@jeffreycao/copilot-api 2.5.7 → 2.5.9

package/README.md

@@ -372,6 +372,9 @@ bun install
 
 ## Running from Source
 
+> [!NOTE]
+> Building from source with `tsdown@0.23` requires Node.js `^22.18.0 || ^24.11.0 || >=26.0.0`. This is a build-time requirement only; the published CLI supports Node.js >= 22.13.0.
+
 The project can be run from source in several ways:
 
 ### Development Mode
@@ -393,7 +396,7 @@ bun run start start
 You can run the project directly using npx:
 
 > [!IMPORTANT]
-> Token usage storage uses Node's built-in `node:sqlite` module when running with `npx`. It is enabled on Node.js >= 22.13.0. Node.js < 22.13.0 is outside the range declared in `engines`: the CLI still starts, but token usage storage is disabled.
+> Token usage storage uses Node's built-in `node:sqlite` module when running with `npx`. It is enabled on Node.js >= 22.13.0, the first release where `node:sqlite` works without `--experimental-sqlite`. On older Node.js versions the CLI still starts, but token usage storage is disabled.
 >
 > If you want token usage storage without upgrading Node.js, run the published CLI with Bun instead: `bunx --bun @jeffreycao/copilot-api@latest start`.
 
@@ -457,13 +460,21 @@ COPILOT_API_BIND=0.0.0.0
 COPILOT_API_PORT=4141
 ```
 
+The Compose service also forwards `COPILOT_API_SQLITE_DB_PATH`, `COPILOT_API_ENTERPRISE_URL`, and `COPILOT_API_OAUTH_APP` from the environment or a private `.env` file. SQLite paths are container paths and should stay under the writable `/data` mount, for example:
+
+```dotenv
+COPILOT_API_SQLITE_DB_PATH=/data/copilot-api.sqlite
+COPILOT_API_ENTERPRISE_URL=company.ghe.com
+COPILOT_API_OAUTH_APP=opencode
+```
+
 Token and proxy variables can be overridden in the same file. Proxy addresses must be reachable from inside the container. Keep the internal port at `4141` so the health check remains valid.
 
 ## Electron Desktop App
 
-If you prefer a GUI, this repository also includes an Electron desktop app in `desktop/`. It supports GitHub Copilot sign-in, OpenAI Codex OAuth, and API-key configuration for Kimi, DeepSeek, DashScope, OpenRouter, or a custom provider. After authorization or provider configuration, it can start and stop the local proxy with one click and shows the local endpoint, auth header, available models, usage, and logs in the app.
+If you prefer a GUI, this repository also includes an Electron desktop app in `desktop/`. It supports GitHub Copilot sign-in, OpenAI Codex OAuth with manual switching among up to 3 Codex accounts, and API-key configuration for Kimi, DeepSeek, DashScope, OpenRouter, or a custom provider. After a Codex account switch, the app prompts you to restart the service manually. After authorization or provider configuration, it can start and stop the local proxy with one click and shows the local endpoint, auth header, available models, usage, and logs in the app.
 
-The settings screen also exposes `OAuth App`, `API Home`, `Enterprise URL`, verbose logging, and minimize-to-tray. Windows x64 (`.exe`), macOS Apple Silicon (`.dmg`), and Linux x64 (`.AppImage`) packages are published in GitHub Releases:
+The settings screen also exposes `OAuth App`, `API Home`, `SQLite DB Path`, `Enterprise URL`, verbose logging, and minimize-to-tray. Windows x64 (`.exe`), macOS Apple Silicon (`.dmg`), and Linux x64 (`.AppImage`) packages are published in GitHub Releases:
 
 https://github.com/caozhiyuan/copilot-api/releases
 
@@ -595,7 +606,7 @@ After starting the server, a URL to the Copilot Usage Dashboard will be displaye
 
 The dashboard provides a user-friendly interface to view your Copilot usage data:
 
-> Token usage history requires Bun or Node.js >= 22.13.0. Node.js < 22.13.0 is outside the range declared in `engines`: the server runs normally but token usage storage is disabled.
+> Token usage history requires Bun or Node.js >= 22.13.0. On older Node.js versions the server runs normally but token usage storage is disabled.
 
 - **API Endpoint URL**: The dashboard is pre-configured to fetch data from your local server endpoint via a URL query parameter. You can manually switch this to any other compatible API endpoint.
 - **API Key Authentication**: If API Key authentication is enabled, enter a raw API key (sent as the `x-api-key` header) or `Authorization: Bearer <key>`. Credentials are remembered in the browser's local storage per endpoint origin, and switching to a different endpoint origin does not automatically send the previous credential.
@@ -657,11 +668,14 @@ Passing the GitHub token on the command line exposes it to every local user thro
 | Option       | Description               | Default | Alias |
 | ------------ | ------------------------- | ------- | ----- |
 | --provider   | Provider to log in with or configure (`copilot`, `codex`, `opencode-go`, `kimi`, `deepseek`, `dashscope`, `openrouter`, or `custom`) | prompt | none |
+| --alias      | Optional Codex account alias; only valid with `--provider codex` | none | none |
 | --verbose    | Enable verbose logging    | false   | -v    |
 | --show-token | Show GitHub token on auth | false   | none  |
 
 Use `copilot-api auth login --provider copilot` only when you want to enable the GitHub Copilot provider. Copilot is not required for `codex` or third-party provider-only usage.
 
+The Codex provider stores up to 3 accounts. Add or update an account with `copilot-api auth login --provider codex --alias work`; the newly signed-in account becomes active. List accounts with `copilot-api auth codex --list` and switch with `copilot-api auth codex --use <alias-or-accountId>`. Restart a running server after switching. Legacy single-account `codex_credentials.json` files remain compatible and upgrade to the multi-account shape on the next credential write.
+
 Use `copilot-api auth login --provider deepseek`, `--provider dashscope`, `--provider openrouter`, `--provider opencode-go`, or `--provider kimi` to add or update those common third-party providers from the CLI. DeepSeek prompts for masked `apiKey`, provider `type` (default `anthropic`), and `baseUrl` defaulting to `https://api.deepseek.com/anthropic`. DashScope prompts for masked `apiKey`, provider `type` (default `openai-compatible`), and prefilled `baseUrl`. OpenRouter prompts for masked `apiKey` and prefilled `baseUrl` only, and writes `type: "anthropic"`. OpenCode Go prompts for masked `apiKey` and prefilled `baseUrl` only, and writes `type: "openai-compatible"` (baseUrl `https://opencode.ai/zen/go`). Kimi prompts for masked `apiKey`, provider `type` (default `openai-compatible`), and `baseUrl` defaulting to `https://api.kimi.com/coding` (the same base URL serves both the Anthropic and OpenAI-compatible endpoints). OpenCode Go additionally routes built-in `qwen*` and `minimax*` models through Anthropic Messages and `gpt*`/`grok*`/`muse-spark*` models through OpenAI Responses; other models keep the OpenAI-compatible default. After a provider is configured and enabled, `copilot-api start` can run without any GitHub token.
 
 Use `copilot-api auth login --provider custom` to add or update another third-party provider from the CLI. The command prompts for the provider name, supported type (`anthropic`, `openai-compatible`, or `openai-responses`), `baseUrl`, masked `apiKey`, and `authType`; `authType` may be left as the type default or set to `x-api-key` / `authorization`.
@@ -726,13 +740,14 @@ Gateway API keys live under `auth.apiKeys` in `config.json`. Manage them with `c
   - `baseUrl` should be provider API base URL without the final endpoint. For Anthropic providers, omit `/v1/messages`; for OpenAI-compatible providers, omit `/v1/chat/completions`; for OpenAI Responses providers, omit `/v1/responses`.
   - `apiKey` is used as the upstream credential value and is required unless `authType` is `azure-entra`.
   - `authType` (optional): Controls upstream authentication. Supports `x-api-key`, `authorization`, and `azure-entra` for regular providers. Anthropic providers default to `x-api-key`; OpenAI-compatible and OpenAI Responses providers default to `authorization`. `authorization` sends `Authorization: Bearer <apiKey>`. `azure-entra` uses Azure Identity's `DefaultAzureCredential` with the `https://cognitiveservices.azure.com/.default` scope, sends the resulting bearer token, and does not require `apiKey`. For an Azure OpenAI v1 endpoint, use a provider such as `{ "type": "openai-compatible", "baseUrl": "https://<resource-name>.openai.azure.com/openai", "authType": "azure-entra" }`. Authenticate locally with `az login`, use a managed identity in Azure, or set the standard `AZURE_TENANT_ID`, `AZURE_CLIENT_ID`, and `AZURE_CLIENT_SECRET` environment variables. `oauth2` is reserved for the built-in `codex` provider and is written automatically by `auth login --provider codex`.
+  - `accountId` is used only by the built-in `codex` provider and identifies its active Codex account. CLI and desktop account switching update it automatically.
   - `pricingCurrency` (optional): Provider-level currency used for token cost calculation, for example `USD` or `CNY`. Quick providers default to `CNY` for DashScope and DeepSeek, and `USD` for Codex, Kimi, OpenCode Go, and OpenRouter. Costs are grouped by currency and are not exchange-rate converted.
   - `models` (optional): Per-model configuration map. Each key is a model ID (matching the model name in requests), and the value is:
     - `temperature` (optional): Default temperature value used when the request does not specify one.
     - `topP` (optional): Default top_p value used when the request does not specify one.
     - `topK` (optional): Default top_k value used when the request does not specify one.
     - `extraBody` (optional): Dynamic fields merged into the upstream request body for that model. Request body fields with the same name take precedence. OpenAI-compatible providers can use this for fields such as `enable_thinking`, `preserve_thinking`, `reasoning_effort`. `thinking_budget` is a special OpenAI-compatible provider override: when configured in `extraBody`, it is forced after Anthropic `thinking.budget_tokens` translation and overrides the request-derived budget. For providers whose name is `dashscope` or whose `baseUrl` contains `aliyuncs.com`, the request-derived `thinking_budget` (from Anthropic `thinking.budget_tokens`) is forwarded upstream; for other OpenAI-compatible providers the request-derived `thinking_budget` is stripped, while an `extraBody` `thinking_budget` is still honored. For DashScope providers, `preserve_thinking` defaults to `true` when not explicitly set in `extraBody` or the request body.
-    - `pricing` (optional): Per-model token prices, in the provider `pricingCurrency`, per 1M tokens. Supported fields are `input`, `output`, `cachedInput` (implicit cache read), `explicitCachedInput` (explicit cache read), and `cacheCreationInput`. Use `tiers` with `maxInputTokens` for input-size tiered pricing.
+    - `pricing` (optional): Per-model token prices, in the provider `pricingCurrency`, per 1M tokens. Supported fields are `input`, `output`, `cachedInput` (implicit cache read), `explicitCachedInput` (explicit cache read), and `cacheCreationInput`. Use `tiers` with `maxInputTokens` for input-size tiered pricing. For providers that bill separate peak and off-peak rates, add `offPeak` with the same fields as the top level and declare peak hours with `peakWindows`: each entry takes `startMinuteUtc` (inclusive) and `endMinuteUtc` (exclusive) as minutes from 00:00 UTC, plus optional `weekdays` ISO day numbers (1 = Monday, 7 = Sunday, omitted means every day). Without `peakWindows` the `offPeak` prices never apply and every request bills at the peak price. The built-in catalog uses this for DeepSeek (peak on weekdays UTC 01:00-04:00 and 06:00-10:00, off-peak otherwise including weekends) and for DashScope DeepSeek (off-peak on UTC 14:00-24:00), while OpenCode Go DeepSeek models reuse the DeepSeek windows.
     - `contextCache` (optional): Defaults to `true` for providers whose name is `dashscope` or whose `baseUrl` contains `aliyuncs.com`; defaults to `false` for other OpenAI-compatible providers. This enables Alibaba Cloud Model Studio/DashScope explicit context cache by injecting `cache_control: { "type": "ephemeral" }` on up to 4 content blocks using the Context Cache format. The cache breakpoint strategy matches opencode's main provider flow: the first 2 system messages plus the last 2 non-system messages. Marked string content is converted to text content part arrays for `system` / `user` / `assistant` / `tool` messages; existing array content is marked on the last part. Set this to `false` when the model already supports implicit caching, or when the upstream does not accept this explicit-cache extension field. Set this to `true` for non-DashScope providers that support the same explicit-cache extension. Applied on both `/v1/messages` and `/v1/chat/completions` routes.
     - `supportPdf` (optional): Controls whether the model supports PDF/document content. Defaults to `false`; unsupported PDFs are converted to a text notice. Set it to `true` to send PDF/document blocks as OpenAI Chat Completions file parts.
     - `toolContentSupportType` (optional): Tool result content capabilities for that model, as an array of `array`, `image`, and `pdf`. Provider routes default to string-only tool content when omitted. If `supportPdf` is `true` but this list does not include `pdf`, file parts in tool results are moved to user role messages. The Copilot main flow uses the same string-only default, because some Copilot models do not support array or image tool content either.

package/README.zh-CN.md

@@ -398,6 +398,9 @@ bun install
 
 ## 从源码运行
 
+> [!NOTE]
+> 使用 `tsdown@0.23` 从源码构建时，需要 Node.js `^22.18.0 || ^24.11.0 || >=26.0.0`。这只是构建期要求；已发布 CLI 的运行时要求仍为 Node.js >= 22.13.0。
+
 本项目可以通过多种方式从源码运行：
 
 ### 开发模式
@@ -421,7 +424,7 @@ bun run start start
 你可以直接用 npx 运行本项目：
 
 > [!IMPORTANT]
-> 通过 `npx` 运行时，token usage 存储会使用 Node 内置的 `node:sqlite` 模块。该能力会在 Node.js >= 22.13.0 时启用；Node.js < 22.13.0 不在 `engines` 声明的支持范围内，CLI 仍可启动，但会禁用 token usage 存储。
+> 通过 `npx` 运行时，token usage 存储会使用 Node 内置的 `node:sqlite` 模块。该能力会在 Node.js >= 22.13.0（`node:sqlite` 不再需要 `--experimental-sqlite` 标志的首个版本）时启用；更早的 Node.js 上 CLI 仍可启动，但会禁用 token usage 存储。
 >
 > 如果不升级 Node.js 但仍需要 token usage 存储，可以改用 Bun 运行已发布 CLI：`bunx --bun @jeffreycao/copilot-api@latest start`。
 
@@ -487,15 +490,23 @@ COPILOT_API_BIND=0.0.0.0
 COPILOT_API_PORT=4141
 ```
 
+Compose 服务还会从环境变量或用户自己的私有 `.env` 中传入 `COPILOT_API_SQLITE_DB_PATH`、`COPILOT_API_ENTERPRISE_URL` 和 `COPILOT_API_OAUTH_APP`。SQLite 路径是容器内路径，应放在可写的 `/data` 挂载目录下，例如：
+
+```dotenv
+COPILOT_API_SQLITE_DB_PATH=/data/copilot-api.sqlite
+COPILOT_API_ENTERPRISE_URL=company.ghe.com
+COPILOT_API_OAUTH_APP=opencode
+```
+
 Token 和代理变量也可以在同一文件中覆盖。代理地址必须能从容器内部访问。容器内部端口保持 `4141`，以便健康检查正常工作。
 
 <a id="electron-desktop-app"></a>
 
 ## Electron 桌面应用
 
-如果你更喜欢图形界面，仓库里还提供了位于 `desktop/` 的 Electron 桌面应用。它支持 GitHub Copilot 登录、OpenAI Codex OAuth，以及 Kimi、DeepSeek、DashScope、OpenRouter 或自定义 provider 的 API Key 配置。授权或配置 provider 后，可以一键启动或停止本地代理，并在界面里直接查看本地端点、鉴权 Header、可用模型、额度和日志。
+如果你更喜欢图形界面，仓库里还提供了位于 `desktop/` 的 Electron 桌面应用。它支持 GitHub Copilot 登录、OpenAI Codex OAuth 与最多 3 个 Codex 账号的手动切换，以及 Kimi、DeepSeek、DashScope、OpenRouter 或自定义 provider 的 API Key 配置。切换 Codex 账号后，界面会提示手动重启服务。授权或配置 provider 后，可以一键启动或停止本地代理，并在界面里直接查看本地端点、鉴权 Header、可用模型、额度和日志。
 
-设置页还可以配置 `OAuth App`、`API Home`、`Enterprise URL`、详细日志以及最小化到托盘。Windows x64（`.exe`）、macOS Apple Silicon（`.dmg`）和 Linux x64（`.AppImage`）安装包发布在 GitHub Releases：
+设置页还可以配置 `OAuth App`、`API Home`、`SQLite DB Path`、`Enterprise URL`、详细日志以及最小化到托盘。Windows x64（`.exe`）、macOS Apple Silicon（`.dmg`）和 Linux x64（`.AppImage`）安装包发布在 GitHub Releases：
 
 https://github.com/caozhiyuan/copilot-api/releases
 
@@ -633,7 +644,7 @@ cp plugin/opencode/subagent-marker.js ~/.config/opencode/plugins/
 
 看板提供了更易读的 Copilot 用量视图：
 
-> token usage 历史记录需要 Bun 或 Node.js >= 22.13.0。Node.js < 22.13.0 不在 `engines` 声明的支持范围内，服务会正常运行，但 token usage 存储会被禁用。
+> token usage 历史记录需要 Bun 或 Node.js >= 22.13.0。更早的 Node.js 上服务会正常运行，但 token usage 存储会被禁用。
 
 - **API Endpoint URL**：通过 URL 查询参数指定 API endpoints，默认指向本地服务。支持手动切换为其他兼容 endpoints。
 - **API Key 认证**：如果启用了 API Key 认证，可填入原始 API key（默认通过 `x-api-key` 请求头发送）或 `Authorization: Bearer <key>`。凭据会按 endpoint origin 保存在浏览器本地存储中；切换到不同 endpoint origin 时，不会自动携带其他 origin 的凭据。
@@ -699,11 +710,14 @@ Copilot API 现在使用子命令结构，主要命令包括：
 | 选项 | 说明 | 默认值 | 别名 |
 | --- | --- | --- | --- |
 | --provider | 要登录或配置的 provider（`copilot`、`codex`、`opencode-go`、`kimi`、`deepseek`、`dashscope`、`openrouter` 或 `custom`） | 交互选择 | 无 |
+| --alias | Codex 账号的可选别名，仅与 `--provider codex` 一起使用 | 无 | 无 |
 | --verbose | 启用详细日志 | false | -v |
 | --show-token | 认证时显示 GitHub token | false | 无 |
 
 只有在需要启用 GitHub Copilot provider 时，才需要执行 `copilot-api auth login --provider copilot`。使用 `codex` 或第三方 provider-only 模式不要求配置 Copilot。
 
+Codex provider 最多保存 3 个账号。使用 `copilot-api auth login --provider codex --alias work` 新增或更新账号，新登录账号会成为当前账号；使用 `copilot-api auth codex --list` 查看账号，使用 `copilot-api auth codex --use <alias-or-accountId>` 手动切换。切换后需要重启正在运行的服务。旧版单账号 `codex_credentials.json` 会自动兼容，并在下一次写入凭据时升级为多账号格式。
+
 使用 `copilot-api auth login --provider deepseek`、`--provider dashscope`、`--provider openrouter`、`--provider opencode-go` 或 `--provider kimi` 可以通过 CLI 快速新增或更新这些常用第三方 provider。DeepSeek 会提示输入掩码显示的 `apiKey`、provider `type`（默认 `anthropic`），以及默认 `https://api.deepseek.com/anthropic` 的 `baseUrl`。DashScope 会提示输入掩码显示的 `apiKey`、provider `type`（默认 `openai-compatible`）和预填默认值的 `baseUrl`。OpenRouter 只提示输入掩码显示的 `apiKey` 和预填默认值的 `baseUrl`，并固定写入 `type: "anthropic"`。OpenCode Go 只提示输入掩码显示的 `apiKey` 和预填默认值的 `baseUrl`，并固定写入 `type: "openai-compatible"`（baseUrl `https://opencode.ai/zen/go`）。Kimi 会提示输入掩码显示的 `apiKey`、provider `type`（默认 `openai-compatible`）和默认值为 `https://api.kimi.com/coding` 的 `baseUrl`（同一个 base URL 同时支持 Anthropic 和 OpenAI-compatible 两种端点）。此外，OpenCode Go 内置将 `qwen*` 和 `minimax*` 模型路由到 Anthropic Messages，将 `gpt*`/`grok*`/`muse-spark*` 模型路由到 OpenAI Responses，其他模型仍默认使用 OpenAI 兼容协议。配置并启用 provider 后，`copilot-api start` 可在没有 GitHub token 的情况下启动。
 
 使用 `copilot-api auth login --provider custom` 可以通过 CLI 新增或更新其他第三方 provider。命令会依次提示输入 provider name、项目支持的 type（`anthropic`、`openai-compatible` 或 `openai-responses`）、`baseUrl`、掩码显示的 `apiKey` 和 `authType`；`authType` 可保持 type 默认值，也可选择 `x-api-key` / `authorization`。
@@ -770,13 +784,14 @@ Copilot API 现在使用子命令结构，主要命令包括：
   - `baseUrl`：provider API 的基础 URL，不要带结尾的 endpoint。Anthropic provider 不要带 `/v1/messages`；OpenAI 兼容 provider 不要带 `/v1/chat/completions`；OpenAI Responses provider 不要带 `/v1/responses`。
   - `apiKey`：作为上游凭据值使用；除 `authType` 为 `azure-entra` 外，普通 provider 必须配置。
   - `authType`：可选，控制上游认证方式。普通 provider 支持 `x-api-key`、`authorization` 和 `azure-entra`。Anthropic provider 默认 `x-api-key`；OpenAI 兼容和 OpenAI Responses provider 默认 `authorization`。`authorization` 会发送 `Authorization: Bearer <apiKey>`。`azure-entra` 使用 Azure Identity 的 `DefaultAzureCredential` 和 `https://cognitiveservices.azure.com/.default` scope 获取并发送 Bearer token，不需要配置 `apiKey`。Azure OpenAI v1 endpoint 可配置为 `{ "type": "openai-compatible", "baseUrl": "https://<resource-name>.openai.azure.com/openai", "authType": "azure-entra" }`。本地可先执行 `az login`，在 Azure 中可使用托管身份，也可设置标准的 `AZURE_TENANT_ID`、`AZURE_CLIENT_ID` 和 `AZURE_CLIENT_SECRET` 环境变量。`oauth2` 仅保留给内置 `codex` provider，并由 `auth login --provider codex` 自动写入。
+  - `accountId`：仅用于内置 `codex` provider，记录当前选中的 Codex 账号。CLI 或桌面端切换账号时自动更新。
   - `pricingCurrency`：可选，provider 维度的 token 费用币种，例如 `USD` 或 `CNY`。快捷 provider 默认 DashScope、DeepSeek 为 `CNY`，Codex、Kimi、OpenCode Go、OpenRouter 为 `USD`。费用按币种分别汇总，不做汇率换算。
   - `models`：可选，按模型 ID 配置的映射。每个键为请求中的模型名，值支持：
     - `temperature`：可选，当请求未指定时使用的默认温度。
     - `topP`：可选，当请求未指定时使用的默认 `top_p`。
     - `topK`：可选，当请求未指定时使用的默认 `top_k`。
     - `extraBody`：可选，按模型合入上游请求体的动态字段；请求体显式同名字段优先。OpenAI 兼容 provider 可用它配置 `enable_thinking`、`preserve_thinking`、`reasoning_effort` 等字段。`thinking_budget` 是 OpenAI 兼容 provider 的特殊覆盖项：配置在 `extraBody` 后，会在 Anthropic `thinking.budget_tokens` 翻译之后强制写入，并覆盖请求派生出的预算值。对于 provider name 为 `dashscope` 或 `baseUrl` 包含 `aliyuncs.com` 的 provider，请求派生的 `thinking_budget`（来自 Anthropic `thinking.budget_tokens`）会转发给上游；其他 OpenAI 兼容 provider 会移除请求派生的 `thinking_budget`，但 `extraBody` 中的 `thinking_budget` 仍然生效。对于 DashScope provider，当 `preserve_thinking` 未在 `extraBody` 或请求体中显式设置时，默认为 `true`。
-    - `pricing`：可选，按模型配置 token 单价，币种使用 provider 的 `pricingCurrency`，单位为每 100 万 tokens。支持 `input`、`output`、`cachedInput`（隐式缓存读）、`explicitCachedInput`（显式缓存读）和 `cacheCreationInput`。如需按输入 token 总量分档，可用带 `maxInputTokens` 的 `tiers`。
+    - `pricing`：可选，按模型配置 token 单价，币种使用 provider 的 `pricingCurrency`，单位为每 100 万 tokens。支持 `input`、`output`、`cachedInput`（隐式缓存读）、`explicitCachedInput`（显式缓存读）和 `cacheCreationInput`。如需按输入 token 总量分档，可用带 `maxInputTokens` 的 `tiers`。分时计费的 provider 可再配置 `offPeak`（字段与顶层相同）声明闲时单价，并用 `peakWindows` 声明忙时时段：每项包含 `startMinuteUtc`（含）和 `endMinuteUtc`（不含），取值为 UTC 当日分钟数，可选用 `weekdays` 以 ISO 星期号（1 表示周一，7 表示周日）限定生效日，省略表示每天生效。未配置 `peakWindows` 时 `offPeak` 不生效，始终按忙时价计费。内置目录已按此方式为 DeepSeek（周一至周五 UTC 01:00-04:00、06:00-10:00 为忙时，其余含周末为闲时）和 DashScope DeepSeek（UTC 14:00-24:00 为闲时）配置峰谷价，OpenCode Go 的 DeepSeek 模型沿用 DeepSeek 的时段。
     - `contextCache`：可选，provider name 为 `dashscope` 或 `baseUrl` 包含 `aliyuncs.com` 时默认 `true`，其他 OpenAI 兼容 provider 默认 `false`。用于启用阿里云百炼/DashScope 的显式缓存（explicit context cache），会按其 Context Cache 格式在最多 4 个 content block 上注入 `cache_control: { "type": "ephemeral" }`。缓存断点策略与 opencode 主链路保持一致：前 2 条 system 消息 + 最后 2 条非 system 消息。标记字符串 content 时会把 `system` / `user` / `assistant` / `tool` 消息转换为 text content part 数组；已有数组 content 则标记最后一个 part。如果模型本身已经支持隐式缓存，或上游不支持该显式缓存扩展字段，可在模型配置中设为 `false`。支持相同显式缓存扩展的非 DashScope provider 可设为 `true`。同时适用于 `/v1/messages` 和 `/v1/chat/completions` 路由。
     - `supportPdf`：可选，控制该模型是否支持 PDF/document content。默认 `false`，不支持时会把 PDF 转成提示文本；设为 `true` 时会把 PDF/document 转成 OpenAI Chat Completions 的 file part。
     - `toolContentSupportType`：可选，配置该模型的 tool result content 支持能力，值为 `array`、`image`、`pdf` 的数组。provider 侧未配置时默认只发送 string tool content。若 `supportPdf` 为 `true` 但这里不包含 `pdf`，tool result 里的 file part 会被转成 user role 消息。Copilot 主链路同样默认只发送 string tool content，因为部分 Copilot 模型也不支持数组或图片形式的 tool content。

package/dist/auth-CdETqUtu.js

@@ -0,0 +1,2 @@
+import { t as auth } from "./auth-zBY9SQaI.js";
+export { auth };

package/dist/{auth-CMufJUfF.js → auth-zBY9SQaI.js}

@@ -1,5 +1,5 @@
 import { M as setConfiguredApiKeys, N as PATHS, P as ensurePaths, a as normalizeProviderBaseUrl, c as setProviderConfig, n as getRawProviderConfig, r as isSupportedProviderType, y as SUPPORTED_PROVIDER_TYPES } from "./config-2Dli6AI8.js";
-import { J as state, M as getConfiguredApiKeys, P as loginCodex, a as setupGitHubToken, n as persistCodexCredentials } from "./token-O2WH6ipn.js";
+import { I as loginCodex, P as getConfiguredApiKeys, X as state, i as selectCodexAccount, r as persistCodexCredentials, s as setupGitHubToken, t as getCodexAccounts } from "./token-4p5BAEqO.js";
 import { defineCommand } from "citty";
 import consola from "consola";
 //#region src/lib/quick-providers.ts
@@ -88,6 +88,10 @@ const authArgs = {
 		type: "string",
 		description: "Provider to log in with or configure (copilot, codex, opencode-go, kimi, deepseek, dashscope, openrouter, custom)"
 	},
+	alias: {
+		type: "string",
+		description: "Optional alias for a Codex account"
+	},
 	verbose: {
 		alias: "v",
 		type: "boolean",
@@ -320,7 +324,7 @@ async function configureQuickProvider(providerName) {
 	}));
 	consola.success(`${AUTH_PROVIDER_LABELS[providerName]} provider '${providerName}' written to ${PATHS.CONFIG_PATH}`);
 }
-async function loginWithCodex() {
+async function loginWithCodex(alias) {
 	const credentials = await loginCodex({
 		onAuth(info) {
 			consola.info("Open the following URL to authenticate with Codex:");
@@ -334,17 +338,22 @@ async function loginWithCodex() {
 			consola.debug(message);
 		}
 	});
-	await persistCodexCredentials(credentials, { enableProvider: true });
+	await persistCodexCredentials(credentials, {
+		activateAccount: true,
+		alias,
+		enableProvider: true
+	});
 	consola.success(`Codex provider config written to ${PATHS.CONFIG_PATH} and credentials written to ${PATHS.CODEX_CREDENTIAL_PATH}`);
 }
-async function loginWithProvider(provider) {
+async function loginWithProvider(provider, alias) {
+	if (alias !== void 0 && provider !== "codex") throw new Error("--alias is only supported with the codex provider");
 	if (provider === "copilot") {
 		await setupGitHubToken({ force: true });
 		consola.success("GitHub token written to", PATHS.GITHUB_TOKEN_PATH);
 		return;
 	}
 	if (provider === "codex") {
-		await loginWithCodex();
+		await loginWithCodex(alias);
 		return;
 	}
 	if (isQuickProviderName(provider)) {
@@ -368,7 +377,41 @@ async function runAuthLogin(options) {
 	await ensurePaths();
 	const provider = await resolveProviderSelection(options.provider);
 	consola.info(`Logging in with ${AUTH_PROVIDER_LABELS[provider]}`);
-	await loginWithProvider(provider);
+	await loginWithProvider(provider, options.alias);
+}
+const authCodexArgs = {
+	list: {
+		alias: "l",
+		type: "boolean",
+		default: false,
+		description: "List stored Codex accounts"
+	},
+	use: {
+		alias: "u",
+		type: "string",
+		description: "Select a Codex account by alias or account id"
+	}
+};
+function formatCodexAccount(account) {
+	const name = account.alias ? `${account.alias} (${account.accountId})` : account.accountId;
+	return `${account.active ? "*" : "-"} ${name}`;
+}
+async function runAuthCodex(options) {
+	await ensurePaths();
+	if (options.list && options.use !== void 0) throw new Error("Use only one of --list or --use per invocation");
+	if (options.use !== void 0) {
+		const account = await selectCodexAccount(options.use);
+		consola.success(`Selected Codex account ${account.alias ? `${account.alias} (${account.accountId})` : account.accountId}`);
+		consola.info("Restart the server to use the selected Codex account.");
+		return;
+	}
+	const accounts = await getCodexAccounts();
+	if (accounts.length === 0) {
+		consola.info("No Codex accounts configured. Run `copilot-api auth login --provider codex` to add one.");
+		return;
+	}
+	consola.info("Configured Codex accounts:");
+	for (const account of accounts) consola.info(formatCodexAccount(account));
 }
 const authKeysArgs = {
 	add: {
@@ -452,6 +495,7 @@ const authLogin = defineCommand({
 	args: authArgs,
 	run({ args }) {
 		return runAuthLogin({
+			alias: args.alias,
 			provider: args.provider,
 			verbose: args.verbose,
 			showToken: args["show-token"]
@@ -473,6 +517,19 @@ const authKeys = defineCommand({
 		});
 	}
 });
+const authCodex = defineCommand({
+	meta: {
+		name: "codex",
+		description: "List or select stored Codex accounts"
+	},
+	args: authCodexArgs,
+	run({ args }) {
+		return runAuthCodex({
+			list: args.list,
+			use: args.use
+		});
+	}
+});
 const auth = defineCommand({
 	meta: {
 		name: "auth",
@@ -480,12 +537,14 @@ const auth = defineCommand({
 	},
 	args: authArgs,
 	subCommands: {
+		codex: authCodex,
 		login: authLogin,
 		keys: authKeys
 	},
 	run({ args }) {
 		if ((args._[0] ?? "").trim()) return;
 		return runAuthLogin({
+			alias: args.alias,
 			provider: args.provider,
 			verbose: args.verbose,
 			showToken: args["show-token"]
@@ -493,6 +552,6 @@ const auth = defineCommand({
 	}
 });
 //#endregion
-export { runProviderSetup as i, runAuthKeys as n, runAuthLogin as r, auth as t };
+export { runProviderSetup as a, runAuthLogin as i, runAuthCodex as n, runAuthKeys as r, auth as t };
 
-//# sourceMappingURL=auth-CMufJUfF.js.map
+//# sourceMappingURL=auth-zBY9SQaI.js.map

package/dist/auth-zBY9SQaI.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-zBY9SQaI.js","names":[],"sources":["../src/lib/quick-providers.ts","../src/lib/interactive-prompt.ts","../src/auth.ts"],"sourcesContent":["import type { ProviderType } from \"./config\"\n\ninterface QuickProviderConfig {\n  type: ProviderType\n  baseUrl: string\n  pricingCurrency: string\n  editableType: boolean\n}\n\nexport const QUICK_PROVIDER_CONFIGS = {\n  \"opencode-go\": {\n    type: \"openai-compatible\",\n    baseUrl: \"https://opencode.ai/zen/go\",\n    pricingCurrency: \"USD\",\n    editableType: false,\n  },\n  kimi: {\n    type: \"openai-compatible\",\n    baseUrl: \"https://api.kimi.com/coding\",\n    pricingCurrency: \"USD\",\n    editableType: true,\n  },\n  deepseek: {\n    type: \"anthropic\",\n    baseUrl: \"https://api.deepseek.com/anthropic\",\n    pricingCurrency: \"CNY\",\n    editableType: true,\n  },\n  dashscope: {\n    type: \"openai-compatible\",\n    baseUrl: \"https://dashscope.aliyuncs.com/compatible-mode\",\n    pricingCurrency: \"CNY\",\n    editableType: true,\n  },\n  openrouter: {\n    type: \"anthropic\",\n    baseUrl: \"https://openrouter.ai/api\",\n    pricingCurrency: \"USD\",\n    editableType: false,\n  },\n} satisfies Record<string, QuickProviderConfig>\n\nexport type QuickProviderName = keyof typeof QUICK_PROVIDER_CONFIGS\n","import consola from \"consola\"\n\ninterface PromptSelectOption {\n  label: string\n  value: string\n  hint?: string\n}\n\ninterface TextPromptOptions {\n  type?: \"text\"\n  default?: string\n  initial?: string\n  placeholder?: string\n}\n\ninterface SelectPromptOptions {\n  type: \"select\"\n  initial?: string\n  options: Array<string | PromptSelectOption>\n}\n\nexport type InteractivePromptOptions = SelectPromptOptions | TextPromptOptions\n\ninterface ClackSelectOptions {\n  message: string\n  initialValue?: string\n  options: Array<PromptSelectOption>\n}\n\ninterface ClackTextOptions {\n  message: string\n  defaultValue?: string\n  initialValue?: string\n  placeholder?: string\n}\n\nexport interface ClackPromptBackend {\n  isCancel(value: unknown): boolean\n  select(options: ClackSelectOptions): Promise<string | symbol>\n  text(options: ClackTextOptions): Promise<string | symbol>\n}\n\ninterface PromptRuntime {\n  bunVersion?: string\n  platform: NodeJS.Platform\n  stdinIsTTY?: boolean\n  stdoutIsTTY?: boolean\n  stdoutIsTTYStream?: boolean\n}\n\n// Consola 3.4.2 bundles a prompt implementation that writes keyboard input to\n// tty fd 0. Bun treats that as a real stdin write on Windows and throws EPIPE.\nexport function shouldUseClackPrompt(\n  runtime: PromptRuntime = {\n    bunVersion: process.versions.bun,\n    platform: process.platform,\n    stdinIsTTY: process.stdin.isTTY,\n    stdoutIsTTY: process.stdout.isTTY,\n    stdoutIsTTYStream: typeof process.stdout.getColorDepth === \"function\",\n  },\n): boolean {\n  return Boolean(\n    runtime.platform === \"win32\"\n      && runtime.bunVersion\n      && runtime.stdinIsTTY\n      && runtime.stdoutIsTTY\n      && runtime.stdoutIsTTYStream,\n  )\n}\n\nfunction getCancelValue(options: InteractivePromptOptions): string | undefined {\n  return options.type === \"select\" ?\n      options.initial\n    : (options.default ?? options.initial)\n}\n\nexport async function promptWithClack(\n  message: string,\n  options: InteractivePromptOptions,\n  backend: ClackPromptBackend,\n): Promise<string | undefined> {\n  if (options.type === \"select\") {\n    const value = await backend.select({\n      message,\n      options: options.options.map((option) =>\n        typeof option === \"string\" ? { label: option, value: option } : option,\n      ),\n      initialValue: options.initial,\n    })\n    if (backend.isCancel(value)) {\n      return getCancelValue(options)\n    }\n    return typeof value === \"string\" ? value : undefined\n  }\n\n  const value = await backend.text({\n    message,\n    defaultValue: options.default,\n    initialValue: options.initial,\n    placeholder: options.placeholder,\n  })\n  if (backend.isCancel(value)) {\n    return getCancelValue(options)\n  }\n  return typeof value === \"string\" ? value : undefined\n}\n\nexport async function prompt(\n  message: string,\n  options: InteractivePromptOptions,\n): Promise<string | undefined> {\n  if (!shouldUseClackPrompt()) {\n    if (options.type === \"select\") {\n      const value = await consola.prompt(message, options)\n      return typeof value === \"string\" ? value : undefined\n    }\n    return await consola.prompt(message, options)\n  }\n\n  const clack = await import(\"@clack/prompts\")\n  return await promptWithClack(message, options, clack)\n}\n","#!/usr/bin/env node\n\nimport { defineCommand } from \"citty\"\nimport consola from \"consola\"\n\nimport {\n  getRawProviderConfig,\n  isSupportedProviderType,\n  normalizeProviderBaseUrl,\n  setProviderConfig,\n  setConfiguredApiKeys,\n  SUPPORTED_PROVIDER_TYPES,\n  type ProviderAuthType,\n  type ProviderConfig,\n  type ProviderType,\n} from \"./lib/config\"\nimport { loginCodex } from \"./lib/oauth/codex\"\nimport { PATHS, ensurePaths } from \"./lib/paths\"\nimport { getConfiguredApiKeys } from \"./lib/request-auth\"\nimport {\n  QUICK_PROVIDER_CONFIGS,\n  type QuickProviderName,\n} from \"./lib/quick-providers\"\nimport { prompt } from \"./lib/interactive-prompt\"\nimport { state } from \"./lib/state\"\nimport {\n  getCodexAccounts,\n  persistCodexCredentials,\n  selectCodexAccount,\n  setupGitHubToken,\n} from \"./lib/token\"\n\ninterface RunAuthOptions {\n  alias?: string\n  provider?: string\n  verbose: boolean\n  showToken: boolean\n}\n\nconst authArgs = {\n  provider: {\n    type: \"string\",\n    description:\n      \"Provider to log in with or configure (copilot, codex, opencode-go, kimi, deepseek, dashscope, openrouter, custom)\",\n  },\n  alias: {\n    type: \"string\",\n    description: \"Optional alias for a Codex account\",\n  },\n  verbose: {\n    alias: \"v\",\n    type: \"boolean\",\n    default: false,\n    description: \"Enable verbose logging\",\n  },\n  \"show-token\": {\n    type: \"boolean\",\n    default: false,\n    description: \"Show provider access token on auth\",\n  },\n} as const\n\nconst BUILTIN_PROVIDER_NAMES = [\"copilot\", \"codex\"] as const\nconst QUICK_PROVIDER_NAMES = Object.keys(\n  QUICK_PROVIDER_CONFIGS,\n) as Array<QuickProviderName>\nconst AUTH_PROVIDER_NAMES = [\n  ...BUILTIN_PROVIDER_NAMES,\n  ...QUICK_PROVIDER_NAMES,\n  \"custom\",\n] as const\nconst CUSTOM_PROVIDER_AUTH_TYPE_OPTION = \"__default__\"\nconst QUICK_PROVIDER_DEFAULT_TYPE_OPTION = \"__default__\"\nconst CUSTOM_PROVIDER_AUTH_TYPES = [\"x-api-key\", \"authorization\"] as const\n\ntype BuiltinProviderName = (typeof BUILTIN_PROVIDER_NAMES)[number]\ntype AuthProviderName = (typeof AUTH_PROVIDER_NAMES)[number]\ntype CustomProviderAuthType = (typeof CUSTOM_PROVIDER_AUTH_TYPES)[number]\n\nconst BUILTIN_PROVIDER_LABELS: Record<BuiltinProviderName, string> = {\n  copilot: \"GitHub Copilot\",\n  codex: \"OpenAI Codex\",\n}\nconst AUTH_PROVIDER_LABELS: Record<AuthProviderName, string> = {\n  ...BUILTIN_PROVIDER_LABELS,\n  \"opencode-go\": \"OpenCode Go\",\n  kimi: \"Kimi\",\n  deepseek: \"DeepSeek\",\n  dashscope: \"DashScope\",\n  openrouter: \"OpenRouter\",\n  custom: \"Custom provider\",\n}\n\nfunction isAuthProviderName(\n  providerName: string,\n): providerName is AuthProviderName {\n  return AUTH_PROVIDER_NAMES.includes(providerName as AuthProviderName)\n}\n\nfunction isCustomProviderAuthType(\n  value: string,\n): value is CustomProviderAuthType {\n  return CUSTOM_PROVIDER_AUTH_TYPES.includes(value as CustomProviderAuthType)\n}\n\nfunction isQuickProviderName(\n  providerName: AuthProviderName,\n): providerName is QuickProviderName {\n  return QUICK_PROVIDER_NAMES.includes(providerName as QuickProviderName)\n}\n\nasync function resolveProviderSelection(\n  providerArg: string | undefined,\n): Promise<AuthProviderName> {\n  const availableProviders = [...AUTH_PROVIDER_NAMES]\n\n  if (providerArg !== undefined) {\n    const providerName = providerArg.trim()\n    if (!isAuthProviderName(providerName)) {\n      throw new Error(\n        `Unknown provider '${providerArg}'. Expected one of: ${availableProviders.join(\", \")}`,\n      )\n    }\n    return providerName\n  }\n\n  if (availableProviders.length === 1) {\n    return availableProviders[0]\n  }\n\n  const provider = await prompt(\"Select a provider to log in with\", {\n    type: \"select\",\n    options: availableProviders.map((providerName) => ({\n      label: `${AUTH_PROVIDER_LABELS[providerName]} (${providerName})`,\n      value: providerName,\n    })),\n  })\n\n  if (!provider || !isAuthProviderName(provider)) {\n    throw new Error(\"No provider selected\")\n  }\n\n  return provider\n}\n\nfunction assertCustomProviderName(providerName: string): void {\n  if (!providerName) {\n    throw new Error(\"Provider name must be a non-empty string\")\n  }\n\n  if (!/^[A-Za-z0-9][A-Za-z0-9_-]*$/u.test(providerName)) {\n    throw new Error(\n      \"Provider name must start with a letter or number and contain only letters, numbers, underscores, or hyphens\",\n    )\n  }\n\n  if (providerName === \"copilot\" || providerName === \"codex\") {\n    throw new Error(\n      `Provider name '${providerName}' is reserved for a builtin provider`,\n    )\n  }\n}\n\nasync function promptRequiredText(\n  message: string,\n  fieldName: string,\n): Promise<string> {\n  const value = await prompt(message, { type: \"text\" })\n  const normalizedValue = typeof value === \"string\" ? value.trim() : \"\"\n  if (!normalizedValue) {\n    throw new Error(`${fieldName} must be a non-empty string`)\n  }\n  return normalizedValue\n}\n\nfunction canUseMaskedPrompt(): boolean {\n  return Boolean(\n    process.stdin.isTTY\n      && process.stdout.isTTY\n      && typeof process.stdin.setRawMode === \"function\",\n  )\n}\n\nasync function promptMaskedText(message: string): Promise<string> {\n  if (!canUseMaskedPrompt()) {\n    const value = await prompt(message, { type: \"text\" })\n    return typeof value === \"string\" ? value : \"\"\n  }\n\n  return await new Promise<string>((resolve, reject) => {\n    let value = \"\"\n    const rawModeWasEnabled = process.stdin.isRaw === true\n\n    function cleanup(): void {\n      process.stdin.off(\"data\", onData)\n      process.stdin.setRawMode(rawModeWasEnabled)\n      process.stdin.pause()\n    }\n\n    function finish(): void {\n      cleanup()\n      process.stdout.write(\"\\n\")\n      resolve(value)\n    }\n\n    function cancel(): void {\n      cleanup()\n      process.stdout.write(\"\\n\")\n      reject(new Error(\"Prompt cancelled\"))\n    }\n\n    function onData(chunk: Buffer): void {\n      const input = chunk.toString(\"utf8\")\n\n      if (input.startsWith(\"\\u001B\")) {\n        return\n      }\n\n      for (const char of input) {\n        if (char === \"\\u0003\") {\n          cancel()\n          return\n        }\n\n        if (char === \"\\r\" || char === \"\\n\") {\n          finish()\n          return\n        }\n\n        if (char === \"\\b\" || char === \"\\u007F\") {\n          if (value.length > 0) {\n            value = value.slice(0, -1)\n            process.stdout.write(\"\\b \\b\")\n          }\n          continue\n        }\n\n        if (char >= \" \") {\n          value += char\n          process.stdout.write(\"*\")\n        }\n      }\n    }\n\n    process.stdout.write(`${message}: `)\n    process.stdin.setRawMode(true)\n    process.stdin.resume()\n    process.stdin.on(\"data\", onData)\n  })\n}\n\nasync function promptRequiredSecret(\n  message: string,\n  fieldName: string,\n): Promise<string> {\n  const value = await promptMaskedText(message)\n  const normalizedValue = value.trim()\n  if (!normalizedValue) {\n    throw new Error(`${fieldName} must be a non-empty string`)\n  }\n  return normalizedValue\n}\n\nasync function promptCustomProviderName(): Promise<string> {\n  const providerName = await promptRequiredText(\n    \"Enter provider name\",\n    \"Provider name\",\n  )\n  assertCustomProviderName(providerName)\n  return providerName\n}\n\nasync function promptCustomProviderType(): Promise<ProviderType> {\n  const providerType = await prompt(\"Select provider type\", {\n    type: \"select\",\n    options: SUPPORTED_PROVIDER_TYPES.map((type) => ({\n      label: type,\n      value: type,\n    })),\n  })\n\n  if (\n    typeof providerType !== \"string\"\n    || !isSupportedProviderType(providerType)\n  ) {\n    throw new Error(\"No provider type selected\")\n  }\n\n  return providerType\n}\n\nasync function promptQuickProviderType(\n  defaultType: ProviderType,\n): Promise<ProviderType> {\n  const providerType = await prompt(\n    `Select provider type (default: ${defaultType})`,\n    {\n      type: \"select\",\n      options: [\n        {\n          label: `Default (${defaultType})`,\n          value: QUICK_PROVIDER_DEFAULT_TYPE_OPTION,\n        },\n        ...SUPPORTED_PROVIDER_TYPES.map((type) => ({\n          label: type,\n          value: type,\n        })),\n      ],\n    },\n  )\n\n  if (providerType === QUICK_PROVIDER_DEFAULT_TYPE_OPTION) {\n    return defaultType\n  }\n\n  if (\n    typeof providerType === \"string\"\n    && isSupportedProviderType(providerType)\n  ) {\n    return providerType\n  }\n\n  throw new Error(\"No provider type selected\")\n}\n\nfunction getDefaultProviderAuthType(\n  providerType: ProviderType,\n): ProviderAuthType {\n  return providerType === \"anthropic\" ? \"x-api-key\" : \"authorization\"\n}\n\nasync function promptCustomProviderAuthType(\n  providerType: ProviderType,\n): Promise<ProviderAuthType | undefined> {\n  const defaultAuthType = getDefaultProviderAuthType(providerType)\n  const authType = await prompt(\"Select provider auth type\", {\n    type: \"select\",\n    options: [\n      {\n        label: `Default (${defaultAuthType})`,\n        value: CUSTOM_PROVIDER_AUTH_TYPE_OPTION,\n      },\n      ...CUSTOM_PROVIDER_AUTH_TYPES.map((value) => ({\n        label: value,\n        value,\n      })),\n    ],\n  })\n\n  if (authType === CUSTOM_PROVIDER_AUTH_TYPE_OPTION) {\n    return undefined\n  }\n\n  if (typeof authType === \"string\" && isCustomProviderAuthType(authType)) {\n    return authType\n  }\n\n  throw new Error(\"No provider auth type selected\")\n}\n\nasync function promptQuickProviderBaseUrl(\n  defaultBaseUrl: string,\n): Promise<string> {\n  const value = await prompt(\n    `Enter provider baseUrl (default: ${defaultBaseUrl})`,\n    {\n      type: \"text\",\n      default: defaultBaseUrl,\n      initial: defaultBaseUrl,\n    },\n  )\n  const baseUrl = normalizeProviderBaseUrl(\n    typeof value === \"string\" && value.trim() ? value : defaultBaseUrl,\n  )\n  if (!baseUrl) {\n    throw new Error(\"baseUrl must be a non-empty string\")\n  }\n\n  return baseUrl\n}\n\nfunction buildCustomProviderConfig(\n  existingProviderConfig: ProviderConfig,\n  options: {\n    apiKey: string\n    authType?: ProviderAuthType\n    baseUrl: string\n    pricingCurrency?: string\n    type: ProviderType\n  },\n): ProviderConfig {\n  return {\n    type: options.type,\n    enabled: true,\n    baseUrl: options.baseUrl,\n    apiKey: options.apiKey,\n    ...(options.authType ? { authType: options.authType } : {}),\n    pricingCurrency:\n      options.pricingCurrency ?? existingProviderConfig.pricingCurrency,\n    ...(existingProviderConfig.models ?\n      { models: existingProviderConfig.models }\n    : {}),\n  }\n}\n\nasync function configureCustomProvider(): Promise<void> {\n  const providerName = await promptCustomProviderName()\n  const type = await promptCustomProviderType()\n  const baseUrl = normalizeProviderBaseUrl(\n    await promptRequiredText(\"Enter provider baseUrl\", \"baseUrl\"),\n  )\n  if (!baseUrl) {\n    throw new Error(\"baseUrl must be a non-empty string\")\n  }\n\n  const apiKey = await promptRequiredSecret(\"Enter provider apiKey\", \"apiKey\")\n  const authType = await promptCustomProviderAuthType(type)\n  const existingProviderConfig = getRawProviderConfig(providerName) ?? {}\n\n  setProviderConfig(\n    providerName,\n    buildCustomProviderConfig(existingProviderConfig, {\n      apiKey,\n      authType,\n      baseUrl,\n      type,\n    }),\n  )\n\n  consola.success(\n    `Custom provider '${providerName}' written to ${PATHS.CONFIG_PATH}`,\n  )\n}\n\nasync function configureQuickProvider(\n  providerName: QuickProviderName,\n): Promise<void> {\n  const defaultProviderConfig = QUICK_PROVIDER_CONFIGS[providerName]\n  const apiKey = await promptRequiredSecret(\n    `Enter ${providerName} apiKey`,\n    \"apiKey\",\n  )\n  const type =\n    defaultProviderConfig.editableType ?\n      await promptQuickProviderType(defaultProviderConfig.type)\n    : defaultProviderConfig.type\n  const baseUrl = await promptQuickProviderBaseUrl(\n    defaultProviderConfig.baseUrl,\n  )\n  const existingProviderConfig = getRawProviderConfig(providerName) ?? {}\n\n  setProviderConfig(\n    providerName,\n    buildCustomProviderConfig(existingProviderConfig, {\n      apiKey,\n      baseUrl,\n      pricingCurrency: defaultProviderConfig.pricingCurrency,\n      type,\n    }),\n  )\n\n  consola.success(\n    `${AUTH_PROVIDER_LABELS[providerName]} provider '${providerName}' written to ${PATHS.CONFIG_PATH}`,\n  )\n}\n\nasync function loginWithCodex(alias?: string): Promise<void> {\n  const credentials = await loginCodex({\n    onAuth(info) {\n      consola.info(\"Open the following URL to authenticate with Codex:\")\n      consola.log(info.url)\n      if (info.instructions) {\n        consola.info(info.instructions)\n      }\n    },\n    onPrompt(message) {\n      return prompt(message, { type: \"text\" }).then((value) => value ?? \"\")\n    },\n    onProgress(message) {\n      consola.debug(message)\n    },\n  })\n\n  await persistCodexCredentials(credentials, {\n    activateAccount: true,\n    alias,\n    enableProvider: true,\n  })\n  consola.success(\n    `Codex provider config written to ${PATHS.CONFIG_PATH} and credentials written to ${PATHS.CODEX_CREDENTIAL_PATH}`,\n  )\n}\n\nasync function loginWithProvider(\n  provider: AuthProviderName,\n  alias?: string,\n): Promise<void> {\n  if (alias !== undefined && provider !== \"codex\") {\n    throw new Error(\"--alias is only supported with the codex provider\")\n  }\n\n  if (provider === \"copilot\") {\n    await setupGitHubToken({ force: true })\n    consola.success(\"GitHub token written to\", PATHS.GITHUB_TOKEN_PATH)\n    return\n  }\n\n  if (provider === \"codex\") {\n    await loginWithCodex(alias)\n    return\n  }\n\n  if (isQuickProviderName(provider)) {\n    await configureQuickProvider(provider)\n    return\n  }\n\n  await configureCustomProvider()\n}\n\nexport async function runProviderSetup(): Promise<void> {\n  const provider = await resolveProviderSelection(undefined)\n  consola.info(`Logging in with ${AUTH_PROVIDER_LABELS[provider]}`)\n  await loginWithProvider(provider)\n}\n\nexport async function runAuthLogin(options: RunAuthOptions): Promise<void> {\n  const tlsModule = await import(\"./lib/tls\")\n  tlsModule.enableSystemCACompat()\n\n  if (options.verbose) {\n    consola.level = 5\n    consola.info(\"Verbose logging enabled\")\n  }\n\n  state.showToken = options.showToken\n\n  await ensurePaths()\n  const provider = await resolveProviderSelection(options.provider)\n\n  consola.info(`Logging in with ${AUTH_PROVIDER_LABELS[provider]}`)\n  await loginWithProvider(provider, options.alias)\n}\n\nconst authCodexArgs = {\n  list: {\n    alias: \"l\",\n    type: \"boolean\",\n    default: false,\n    description: \"List stored Codex accounts\",\n  },\n  use: {\n    alias: \"u\",\n    type: \"string\",\n    description: \"Select a Codex account by alias or account id\",\n  },\n} as const\n\ninterface RunAuthCodexOptions {\n  list?: boolean\n  use?: string\n}\n\nfunction formatCodexAccount(\n  account: Awaited<ReturnType<typeof getCodexAccounts>>[number],\n): string {\n  const name =\n    account.alias ?\n      `${account.alias} (${account.accountId})`\n    : account.accountId\n  return `${account.active ? \"*\" : \"-\"} ${name}`\n}\n\nexport async function runAuthCodex(\n  options: RunAuthCodexOptions,\n): Promise<void> {\n  await ensurePaths()\n\n  if (options.list && options.use !== undefined) {\n    throw new Error(\"Use only one of --list or --use per invocation\")\n  }\n\n  if (options.use !== undefined) {\n    const account = await selectCodexAccount(options.use)\n    consola.success(\n      `Selected Codex account ${account.alias ? `${account.alias} (${account.accountId})` : account.accountId}`,\n    )\n    consola.info(\"Restart the server to use the selected Codex account.\")\n    return\n  }\n\n  const accounts = await getCodexAccounts()\n  if (accounts.length === 0) {\n    consola.info(\n      \"No Codex accounts configured. Run `copilot-api auth login --provider codex` to add one.\",\n    )\n    return\n  }\n\n  consola.info(\"Configured Codex accounts:\")\n  for (const account of accounts) {\n    consola.info(formatCodexAccount(account))\n  }\n}\n\nconst authKeysArgs = {\n  add: {\n    alias: \"a\",\n    type: \"string\",\n    description: \"Add an API key for gateway authentication\",\n  },\n  remove: {\n    alias: \"r\",\n    type: \"string\",\n    description: \"Remove an API key\",\n  },\n  list: {\n    alias: \"l\",\n    type: \"boolean\",\n    default: false,\n    description: \"List configured API keys\",\n  },\n  clear: {\n    type: \"boolean\",\n    default: false,\n    description: \"Remove all configured API keys\",\n  },\n} as const\n\ninterface RunAuthKeysOptions {\n  add?: string\n  remove?: string\n  list?: boolean\n  clear?: boolean\n}\n\nfunction normalizeAuthKeyValue(value: string): string {\n  const normalizedKey = value.trim()\n  if (!normalizedKey) {\n    throw new Error(\"API key must be a non-empty string\")\n  }\n  return normalizedKey\n}\n\nexport async function runAuthKeys(options: RunAuthKeysOptions): Promise<void> {\n  const tlsModule = await import(\"./lib/tls\")\n  tlsModule.enableSystemCACompat()\n\n  await ensurePaths()\n\n  const operations = [\n    ...(options.add !== undefined ? [\"add\"] : []),\n    ...(options.remove !== undefined ? [\"remove\"] : []),\n    ...(options.list ? [\"list\"] : []),\n    ...(options.clear ? [\"clear\"] : []),\n  ]\n  if (operations.length > 1) {\n    throw new Error(\n      \"Use only one of --add, --remove, --list, or --clear per invocation\",\n    )\n  }\n\n  const operation = operations[0] ?? \"list\"\n\n  if (operation === \"add\") {\n    const apiKey = normalizeAuthKeyValue(options.add ?? \"\")\n    const currentKeys = getConfiguredApiKeys()\n    if (currentKeys.includes(apiKey)) {\n      consola.info(\n        `API key already configured. ${currentKeys.length} API key(s) configured.`,\n      )\n      return\n    }\n    const storedKeys = setConfiguredApiKeys([...currentKeys, apiKey])\n    consola.success(\n      `API key added to ${PATHS.CONFIG_PATH}. ${storedKeys.length} API key(s) configured.`,\n    )\n    return\n  }\n\n  if (operation === \"remove\") {\n    const apiKey = normalizeAuthKeyValue(options.remove ?? \"\")\n    const currentKeys = getConfiguredApiKeys()\n    if (!currentKeys.includes(apiKey)) {\n      consola.info(\n        `API key not found. ${currentKeys.length} API key(s) configured.`,\n      )\n      return\n    }\n    const storedKeys = setConfiguredApiKeys(\n      currentKeys.filter((key) => key !== apiKey),\n    )\n    consola.success(\n      `API key removed from ${PATHS.CONFIG_PATH}. ${storedKeys.length} API key(s) configured.`,\n    )\n    return\n  }\n\n  if (operation === \"clear\") {\n    setConfiguredApiKeys([])\n    consola.success(`Removed all API keys from ${PATHS.CONFIG_PATH}.`)\n    return\n  }\n\n  const currentKeys = getConfiguredApiKeys()\n  if (currentKeys.length === 0) {\n    consola.info(\n      \"No API keys configured. Run `npx copilot-api auth keys --add <key>` to add one.\",\n    )\n    return\n  }\n  consola.info(\"Configured API keys:\")\n  for (const key of currentKeys) {\n    consola.info(`- ${key}`)\n  }\n}\n\nconst authLogin = defineCommand({\n  meta: {\n    name: \"login\",\n    description:\n      \"Authenticate or configure a provider without running the server\",\n  },\n  args: authArgs,\n  run({ args }) {\n    return runAuthLogin({\n      alias: args.alias,\n      provider: args.provider,\n      verbose: args.verbose,\n      showToken: args[\"show-token\"],\n    })\n  },\n})\n\nconst authKeys = defineCommand({\n  meta: {\n    name: \"keys\",\n    description: \"Manage gateway API keys (auth.apiKeys) in the config\",\n  },\n  args: authKeysArgs,\n  run({ args }) {\n    return runAuthKeys({\n      add: args.add,\n      remove: args.remove,\n      list: args.list,\n      clear: args.clear,\n    })\n  },\n})\n\nconst authCodex = defineCommand({\n  meta: {\n    name: \"codex\",\n    description: \"List or select stored Codex accounts\",\n  },\n  args: authCodexArgs,\n  run({ args }) {\n    return runAuthCodex({\n      list: args.list,\n      use: args.use,\n    })\n  },\n})\n\nexport const auth = defineCommand({\n  meta: {\n    name: \"auth\",\n    description: \"Run authentication flows without running the server\",\n  },\n  args: authArgs,\n  subCommands: {\n    codex: authCodex,\n    login: authLogin,\n    keys: authKeys,\n  },\n  run({ args }) {\n    if ((args._[0] ?? \"\").trim()) {\n      return\n    }\n\n    return runAuthLogin({\n      alias: args.alias,\n      provider: args.provider,\n      verbose: args.verbose,\n      showToken: args[\"show-token\"],\n    })\n  },\n})\n"],"mappings":";;;;;AASA,MAAa,yBAAyB;CACpC,eAAe;EACb,MAAM;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;CAChB;CACA,MAAM;EACJ,MAAM;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;CAChB;CACA,UAAU;EACR,MAAM;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;CAChB;CACA,WAAW;EACT,MAAM;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;CAChB;CACA,YAAY;EACV,MAAM;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;CAChB;AACF;;;ACYA,SAAgB,qBACd,UAAyB;CACvB,YAAY,QAAQ,SAAS;CAC7B,UAAU,QAAQ;CAClB,YAAY,QAAQ,MAAM;CAC1B,aAAa,QAAQ,OAAO;CAC5B,mBAAmB,OAAO,QAAQ,OAAO,kBAAkB;AAC7D,GACS;CACT,OAAO,QACL,QAAQ,aAAa,WAChB,QAAQ,cACR,QAAQ,cACR,QAAQ,eACR,QAAQ,iBACf;AACF;AAEA,SAAS,eAAe,SAAuD;CAC7E,OAAO,QAAQ,SAAS,WACpB,QAAQ,UACP,QAAQ,WAAW,QAAQ;AAClC;AAEA,eAAsB,gBACpB,SACA,SACA,SAC6B;CAC7B,IAAI,QAAQ,SAAS,UAAU;EAC7B,MAAM,QAAQ,MAAM,QAAQ,OAAO;GACjC;GACA,SAAS,QAAQ,QAAQ,KAAK,WAC5B,OAAO,WAAW,WAAW;IAAE,OAAO;IAAQ,OAAO;GAAO,IAAI,MAClE;GACA,cAAc,QAAQ;EACxB,CAAC;EACD,IAAI,QAAQ,SAAS,KAAK,GACxB,OAAO,eAAe,OAAO;EAE/B,OAAO,OAAO,UAAU,WAAW,QAAQ,KAAA;CAC7C;CAEA,MAAM,QAAQ,MAAM,QAAQ,KAAK;EAC/B;EACA,cAAc,QAAQ;EACtB,cAAc,QAAQ;EACtB,aAAa,QAAQ;CACvB,CAAC;CACD,IAAI,QAAQ,SAAS,KAAK,GACxB,OAAO,eAAe,OAAO;CAE/B,OAAO,OAAO,UAAU,WAAW,QAAQ,KAAA;AAC7C;AAEA,eAAsB,OACpB,SACA,SAC6B;CAC7B,IAAI,CAAC,qBAAqB,GAAG;EAC3B,IAAI,QAAQ,SAAS,UAAU;GAC7B,MAAM,QAAQ,MAAM,QAAQ,OAAO,SAAS,OAAO;GACnD,OAAO,OAAO,UAAU,WAAW,QAAQ,KAAA;EAC7C;EACA,OAAO,MAAM,QAAQ,OAAO,SAAS,OAAO;CAC9C;CAGA,OAAO,MAAM,gBAAgB,SAAS,SAAS,MAD3B,OAAO,iBACyB;AACtD;;;AClFA,MAAM,WAAW;CACf,UAAU;EACR,MAAM;EACN,aACE;CACJ;CACA,OAAO;EACL,MAAM;EACN,aAAa;CACf;CACA,SAAS;EACP,OAAO;EACP,MAAM;EACN,SAAS;EACT,aAAa;CACf;CACA,cAAc;EACZ,MAAM;EACN,SAAS;EACT,aAAa;CACf;AACF;AAEA,MAAM,yBAAyB,CAAC,WAAW,OAAO;AAClD,MAAM,uBAAuB,OAAO,KAClC,sBACF;AACA,MAAM,sBAAsB;CAC1B,GAAG;CACH,GAAG;CACH;AACF;AACA,MAAM,mCAAmC;AACzC,MAAM,qCAAqC;AAC3C,MAAM,6BAA6B,CAAC,aAAa,eAAe;AAUhE,MAAM,uBAAyD;CAH7D,SAAS;CACT,OAAO;CAIP,eAAe;CACf,MAAM;CACN,UAAU;CACV,WAAW;CACX,YAAY;CACZ,QAAQ;AACV;AAEA,SAAS,mBACP,cACkC;CAClC,OAAO,oBAAoB,SAAS,YAAgC;AACtE;AAEA,SAAS,yBACP,OACiC;CACjC,OAAO,2BAA2B,SAAS,KAA+B;AAC5E;AAEA,SAAS,oBACP,cACmC;CACnC,OAAO,qBAAqB,SAAS,YAAiC;AACxE;AAEA,eAAe,yBACb,aAC2B;CAC3B,MAAM,qBAAqB,CAAC,GAAG,mBAAmB;CAElD,IAAI,gBAAgB,KAAA,GAAW;EAC7B,MAAM,eAAe,YAAY,KAAK;EACtC,IAAI,CAAC,mBAAmB,YAAY,GAClC,MAAM,IAAI,MACR,qBAAqB,YAAY,sBAAsB,mBAAmB,KAAK,IAAI,GACrF;EAEF,OAAO;CACT;CAEA,IAAI,mBAAmB,WAAW,GAChC,OAAO,mBAAmB;CAG5B,MAAM,WAAW,MAAM,OAAO,oCAAoC;EAChE,MAAM;EACN,SAAS,mBAAmB,KAAK,kBAAkB;GACjD,OAAO,GAAG,qBAAqB,cAAc,IAAI,aAAa;GAC9D,OAAO;EACT,EAAE;CACJ,CAAC;CAED,IAAI,CAAC,YAAY,CAAC,mBAAmB,QAAQ,GAC3C,MAAM,IAAI,MAAM,sBAAsB;CAGxC,OAAO;AACT;AAEA,SAAS,yBAAyB,cAA4B;CAC5D,IAAI,CAAC,cACH,MAAM,IAAI,MAAM,0CAA0C;CAG5D,IAAI,CAAC,+BAA+B,KAAK,YAAY,GACnD,MAAM,IAAI,MACR,6GACF;CAGF,IAAI,iBAAiB,aAAa,iBAAiB,SACjD,MAAM,IAAI,MACR,kBAAkB,aAAa,qCACjC;AAEJ;AAEA,eAAe,mBACb,SACA,WACiB;CACjB,MAAM,QAAQ,MAAM,OAAO,SAAS,EAAE,MAAM,OAAO,CAAC;CACpD,MAAM,kBAAkB,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI;CACnE,IAAI,CAAC,iBACH,MAAM,IAAI,MAAM,GAAG,UAAU,4BAA4B;CAE3D,OAAO;AACT;AAEA,SAAS,qBAA8B;CACrC,OAAO,QACL,QAAQ,MAAM,SACT,QAAQ,OAAO,SACf,OAAO,QAAQ,MAAM,eAAe,UAC3C;AACF;AAEA,eAAe,iBAAiB,SAAkC;CAChE,IAAI,CAAC,mBAAmB,GAAG;EACzB,MAAM,QAAQ,MAAM,OAAO,SAAS,EAAE,MAAM,OAAO,CAAC;EACpD,OAAO,OAAO,UAAU,WAAW,QAAQ;CAC7C;CAEA,OAAO,MAAM,IAAI,SAAiB,SAAS,WAAW;EACpD,IAAI,QAAQ;EACZ,MAAM,oBAAoB,QAAQ,MAAM,UAAU;EAElD,SAAS,UAAgB;GACvB,QAAQ,MAAM,IAAI,QAAQ,MAAM;GAChC,QAAQ,MAAM,WAAW,iBAAiB;GAC1C,QAAQ,MAAM,MAAM;EACtB;EAEA,SAAS,SAAe;GACtB,QAAQ;GACR,QAAQ,OAAO,MAAM,IAAI;GACzB,QAAQ,KAAK;EACf;EAEA,SAAS,SAAe;GACtB,QAAQ;GACR,QAAQ,OAAO,MAAM,IAAI;GACzB,uBAAO,IAAI,MAAM,kBAAkB,CAAC;EACtC;EAEA,SAAS,OAAO,OAAqB;GACnC,MAAM,QAAQ,MAAM,SAAS,MAAM;GAEnC,IAAI,MAAM,WAAW,MAAQ,GAC3B;GAGF,KAAK,MAAM,QAAQ,OAAO;IACxB,IAAI,SAAS,KAAU;KACrB,OAAO;KACP;IACF;IAEA,IAAI,SAAS,QAAQ,SAAS,MAAM;KAClC,OAAO;KACP;IACF;IAEA,IAAI,SAAS,QAAQ,SAAS,KAAU;KACtC,IAAI,MAAM,SAAS,GAAG;MACpB,QAAQ,MAAM,MAAM,GAAG,EAAE;MACzB,QAAQ,OAAO,MAAM,OAAO;KAC9B;KACA;IACF;IAEA,IAAI,QAAQ,KAAK;KACf,SAAS;KACT,QAAQ,OAAO,MAAM,GAAG;IAC1B;GACF;EACF;EAEA,QAAQ,OAAO,MAAM,GAAG,QAAQ,GAAG;EACnC,QAAQ,MAAM,WAAW,IAAI;EAC7B,QAAQ,MAAM,OAAO;EACrB,QAAQ,MAAM,GAAG,QAAQ,MAAM;CACjC,CAAC;AACH;AAEA,eAAe,qBACb,SACA,WACiB;CAEjB,MAAM,mBAAkB,MADJ,iBAAiB,OAAO,EAAA,CACd,KAAK;CACnC,IAAI,CAAC,iBACH,MAAM,IAAI,MAAM,GAAG,UAAU,4BAA4B;CAE3D,OAAO;AACT;AAEA,eAAe,2BAA4C;CACzD,MAAM,eAAe,MAAM,mBACzB,uBACA,eACF;CACA,yBAAyB,YAAY;CACrC,OAAO;AACT;AAEA,eAAe,2BAAkD;CAC/D,MAAM,eAAe,MAAM,OAAO,wBAAwB;EACxD,MAAM;EACN,SAAS,yBAAyB,KAAK,UAAU;GAC/C,OAAO;GACP,OAAO;EACT,EAAE;CACJ,CAAC;CAED,IACE,OAAO,iBAAiB,YACrB,CAAC,wBAAwB,YAAY,GAExC,MAAM,IAAI,MAAM,2BAA2B;CAG7C,OAAO;AACT;AAEA,eAAe,wBACb,aACuB;CACvB,MAAM,eAAe,MAAM,OACzB,kCAAkC,YAAY,IAC9C;EACE,MAAM;EACN,SAAS,CACP;GACE,OAAO,YAAY,YAAY;GAC/B,OAAO;EACT,GACA,GAAG,yBAAyB,KAAK,UAAU;GACzC,OAAO;GACP,OAAO;EACT,EAAE,CACJ;CACF,CACF;CAEA,IAAI,iBAAiB,oCACnB,OAAO;CAGT,IACE,OAAO,iBAAiB,YACrB,wBAAwB,YAAY,GAEvC,OAAO;CAGT,MAAM,IAAI,MAAM,2BAA2B;AAC7C;AAEA,SAAS,2BACP,cACkB;CAClB,OAAO,iBAAiB,cAAc,cAAc;AACtD;AAEA,eAAe,6BACb,cACuC;CAEvC,MAAM,WAAW,MAAM,OAAO,6BAA6B;EACzD,MAAM;EACN,SAAS,CACP;GACE,OAAO,YALW,2BAA2B,YAK1B,EAAgB;GACnC,OAAO;EACT,GACA,GAAG,2BAA2B,KAAK,WAAW;GAC5C,OAAO;GACP;EACF,EAAE,CACJ;CACF,CAAC;CAED,IAAI,aAAa,kCACf;CAGF,IAAI,OAAO,aAAa,YAAY,yBAAyB,QAAQ,GACnE,OAAO;CAGT,MAAM,IAAI,MAAM,gCAAgC;AAClD;AAEA,eAAe,2BACb,gBACiB;CACjB,MAAM,QAAQ,MAAM,OAClB,oCAAoC,eAAe,IACnD;EACE,MAAM;EACN,SAAS;EACT,SAAS;CACX,CACF;CACA,MAAM,UAAU,yBACd,OAAO,UAAU,YAAY,MAAM,KAAK,IAAI,QAAQ,cACtD;CACA,IAAI,CAAC,SACH,MAAM,IAAI,MAAM,oCAAoC;CAGtD,OAAO;AACT;AAEA,SAAS,0BACP,wBACA,SAOgB;CAChB,OAAO;EACL,MAAM,QAAQ;EACd,SAAS;EACT,SAAS,QAAQ;EACjB,QAAQ,QAAQ;EAChB,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;EACzD,iBACE,QAAQ,mBAAmB,uBAAuB;EACpD,GAAI,uBAAuB,SACzB,EAAE,QAAQ,uBAAuB,OAAO,IACxC,CAAC;CACL;AACF;AAEA,eAAe,0BAAyC;CACtD,MAAM,eAAe,MAAM,yBAAyB;CACpD,MAAM,OAAO,MAAM,yBAAyB;CAC5C,MAAM,UAAU,yBACd,MAAM,mBAAmB,0BAA0B,SAAS,CAC9D;CACA,IAAI,CAAC,SACH,MAAM,IAAI,MAAM,oCAAoC;CAGtD,MAAM,SAAS,MAAM,qBAAqB,yBAAyB,QAAQ;CAC3E,MAAM,WAAW,MAAM,6BAA6B,IAAI;CACxD,MAAM,yBAAyB,qBAAqB,YAAY,KAAK,CAAC;CAEtE,kBACE,cACA,0BAA0B,wBAAwB;EAChD;EACA;EACA;EACA;CACF,CAAC,CACH;CAEA,QAAQ,QACN,oBAAoB,aAAa,eAAe,MAAM,aACxD;AACF;AAEA,eAAe,uBACb,cACe;CACf,MAAM,wBAAwB,uBAAuB;CACrD,MAAM,SAAS,MAAM,qBACnB,SAAS,aAAa,UACtB,QACF;CACA,MAAM,OACJ,sBAAsB,eACpB,MAAM,wBAAwB,sBAAsB,IAAI,IACxD,sBAAsB;CAC1B,MAAM,UAAU,MAAM,2BACpB,sBAAsB,OACxB;CACA,MAAM,yBAAyB,qBAAqB,YAAY,KAAK,CAAC;CAEtE,kBACE,cACA,0BAA0B,wBAAwB;EAChD;EACA;EACA,iBAAiB,sBAAsB;EACvC;CACF,CAAC,CACH;CAEA,QAAQ,QACN,GAAG,qBAAqB,cAAc,aAAa,aAAa,eAAe,MAAM,aACvF;AACF;AAEA,eAAe,eAAe,OAA+B;CAC3D,MAAM,cAAc,MAAM,WAAW;EACnC,OAAO,MAAM;GACX,QAAQ,KAAK,oDAAoD;GACjE,QAAQ,IAAI,KAAK,GAAG;GACpB,IAAI,KAAK,cACP,QAAQ,KAAK,KAAK,YAAY;EAElC;EACA,SAAS,SAAS;GAChB,OAAO,OAAO,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,MAAM,UAAU,SAAS,EAAE;EACtE;EACA,WAAW,SAAS;GAClB,QAAQ,MAAM,OAAO;EACvB;CACF,CAAC;CAED,MAAM,wBAAwB,aAAa;EACzC,iBAAiB;EACjB;EACA,gBAAgB;CAClB,CAAC;CACD,QAAQ,QACN,oCAAoC,MAAM,YAAY,8BAA8B,MAAM,uBAC5F;AACF;AAEA,eAAe,kBACb,UACA,OACe;CACf,IAAI,UAAU,KAAA,KAAa,aAAa,SACtC,MAAM,IAAI,MAAM,mDAAmD;CAGrE,IAAI,aAAa,WAAW;EAC1B,MAAM,iBAAiB,EAAE,OAAO,KAAK,CAAC;EACtC,QAAQ,QAAQ,2BAA2B,MAAM,iBAAiB;EAClE;CACF;CAEA,IAAI,aAAa,SAAS;EACxB,MAAM,eAAe,KAAK;EAC1B;CACF;CAEA,IAAI,oBAAoB,QAAQ,GAAG;EACjC,MAAM,uBAAuB,QAAQ;EACrC;CACF;CAEA,MAAM,wBAAwB;AAChC;AAEA,eAAsB,mBAAkC;CACtD,MAAM,WAAW,MAAM,yBAAyB,KAAA,CAAS;CACzD,QAAQ,KAAK,mBAAmB,qBAAqB,WAAW;CAChE,MAAM,kBAAkB,QAAQ;AAClC;AAEA,eAAsB,aAAa,SAAwC;CAEzE,CAAA,MADwB,OAAO,qBAAA,CACrB,qBAAqB;CAE/B,IAAI,QAAQ,SAAS;EACnB,QAAQ,QAAQ;EAChB,QAAQ,KAAK,yBAAyB;CACxC;CAEA,MAAM,YAAY,QAAQ;CAE1B,MAAM,YAAY;CAClB,MAAM,WAAW,MAAM,yBAAyB,QAAQ,QAAQ;CAEhE,QAAQ,KAAK,mBAAmB,qBAAqB,WAAW;CAChE,MAAM,kBAAkB,UAAU,QAAQ,KAAK;AACjD;AAEA,MAAM,gBAAgB;CACpB,MAAM;EACJ,OAAO;EACP,MAAM;EACN,SAAS;EACT,aAAa;CACf;CACA,KAAK;EACH,OAAO;EACP,MAAM;EACN,aAAa;CACf;AACF;AAOA,SAAS,mBACP,SACQ;CACR,MAAM,OACJ,QAAQ,QACN,GAAG,QAAQ,MAAM,IAAI,QAAQ,UAAU,KACvC,QAAQ;CACZ,OAAO,GAAG,QAAQ,SAAS,MAAM,IAAI,GAAG;AAC1C;AAEA,eAAsB,aACpB,SACe;CACf,MAAM,YAAY;CAElB,IAAI,QAAQ,QAAQ,QAAQ,QAAQ,KAAA,GAClC,MAAM,IAAI,MAAM,gDAAgD;CAGlE,IAAI,QAAQ,QAAQ,KAAA,GAAW;EAC7B,MAAM,UAAU,MAAM,mBAAmB,QAAQ,GAAG;EACpD,QAAQ,QACN,0BAA0B,QAAQ,QAAQ,GAAG,QAAQ,MAAM,IAAI,QAAQ,UAAU,KAAK,QAAQ,WAChG;EACA,QAAQ,KAAK,uDAAuD;EACpE;CACF;CAEA,MAAM,WAAW,MAAM,iBAAiB;CACxC,IAAI,SAAS,WAAW,GAAG;EACzB,QAAQ,KACN,yFACF;EACA;CACF;CAEA,QAAQ,KAAK,4BAA4B;CACzC,KAAK,MAAM,WAAW,UACpB,QAAQ,KAAK,mBAAmB,OAAO,CAAC;AAE5C;AAEA,MAAM,eAAe;CACnB,KAAK;EACH,OAAO;EACP,MAAM;EACN,aAAa;CACf;CACA,QAAQ;EACN,OAAO;EACP,MAAM;EACN,aAAa;CACf;CACA,MAAM;EACJ,OAAO;EACP,MAAM;EACN,SAAS;EACT,aAAa;CACf;CACA,OAAO;EACL,MAAM;EACN,SAAS;EACT,aAAa;CACf;AACF;AASA,SAAS,sBAAsB,OAAuB;CACpD,MAAM,gBAAgB,MAAM,KAAK;CACjC,IAAI,CAAC,eACH,MAAM,IAAI,MAAM,oCAAoC;CAEtD,OAAO;AACT;AAEA,eAAsB,YAAY,SAA4C;CAE5E,CAAA,MADwB,OAAO,qBAAA,CACrB,qBAAqB;CAE/B,MAAM,YAAY;CAElB,MAAM,aAAa;EACjB,GAAI,QAAQ,QAAQ,KAAA,IAAY,CAAC,KAAK,IAAI,CAAC;EAC3C,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,QAAQ,IAAI,CAAC;EACjD,GAAI,QAAQ,OAAO,CAAC,MAAM,IAAI,CAAC;EAC/B,GAAI,QAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;CACnC;CACA,IAAI,WAAW,SAAS,GACtB,MAAM,IAAI,MACR,oEACF;CAGF,MAAM,YAAY,WAAW,MAAM;CAEnC,IAAI,cAAc,OAAO;EACvB,MAAM,SAAS,sBAAsB,QAAQ,OAAO,EAAE;EACtD,MAAM,cAAc,qBAAqB;EACzC,IAAI,YAAY,SAAS,MAAM,GAAG;GAChC,QAAQ,KACN,+BAA+B,YAAY,OAAO,wBACpD;GACA;EACF;EACA,MAAM,aAAa,qBAAqB,CAAC,GAAG,aAAa,MAAM,CAAC;EAChE,QAAQ,QACN,oBAAoB,MAAM,YAAY,IAAI,WAAW,OAAO,wBAC9D;EACA;CACF;CAEA,IAAI,cAAc,UAAU;EAC1B,MAAM,SAAS,sBAAsB,QAAQ,UAAU,EAAE;EACzD,MAAM,cAAc,qBAAqB;EACzC,IAAI,CAAC,YAAY,SAAS,MAAM,GAAG;GACjC,QAAQ,KACN,sBAAsB,YAAY,OAAO,wBAC3C;GACA;EACF;EACA,MAAM,aAAa,qBACjB,YAAY,QAAQ,QAAQ,QAAQ,MAAM,CAC5C;EACA,QAAQ,QACN,wBAAwB,MAAM,YAAY,IAAI,WAAW,OAAO,wBAClE;EACA;CACF;CAEA,IAAI,cAAc,SAAS;EACzB,qBAAqB,CAAC,CAAC;EACvB,QAAQ,QAAQ,6BAA6B,MAAM,YAAY,EAAE;EACjE;CACF;CAEA,MAAM,cAAc,qBAAqB;CACzC,IAAI,YAAY,WAAW,GAAG;EAC5B,QAAQ,KACN,iFACF;EACA;CACF;CACA,QAAQ,KAAK,sBAAsB;CACnC,KAAK,MAAM,OAAO,aAChB,QAAQ,KAAK,KAAK,KAAK;AAE3B;AAEA,MAAM,YAAY,cAAc;CAC9B,MAAM;EACJ,MAAM;EACN,aACE;CACJ;CACA,MAAM;CACN,IAAI,EAAE,QAAQ;EACZ,OAAO,aAAa;GAClB,OAAO,KAAK;GACZ,UAAU,KAAK;GACf,SAAS,KAAK;GACd,WAAW,KAAK;EAClB,CAAC;CACH;AACF,CAAC;AAED,MAAM,WAAW,cAAc;CAC7B,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,MAAM;CACN,IAAI,EAAE,QAAQ;EACZ,OAAO,YAAY;GACjB,KAAK,KAAK;GACV,QAAQ,KAAK;GACb,MAAM,KAAK;GACX,OAAO,KAAK;EACd,CAAC;CACH;AACF,CAAC;AAED,MAAM,YAAY,cAAc;CAC9B,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,MAAM;CACN,IAAI,EAAE,QAAQ;EACZ,OAAO,aAAa;GAClB,MAAM,KAAK;GACX,KAAK,KAAK;EACZ,CAAC;CACH;AACF,CAAC;AAED,MAAa,OAAO,cAAc;CAChC,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,MAAM;CACN,aAAa;EACX,OAAO;EACP,OAAO;EACP,MAAM;CACR;CACA,IAAI,EAAE,QAAQ;EACZ,KAAK,KAAK,EAAE,MAAM,GAAA,CAAI,KAAK,GACzB;EAGF,OAAO,aAAa;GAClB,OAAO,KAAK;GACZ,UAAU,KAAK;GACf,SAAS,KAAK;GACd,WAAW,KAAK;EAClB,CAAC;CACH;AACF,CAAC"}