    if ((args._[0] ?? \"\").trim()) {\n      return\n    }\n\n    return runAuthLogin({\n      provider: args.provider,\n      verbose: args.verbose,\n      showToken: args[\"show-token\"],\n    })\n  },\n})\n"],"mappings":";;;;;AASA,MAAa,yBAAyB;CACpC,eAAe;EACb,MAAM;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;EACf;CACD,MAAM;EACJ,MAAM;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;EACf;CACD,UAAU;EACR,MAAM;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;EACf;CACD,WAAW;EACT,MAAM;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;EACf;CACD,YAAY;EACV,MAAM;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;EACf;CACF;;;ACYD,SAAgB,qBACd,UAAyB;CACvB,YAAY,QAAQ,SAAS;CAC7B,UAAU,QAAQ;CAClB,YAAY,QAAQ,MAAM;CAC1B,aAAa,QAAQ,OAAO;CAC5B,mBAAmB,OAAO,QAAQ,OAAO,kBAAkB;CAC5D,EACQ;CACT,OAAO,QACL,QAAQ,aAAa,WAChB,QAAQ,cACR,QAAQ,cACR,QAAQ,eACR,QAAQ,kBACd;;AAGH,SAAS,eAAe,SAAuD;CAC7E,OAAO,QAAQ,SAAS,WACpB,QAAQ,UACP,QAAQ,WAAW,QAAQ;;AAGlC,eAAsB,gBACpB,SACA,SACA,SAC6B;CAC7B,IAAI,QAAQ,SAAS,UAAU;EAC7B,MAAM,QAAQ,MAAM,QAAQ,OAAO;GACjC;GACA,SAAS,QAAQ,QAAQ,KAAK,WAC5B,OAAO,WAAW,WAAW;IAAE,OAAO;IAAQ,OAAO;IAAQ,GAAG,OACjE;GACD,cAAc,QAAQ;GACvB,CAAC;EACF,IAAI,QAAQ,SAAS,MAAM,EACzB,OAAO,eAAe,QAAQ;EAEhC,OAAO,OAAO,UAAU,WAAW,QAAQ,KAAA;;CAG7C,MAAM,QAAQ,MAAM,QAAQ,KAAK;EAC/B;EACA,cAAc,QAAQ;EACtB,cAAc,QAAQ;EACtB,aAAa,QAAQ;EACtB,CAAC;CACF,IAAI,QAAQ,SAAS,MAAM,EACzB,OAAO,eAAe,QAAQ;CAEhC,OAAO,OAAO,UAAU,WAAW,QAAQ,KAAA;;AAG7C,eAAsB,OACpB,SACA,SAC6B;CAC7B,IAAI,CAAC,sBAAsB,EAAE;EAC3B,IAAI,QAAQ,SAAS,UAAU;GAC7B,MAAM,QAAQ,MAAM,QAAQ,OAAO,SAAS,QAAQ;GACpD,OAAO,OAAO,UAAU,WAAW,QAAQ,KAAA;;EAE7C,OAAO,MAAM,QAAQ,OAAO,SAAS,QAAQ;;CAI/C,OAAO,MAAM,gBAAgB,SAAS,SAAS,MAD3B,OAAO,kBAC0B;;;;ACvFvD,MAAM,WAAW;CACf,UAAU;EACR,MAAM;EACN,aACE;EACH;CACD,SAAS;EACP,OAAO;EACP,MAAM;EACN,SAAS;EACT,aAAa;EACd;CACD,cAAc;EACZ,MAAM;EACN,SAAS;EACT,aAAa;EACd;CACF;AAED,MAAM,yBAAyB,CAAC,WAAW,QAAQ;AACnD,MAAM,uBAAuB,OAAO,KAClC,uBACD;AACD,MAAM,sBAAsB;CAC1B,GAAG;CACH,GAAG;CACH;CACD;AACD,MAAM,mCAAmC;AACzC,MAAM,qCAAqC;AAC3C,MAAM,6BAA6B,CAAC,aAAa,gBAAgB;AAUjE,MAAM,uBAAyD;CAH7D,SAAS;CACT,OAAO;CAIP,eAAe;CACf,MAAM;CACN,UAAU;CACV,WAAW;CACX,YAAY;CACZ,QAAQ;CACT;AAED,SAAS,mBACP,cACkC;CAClC,OAAO,oBAAoB,SAAS,aAAiC;;AAGvE,SAAS,yBACP,OACiC;CACjC,OAAO,2BAA2B,SAAS,MAAgC;;AAG7E,SAAS,oBACP,cACmC;CACnC,OAAO,qBAAqB,SAAS,aAAkC;;AAGzE,eAAe,yBACb,aAC2B;CAC3B,MAAM,qBAAqB,CAAC,GAAG,oBAAoB;CAEnD,IAAI,gBAAgB,KAAA,GAAW;EAC7B,MAAM,eAAe,YAAY,MAAM;EACvC,IAAI,CAAC,mBAAmB,aAAa,EACnC,MAAM,IAAI,MACR,qBAAqB,YAAY,sBAAsB,mBAAmB,KAAK,KAAK,GACrF;EAEH,OAAO;;CAGT,IAAI,mBAAmB,WAAW,GAChC,OAAO,mBAAmB;CAG5B,MAAM,WAAW,MAAM,OAAO,oCAAoC;EAChE,MAAM;EACN,SAAS,mBAAmB,KAAK,kBAAkB;GACjD,OAAO,GAAG,qBAAqB,cAAc,IAAI,aAAa;GAC9D,OAAO;GACR,EAAE;EACJ,CAAC;CAEF,IAAI,CAAC,YAAY,CAAC,mBAAmB,SAAS,EAC5C,MAAM,IAAI,MAAM,uBAAuB;CAGzC,OAAO;;AAGT,SAAS,yBAAyB,cAA4B;CAC5D,IAAI,CAAC,cACH,MAAM,IAAI,MAAM,2CAA2C;CAG7D,IAAI,CAAC,+BAA+B,KAAK,aAAa,EACpD,MAAM,IAAI,MACR,8GACD;CAGH,IAAI,iBAAiB,aAAa,iBAAiB,SACjD,MAAM,IAAI,MACR,kBAAkB,aAAa,sCAChC;;AAIL,eAAe,mBACb,SACA,WACiB;CACjB,MAAM,QAAQ,MAAM,OAAO,SAAS,EAAE,MAAM,QAAQ,CAAC;CACrD,MAAM,kBAAkB,OAAO,UAAU,WAAW,MAAM,MAAM,GAAG;CACnE,IAAI,CAAC,iBACH,MAAM,IAAI,MAAM,GAAG,UAAU,6BAA6B;CAE5D,OAAO;;AAGT,SAAS,qBAA8B;CACrC,OAAO,QACL,QAAQ,MAAM,SACT,QAAQ,OAAO,SACf,OAAO,QAAQ,MAAM,eAAe,WAC1C;;AAGH,eAAe,iBAAiB,SAAkC;CAChE,IAAI,CAAC,oBAAoB,EAAE;EACzB,MAAM,QAAQ,MAAM,OAAO,SAAS,EAAE,MAAM,QAAQ,CAAC;EACrD,OAAO,OAAO,UAAU,WAAW,QAAQ;;CAG7C,OAAO,MAAM,IAAI,SAAiB,SAAS,WAAW;EACpD,IAAI,QAAQ;EACZ,MAAM,oBAAoB,QAAQ,MAAM,UAAU;EAElD,SAAS,UAAgB;GACvB,QAAQ,MAAM,IAAI,QAAQ,OAAO;GACjC,QAAQ,MAAM,WAAW,kBAAkB;GAC3C,QAAQ,MAAM,OAAO;;EAGvB,SAAS,SAAe;GACtB,SAAS;GACT,QAAQ,OAAO,MAAM,KAAK;GAC1B,QAAQ,MAAM;;EAGhB,SAAS,SAAe;GACtB,SAAS;GACT,QAAQ,OAAO,MAAM,KAAK;GAC1B,uBAAO,IAAI,MAAM,mBAAmB,CAAC;;EAGvC,SAAS,OAAO,OAAqB;GACnC,MAAM,QAAQ,MAAM,SAAS,OAAO;GAEpC,IAAI,MAAM,WAAW,OAAS,EAC5B;GAGF,KAAK,MAAM,QAAQ,OAAO;IACxB,IAAI,SAAS,KAAU;KACrB,QAAQ;KACR;;IAGF,IAAI,SAAS,QAAQ,SAAS,MAAM;KAClC,QAAQ;KACR;;IAGF,IAAI,SAAS,QAAQ,SAAS,KAAU;KACtC,IAAI,MAAM,SAAS,GAAG;MACpB,QAAQ,MAAM,MAAM,GAAG,GAAG;MAC1B,QAAQ,OAAO,MAAM,QAAQ;;KAE/B;;IAGF,IAAI,QAAQ,KAAK;KACf,SAAS;KACT,QAAQ,OAAO,MAAM,IAAI;;;;EAK/B,QAAQ,OAAO,MAAM,GAAG,QAAQ,IAAI;EACpC,QAAQ,MAAM,WAAW,KAAK;EAC9B,QAAQ,MAAM,QAAQ;EACtB,QAAQ,MAAM,GAAG,QAAQ,OAAO;GAChC;;AAGJ,eAAe,qBACb,SACA,WACiB;CAEjB,MAAM,mBAAkB,MADJ,iBAAiB,QAAQ,EACf,MAAM;CACpC,IAAI,CAAC,iBACH,MAAM,IAAI,MAAM,GAAG,UAAU,6BAA6B;CAE5D,OAAO;;AAGT,eAAe,2BAA4C;CACzD,MAAM,eAAe,MAAM,mBACzB,uBACA,gBACD;CACD,yBAAyB,aAAa;CACtC,OAAO;;AAGT,eAAe,2BAAkD;CAC/D,MAAM,eAAe,MAAM,OAAO,wBAAwB;EACxD,MAAM;EACN,SAAS,yBAAyB,KAAK,UAAU;GAC/C,OAAO;GACP,OAAO;GACR,EAAE;EACJ,CAAC;CAEF,IACE,OAAO,iBAAiB,YACrB,CAAC,wBAAwB,aAAa,EAEzC,MAAM,IAAI,MAAM,4BAA4B;CAG9C,OAAO;;AAGT,eAAe,wBACb,aACuB;CACvB,MAAM,eAAe,MAAM,OACzB,kCAAkC,YAAY,IAC9C;EACE,MAAM;EACN,SAAS,CACP;GACE,OAAO,YAAY,YAAY;GAC/B,OAAO;GACR,EACD,GAAG,yBAAyB,KAAK,UAAU;GACzC,OAAO;GACP,OAAO;GACR,EAAE,CACJ;EACF,CACF;CAED,IAAI,iBAAiB,oCACnB,OAAO;CAGT,IACE,OAAO,iBAAiB,YACrB,wBAAwB,aAAa,EAExC,OAAO;CAGT,MAAM,IAAI,MAAM,4BAA4B;;AAG9C,SAAS,2BACP,cACkB;CAClB,OAAO,iBAAiB,cAAc,cAAc;;AAGtD,eAAe,6BACb,cACuC;CAEvC,MAAM,WAAW,MAAM,OAAO,6BAA6B;EACzD,MAAM;EACN,SAAS,CACP;GACE,OAAO,YALW,2BAA2B,aAKX,CAAC;GACnC,OAAO;GACR,EACD,GAAG,2BAA2B,KAAK,WAAW;GAC5C,OAAO;GACP;GACD,EAAE,CACJ;EACF,CAAC;CAEF,IAAI,aAAa,kCACf;CAGF,IAAI,OAAO,aAAa,YAAY,yBAAyB,SAAS,EACpE,OAAO;CAGT,MAAM,IAAI,MAAM,iCAAiC;;AAGnD,eAAe,2BACb,gBACiB;CACjB,MAAM,QAAQ,MAAM,OAClB,oCAAoC,eAAe,IACnD;EACE,MAAM;EACN,SAAS;EACT,SAAS;EACV,CACF;CACD,MAAM,UAAU,yBACd,OAAO,UAAU,YAAY,MAAM,MAAM,GAAG,QAAQ,eACrD;CACD,IAAI,CAAC,SACH,MAAM,IAAI,MAAM,qCAAqC;CAGvD,OAAO;;AAGT,SAAS,0BACP,wBACA,SAOgB;CAChB,OAAO;EACL,MAAM,QAAQ;EACd,SAAS;EACT,SAAS,QAAQ;EACjB,QAAQ,QAAQ;EAChB,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,UAAU,GAAG,EAAE;EAC1D,iBACE,QAAQ,mBAAmB,uBAAuB;EACpD,GAAI,uBAAuB,SACzB,EAAE,QAAQ,uBAAuB,QAAQ,GACzC,EAAE;EACL;;AAGH,eAAe,0BAAyC;CACtD,MAAM,eAAe,MAAM,0BAA0B;CACrD,MAAM,OAAO,MAAM,0BAA0B;CAC7C,MAAM,UAAU,yBACd,MAAM,mBAAmB,0BAA0B,UAAU,CAC9D;CACD,IAAI,CAAC,SACH,MAAM,IAAI,MAAM,qCAAqC;CAGvD,MAAM,SAAS,MAAM,qBAAqB,yBAAyB,SAAS;CAC5E,MAAM,WAAW,MAAM,6BAA6B,KAAK;CAGzD,kBACE,cACA,0BAJ6B,qBAAqB,aAAa,IAAI,EAAE,EAInB;EAChD;EACA;EACA;EACA;EACD,CAAC,CACH;CAED,QAAQ,QACN,oBAAoB,aAAa,eAAe,MAAM,cACvD;;AAGH,eAAe,uBACb,cACe;CACf,MAAM,wBAAwB,uBAAuB;CACrD,MAAM,SAAS,MAAM,qBACnB,SAAS,aAAa,UACtB,SACD;CACD,MAAM,OACJ,sBAAsB,eACpB,MAAM,wBAAwB,sBAAsB,KAAK,GACzD,sBAAsB;CAC1B,MAAM,UAAU,MAAM,2BACpB,sBAAsB,QACvB;CAGD,kBACE,cACA,0BAJ6B,qBAAqB,aAAa,IAAI,EAAE,EAInB;EAChD;EACA;EACA,iBAAiB,sBAAsB;EACvC;EACD,CAAC,CACH;CAED,QAAQ,QACN,GAAG,qBAAqB,cAAc,aAAa,aAAa,eAAe,MAAM,cACtF;;AAGH,eAAe,iBAAgC;CAiB7C,MAAM,wBAAwB,MAhBJ,WAAW;EACnC,OAAO,MAAM;GACX,QAAQ,KAAK,qDAAqD;GAClE,QAAQ,IAAI,KAAK,IAAI;GACrB,IAAI,KAAK,cACP,QAAQ,KAAK,KAAK,aAAa;;EAGnC,SAAS,SAAS;GAChB,OAAO,OAAO,SAAS,EAAE,MAAM,QAAQ,CAAC,CAAC,MAAM,UAAU,SAAS,GAAG;;EAEvE,WAAW,SAAS;GAClB,QAAQ,MAAM,QAAQ;;EAEzB,CAAC,EAEyC,EAAE,gBAAgB,MAAM,CAAC;CACpE,QAAQ,QACN,oCAAoC,MAAM,YAAY,8BAA8B,MAAM,wBAC3F;;AAGH,eAAe,kBAAkB,UAA2C;CAC1E,IAAI,aAAa,WAAW;EAC1B,MAAM,iBAAiB,EAAE,OAAO,MAAM,CAAC;EACvC,QAAQ,QAAQ,2BAA2B,MAAM,kBAAkB;EACnE;;CAGF,IAAI,aAAa,SAAS;EACxB,MAAM,gBAAgB;EACtB;;CAGF,IAAI,oBAAoB,SAAS,EAAE;EACjC,MAAM,uBAAuB,SAAS;EACtC;;CAGF,MAAM,yBAAyB;;AAGjC,eAAsB,mBAAkC;CACtD,MAAM,WAAW,MAAM,yBAAyB,KAAA,EAAU;CAC1D,QAAQ,KAAK,mBAAmB,qBAAqB,YAAY;CACjE,MAAM,kBAAkB,SAAS;;AAGnC,eAAsB,aAAa,SAAwC;CAEzE,CAAA,MADwB,OAAO,sBACrB,sBAAsB;CAEhC,IAAI,QAAQ,SAAS;EACnB,QAAQ,QAAQ;EAChB,QAAQ,KAAK,0BAA0B;;CAGzC,MAAM,YAAY,QAAQ;CAE1B,MAAM,aAAa;CACnB,MAAM,WAAW,MAAM,yBAAyB,QAAQ,SAAS;CAEjE,QAAQ,KAAK,mBAAmB,qBAAqB,YAAY;CACjE,MAAM,kBAAkB,SAAS;;AAGnC,MAAM,eAAe;CACnB,KAAK;EACH,OAAO;EACP,MAAM;EACN,aAAa;EACd;CACD,QAAQ;EACN,OAAO;EACP,MAAM;EACN,aAAa;EACd;CACD,MAAM;EACJ,OAAO;EACP,MAAM;EACN,SAAS;EACT,aAAa;EACd;CACD,OAAO;EACL,MAAM;EACN,SAAS;EACT,aAAa;EACd;CACF;AASD,SAAS,sBAAsB,OAAuB;CACpD,MAAM,gBAAgB,MAAM,MAAM;CAClC,IAAI,CAAC,eACH,MAAM,IAAI,MAAM,qCAAqC;CAEvD,OAAO;;AAGT,eAAsB,YAAY,SAA4C;CAE5E,CAAA,MADwB,OAAO,sBACrB,sBAAsB;CAEhC,MAAM,aAAa;CAEnB,MAAM,aAAa;EACjB,GAAI,QAAQ,QAAQ,KAAA,IAAY,CAAC,MAAM,GAAG,EAAE;EAC5C,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,SAAS,GAAG,EAAE;EAClD,GAAI,QAAQ,OAAO,CAAC,OAAO,GAAG,EAAE;EAChC,GAAI,QAAQ,QAAQ,CAAC,QAAQ,GAAG,EAAE;EACnC;CACD,IAAI,WAAW,SAAS,GACtB,MAAM,IAAI,MACR,qEACD;CAGH,MAAM,YAAY,WAAW,MAAM;CAEnC,IAAI,cAAc,OAAO;EACvB,MAAM,SAAS,sBAAsB,QAAQ,OAAO,GAAG;EACvD,MAAM,cAAc,sBAAsB;EAC1C,IAAI,YAAY,SAAS,OAAO,EAAE;GAChC,QAAQ,KACN,+BAA+B,YAAY,OAAO,yBACnD;GACD;;EAEF,MAAM,aAAa,qBAAqB,CAAC,GAAG,aAAa,OAAO,CAAC;EACjE,QAAQ,QACN,oBAAoB,MAAM,YAAY,IAAI,WAAW,OAAO,yBAC7D;EACD;;CAGF,IAAI,cAAc,UAAU;EAC1B,MAAM,SAAS,sBAAsB,QAAQ,UAAU,GAAG;EAC1D,MAAM,cAAc,sBAAsB;EAC1C,IAAI,CAAC,YAAY,SAAS,OAAO,EAAE;GACjC,QAAQ,KACN,sBAAsB,YAAY,OAAO,yBAC1C;GACD;;EAEF,MAAM,aAAa,qBACjB,YAAY,QAAQ,QAAQ,QAAQ,OAAO,CAC5C;EACD,QAAQ,QACN,wBAAwB,MAAM,YAAY,IAAI,WAAW,OAAO,yBACjE;EACD;;CAGF,IAAI,cAAc,SAAS;EACzB,qBAAqB,EAAE,CAAC;EACxB,QAAQ,QAAQ,6BAA6B,MAAM,YAAY,GAAG;EAClE;;CAGF,MAAM,cAAc,sBAAsB;CAC1C,IAAI,YAAY,WAAW,GAAG;EAC5B,QAAQ,KACN,kFACD;EACD;;CAEF,QAAQ,KAAK,uBAAuB;CACpC,KAAK,MAAM,OAAO,aAChB,QAAQ,KAAK,KAAK,MAAM;;AAoC5B,MAAa,OAAO,cAAc;CAChC,MAAM;EACJ,MAAM;EACN,aAAa;EACd;CACD,MAAM;CACN,aAAa;EACX,OAvCc,cAAc;GAC9B,MAAM;IACJ,MAAM;IACN,aACE;IACH;GACD,MAAM;GACN,IAAI,EAAE,QAAQ;IACZ,OAAO,aAAa;KAClB,UAAU,KAAK;KACf,SAAS,KAAK;KACd,WAAW,KAAK;KACjB,CAAC;;GAEL,CAyBU;EACP,MAxBa,cAAc;GAC7B,MAAM;IACJ,MAAM;IACN,aAAa;IACd;GACD,MAAM;GACN,IAAI,EAAE,QAAQ;IACZ,OAAO,YAAY;KACjB,KAAK,KAAK;KACV,QAAQ,KAAK;KACb,MAAM,KAAK;KACX,OAAO,KAAK;KACb,CAAC;;GAEL,CAUS;EACP;CACD,IAAI,EAAE,QAAQ;EACZ,KAAK,KAAK,EAAE,MAAM,IAAI,MAAM,EAC1B;EAGF,OAAO,aAAa;GAClB,UAAU,KAAK;GACf,SAAS,KAAK;GACd,WAAW,KAAK;GACjB,CAAC;;CAEL,CAAC"}
+{"version":3,"file":"auth-CMufJUfF.js","names":[],"sources":["../src/lib/quick-providers.ts","../src/lib/interactive-prompt.ts","../src/auth.ts"],"sourcesContent":["import type { ProviderType } from \"./config\"\n\ninterface QuickProviderConfig {\n  type: ProviderType\n  baseUrl: string\n  pricingCurrency: string\n  editableType: boolean\n}\n\nexport const QUICK_PROVIDER_CONFIGS = {\n  \"opencode-go\": {\n    type: \"openai-compatible\",\n    baseUrl: \"https://opencode.ai/zen/go\",\n    pricingCurrency: \"USD\",\n    editableType: false,\n  },\n  kimi: {\n    type: \"openai-compatible\",\n    baseUrl: \"https://api.kimi.com/coding\",\n    pricingCurrency: \"USD\",\n    editableType: true,\n  },\n  deepseek: {\n    type: \"anthropic\",\n    baseUrl: \"https://api.deepseek.com/anthropic\",\n    pricingCurrency: \"CNY\",\n    editableType: true,\n  },\n  dashscope: {\n    type: \"openai-compatible\",\n    baseUrl: \"https://dashscope.aliyuncs.com/compatible-mode\",\n    pricingCurrency: \"CNY\",\n    editableType: true,\n  },\n  openrouter: {\n    type: \"anthropic\",\n    baseUrl: \"https://openrouter.ai/api\",\n    pricingCurrency: \"USD\",\n    editableType: false,\n  },\n} satisfies Record<string, QuickProviderConfig>\n\nexport type QuickProviderName = keyof typeof QUICK_PROVIDER_CONFIGS\n","import consola from \"consola\"\n\ninterface PromptSelectOption {\n  label: string\n  value: string\n  hint?: string\n}\n\ninterface TextPromptOptions {\n  type?: \"text\"\n  default?: string\n  initial?: string\n  placeholder?: string\n}\n\ninterface SelectPromptOptions {\n  type: \"select\"\n  initial?: string\n  options: Array<string | PromptSelectOption>\n}\n\nexport type InteractivePromptOptions = SelectPromptOptions | TextPromptOptions\n\ninterface ClackSelectOptions {\n  message: string\n  initialValue?: string\n  options: Array<PromptSelectOption>\n}\n\ninterface ClackTextOptions {\n  message: string\n  defaultValue?: string\n  initialValue?: string\n  placeholder?: string\n}\n\nexport interface ClackPromptBackend {\n  isCancel(value: unknown): boolean\n  select(options: ClackSelectOptions): Promise<string | symbol>\n  text(options: ClackTextOptions): Promise<string | symbol>\n}\n\ninterface PromptRuntime {\n  bunVersion?: string\n  platform: NodeJS.Platform\n  stdinIsTTY?: boolean\n  stdoutIsTTY?: boolean\n  stdoutIsTTYStream?: boolean\n}\n\n// Consola 3.4.2 bundles a prompt implementation that writes keyboard input to\n// tty fd 0. Bun treats that as a real stdin write on Windows and throws EPIPE.\nexport function shouldUseClackPrompt(\n  runtime: PromptRuntime = {\n    bunVersion: process.versions.bun,\n    platform: process.platform,\n    stdinIsTTY: process.stdin.isTTY,\n    stdoutIsTTY: process.stdout.isTTY,\n    stdoutIsTTYStream: typeof process.stdout.getColorDepth === \"function\",\n  },\n): boolean {\n  return Boolean(\n    runtime.platform === \"win32\"\n      && runtime.bunVersion\n      && runtime.stdinIsTTY\n      && runtime.stdoutIsTTY\n      && runtime.stdoutIsTTYStream,\n  )\n}\n\nfunction getCancelValue(options: InteractivePromptOptions): string | undefined {\n  return options.type === \"select\" ?\n      options.initial\n    : (options.default ?? options.initial)\n}\n\nexport async function promptWithClack(\n  message: string,\n  options: InteractivePromptOptions,\n  backend: ClackPromptBackend,\n): Promise<string | undefined> {\n  if (options.type === \"select\") {\n    const value = await backend.select({\n      message,\n      options: options.options.map((option) =>\n        typeof option === \"string\" ? { label: option, value: option } : option,\n      ),\n      initialValue: options.initial,\n    })\n    if (backend.isCancel(value)) {\n      return getCancelValue(options)\n    }\n    return typeof value === \"string\" ? value : undefined\n  }\n\n  const value = await backend.text({\n    message,\n    defaultValue: options.default,\n    initialValue: options.initial,\n    placeholder: options.placeholder,\n  })\n  if (backend.isCancel(value)) {\n    return getCancelValue(options)\n  }\n  return typeof value === \"string\" ? value : undefined\n}\n\nexport async function prompt(\n  message: string,\n  options: InteractivePromptOptions,\n): Promise<string | undefined> {\n  if (!shouldUseClackPrompt()) {\n    if (options.type === \"select\") {\n      const value = await consola.prompt(message, options)\n      return typeof value === \"string\" ? value : undefined\n    }\n    return await consola.prompt(message, options)\n  }\n\n  const clack = await import(\"@clack/prompts\")\n  return await promptWithClack(message, options, clack)\n}\n","#!/usr/bin/env node\n\nimport { defineCommand } from \"citty\"\nimport consola from \"consola\"\n\nimport {\n  getRawProviderConfig,\n  isSupportedProviderType,\n  normalizeProviderBaseUrl,\n  setProviderConfig,\n  setConfiguredApiKeys,\n  SUPPORTED_PROVIDER_TYPES,\n  type ProviderAuthType,\n  type ProviderConfig,\n  type ProviderType,\n} from \"./lib/config\"\nimport { loginCodex } from \"./lib/oauth/codex\"\nimport { PATHS, ensurePaths } from \"./lib/paths\"\nimport { getConfiguredApiKeys } from \"./lib/request-auth\"\nimport {\n  QUICK_PROVIDER_CONFIGS,\n  type QuickProviderName,\n} from \"./lib/quick-providers\"\nimport { prompt } from \"./lib/interactive-prompt\"\nimport { state } from \"./lib/state\"\nimport { persistCodexCredentials, setupGitHubToken } from \"./lib/token\"\n\ninterface RunAuthOptions {\n  provider?: string\n  verbose: boolean\n  showToken: boolean\n}\n\nconst authArgs = {\n  provider: {\n    type: \"string\",\n    description:\n      \"Provider to log in with or configure (copilot, codex, opencode-go, kimi, deepseek, dashscope, openrouter, custom)\",\n  },\n  verbose: {\n    alias: \"v\",\n    type: \"boolean\",\n    default: false,\n    description: \"Enable verbose logging\",\n  },\n  \"show-token\": {\n    type: \"boolean\",\n    default: false,\n    description: \"Show provider access token on auth\",\n  },\n} as const\n\nconst BUILTIN_PROVIDER_NAMES = [\"copilot\", \"codex\"] as const\nconst QUICK_PROVIDER_NAMES = Object.keys(\n  QUICK_PROVIDER_CONFIGS,\n) as Array<QuickProviderName>\nconst AUTH_PROVIDER_NAMES = [\n  ...BUILTIN_PROVIDER_NAMES,\n  ...QUICK_PROVIDER_NAMES,\n  \"custom\",\n] as const\nconst CUSTOM_PROVIDER_AUTH_TYPE_OPTION = \"__default__\"\nconst QUICK_PROVIDER_DEFAULT_TYPE_OPTION = \"__default__\"\nconst CUSTOM_PROVIDER_AUTH_TYPES = [\"x-api-key\", \"authorization\"] as const\n\ntype BuiltinProviderName = (typeof BUILTIN_PROVIDER_NAMES)[number]\ntype AuthProviderName = (typeof AUTH_PROVIDER_NAMES)[number]\ntype CustomProviderAuthType = (typeof CUSTOM_PROVIDER_AUTH_TYPES)[number]\n\nconst BUILTIN_PROVIDER_LABELS: Record<BuiltinProviderName, string> = {\n  copilot: \"GitHub Copilot\",\n  codex: \"OpenAI Codex\",\n}\nconst AUTH_PROVIDER_LABELS: Record<AuthProviderName, string> = {\n  ...BUILTIN_PROVIDER_LABELS,\n  \"opencode-go\": \"OpenCode Go\",\n  kimi: \"Kimi\",\n  deepseek: \"DeepSeek\",\n  dashscope: \"DashScope\",\n  openrouter: \"OpenRouter\",\n  custom: \"Custom provider\",\n}\n\nfunction isAuthProviderName(\n  providerName: string,\n): providerName is AuthProviderName {\n  return AUTH_PROVIDER_NAMES.includes(providerName as AuthProviderName)\n}\n\nfunction isCustomProviderAuthType(\n  value: string,\n): value is CustomProviderAuthType {\n  return CUSTOM_PROVIDER_AUTH_TYPES.includes(value as CustomProviderAuthType)\n}\n\nfunction isQuickProviderName(\n  providerName: AuthProviderName,\n): providerName is QuickProviderName {\n  return QUICK_PROVIDER_NAMES.includes(providerName as QuickProviderName)\n}\n\nasync function resolveProviderSelection(\n  providerArg: string | undefined,\n): Promise<AuthProviderName> {\n  const availableProviders = [...AUTH_PROVIDER_NAMES]\n\n  if (providerArg !== undefined) {\n    const providerName = providerArg.trim()\n    if (!isAuthProviderName(providerName)) {\n      throw new Error(\n        `Unknown provider '${providerArg}'. Expected one of: ${availableProviders.join(\", \")}`,\n      )\n    }\n    return providerName\n  }\n\n  if (availableProviders.length === 1) {\n    return availableProviders[0]\n  }\n\n  const provider = await prompt(\"Select a provider to log in with\", {\n    type: \"select\",\n    options: availableProviders.map((providerName) => ({\n      label: `${AUTH_PROVIDER_LABELS[providerName]} (${providerName})`,\n      value: providerName,\n    })),\n  })\n\n  if (!provider || !isAuthProviderName(provider)) {\n    throw new Error(\"No provider selected\")\n  }\n\n  return provider\n}\n\nfunction assertCustomProviderName(providerName: string): void {\n  if (!providerName) {\n    throw new Error(\"Provider name must be a non-empty string\")\n  }\n\n  if (!/^[A-Za-z0-9][A-Za-z0-9_-]*$/u.test(providerName)) {\n    throw new Error(\n      \"Provider name must start with a letter or number and contain only letters, numbers, underscores, or hyphens\",\n    )\n  }\n\n  if (providerName === \"copilot\" || providerName === \"codex\") {\n    throw new Error(\n      `Provider name '${providerName}' is reserved for a builtin provider`,\n    )\n  }\n}\n\nasync function promptRequiredText(\n  message: string,\n  fieldName: string,\n): Promise<string> {\n  const value = await prompt(message, { type: \"text\" })\n  const normalizedValue = typeof value === \"string\" ? value.trim() : \"\"\n  if (!normalizedValue) {\n    throw new Error(`${fieldName} must be a non-empty string`)\n  }\n  return normalizedValue\n}\n\nfunction canUseMaskedPrompt(): boolean {\n  return Boolean(\n    process.stdin.isTTY\n      && process.stdout.isTTY\n      && typeof process.stdin.setRawMode === \"function\",\n  )\n}\n\nasync function promptMaskedText(message: string): Promise<string> {\n  if (!canUseMaskedPrompt()) {\n    const value = await prompt(message, { type: \"text\" })\n    return typeof value === \"string\" ? value : \"\"\n  }\n\n  return await new Promise<string>((resolve, reject) => {\n    let value = \"\"\n    const rawModeWasEnabled = process.stdin.isRaw === true\n\n    function cleanup(): void {\n      process.stdin.off(\"data\", onData)\n      process.stdin.setRawMode(rawModeWasEnabled)\n      process.stdin.pause()\n    }\n\n    function finish(): void {\n      cleanup()\n      process.stdout.write(\"\\n\")\n      resolve(value)\n    }\n\n    function cancel(): void {\n      cleanup()\n      process.stdout.write(\"\\n\")\n      reject(new Error(\"Prompt cancelled\"))\n    }\n\n    function onData(chunk: Buffer): void {\n      const input = chunk.toString(\"utf8\")\n\n      if (input.startsWith(\"\\u001B\")) {\n        return\n      }\n\n      for (const char of input) {\n        if (char === \"\\u0003\") {\n          cancel()\n          return\n        }\n\n        if (char === \"\\r\" || char === \"\\n\") {\n          finish()\n          return\n        }\n\n        if (char === \"\\b\" || char === \"\\u007F\") {\n          if (value.length > 0) {\n            value = value.slice(0, -1)\n            process.stdout.write(\"\\b \\b\")\n          }\n          continue\n        }\n\n        if (char >= \" \") {\n          value += char\n          process.stdout.write(\"*\")\n        }\n      }\n    }\n\n    process.stdout.write(`${message}: `)\n    process.stdin.setRawMode(true)\n    process.stdin.resume()\n    process.stdin.on(\"data\", onData)\n  })\n}\n\nasync function promptRequiredSecret(\n  message: string,\n  fieldName: string,\n): Promise<string> {\n  const value = await promptMaskedText(message)\n  const normalizedValue = value.trim()\n  if (!normalizedValue) {\n    throw new Error(`${fieldName} must be a non-empty string`)\n  }\n  return normalizedValue\n}\n\nasync function promptCustomProviderName(): Promise<string> {\n  const providerName = await promptRequiredText(\n    \"Enter provider name\",\n    \"Provider name\",\n  )\n  assertCustomProviderName(providerName)\n  return providerName\n}\n\nasync function promptCustomProviderType(): Promise<ProviderType> {\n  const providerType = await prompt(\"Select provider type\", {\n    type: \"select\",\n    options: SUPPORTED_PROVIDER_TYPES.map((type) => ({\n      label: type,\n      value: type,\n    })),\n  })\n\n  if (\n    typeof providerType !== \"string\"\n    || !isSupportedProviderType(providerType)\n  ) {\n    throw new Error(\"No provider type selected\")\n  }\n\n  return providerType\n}\n\nasync function promptQuickProviderType(\n  defaultType: ProviderType,\n): Promise<ProviderType> {\n  const providerType = await prompt(\n    `Select provider type (default: ${defaultType})`,\n    {\n      type: \"select\",\n      options: [\n        {\n          label: `Default (${defaultType})`,\n          value: QUICK_PROVIDER_DEFAULT_TYPE_OPTION,\n        },\n        ...SUPPORTED_PROVIDER_TYPES.map((type) => ({\n          label: type,\n          value: type,\n        })),\n      ],\n    },\n  )\n\n  if (providerType === QUICK_PROVIDER_DEFAULT_TYPE_OPTION) {\n    return defaultType\n  }\n\n  if (\n    typeof providerType === \"string\"\n    && isSupportedProviderType(providerType)\n  ) {\n    return providerType\n  }\n\n  throw new Error(\"No provider type selected\")\n}\n\nfunction getDefaultProviderAuthType(\n  providerType: ProviderType,\n): ProviderAuthType {\n  return providerType === \"anthropic\" ? \"x-api-key\" : \"authorization\"\n}\n\nasync function promptCustomProviderAuthType(\n  providerType: ProviderType,\n): Promise<ProviderAuthType | undefined> {\n  const defaultAuthType = getDefaultProviderAuthType(providerType)\n  const authType = await prompt(\"Select provider auth type\", {\n    type: \"select\",\n    options: [\n      {\n        label: `Default (${defaultAuthType})`,\n        value: CUSTOM_PROVIDER_AUTH_TYPE_OPTION,\n      },\n      ...CUSTOM_PROVIDER_AUTH_TYPES.map((value) => ({\n        label: value,\n        value,\n      })),\n    ],\n  })\n\n  if (authType === CUSTOM_PROVIDER_AUTH_TYPE_OPTION) {\n    return undefined\n  }\n\n  if (typeof authType === \"string\" && isCustomProviderAuthType(authType)) {\n    return authType\n  }\n\n  throw new Error(\"No provider auth type selected\")\n}\n\nasync function promptQuickProviderBaseUrl(\n  defaultBaseUrl: string,\n): Promise<string> {\n  const value = await prompt(\n    `Enter provider baseUrl (default: ${defaultBaseUrl})`,\n    {\n      type: \"text\",\n      default: defaultBaseUrl,\n      initial: defaultBaseUrl,\n    },\n  )\n  const baseUrl = normalizeProviderBaseUrl(\n    typeof value === \"string\" && value.trim() ? value : defaultBaseUrl,\n  )\n  if (!baseUrl) {\n    throw new Error(\"baseUrl must be a non-empty string\")\n  }\n\n  return baseUrl\n}\n\nfunction buildCustomProviderConfig(\n  existingProviderConfig: ProviderConfig,\n  options: {\n    apiKey: string\n    authType?: ProviderAuthType\n    baseUrl: string\n    pricingCurrency?: string\n    type: ProviderType\n  },\n): ProviderConfig {\n  return {\n    type: options.type,\n    enabled: true,\n    baseUrl: options.baseUrl,\n    apiKey: options.apiKey,\n    ...(options.authType ? { authType: options.authType } : {}),\n    pricingCurrency:\n      options.pricingCurrency ?? existingProviderConfig.pricingCurrency,\n    ...(existingProviderConfig.models ?\n      { models: existingProviderConfig.models }\n    : {}),\n  }\n}\n\nasync function configureCustomProvider(): Promise<void> {\n  const providerName = await promptCustomProviderName()\n  const type = await promptCustomProviderType()\n  const baseUrl = normalizeProviderBaseUrl(\n    await promptRequiredText(\"Enter provider baseUrl\", \"baseUrl\"),\n  )\n  if (!baseUrl) {\n    throw new Error(\"baseUrl must be a non-empty string\")\n  }\n\n  const apiKey = await promptRequiredSecret(\"Enter provider apiKey\", \"apiKey\")\n  const authType = await promptCustomProviderAuthType(type)\n  const existingProviderConfig = getRawProviderConfig(providerName) ?? {}\n\n  setProviderConfig(\n    providerName,\n    buildCustomProviderConfig(existingProviderConfig, {\n      apiKey,\n      authType,\n      baseUrl,\n      type,\n    }),\n  )\n\n  consola.success(\n    `Custom provider '${providerName}' written to ${PATHS.CONFIG_PATH}`,\n  )\n}\n\nasync function configureQuickProvider(\n  providerName: QuickProviderName,\n): Promise<void> {\n  const defaultProviderConfig = QUICK_PROVIDER_CONFIGS[providerName]\n  const apiKey = await promptRequiredSecret(\n    `Enter ${providerName} apiKey`,\n    \"apiKey\",\n  )\n  const type =\n    defaultProviderConfig.editableType ?\n      await promptQuickProviderType(defaultProviderConfig.type)\n    : defaultProviderConfig.type\n  const baseUrl = await promptQuickProviderBaseUrl(\n    defaultProviderConfig.baseUrl,\n  )\n  const existingProviderConfig = getRawProviderConfig(providerName) ?? {}\n\n  setProviderConfig(\n    providerName,\n    buildCustomProviderConfig(existingProviderConfig, {\n      apiKey,\n      baseUrl,\n      pricingCurrency: defaultProviderConfig.pricingCurrency,\n      type,\n    }),\n  )\n\n  consola.success(\n    `${AUTH_PROVIDER_LABELS[providerName]} provider '${providerName}' written to ${PATHS.CONFIG_PATH}`,\n  )\n}\n\nasync function loginWithCodex(): Promise<void> {\n  const credentials = await loginCodex({\n    onAuth(info) {\n      consola.info(\"Open the following URL to authenticate with Codex:\")\n      consola.log(info.url)\n      if (info.instructions) {\n        consola.info(info.instructions)\n      }\n    },\n    onPrompt(message) {\n      return prompt(message, { type: \"text\" }).then((value) => value ?? \"\")\n    },\n    onProgress(message) {\n      consola.debug(message)\n    },\n  })\n\n  await persistCodexCredentials(credentials, { enableProvider: true })\n  consola.success(\n    `Codex provider config written to ${PATHS.CONFIG_PATH} and credentials written to ${PATHS.CODEX_CREDENTIAL_PATH}`,\n  )\n}\n\nasync function loginWithProvider(provider: AuthProviderName): Promise<void> {\n  if (provider === \"copilot\") {\n    await setupGitHubToken({ force: true })\n    consola.success(\"GitHub token written to\", PATHS.GITHUB_TOKEN_PATH)\n    return\n  }\n\n  if (provider === \"codex\") {\n    await loginWithCodex()\n    return\n  }\n\n  if (isQuickProviderName(provider)) {\n    await configureQuickProvider(provider)\n    return\n  }\n\n  await configureCustomProvider()\n}\n\nexport async function runProviderSetup(): Promise<void> {\n  const provider = await resolveProviderSelection(undefined)\n  consola.info(`Logging in with ${AUTH_PROVIDER_LABELS[provider]}`)\n  await loginWithProvider(provider)\n}\n\nexport async function runAuthLogin(options: RunAuthOptions): Promise<void> {\n  const tlsModule = await import(\"./lib/tls\")\n  tlsModule.enableSystemCACompat()\n\n  if (options.verbose) {\n    consola.level = 5\n    consola.info(\"Verbose logging enabled\")\n  }\n\n  state.showToken = options.showToken\n\n  await ensurePaths()\n  const provider = await resolveProviderSelection(options.provider)\n\n  consola.info(`Logging in with ${AUTH_PROVIDER_LABELS[provider]}`)\n  await loginWithProvider(provider)\n}\n\nconst authKeysArgs = {\n  add: {\n    alias: \"a\",\n    type: \"string\",\n    description: \"Add an API key for gateway authentication\",\n  },\n  remove: {\n    alias: \"r\",\n    type: \"string\",\n    description: \"Remove an API key\",\n  },\n  list: {\n    alias: \"l\",\n    type: \"boolean\",\n    default: false,\n    description: \"List configured API keys\",\n  },\n  clear: {\n    type: \"boolean\",\n    default: false,\n    description: \"Remove all configured API keys\",\n  },\n} as const\n\ninterface RunAuthKeysOptions {\n  add?: string\n  remove?: string\n  list?: boolean\n  clear?: boolean\n}\n\nfunction normalizeAuthKeyValue(value: string): string {\n  const normalizedKey = value.trim()\n  if (!normalizedKey) {\n    throw new Error(\"API key must be a non-empty string\")\n  }\n  return normalizedKey\n}\n\nexport async function runAuthKeys(options: RunAuthKeysOptions): Promise<void> {\n  const tlsModule = await import(\"./lib/tls\")\n  tlsModule.enableSystemCACompat()\n\n  await ensurePaths()\n\n  const operations = [\n    ...(options.add !== undefined ? [\"add\"] : []),\n    ...(options.remove !== undefined ? [\"remove\"] : []),\n    ...(options.list ? [\"list\"] : []),\n    ...(options.clear ? [\"clear\"] : []),\n  ]\n  if (operations.length > 1) {\n    throw new Error(\n      \"Use only one of --add, --remove, --list, or --clear per invocation\",\n    )\n  }\n\n  const operation = operations[0] ?? \"list\"\n\n  if (operation === \"add\") {\n    const apiKey = normalizeAuthKeyValue(options.add ?? \"\")\n    const currentKeys = getConfiguredApiKeys()\n    if (currentKeys.includes(apiKey)) {\n      consola.info(\n        `API key already configured. ${currentKeys.length} API key(s) configured.`,\n      )\n      return\n    }\n    const storedKeys = setConfiguredApiKeys([...currentKeys, apiKey])\n    consola.success(\n      `API key added to ${PATHS.CONFIG_PATH}. ${storedKeys.length} API key(s) configured.`,\n    )\n    return\n  }\n\n  if (operation === \"remove\") {\n    const apiKey = normalizeAuthKeyValue(options.remove ?? \"\")\n    const currentKeys = getConfiguredApiKeys()\n    if (!currentKeys.includes(apiKey)) {\n      consola.info(\n        `API key not found. ${currentKeys.length} API key(s) configured.`,\n      )\n      return\n    }\n    const storedKeys = setConfiguredApiKeys(\n      currentKeys.filter((key) => key !== apiKey),\n    )\n    consola.success(\n      `API key removed from ${PATHS.CONFIG_PATH}. ${storedKeys.length} API key(s) configured.`,\n    )\n    return\n  }\n\n  if (operation === \"clear\") {\n    setConfiguredApiKeys([])\n    consola.success(`Removed all API keys from ${PATHS.CONFIG_PATH}.`)\n    return\n  }\n\n  const currentKeys = getConfiguredApiKeys()\n  if (currentKeys.length === 0) {\n    consola.info(\n      \"No API keys configured. Run `npx copilot-api auth keys --add <key>` to add one.\",\n    )\n    return\n  }\n  consola.info(\"Configured API keys:\")\n  for (const key of currentKeys) {\n    consola.info(`- ${key}`)\n  }\n}\n\nconst authLogin = defineCommand({\n  meta: {\n    name: \"login\",\n    description:\n      \"Authenticate or configure a provider without running the server\",\n  },\n  args: authArgs,\n  run({ args }) {\n    return runAuthLogin({\n      provider: args.provider,\n      verbose: args.verbose,\n      showToken: args[\"show-token\"],\n    })\n  },\n})\n\nconst authKeys = defineCommand({\n  meta: {\n    name: \"keys\",\n    description: \"Manage gateway API keys (auth.apiKeys) in the config\",\n  },\n  args: authKeysArgs,\n  run({ args }) {\n    return runAuthKeys({\n      add: args.add,\n      remove: args.remove,\n      list: args.list,\n      clear: args.clear,\n    })\n  },\n})\n\nexport const auth = defineCommand({\n  meta: {\n    name: \"auth\",\n    description: \"Run authentication flows without running the server\",\n  },\n  args: authArgs,\n  subCommands: {\n    login: authLogin,\n    keys: authKeys,\n  },\n  run({ args }) {\n    if ((args._[0] ?? \"\").trim()) {\n      return\n    }\n\n    return runAuthLogin({\n      provider: args.provider,\n      verbose: args.verbose,\n      showToken: args[\"show-token\"],\n    })\n  },\n})\n"],"mappings":";;;;;AASA,MAAa,yBAAyB;CACpC,eAAe;EACb,MAAM;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;CAChB;CACA,MAAM;EACJ,MAAM;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;CAChB;CACA,UAAU;EACR,MAAM;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;CAChB;CACA,WAAW;EACT,MAAM;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;CAChB;CACA,YAAY;EACV,MAAM;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;CAChB;AACF;;;ACYA,SAAgB,qBACd,UAAyB;CACvB,YAAY,QAAQ,SAAS;CAC7B,UAAU,QAAQ;CAClB,YAAY,QAAQ,MAAM;CAC1B,aAAa,QAAQ,OAAO;CAC5B,mBAAmB,OAAO,QAAQ,OAAO,kBAAkB;AAC7D,GACS;CACT,OAAO,QACL,QAAQ,aAAa,WAChB,QAAQ,cACR,QAAQ,cACR,QAAQ,eACR,QAAQ,iBACf;AACF;AAEA,SAAS,eAAe,SAAuD;CAC7E,OAAO,QAAQ,SAAS,WACpB,QAAQ,UACP,QAAQ,WAAW,QAAQ;AAClC;AAEA,eAAsB,gBACpB,SACA,SACA,SAC6B;CAC7B,IAAI,QAAQ,SAAS,UAAU;EAC7B,MAAM,QAAQ,MAAM,QAAQ,OAAO;GACjC;GACA,SAAS,QAAQ,QAAQ,KAAK,WAC5B,OAAO,WAAW,WAAW;IAAE,OAAO;IAAQ,OAAO;GAAO,IAAI,MAClE;GACA,cAAc,QAAQ;EACxB,CAAC;EACD,IAAI,QAAQ,SAAS,KAAK,GACxB,OAAO,eAAe,OAAO;EAE/B,OAAO,OAAO,UAAU,WAAW,QAAQ,KAAA;CAC7C;CAEA,MAAM,QAAQ,MAAM,QAAQ,KAAK;EAC/B;EACA,cAAc,QAAQ;EACtB,cAAc,QAAQ;EACtB,aAAa,QAAQ;CACvB,CAAC;CACD,IAAI,QAAQ,SAAS,KAAK,GACxB,OAAO,eAAe,OAAO;CAE/B,OAAO,OAAO,UAAU,WAAW,QAAQ,KAAA;AAC7C;AAEA,eAAsB,OACpB,SACA,SAC6B;CAC7B,IAAI,CAAC,qBAAqB,GAAG;EAC3B,IAAI,QAAQ,SAAS,UAAU;GAC7B,MAAM,QAAQ,MAAM,QAAQ,OAAO,SAAS,OAAO;GACnD,OAAO,OAAO,UAAU,WAAW,QAAQ,KAAA;EAC7C;EACA,OAAO,MAAM,QAAQ,OAAO,SAAS,OAAO;CAC9C;CAGA,OAAO,MAAM,gBAAgB,SAAS,SAAS,MAD3B,OAAO,iBACyB;AACtD;;;ACxFA,MAAM,WAAW;CACf,UAAU;EACR,MAAM;EACN,aACE;CACJ;CACA,SAAS;EACP,OAAO;EACP,MAAM;EACN,SAAS;EACT,aAAa;CACf;CACA,cAAc;EACZ,MAAM;EACN,SAAS;EACT,aAAa;CACf;AACF;AAEA,MAAM,yBAAyB,CAAC,WAAW,OAAO;AAClD,MAAM,uBAAuB,OAAO,KAClC,sBACF;AACA,MAAM,sBAAsB;CAC1B,GAAG;CACH,GAAG;CACH;AACF;AACA,MAAM,mCAAmC;AACzC,MAAM,qCAAqC;AAC3C,MAAM,6BAA6B,CAAC,aAAa,eAAe;AAUhE,MAAM,uBAAyD;CAH7D,SAAS;CACT,OAAO;CAIP,eAAe;CACf,MAAM;CACN,UAAU;CACV,WAAW;CACX,YAAY;CACZ,QAAQ;AACV;AAEA,SAAS,mBACP,cACkC;CAClC,OAAO,oBAAoB,SAAS,YAAgC;AACtE;AAEA,SAAS,yBACP,OACiC;CACjC,OAAO,2BAA2B,SAAS,KAA+B;AAC5E;AAEA,SAAS,oBACP,cACmC;CACnC,OAAO,qBAAqB,SAAS,YAAiC;AACxE;AAEA,eAAe,yBACb,aAC2B;CAC3B,MAAM,qBAAqB,CAAC,GAAG,mBAAmB;CAElD,IAAI,gBAAgB,KAAA,GAAW;EAC7B,MAAM,eAAe,YAAY,KAAK;EACtC,IAAI,CAAC,mBAAmB,YAAY,GAClC,MAAM,IAAI,MACR,qBAAqB,YAAY,sBAAsB,mBAAmB,KAAK,IAAI,GACrF;EAEF,OAAO;CACT;CAEA,IAAI,mBAAmB,WAAW,GAChC,OAAO,mBAAmB;CAG5B,MAAM,WAAW,MAAM,OAAO,oCAAoC;EAChE,MAAM;EACN,SAAS,mBAAmB,KAAK,kBAAkB;GACjD,OAAO,GAAG,qBAAqB,cAAc,IAAI,aAAa;GAC9D,OAAO;EACT,EAAE;CACJ,CAAC;CAED,IAAI,CAAC,YAAY,CAAC,mBAAmB,QAAQ,GAC3C,MAAM,IAAI,MAAM,sBAAsB;CAGxC,OAAO;AACT;AAEA,SAAS,yBAAyB,cAA4B;CAC5D,IAAI,CAAC,cACH,MAAM,IAAI,MAAM,0CAA0C;CAG5D,IAAI,CAAC,+BAA+B,KAAK,YAAY,GACnD,MAAM,IAAI,MACR,6GACF;CAGF,IAAI,iBAAiB,aAAa,iBAAiB,SACjD,MAAM,IAAI,MACR,kBAAkB,aAAa,qCACjC;AAEJ;AAEA,eAAe,mBACb,SACA,WACiB;CACjB,MAAM,QAAQ,MAAM,OAAO,SAAS,EAAE,MAAM,OAAO,CAAC;CACpD,MAAM,kBAAkB,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI;CACnE,IAAI,CAAC,iBACH,MAAM,IAAI,MAAM,GAAG,UAAU,4BAA4B;CAE3D,OAAO;AACT;AAEA,SAAS,qBAA8B;CACrC,OAAO,QACL,QAAQ,MAAM,SACT,QAAQ,OAAO,SACf,OAAO,QAAQ,MAAM,eAAe,UAC3C;AACF;AAEA,eAAe,iBAAiB,SAAkC;CAChE,IAAI,CAAC,mBAAmB,GAAG;EACzB,MAAM,QAAQ,MAAM,OAAO,SAAS,EAAE,MAAM,OAAO,CAAC;EACpD,OAAO,OAAO,UAAU,WAAW,QAAQ;CAC7C;CAEA,OAAO,MAAM,IAAI,SAAiB,SAAS,WAAW;EACpD,IAAI,QAAQ;EACZ,MAAM,oBAAoB,QAAQ,MAAM,UAAU;EAElD,SAAS,UAAgB;GACvB,QAAQ,MAAM,IAAI,QAAQ,MAAM;GAChC,QAAQ,MAAM,WAAW,iBAAiB;GAC1C,QAAQ,MAAM,MAAM;EACtB;EAEA,SAAS,SAAe;GACtB,QAAQ;GACR,QAAQ,OAAO,MAAM,IAAI;GACzB,QAAQ,KAAK;EACf;EAEA,SAAS,SAAe;GACtB,QAAQ;GACR,QAAQ,OAAO,MAAM,IAAI;GACzB,uBAAO,IAAI,MAAM,kBAAkB,CAAC;EACtC;EAEA,SAAS,OAAO,OAAqB;GACnC,MAAM,QAAQ,MAAM,SAAS,MAAM;GAEnC,IAAI,MAAM,WAAW,MAAQ,GAC3B;GAGF,KAAK,MAAM,QAAQ,OAAO;IACxB,IAAI,SAAS,KAAU;KACrB,OAAO;KACP;IACF;IAEA,IAAI,SAAS,QAAQ,SAAS,MAAM;KAClC,OAAO;KACP;IACF;IAEA,IAAI,SAAS,QAAQ,SAAS,KAAU;KACtC,IAAI,MAAM,SAAS,GAAG;MACpB,QAAQ,MAAM,MAAM,GAAG,EAAE;MACzB,QAAQ,OAAO,MAAM,OAAO;KAC9B;KACA;IACF;IAEA,IAAI,QAAQ,KAAK;KACf,SAAS;KACT,QAAQ,OAAO,MAAM,GAAG;IAC1B;GACF;EACF;EAEA,QAAQ,OAAO,MAAM,GAAG,QAAQ,GAAG;EACnC,QAAQ,MAAM,WAAW,IAAI;EAC7B,QAAQ,MAAM,OAAO;EACrB,QAAQ,MAAM,GAAG,QAAQ,MAAM;CACjC,CAAC;AACH;AAEA,eAAe,qBACb,SACA,WACiB;CAEjB,MAAM,mBAAkB,MADJ,iBAAiB,OAAO,EAAA,CACd,KAAK;CACnC,IAAI,CAAC,iBACH,MAAM,IAAI,MAAM,GAAG,UAAU,4BAA4B;CAE3D,OAAO;AACT;AAEA,eAAe,2BAA4C;CACzD,MAAM,eAAe,MAAM,mBACzB,uBACA,eACF;CACA,yBAAyB,YAAY;CACrC,OAAO;AACT;AAEA,eAAe,2BAAkD;CAC/D,MAAM,eAAe,MAAM,OAAO,wBAAwB;EACxD,MAAM;EACN,SAAS,yBAAyB,KAAK,UAAU;GAC/C,OAAO;GACP,OAAO;EACT,EAAE;CACJ,CAAC;CAED,IACE,OAAO,iBAAiB,YACrB,CAAC,wBAAwB,YAAY,GAExC,MAAM,IAAI,MAAM,2BAA2B;CAG7C,OAAO;AACT;AAEA,eAAe,wBACb,aACuB;CACvB,MAAM,eAAe,MAAM,OACzB,kCAAkC,YAAY,IAC9C;EACE,MAAM;EACN,SAAS,CACP;GACE,OAAO,YAAY,YAAY;GAC/B,OAAO;EACT,GACA,GAAG,yBAAyB,KAAK,UAAU;GACzC,OAAO;GACP,OAAO;EACT,EAAE,CACJ;CACF,CACF;CAEA,IAAI,iBAAiB,oCACnB,OAAO;CAGT,IACE,OAAO,iBAAiB,YACrB,wBAAwB,YAAY,GAEvC,OAAO;CAGT,MAAM,IAAI,MAAM,2BAA2B;AAC7C;AAEA,SAAS,2BACP,cACkB;CAClB,OAAO,iBAAiB,cAAc,cAAc;AACtD;AAEA,eAAe,6BACb,cACuC;CAEvC,MAAM,WAAW,MAAM,OAAO,6BAA6B;EACzD,MAAM;EACN,SAAS,CACP;GACE,OAAO,YALW,2BAA2B,YAK1B,EAAgB;GACnC,OAAO;EACT,GACA,GAAG,2BAA2B,KAAK,WAAW;GAC5C,OAAO;GACP;EACF,EAAE,CACJ;CACF,CAAC;CAED,IAAI,aAAa,kCACf;CAGF,IAAI,OAAO,aAAa,YAAY,yBAAyB,QAAQ,GACnE,OAAO;CAGT,MAAM,IAAI,MAAM,gCAAgC;AAClD;AAEA,eAAe,2BACb,gBACiB;CACjB,MAAM,QAAQ,MAAM,OAClB,oCAAoC,eAAe,IACnD;EACE,MAAM;EACN,SAAS;EACT,SAAS;CACX,CACF;CACA,MAAM,UAAU,yBACd,OAAO,UAAU,YAAY,MAAM,KAAK,IAAI,QAAQ,cACtD;CACA,IAAI,CAAC,SACH,MAAM,IAAI,MAAM,oCAAoC;CAGtD,OAAO;AACT;AAEA,SAAS,0BACP,wBACA,SAOgB;CAChB,OAAO;EACL,MAAM,QAAQ;EACd,SAAS;EACT,SAAS,QAAQ;EACjB,QAAQ,QAAQ;EAChB,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;EACzD,iBACE,QAAQ,mBAAmB,uBAAuB;EACpD,GAAI,uBAAuB,SACzB,EAAE,QAAQ,uBAAuB,OAAO,IACxC,CAAC;CACL;AACF;AAEA,eAAe,0BAAyC;CACtD,MAAM,eAAe,MAAM,yBAAyB;CACpD,MAAM,OAAO,MAAM,yBAAyB;CAC5C,MAAM,UAAU,yBACd,MAAM,mBAAmB,0BAA0B,SAAS,CAC9D;CACA,IAAI,CAAC,SACH,MAAM,IAAI,MAAM,oCAAoC;CAGtD,MAAM,SAAS,MAAM,qBAAqB,yBAAyB,QAAQ;CAC3E,MAAM,WAAW,MAAM,6BAA6B,IAAI;CACxD,MAAM,yBAAyB,qBAAqB,YAAY,KAAK,CAAC;CAEtE,kBACE,cACA,0BAA0B,wBAAwB;EAChD;EACA;EACA;EACA;CACF,CAAC,CACH;CAEA,QAAQ,QACN,oBAAoB,aAAa,eAAe,MAAM,aACxD;AACF;AAEA,eAAe,uBACb,cACe;CACf,MAAM,wBAAwB,uBAAuB;CACrD,MAAM,SAAS,MAAM,qBACnB,SAAS,aAAa,UACtB,QACF;CACA,MAAM,OACJ,sBAAsB,eACpB,MAAM,wBAAwB,sBAAsB,IAAI,IACxD,sBAAsB;CAC1B,MAAM,UAAU,MAAM,2BACpB,sBAAsB,OACxB;CACA,MAAM,yBAAyB,qBAAqB,YAAY,KAAK,CAAC;CAEtE,kBACE,cACA,0BAA0B,wBAAwB;EAChD;EACA;EACA,iBAAiB,sBAAsB;EACvC;CACF,CAAC,CACH;CAEA,QAAQ,QACN,GAAG,qBAAqB,cAAc,aAAa,aAAa,eAAe,MAAM,aACvF;AACF;AAEA,eAAe,iBAAgC;CAC7C,MAAM,cAAc,MAAM,WAAW;EACnC,OAAO,MAAM;GACX,QAAQ,KAAK,oDAAoD;GACjE,QAAQ,IAAI,KAAK,GAAG;GACpB,IAAI,KAAK,cACP,QAAQ,KAAK,KAAK,YAAY;EAElC;EACA,SAAS,SAAS;GAChB,OAAO,OAAO,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,MAAM,UAAU,SAAS,EAAE;EACtE;EACA,WAAW,SAAS;GAClB,QAAQ,MAAM,OAAO;EACvB;CACF,CAAC;CAED,MAAM,wBAAwB,aAAa,EAAE,gBAAgB,KAAK,CAAC;CACnE,QAAQ,QACN,oCAAoC,MAAM,YAAY,8BAA8B,MAAM,uBAC5F;AACF;AAEA,eAAe,kBAAkB,UAA2C;CAC1E,IAAI,aAAa,WAAW;EAC1B,MAAM,iBAAiB,EAAE,OAAO,KAAK,CAAC;EACtC,QAAQ,QAAQ,2BAA2B,MAAM,iBAAiB;EAClE;CACF;CAEA,IAAI,aAAa,SAAS;EACxB,MAAM,eAAe;EACrB;CACF;CAEA,IAAI,oBAAoB,QAAQ,GAAG;EACjC,MAAM,uBAAuB,QAAQ;EACrC;CACF;CAEA,MAAM,wBAAwB;AAChC;AAEA,eAAsB,mBAAkC;CACtD,MAAM,WAAW,MAAM,yBAAyB,KAAA,CAAS;CACzD,QAAQ,KAAK,mBAAmB,qBAAqB,WAAW;CAChE,MAAM,kBAAkB,QAAQ;AAClC;AAEA,eAAsB,aAAa,SAAwC;CAEzE,CAAA,MADwB,OAAO,qBAAA,CACrB,qBAAqB;CAE/B,IAAI,QAAQ,SAAS;EACnB,QAAQ,QAAQ;EAChB,QAAQ,KAAK,yBAAyB;CACxC;CAEA,MAAM,YAAY,QAAQ;CAE1B,MAAM,YAAY;CAClB,MAAM,WAAW,MAAM,yBAAyB,QAAQ,QAAQ;CAEhE,QAAQ,KAAK,mBAAmB,qBAAqB,WAAW;CAChE,MAAM,kBAAkB,QAAQ;AAClC;AAEA,MAAM,eAAe;CACnB,KAAK;EACH,OAAO;EACP,MAAM;EACN,aAAa;CACf;CACA,QAAQ;EACN,OAAO;EACP,MAAM;EACN,aAAa;CACf;CACA,MAAM;EACJ,OAAO;EACP,MAAM;EACN,SAAS;EACT,aAAa;CACf;CACA,OAAO;EACL,MAAM;EACN,SAAS;EACT,aAAa;CACf;AACF;AASA,SAAS,sBAAsB,OAAuB;CACpD,MAAM,gBAAgB,MAAM,KAAK;CACjC,IAAI,CAAC,eACH,MAAM,IAAI,MAAM,oCAAoC;CAEtD,OAAO;AACT;AAEA,eAAsB,YAAY,SAA4C;CAE5E,CAAA,MADwB,OAAO,qBAAA,CACrB,qBAAqB;CAE/B,MAAM,YAAY;CAElB,MAAM,aAAa;EACjB,GAAI,QAAQ,QAAQ,KAAA,IAAY,CAAC,KAAK,IAAI,CAAC;EAC3C,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,QAAQ,IAAI,CAAC;EACjD,GAAI,QAAQ,OAAO,CAAC,MAAM,IAAI,CAAC;EAC/B,GAAI,QAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;CACnC;CACA,IAAI,WAAW,SAAS,GACtB,MAAM,IAAI,MACR,oEACF;CAGF,MAAM,YAAY,WAAW,MAAM;CAEnC,IAAI,cAAc,OAAO;EACvB,MAAM,SAAS,sBAAsB,QAAQ,OAAO,EAAE;EACtD,MAAM,cAAc,qBAAqB;EACzC,IAAI,YAAY,SAAS,MAAM,GAAG;GAChC,QAAQ,KACN,+BAA+B,YAAY,OAAO,wBACpD;GACA;EACF;EACA,MAAM,aAAa,qBAAqB,CAAC,GAAG,aAAa,MAAM,CAAC;EAChE,QAAQ,QACN,oBAAoB,MAAM,YAAY,IAAI,WAAW,OAAO,wBAC9D;EACA;CACF;CAEA,IAAI,cAAc,UAAU;EAC1B,MAAM,SAAS,sBAAsB,QAAQ,UAAU,EAAE;EACzD,MAAM,cAAc,qBAAqB;EACzC,IAAI,CAAC,YAAY,SAAS,MAAM,GAAG;GACjC,QAAQ,KACN,sBAAsB,YAAY,OAAO,wBAC3C;GACA;EACF;EACA,MAAM,aAAa,qBACjB,YAAY,QAAQ,QAAQ,QAAQ,MAAM,CAC5C;EACA,QAAQ,QACN,wBAAwB,MAAM,YAAY,IAAI,WAAW,OAAO,wBAClE;EACA;CACF;CAEA,IAAI,cAAc,SAAS;EACzB,qBAAqB,CAAC,CAAC;EACvB,QAAQ,QAAQ,6BAA6B,MAAM,YAAY,EAAE;EACjE;CACF;CAEA,MAAM,cAAc,qBAAqB;CACzC,IAAI,YAAY,WAAW,GAAG;EAC5B,QAAQ,KACN,iFACF;EACA;CACF;CACA,QAAQ,KAAK,sBAAsB;CACnC,KAAK,MAAM,OAAO,aAChB,QAAQ,KAAK,KAAK,KAAK;AAE3B;AAEA,MAAM,YAAY,cAAc;CAC9B,MAAM;EACJ,MAAM;EACN,aACE;CACJ;CACA,MAAM;CACN,IAAI,EAAE,QAAQ;EACZ,OAAO,aAAa;GAClB,UAAU,KAAK;GACf,SAAS,KAAK;GACd,WAAW,KAAK;EAClB,CAAC;CACH;AACF,CAAC;AAED,MAAM,WAAW,cAAc;CAC7B,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,MAAM;CACN,IAAI,EAAE,QAAQ;EACZ,OAAO,YAAY;GACjB,KAAK,KAAK;GACV,QAAQ,KAAK;GACb,MAAM,KAAK;GACX,OAAO,KAAK;EACd,CAAC;CACH;AACF,CAAC;AAED,MAAa,OAAO,cAAc;CAChC,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,MAAM;CACN,aAAa;EACX,OAAO;EACP,MAAM;CACR;CACA,IAAI,EAAE,QAAQ;EACZ,KAAK,KAAK,EAAE,MAAM,GAAA,CAAI,KAAK,GACzB;EAGF,OAAO,aAAa;GAClB,UAAU,KAAK;GACf,SAAS,KAAK;GACd,WAAW,KAAK;EAClB,CAAC;CACH;AACF,CAAC"}

package/dist/auth-CX6c7jlD.js

@@ -0,0 +1,2 @@
+import { t as auth } from "./auth-CMufJUfF.js";
+export { auth };

package/dist/{config-DYtohLpX.js → config-2Dli6AI8.js}

@@ -74,9 +74,9 @@ async function ensureFile(filePath) {
 //#endregion
 //#region src/lib/config-store.ts
 const defaultUpstreamTransportConfig = {
-	headersTimeoutMs: 300 * 1e3,
-	streamInactivityTimeoutMs: 300 * 1e3,
-	websocketMaxBufferedBytes: 8 * 1024 * 1024,
+	headersTimeoutMs: 3e5,
+	streamInactivityTimeoutMs: 3e5,
+	websocketMaxBufferedBytes: 8388608,
 	websocketMaxBufferedMessages: 1024,
 	websocketOpenTimeoutMs: 3e4,
 	websocketPoolIdleTimeoutMs: 6e4
@@ -93,8 +93,8 @@ const gpt5ExplorationPrompt = `## Exploration and reading files
 - **Only make sequential calls if you truly cannot know the next file without seeing a result first.**
 - **Workflow:** (a) plan all needed reads → (b) issue one parallel batch → (c) analyze results → (d) repeat if new, unpredictable reads arise.`;
 const modelResponsesApiCompactThresholds = {
-	"gpt-5.4": 272e3 * .8,
-	"gpt-5.5": 272e3 * .8
+	"gpt-5.4": 217600,
+	"gpt-5.5": 217600
 };
 const defaultContextManagement = {
 	messages: true,
@@ -551,4 +551,4 @@ function isReservedProviderName(name) {
 //#endregion
 export { isResponsesApiWebSocketEnabled as A, getClaudeTokenMultiplier as C, isAlphaSearchCodexPriorityEnabled as D, getUpstreamTransportConfig as E, writeFileAtomically as F, setConfiguredApiKeys as M, PATHS as N, isMessagesApiEnabled as O, ensurePaths as P, getClaudeAutoModel as S, getMessageApiWebSearchModel as T, resolveMappedModel as _, normalizeProviderBaseUrl as a, getAlphaSearchModel as b, setProviderConfig as c, getModelResponsesApiCompactThreshold as d, getReasoningEffortForModel as f, isGpt56OrAbove as g, isContextManagementEnabledForResponses as h, listEnabledProviders as i, mergeConfigWithDefaults as j, isResponsesApiWebSearchEnabled as k, getExtraPromptForModel as l, isContextManagementEnabledForMessages as m, getRawProviderConfig as n, resolveEffectiveProviderType as o, getSmallModel as p, isSupportedProviderType as r, resolveProviderAuthType as s, getProviderConfig as t, getModelMappings as u, setModelMappings as v, getConfig as w, getAnthropicApiKey as x, SUPPORTED_PROVIDER_TYPES as y };
 
-//# sourceMappingURL=config-DYtohLpX.js.map
+//# sourceMappingURL=config-2Dli6AI8.js.map