@jeffreycao/copilot-api 2.5.8 → 2.5.10

package/README.md

@@ -460,13 +460,21 @@ COPILOT_API_BIND=0.0.0.0
 COPILOT_API_PORT=4141
 ```
 
+The Compose service also forwards `COPILOT_API_SQLITE_DB_PATH`, `COPILOT_API_ENTERPRISE_URL`, and `COPILOT_API_OAUTH_APP` from the environment or a private `.env` file. SQLite paths are container paths and should stay under the writable `/data` mount, for example:
+
+```dotenv
+COPILOT_API_SQLITE_DB_PATH=/data/copilot-api.sqlite
+COPILOT_API_ENTERPRISE_URL=company.ghe.com
+COPILOT_API_OAUTH_APP=opencode
+```
+
 Token and proxy variables can be overridden in the same file. Proxy addresses must be reachable from inside the container. Keep the internal port at `4141` so the health check remains valid.
 
 ## Electron Desktop App
 
-If you prefer a GUI, this repository also includes an Electron desktop app in `desktop/`. It supports GitHub Copilot sign-in, OpenAI Codex OAuth, and API-key configuration for Kimi, DeepSeek, DashScope, OpenRouter, or a custom provider. After authorization or provider configuration, it can start and stop the local proxy with one click and shows the local endpoint, auth header, available models, usage, and logs in the app.
+If you prefer a GUI, this repository also includes an Electron desktop app in `desktop/`. It supports GitHub Copilot sign-in, OpenAI Codex OAuth with manual switching among up to 3 Codex accounts, and API-key configuration for Kimi, DeepSeek, DashScope, OpenRouter, or a custom provider. After a Codex account switch, the app prompts you to restart the service manually. After authorization or provider configuration, it can start and stop the local proxy with one click and shows the local endpoint, auth header, available models, usage, and logs in the app.
 
-The settings screen also exposes `OAuth App`, `API Home`, `Enterprise URL`, verbose logging, and minimize-to-tray. Windows x64 (`.exe`), macOS Apple Silicon (`.dmg`), and Linux x64 (`.AppImage`) packages are published in GitHub Releases:
+The settings screen also exposes `OAuth App`, `API Home`, `SQLite DB Path`, `Enterprise URL`, verbose logging, and minimize-to-tray. Windows x64 (`.exe`), macOS Apple Silicon (`.dmg`), and Linux x64 (`.AppImage`) packages are published in GitHub Releases:
 
 https://github.com/caozhiyuan/copilot-api/releases
 
@@ -660,11 +668,14 @@ Passing the GitHub token on the command line exposes it to every local user thro
 | Option       | Description               | Default | Alias |
 | ------------ | ------------------------- | ------- | ----- |
 | --provider   | Provider to log in with or configure (`copilot`, `codex`, `opencode-go`, `kimi`, `deepseek`, `dashscope`, `openrouter`, or `custom`) | prompt | none |
+| --alias      | Optional Codex account alias; only valid with `--provider codex` | none | none |
 | --verbose    | Enable verbose logging    | false   | -v    |
 | --show-token | Show GitHub token on auth | false   | none  |
 
 Use `copilot-api auth login --provider copilot` only when you want to enable the GitHub Copilot provider. Copilot is not required for `codex` or third-party provider-only usage.
 
+The Codex provider stores up to 3 accounts. Add or update an account with `copilot-api auth login --provider codex --alias work`; the newly signed-in account becomes active. List accounts with `copilot-api auth codex --list` and switch with `copilot-api auth codex --use <alias-or-accountId>`. Restart a running server after switching. Legacy single-account `codex_credentials.json` files remain compatible and upgrade to the multi-account shape on the next credential write.
+
 Use `copilot-api auth login --provider deepseek`, `--provider dashscope`, `--provider openrouter`, `--provider opencode-go`, or `--provider kimi` to add or update those common third-party providers from the CLI. DeepSeek prompts for masked `apiKey`, provider `type` (default `anthropic`), and `baseUrl` defaulting to `https://api.deepseek.com/anthropic`. DashScope prompts for masked `apiKey`, provider `type` (default `openai-compatible`), and prefilled `baseUrl`. OpenRouter prompts for masked `apiKey` and prefilled `baseUrl` only, and writes `type: "anthropic"`. OpenCode Go prompts for masked `apiKey` and prefilled `baseUrl` only, and writes `type: "openai-compatible"` (baseUrl `https://opencode.ai/zen/go`). Kimi prompts for masked `apiKey`, provider `type` (default `openai-compatible`), and `baseUrl` defaulting to `https://api.kimi.com/coding` (the same base URL serves both the Anthropic and OpenAI-compatible endpoints). OpenCode Go additionally routes built-in `qwen*` and `minimax*` models through Anthropic Messages and `gpt*`/`grok*`/`muse-spark*` models through OpenAI Responses; other models keep the OpenAI-compatible default. After a provider is configured and enabled, `copilot-api start` can run without any GitHub token.
 
 Use `copilot-api auth login --provider custom` to add or update another third-party provider from the CLI. The command prompts for the provider name, supported type (`anthropic`, `openai-compatible`, or `openai-responses`), `baseUrl`, masked `apiKey`, and `authType`; `authType` may be left as the type default or set to `x-api-key` / `authorization`.
@@ -729,13 +740,14 @@ Gateway API keys live under `auth.apiKeys` in `config.json`. Manage them with `c
   - `baseUrl` should be provider API base URL without the final endpoint. For Anthropic providers, omit `/v1/messages`; for OpenAI-compatible providers, omit `/v1/chat/completions`; for OpenAI Responses providers, omit `/v1/responses`.
   - `apiKey` is used as the upstream credential value and is required unless `authType` is `azure-entra`.
   - `authType` (optional): Controls upstream authentication. Supports `x-api-key`, `authorization`, and `azure-entra` for regular providers. Anthropic providers default to `x-api-key`; OpenAI-compatible and OpenAI Responses providers default to `authorization`. `authorization` sends `Authorization: Bearer <apiKey>`. `azure-entra` uses Azure Identity's `DefaultAzureCredential` with the `https://cognitiveservices.azure.com/.default` scope, sends the resulting bearer token, and does not require `apiKey`. For an Azure OpenAI v1 endpoint, use a provider such as `{ "type": "openai-compatible", "baseUrl": "https://<resource-name>.openai.azure.com/openai", "authType": "azure-entra" }`. Authenticate locally with `az login`, use a managed identity in Azure, or set the standard `AZURE_TENANT_ID`, `AZURE_CLIENT_ID`, and `AZURE_CLIENT_SECRET` environment variables. `oauth2` is reserved for the built-in `codex` provider and is written automatically by `auth login --provider codex`.
+  - `accountId` is used only by the built-in `codex` provider and identifies its active Codex account. CLI and desktop account switching update it automatically.
   - `pricingCurrency` (optional): Provider-level currency used for token cost calculation, for example `USD` or `CNY`. Quick providers default to `CNY` for DashScope and DeepSeek, and `USD` for Codex, Kimi, OpenCode Go, and OpenRouter. Costs are grouped by currency and are not exchange-rate converted.
   - `models` (optional): Per-model configuration map. Each key is a model ID (matching the model name in requests), and the value is:
     - `temperature` (optional): Default temperature value used when the request does not specify one.
     - `topP` (optional): Default top_p value used when the request does not specify one.
     - `topK` (optional): Default top_k value used when the request does not specify one.
     - `extraBody` (optional): Dynamic fields merged into the upstream request body for that model. Request body fields with the same name take precedence. OpenAI-compatible providers can use this for fields such as `enable_thinking`, `preserve_thinking`, `reasoning_effort`. `thinking_budget` is a special OpenAI-compatible provider override: when configured in `extraBody`, it is forced after Anthropic `thinking.budget_tokens` translation and overrides the request-derived budget. For providers whose name is `dashscope` or whose `baseUrl` contains `aliyuncs.com`, the request-derived `thinking_budget` (from Anthropic `thinking.budget_tokens`) is forwarded upstream; for other OpenAI-compatible providers the request-derived `thinking_budget` is stripped, while an `extraBody` `thinking_budget` is still honored. For DashScope providers, `preserve_thinking` defaults to `true` when not explicitly set in `extraBody` or the request body.
-    - `pricing` (optional): Per-model token prices, in the provider `pricingCurrency`, per 1M tokens. Supported fields are `input`, `output`, `cachedInput` (implicit cache read), `explicitCachedInput` (explicit cache read), and `cacheCreationInput`. Use `tiers` with `maxInputTokens` for input-size tiered pricing.
+    - `pricing` (optional): Per-model token prices, in the provider `pricingCurrency`, per 1M tokens. Supported fields are `input`, `output`, `cachedInput` (implicit cache read), `explicitCachedInput` (explicit cache read), and `cacheCreationInput`. Use `tiers` with `maxInputTokens` for input-size tiered pricing. For providers that bill separate peak and off-peak rates, add `offPeak` with the same fields as the top level and declare peak hours with `peakWindows`: each entry takes `startMinuteUtc` (inclusive) and `endMinuteUtc` (exclusive) as minutes from 00:00 UTC, plus optional `weekdays` ISO day numbers (1 = Monday, 7 = Sunday, omitted means every day). Without `peakWindows` the `offPeak` prices never apply and every request bills at the peak price. The built-in catalog uses this for DeepSeek (peak on weekdays UTC 01:00-04:00 and 06:00-10:00, off-peak otherwise including weekends) and for DashScope DeepSeek (off-peak on UTC 14:00-24:00), while OpenCode Go DeepSeek models reuse the DeepSeek windows.
     - `contextCache` (optional): Defaults to `true` for providers whose name is `dashscope` or whose `baseUrl` contains `aliyuncs.com`; defaults to `false` for other OpenAI-compatible providers. This enables Alibaba Cloud Model Studio/DashScope explicit context cache by injecting `cache_control: { "type": "ephemeral" }` on up to 4 content blocks using the Context Cache format. The cache breakpoint strategy matches opencode's main provider flow: the first 2 system messages plus the last 2 non-system messages. Marked string content is converted to text content part arrays for `system` / `user` / `assistant` / `tool` messages; existing array content is marked on the last part. Set this to `false` when the model already supports implicit caching, or when the upstream does not accept this explicit-cache extension field. Set this to `true` for non-DashScope providers that support the same explicit-cache extension. Applied on both `/v1/messages` and `/v1/chat/completions` routes.
     - `supportPdf` (optional): Controls whether the model supports PDF/document content. Defaults to `false`; unsupported PDFs are converted to a text notice. Set it to `true` to send PDF/document blocks as OpenAI Chat Completions file parts.
     - `toolContentSupportType` (optional): Tool result content capabilities for that model, as an array of `array`, `image`, and `pdf`. Provider routes default to string-only tool content when omitted. If `supportPdf` is `true` but this list does not include `pdf`, file parts in tool results are moved to user role messages. The Copilot main flow uses the same string-only default, because some Copilot models do not support array or image tool content either.

package/README.zh-CN.md

@@ -490,15 +490,23 @@ COPILOT_API_BIND=0.0.0.0
 COPILOT_API_PORT=4141
 ```
 
+Compose 服务还会从环境变量或用户自己的私有 `.env` 中传入 `COPILOT_API_SQLITE_DB_PATH`、`COPILOT_API_ENTERPRISE_URL` 和 `COPILOT_API_OAUTH_APP`。SQLite 路径是容器内路径，应放在可写的 `/data` 挂载目录下，例如：
+
+```dotenv
+COPILOT_API_SQLITE_DB_PATH=/data/copilot-api.sqlite
+COPILOT_API_ENTERPRISE_URL=company.ghe.com
+COPILOT_API_OAUTH_APP=opencode
+```
+
 Token 和代理变量也可以在同一文件中覆盖。代理地址必须能从容器内部访问。容器内部端口保持 `4141`，以便健康检查正常工作。
 
 <a id="electron-desktop-app"></a>
 
 ## Electron 桌面应用
 
-如果你更喜欢图形界面，仓库里还提供了位于 `desktop/` 的 Electron 桌面应用。它支持 GitHub Copilot 登录、OpenAI Codex OAuth，以及 Kimi、DeepSeek、DashScope、OpenRouter 或自定义 provider 的 API Key 配置。授权或配置 provider 后，可以一键启动或停止本地代理，并在界面里直接查看本地端点、鉴权 Header、可用模型、额度和日志。
+如果你更喜欢图形界面，仓库里还提供了位于 `desktop/` 的 Electron 桌面应用。它支持 GitHub Copilot 登录、OpenAI Codex OAuth 与最多 3 个 Codex 账号的手动切换，以及 Kimi、DeepSeek、DashScope、OpenRouter 或自定义 provider 的 API Key 配置。切换 Codex 账号后，界面会提示手动重启服务。授权或配置 provider 后，可以一键启动或停止本地代理，并在界面里直接查看本地端点、鉴权 Header、可用模型、额度和日志。
 
-设置页还可以配置 `OAuth App`、`API Home`、`Enterprise URL`、详细日志以及最小化到托盘。Windows x64（`.exe`）、macOS Apple Silicon（`.dmg`）和 Linux x64（`.AppImage`）安装包发布在 GitHub Releases：
+设置页还可以配置 `OAuth App`、`API Home`、`SQLite DB Path`、`Enterprise URL`、详细日志以及最小化到托盘。Windows x64（`.exe`）、macOS Apple Silicon（`.dmg`）和 Linux x64（`.AppImage`）安装包发布在 GitHub Releases：
 
 https://github.com/caozhiyuan/copilot-api/releases
 
@@ -702,11 +710,14 @@ Copilot API 现在使用子命令结构，主要命令包括：
 | 选项 | 说明 | 默认值 | 别名 |
 | --- | --- | --- | --- |
 | --provider | 要登录或配置的 provider（`copilot`、`codex`、`opencode-go`、`kimi`、`deepseek`、`dashscope`、`openrouter` 或 `custom`） | 交互选择 | 无 |
+| --alias | Codex 账号的可选别名，仅与 `--provider codex` 一起使用 | 无 | 无 |
 | --verbose | 启用详细日志 | false | -v |
 | --show-token | 认证时显示 GitHub token | false | 无 |
 
 只有在需要启用 GitHub Copilot provider 时，才需要执行 `copilot-api auth login --provider copilot`。使用 `codex` 或第三方 provider-only 模式不要求配置 Copilot。
 
+Codex provider 最多保存 3 个账号。使用 `copilot-api auth login --provider codex --alias work` 新增或更新账号，新登录账号会成为当前账号；使用 `copilot-api auth codex --list` 查看账号，使用 `copilot-api auth codex --use <alias-or-accountId>` 手动切换。切换后需要重启正在运行的服务。旧版单账号 `codex_credentials.json` 会自动兼容，并在下一次写入凭据时升级为多账号格式。
+
 使用 `copilot-api auth login --provider deepseek`、`--provider dashscope`、`--provider openrouter`、`--provider opencode-go` 或 `--provider kimi` 可以通过 CLI 快速新增或更新这些常用第三方 provider。DeepSeek 会提示输入掩码显示的 `apiKey`、provider `type`（默认 `anthropic`），以及默认 `https://api.deepseek.com/anthropic` 的 `baseUrl`。DashScope 会提示输入掩码显示的 `apiKey`、provider `type`（默认 `openai-compatible`）和预填默认值的 `baseUrl`。OpenRouter 只提示输入掩码显示的 `apiKey` 和预填默认值的 `baseUrl`，并固定写入 `type: "anthropic"`。OpenCode Go 只提示输入掩码显示的 `apiKey` 和预填默认值的 `baseUrl`，并固定写入 `type: "openai-compatible"`（baseUrl `https://opencode.ai/zen/go`）。Kimi 会提示输入掩码显示的 `apiKey`、provider `type`（默认 `openai-compatible`）和默认值为 `https://api.kimi.com/coding` 的 `baseUrl`（同一个 base URL 同时支持 Anthropic 和 OpenAI-compatible 两种端点）。此外，OpenCode Go 内置将 `qwen*` 和 `minimax*` 模型路由到 Anthropic Messages，将 `gpt*`/`grok*`/`muse-spark*` 模型路由到 OpenAI Responses，其他模型仍默认使用 OpenAI 兼容协议。配置并启用 provider 后，`copilot-api start` 可在没有 GitHub token 的情况下启动。
 
 使用 `copilot-api auth login --provider custom` 可以通过 CLI 新增或更新其他第三方 provider。命令会依次提示输入 provider name、项目支持的 type（`anthropic`、`openai-compatible` 或 `openai-responses`）、`baseUrl`、掩码显示的 `apiKey` 和 `authType`；`authType` 可保持 type 默认值，也可选择 `x-api-key` / `authorization`。
@@ -773,13 +784,14 @@ Copilot API 现在使用子命令结构，主要命令包括：
   - `baseUrl`：provider API 的基础 URL，不要带结尾的 endpoint。Anthropic provider 不要带 `/v1/messages`；OpenAI 兼容 provider 不要带 `/v1/chat/completions`；OpenAI Responses provider 不要带 `/v1/responses`。
   - `apiKey`：作为上游凭据值使用；除 `authType` 为 `azure-entra` 外，普通 provider 必须配置。
   - `authType`：可选，控制上游认证方式。普通 provider 支持 `x-api-key`、`authorization` 和 `azure-entra`。Anthropic provider 默认 `x-api-key`；OpenAI 兼容和 OpenAI Responses provider 默认 `authorization`。`authorization` 会发送 `Authorization: Bearer <apiKey>`。`azure-entra` 使用 Azure Identity 的 `DefaultAzureCredential` 和 `https://cognitiveservices.azure.com/.default` scope 获取并发送 Bearer token，不需要配置 `apiKey`。Azure OpenAI v1 endpoint 可配置为 `{ "type": "openai-compatible", "baseUrl": "https://<resource-name>.openai.azure.com/openai", "authType": "azure-entra" }`。本地可先执行 `az login`，在 Azure 中可使用托管身份，也可设置标准的 `AZURE_TENANT_ID`、`AZURE_CLIENT_ID` 和 `AZURE_CLIENT_SECRET` 环境变量。`oauth2` 仅保留给内置 `codex` provider，并由 `auth login --provider codex` 自动写入。
+  - `accountId`：仅用于内置 `codex` provider，记录当前选中的 Codex 账号。CLI 或桌面端切换账号时自动更新。
   - `pricingCurrency`：可选，provider 维度的 token 费用币种，例如 `USD` 或 `CNY`。快捷 provider 默认 DashScope、DeepSeek 为 `CNY`，Codex、Kimi、OpenCode Go、OpenRouter 为 `USD`。费用按币种分别汇总，不做汇率换算。
   - `models`：可选，按模型 ID 配置的映射。每个键为请求中的模型名，值支持：
     - `temperature`：可选，当请求未指定时使用的默认温度。
     - `topP`：可选，当请求未指定时使用的默认 `top_p`。
     - `topK`：可选，当请求未指定时使用的默认 `top_k`。
     - `extraBody`：可选，按模型合入上游请求体的动态字段；请求体显式同名字段优先。OpenAI 兼容 provider 可用它配置 `enable_thinking`、`preserve_thinking`、`reasoning_effort` 等字段。`thinking_budget` 是 OpenAI 兼容 provider 的特殊覆盖项：配置在 `extraBody` 后，会在 Anthropic `thinking.budget_tokens` 翻译之后强制写入，并覆盖请求派生出的预算值。对于 provider name 为 `dashscope` 或 `baseUrl` 包含 `aliyuncs.com` 的 provider，请求派生的 `thinking_budget`（来自 Anthropic `thinking.budget_tokens`）会转发给上游；其他 OpenAI 兼容 provider 会移除请求派生的 `thinking_budget`，但 `extraBody` 中的 `thinking_budget` 仍然生效。对于 DashScope provider，当 `preserve_thinking` 未在 `extraBody` 或请求体中显式设置时，默认为 `true`。
-    - `pricing`：可选，按模型配置 token 单价，币种使用 provider 的 `pricingCurrency`，单位为每 100 万 tokens。支持 `input`、`output`、`cachedInput`（隐式缓存读）、`explicitCachedInput`（显式缓存读）和 `cacheCreationInput`。如需按输入 token 总量分档，可用带 `maxInputTokens` 的 `tiers`。
+    - `pricing`：可选，按模型配置 token 单价，币种使用 provider 的 `pricingCurrency`，单位为每 100 万 tokens。支持 `input`、`output`、`cachedInput`（隐式缓存读）、`explicitCachedInput`（显式缓存读）和 `cacheCreationInput`。如需按输入 token 总量分档，可用带 `maxInputTokens` 的 `tiers`。分时计费的 provider 可再配置 `offPeak`（字段与顶层相同）声明闲时单价，并用 `peakWindows` 声明忙时时段：每项包含 `startMinuteUtc`（含）和 `endMinuteUtc`（不含），取值为 UTC 当日分钟数，可选用 `weekdays` 以 ISO 星期号（1 表示周一，7 表示周日）限定生效日，省略表示每天生效。未配置 `peakWindows` 时 `offPeak` 不生效，始终按忙时价计费。内置目录已按此方式为 DeepSeek（周一至周五 UTC 01:00-04:00、06:00-10:00 为忙时，其余含周末为闲时）和 DashScope DeepSeek（UTC 14:00-24:00 为闲时）配置峰谷价，OpenCode Go 的 DeepSeek 模型沿用 DeepSeek 的时段。
     - `contextCache`：可选，provider name 为 `dashscope` 或 `baseUrl` 包含 `aliyuncs.com` 时默认 `true`，其他 OpenAI 兼容 provider 默认 `false`。用于启用阿里云百炼/DashScope 的显式缓存（explicit context cache），会按其 Context Cache 格式在最多 4 个 content block 上注入 `cache_control: { "type": "ephemeral" }`。缓存断点策略与 opencode 主链路保持一致：前 2 条 system 消息 + 最后 2 条非 system 消息。标记字符串 content 时会把 `system` / `user` / `assistant` / `tool` 消息转换为 text content part 数组；已有数组 content 则标记最后一个 part。如果模型本身已经支持隐式缓存，或上游不支持该显式缓存扩展字段，可在模型配置中设为 `false`。支持相同显式缓存扩展的非 DashScope provider 可设为 `true`。同时适用于 `/v1/messages` 和 `/v1/chat/completions` 路由。
     - `supportPdf`：可选，控制该模型是否支持 PDF/document content。默认 `false`，不支持时会把 PDF 转成提示文本；设为 `true` 时会把 PDF/document 转成 OpenAI Chat Completions 的 file part。
     - `toolContentSupportType`：可选，配置该模型的 tool result content 支持能力，值为 `array`、`image`、`pdf` 的数组。provider 侧未配置时默认只发送 string tool content。若 `supportPdf` 为 `true` 但这里不包含 `pdf`，tool result 里的 file part 会被转成 user role 消息。Copilot 主链路同样默认只发送 string tool content，因为部分 Copilot 模型也不支持数组或图片形式的 tool content。

package/dist/auth-CdETqUtu.js

@@ -0,0 +1,2 @@
+import { t as auth } from "./auth-zBY9SQaI.js";
+export { auth };

package/dist/{auth-CMufJUfF.js → auth-zBY9SQaI.js}

@@ -1,5 +1,5 @@
 import { M as setConfiguredApiKeys, N as PATHS, P as ensurePaths, a as normalizeProviderBaseUrl, c as setProviderConfig, n as getRawProviderConfig, r as isSupportedProviderType, y as SUPPORTED_PROVIDER_TYPES } from "./config-2Dli6AI8.js";
-import { J as state, M as getConfiguredApiKeys, P as loginCodex, a as setupGitHubToken, n as persistCodexCredentials } from "./token-O2WH6ipn.js";
+import { I as loginCodex, P as getConfiguredApiKeys, X as state, i as selectCodexAccount, r as persistCodexCredentials, s as setupGitHubToken, t as getCodexAccounts } from "./token-4p5BAEqO.js";
 import { defineCommand } from "citty";
 import consola from "consola";
 //#region src/lib/quick-providers.ts
@@ -88,6 +88,10 @@ const authArgs = {
 		type: "string",
 		description: "Provider to log in with or configure (copilot, codex, opencode-go, kimi, deepseek, dashscope, openrouter, custom)"
 	},
+	alias: {
+		type: "string",
+		description: "Optional alias for a Codex account"
+	},
 	verbose: {
 		alias: "v",
 		type: "boolean",
@@ -320,7 +324,7 @@ async function configureQuickProvider(providerName) {
 	}));
 	consola.success(`${AUTH_PROVIDER_LABELS[providerName]} provider '${providerName}' written to ${PATHS.CONFIG_PATH}`);
 }
-async function loginWithCodex() {
+async function loginWithCodex(alias) {
 	const credentials = await loginCodex({
 		onAuth(info) {
 			consola.info("Open the following URL to authenticate with Codex:");
@@ -334,17 +338,22 @@ async function loginWithCodex() {
 			consola.debug(message);
 		}
 	});
-	await persistCodexCredentials(credentials, { enableProvider: true });
+	await persistCodexCredentials(credentials, {
+		activateAccount: true,
+		alias,
+		enableProvider: true
+	});
 	consola.success(`Codex provider config written to ${PATHS.CONFIG_PATH} and credentials written to ${PATHS.CODEX_CREDENTIAL_PATH}`);
 }
-async function loginWithProvider(provider) {
+async function loginWithProvider(provider, alias) {
+	if (alias !== void 0 && provider !== "codex") throw new Error("--alias is only supported with the codex provider");
 	if (provider === "copilot") {
 		await setupGitHubToken({ force: true });
 		consola.success("GitHub token written to", PATHS.GITHUB_TOKEN_PATH);
 		return;
 	}
 	if (provider === "codex") {
-		await loginWithCodex();
+		await loginWithCodex(alias);
 		return;
 	}
 	if (isQuickProviderName(provider)) {
@@ -368,7 +377,41 @@ async function runAuthLogin(options) {
 	await ensurePaths();
 	const provider = await resolveProviderSelection(options.provider);
 	consola.info(`Logging in with ${AUTH_PROVIDER_LABELS[provider]}`);
-	await loginWithProvider(provider);
+	await loginWithProvider(provider, options.alias);
+}
+const authCodexArgs = {
+	list: {
+		alias: "l",
+		type: "boolean",
+		default: false,
+		description: "List stored Codex accounts"
+	},
+	use: {
+		alias: "u",
+		type: "string",
+		description: "Select a Codex account by alias or account id"
+	}
+};
+function formatCodexAccount(account) {
+	const name = account.alias ? `${account.alias} (${account.accountId})` : account.accountId;
+	return `${account.active ? "*" : "-"} ${name}`;
+}
+async function runAuthCodex(options) {
+	await ensurePaths();
+	if (options.list && options.use !== void 0) throw new Error("Use only one of --list or --use per invocation");
+	if (options.use !== void 0) {
+		const account = await selectCodexAccount(options.use);
+		consola.success(`Selected Codex account ${account.alias ? `${account.alias} (${account.accountId})` : account.accountId}`);
+		consola.info("Restart the server to use the selected Codex account.");
+		return;
+	}
+	const accounts = await getCodexAccounts();
+	if (accounts.length === 0) {
+		consola.info("No Codex accounts configured. Run `copilot-api auth login --provider codex` to add one.");
+		return;
+	}
+	consola.info("Configured Codex accounts:");
+	for (const account of accounts) consola.info(formatCodexAccount(account));
 }
 const authKeysArgs = {
 	add: {
@@ -452,6 +495,7 @@ const authLogin = defineCommand({
 	args: authArgs,
 	run({ args }) {
 		return runAuthLogin({
+			alias: args.alias,
 			provider: args.provider,
 			verbose: args.verbose,
 			showToken: args["show-token"]
@@ -473,6 +517,19 @@ const authKeys = defineCommand({
 		});
 	}
 });
+const authCodex = defineCommand({
+	meta: {
+		name: "codex",
+		description: "List or select stored Codex accounts"
+	},
+	args: authCodexArgs,
+	run({ args }) {
+		return runAuthCodex({
+			list: args.list,
+			use: args.use
+		});
+	}
+});
 const auth = defineCommand({
 	meta: {
 		name: "auth",
@@ -480,12 +537,14 @@ const auth = defineCommand({
 	},
 	args: authArgs,
 	subCommands: {
+		codex: authCodex,
 		login: authLogin,
 		keys: authKeys
 	},
 	run({ args }) {
 		if ((args._[0] ?? "").trim()) return;
 		return runAuthLogin({
+			alias: args.alias,
 			provider: args.provider,
 			verbose: args.verbose,
 			showToken: args["show-token"]
@@ -493,6 +552,6 @@ const auth = defineCommand({
 	}
 });
 //#endregion
-export { runProviderSetup as i, runAuthKeys as n, runAuthLogin as r, auth as t };
+export { runProviderSetup as a, runAuthLogin as i, runAuthCodex as n, runAuthKeys as r, auth as t };
 
-//# sourceMappingURL=auth-CMufJUfF.js.map
+//# sourceMappingURL=auth-zBY9SQaI.js.map

package/dist/auth-zBY9SQaI.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-zBY9SQaI.js","names":[],"sources":["../src/lib/quick-providers.ts","../src/lib/interactive-prompt.ts","../src/auth.ts"],"sourcesContent":["import type { ProviderType } from \"./config\"\n\ninterface QuickProviderConfig {\n  type: ProviderType\n  baseUrl: string\n  pricingCurrency: string\n  editableType: boolean\n}\n\nexport const QUICK_PROVIDER_CONFIGS = {\n  \"opencode-go\": {\n    type: \"openai-compatible\",\n    baseUrl: \"https://opencode.ai/zen/go\",\n    pricingCurrency: \"USD\",\n    editableType: false,\n  },\n  kimi: {\n    type: \"openai-compatible\",\n    baseUrl: \"https://api.kimi.com/coding\",\n    pricingCurrency: \"USD\",\n    editableType: true,\n  },\n  deepseek: {\n    type: \"anthropic\",\n    baseUrl: \"https://api.deepseek.com/anthropic\",\n    pricingCurrency: \"CNY\",\n    editableType: true,\n  },\n  dashscope: {\n    type: \"openai-compatible\",\n    baseUrl: \"https://dashscope.aliyuncs.com/compatible-mode\",\n    pricingCurrency: \"CNY\",\n    editableType: true,\n  },\n  openrouter: {\n    type: \"anthropic\",\n    baseUrl: \"https://openrouter.ai/api\",\n    pricingCurrency: \"USD\",\n    editableType: false,\n  },\n} satisfies Record<string, QuickProviderConfig>\n\nexport type QuickProviderName = keyof typeof QUICK_PROVIDER_CONFIGS\n","import consola from \"consola\"\n\ninterface PromptSelectOption {\n  label: string\n  value: string\n  hint?: string\n}\n\ninterface TextPromptOptions {\n  type?: \"text\"\n  default?: string\n  initial?: string\n  placeholder?: string\n}\n\ninterface SelectPromptOptions {\n  type: \"select\"\n  initial?: string\n  options: Array<string | PromptSelectOption>\n}\n\nexport type InteractivePromptOptions = SelectPromptOptions | TextPromptOptions\n\ninterface ClackSelectOptions {\n  message: string\n  initialValue?: string\n  options: Array<PromptSelectOption>\n}\n\ninterface ClackTextOptions {\n  message: string\n  defaultValue?: string\n  initialValue?: string\n  placeholder?: string\n}\n\nexport interface ClackPromptBackend {\n  isCancel(value: unknown): boolean\n  select(options: ClackSelectOptions): Promise<string | symbol>\n  text(options: ClackTextOptions): Promise<string | symbol>\n}\n\ninterface PromptRuntime {\n  bunVersion?: string\n  platform: NodeJS.Platform\n  stdinIsTTY?: boolean\n  stdoutIsTTY?: boolean\n  stdoutIsTTYStream?: boolean\n}\n\n// Consola 3.4.2 bundles a prompt implementation that writes keyboard input to\n// tty fd 0. Bun treats that as a real stdin write on Windows and throws EPIPE.\nexport function shouldUseClackPrompt(\n  runtime: PromptRuntime = {\n    bunVersion: process.versions.bun,\n    platform: process.platform,\n    stdinIsTTY: process.stdin.isTTY,\n    stdoutIsTTY: process.stdout.isTTY,\n    stdoutIsTTYStream: typeof process.stdout.getColorDepth === \"function\",\n  },\n): boolean {\n  return Boolean(\n    runtime.platform === \"win32\"\n      && runtime.bunVersion\n      && runtime.stdinIsTTY\n      && runtime.stdoutIsTTY\n      && runtime.stdoutIsTTYStream,\n  )\n}\n\nfunction getCancelValue(options: InteractivePromptOptions): string | undefined {\n  return options.type === \"select\" ?\n      options.initial\n    : (options.default ?? options.initial)\n}\n\nexport async function promptWithClack(\n  message: string,\n  options: InteractivePromptOptions,\n  backend: ClackPromptBackend,\n): Promise<string | undefined> {\n  if (options.type === \"select\") {\n    const value = await backend.select({\n      message,\n      options: options.options.map((option) =>\n        typeof option === \"string\" ? { label: option, value: option } : option,\n      ),\n      initialValue: options.initial,\n    })\n    if (backend.isCancel(value)) {\n      return getCancelValue(options)\n    }\n    return typeof value === \"string\" ? value : undefined\n  }\n\n  const value = await backend.text({\n    message,\n    defaultValue: options.default,\n    initialValue: options.initial,\n    placeholder: options.placeholder,\n  })\n  if (backend.isCancel(value)) {\n    return getCancelValue(options)\n  }\n  return typeof value === \"string\" ? value : undefined\n}\n\nexport async function prompt(\n  message: string,\n  options: InteractivePromptOptions,\n): Promise<string | undefined> {\n  if (!shouldUseClackPrompt()) {\n    if (options.type === \"select\") {\n      const value = await consola.prompt(message, options)\n      return typeof value === \"string\" ? value : undefined\n    }\n    return await consola.prompt(message, options)\n  }\n\n  const clack = await import(\"@clack/prompts\")\n  return await promptWithClack(message, options, clack)\n}\n","#!/usr/bin/env node\n\nimport { defineCommand } from \"citty\"\nimport consola from \"consola\"\n\nimport {\n  getRawProviderConfig,\n  isSupportedProviderType,\n  normalizeProviderBaseUrl,\n  setProviderConfig,\n  setConfiguredApiKeys,\n  SUPPORTED_PROVIDER_TYPES,\n  type ProviderAuthType,\n  type ProviderConfig,\n  type ProviderType,\n} from \"./lib/config\"\nimport { loginCodex } from \"./lib/oauth/codex\"\nimport { PATHS, ensurePaths } from \"./lib/paths\"\nimport { getConfiguredApiKeys } from \"./lib/request-auth\"\nimport {\n  QUICK_PROVIDER_CONFIGS,\n  type QuickProviderName,\n} from \"./lib/quick-providers\"\nimport { prompt } from \"./lib/interactive-prompt\"\nimport { state } from \"./lib/state\"\nimport {\n  getCodexAccounts,\n  persistCodexCredentials,\n  selectCodexAccount,\n  setupGitHubToken,\n} from \"./lib/token\"\n\ninterface RunAuthOptions {\n  alias?: string\n  provider?: string\n  verbose: boolean\n  showToken: boolean\n}\n\nconst authArgs = {\n  provider: {\n    type: \"string\",\n    description:\n      \"Provider to log in with or configure (copilot, codex, opencode-go, kimi, deepseek, dashscope, openrouter, custom)\",\n  },\n  alias: {\n    type: \"string\",\n    description: \"Optional alias for a Codex account\",\n  },\n  verbose: {\n    alias: \"v\",\n    type: \"boolean\",\n    default: false,\n    description: \"Enable verbose logging\",\n  },\n  \"show-token\": {\n    type: \"boolean\",\n    default: false,\n    description: \"Show provider access token on auth\",\n  },\n} as const\n\nconst BUILTIN_PROVIDER_NAMES = [\"copilot\", \"codex\"] as const\nconst QUICK_PROVIDER_NAMES = Object.keys(\n  QUICK_PROVIDER_CONFIGS,\n) as Array<QuickProviderName>\nconst AUTH_PROVIDER_NAMES = [\n  ...BUILTIN_PROVIDER_NAMES,\n  ...QUICK_PROVIDER_NAMES,\n  \"custom\",\n] as const\nconst CUSTOM_PROVIDER_AUTH_TYPE_OPTION = \"__default__\"\nconst QUICK_PROVIDER_DEFAULT_TYPE_OPTION = \"__default__\"\nconst CUSTOM_PROVIDER_AUTH_TYPES = [\"x-api-key\", \"authorization\"] as const\n\ntype BuiltinProviderName = (typeof BUILTIN_PROVIDER_NAMES)[number]\ntype AuthProviderName = (typeof AUTH_PROVIDER_NAMES)[number]\ntype CustomProviderAuthType = (typeof CUSTOM_PROVIDER_AUTH_TYPES)[number]\n\nconst BUILTIN_PROVIDER_LABELS: Record<BuiltinProviderName, string> = {\n  copilot: \"GitHub Copilot\",\n  codex: \"OpenAI Codex\",\n}\nconst AUTH_PROVIDER_LABELS: Record<AuthProviderName, string> = {\n  ...BUILTIN_PROVIDER_LABELS,\n  \"opencode-go\": \"OpenCode Go\",\n  kimi: \"Kimi\",\n  deepseek: \"DeepSeek\",\n  dashscope: \"DashScope\",\n  openrouter: \"OpenRouter\",\n  custom: \"Custom provider\",\n}\n\nfunction isAuthProviderName(\n  providerName: string,\n): providerName is AuthProviderName {\n  return AUTH_PROVIDER_NAMES.includes(providerName as AuthProviderName)\n}\n\nfunction isCustomProviderAuthType(\n  value: string,\n): value is CustomProviderAuthType {\n  return CUSTOM_PROVIDER_AUTH_TYPES.includes(value as CustomProviderAuthType)\n}\n\nfunction isQuickProviderName(\n  providerName: AuthProviderName,\n): providerName is QuickProviderName {\n  return QUICK_PROVIDER_NAMES.includes(providerName as QuickProviderName)\n}\n\nasync function resolveProviderSelection(\n  providerArg: string | undefined,\n): Promise<AuthProviderName> {\n  const availableProviders = [...AUTH_PROVIDER_NAMES]\n\n  if (providerArg !== undefined) {\n    const providerName = providerArg.trim()\n    if (!isAuthProviderName(providerName)) {\n      throw new Error(\n        `Unknown provider '${providerArg}'. Expected one of: ${availableProviders.join(\", \")}`,\n      )\n    }\n    return providerName\n  }\n\n  if (availableProviders.length === 1) {\n    return availableProviders[0]\n  }\n\n  const provider = await prompt(\"Select a provider to log in with\", {\n    type: \"select\",\n    options: availableProviders.map((providerName) => ({\n      label: `${AUTH_PROVIDER_LABELS[providerName]} (${providerName})`,\n      value: providerName,\n    })),\n  })\n\n  if (!provider || !isAuthProviderName(provider)) {\n    throw new Error(\"No provider selected\")\n  }\n\n  return provider\n}\n\nfunction assertCustomProviderName(providerName: string): void {\n  if (!providerName) {\n    throw new Error(\"Provider name must be a non-empty string\")\n  }\n\n  if (!/^[A-Za-z0-9][A-Za-z0-9_-]*$/u.test(providerName)) {\n    throw new Error(\n      \"Provider name must start with a letter or number and contain only letters, numbers, underscores, or hyphens\",\n    )\n  }\n\n  if (providerName === \"copilot\" || providerName === \"codex\") {\n    throw new Error(\n      `Provider name '${providerName}' is reserved for a builtin provider`,\n    )\n  }\n}\n\nasync function promptRequiredText(\n  message: string,\n  fieldName: string,\n): Promise<string> {\n  const value = await prompt(message, { type: \"text\" })\n  const normalizedValue = typeof value === \"string\" ? value.trim() : \"\"\n  if (!normalizedValue) {\n    throw new Error(`${fieldName} must be a non-empty string`)\n  }\n  return normalizedValue\n}\n\nfunction canUseMaskedPrompt(): boolean {\n  return Boolean(\n    process.stdin.isTTY\n      && process.stdout.isTTY\n      && typeof process.stdin.setRawMode === \"function\",\n  )\n}\n\nasync function promptMaskedText(message: string): Promise<string> {\n  if (!canUseMaskedPrompt()) {\n    const value = await prompt(message, { type: \"text\" })\n    return typeof value === \"string\" ? value : \"\"\n  }\n\n  return await new Promise<string>((resolve, reject) => {\n    let value = \"\"\n    const rawModeWasEnabled = process.stdin.isRaw === true\n\n    function cleanup(): void {\n      process.stdin.off(\"data\", onData)\n      process.stdin.setRawMode(rawModeWasEnabled)\n      process.stdin.pause()\n    }\n\n    function finish(): void {\n      cleanup()\n      process.stdout.write(\"\\n\")\n      resolve(value)\n    }\n\n    function cancel(): void {\n      cleanup()\n      process.stdout.write(\"\\n\")\n      reject(new Error(\"Prompt cancelled\"))\n    }\n\n    function onData(chunk: Buffer): void {\n      const input = chunk.toString(\"utf8\")\n\n      if (input.startsWith(\"\\u001B\")) {\n        return\n      }\n\n      for (const char of input) {\n        if (char === \"\\u0003\") {\n          cancel()\n          return\n        }\n\n        if (char === \"\\r\" || char === \"\\n\") {\n          finish()\n          return\n        }\n\n        if (char === \"\\b\" || char === \"\\u007F\") {\n          if (value.length > 0) {\n            value = value.slice(0, -1)\n            process.stdout.write(\"\\b \\b\")\n          }\n          continue\n        }\n\n        if (char >= \" \") {\n          value += char\n          process.stdout.write(\"*\")\n        }\n      }\n    }\n\n    process.stdout.write(`${message}: `)\n    process.stdin.setRawMode(true)\n    process.stdin.resume()\n    process.stdin.on(\"data\", onData)\n  })\n}\n\nasync function promptRequiredSecret(\n  message: string,\n  fieldName: string,\n): Promise<string> {\n  const value = await promptMaskedText(message)\n  const normalizedValue = value.trim()\n  if (!normalizedValue) {\n    throw new Error(`${fieldName} must be a non-empty string`)\n  }\n  return normalizedValue\n}\n\nasync function promptCustomProviderName(): Promise<string> {\n  const providerName = await promptRequiredText(\n    \"Enter provider name\",\n    \"Provider name\",\n  )\n  assertCustomProviderName(providerName)\n  return providerName\n}\n\nasync function promptCustomProviderType(): Promise<ProviderType> {\n  const providerType = await prompt(\"Select provider type\", {\n    type: \"select\",\n    options: SUPPORTED_PROVIDER_TYPES.map((type) => ({\n      label: type,\n      value: type,\n    })),\n  })\n\n  if (\n    typeof providerType !== \"string\"\n    || !isSupportedProviderType(providerType)\n  ) {\n    throw new Error(\"No provider type selected\")\n  }\n\n  return providerType\n}\n\nasync function promptQuickProviderType(\n  defaultType: ProviderType,\n): Promise<ProviderType> {\n  const providerType = await prompt(\n    `Select provider type (default: ${defaultType})`,\n    {\n      type: \"select\",\n      options: [\n        {\n          label: `Default (${defaultType})`,\n          value: QUICK_PROVIDER_DEFAULT_TYPE_OPTION,\n        },\n        ...SUPPORTED_PROVIDER_TYPES.map((type) => ({\n          label: type,\n          value: type,\n        })),\n      ],\n    },\n  )\n\n  if (providerType === QUICK_PROVIDER_DEFAULT_TYPE_OPTION) {\n    return defaultType\n  }\n\n  if (\n    typeof providerType === \"string\"\n    && isSupportedProviderType(providerType)\n  ) {\n    return providerType\n  }\n\n  throw new Error(\"No provider type selected\")\n}\n\nfunction getDefaultProviderAuthType(\n  providerType: ProviderType,\n): ProviderAuthType {\n  return providerType === \"anthropic\" ? \"x-api-key\" : \"authorization\"\n}\n\nasync function promptCustomProviderAuthType(\n  providerType: ProviderType,\n): Promise<ProviderAuthType | undefined> {\n  const defaultAuthType = getDefaultProviderAuthType(providerType)\n  const authType = await prompt(\"Select provider auth type\", {\n    type: \"select\",\n    options: [\n      {\n        label: `Default (${defaultAuthType})`,\n        value: CUSTOM_PROVIDER_AUTH_TYPE_OPTION,\n      },\n      ...CUSTOM_PROVIDER_AUTH_TYPES.map((value) => ({\n        label: value,\n        value,\n      })),\n    ],\n  })\n\n  if (authType === CUSTOM_PROVIDER_AUTH_TYPE_OPTION) {\n    return undefined\n  }\n\n  if (typeof authType === \"string\" && isCustomProviderAuthType(authType)) {\n    return authType\n  }\n\n  throw new Error(\"No provider auth type selected\")\n}\n\nasync function promptQuickProviderBaseUrl(\n  defaultBaseUrl: string,\n): Promise<string> {\n  const value = await prompt(\n    `Enter provider baseUrl (default: ${defaultBaseUrl})`,\n    {\n      type: \"text\",\n      default: defaultBaseUrl,\n      initial: defaultBaseUrl,\n    },\n  )\n  const baseUrl = normalizeProviderBaseUrl(\n    typeof value === \"string\" && value.trim() ? value : defaultBaseUrl,\n  )\n  if (!baseUrl) {\n    throw new Error(\"baseUrl must be a non-empty string\")\n  }\n\n  return baseUrl\n}\n\nfunction buildCustomProviderConfig(\n  existingProviderConfig: ProviderConfig,\n  options: {\n    apiKey: string\n    authType?: ProviderAuthType\n    baseUrl: string\n    pricingCurrency?: string\n    type: ProviderType\n  },\n): ProviderConfig {\n  return {\n    type: options.type,\n    enabled: true,\n    baseUrl: options.baseUrl,\n    apiKey: options.apiKey,\n    ...(options.authType ? { authType: options.authType } : {}),\n    pricingCurrency:\n      options.pricingCurrency ?? existingProviderConfig.pricingCurrency,\n    ...(existingProviderConfig.models ?\n      { models: existingProviderConfig.models }\n    : {}),\n  }\n}\n\nasync function configureCustomProvider(): Promise<void> {\n  const providerName = await promptCustomProviderName()\n  const type = await promptCustomProviderType()\n  const baseUrl = normalizeProviderBaseUrl(\n    await promptRequiredText(\"Enter provider baseUrl\", \"baseUrl\"),\n  )\n  if (!baseUrl) {\n    throw new Error(\"baseUrl must be a non-empty string\")\n  }\n\n  const apiKey = await promptRequiredSecret(\"Enter provider apiKey\", \"apiKey\")\n  const authType = await promptCustomProviderAuthType(type)\n  const existingProviderConfig = getRawProviderConfig(providerName) ?? {}\n\n  setProviderConfig(\n    providerName,\n    buildCustomProviderConfig(existingProviderConfig, {\n      apiKey,\n      authType,\n      baseUrl,\n      type,\n    }),\n  )\n\n  consola.success(\n    `Custom provider '${providerName}' written to ${PATHS.CONFIG_PATH}`,\n  )\n}\n\nasync function configureQuickProvider(\n  providerName: QuickProviderName,\n): Promise<void> {\n  const defaultProviderConfig = QUICK_PROVIDER_CONFIGS[providerName]\n  const apiKey = await promptRequiredSecret(\n    `Enter ${providerName} apiKey`,\n    \"apiKey\",\n  )\n  const type =\n    defaultProviderConfig.editableType ?\n      await promptQuickProviderType(defaultProviderConfig.type)\n    : defaultProviderConfig.type\n  const baseUrl = await promptQuickProviderBaseUrl(\n    defaultProviderConfig.baseUrl,\n  )\n  const existingProviderConfig = getRawProviderConfig(providerName) ?? {}\n\n  setProviderConfig(\n    providerName,\n    buildCustomProviderConfig(existingProviderConfig, {\n      apiKey,\n      baseUrl,\n      pricingCurrency: defaultProviderConfig.pricingCurrency,\n      type,\n    }),\n  )\n\n  consola.success(\n    `${AUTH_PROVIDER_LABELS[providerName]} provider '${providerName}' written to ${PATHS.CONFIG_PATH}`,\n  )\n}\n\nasync function loginWithCodex(alias?: string): Promise<void> {\n  const credentials = await loginCodex({\n    onAuth(info) {\n      consola.info(\"Open the following URL to authenticate with Codex:\")\n      consola.log(info.url)\n      if (info.instructions) {\n        consola.info(info.instructions)\n      }\n    },\n    onPrompt(message) {\n      return prompt(message, { type: \"text\" }).then((value) => value ?? \"\")\n    },\n    onProgress(message) {\n      consola.debug(message)\n    },\n  })\n\n  await persistCodexCredentials(credentials, {\n    activateAccount: true,\n    alias,\n    enableProvider: true,\n  })\n  consola.success(\n    `Codex provider config written to ${PATHS.CONFIG_PATH} and credentials written to ${PATHS.CODEX_CREDENTIAL_PATH}`,\n  )\n}\n\nasync function loginWithProvider(\n  provider: AuthProviderName,\n  alias?: string,\n): Promise<void> {\n  if (alias !== undefined && provider !== \"codex\") {\n    throw new Error(\"--alias is only supported with the codex provider\")\n  }\n\n  if (provider === \"copilot\") {\n    await setupGitHubToken({ force: true })\n    consola.success(\"GitHub token written to\", PATHS.GITHUB_TOKEN_PATH)\n    return\n  }\n\n  if (provider === \"codex\") {\n    await loginWithCodex(alias)\n    return\n  }\n\n  if (isQuickProviderName(provider)) {\n    await configureQuickProvider(provider)\n    return\n  }\n\n  await configureCustomProvider()\n}\n\nexport async function runProviderSetup(): Promise<void> {\n  const provider = await resolveProviderSelection(undefined)\n  consola.info(`Logging in with ${AUTH_PROVIDER_LABELS[provider]}`)\n  await loginWithProvider(provider)\n}\n\nexport async function runAuthLogin(options: RunAuthOptions): Promise<void> {\n  const tlsModule = await import(\"./lib/tls\")\n  tlsModule.enableSystemCACompat()\n\n  if (options.verbose) {\n    consola.level = 5\n    consola.info(\"Verbose logging enabled\")\n  }\n\n  state.showToken = options.showToken\n\n  await ensurePaths()\n  const provider = await resolveProviderSelection(options.provider)\n\n  consola.info(`Logging in with ${AUTH_PROVIDER_LABELS[provider]}`)\n  await loginWithProvider(provider, options.alias)\n}\n\nconst authCodexArgs = {\n  list: {\n    alias: \"l\",\n    type: \"boolean\",\n    default: false,\n    description: \"List stored Codex accounts\",\n  },\n  use: {\n    alias: \"u\",\n    type: \"string\",\n    description: \"Select a Codex account by alias or account id\",\n  },\n} as const\n\ninterface RunAuthCodexOptions {\n  list?: boolean\n  use?: string\n}\n\nfunction formatCodexAccount(\n  account: Awaited<ReturnType<typeof getCodexAccounts>>[number],\n): string {\n  const name =\n    account.alias ?\n      `${account.alias} (${account.accountId})`\n    : account.accountId\n  return `${account.active ? \"*\" : \"-\"} ${name}`\n}\n\nexport async function runAuthCodex(\n  options: RunAuthCodexOptions,\n): Promise<void> {\n  await ensurePaths()\n\n  if (options.list && options.use !== undefined) {\n    throw new Error(\"Use only one of --list or --use per invocation\")\n  }\n\n  if (options.use !== undefined) {\n    const account = await selectCodexAccount(options.use)\n    consola.success(\n      `Selected Codex account ${account.alias ? `${account.alias} (${account.accountId})` : account.accountId}`,\n    )\n    consola.info(\"Restart the server to use the selected Codex account.\")\n    return\n  }\n\n  const accounts = await getCodexAccounts()\n  if (accounts.length === 0) {\n    consola.info(\n      \"No Codex accounts configured. Run `copilot-api auth login --provider codex` to add one.\",\n    )\n    return\n  }\n\n  consola.info(\"Configured Codex accounts:\")\n  for (const account of accounts) {\n    consola.info(formatCodexAccount(account))\n  }\n}\n\nconst authKeysArgs = {\n  add: {\n    alias: \"a\",\n    type: \"string\",\n    description: \"Add an API key for gateway authentication\",\n  },\n  remove: {\n    alias: \"r\",\n    type: \"string\",\n    description: \"Remove an API key\",\n  },\n  list: {\n    alias: \"l\",\n    type: \"boolean\",\n    default: false,\n    description: \"List configured API keys\",\n  },\n  clear: {\n    type: \"boolean\",\n    default: false,\n    description: \"Remove all configured API keys\",\n  },\n} as const\n\ninterface RunAuthKeysOptions {\n  add?: string\n  remove?: string\n  list?: boolean\n  clear?: boolean\n}\n\nfunction normalizeAuthKeyValue(value: string): string {\n  const normalizedKey = value.trim()\n  if (!normalizedKey) {\n    throw new Error(\"API key must be a non-empty string\")\n  }\n  return normalizedKey\n}\n\nexport async function runAuthKeys(options: RunAuthKeysOptions): Promise<void> {\n  const tlsModule = await import(\"./lib/tls\")\n  tlsModule.enableSystemCACompat()\n\n  await ensurePaths()\n\n  const operations = [\n    ...(options.add !== undefined ? [\"add\"] : []),\n    ...(options.remove !== undefined ? [\"remove\"] : []),\n    ...(options.list ? [\"list\"] : []),\n    ...(options.clear ? [\"clear\"] : []),\n  ]\n  if (operations.length > 1) {\n    throw new Error(\n      \"Use only one of --add, --remove, --list, or --clear per invocation\",\n    )\n  }\n\n  const operation = operations[0] ?? \"list\"\n\n  if (operation === \"add\") {\n    const apiKey = normalizeAuthKeyValue(options.add ?? \"\")\n    const currentKeys = getConfiguredApiKeys()\n    if (currentKeys.includes(apiKey)) {\n      consola.info(\n        `API key already configured. ${currentKeys.length} API key(s) configured.`,\n      )\n      return\n    }\n    const storedKeys = setConfiguredApiKeys([...currentKeys, apiKey])\n    consola.success(\n      `API key added to ${PATHS.CONFIG_PATH}. ${storedKeys.length} API key(s) configured.`,\n    )\n    return\n  }\n\n  if (operation === \"remove\") {\n    const apiKey = normalizeAuthKeyValue(options.remove ?? \"\")\n    const currentKeys = getConfiguredApiKeys()\n    if (!currentKeys.includes(apiKey)) {\n      consola.info(\n        `API key not found. ${currentKeys.length} API key(s) configured.`,\n      )\n      return\n    }\n    const storedKeys = setConfiguredApiKeys(\n      currentKeys.filter((key) => key !== apiKey),\n    )\n    consola.success(\n      `API key removed from ${PATHS.CONFIG_PATH}. ${storedKeys.length} API key(s) configured.`,\n    )\n    return\n  }\n\n  if (operation === \"clear\") {\n    setConfiguredApiKeys([])\n    consola.success(`Removed all API keys from ${PATHS.CONFIG_PATH}.`)\n    return\n  }\n\n  const currentKeys = getConfiguredApiKeys()\n  if (currentKeys.length === 0) {\n    consola.info(\n      \"No API keys configured. Run `npx copilot-api auth keys --add <key>` to add one.\",\n    )\n    return\n  }\n  consola.info(\"Configured API keys:\")\n  for (const key of currentKeys) {\n    consola.info(`- ${key}`)\n  }\n}\n\nconst authLogin = defineCommand({\n  meta: {\n    name: \"login\",\n    description:\n      \"Authenticate or configure a provider without running the server\",\n  },\n  args: authArgs,\n  run({ args }) {\n    return runAuthLogin({\n      alias: args.alias,\n      provider: args.provider,\n      verbose: args.verbose,\n      showToken: args[\"show-token\"],\n    })\n  },\n})\n\nconst authKeys = defineCommand({\n  meta: {\n    name: \"keys\",\n    description: \"Manage gateway API keys (auth.apiKeys) in the config\",\n  },\n  args: authKeysArgs,\n  run({ args }) {\n    return runAuthKeys({\n      add: args.add,\n      remove: args.remove,\n      list: args.list,\n      clear: args.clear,\n    })\n  },\n})\n\nconst authCodex = defineCommand({\n  meta: {\n    name: \"codex\",\n    description: \"List or select stored Codex accounts\",\n  },\n  args: authCodexArgs,\n  run({ args }) {\n    return runAuthCodex({\n      list: args.list,\n      use: args.use,\n    })\n  },\n})\n\nexport const auth = defineCommand({\n  meta: {\n    name: \"auth\",\n    description: \"Run authentication flows without running the server\",\n  },\n  args: authArgs,\n  subCommands: {\n    codex: authCodex,\n    login: authLogin,\n    keys: authKeys,\n  },\n  run({ args }) {\n    if ((args._[0] ?? \"\").trim()) {\n      return\n    }\n\n    return runAuthLogin({\n      alias: args.alias,\n      provider: args.provider,\n      verbose: args.verbose,\n      showToken: args[\"show-token\"],\n    })\n  },\n})\n"],"mappings":";;;;;AASA,MAAa,yBAAyB;CACpC,eAAe;EACb,MAAM;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;CAChB;CACA,MAAM;EACJ,MAAM;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;CAChB;CACA,UAAU;EACR,MAAM;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;CAChB;CACA,WAAW;EACT,MAAM;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;CAChB;CACA,YAAY;EACV,MAAM;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;CAChB;AACF;;;ACYA,SAAgB,qBACd,UAAyB;CACvB,YAAY,QAAQ,SAAS;CAC7B,UAAU,QAAQ;CAClB,YAAY,QAAQ,MAAM;CAC1B,aAAa,QAAQ,OAAO;CAC5B,mBAAmB,OAAO,QAAQ,OAAO,kBAAkB;AAC7D,GACS;CACT,OAAO,QACL,QAAQ,aAAa,WAChB,QAAQ,cACR,QAAQ,cACR,QAAQ,eACR,QAAQ,iBACf;AACF;AAEA,SAAS,eAAe,SAAuD;CAC7E,OAAO,QAAQ,SAAS,WACpB,QAAQ,UACP,QAAQ,WAAW,QAAQ;AAClC;AAEA,eAAsB,gBACpB,SACA,SACA,SAC6B;CAC7B,IAAI,QAAQ,SAAS,UAAU;EAC7B,MAAM,QAAQ,MAAM,QAAQ,OAAO;GACjC;GACA,SAAS,QAAQ,QAAQ,KAAK,WAC5B,OAAO,WAAW,WAAW;IAAE,OAAO;IAAQ,OAAO;GAAO,IAAI,MAClE;GACA,cAAc,QAAQ;EACxB,CAAC;EACD,IAAI,QAAQ,SAAS,KAAK,GACxB,OAAO,eAAe,OAAO;EAE/B,OAAO,OAAO,UAAU,WAAW,QAAQ,KAAA;CAC7C;CAEA,MAAM,QAAQ,MAAM,QAAQ,KAAK;EAC/B;EACA,cAAc,QAAQ;EACtB,cAAc,QAAQ;EACtB,aAAa,QAAQ;CACvB,CAAC;CACD,IAAI,QAAQ,SAAS,KAAK,GACxB,OAAO,eAAe,OAAO;CAE/B,OAAO,OAAO,UAAU,WAAW,QAAQ,KAAA;AAC7C;AAEA,eAAsB,OACpB,SACA,SAC6B;CAC7B,IAAI,CAAC,qBAAqB,GAAG;EAC3B,IAAI,QAAQ,SAAS,UAAU;GAC7B,MAAM,QAAQ,MAAM,QAAQ,OAAO,SAAS,OAAO;GACnD,OAAO,OAAO,UAAU,WAAW,QAAQ,KAAA;EAC7C;EACA,OAAO,MAAM,QAAQ,OAAO,SAAS,OAAO;CAC9C;CAGA,OAAO,MAAM,gBAAgB,SAAS,SAAS,MAD3B,OAAO,iBACyB;AACtD;;;AClFA,MAAM,WAAW;CACf,UAAU;EACR,MAAM;EACN,aACE;CACJ;CACA,OAAO;EACL,MAAM;EACN,aAAa;CACf;CACA,SAAS;EACP,OAAO;EACP,MAAM;EACN,SAAS;EACT,aAAa;CACf;CACA,cAAc;EACZ,MAAM;EACN,SAAS;EACT,aAAa;CACf;AACF;AAEA,MAAM,yBAAyB,CAAC,WAAW,OAAO;AAClD,MAAM,uBAAuB,OAAO,KAClC,sBACF;AACA,MAAM,sBAAsB;CAC1B,GAAG;CACH,GAAG;CACH;AACF;AACA,MAAM,mCAAmC;AACzC,MAAM,qCAAqC;AAC3C,MAAM,6BAA6B,CAAC,aAAa,eAAe;AAUhE,MAAM,uBAAyD;CAH7D,SAAS;CACT,OAAO;CAIP,eAAe;CACf,MAAM;CACN,UAAU;CACV,WAAW;CACX,YAAY;CACZ,QAAQ;AACV;AAEA,SAAS,mBACP,cACkC;CAClC,OAAO,oBAAoB,SAAS,YAAgC;AACtE;AAEA,SAAS,yBACP,OACiC;CACjC,OAAO,2BAA2B,SAAS,KAA+B;AAC5E;AAEA,SAAS,oBACP,cACmC;CACnC,OAAO,qBAAqB,SAAS,YAAiC;AACxE;AAEA,eAAe,yBACb,aAC2B;CAC3B,MAAM,qBAAqB,CAAC,GAAG,mBAAmB;CAElD,IAAI,gBAAgB,KAAA,GAAW;EAC7B,MAAM,eAAe,YAAY,KAAK;EACtC,IAAI,CAAC,mBAAmB,YAAY,GAClC,MAAM,IAAI,MACR,qBAAqB,YAAY,sBAAsB,mBAAmB,KAAK,IAAI,GACrF;EAEF,OAAO;CACT;CAEA,IAAI,mBAAmB,WAAW,GAChC,OAAO,mBAAmB;CAG5B,MAAM,WAAW,MAAM,OAAO,oCAAoC;EAChE,MAAM;EACN,SAAS,mBAAmB,KAAK,kBAAkB;GACjD,OAAO,GAAG,qBAAqB,cAAc,IAAI,aAAa;GAC9D,OAAO;EACT,EAAE;CACJ,CAAC;CAED,IAAI,CAAC,YAAY,CAAC,mBAAmB,QAAQ,GAC3C,MAAM,IAAI,MAAM,sBAAsB;CAGxC,OAAO;AACT;AAEA,SAAS,yBAAyB,cAA4B;CAC5D,IAAI,CAAC,cACH,MAAM,IAAI,MAAM,0CAA0C;CAG5D,IAAI,CAAC,+BAA+B,KAAK,YAAY,GACnD,MAAM,IAAI,MACR,6GACF;CAGF,IAAI,iBAAiB,aAAa,iBAAiB,SACjD,MAAM,IAAI,MACR,kBAAkB,aAAa,qCACjC;AAEJ;AAEA,eAAe,mBACb,SACA,WACiB;CACjB,MAAM,QAAQ,MAAM,OAAO,SAAS,EAAE,MAAM,OAAO,CAAC;CACpD,MAAM,kBAAkB,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI;CACnE,IAAI,CAAC,iBACH,MAAM,IAAI,MAAM,GAAG,UAAU,4BAA4B;CAE3D,OAAO;AACT;AAEA,SAAS,qBAA8B;CACrC,OAAO,QACL,QAAQ,MAAM,SACT,QAAQ,OAAO,SACf,OAAO,QAAQ,MAAM,eAAe,UAC3C;AACF;AAEA,eAAe,iBAAiB,SAAkC;CAChE,IAAI,CAAC,mBAAmB,GAAG;EACzB,MAAM,QAAQ,MAAM,OAAO,SAAS,EAAE,MAAM,OAAO,CAAC;EACpD,OAAO,OAAO,UAAU,WAAW,QAAQ;CAC7C;CAEA,OAAO,MAAM,IAAI,SAAiB,SAAS,WAAW;EACpD,IAAI,QAAQ;EACZ,MAAM,oBAAoB,QAAQ,MAAM,UAAU;EAElD,SAAS,UAAgB;GACvB,QAAQ,MAAM,IAAI,QAAQ,MAAM;GAChC,QAAQ,MAAM,WAAW,iBAAiB;GAC1C,QAAQ,MAAM,MAAM;EACtB;EAEA,SAAS,SAAe;GACtB,QAAQ;GACR,QAAQ,OAAO,MAAM,IAAI;GACzB,QAAQ,KAAK;EACf;EAEA,SAAS,SAAe;GACtB,QAAQ;GACR,QAAQ,OAAO,MAAM,IAAI;GACzB,uBAAO,IAAI,MAAM,kBAAkB,CAAC;EACtC;EAEA,SAAS,OAAO,OAAqB;GACnC,MAAM,QAAQ,MAAM,SAAS,MAAM;GAEnC,IAAI,MAAM,WAAW,MAAQ,GAC3B;GAGF,KAAK,MAAM,QAAQ,OAAO;IACxB,IAAI,SAAS,KAAU;KACrB,OAAO;KACP;IACF;IAEA,IAAI,SAAS,QAAQ,SAAS,MAAM;KAClC,OAAO;KACP;IACF;IAEA,IAAI,SAAS,QAAQ,SAAS,KAAU;KACtC,IAAI,MAAM,SAAS,GAAG;MACpB,QAAQ,MAAM,MAAM,GAAG,EAAE;MACzB,QAAQ,OAAO,MAAM,OAAO;KAC9B;KACA;IACF;IAEA,IAAI,QAAQ,KAAK;KACf,SAAS;KACT,QAAQ,OAAO,MAAM,GAAG;IAC1B;GACF;EACF;EAEA,QAAQ,OAAO,MAAM,GAAG,QAAQ,GAAG;EACnC,QAAQ,MAAM,WAAW,IAAI;EAC7B,QAAQ,MAAM,OAAO;EACrB,QAAQ,MAAM,GAAG,QAAQ,MAAM;CACjC,CAAC;AACH;AAEA,eAAe,qBACb,SACA,WACiB;CAEjB,MAAM,mBAAkB,MADJ,iBAAiB,OAAO,EAAA,CACd,KAAK;CACnC,IAAI,CAAC,iBACH,MAAM,IAAI,MAAM,GAAG,UAAU,4BAA4B;CAE3D,OAAO;AACT;AAEA,eAAe,2BAA4C;CACzD,MAAM,eAAe,MAAM,mBACzB,uBACA,eACF;CACA,yBAAyB,YAAY;CACrC,OAAO;AACT;AAEA,eAAe,2BAAkD;CAC/D,MAAM,eAAe,MAAM,OAAO,wBAAwB;EACxD,MAAM;EACN,SAAS,yBAAyB,KAAK,UAAU;GAC/C,OAAO;GACP,OAAO;EACT,EAAE;CACJ,CAAC;CAED,IACE,OAAO,iBAAiB,YACrB,CAAC,wBAAwB,YAAY,GAExC,MAAM,IAAI,MAAM,2BAA2B;CAG7C,OAAO;AACT;AAEA,eAAe,wBACb,aACuB;CACvB,MAAM,eAAe,MAAM,OACzB,kCAAkC,YAAY,IAC9C;EACE,MAAM;EACN,SAAS,CACP;GACE,OAAO,YAAY,YAAY;GAC/B,OAAO;EACT,GACA,GAAG,yBAAyB,KAAK,UAAU;GACzC,OAAO;GACP,OAAO;EACT,EAAE,CACJ;CACF,CACF;CAEA,IAAI,iBAAiB,oCACnB,OAAO;CAGT,IACE,OAAO,iBAAiB,YACrB,wBAAwB,YAAY,GAEvC,OAAO;CAGT,MAAM,IAAI,MAAM,2BAA2B;AAC7C;AAEA,SAAS,2BACP,cACkB;CAClB,OAAO,iBAAiB,cAAc,cAAc;AACtD;AAEA,eAAe,6BACb,cACuC;CAEvC,MAAM,WAAW,MAAM,OAAO,6BAA6B;EACzD,MAAM;EACN,SAAS,CACP;GACE,OAAO,YALW,2BAA2B,YAK1B,EAAgB;GACnC,OAAO;EACT,GACA,GAAG,2BAA2B,KAAK,WAAW;GAC5C,OAAO;GACP;EACF,EAAE,CACJ;CACF,CAAC;CAED,IAAI,aAAa,kCACf;CAGF,IAAI,OAAO,aAAa,YAAY,yBAAyB,QAAQ,GACnE,OAAO;CAGT,MAAM,IAAI,MAAM,gCAAgC;AAClD;AAEA,eAAe,2BACb,gBACiB;CACjB,MAAM,QAAQ,MAAM,OAClB,oCAAoC,eAAe,IACnD;EACE,MAAM;EACN,SAAS;EACT,SAAS;CACX,CACF;CACA,MAAM,UAAU,yBACd,OAAO,UAAU,YAAY,MAAM,KAAK,IAAI,QAAQ,cACtD;CACA,IAAI,CAAC,SACH,MAAM,IAAI,MAAM,oCAAoC;CAGtD,OAAO;AACT;AAEA,SAAS,0BACP,wBACA,SAOgB;CAChB,OAAO;EACL,MAAM,QAAQ;EACd,SAAS;EACT,SAAS,QAAQ;EACjB,QAAQ,QAAQ;EAChB,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;EACzD,iBACE,QAAQ,mBAAmB,uBAAuB;EACpD,GAAI,uBAAuB,SACzB,EAAE,QAAQ,uBAAuB,OAAO,IACxC,CAAC;CACL;AACF;AAEA,eAAe,0BAAyC;CACtD,MAAM,eAAe,MAAM,yBAAyB;CACpD,MAAM,OAAO,MAAM,yBAAyB;CAC5C,MAAM,UAAU,yBACd,MAAM,mBAAmB,0BAA0B,SAAS,CAC9D;CACA,IAAI,CAAC,SACH,MAAM,IAAI,MAAM,oCAAoC;CAGtD,MAAM,SAAS,MAAM,qBAAqB,yBAAyB,QAAQ;CAC3E,MAAM,WAAW,MAAM,6BAA6B,IAAI;CACxD,MAAM,yBAAyB,qBAAqB,YAAY,KAAK,CAAC;CAEtE,kBACE,cACA,0BAA0B,wBAAwB;EAChD;EACA;EACA;EACA;CACF,CAAC,CACH;CAEA,QAAQ,QACN,oBAAoB,aAAa,eAAe,MAAM,aACxD;AACF;AAEA,eAAe,uBACb,cACe;CACf,MAAM,wBAAwB,uBAAuB;CACrD,MAAM,SAAS,MAAM,qBACnB,SAAS,aAAa,UACtB,QACF;CACA,MAAM,OACJ,sBAAsB,eACpB,MAAM,wBAAwB,sBAAsB,IAAI,IACxD,sBAAsB;CAC1B,MAAM,UAAU,MAAM,2BACpB,sBAAsB,OACxB;CACA,MAAM,yBAAyB,qBAAqB,YAAY,KAAK,CAAC;CAEtE,kBACE,cACA,0BAA0B,wBAAwB;EAChD;EACA;EACA,iBAAiB,sBAAsB;EACvC;CACF,CAAC,CACH;CAEA,QAAQ,QACN,GAAG,qBAAqB,cAAc,aAAa,aAAa,eAAe,MAAM,aACvF;AACF;AAEA,eAAe,eAAe,OAA+B;CAC3D,MAAM,cAAc,MAAM,WAAW;EACnC,OAAO,MAAM;GACX,QAAQ,KAAK,oDAAoD;GACjE,QAAQ,IAAI,KAAK,GAAG;GACpB,IAAI,KAAK,cACP,QAAQ,KAAK,KAAK,YAAY;EAElC;EACA,SAAS,SAAS;GAChB,OAAO,OAAO,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,MAAM,UAAU,SAAS,EAAE;EACtE;EACA,WAAW,SAAS;GAClB,QAAQ,MAAM,OAAO;EACvB;CACF,CAAC;CAED,MAAM,wBAAwB,aAAa;EACzC,iBAAiB;EACjB;EACA,gBAAgB;CAClB,CAAC;CACD,QAAQ,QACN,oCAAoC,MAAM,YAAY,8BAA8B,MAAM,uBAC5F;AACF;AAEA,eAAe,kBACb,UACA,OACe;CACf,IAAI,UAAU,KAAA,KAAa,aAAa,SACtC,MAAM,IAAI,MAAM,mDAAmD;CAGrE,IAAI,aAAa,WAAW;EAC1B,MAAM,iBAAiB,EAAE,OAAO,KAAK,CAAC;EACtC,QAAQ,QAAQ,2BAA2B,MAAM,iBAAiB;EAClE;CACF;CAEA,IAAI,aAAa,SAAS;EACxB,MAAM,eAAe,KAAK;EAC1B;CACF;CAEA,IAAI,oBAAoB,QAAQ,GAAG;EACjC,MAAM,uBAAuB,QAAQ;EACrC;CACF;CAEA,MAAM,wBAAwB;AAChC;AAEA,eAAsB,mBAAkC;CACtD,MAAM,WAAW,MAAM,yBAAyB,KAAA,CAAS;CACzD,QAAQ,KAAK,mBAAmB,qBAAqB,WAAW;CAChE,MAAM,kBAAkB,QAAQ;AAClC;AAEA,eAAsB,aAAa,SAAwC;CAEzE,CAAA,MADwB,OAAO,qBAAA,CACrB,qBAAqB;CAE/B,IAAI,QAAQ,SAAS;EACnB,QAAQ,QAAQ;EAChB,QAAQ,KAAK,yBAAyB;CACxC;CAEA,MAAM,YAAY,QAAQ;CAE1B,MAAM,YAAY;CAClB,MAAM,WAAW,MAAM,yBAAyB,QAAQ,QAAQ;CAEhE,QAAQ,KAAK,mBAAmB,qBAAqB,WAAW;CAChE,MAAM,kBAAkB,UAAU,QAAQ,KAAK;AACjD;AAEA,MAAM,gBAAgB;CACpB,MAAM;EACJ,OAAO;EACP,MAAM;EACN,SAAS;EACT,aAAa;CACf;CACA,KAAK;EACH,OAAO;EACP,MAAM;EACN,aAAa;CACf;AACF;AAOA,SAAS,mBACP,SACQ;CACR,MAAM,OACJ,QAAQ,QACN,GAAG,QAAQ,MAAM,IAAI,QAAQ,UAAU,KACvC,QAAQ;CACZ,OAAO,GAAG,QAAQ,SAAS,MAAM,IAAI,GAAG;AAC1C;AAEA,eAAsB,aACpB,SACe;CACf,MAAM,YAAY;CAElB,IAAI,QAAQ,QAAQ,QAAQ,QAAQ,KAAA,GAClC,MAAM,IAAI,MAAM,gDAAgD;CAGlE,IAAI,QAAQ,QAAQ,KAAA,GAAW;EAC7B,MAAM,UAAU,MAAM,mBAAmB,QAAQ,GAAG;EACpD,QAAQ,QACN,0BAA0B,QAAQ,QAAQ,GAAG,QAAQ,MAAM,IAAI,QAAQ,UAAU,KAAK,QAAQ,WAChG;EACA,QAAQ,KAAK,uDAAuD;EACpE;CACF;CAEA,MAAM,WAAW,MAAM,iBAAiB;CACxC,IAAI,SAAS,WAAW,GAAG;EACzB,QAAQ,KACN,yFACF;EACA;CACF;CAEA,QAAQ,KAAK,4BAA4B;CACzC,KAAK,MAAM,WAAW,UACpB,QAAQ,KAAK,mBAAmB,OAAO,CAAC;AAE5C;AAEA,MAAM,eAAe;CACnB,KAAK;EACH,OAAO;EACP,MAAM;EACN,aAAa;CACf;CACA,QAAQ;EACN,OAAO;EACP,MAAM;EACN,aAAa;CACf;CACA,MAAM;EACJ,OAAO;EACP,MAAM;EACN,SAAS;EACT,aAAa;CACf;CACA,OAAO;EACL,MAAM;EACN,SAAS;EACT,aAAa;CACf;AACF;AASA,SAAS,sBAAsB,OAAuB;CACpD,MAAM,gBAAgB,MAAM,KAAK;CACjC,IAAI,CAAC,eACH,MAAM,IAAI,MAAM,oCAAoC;CAEtD,OAAO;AACT;AAEA,eAAsB,YAAY,SAA4C;CAE5E,CAAA,MADwB,OAAO,qBAAA,CACrB,qBAAqB;CAE/B,MAAM,YAAY;CAElB,MAAM,aAAa;EACjB,GAAI,QAAQ,QAAQ,KAAA,IAAY,CAAC,KAAK,IAAI,CAAC;EAC3C,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,QAAQ,IAAI,CAAC;EACjD,GAAI,QAAQ,OAAO,CAAC,MAAM,IAAI,CAAC;EAC/B,GAAI,QAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;CACnC;CACA,IAAI,WAAW,SAAS,GACtB,MAAM,IAAI,MACR,oEACF;CAGF,MAAM,YAAY,WAAW,MAAM;CAEnC,IAAI,cAAc,OAAO;EACvB,MAAM,SAAS,sBAAsB,QAAQ,OAAO,EAAE;EACtD,MAAM,cAAc,qBAAqB;EACzC,IAAI,YAAY,SAAS,MAAM,GAAG;GAChC,QAAQ,KACN,+BAA+B,YAAY,OAAO,wBACpD;GACA;EACF;EACA,MAAM,aAAa,qBAAqB,CAAC,GAAG,aAAa,MAAM,CAAC;EAChE,QAAQ,QACN,oBAAoB,MAAM,YAAY,IAAI,WAAW,OAAO,wBAC9D;EACA;CACF;CAEA,IAAI,cAAc,UAAU;EAC1B,MAAM,SAAS,sBAAsB,QAAQ,UAAU,EAAE;EACzD,MAAM,cAAc,qBAAqB;EACzC,IAAI,CAAC,YAAY,SAAS,MAAM,GAAG;GACjC,QAAQ,KACN,sBAAsB,YAAY,OAAO,wBAC3C;GACA;EACF;EACA,MAAM,aAAa,qBACjB,YAAY,QAAQ,QAAQ,QAAQ,MAAM,CAC5C;EACA,QAAQ,QACN,wBAAwB,MAAM,YAAY,IAAI,WAAW,OAAO,wBAClE;EACA;CACF;CAEA,IAAI,cAAc,SAAS;EACzB,qBAAqB,CAAC,CAAC;EACvB,QAAQ,QAAQ,6BAA6B,MAAM,YAAY,EAAE;EACjE;CACF;CAEA,MAAM,cAAc,qBAAqB;CACzC,IAAI,YAAY,WAAW,GAAG;EAC5B,QAAQ,KACN,iFACF;EACA;CACF;CACA,QAAQ,KAAK,sBAAsB;CACnC,KAAK,MAAM,OAAO,aAChB,QAAQ,KAAK,KAAK,KAAK;AAE3B;AAEA,MAAM,YAAY,cAAc;CAC9B,MAAM;EACJ,MAAM;EACN,aACE;CACJ;CACA,MAAM;CACN,IAAI,EAAE,QAAQ;EACZ,OAAO,aAAa;GAClB,OAAO,KAAK;GACZ,UAAU,KAAK;GACf,SAAS,KAAK;GACd,WAAW,KAAK;EAClB,CAAC;CACH;AACF,CAAC;AAED,MAAM,WAAW,cAAc;CAC7B,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,MAAM;CACN,IAAI,EAAE,QAAQ;EACZ,OAAO,YAAY;GACjB,KAAK,KAAK;GACV,QAAQ,KAAK;GACb,MAAM,KAAK;GACX,OAAO,KAAK;EACd,CAAC;CACH;AACF,CAAC;AAED,MAAM,YAAY,cAAc;CAC9B,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,MAAM;CACN,IAAI,EAAE,QAAQ;EACZ,OAAO,aAAa;GAClB,MAAM,KAAK;GACX,KAAK,KAAK;EACZ,CAAC;CACH;AACF,CAAC;AAED,MAAa,OAAO,cAAc;CAChC,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,MAAM;CACN,aAAa;EACX,OAAO;EACP,OAAO;EACP,MAAM;CACR;CACA,IAAI,EAAE,QAAQ;EACZ,KAAK,KAAK,EAAE,MAAM,GAAA,CAAI,KAAK,GACzB;EAGF,OAAO,aAAa;GAClB,OAAO,KAAK;GACZ,UAAU,KAAK;GACf,SAAS,KAAK;GACd,WAAW,KAAK;EAClB,CAAC;CACH;AACF,CAAC"}

package/dist/config-2Dli6AI8.js.map

@@ -1 +1 @@
-{"version":3,"file":"config-2Dli6AI8.js","names":["fs"],"sources":["../src/lib/atomic-file.ts","../src/lib/paths.ts","../src/lib/config-store.ts","../src/lib/model-policy.ts","../src/lib/provider-config.ts"],"sourcesContent":["import { randomBytes } from \"node:crypto\"\nimport fs from \"node:fs\"\nimport path from \"node:path\"\n\nconst TEMP_FILE_RANDOM_BYTES = 8\n\n// The file-level fsync persists the contents, but the rename only updates the\n// parent directory entry, which needs its own fsync to survive a crash or\n// power loss. Best-effort: the rename has already taken effect, so a failure\n// here only weakens crash durability and must not fail the write. Directory\n// fsync is not supported on Windows (opening a directory handle fails there).\nconst fsyncDirectory = (directory: string): void => {\n  if (process.platform === \"win32\") {\n    return\n  }\n\n  let directoryFd: number | undefined\n  try {\n    directoryFd = fs.openSync(directory, \"r\")\n    fs.fsyncSync(directoryFd)\n  } catch (error) {\n    console.warn(`Failed to fsync directory: ${directory}`, error)\n  } finally {\n    if (directoryFd !== undefined) {\n      try {\n        fs.closeSync(directoryFd)\n      } catch {\n        // Preserve the fsync warning.\n      }\n    }\n  }\n}\n\nexport function writeFileAtomically(filePath: string, content: string): void {\n  const directory = path.dirname(filePath)\n  const tempPath = path.join(\n    directory,\n    `.${path.basename(filePath)}.${process.pid}.${randomBytes(TEMP_FILE_RANDOM_BYTES).toString(\"hex\")}.tmp`,\n  )\n\n  fs.mkdirSync(directory, { recursive: true })\n\n  let fileDescriptor: number | undefined\n  let tempFileCreated = false\n  try {\n    fileDescriptor = fs.openSync(tempPath, \"wx\", 0o600)\n    tempFileCreated = true\n    fs.writeFileSync(fileDescriptor, content, \"utf8\")\n    fs.fsyncSync(fileDescriptor)\n    fs.closeSync(fileDescriptor)\n    fileDescriptor = undefined\n    fs.renameSync(tempPath, filePath)\n    tempFileCreated = false\n    fsyncDirectory(directory)\n  } catch (error) {\n    if (fileDescriptor !== undefined) {\n      try {\n        fs.closeSync(fileDescriptor)\n      } catch {\n        // Preserve the original write error.\n      }\n    }\n\n    if (tempFileCreated) {\n      try {\n        fs.rmSync(tempPath, { force: true })\n      } catch {\n        // Preserve the original write error.\n      }\n    }\n\n    throw error\n  }\n}\n","import fs from \"node:fs/promises\"\nimport os from \"node:os\"\nimport path from \"node:path\"\n\nconst AUTH_APP = process.env.COPILOT_API_OAUTH_APP?.trim() || \"\"\nconst ENTERPRISE_PREFIX = process.env.COPILOT_API_ENTERPRISE_URL ? \"ent_\" : \"\"\n\nconst DEFAULT_DIR = path.join(os.homedir(), \".local\", \"share\", \"copilot-api\")\nconst APP_DIR = process.env.COPILOT_API_HOME || DEFAULT_DIR\n\nconst GITHUB_TOKEN_PATH = path.join(\n  APP_DIR,\n  AUTH_APP,\n  ENTERPRISE_PREFIX + \"github_token\",\n)\nconst CODEX_CREDENTIAL_PATH = path.join(APP_DIR, \"codex_credentials.json\")\nconst CONFIG_PATH = path.join(APP_DIR, \"config.json\")\n\nexport const PATHS = {\n  APP_DIR,\n  GITHUB_TOKEN_PATH,\n  CODEX_CREDENTIAL_PATH,\n  CONFIG_PATH,\n}\n\nexport async function ensurePaths(): Promise<void> {\n  await fs.mkdir(path.join(PATHS.APP_DIR, AUTH_APP), { recursive: true })\n  await ensureFile(PATHS.GITHUB_TOKEN_PATH)\n  await ensureFile(PATHS.CONFIG_PATH)\n}\n\nasync function ensureFile(filePath: string): Promise<void> {\n  try {\n    await fs.access(filePath, fs.constants.W_OK)\n  } catch {\n    await fs.writeFile(filePath, \"\")\n    await fs.chmod(filePath, 0o600)\n  }\n}\n","import consola from \"consola\"\nimport { randomBytes } from \"node:crypto\"\nimport fs from \"node:fs\"\n\nimport type { TokenUsagePricingConfig } from \"~/lib/token-usage/pricing\"\n\nimport { writeFileAtomically } from \"./atomic-file\"\nimport { PATHS } from \"./paths\"\n\nexport interface AppConfig {\n  auth?: {\n    apiKeys?: Array<string>\n    adminApiKey?: string\n  }\n  providers?: Record<string, ProviderConfig>\n  modelMappings?: Record<string, string>\n  extraPrompts?: Record<string, string>\n  smallModel?: string\n  contextManagement?: ContextManagementConfig\n  modelResponsesApiCompactThresholds?: Record<string, number>\n  modelReasoningEfforts?: Record<\n    string,\n    \"none\" | \"minimal\" | \"low\" | \"medium\" | \"high\" | \"xhigh\" | \"max\"\n  >\n  useMessagesApi?: boolean\n  useResponsesApiWebSocket?: boolean\n  upstreamTransport?: UpstreamTransportConfig\n  anthropicApiKey?: string\n  useResponsesApiWebSearch?: boolean\n  alphaSearchCodexPriority?: boolean\n  alphaSearchModel?: string\n  // Copilot rejects Anthropic's web_search server tool on /v1/messages, so a\n  // Claude request that only asks for web search is switched to this model.\n  // A `provider/model` alias is passed straight through to that provider's\n  // (websearch-capable) message API, while a plain GPT model runs the search\n  // via /responses. Leave unset to disable (the tool is then stripped).\n  // Mixing web_search with other tools is not supported.\n  messageApiWebSearchModel?: string\n  // Model used for Claude Code background security-monitor requests on\n  // /v1/messages and provider message APIs: requests without tools, with\n  // `stop_sequences: [\"</block>\"]` and a system block starting with\n  // \"You are a security monitor for autonomous AI coding agents.\".\n  // A `provider/model` alias is forwarded to that provider's message API on\n  // the top-level route. Provider message routes use the configured value on\n  // their current provider. Leave empty to disable (default).\n  claudeAutoModel?: string\n  claudeTokenMultiplier?: number\n}\n\nexport interface ContextManagementConfig {\n  messages?: boolean\n  responses?: boolean\n}\n\nexport interface UpstreamTransportConfig {\n  headersTimeoutMs?: number\n  streamInactivityTimeoutMs?: number\n  websocketMaxBufferedBytes?: number\n  websocketMaxBufferedMessages?: number\n  websocketOpenTimeoutMs?: number\n  websocketPoolIdleTimeoutMs?: number\n}\n\nexport const defaultUpstreamTransportConfig = {\n  headersTimeoutMs: 5 * 60 * 1000,\n  streamInactivityTimeoutMs: 5 * 60 * 1000,\n  websocketMaxBufferedBytes: 8 * 1024 * 1024,\n  websocketMaxBufferedMessages: 1024,\n  websocketOpenTimeoutMs: 30_000,\n  websocketPoolIdleTimeoutMs: 60_000,\n} satisfies Required<UpstreamTransportConfig>\n\nexport interface ModelConfig {\n  temperature?: number\n  topP?: number\n  topK?: number\n  extraBody?: Record<string, unknown>\n  contextCache?: boolean\n  contextWindow?: number\n  maxOutputTokens?: number\n  inputModalities?: Array<\"text\" | \"image\">\n  reasoningEfforts?: Array<CodexReasoningEffort>\n  defaultReasoningEffort?: CodexReasoningEffort\n  pricing?: TokenUsagePricingConfig\n  supportPdf?: boolean\n  toolContentSupportType?: Array<ToolContentSupportType>\n  type?: ProviderType\n  // Message field used to carry assistant thinking text when forwarding\n  // requests upstream; defaults to \"reasoning_content\"\n  reasoningField?: ModelReasoningField\n}\n\nexport type ModelReasoningField = \"reasoning\" | \"reasoning_content\"\n\nexport type CodexReasoningEffort =\n  | \"none\"\n  | \"minimal\"\n  | \"low\"\n  | \"medium\"\n  | \"high\"\n  | \"xhigh\"\n  | \"max\"\n  | \"ultra\"\n\nexport type ProviderAuthType =\n  | \"authorization\"\n  | \"azure-entra\"\n  | \"oauth2\"\n  | \"x-api-key\"\nexport const SUPPORTED_PROVIDER_TYPES = [\n  \"anthropic\",\n  \"openai-compatible\",\n  \"openai-responses\",\n] as const\nexport type ProviderType = (typeof SUPPORTED_PROVIDER_TYPES)[number]\nexport type ToolContentSupportType = \"array\" | \"image\" | \"pdf\"\n\nexport interface ProviderConfig {\n  type?: string\n  enabled?: boolean\n  baseUrl?: string\n  apiKey?: string\n  authType?: ProviderAuthType\n  pricingCurrency?: string\n  models?: Record<string, ModelConfig>\n}\n\nconst gpt5ExplorationPrompt = `## Exploration and reading files\n- **Think first.** Before any tool call, decide ALL files/resources you will need.\n- **Batch everything.** If you need multiple files (even from different places), read them together.\n- **multi_tool_use.parallel** Use multi_tool_use.parallel to parallelize tool calls and only this.\n- **Only make sequential calls if you truly cannot know the next file without seeing a result first.**\n- **Workflow:** (a) plan all needed reads → (b) issue one parallel batch → (c) analyze results → (d) repeat if new, unpredictable reads arise.`\n\nconst modelResponsesApiCompactThresholds = {\n  \"gpt-5.4\": 272_000 * 0.8,\n  \"gpt-5.5\": 272_000 * 0.8,\n}\n\nexport const defaultContextManagement = {\n  messages: true,\n  responses: false,\n} satisfies Required<ContextManagementConfig>\n\nexport const defaultConfig: AppConfig = {\n  auth: {\n    apiKeys: [],\n  },\n  providers: {},\n  modelMappings: {},\n  extraPrompts: {\n    \"gpt-5-mini\": gpt5ExplorationPrompt,\n  },\n  smallModel: \"gpt-5-mini\",\n  contextManagement: defaultContextManagement,\n  modelResponsesApiCompactThresholds,\n  modelReasoningEfforts: {\n    \"gpt-5-mini\": \"low\",\n  },\n  useMessagesApi: true,\n  useResponsesApiWebSocket: true,\n  upstreamTransport: defaultUpstreamTransportConfig,\n  useResponsesApiWebSearch: true,\n  alphaSearchCodexPriority: true,\n  alphaSearchModel: \"gpt-5-mini\",\n  messageApiWebSearchModel: \"gpt-5-mini\",\n}\n\nlet cachedConfig: AppConfig | null = null\n\nfunction normalizeAdminApiKey(adminApiKey: unknown): string | null {\n  if (typeof adminApiKey !== \"string\") {\n    if (adminApiKey !== undefined) {\n      consola.warn(\n        \"Invalid auth.adminApiKey config. Expected a non-empty string.\",\n      )\n    }\n    return null\n  }\n\n  const normalizedAdminApiKey = adminApiKey.trim()\n  if (!normalizedAdminApiKey) {\n    consola.warn(\n      \"Invalid auth.adminApiKey config. Expected a non-empty string.\",\n    )\n    return null\n  }\n\n  return normalizedAdminApiKey\n}\n\nfunction generateAdminApiKey(): string {\n  return randomBytes(32).toString(\"hex\")\n}\n\nfunction isNodeError(error: unknown): error is NodeJS.ErrnoException {\n  return error instanceof Error && \"code\" in error\n}\n\nfunction ensureConfigFile(): void {\n  try {\n    fs.accessSync(PATHS.CONFIG_PATH, fs.constants.F_OK)\n  } catch (error) {\n    if (!isNodeError(error) || error.code !== \"ENOENT\") {\n      throw error\n    }\n\n    writeFileAtomically(\n      PATHS.CONFIG_PATH,\n      `${JSON.stringify(defaultConfig, null, 2)}\\n`,\n    )\n  }\n}\n\nfunction readConfigFromDisk(): AppConfig {\n  ensureConfigFile()\n  const raw = fs.readFileSync(PATHS.CONFIG_PATH, \"utf8\")\n  if (!raw.trim()) {\n    writeFileAtomically(\n      PATHS.CONFIG_PATH,\n      `${JSON.stringify(defaultConfig, null, 2)}\\n`,\n    )\n    return defaultConfig\n  }\n\n  try {\n    return JSON.parse(raw) as AppConfig\n  } catch (error) {\n    // Fail closed: falling back to the default config here would let the\n    // startup merge overwrite the corrupt file (discarding providers, API\n    // keys, and model mappings) and, because the default has no apiKeys,\n    // silently disable API key authentication on normal routes.\n    const message = `Config file is not valid JSON: ${PATHS.CONFIG_PATH}. Refusing to start with the default config. Fix the JSON syntax or delete the file to regenerate a fresh config.`\n    consola.error(message, error)\n    throw new Error(message, { cause: error })\n  }\n}\n\nexport function readEditableConfigFromDisk(): AppConfig {\n  try {\n    const raw = fs.readFileSync(PATHS.CONFIG_PATH, \"utf8\")\n    if (!raw.trim()) {\n      return {}\n    }\n    return JSON.parse(raw) as AppConfig\n  } catch (error) {\n    if (isNodeError(error) && error.code === \"ENOENT\") {\n      return {}\n    }\n    if (error instanceof SyntaxError) {\n      throw new Error(`Config file is not valid JSON: ${PATHS.CONFIG_PATH}`)\n    }\n    throw error\n  }\n}\n\nexport function writeConfigToDisk(config: AppConfig): void {\n  writeFileAtomically(PATHS.CONFIG_PATH, `${JSON.stringify(config, null, 2)}\\n`)\n}\n\nexport function setConfiguredApiKeys(apiKeys: Array<string>): Array<string> {\n  const normalizedKeys = apiKeys\n    .map((key) => key.trim())\n    .filter((key) => key.length > 0)\n  const uniqueKeys = [...new Set(normalizedKeys)]\n\n  const editableConfig = readEditableConfigFromDisk()\n  writeConfigToDisk({\n    ...editableConfig,\n    auth: {\n      ...editableConfig.auth,\n      apiKeys: uniqueKeys,\n    },\n  })\n  reloadConfig()\n  return [...uniqueKeys]\n}\n\nfunction mergeDefaultConfig(config: AppConfig): {\n  mergedConfig: AppConfig\n  changed: boolean\n} {\n  const extraPrompts = config.extraPrompts ?? {}\n  const defaultExtraPrompts = defaultConfig.extraPrompts ?? {}\n  const responsesApiCompactThresholds =\n    config.modelResponsesApiCompactThresholds ?? {}\n  const defaultResponsesApiCompactThresholds =\n    defaultConfig.modelResponsesApiCompactThresholds ?? {}\n  const modelReasoningEfforts = config.modelReasoningEfforts ?? {}\n  const defaultModelReasoningEfforts = defaultConfig.modelReasoningEfforts ?? {}\n  const contextManagement = normalizeContextManagementConfig(\n    config.contextManagement,\n  )\n  const {\n    changed: upstreamTransportMigrated,\n    migrated: migratedUpstreamTransport,\n  } = migrateUpstreamTransportConfig(config)\n\n  const upstreamTransport = normalizeUpstreamTransportConfig(\n    migratedUpstreamTransport,\n  )\n  const defaultContextManagementConfig = defaultConfig.contextManagement ?? {}\n\n  const missingExtraPromptModels = Object.keys(defaultExtraPrompts).filter(\n    (model) => !Object.hasOwn(extraPrompts, model),\n  )\n\n  const missingReasoningEffortModels = Object.keys(\n    defaultModelReasoningEfforts,\n  ).filter((model) => !Object.hasOwn(modelReasoningEfforts, model))\n  const missingResponsesApiCompactThresholdModels = Object.keys(\n    defaultResponsesApiCompactThresholds,\n  ).filter((model) => !Object.hasOwn(responsesApiCompactThresholds, model))\n  const missingContextManagementKeys = Object.keys(\n    defaultContextManagementConfig,\n  ).filter((key) => !Object.hasOwn(contextManagement, key))\n\n  const hasExtraPromptChanges = missingExtraPromptModels.length > 0\n  const hasReasoningEffortChanges = missingReasoningEffortModels.length > 0\n  const hasResponsesApiCompactThresholdChanges =\n    missingResponsesApiCompactThresholdModels.length > 0\n  const hasContextManagementChanges = missingContextManagementKeys.length > 0\n  const hasUpstreamTransportChanges = Object.entries(upstreamTransport).some(\n    ([key, value]) =>\n      migratedUpstreamTransport[key as keyof UpstreamTransportConfig] !== value,\n  )\n\n  if (\n    !hasExtraPromptChanges\n    && !hasReasoningEffortChanges\n    && !hasResponsesApiCompactThresholdChanges\n    && !hasContextManagementChanges\n    && !hasUpstreamTransportChanges\n    && !upstreamTransportMigrated\n  ) {\n    return { mergedConfig: config, changed: false }\n  }\n\n  // The deprecated responsesTransport key is dropped once it is migrated.\n  const { responsesTransport: _legacyResponsesTransport, ...persistedConfig } =\n    config as LegacyAppConfig\n\n  return {\n    mergedConfig: {\n      ...persistedConfig,\n      contextManagement: {\n        ...defaultContextManagementConfig,\n        ...contextManagement,\n      },\n      extraPrompts: {\n        ...defaultExtraPrompts,\n        ...extraPrompts,\n      },\n      modelResponsesApiCompactThresholds: {\n        ...defaultResponsesApiCompactThresholds,\n        ...responsesApiCompactThresholds,\n      },\n      modelReasoningEfforts: {\n        ...defaultModelReasoningEfforts,\n        ...modelReasoningEfforts,\n      },\n      upstreamTransport,\n    },\n    changed: true,\n  }\n}\n\nfunction normalizeContextManagementConfig(\n  value: ContextManagementConfig | undefined,\n): ContextManagementConfig {\n  if (!value || typeof value !== \"object\") {\n    return {}\n  }\n\n  return {\n    ...(typeof value.messages === \"boolean\" ?\n      { messages: value.messages }\n    : {}),\n    ...(typeof value.responses === \"boolean\" ?\n      { responses: value.responses }\n    : {}),\n  }\n}\n\n// responsesTransport was renamed to upstreamTransport, and headersTimeoutMsV2\n// to headersTimeoutMs, when this block started applying to every upstream HTTP\n// transport. Legacy configs are migrated once during the startup merge and the\n// old keys are dropped from disk.\ninterface LegacyAppConfig extends AppConfig {\n  responsesTransport?: LegacyUpstreamTransportConfig\n}\n\ninterface LegacyUpstreamTransportConfig extends UpstreamTransportConfig {\n  headersTimeoutMsV2?: number\n}\n\nconst migrateUpstreamTransportConfig = (\n  config: AppConfig,\n): { changed: boolean; migrated: UpstreamTransportConfig } => {\n  const legacyBlock = (config as LegacyAppConfig).responsesTransport\n  const { headersTimeoutMsV2, ...migrated } = (config.upstreamTransport\n    ?? legacyBlock\n    ?? {}) as LegacyUpstreamTransportConfig\n\n  const hasLegacyBlock = legacyBlock !== undefined\n  const hasLegacyHeadersTimeout = headersTimeoutMsV2 !== undefined\n  if (!hasLegacyBlock && !hasLegacyHeadersTimeout) {\n    return { changed: false, migrated }\n  }\n\n  consola.info(\n    \"Migrating deprecated transport config: responsesTransport -> upstreamTransport, headersTimeoutMsV2 -> headersTimeoutMs\",\n  )\n\n  return {\n    changed: true,\n    migrated:\n      migrated.headersTimeoutMs === undefined && hasLegacyHeadersTimeout ?\n        { ...migrated, headersTimeoutMs: headersTimeoutMsV2 }\n      : migrated,\n  }\n}\n\nfunction ensureAdminApiKey(config: AppConfig): {\n  mergedConfig: AppConfig\n  changed: boolean\n} {\n  const normalizedAdminApiKey = normalizeAdminApiKey(config.auth?.adminApiKey)\n  if (normalizedAdminApiKey) {\n    if (config.auth?.adminApiKey === normalizedAdminApiKey) {\n      return { mergedConfig: config, changed: false }\n    }\n\n    return {\n      mergedConfig: {\n        ...config,\n        auth: {\n          ...config.auth,\n          adminApiKey: normalizedAdminApiKey,\n        },\n      },\n      changed: true,\n    }\n  }\n\n  const editableConfig = readEditableConfigFromDisk()\n  const { mergedConfig } = mergeDefaultConfig({\n    ...editableConfig,\n    auth: {\n      ...editableConfig.auth,\n      adminApiKey: generateAdminApiKey(),\n    },\n  })\n\n  return { mergedConfig, changed: true }\n}\n\nexport function mergeConfigWithDefaults(): AppConfig {\n  const config = readConfigFromDisk()\n  const { mergedConfig, changed } = mergeDefaultConfig(config)\n  const {\n    mergedConfig: mergedConfigWithAdminApiKey,\n    changed: adminApiKeyChanged,\n  } = ensureAdminApiKey(mergedConfig)\n  const shouldPersistConfig = changed || adminApiKeyChanged\n\n  if (shouldPersistConfig) {\n    try {\n      writeConfigToDisk(mergedConfigWithAdminApiKey)\n    } catch (writeError) {\n      if (adminApiKeyChanged) {\n        throw writeError\n      }\n\n      consola.warn(\n        \"Failed to write merged default config to config file\",\n        writeError,\n      )\n    }\n  }\n\n  cachedConfig = mergedConfigWithAdminApiKey\n  return mergedConfigWithAdminApiKey\n}\n\nexport function getConfig(): AppConfig {\n  cachedConfig ??= mergeDefaultConfig(readConfigFromDisk()).mergedConfig\n  return cachedConfig\n}\n\nexport function reloadConfig(): AppConfig {\n  return mergeConfigWithDefaults()\n}\n\nexport function isMessagesApiEnabled(): boolean {\n  const config = getConfig()\n  return config.useMessagesApi ?? true\n}\n\nexport function isResponsesApiWebSocketEnabled(): boolean {\n  const config = getConfig()\n  return config.useResponsesApiWebSocket ?? true\n}\n\n// Applies to every upstream HTTP transport (Copilot Chat Completions and\n// Messages, Codex Responses, and provider-forwarded requests), not only the\n// Responses API.\nexport function getUpstreamTransportConfig(): Required<UpstreamTransportConfig> {\n  return normalizeUpstreamTransportConfig(getConfig().upstreamTransport)\n}\n\nexport const normalizeUpstreamTransportConfig = (\n  configured: UpstreamTransportConfig | undefined,\n): Required<UpstreamTransportConfig> => ({\n  headersTimeoutMs: positiveIntegerOrDefault(\n    configured?.headersTimeoutMs,\n    defaultUpstreamTransportConfig.headersTimeoutMs,\n  ),\n  streamInactivityTimeoutMs: positiveIntegerOrDefault(\n    configured?.streamInactivityTimeoutMs,\n    defaultUpstreamTransportConfig.streamInactivityTimeoutMs,\n  ),\n  websocketMaxBufferedBytes: positiveIntegerOrDefault(\n    configured?.websocketMaxBufferedBytes,\n    defaultUpstreamTransportConfig.websocketMaxBufferedBytes,\n  ),\n  websocketMaxBufferedMessages: positiveIntegerOrDefault(\n    configured?.websocketMaxBufferedMessages,\n    defaultUpstreamTransportConfig.websocketMaxBufferedMessages,\n  ),\n  websocketOpenTimeoutMs: positiveIntegerOrDefault(\n    configured?.websocketOpenTimeoutMs,\n    defaultUpstreamTransportConfig.websocketOpenTimeoutMs,\n  ),\n  websocketPoolIdleTimeoutMs: positiveIntegerOrDefault(\n    configured?.websocketPoolIdleTimeoutMs,\n    defaultUpstreamTransportConfig.websocketPoolIdleTimeoutMs,\n  ),\n})\n\nconst positiveIntegerOrDefault = (value: unknown, fallback: number): number => {\n  if (typeof value !== \"number\" || !Number.isFinite(value)) return fallback\n\n  const normalized = Math.floor(value)\n  return normalized > 0 ? normalized : fallback\n}\n\nexport function getAnthropicApiKey(): string | undefined {\n  const config = getConfig()\n  return config.anthropicApiKey ?? process.env.ANTHROPIC_API_KEY ?? undefined\n}\n\nexport function isResponsesApiWebSearchEnabled(): boolean {\n  const config = getConfig()\n  return config.useResponsesApiWebSearch ?? true\n}\n\nexport function isAlphaSearchCodexPriorityEnabled(): boolean {\n  const config = getConfig()\n  return config.alphaSearchCodexPriority ?? true\n}\n\nexport function getAlphaSearchModel(): string | undefined {\n  const model = getConfig().alphaSearchModel ?? \"gpt-5-mini\"\n  return model.trim() || undefined\n}\n\nexport function getMessageApiWebSearchModel(): string | undefined {\n  const config = getConfig()\n  const model = config.messageApiWebSearchModel ?? \"gpt-5-mini\"\n  return model && model.trim().length > 0 ? model : undefined\n}\n\nexport function getClaudeAutoModel(): string | undefined {\n  const config = getConfig()\n  const model = config.claudeAutoModel\n  return model && model.trim().length > 0 ? model.trim() : undefined\n}\n\nexport function getClaudeTokenMultiplier(): number {\n  const config = getConfig()\n  return config.claudeTokenMultiplier ?? 1.15\n}\n","import {\n  defaultConfig,\n  defaultContextManagement,\n  getConfig,\n  readEditableConfigFromDisk,\n  reloadConfig,\n  writeConfigToDisk,\n} from \"./config-store\"\n\nconst GPT_MODEL_PATTERN = /^gpt-(\\d+)(?:\\.(\\d+))?/\n\nfunction isGpt53OrAbove(model: string): boolean {\n  const match = GPT_MODEL_PATTERN.exec(model)\n  if (!match) {\n    return false\n  }\n  const majorVersion = Number.parseInt(match[1], 10)\n  if (majorVersion > 5) {\n    return true\n  }\n  if (majorVersion !== 5) {\n    return false\n  }\n  const minorVersion = match[2] ? Number.parseInt(match[2], 10) : 0\n  return minorVersion >= 3\n}\n\nexport function isGpt56OrAbove(model: string): boolean {\n  const match = GPT_MODEL_PATTERN.exec(model)\n  if (!match) {\n    return false\n  }\n  const majorVersion = Number.parseInt(match[1], 10)\n  if (majorVersion > 5) {\n    return true\n  }\n  if (majorVersion !== 5) {\n    return false\n  }\n  const minorVersion = match[2] ? Number.parseInt(match[2], 10) : 0\n  return minorVersion >= 6\n}\n\nconst gpt5CommentaryPrompt = `# Working with the user\n\nYou interact with the user through a terminal. You have 2 ways of communicating with the users:  \n- Share intermediary updates in \\`commentary\\` channel.  \n- After you have completed all your work, send a message to the \\`final\\` channel.  \n\n## Intermediary updates\n\n- Intermediary updates go to the \\`commentary\\` channel.\n- User updates are short updates while you are working, they are NOT final answers.\n- You use 1-2 sentence user updates to communicate progress and new information to the user as you are doing work.\n- Do not begin responses with conversational interjections or meta commentary. Avoid openers such as acknowledgements (“Done —”, “Got it”, “Great question, ”) or framing phrases.\n- You provide user updates frequently, every 20s.\n- Before exploring or doing substantial work, you start with a user update acknowledging the request and explaining your first step. You should include your understanding of the user request and explain what you will do. Avoid commenting on the request or using starters such as \"Got it -\" or \"Understood -\" etc.\n- When exploring, e.g. searching, reading files, you provide user updates as you go, every 20s, explaining what context you are gathering and what you've learned. Vary your sentence structure when providing these updates to avoid sounding repetitive - in particular, don't start each sentence the same way.\n- After you have sufficient context, and the work is substantial, you provide a longer plan (this is the only user update that may be longer than 2 sentences and can contain formatting).\n- Before performing file edits of any kind, you provide updates explaining what edits you are making.\n- As you are thinking, you very frequently provide updates even if not taking any actions, informing the user of your progress. You interrupt your thinking and send multiple updates in a row if thinking for more than 100 words.\n- Tone of your updates MUST match your personality.`\n\nexport function getExtraPromptForModel(model: string): string {\n  const config = getConfig()\n  const userPrompt = config.extraPrompts?.[model]\n  if (userPrompt !== undefined) {\n    return userPrompt\n  }\n  return isGpt53OrAbove(model) ? gpt5CommentaryPrompt : \"\"\n}\n\nexport function getModelMappings(): Record<string, string> {\n  const config = getConfig()\n  const modelMappings = config.modelMappings\n  if (!modelMappings) {\n    return { ...defaultConfig.modelMappings }\n  }\n\n  const validMappings: Record<string, string> = {}\n  for (const [sourceModel, targetModel] of Object.entries(modelMappings)) {\n    if (\n      !sourceModel\n      || typeof targetModel !== \"string\"\n      || targetModel.length === 0\n    ) {\n      continue\n    }\n    validMappings[sourceModel] = targetModel\n  }\n\n  return validMappings\n}\n\nfunction validateModelMappings(\n  modelMappings: Record<string, string>,\n): Record<string, string> {\n  const validatedMappings: Record<string, string> = {}\n  for (const [sourceModel, targetModel] of Object.entries(modelMappings)) {\n    if (!sourceModel || !targetModel) {\n      throw new Error(\n        \"Each model mapping must use non-empty source and target values.\",\n      )\n    }\n    validatedMappings[sourceModel] = targetModel\n  }\n\n  return validatedMappings\n}\n\nexport function setModelMappings(\n  modelMappings: Record<string, string>,\n): Record<string, string> {\n  const nextConfig = {\n    ...readEditableConfigFromDisk(),\n    modelMappings: validateModelMappings(modelMappings),\n  }\n\n  writeConfigToDisk(nextConfig)\n  reloadConfig()\n  return getModelMappings()\n}\n\nexport function resolveMappedModel(model: string): string {\n  return getModelMappings()[model] ?? model\n}\n\nexport function getSmallModel(): string {\n  const config = getConfig()\n  return config.smallModel ?? \"gpt-5-mini\"\n}\n\nexport function isContextManagementEnabledForMessages(): boolean {\n  const config = getConfig()\n  return config.contextManagement?.messages ?? defaultContextManagement.messages\n}\n\nexport function isContextManagementEnabledForResponses(): boolean {\n  const config = getConfig()\n  return (\n    config.contextManagement?.responses ?? defaultContextManagement.responses\n  )\n}\n\nexport function getModelResponsesApiCompactThreshold(\n  model: string,\n): number | undefined {\n  const config = getConfig()\n  const threshold = config.modelResponsesApiCompactThresholds?.[model]\n\n  if (\n    typeof threshold !== \"number\"\n    || !Number.isFinite(threshold)\n    || threshold <= 0\n  ) {\n    return undefined\n  }\n\n  return threshold\n}\n\nexport function getReasoningEffortForModel(\n  model: string,\n): \"none\" | \"minimal\" | \"low\" | \"medium\" | \"high\" | \"xhigh\" | \"max\" {\n  const config = getConfig()\n  const userEffort = config.modelReasoningEfforts?.[model]\n  if (userEffort !== undefined) {\n    return userEffort\n  }\n  return isGpt53OrAbove(model) ? \"xhigh\" : \"high\"\n}\n","import consola from \"consola\"\n\nimport {\n  SUPPORTED_PROVIDER_TYPES,\n  getConfig,\n  readEditableConfigFromDisk,\n  reloadConfig,\n  writeConfigToDisk,\n  type ModelConfig,\n  type ProviderAuthType,\n  type ProviderConfig,\n  type ProviderType,\n} from \"./config-store\"\n\nexport interface ResolvedProviderConfig {\n  name: string\n  type: ProviderType\n  baseUrl: string\n  apiKey: string\n  authType: ProviderAuthType\n  pricingCurrency?: string\n  models?: Record<string, ModelConfig>\n}\n\nconst OPENCODE_ANTHROPIC_MODEL_PATTERN = /^(?:qwen|minimax)/iu\nconst OPENCODE_RESPONSES_MODEL_PATTERN = /^(?:gpt|grok|muse-spark)(?:[-_.]|$)/iu\n\nexport function normalizeProviderBaseUrl(url: string): string {\n  return url.trim().replace(/\\/+$/u, \"\")\n}\n\nexport function isSupportedProviderType(value: string): value is ProviderType {\n  return SUPPORTED_PROVIDER_TYPES.includes(value as ProviderType)\n}\n\nfunction getDefaultProviderAuthType(\n  providerType: ProviderType,\n): ProviderAuthType {\n  return providerType === \"anthropic\" ? \"x-api-key\" : \"authorization\"\n}\n\nexport function resolveProviderAuthType(\n  providerName: string,\n  authType: string | undefined,\n  providerType: ProviderType,\n): ProviderAuthType {\n  const defaultAuthType = getDefaultProviderAuthType(providerType)\n  if (authType === undefined) {\n    return defaultAuthType\n  }\n\n  if (authType === \"x-api-key\") {\n    return \"x-api-key\"\n  }\n\n  if (authType === \"oauth2\") {\n    if (providerName === \"codex\") {\n      return authType\n    }\n\n    consola.warn(\n      `Provider ${providerName} has authType 'oauth2', which is only supported by the builtin codex provider, falling back to ${defaultAuthType}`,\n    )\n    return defaultAuthType\n  }\n\n  if (authType === \"authorization\" || authType === \"azure-entra\") {\n    return authType\n  }\n\n  consola.warn(\n    `Provider ${providerName} has invalid authType '${authType}', falling back to ${defaultAuthType}`,\n  )\n  return defaultAuthType\n}\n\nfunction isProviderApiKeyRequired(\n  providerName: string,\n  authType: ProviderAuthType,\n): boolean {\n  return (\n    authType !== \"azure-entra\"\n    && !(providerName === \"codex\" && authType === \"oauth2\")\n  )\n}\n\nexport function getRawProviderConfig(name: string): ProviderConfig | null {\n  const providerName = name.trim()\n  if (!providerName) {\n    return null\n  }\n\n  const config = getConfig()\n  return config.providers?.[providerName] ?? null\n}\n\nexport function setProviderConfig(\n  name: string,\n  provider: ProviderConfig,\n): ProviderConfig {\n  const providerName = name.trim()\n  if (!providerName) {\n    throw new Error(\"Provider name must be a non-empty string\")\n  }\n\n  if (isReservedProviderName(providerName)) {\n    throw new Error(\n      `Provider ${providerName} is reserved and cannot be configured in config.providers`,\n    )\n  }\n\n  const editableConfig = readEditableConfigFromDisk()\n  const nextConfig = {\n    ...editableConfig,\n    providers: {\n      ...editableConfig.providers,\n      [providerName]: provider,\n    },\n  }\n\n  writeConfigToDisk(nextConfig)\n  reloadConfig()\n  return getRawProviderConfig(providerName) ?? provider\n}\n\nexport function getProviderConfig(name: string): ResolvedProviderConfig | null {\n  const providerName = name.trim()\n  if (!providerName) {\n    return null\n  }\n\n  if (isReservedProviderName(providerName)) {\n    consola.warn(\n      `Provider ${providerName} is reserved and cannot be configured in config.providers`,\n    )\n    return null\n  }\n\n  const provider = getRawProviderConfig(providerName)\n  if (!provider) {\n    return null\n  }\n\n  if (provider.enabled === false) {\n    return null\n  }\n\n  const type = provider.type ?? \"anthropic\"\n  if (!isSupportedProviderType(type)) {\n    consola.warn(\n      `Provider ${providerName} is ignored because type '${type}' is not supported`,\n    )\n    return null\n  }\n\n  const baseUrl = normalizeProviderBaseUrl(provider.baseUrl ?? \"\")\n  const authType = resolveProviderAuthType(\n    providerName,\n    provider.authType,\n    type,\n  )\n  const apiKey = (provider.apiKey ?? \"\").trim()\n  const missingFields = [\n    ...(baseUrl ? [] : [\"baseUrl\"]),\n    ...(isProviderApiKeyRequired(providerName, authType) && !apiKey ?\n      [\"apiKey\"]\n    : []),\n  ]\n\n  if (missingFields.length > 0) {\n    consola.warn(\n      `Provider ${providerName} is enabled but missing ${missingFields.join(\" or \")}`,\n    )\n    return null\n  }\n\n  return {\n    name: providerName,\n    type,\n    baseUrl,\n    apiKey,\n    authType,\n    pricingCurrency: normalizePricingCurrency(provider.pricingCurrency),\n    models: provider.models,\n  }\n}\n\nexport function resolveEffectiveProviderType(\n  providerConfig: ResolvedProviderConfig,\n  model: string,\n): ProviderType {\n  const modelConfig = providerConfig.models?.[model]\n  if (modelConfig?.type && isSupportedProviderType(modelConfig.type)) {\n    return modelConfig.type\n  }\n\n  if (providerConfig.name === \"opencode-go\") {\n    if (OPENCODE_ANTHROPIC_MODEL_PATTERN.test(model)) {\n      return \"anthropic\"\n    }\n    if (OPENCODE_RESPONSES_MODEL_PATTERN.test(model)) {\n      return \"openai-responses\"\n    }\n  }\n\n  return providerConfig.type\n}\n\nfunction normalizePricingCurrency(\n  value: string | undefined,\n): string | undefined {\n  const currency = value?.trim().toUpperCase()\n  return currency || undefined\n}\n\nexport function listEnabledProviders(): Array<string> {\n  const config = getConfig()\n  const providerNames = Object.keys(config.providers ?? {})\n  return providerNames.filter((name) => getProviderConfig(name) !== null)\n}\n\nexport function isReservedProviderName(name: string): boolean {\n  return name.trim() === \"copilot\"\n}\n"],"mappings":";;;;;;;AAIA,MAAM,yBAAyB;AAO/B,MAAM,kBAAkB,cAA4B;CAClD,IAAI,QAAQ,aAAa,SACvB;CAGF,IAAI;CACJ,IAAI;EACF,cAAc,GAAG,SAAS,WAAW,GAAG;EACxC,GAAG,UAAU,WAAW;CAC1B,SAAS,OAAO;EACd,QAAQ,KAAK,8BAA8B,aAAa,KAAK;CAC/D,UAAU;EACR,IAAI,gBAAgB,KAAA,GAClB,IAAI;GACF,GAAG,UAAU,WAAW;EAC1B,QAAQ,CAER;CAEJ;AACF;AAEA,SAAgB,oBAAoB,UAAkB,SAAuB;CAC3E,MAAM,YAAY,KAAK,QAAQ,QAAQ;CACvC,MAAM,WAAW,KAAK,KACpB,WACA,IAAI,KAAK,SAAS,QAAQ,EAAE,GAAG,QAAQ,IAAI,GAAG,YAAY,sBAAsB,CAAC,CAAC,SAAS,KAAK,EAAE,KACpG;CAEA,GAAG,UAAU,WAAW,EAAE,WAAW,KAAK,CAAC;CAE3C,IAAI;CACJ,IAAI,kBAAkB;CACtB,IAAI;EACF,iBAAiB,GAAG,SAAS,UAAU,MAAM,GAAK;EAClD,kBAAkB;EAClB,GAAG,cAAc,gBAAgB,SAAS,MAAM;EAChD,GAAG,UAAU,cAAc;EAC3B,GAAG,UAAU,cAAc;EAC3B,iBAAiB,KAAA;EACjB,GAAG,WAAW,UAAU,QAAQ;EAChC,kBAAkB;EAClB,eAAe,SAAS;CAC1B,SAAS,OAAO;EACd,IAAI,mBAAmB,KAAA,GACrB,IAAI;GACF,GAAG,UAAU,cAAc;EAC7B,QAAQ,CAER;EAGF,IAAI,iBACF,IAAI;GACF,GAAG,OAAO,UAAU,EAAE,OAAO,KAAK,CAAC;EACrC,QAAQ,CAER;EAGF,MAAM;CACR;AACF;;;ACrEA,MAAM,WAAW,QAAQ,IAAI,uBAAuB,KAAK,KAAK;AAC9D,MAAM,oBAAoB,QAAQ,IAAI,6BAA6B,SAAS;AAE5E,MAAM,cAAc,KAAK,KAAK,GAAG,QAAQ,GAAG,UAAU,SAAS,aAAa;AAC5E,MAAM,UAAU,QAAQ,IAAI,oBAAoB;AAUhD,MAAa,QAAQ;CACnB;CACA,mBAVwB,KAAK,KAC7B,SACA,UACA,oBAAoB,cAOpB;CACA,uBAN4B,KAAK,KAAK,SAAS,wBAM/C;CACA,aANkB,KAAK,KAAK,SAAS,aAMrC;AACF;AAEA,eAAsB,cAA6B;CACjD,MAAMA,KAAG,MAAM,KAAK,KAAK,MAAM,SAAS,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;CACtE,MAAM,WAAW,MAAM,iBAAiB;CACxC,MAAM,WAAW,MAAM,WAAW;AACpC;AAEA,eAAe,WAAW,UAAiC;CACzD,IAAI;EACF,MAAMA,KAAG,OAAO,UAAUA,KAAG,UAAU,IAAI;CAC7C,QAAQ;EACN,MAAMA,KAAG,UAAU,UAAU,EAAE;EAC/B,MAAMA,KAAG,MAAM,UAAU,GAAK;CAChC;AACF;;;ACyBA,MAAa,iCAAiC;CAC5C,kBAAkB;CAClB,2BAA2B;CAC3B,2BAA2B;CAC3B,8BAA8B;CAC9B,wBAAwB;CACxB,4BAA4B;AAC9B;AAuCA,MAAa,2BAA2B;CACtC;CACA;CACA;AACF;AAcA,MAAM,wBAAwB;;;;;;AAO9B,MAAM,qCAAqC;CACzC,WAAW;CACX,WAAW;AACb;AAEA,MAAa,2BAA2B;CACtC,UAAU;CACV,WAAW;AACb;AAEA,MAAa,gBAA2B;CACtC,MAAM,EACJ,SAAS,CAAC,EACZ;CACA,WAAW,CAAC;CACZ,eAAe,CAAC;CAChB,cAAc,EACZ,cAAc,sBAChB;CACA,YAAY;CACZ,mBAAmB;CACnB;CACA,uBAAuB,EACrB,cAAc,MAChB;CACA,gBAAgB;CAChB,0BAA0B;CAC1B,mBAAmB;CACnB,0BAA0B;CAC1B,0BAA0B;CAC1B,kBAAkB;CAClB,0BAA0B;AAC5B;AAEA,IAAI,eAAiC;AAErC,SAAS,qBAAqB,aAAqC;CACjE,IAAI,OAAO,gBAAgB,UAAU;EACnC,IAAI,gBAAgB,KAAA,GAClB,QAAQ,KACN,+DACF;EAEF,OAAO;CACT;CAEA,MAAM,wBAAwB,YAAY,KAAK;CAC/C,IAAI,CAAC,uBAAuB;EAC1B,QAAQ,KACN,+DACF;EACA,OAAO;CACT;CAEA,OAAO;AACT;AAEA,SAAS,sBAA8B;CACrC,OAAO,YAAY,EAAE,CAAC,CAAC,SAAS,KAAK;AACvC;AAEA,SAAS,YAAY,OAAgD;CACnE,OAAO,iBAAiB,SAAS,UAAU;AAC7C;AAEA,SAAS,mBAAyB;CAChC,IAAI;EACF,GAAG,WAAW,MAAM,aAAa,GAAG,UAAU,IAAI;CACpD,SAAS,OAAO;EACd,IAAI,CAAC,YAAY,KAAK,KAAK,MAAM,SAAS,UACxC,MAAM;EAGR,oBACE,MAAM,aACN,GAAG,KAAK,UAAU,eAAe,MAAM,CAAC,EAAE,GAC5C;CACF;AACF;AAEA,SAAS,qBAAgC;CACvC,iBAAiB;CACjB,MAAM,MAAM,GAAG,aAAa,MAAM,aAAa,MAAM;CACrD,IAAI,CAAC,IAAI,KAAK,GAAG;EACf,oBACE,MAAM,aACN,GAAG,KAAK,UAAU,eAAe,MAAM,CAAC,EAAE,GAC5C;EACA,OAAO;CACT;CAEA,IAAI;EACF,OAAO,KAAK,MAAM,GAAG;CACvB,SAAS,OAAO;EAKd,MAAM,UAAU,kCAAkC,MAAM,YAAY;EACpE,QAAQ,MAAM,SAAS,KAAK;EAC5B,MAAM,IAAI,MAAM,SAAS,EAAE,OAAO,MAAM,CAAC;CAC3C;AACF;AAEA,SAAgB,6BAAwC;CACtD,IAAI;EACF,MAAM,MAAM,GAAG,aAAa,MAAM,aAAa,MAAM;EACrD,IAAI,CAAC,IAAI,KAAK,GACZ,OAAO,CAAC;EAEV,OAAO,KAAK,MAAM,GAAG;CACvB,SAAS,OAAO;EACd,IAAI,YAAY,KAAK,KAAK,MAAM,SAAS,UACvC,OAAO,CAAC;EAEV,IAAI,iBAAiB,aACnB,MAAM,IAAI,MAAM,kCAAkC,MAAM,aAAa;EAEvE,MAAM;CACR;AACF;AAEA,SAAgB,kBAAkB,QAAyB;CACzD,oBAAoB,MAAM,aAAa,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE,GAAG;AAC/E;AAEA,SAAgB,qBAAqB,SAAuC;CAC1E,MAAM,iBAAiB,QACpB,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CACxB,QAAQ,QAAQ,IAAI,SAAS,CAAC;CACjC,MAAM,aAAa,CAAC,GAAG,IAAI,IAAI,cAAc,CAAC;CAE9C,MAAM,iBAAiB,2BAA2B;CAClD,kBAAkB;EAChB,GAAG;EACH,MAAM;GACJ,GAAG,eAAe;GAClB,SAAS;EACX;CACF,CAAC;CACD,aAAa;CACb,OAAO,CAAC,GAAG,UAAU;AACvB;AAEA,SAAS,mBAAmB,QAG1B;CACA,MAAM,eAAe,OAAO,gBAAgB,CAAC;CAC7C,MAAM,sBAAsB,cAAc,gBAAgB,CAAC;CAC3D,MAAM,gCACJ,OAAO,sCAAsC,CAAC;CAChD,MAAM,uCACJ,cAAc,sCAAsC,CAAC;CACvD,MAAM,wBAAwB,OAAO,yBAAyB,CAAC;CAC/D,MAAM,+BAA+B,cAAc,yBAAyB,CAAC;CAC7E,MAAM,oBAAoB,iCACxB,OAAO,iBACT;CACA,MAAM,EACJ,SAAS,2BACT,UAAU,8BACR,+BAA+B,MAAM;CAEzC,MAAM,oBAAoB,iCACxB,yBACF;CACA,MAAM,iCAAiC,cAAc,qBAAqB,CAAC;CAE3E,MAAM,2BAA2B,OAAO,KAAK,mBAAmB,CAAC,CAAC,QAC/D,UAAU,CAAC,OAAO,OAAO,cAAc,KAAK,CAC/C;CAEA,MAAM,+BAA+B,OAAO,KAC1C,4BACF,CAAC,CAAC,QAAQ,UAAU,CAAC,OAAO,OAAO,uBAAuB,KAAK,CAAC;CAChE,MAAM,4CAA4C,OAAO,KACvD,oCACF,CAAC,CAAC,QAAQ,UAAU,CAAC,OAAO,OAAO,+BAA+B,KAAK,CAAC;CACxE,MAAM,+BAA+B,OAAO,KAC1C,8BACF,CAAC,CAAC,QAAQ,QAAQ,CAAC,OAAO,OAAO,mBAAmB,GAAG,CAAC;CAExD,MAAM,wBAAwB,yBAAyB,SAAS;CAChE,MAAM,4BAA4B,6BAA6B,SAAS;CACxE,MAAM,yCACJ,0CAA0C,SAAS;CACrD,MAAM,8BAA8B,6BAA6B,SAAS;CAC1E,MAAM,8BAA8B,OAAO,QAAQ,iBAAiB,CAAC,CAAC,MACnE,CAAC,KAAK,WACL,0BAA0B,SAA0C,KACxE;CAEA,IACE,CAAC,yBACE,CAAC,6BACD,CAAC,0CACD,CAAC,+BACD,CAAC,+BACD,CAAC,2BAEJ,OAAO;EAAE,cAAc;EAAQ,SAAS;CAAM;CAIhD,MAAM,EAAE,oBAAoB,2BAA2B,GAAG,oBACxD;CAEF,OAAO;EACL,cAAc;GACZ,GAAG;GACH,mBAAmB;IACjB,GAAG;IACH,GAAG;GACL;GACA,cAAc;IACZ,GAAG;IACH,GAAG;GACL;GACA,oCAAoC;IAClC,GAAG;IACH,GAAG;GACL;GACA,uBAAuB;IACrB,GAAG;IACH,GAAG;GACL;GACA;EACF;EACA,SAAS;CACX;AACF;AAEA,SAAS,iCACP,OACyB;CACzB,IAAI,CAAC,SAAS,OAAO,UAAU,UAC7B,OAAO,CAAC;CAGV,OAAO;EACL,GAAI,OAAO,MAAM,aAAa,YAC5B,EAAE,UAAU,MAAM,SAAS,IAC3B,CAAC;EACH,GAAI,OAAO,MAAM,cAAc,YAC7B,EAAE,WAAW,MAAM,UAAU,IAC7B,CAAC;CACL;AACF;AAcA,MAAM,kCACJ,WAC4D;CAC5D,MAAM,cAAe,OAA2B;CAChD,MAAM,EAAE,oBAAoB,GAAG,aAAc,OAAO,qBAC/C,eACA,CAAC;CAEN,MAAM,iBAAiB,gBAAgB,KAAA;CACvC,MAAM,0BAA0B,uBAAuB,KAAA;CACvD,IAAI,CAAC,kBAAkB,CAAC,yBACtB,OAAO;EAAE,SAAS;EAAO;CAAS;CAGpC,QAAQ,KACN,wHACF;CAEA,OAAO;EACL,SAAS;EACT,UACE,SAAS,qBAAqB,KAAA,KAAa,0BACzC;GAAE,GAAG;GAAU,kBAAkB;EAAmB,IACpD;CACN;AACF;AAEA,SAAS,kBAAkB,QAGzB;CACA,MAAM,wBAAwB,qBAAqB,OAAO,MAAM,WAAW;CAC3E,IAAI,uBAAuB;EACzB,IAAI,OAAO,MAAM,gBAAgB,uBAC/B,OAAO;GAAE,cAAc;GAAQ,SAAS;EAAM;EAGhD,OAAO;GACL,cAAc;IACZ,GAAG;IACH,MAAM;KACJ,GAAG,OAAO;KACV,aAAa;IACf;GACF;GACA,SAAS;EACX;CACF;CAEA,MAAM,iBAAiB,2BAA2B;CAClD,MAAM,EAAE,iBAAiB,mBAAmB;EAC1C,GAAG;EACH,MAAM;GACJ,GAAG,eAAe;GAClB,aAAa,oBAAoB;EACnC;CACF,CAAC;CAED,OAAO;EAAE;EAAc,SAAS;CAAK;AACvC;AAEA,SAAgB,0BAAqC;CAEnD,MAAM,EAAE,cAAc,YAAY,mBADnB,mBAC2C,CAAC;CAC3D,MAAM,EACJ,cAAc,6BACd,SAAS,uBACP,kBAAkB,YAAY;CAGlC,IAF4B,WAAW,oBAGrC,IAAI;EACF,kBAAkB,2BAA2B;CAC/C,SAAS,YAAY;EACnB,IAAI,oBACF,MAAM;EAGR,QAAQ,KACN,wDACA,UACF;CACF;CAGF,eAAe;CACf,OAAO;AACT;AAEA,SAAgB,YAAuB;CACrC,iBAAiB,mBAAmB,mBAAmB,CAAC,CAAC,CAAC;CAC1D,OAAO;AACT;AAEA,SAAgB,eAA0B;CACxC,OAAO,wBAAwB;AACjC;AAEA,SAAgB,uBAAgC;CAE9C,OADe,UACH,CAAC,CAAC,kBAAkB;AAClC;AAEA,SAAgB,iCAA0C;CAExD,OADe,UACH,CAAC,CAAC,4BAA4B;AAC5C;AAKA,SAAgB,6BAAgE;CAC9E,OAAO,iCAAiC,UAAU,CAAC,CAAC,iBAAiB;AACvE;AAEA,MAAa,oCACX,gBACuC;CACvC,kBAAkB,yBAChB,YAAY,kBACZ,+BAA+B,gBACjC;CACA,2BAA2B,yBACzB,YAAY,2BACZ,+BAA+B,yBACjC;CACA,2BAA2B,yBACzB,YAAY,2BACZ,+BAA+B,yBACjC;CACA,8BAA8B,yBAC5B,YAAY,8BACZ,+BAA+B,4BACjC;CACA,wBAAwB,yBACtB,YAAY,wBACZ,+BAA+B,sBACjC;CACA,4BAA4B,yBAC1B,YAAY,4BACZ,+BAA+B,0BACjC;AACF;AAEA,MAAM,4BAA4B,OAAgB,aAA6B;CAC7E,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,GAAG,OAAO;CAEjE,MAAM,aAAa,KAAK,MAAM,KAAK;CACnC,OAAO,aAAa,IAAI,aAAa;AACvC;AAEA,SAAgB,qBAAyC;CAEvD,OADe,UACH,CAAC,CAAC,mBAAmB,QAAQ,IAAI,qBAAqB,KAAA;AACpE;AAEA,SAAgB,iCAA0C;CAExD,OADe,UACH,CAAC,CAAC,4BAA4B;AAC5C;AAEA,SAAgB,oCAA6C;CAE3D,OADe,UACH,CAAC,CAAC,4BAA4B;AAC5C;AAEA,SAAgB,sBAA0C;CAExD,QADc,UAAU,CAAC,CAAC,oBAAoB,aAAA,CACjC,KAAK,KAAK,KAAA;AACzB;AAEA,SAAgB,8BAAkD;CAEhE,MAAM,QADS,UACI,CAAC,CAAC,4BAA4B;CACjD,OAAO,SAAS,MAAM,KAAK,CAAC,CAAC,SAAS,IAAI,QAAQ,KAAA;AACpD;AAEA,SAAgB,qBAAyC;CAEvD,MAAM,QADS,UACI,CAAC,CAAC;CACrB,OAAO,SAAS,MAAM,KAAK,CAAC,CAAC,SAAS,IAAI,MAAM,KAAK,IAAI,KAAA;AAC3D;AAEA,SAAgB,2BAAmC;CAEjD,OADe,UACH,CAAC,CAAC,yBAAyB;AACzC;;;AC7jBA,MAAM,oBAAoB;AAE1B,SAAS,eAAe,OAAwB;CAC9C,MAAM,QAAQ,kBAAkB,KAAK,KAAK;CAC1C,IAAI,CAAC,OACH,OAAO;CAET,MAAM,eAAe,OAAO,SAAS,MAAM,IAAI,EAAE;CACjD,IAAI,eAAe,GACjB,OAAO;CAET,IAAI,iBAAiB,GACnB,OAAO;CAGT,QADqB,MAAM,KAAK,OAAO,SAAS,MAAM,IAAI,EAAE,IAAI,MACzC;AACzB;AAEA,SAAgB,eAAe,OAAwB;CACrD,MAAM,QAAQ,kBAAkB,KAAK,KAAK;CAC1C,IAAI,CAAC,OACH,OAAO;CAET,MAAM,eAAe,OAAO,SAAS,MAAM,IAAI,EAAE;CACjD,IAAI,eAAe,GACjB,OAAO;CAET,IAAI,iBAAiB,GACnB,OAAO;CAGT,QADqB,MAAM,KAAK,OAAO,SAAS,MAAM,IAAI,EAAE,IAAI,MACzC;AACzB;AAEA,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;AAoB7B,SAAgB,uBAAuB,OAAuB;CAE5D,MAAM,aADS,UACS,CAAC,CAAC,eAAe;CACzC,IAAI,eAAe,KAAA,GACjB,OAAO;CAET,OAAO,eAAe,KAAK,IAAI,uBAAuB;AACxD;AAEA,SAAgB,mBAA2C;CAEzD,MAAM,gBADS,UACY,CAAC,CAAC;CAC7B,IAAI,CAAC,eACH,OAAO,EAAE,GAAG,cAAc,cAAc;CAG1C,MAAM,gBAAwC,CAAC;CAC/C,KAAK,MAAM,CAAC,aAAa,gBAAgB,OAAO,QAAQ,aAAa,GAAG;EACtE,IACE,CAAC,eACE,OAAO,gBAAgB,YACvB,YAAY,WAAW,GAE1B;EAEF,cAAc,eAAe;CAC/B;CAEA,OAAO;AACT;AAEA,SAAS,sBACP,eACwB;CACxB,MAAM,oBAA4C,CAAC;CACnD,KAAK,MAAM,CAAC,aAAa,gBAAgB,OAAO,QAAQ,aAAa,GAAG;EACtE,IAAI,CAAC,eAAe,CAAC,aACnB,MAAM,IAAI,MACR,iEACF;EAEF,kBAAkB,eAAe;CACnC;CAEA,OAAO;AACT;AAEA,SAAgB,iBACd,eACwB;CAMxB,kBAAkB;EAJhB,GAAG,2BAA2B;EAC9B,eAAe,sBAAsB,aAAa;CAGlC,CAAU;CAC5B,aAAa;CACb,OAAO,iBAAiB;AAC1B;AAEA,SAAgB,mBAAmB,OAAuB;CACxD,OAAO,iBAAiB,CAAC,CAAC,UAAU;AACtC;AAEA,SAAgB,gBAAwB;CAEtC,OADe,UACH,CAAC,CAAC,cAAc;AAC9B;AAEA,SAAgB,wCAAiD;CAE/D,OADe,UACH,CAAC,CAAC,mBAAmB,YAAY,yBAAyB;AACxE;AAEA,SAAgB,yCAAkD;CAEhE,OADe,UAER,CAAC,CAAC,mBAAmB,aAAa,yBAAyB;AAEpE;AAEA,SAAgB,qCACd,OACoB;CAEpB,MAAM,YADS,UACQ,CAAC,CAAC,qCAAqC;CAE9D,IACE,OAAO,cAAc,YAClB,CAAC,OAAO,SAAS,SAAS,KAC1B,aAAa,GAEhB;CAGF,OAAO;AACT;AAEA,SAAgB,2BACd,OACkE;CAElE,MAAM,aADS,UACS,CAAC,CAAC,wBAAwB;CAClD,IAAI,eAAe,KAAA,GACjB,OAAO;CAET,OAAO,eAAe,KAAK,IAAI,UAAU;AAC3C;;;AClJA,MAAM,mCAAmC;AACzC,MAAM,mCAAmC;AAEzC,SAAgB,yBAAyB,KAAqB;CAC5D,OAAO,IAAI,KAAK,CAAC,CAAC,QAAQ,SAAS,EAAE;AACvC;AAEA,SAAgB,wBAAwB,OAAsC;CAC5E,OAAO,yBAAyB,SAAS,KAAqB;AAChE;AAEA,SAAS,2BACP,cACkB;CAClB,OAAO,iBAAiB,cAAc,cAAc;AACtD;AAEA,SAAgB,wBACd,cACA,UACA,cACkB;CAClB,MAAM,kBAAkB,2BAA2B,YAAY;CAC/D,IAAI,aAAa,KAAA,GACf,OAAO;CAGT,IAAI,aAAa,aACf,OAAO;CAGT,IAAI,aAAa,UAAU;EACzB,IAAI,iBAAiB,SACnB,OAAO;EAGT,QAAQ,KACN,YAAY,aAAa,iGAAiG,iBAC5H;EACA,OAAO;CACT;CAEA,IAAI,aAAa,mBAAmB,aAAa,eAC/C,OAAO;CAGT,QAAQ,KACN,YAAY,aAAa,yBAAyB,SAAS,qBAAqB,iBAClF;CACA,OAAO;AACT;AAEA,SAAS,yBACP,cACA,UACS;CACT,OACE,aAAa,iBACV,EAAE,iBAAiB,WAAW,aAAa;AAElD;AAEA,SAAgB,qBAAqB,MAAqC;CACxE,MAAM,eAAe,KAAK,KAAK;CAC/B,IAAI,CAAC,cACH,OAAO;CAIT,OADe,UACH,CAAC,CAAC,YAAY,iBAAiB;AAC7C;AAEA,SAAgB,kBACd,MACA,UACgB;CAChB,MAAM,eAAe,KAAK,KAAK;CAC/B,IAAI,CAAC,cACH,MAAM,IAAI,MAAM,0CAA0C;CAG5D,IAAI,uBAAuB,YAAY,GACrC,MAAM,IAAI,MACR,YAAY,aAAa,0DAC3B;CAGF,MAAM,iBAAiB,2BAA2B;CASlD,kBAAkB;EAPhB,GAAG;EACH,WAAW;GACT,GAAG,eAAe;IACjB,eAAe;EAClB;CAGgB,CAAU;CAC5B,aAAa;CACb,OAAO,qBAAqB,YAAY,KAAK;AAC/C;AAEA,SAAgB,kBAAkB,MAA6C;CAC7E,MAAM,eAAe,KAAK,KAAK;CAC/B,IAAI,CAAC,cACH,OAAO;CAGT,IAAI,uBAAuB,YAAY,GAAG;EACxC,QAAQ,KACN,YAAY,aAAa,0DAC3B;EACA,OAAO;CACT;CAEA,MAAM,WAAW,qBAAqB,YAAY;CAClD,IAAI,CAAC,UACH,OAAO;CAGT,IAAI,SAAS,YAAY,OACvB,OAAO;CAGT,MAAM,OAAO,SAAS,QAAQ;CAC9B,IAAI,CAAC,wBAAwB,IAAI,GAAG;EAClC,QAAQ,KACN,YAAY,aAAa,4BAA4B,KAAK,mBAC5D;EACA,OAAO;CACT;CAEA,MAAM,UAAU,yBAAyB,SAAS,WAAW,EAAE;CAC/D,MAAM,WAAW,wBACf,cACA,SAAS,UACT,IACF;CACA,MAAM,UAAU,SAAS,UAAU,GAAA,CAAI,KAAK;CAC5C,MAAM,gBAAgB,CACpB,GAAI,UAAU,CAAC,IAAI,CAAC,SAAS,GAC7B,GAAI,yBAAyB,cAAc,QAAQ,KAAK,CAAC,SACvD,CAAC,QAAQ,IACT,CAAC,CACL;CAEA,IAAI,cAAc,SAAS,GAAG;EAC5B,QAAQ,KACN,YAAY,aAAa,0BAA0B,cAAc,KAAK,MAAM,GAC9E;EACA,OAAO;CACT;CAEA,OAAO;EACL,MAAM;EACN;EACA;EACA;EACA;EACA,iBAAiB,yBAAyB,SAAS,eAAe;EAClE,QAAQ,SAAS;CACnB;AACF;AAEA,SAAgB,6BACd,gBACA,OACc;CACd,MAAM,cAAc,eAAe,SAAS;CAC5C,IAAI,aAAa,QAAQ,wBAAwB,YAAY,IAAI,GAC/D,OAAO,YAAY;CAGrB,IAAI,eAAe,SAAS,eAAe;EACzC,IAAI,iCAAiC,KAAK,KAAK,GAC7C,OAAO;EAET,IAAI,iCAAiC,KAAK,KAAK,GAC7C,OAAO;CAEX;CAEA,OAAO,eAAe;AACxB;AAEA,SAAS,yBACP,OACoB;CAEpB,OADiB,OAAO,KAAK,CAAC,CAAC,YAAY,KACxB,KAAA;AACrB;AAEA,SAAgB,uBAAsC;CACpD,MAAM,SAAS,UAAU;CAEzB,OADsB,OAAO,KAAK,OAAO,aAAa,CAAC,CACpC,CAAC,CAAC,QAAQ,SAAS,kBAAkB,IAAI,MAAM,IAAI;AACxE;AAEA,SAAgB,uBAAuB,MAAuB;CAC5D,OAAO,KAAK,KAAK,MAAM;AACzB"}
+{"version":3,"file":"config-2Dli6AI8.js","names":["fs"],"sources":["../src/lib/atomic-file.ts","../src/lib/paths.ts","../src/lib/config-store.ts","../src/lib/model-policy.ts","../src/lib/provider-config.ts"],"sourcesContent":["import { randomBytes } from \"node:crypto\"\nimport fs from \"node:fs\"\nimport path from \"node:path\"\n\nconst TEMP_FILE_RANDOM_BYTES = 8\n\n// The file-level fsync persists the contents, but the rename only updates the\n// parent directory entry, which needs its own fsync to survive a crash or\n// power loss. Best-effort: the rename has already taken effect, so a failure\n// here only weakens crash durability and must not fail the write. Directory\n// fsync is not supported on Windows (opening a directory handle fails there).\nconst fsyncDirectory = (directory: string): void => {\n  if (process.platform === \"win32\") {\n    return\n  }\n\n  let directoryFd: number | undefined\n  try {\n    directoryFd = fs.openSync(directory, \"r\")\n    fs.fsyncSync(directoryFd)\n  } catch (error) {\n    console.warn(`Failed to fsync directory: ${directory}`, error)\n  } finally {\n    if (directoryFd !== undefined) {\n      try {\n        fs.closeSync(directoryFd)\n      } catch {\n        // Preserve the fsync warning.\n      }\n    }\n  }\n}\n\nexport function writeFileAtomically(filePath: string, content: string): void {\n  const directory = path.dirname(filePath)\n  const tempPath = path.join(\n    directory,\n    `.${path.basename(filePath)}.${process.pid}.${randomBytes(TEMP_FILE_RANDOM_BYTES).toString(\"hex\")}.tmp`,\n  )\n\n  fs.mkdirSync(directory, { recursive: true })\n\n  let fileDescriptor: number | undefined\n  let tempFileCreated = false\n  try {\n    fileDescriptor = fs.openSync(tempPath, \"wx\", 0o600)\n    tempFileCreated = true\n    fs.writeFileSync(fileDescriptor, content, \"utf8\")\n    fs.fsyncSync(fileDescriptor)\n    fs.closeSync(fileDescriptor)\n    fileDescriptor = undefined\n    fs.renameSync(tempPath, filePath)\n    tempFileCreated = false\n    fsyncDirectory(directory)\n  } catch (error) {\n    if (fileDescriptor !== undefined) {\n      try {\n        fs.closeSync(fileDescriptor)\n      } catch {\n        // Preserve the original write error.\n      }\n    }\n\n    if (tempFileCreated) {\n      try {\n        fs.rmSync(tempPath, { force: true })\n      } catch {\n        // Preserve the original write error.\n      }\n    }\n\n    throw error\n  }\n}\n","import fs from \"node:fs/promises\"\nimport os from \"node:os\"\nimport path from \"node:path\"\n\nconst AUTH_APP = process.env.COPILOT_API_OAUTH_APP?.trim() || \"\"\nconst ENTERPRISE_PREFIX = process.env.COPILOT_API_ENTERPRISE_URL ? \"ent_\" : \"\"\n\nconst DEFAULT_DIR = path.join(os.homedir(), \".local\", \"share\", \"copilot-api\")\nconst APP_DIR = process.env.COPILOT_API_HOME || DEFAULT_DIR\n\nconst GITHUB_TOKEN_PATH = path.join(\n  APP_DIR,\n  AUTH_APP,\n  ENTERPRISE_PREFIX + \"github_token\",\n)\nconst CODEX_CREDENTIAL_PATH = path.join(APP_DIR, \"codex_credentials.json\")\nconst CONFIG_PATH = path.join(APP_DIR, \"config.json\")\n\nexport const PATHS = {\n  APP_DIR,\n  GITHUB_TOKEN_PATH,\n  CODEX_CREDENTIAL_PATH,\n  CONFIG_PATH,\n}\n\nexport async function ensurePaths(): Promise<void> {\n  await fs.mkdir(path.join(PATHS.APP_DIR, AUTH_APP), { recursive: true })\n  await ensureFile(PATHS.GITHUB_TOKEN_PATH)\n  await ensureFile(PATHS.CONFIG_PATH)\n}\n\nasync function ensureFile(filePath: string): Promise<void> {\n  try {\n    await fs.access(filePath, fs.constants.W_OK)\n  } catch {\n    await fs.writeFile(filePath, \"\")\n    await fs.chmod(filePath, 0o600)\n  }\n}\n","import consola from \"consola\"\nimport { randomBytes } from \"node:crypto\"\nimport fs from \"node:fs\"\n\nimport type { TokenUsagePricingConfig } from \"~/lib/token-usage/pricing\"\n\nimport { writeFileAtomically } from \"./atomic-file\"\nimport { PATHS } from \"./paths\"\n\nexport interface AppConfig {\n  auth?: {\n    apiKeys?: Array<string>\n    adminApiKey?: string\n  }\n  providers?: Record<string, ProviderConfig>\n  modelMappings?: Record<string, string>\n  extraPrompts?: Record<string, string>\n  smallModel?: string\n  contextManagement?: ContextManagementConfig\n  modelResponsesApiCompactThresholds?: Record<string, number>\n  modelReasoningEfforts?: Record<\n    string,\n    \"none\" | \"minimal\" | \"low\" | \"medium\" | \"high\" | \"xhigh\" | \"max\"\n  >\n  useMessagesApi?: boolean\n  useResponsesApiWebSocket?: boolean\n  upstreamTransport?: UpstreamTransportConfig\n  anthropicApiKey?: string\n  useResponsesApiWebSearch?: boolean\n  alphaSearchCodexPriority?: boolean\n  alphaSearchModel?: string\n  // Copilot rejects Anthropic's web_search server tool on /v1/messages, so a\n  // Claude request that only asks for web search is switched to this model.\n  // A `provider/model` alias is passed straight through to that provider's\n  // (websearch-capable) message API, while a plain GPT model runs the search\n  // via /responses. Leave unset to disable (the tool is then stripped).\n  // Mixing web_search with other tools is not supported.\n  messageApiWebSearchModel?: string\n  // Model used for Claude Code background security-monitor requests on\n  // /v1/messages and provider message APIs: requests without tools, with\n  // `stop_sequences: [\"</block>\"]` and a system block starting with\n  // \"You are a security monitor for autonomous AI coding agents.\".\n  // A `provider/model` alias is forwarded to that provider's message API on\n  // the top-level route. Provider message routes use the configured value on\n  // their current provider. Leave empty to disable (default).\n  claudeAutoModel?: string\n  claudeTokenMultiplier?: number\n}\n\nexport interface ContextManagementConfig {\n  messages?: boolean\n  responses?: boolean\n}\n\nexport interface UpstreamTransportConfig {\n  headersTimeoutMs?: number\n  streamInactivityTimeoutMs?: number\n  websocketMaxBufferedBytes?: number\n  websocketMaxBufferedMessages?: number\n  websocketOpenTimeoutMs?: number\n  websocketPoolIdleTimeoutMs?: number\n}\n\nexport const defaultUpstreamTransportConfig = {\n  headersTimeoutMs: 5 * 60 * 1000,\n  streamInactivityTimeoutMs: 5 * 60 * 1000,\n  websocketMaxBufferedBytes: 8 * 1024 * 1024,\n  websocketMaxBufferedMessages: 1024,\n  websocketOpenTimeoutMs: 30_000,\n  websocketPoolIdleTimeoutMs: 60_000,\n} satisfies Required<UpstreamTransportConfig>\n\nexport interface ModelConfig {\n  temperature?: number\n  topP?: number\n  topK?: number\n  extraBody?: Record<string, unknown>\n  contextCache?: boolean\n  contextWindow?: number\n  maxOutputTokens?: number\n  inputModalities?: Array<\"text\" | \"image\">\n  reasoningEfforts?: Array<CodexReasoningEffort>\n  defaultReasoningEffort?: CodexReasoningEffort\n  pricing?: TokenUsagePricingConfig\n  supportPdf?: boolean\n  toolContentSupportType?: Array<ToolContentSupportType>\n  type?: ProviderType\n  // Message field used to carry assistant thinking text when forwarding\n  // requests upstream; defaults to \"reasoning_content\"\n  reasoningField?: ModelReasoningField\n}\n\nexport type ModelReasoningField = \"reasoning\" | \"reasoning_content\"\n\nexport type CodexReasoningEffort =\n  | \"none\"\n  | \"minimal\"\n  | \"low\"\n  | \"medium\"\n  | \"high\"\n  | \"xhigh\"\n  | \"max\"\n  | \"ultra\"\n\nexport type ProviderAuthType =\n  | \"authorization\"\n  | \"azure-entra\"\n  | \"oauth2\"\n  | \"x-api-key\"\nexport const SUPPORTED_PROVIDER_TYPES = [\n  \"anthropic\",\n  \"openai-compatible\",\n  \"openai-responses\",\n] as const\nexport type ProviderType = (typeof SUPPORTED_PROVIDER_TYPES)[number]\nexport type ToolContentSupportType = \"array\" | \"image\" | \"pdf\"\n\nexport interface ProviderConfig {\n  type?: string\n  enabled?: boolean\n  baseUrl?: string\n  apiKey?: string\n  authType?: ProviderAuthType\n  accountId?: string\n  pricingCurrency?: string\n  models?: Record<string, ModelConfig>\n}\n\nconst gpt5ExplorationPrompt = `## Exploration and reading files\n- **Think first.** Before any tool call, decide ALL files/resources you will need.\n- **Batch everything.** If you need multiple files (even from different places), read them together.\n- **multi_tool_use.parallel** Use multi_tool_use.parallel to parallelize tool calls and only this.\n- **Only make sequential calls if you truly cannot know the next file without seeing a result first.**\n- **Workflow:** (a) plan all needed reads → (b) issue one parallel batch → (c) analyze results → (d) repeat if new, unpredictable reads arise.`\n\nconst modelResponsesApiCompactThresholds = {\n  \"gpt-5.4\": 272_000 * 0.8,\n  \"gpt-5.5\": 272_000 * 0.8,\n}\n\nexport const defaultContextManagement = {\n  messages: true,\n  responses: false,\n} satisfies Required<ContextManagementConfig>\n\nexport const defaultConfig: AppConfig = {\n  auth: {\n    apiKeys: [],\n  },\n  providers: {},\n  modelMappings: {},\n  extraPrompts: {\n    \"gpt-5-mini\": gpt5ExplorationPrompt,\n  },\n  smallModel: \"gpt-5-mini\",\n  contextManagement: defaultContextManagement,\n  modelResponsesApiCompactThresholds,\n  modelReasoningEfforts: {\n    \"gpt-5-mini\": \"low\",\n  },\n  useMessagesApi: true,\n  useResponsesApiWebSocket: true,\n  upstreamTransport: defaultUpstreamTransportConfig,\n  useResponsesApiWebSearch: true,\n  alphaSearchCodexPriority: true,\n  alphaSearchModel: \"gpt-5-mini\",\n  messageApiWebSearchModel: \"gpt-5-mini\",\n}\n\nlet cachedConfig: AppConfig | null = null\n\nfunction normalizeAdminApiKey(adminApiKey: unknown): string | null {\n  if (typeof adminApiKey !== \"string\") {\n    if (adminApiKey !== undefined) {\n      consola.warn(\n        \"Invalid auth.adminApiKey config. Expected a non-empty string.\",\n      )\n    }\n    return null\n  }\n\n  const normalizedAdminApiKey = adminApiKey.trim()\n  if (!normalizedAdminApiKey) {\n    consola.warn(\n      \"Invalid auth.adminApiKey config. Expected a non-empty string.\",\n    )\n    return null\n  }\n\n  return normalizedAdminApiKey\n}\n\nfunction generateAdminApiKey(): string {\n  return randomBytes(32).toString(\"hex\")\n}\n\nfunction isNodeError(error: unknown): error is NodeJS.ErrnoException {\n  return error instanceof Error && \"code\" in error\n}\n\nfunction ensureConfigFile(): void {\n  try {\n    fs.accessSync(PATHS.CONFIG_PATH, fs.constants.F_OK)\n  } catch (error) {\n    if (!isNodeError(error) || error.code !== \"ENOENT\") {\n      throw error\n    }\n\n    writeFileAtomically(\n      PATHS.CONFIG_PATH,\n      `${JSON.stringify(defaultConfig, null, 2)}\\n`,\n    )\n  }\n}\n\nfunction readConfigFromDisk(): AppConfig {\n  ensureConfigFile()\n  const raw = fs.readFileSync(PATHS.CONFIG_PATH, \"utf8\")\n  if (!raw.trim()) {\n    writeFileAtomically(\n      PATHS.CONFIG_PATH,\n      `${JSON.stringify(defaultConfig, null, 2)}\\n`,\n    )\n    return defaultConfig\n  }\n\n  try {\n    return JSON.parse(raw) as AppConfig\n  } catch (error) {\n    // Fail closed: falling back to the default config here would let the\n    // startup merge overwrite the corrupt file (discarding providers, API\n    // keys, and model mappings) and, because the default has no apiKeys,\n    // silently disable API key authentication on normal routes.\n    const message = `Config file is not valid JSON: ${PATHS.CONFIG_PATH}. Refusing to start with the default config. Fix the JSON syntax or delete the file to regenerate a fresh config.`\n    consola.error(message, error)\n    throw new Error(message, { cause: error })\n  }\n}\n\nexport function readEditableConfigFromDisk(): AppConfig {\n  try {\n    const raw = fs.readFileSync(PATHS.CONFIG_PATH, \"utf8\")\n    if (!raw.trim()) {\n      return {}\n    }\n    return JSON.parse(raw) as AppConfig\n  } catch (error) {\n    if (isNodeError(error) && error.code === \"ENOENT\") {\n      return {}\n    }\n    if (error instanceof SyntaxError) {\n      throw new Error(`Config file is not valid JSON: ${PATHS.CONFIG_PATH}`)\n    }\n    throw error\n  }\n}\n\nexport function writeConfigToDisk(config: AppConfig): void {\n  writeFileAtomically(PATHS.CONFIG_PATH, `${JSON.stringify(config, null, 2)}\\n`)\n}\n\nexport function setConfiguredApiKeys(apiKeys: Array<string>): Array<string> {\n  const normalizedKeys = apiKeys\n    .map((key) => key.trim())\n    .filter((key) => key.length > 0)\n  const uniqueKeys = [...new Set(normalizedKeys)]\n\n  const editableConfig = readEditableConfigFromDisk()\n  writeConfigToDisk({\n    ...editableConfig,\n    auth: {\n      ...editableConfig.auth,\n      apiKeys: uniqueKeys,\n    },\n  })\n  reloadConfig()\n  return [...uniqueKeys]\n}\n\nfunction mergeDefaultConfig(config: AppConfig): {\n  mergedConfig: AppConfig\n  changed: boolean\n} {\n  const extraPrompts = config.extraPrompts ?? {}\n  const defaultExtraPrompts = defaultConfig.extraPrompts ?? {}\n  const responsesApiCompactThresholds =\n    config.modelResponsesApiCompactThresholds ?? {}\n  const defaultResponsesApiCompactThresholds =\n    defaultConfig.modelResponsesApiCompactThresholds ?? {}\n  const modelReasoningEfforts = config.modelReasoningEfforts ?? {}\n  const defaultModelReasoningEfforts = defaultConfig.modelReasoningEfforts ?? {}\n  const contextManagement = normalizeContextManagementConfig(\n    config.contextManagement,\n  )\n  const {\n    changed: upstreamTransportMigrated,\n    migrated: migratedUpstreamTransport,\n  } = migrateUpstreamTransportConfig(config)\n\n  const upstreamTransport = normalizeUpstreamTransportConfig(\n    migratedUpstreamTransport,\n  )\n  const defaultContextManagementConfig = defaultConfig.contextManagement ?? {}\n\n  const missingExtraPromptModels = Object.keys(defaultExtraPrompts).filter(\n    (model) => !Object.hasOwn(extraPrompts, model),\n  )\n\n  const missingReasoningEffortModels = Object.keys(\n    defaultModelReasoningEfforts,\n  ).filter((model) => !Object.hasOwn(modelReasoningEfforts, model))\n  const missingResponsesApiCompactThresholdModels = Object.keys(\n    defaultResponsesApiCompactThresholds,\n  ).filter((model) => !Object.hasOwn(responsesApiCompactThresholds, model))\n  const missingContextManagementKeys = Object.keys(\n    defaultContextManagementConfig,\n  ).filter((key) => !Object.hasOwn(contextManagement, key))\n\n  const hasExtraPromptChanges = missingExtraPromptModels.length > 0\n  const hasReasoningEffortChanges = missingReasoningEffortModels.length > 0\n  const hasResponsesApiCompactThresholdChanges =\n    missingResponsesApiCompactThresholdModels.length > 0\n  const hasContextManagementChanges = missingContextManagementKeys.length > 0\n  const hasUpstreamTransportChanges = Object.entries(upstreamTransport).some(\n    ([key, value]) =>\n      migratedUpstreamTransport[key as keyof UpstreamTransportConfig] !== value,\n  )\n\n  if (\n    !hasExtraPromptChanges\n    && !hasReasoningEffortChanges\n    && !hasResponsesApiCompactThresholdChanges\n    && !hasContextManagementChanges\n    && !hasUpstreamTransportChanges\n    && !upstreamTransportMigrated\n  ) {\n    return { mergedConfig: config, changed: false }\n  }\n\n  // The deprecated responsesTransport key is dropped once it is migrated.\n  const { responsesTransport: _legacyResponsesTransport, ...persistedConfig } =\n    config as LegacyAppConfig\n\n  return {\n    mergedConfig: {\n      ...persistedConfig,\n      contextManagement: {\n        ...defaultContextManagementConfig,\n        ...contextManagement,\n      },\n      extraPrompts: {\n        ...defaultExtraPrompts,\n        ...extraPrompts,\n      },\n      modelResponsesApiCompactThresholds: {\n        ...defaultResponsesApiCompactThresholds,\n        ...responsesApiCompactThresholds,\n      },\n      modelReasoningEfforts: {\n        ...defaultModelReasoningEfforts,\n        ...modelReasoningEfforts,\n      },\n      upstreamTransport,\n    },\n    changed: true,\n  }\n}\n\nfunction normalizeContextManagementConfig(\n  value: ContextManagementConfig | undefined,\n): ContextManagementConfig {\n  if (!value || typeof value !== \"object\") {\n    return {}\n  }\n\n  return {\n    ...(typeof value.messages === \"boolean\" ?\n      { messages: value.messages }\n    : {}),\n    ...(typeof value.responses === \"boolean\" ?\n      { responses: value.responses }\n    : {}),\n  }\n}\n\n// responsesTransport was renamed to upstreamTransport, and headersTimeoutMsV2\n// to headersTimeoutMs, when this block started applying to every upstream HTTP\n// transport. Legacy configs are migrated once during the startup merge and the\n// old keys are dropped from disk.\ninterface LegacyAppConfig extends AppConfig {\n  responsesTransport?: LegacyUpstreamTransportConfig\n}\n\ninterface LegacyUpstreamTransportConfig extends UpstreamTransportConfig {\n  headersTimeoutMsV2?: number\n}\n\nconst migrateUpstreamTransportConfig = (\n  config: AppConfig,\n): { changed: boolean; migrated: UpstreamTransportConfig } => {\n  const legacyBlock = (config as LegacyAppConfig).responsesTransport\n  const { headersTimeoutMsV2, ...migrated } = (config.upstreamTransport\n    ?? legacyBlock\n    ?? {}) as LegacyUpstreamTransportConfig\n\n  const hasLegacyBlock = legacyBlock !== undefined\n  const hasLegacyHeadersTimeout = headersTimeoutMsV2 !== undefined\n  if (!hasLegacyBlock && !hasLegacyHeadersTimeout) {\n    return { changed: false, migrated }\n  }\n\n  consola.info(\n    \"Migrating deprecated transport config: responsesTransport -> upstreamTransport, headersTimeoutMsV2 -> headersTimeoutMs\",\n  )\n\n  return {\n    changed: true,\n    migrated:\n      migrated.headersTimeoutMs === undefined && hasLegacyHeadersTimeout ?\n        { ...migrated, headersTimeoutMs: headersTimeoutMsV2 }\n      : migrated,\n  }\n}\n\nfunction ensureAdminApiKey(config: AppConfig): {\n  mergedConfig: AppConfig\n  changed: boolean\n} {\n  const normalizedAdminApiKey = normalizeAdminApiKey(config.auth?.adminApiKey)\n  if (normalizedAdminApiKey) {\n    if (config.auth?.adminApiKey === normalizedAdminApiKey) {\n      return { mergedConfig: config, changed: false }\n    }\n\n    return {\n      mergedConfig: {\n        ...config,\n        auth: {\n          ...config.auth,\n          adminApiKey: normalizedAdminApiKey,\n        },\n      },\n      changed: true,\n    }\n  }\n\n  const editableConfig = readEditableConfigFromDisk()\n  const { mergedConfig } = mergeDefaultConfig({\n    ...editableConfig,\n    auth: {\n      ...editableConfig.auth,\n      adminApiKey: generateAdminApiKey(),\n    },\n  })\n\n  return { mergedConfig, changed: true }\n}\n\nexport function mergeConfigWithDefaults(): AppConfig {\n  const config = readConfigFromDisk()\n  const { mergedConfig, changed } = mergeDefaultConfig(config)\n  const {\n    mergedConfig: mergedConfigWithAdminApiKey,\n    changed: adminApiKeyChanged,\n  } = ensureAdminApiKey(mergedConfig)\n  const shouldPersistConfig = changed || adminApiKeyChanged\n\n  if (shouldPersistConfig) {\n    try {\n      writeConfigToDisk(mergedConfigWithAdminApiKey)\n    } catch (writeError) {\n      if (adminApiKeyChanged) {\n        throw writeError\n      }\n\n      consola.warn(\n        \"Failed to write merged default config to config file\",\n        writeError,\n      )\n    }\n  }\n\n  cachedConfig = mergedConfigWithAdminApiKey\n  return mergedConfigWithAdminApiKey\n}\n\nexport function getConfig(): AppConfig {\n  cachedConfig ??= mergeDefaultConfig(readConfigFromDisk()).mergedConfig\n  return cachedConfig\n}\n\nexport function reloadConfig(): AppConfig {\n  return mergeConfigWithDefaults()\n}\n\nexport function isMessagesApiEnabled(): boolean {\n  const config = getConfig()\n  return config.useMessagesApi ?? true\n}\n\nexport function isResponsesApiWebSocketEnabled(): boolean {\n  const config = getConfig()\n  return config.useResponsesApiWebSocket ?? true\n}\n\n// Applies to every upstream HTTP transport (Copilot Chat Completions and\n// Messages, Codex Responses, and provider-forwarded requests), not only the\n// Responses API.\nexport function getUpstreamTransportConfig(): Required<UpstreamTransportConfig> {\n  return normalizeUpstreamTransportConfig(getConfig().upstreamTransport)\n}\n\nexport const normalizeUpstreamTransportConfig = (\n  configured: UpstreamTransportConfig | undefined,\n): Required<UpstreamTransportConfig> => ({\n  headersTimeoutMs: positiveIntegerOrDefault(\n    configured?.headersTimeoutMs,\n    defaultUpstreamTransportConfig.headersTimeoutMs,\n  ),\n  streamInactivityTimeoutMs: positiveIntegerOrDefault(\n    configured?.streamInactivityTimeoutMs,\n    defaultUpstreamTransportConfig.streamInactivityTimeoutMs,\n  ),\n  websocketMaxBufferedBytes: positiveIntegerOrDefault(\n    configured?.websocketMaxBufferedBytes,\n    defaultUpstreamTransportConfig.websocketMaxBufferedBytes,\n  ),\n  websocketMaxBufferedMessages: positiveIntegerOrDefault(\n    configured?.websocketMaxBufferedMessages,\n    defaultUpstreamTransportConfig.websocketMaxBufferedMessages,\n  ),\n  websocketOpenTimeoutMs: positiveIntegerOrDefault(\n    configured?.websocketOpenTimeoutMs,\n    defaultUpstreamTransportConfig.websocketOpenTimeoutMs,\n  ),\n  websocketPoolIdleTimeoutMs: positiveIntegerOrDefault(\n    configured?.websocketPoolIdleTimeoutMs,\n    defaultUpstreamTransportConfig.websocketPoolIdleTimeoutMs,\n  ),\n})\n\nconst positiveIntegerOrDefault = (value: unknown, fallback: number): number => {\n  if (typeof value !== \"number\" || !Number.isFinite(value)) return fallback\n\n  const normalized = Math.floor(value)\n  return normalized > 0 ? normalized : fallback\n}\n\nexport function getAnthropicApiKey(): string | undefined {\n  const config = getConfig()\n  return config.anthropicApiKey ?? process.env.ANTHROPIC_API_KEY ?? undefined\n}\n\nexport function isResponsesApiWebSearchEnabled(): boolean {\n  const config = getConfig()\n  return config.useResponsesApiWebSearch ?? true\n}\n\nexport function isAlphaSearchCodexPriorityEnabled(): boolean {\n  const config = getConfig()\n  return config.alphaSearchCodexPriority ?? true\n}\n\nexport function getAlphaSearchModel(): string | undefined {\n  const model = getConfig().alphaSearchModel ?? \"gpt-5-mini\"\n  return model.trim() || undefined\n}\n\nexport function getMessageApiWebSearchModel(): string | undefined {\n  const config = getConfig()\n  const model = config.messageApiWebSearchModel ?? \"gpt-5-mini\"\n  return model && model.trim().length > 0 ? model : undefined\n}\n\nexport function getClaudeAutoModel(): string | undefined {\n  const config = getConfig()\n  const model = config.claudeAutoModel\n  return model && model.trim().length > 0 ? model.trim() : undefined\n}\n\nexport function getClaudeTokenMultiplier(): number {\n  const config = getConfig()\n  return config.claudeTokenMultiplier ?? 1.15\n}\n","import {\n  defaultConfig,\n  defaultContextManagement,\n  getConfig,\n  readEditableConfigFromDisk,\n  reloadConfig,\n  writeConfigToDisk,\n} from \"./config-store\"\n\nconst GPT_MODEL_PATTERN = /^gpt-(\\d+)(?:\\.(\\d+))?/\n\nfunction isGpt53OrAbove(model: string): boolean {\n  const match = GPT_MODEL_PATTERN.exec(model)\n  if (!match) {\n    return false\n  }\n  const majorVersion = Number.parseInt(match[1], 10)\n  if (majorVersion > 5) {\n    return true\n  }\n  if (majorVersion !== 5) {\n    return false\n  }\n  const minorVersion = match[2] ? Number.parseInt(match[2], 10) : 0\n  return minorVersion >= 3\n}\n\nexport function isGpt56OrAbove(model: string): boolean {\n  const match = GPT_MODEL_PATTERN.exec(model)\n  if (!match) {\n    return false\n  }\n  const majorVersion = Number.parseInt(match[1], 10)\n  if (majorVersion > 5) {\n    return true\n  }\n  if (majorVersion !== 5) {\n    return false\n  }\n  const minorVersion = match[2] ? Number.parseInt(match[2], 10) : 0\n  return minorVersion >= 6\n}\n\nconst gpt5CommentaryPrompt = `# Working with the user\n\nYou interact with the user through a terminal. You have 2 ways of communicating with the users:  \n- Share intermediary updates in \\`commentary\\` channel.  \n- After you have completed all your work, send a message to the \\`final\\` channel.  \n\n## Intermediary updates\n\n- Intermediary updates go to the \\`commentary\\` channel.\n- User updates are short updates while you are working, they are NOT final answers.\n- You use 1-2 sentence user updates to communicate progress and new information to the user as you are doing work.\n- Do not begin responses with conversational interjections or meta commentary. Avoid openers such as acknowledgements (“Done —”, “Got it”, “Great question, ”) or framing phrases.\n- You provide user updates frequently, every 20s.\n- Before exploring or doing substantial work, you start with a user update acknowledging the request and explaining your first step. You should include your understanding of the user request and explain what you will do. Avoid commenting on the request or using starters such as \"Got it -\" or \"Understood -\" etc.\n- When exploring, e.g. searching, reading files, you provide user updates as you go, every 20s, explaining what context you are gathering and what you've learned. Vary your sentence structure when providing these updates to avoid sounding repetitive - in particular, don't start each sentence the same way.\n- After you have sufficient context, and the work is substantial, you provide a longer plan (this is the only user update that may be longer than 2 sentences and can contain formatting).\n- Before performing file edits of any kind, you provide updates explaining what edits you are making.\n- As you are thinking, you very frequently provide updates even if not taking any actions, informing the user of your progress. You interrupt your thinking and send multiple updates in a row if thinking for more than 100 words.\n- Tone of your updates MUST match your personality.`\n\nexport function getExtraPromptForModel(model: string): string {\n  const config = getConfig()\n  const userPrompt = config.extraPrompts?.[model]\n  if (userPrompt !== undefined) {\n    return userPrompt\n  }\n  return isGpt53OrAbove(model) ? gpt5CommentaryPrompt : \"\"\n}\n\nexport function getModelMappings(): Record<string, string> {\n  const config = getConfig()\n  const modelMappings = config.modelMappings\n  if (!modelMappings) {\n    return { ...defaultConfig.modelMappings }\n  }\n\n  const validMappings: Record<string, string> = {}\n  for (const [sourceModel, targetModel] of Object.entries(modelMappings)) {\n    if (\n      !sourceModel\n      || typeof targetModel !== \"string\"\n      || targetModel.length === 0\n    ) {\n      continue\n    }\n    validMappings[sourceModel] = targetModel\n  }\n\n  return validMappings\n}\n\nfunction validateModelMappings(\n  modelMappings: Record<string, string>,\n): Record<string, string> {\n  const validatedMappings: Record<string, string> = {}\n  for (const [sourceModel, targetModel] of Object.entries(modelMappings)) {\n    if (!sourceModel || !targetModel) {\n      throw new Error(\n        \"Each model mapping must use non-empty source and target values.\",\n      )\n    }\n    validatedMappings[sourceModel] = targetModel\n  }\n\n  return validatedMappings\n}\n\nexport function setModelMappings(\n  modelMappings: Record<string, string>,\n): Record<string, string> {\n  const nextConfig = {\n    ...readEditableConfigFromDisk(),\n    modelMappings: validateModelMappings(modelMappings),\n  }\n\n  writeConfigToDisk(nextConfig)\n  reloadConfig()\n  return getModelMappings()\n}\n\nexport function resolveMappedModel(model: string): string {\n  return getModelMappings()[model] ?? model\n}\n\nexport function getSmallModel(): string {\n  const config = getConfig()\n  return config.smallModel ?? \"gpt-5-mini\"\n}\n\nexport function isContextManagementEnabledForMessages(): boolean {\n  const config = getConfig()\n  return config.contextManagement?.messages ?? defaultContextManagement.messages\n}\n\nexport function isContextManagementEnabledForResponses(): boolean {\n  const config = getConfig()\n  return (\n    config.contextManagement?.responses ?? defaultContextManagement.responses\n  )\n}\n\nexport function getModelResponsesApiCompactThreshold(\n  model: string,\n): number | undefined {\n  const config = getConfig()\n  const threshold = config.modelResponsesApiCompactThresholds?.[model]\n\n  if (\n    typeof threshold !== \"number\"\n    || !Number.isFinite(threshold)\n    || threshold <= 0\n  ) {\n    return undefined\n  }\n\n  return threshold\n}\n\nexport function getReasoningEffortForModel(\n  model: string,\n): \"none\" | \"minimal\" | \"low\" | \"medium\" | \"high\" | \"xhigh\" | \"max\" {\n  const config = getConfig()\n  const userEffort = config.modelReasoningEfforts?.[model]\n  if (userEffort !== undefined) {\n    return userEffort\n  }\n  return isGpt53OrAbove(model) ? \"xhigh\" : \"high\"\n}\n","import consola from \"consola\"\n\nimport {\n  SUPPORTED_PROVIDER_TYPES,\n  getConfig,\n  readEditableConfigFromDisk,\n  reloadConfig,\n  writeConfigToDisk,\n  type ModelConfig,\n  type ProviderAuthType,\n  type ProviderConfig,\n  type ProviderType,\n} from \"./config-store\"\n\nexport interface ResolvedProviderConfig {\n  name: string\n  type: ProviderType\n  baseUrl: string\n  apiKey: string\n  authType: ProviderAuthType\n  pricingCurrency?: string\n  models?: Record<string, ModelConfig>\n}\n\nconst OPENCODE_ANTHROPIC_MODEL_PATTERN = /^(?:qwen|minimax)/iu\nconst OPENCODE_RESPONSES_MODEL_PATTERN = /^(?:gpt|grok|muse-spark)(?:[-_.]|$)/iu\n\nexport function normalizeProviderBaseUrl(url: string): string {\n  return url.trim().replace(/\\/+$/u, \"\")\n}\n\nexport function isSupportedProviderType(value: string): value is ProviderType {\n  return SUPPORTED_PROVIDER_TYPES.includes(value as ProviderType)\n}\n\nfunction getDefaultProviderAuthType(\n  providerType: ProviderType,\n): ProviderAuthType {\n  return providerType === \"anthropic\" ? \"x-api-key\" : \"authorization\"\n}\n\nexport function resolveProviderAuthType(\n  providerName: string,\n  authType: string | undefined,\n  providerType: ProviderType,\n): ProviderAuthType {\n  const defaultAuthType = getDefaultProviderAuthType(providerType)\n  if (authType === undefined) {\n    return defaultAuthType\n  }\n\n  if (authType === \"x-api-key\") {\n    return \"x-api-key\"\n  }\n\n  if (authType === \"oauth2\") {\n    if (providerName === \"codex\") {\n      return authType\n    }\n\n    consola.warn(\n      `Provider ${providerName} has authType 'oauth2', which is only supported by the builtin codex provider, falling back to ${defaultAuthType}`,\n    )\n    return defaultAuthType\n  }\n\n  if (authType === \"authorization\" || authType === \"azure-entra\") {\n    return authType\n  }\n\n  consola.warn(\n    `Provider ${providerName} has invalid authType '${authType}', falling back to ${defaultAuthType}`,\n  )\n  return defaultAuthType\n}\n\nfunction isProviderApiKeyRequired(\n  providerName: string,\n  authType: ProviderAuthType,\n): boolean {\n  return (\n    authType !== \"azure-entra\"\n    && !(providerName === \"codex\" && authType === \"oauth2\")\n  )\n}\n\nexport function getRawProviderConfig(name: string): ProviderConfig | null {\n  const providerName = name.trim()\n  if (!providerName) {\n    return null\n  }\n\n  const config = getConfig()\n  return config.providers?.[providerName] ?? null\n}\n\nexport function setProviderConfig(\n  name: string,\n  provider: ProviderConfig,\n): ProviderConfig {\n  const providerName = name.trim()\n  if (!providerName) {\n    throw new Error(\"Provider name must be a non-empty string\")\n  }\n\n  if (isReservedProviderName(providerName)) {\n    throw new Error(\n      `Provider ${providerName} is reserved and cannot be configured in config.providers`,\n    )\n  }\n\n  const editableConfig = readEditableConfigFromDisk()\n  const nextConfig = {\n    ...editableConfig,\n    providers: {\n      ...editableConfig.providers,\n      [providerName]: provider,\n    },\n  }\n\n  writeConfigToDisk(nextConfig)\n  reloadConfig()\n  return getRawProviderConfig(providerName) ?? provider\n}\n\nexport function getProviderConfig(name: string): ResolvedProviderConfig | null {\n  const providerName = name.trim()\n  if (!providerName) {\n    return null\n  }\n\n  if (isReservedProviderName(providerName)) {\n    consola.warn(\n      `Provider ${providerName} is reserved and cannot be configured in config.providers`,\n    )\n    return null\n  }\n\n  const provider = getRawProviderConfig(providerName)\n  if (!provider) {\n    return null\n  }\n\n  if (provider.enabled === false) {\n    return null\n  }\n\n  const type = provider.type ?? \"anthropic\"\n  if (!isSupportedProviderType(type)) {\n    consola.warn(\n      `Provider ${providerName} is ignored because type '${type}' is not supported`,\n    )\n    return null\n  }\n\n  const baseUrl = normalizeProviderBaseUrl(provider.baseUrl ?? \"\")\n  const authType = resolveProviderAuthType(\n    providerName,\n    provider.authType,\n    type,\n  )\n  const apiKey = (provider.apiKey ?? \"\").trim()\n  const missingFields = [\n    ...(baseUrl ? [] : [\"baseUrl\"]),\n    ...(isProviderApiKeyRequired(providerName, authType) && !apiKey ?\n      [\"apiKey\"]\n    : []),\n  ]\n\n  if (missingFields.length > 0) {\n    consola.warn(\n      `Provider ${providerName} is enabled but missing ${missingFields.join(\" or \")}`,\n    )\n    return null\n  }\n\n  return {\n    name: providerName,\n    type,\n    baseUrl,\n    apiKey,\n    authType,\n    pricingCurrency: normalizePricingCurrency(provider.pricingCurrency),\n    models: provider.models,\n  }\n}\n\nexport function resolveEffectiveProviderType(\n  providerConfig: ResolvedProviderConfig,\n  model: string,\n): ProviderType {\n  const modelConfig = providerConfig.models?.[model]\n  if (modelConfig?.type && isSupportedProviderType(modelConfig.type)) {\n    return modelConfig.type\n  }\n\n  if (providerConfig.name === \"opencode-go\") {\n    if (OPENCODE_ANTHROPIC_MODEL_PATTERN.test(model)) {\n      return \"anthropic\"\n    }\n    if (OPENCODE_RESPONSES_MODEL_PATTERN.test(model)) {\n      return \"openai-responses\"\n    }\n  }\n\n  return providerConfig.type\n}\n\nfunction normalizePricingCurrency(\n  value: string | undefined,\n): string | undefined {\n  const currency = value?.trim().toUpperCase()\n  return currency || undefined\n}\n\nexport function listEnabledProviders(): Array<string> {\n  const config = getConfig()\n  const providerNames = Object.keys(config.providers ?? {})\n  return providerNames.filter((name) => getProviderConfig(name) !== null)\n}\n\nexport function isReservedProviderName(name: string): boolean {\n  return name.trim() === \"copilot\"\n}\n"],"mappings":";;;;;;;AAIA,MAAM,yBAAyB;AAO/B,MAAM,kBAAkB,cAA4B;CAClD,IAAI,QAAQ,aAAa,SACvB;CAGF,IAAI;CACJ,IAAI;EACF,cAAc,GAAG,SAAS,WAAW,GAAG;EACxC,GAAG,UAAU,WAAW;CAC1B,SAAS,OAAO;EACd,QAAQ,KAAK,8BAA8B,aAAa,KAAK;CAC/D,UAAU;EACR,IAAI,gBAAgB,KAAA,GAClB,IAAI;GACF,GAAG,UAAU,WAAW;EAC1B,QAAQ,CAER;CAEJ;AACF;AAEA,SAAgB,oBAAoB,UAAkB,SAAuB;CAC3E,MAAM,YAAY,KAAK,QAAQ,QAAQ;CACvC,MAAM,WAAW,KAAK,KACpB,WACA,IAAI,KAAK,SAAS,QAAQ,EAAE,GAAG,QAAQ,IAAI,GAAG,YAAY,sBAAsB,CAAC,CAAC,SAAS,KAAK,EAAE,KACpG;CAEA,GAAG,UAAU,WAAW,EAAE,WAAW,KAAK,CAAC;CAE3C,IAAI;CACJ,IAAI,kBAAkB;CACtB,IAAI;EACF,iBAAiB,GAAG,SAAS,UAAU,MAAM,GAAK;EAClD,kBAAkB;EAClB,GAAG,cAAc,gBAAgB,SAAS,MAAM;EAChD,GAAG,UAAU,cAAc;EAC3B,GAAG,UAAU,cAAc;EAC3B,iBAAiB,KAAA;EACjB,GAAG,WAAW,UAAU,QAAQ;EAChC,kBAAkB;EAClB,eAAe,SAAS;CAC1B,SAAS,OAAO;EACd,IAAI,mBAAmB,KAAA,GACrB,IAAI;GACF,GAAG,UAAU,cAAc;EAC7B,QAAQ,CAER;EAGF,IAAI,iBACF,IAAI;GACF,GAAG,OAAO,UAAU,EAAE,OAAO,KAAK,CAAC;EACrC,QAAQ,CAER;EAGF,MAAM;CACR;AACF;;;ACrEA,MAAM,WAAW,QAAQ,IAAI,uBAAuB,KAAK,KAAK;AAC9D,MAAM,oBAAoB,QAAQ,IAAI,6BAA6B,SAAS;AAE5E,MAAM,cAAc,KAAK,KAAK,GAAG,QAAQ,GAAG,UAAU,SAAS,aAAa;AAC5E,MAAM,UAAU,QAAQ,IAAI,oBAAoB;AAUhD,MAAa,QAAQ;CACnB;CACA,mBAVwB,KAAK,KAC7B,SACA,UACA,oBAAoB,cAOpB;CACA,uBAN4B,KAAK,KAAK,SAAS,wBAM/C;CACA,aANkB,KAAK,KAAK,SAAS,aAMrC;AACF;AAEA,eAAsB,cAA6B;CACjD,MAAMA,KAAG,MAAM,KAAK,KAAK,MAAM,SAAS,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;CACtE,MAAM,WAAW,MAAM,iBAAiB;CACxC,MAAM,WAAW,MAAM,WAAW;AACpC;AAEA,eAAe,WAAW,UAAiC;CACzD,IAAI;EACF,MAAMA,KAAG,OAAO,UAAUA,KAAG,UAAU,IAAI;CAC7C,QAAQ;EACN,MAAMA,KAAG,UAAU,UAAU,EAAE;EAC/B,MAAMA,KAAG,MAAM,UAAU,GAAK;CAChC;AACF;;;ACyBA,MAAa,iCAAiC;CAC5C,kBAAkB;CAClB,2BAA2B;CAC3B,2BAA2B;CAC3B,8BAA8B;CAC9B,wBAAwB;CACxB,4BAA4B;AAC9B;AAuCA,MAAa,2BAA2B;CACtC;CACA;CACA;AACF;AAeA,MAAM,wBAAwB;;;;;;AAO9B,MAAM,qCAAqC;CACzC,WAAW;CACX,WAAW;AACb;AAEA,MAAa,2BAA2B;CACtC,UAAU;CACV,WAAW;AACb;AAEA,MAAa,gBAA2B;CACtC,MAAM,EACJ,SAAS,CAAC,EACZ;CACA,WAAW,CAAC;CACZ,eAAe,CAAC;CAChB,cAAc,EACZ,cAAc,sBAChB;CACA,YAAY;CACZ,mBAAmB;CACnB;CACA,uBAAuB,EACrB,cAAc,MAChB;CACA,gBAAgB;CAChB,0BAA0B;CAC1B,mBAAmB;CACnB,0BAA0B;CAC1B,0BAA0B;CAC1B,kBAAkB;CAClB,0BAA0B;AAC5B;AAEA,IAAI,eAAiC;AAErC,SAAS,qBAAqB,aAAqC;CACjE,IAAI,OAAO,gBAAgB,UAAU;EACnC,IAAI,gBAAgB,KAAA,GAClB,QAAQ,KACN,+DACF;EAEF,OAAO;CACT;CAEA,MAAM,wBAAwB,YAAY,KAAK;CAC/C,IAAI,CAAC,uBAAuB;EAC1B,QAAQ,KACN,+DACF;EACA,OAAO;CACT;CAEA,OAAO;AACT;AAEA,SAAS,sBAA8B;CACrC,OAAO,YAAY,EAAE,CAAC,CAAC,SAAS,KAAK;AACvC;AAEA,SAAS,YAAY,OAAgD;CACnE,OAAO,iBAAiB,SAAS,UAAU;AAC7C;AAEA,SAAS,mBAAyB;CAChC,IAAI;EACF,GAAG,WAAW,MAAM,aAAa,GAAG,UAAU,IAAI;CACpD,SAAS,OAAO;EACd,IAAI,CAAC,YAAY,KAAK,KAAK,MAAM,SAAS,UACxC,MAAM;EAGR,oBACE,MAAM,aACN,GAAG,KAAK,UAAU,eAAe,MAAM,CAAC,EAAE,GAC5C;CACF;AACF;AAEA,SAAS,qBAAgC;CACvC,iBAAiB;CACjB,MAAM,MAAM,GAAG,aAAa,MAAM,aAAa,MAAM;CACrD,IAAI,CAAC,IAAI,KAAK,GAAG;EACf,oBACE,MAAM,aACN,GAAG,KAAK,UAAU,eAAe,MAAM,CAAC,EAAE,GAC5C;EACA,OAAO;CACT;CAEA,IAAI;EACF,OAAO,KAAK,MAAM,GAAG;CACvB,SAAS,OAAO;EAKd,MAAM,UAAU,kCAAkC,MAAM,YAAY;EACpE,QAAQ,MAAM,SAAS,KAAK;EAC5B,MAAM,IAAI,MAAM,SAAS,EAAE,OAAO,MAAM,CAAC;CAC3C;AACF;AAEA,SAAgB,6BAAwC;CACtD,IAAI;EACF,MAAM,MAAM,GAAG,aAAa,MAAM,aAAa,MAAM;EACrD,IAAI,CAAC,IAAI,KAAK,GACZ,OAAO,CAAC;EAEV,OAAO,KAAK,MAAM,GAAG;CACvB,SAAS,OAAO;EACd,IAAI,YAAY,KAAK,KAAK,MAAM,SAAS,UACvC,OAAO,CAAC;EAEV,IAAI,iBAAiB,aACnB,MAAM,IAAI,MAAM,kCAAkC,MAAM,aAAa;EAEvE,MAAM;CACR;AACF;AAEA,SAAgB,kBAAkB,QAAyB;CACzD,oBAAoB,MAAM,aAAa,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE,GAAG;AAC/E;AAEA,SAAgB,qBAAqB,SAAuC;CAC1E,MAAM,iBAAiB,QACpB,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CACxB,QAAQ,QAAQ,IAAI,SAAS,CAAC;CACjC,MAAM,aAAa,CAAC,GAAG,IAAI,IAAI,cAAc,CAAC;CAE9C,MAAM,iBAAiB,2BAA2B;CAClD,kBAAkB;EAChB,GAAG;EACH,MAAM;GACJ,GAAG,eAAe;GAClB,SAAS;EACX;CACF,CAAC;CACD,aAAa;CACb,OAAO,CAAC,GAAG,UAAU;AACvB;AAEA,SAAS,mBAAmB,QAG1B;CACA,MAAM,eAAe,OAAO,gBAAgB,CAAC;CAC7C,MAAM,sBAAsB,cAAc,gBAAgB,CAAC;CAC3D,MAAM,gCACJ,OAAO,sCAAsC,CAAC;CAChD,MAAM,uCACJ,cAAc,sCAAsC,CAAC;CACvD,MAAM,wBAAwB,OAAO,yBAAyB,CAAC;CAC/D,MAAM,+BAA+B,cAAc,yBAAyB,CAAC;CAC7E,MAAM,oBAAoB,iCACxB,OAAO,iBACT;CACA,MAAM,EACJ,SAAS,2BACT,UAAU,8BACR,+BAA+B,MAAM;CAEzC,MAAM,oBAAoB,iCACxB,yBACF;CACA,MAAM,iCAAiC,cAAc,qBAAqB,CAAC;CAE3E,MAAM,2BAA2B,OAAO,KAAK,mBAAmB,CAAC,CAAC,QAC/D,UAAU,CAAC,OAAO,OAAO,cAAc,KAAK,CAC/C;CAEA,MAAM,+BAA+B,OAAO,KAC1C,4BACF,CAAC,CAAC,QAAQ,UAAU,CAAC,OAAO,OAAO,uBAAuB,KAAK,CAAC;CAChE,MAAM,4CAA4C,OAAO,KACvD,oCACF,CAAC,CAAC,QAAQ,UAAU,CAAC,OAAO,OAAO,+BAA+B,KAAK,CAAC;CACxE,MAAM,+BAA+B,OAAO,KAC1C,8BACF,CAAC,CAAC,QAAQ,QAAQ,CAAC,OAAO,OAAO,mBAAmB,GAAG,CAAC;CAExD,MAAM,wBAAwB,yBAAyB,SAAS;CAChE,MAAM,4BAA4B,6BAA6B,SAAS;CACxE,MAAM,yCACJ,0CAA0C,SAAS;CACrD,MAAM,8BAA8B,6BAA6B,SAAS;CAC1E,MAAM,8BAA8B,OAAO,QAAQ,iBAAiB,CAAC,CAAC,MACnE,CAAC,KAAK,WACL,0BAA0B,SAA0C,KACxE;CAEA,IACE,CAAC,yBACE,CAAC,6BACD,CAAC,0CACD,CAAC,+BACD,CAAC,+BACD,CAAC,2BAEJ,OAAO;EAAE,cAAc;EAAQ,SAAS;CAAM;CAIhD,MAAM,EAAE,oBAAoB,2BAA2B,GAAG,oBACxD;CAEF,OAAO;EACL,cAAc;GACZ,GAAG;GACH,mBAAmB;IACjB,GAAG;IACH,GAAG;GACL;GACA,cAAc;IACZ,GAAG;IACH,GAAG;GACL;GACA,oCAAoC;IAClC,GAAG;IACH,GAAG;GACL;GACA,uBAAuB;IACrB,GAAG;IACH,GAAG;GACL;GACA;EACF;EACA,SAAS;CACX;AACF;AAEA,SAAS,iCACP,OACyB;CACzB,IAAI,CAAC,SAAS,OAAO,UAAU,UAC7B,OAAO,CAAC;CAGV,OAAO;EACL,GAAI,OAAO,MAAM,aAAa,YAC5B,EAAE,UAAU,MAAM,SAAS,IAC3B,CAAC;EACH,GAAI,OAAO,MAAM,cAAc,YAC7B,EAAE,WAAW,MAAM,UAAU,IAC7B,CAAC;CACL;AACF;AAcA,MAAM,kCACJ,WAC4D;CAC5D,MAAM,cAAe,OAA2B;CAChD,MAAM,EAAE,oBAAoB,GAAG,aAAc,OAAO,qBAC/C,eACA,CAAC;CAEN,MAAM,iBAAiB,gBAAgB,KAAA;CACvC,MAAM,0BAA0B,uBAAuB,KAAA;CACvD,IAAI,CAAC,kBAAkB,CAAC,yBACtB,OAAO;EAAE,SAAS;EAAO;CAAS;CAGpC,QAAQ,KACN,wHACF;CAEA,OAAO;EACL,SAAS;EACT,UACE,SAAS,qBAAqB,KAAA,KAAa,0BACzC;GAAE,GAAG;GAAU,kBAAkB;EAAmB,IACpD;CACN;AACF;AAEA,SAAS,kBAAkB,QAGzB;CACA,MAAM,wBAAwB,qBAAqB,OAAO,MAAM,WAAW;CAC3E,IAAI,uBAAuB;EACzB,IAAI,OAAO,MAAM,gBAAgB,uBAC/B,OAAO;GAAE,cAAc;GAAQ,SAAS;EAAM;EAGhD,OAAO;GACL,cAAc;IACZ,GAAG;IACH,MAAM;KACJ,GAAG,OAAO;KACV,aAAa;IACf;GACF;GACA,SAAS;EACX;CACF;CAEA,MAAM,iBAAiB,2BAA2B;CAClD,MAAM,EAAE,iBAAiB,mBAAmB;EAC1C,GAAG;EACH,MAAM;GACJ,GAAG,eAAe;GAClB,aAAa,oBAAoB;EACnC;CACF,CAAC;CAED,OAAO;EAAE;EAAc,SAAS;CAAK;AACvC;AAEA,SAAgB,0BAAqC;CAEnD,MAAM,EAAE,cAAc,YAAY,mBADnB,mBAC2C,CAAC;CAC3D,MAAM,EACJ,cAAc,6BACd,SAAS,uBACP,kBAAkB,YAAY;CAGlC,IAF4B,WAAW,oBAGrC,IAAI;EACF,kBAAkB,2BAA2B;CAC/C,SAAS,YAAY;EACnB,IAAI,oBACF,MAAM;EAGR,QAAQ,KACN,wDACA,UACF;CACF;CAGF,eAAe;CACf,OAAO;AACT;AAEA,SAAgB,YAAuB;CACrC,iBAAiB,mBAAmB,mBAAmB,CAAC,CAAC,CAAC;CAC1D,OAAO;AACT;AAEA,SAAgB,eAA0B;CACxC,OAAO,wBAAwB;AACjC;AAEA,SAAgB,uBAAgC;CAE9C,OADe,UACH,CAAC,CAAC,kBAAkB;AAClC;AAEA,SAAgB,iCAA0C;CAExD,OADe,UACH,CAAC,CAAC,4BAA4B;AAC5C;AAKA,SAAgB,6BAAgE;CAC9E,OAAO,iCAAiC,UAAU,CAAC,CAAC,iBAAiB;AACvE;AAEA,MAAa,oCACX,gBACuC;CACvC,kBAAkB,yBAChB,YAAY,kBACZ,+BAA+B,gBACjC;CACA,2BAA2B,yBACzB,YAAY,2BACZ,+BAA+B,yBACjC;CACA,2BAA2B,yBACzB,YAAY,2BACZ,+BAA+B,yBACjC;CACA,8BAA8B,yBAC5B,YAAY,8BACZ,+BAA+B,4BACjC;CACA,wBAAwB,yBACtB,YAAY,wBACZ,+BAA+B,sBACjC;CACA,4BAA4B,yBAC1B,YAAY,4BACZ,+BAA+B,0BACjC;AACF;AAEA,MAAM,4BAA4B,OAAgB,aAA6B;CAC7E,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,GAAG,OAAO;CAEjE,MAAM,aAAa,KAAK,MAAM,KAAK;CACnC,OAAO,aAAa,IAAI,aAAa;AACvC;AAEA,SAAgB,qBAAyC;CAEvD,OADe,UACH,CAAC,CAAC,mBAAmB,QAAQ,IAAI,qBAAqB,KAAA;AACpE;AAEA,SAAgB,iCAA0C;CAExD,OADe,UACH,CAAC,CAAC,4BAA4B;AAC5C;AAEA,SAAgB,oCAA6C;CAE3D,OADe,UACH,CAAC,CAAC,4BAA4B;AAC5C;AAEA,SAAgB,sBAA0C;CAExD,QADc,UAAU,CAAC,CAAC,oBAAoB,aAAA,CACjC,KAAK,KAAK,KAAA;AACzB;AAEA,SAAgB,8BAAkD;CAEhE,MAAM,QADS,UACI,CAAC,CAAC,4BAA4B;CACjD,OAAO,SAAS,MAAM,KAAK,CAAC,CAAC,SAAS,IAAI,QAAQ,KAAA;AACpD;AAEA,SAAgB,qBAAyC;CAEvD,MAAM,QADS,UACI,CAAC,CAAC;CACrB,OAAO,SAAS,MAAM,KAAK,CAAC,CAAC,SAAS,IAAI,MAAM,KAAK,IAAI,KAAA;AAC3D;AAEA,SAAgB,2BAAmC;CAEjD,OADe,UACH,CAAC,CAAC,yBAAyB;AACzC;;;AC9jBA,MAAM,oBAAoB;AAE1B,SAAS,eAAe,OAAwB;CAC9C,MAAM,QAAQ,kBAAkB,KAAK,KAAK;CAC1C,IAAI,CAAC,OACH,OAAO;CAET,MAAM,eAAe,OAAO,SAAS,MAAM,IAAI,EAAE;CACjD,IAAI,eAAe,GACjB,OAAO;CAET,IAAI,iBAAiB,GACnB,OAAO;CAGT,QADqB,MAAM,KAAK,OAAO,SAAS,MAAM,IAAI,EAAE,IAAI,MACzC;AACzB;AAEA,SAAgB,eAAe,OAAwB;CACrD,MAAM,QAAQ,kBAAkB,KAAK,KAAK;CAC1C,IAAI,CAAC,OACH,OAAO;CAET,MAAM,eAAe,OAAO,SAAS,MAAM,IAAI,EAAE;CACjD,IAAI,eAAe,GACjB,OAAO;CAET,IAAI,iBAAiB,GACnB,OAAO;CAGT,QADqB,MAAM,KAAK,OAAO,SAAS,MAAM,IAAI,EAAE,IAAI,MACzC;AACzB;AAEA,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;AAoB7B,SAAgB,uBAAuB,OAAuB;CAE5D,MAAM,aADS,UACS,CAAC,CAAC,eAAe;CACzC,IAAI,eAAe,KAAA,GACjB,OAAO;CAET,OAAO,eAAe,KAAK,IAAI,uBAAuB;AACxD;AAEA,SAAgB,mBAA2C;CAEzD,MAAM,gBADS,UACY,CAAC,CAAC;CAC7B,IAAI,CAAC,eACH,OAAO,EAAE,GAAG,cAAc,cAAc;CAG1C,MAAM,gBAAwC,CAAC;CAC/C,KAAK,MAAM,CAAC,aAAa,gBAAgB,OAAO,QAAQ,aAAa,GAAG;EACtE,IACE,CAAC,eACE,OAAO,gBAAgB,YACvB,YAAY,WAAW,GAE1B;EAEF,cAAc,eAAe;CAC/B;CAEA,OAAO;AACT;AAEA,SAAS,sBACP,eACwB;CACxB,MAAM,oBAA4C,CAAC;CACnD,KAAK,MAAM,CAAC,aAAa,gBAAgB,OAAO,QAAQ,aAAa,GAAG;EACtE,IAAI,CAAC,eAAe,CAAC,aACnB,MAAM,IAAI,MACR,iEACF;EAEF,kBAAkB,eAAe;CACnC;CAEA,OAAO;AACT;AAEA,SAAgB,iBACd,eACwB;CAMxB,kBAAkB;EAJhB,GAAG,2BAA2B;EAC9B,eAAe,sBAAsB,aAAa;CAGlC,CAAU;CAC5B,aAAa;CACb,OAAO,iBAAiB;AAC1B;AAEA,SAAgB,mBAAmB,OAAuB;CACxD,OAAO,iBAAiB,CAAC,CAAC,UAAU;AACtC;AAEA,SAAgB,gBAAwB;CAEtC,OADe,UACH,CAAC,CAAC,cAAc;AAC9B;AAEA,SAAgB,wCAAiD;CAE/D,OADe,UACH,CAAC,CAAC,mBAAmB,YAAY,yBAAyB;AACxE;AAEA,SAAgB,yCAAkD;CAEhE,OADe,UAER,CAAC,CAAC,mBAAmB,aAAa,yBAAyB;AAEpE;AAEA,SAAgB,qCACd,OACoB;CAEpB,MAAM,YADS,UACQ,CAAC,CAAC,qCAAqC;CAE9D,IACE,OAAO,cAAc,YAClB,CAAC,OAAO,SAAS,SAAS,KAC1B,aAAa,GAEhB;CAGF,OAAO;AACT;AAEA,SAAgB,2BACd,OACkE;CAElE,MAAM,aADS,UACS,CAAC,CAAC,wBAAwB;CAClD,IAAI,eAAe,KAAA,GACjB,OAAO;CAET,OAAO,eAAe,KAAK,IAAI,UAAU;AAC3C;;;AClJA,MAAM,mCAAmC;AACzC,MAAM,mCAAmC;AAEzC,SAAgB,yBAAyB,KAAqB;CAC5D,OAAO,IAAI,KAAK,CAAC,CAAC,QAAQ,SAAS,EAAE;AACvC;AAEA,SAAgB,wBAAwB,OAAsC;CAC5E,OAAO,yBAAyB,SAAS,KAAqB;AAChE;AAEA,SAAS,2BACP,cACkB;CAClB,OAAO,iBAAiB,cAAc,cAAc;AACtD;AAEA,SAAgB,wBACd,cACA,UACA,cACkB;CAClB,MAAM,kBAAkB,2BAA2B,YAAY;CAC/D,IAAI,aAAa,KAAA,GACf,OAAO;CAGT,IAAI,aAAa,aACf,OAAO;CAGT,IAAI,aAAa,UAAU;EACzB,IAAI,iBAAiB,SACnB,OAAO;EAGT,QAAQ,KACN,YAAY,aAAa,iGAAiG,iBAC5H;EACA,OAAO;CACT;CAEA,IAAI,aAAa,mBAAmB,aAAa,eAC/C,OAAO;CAGT,QAAQ,KACN,YAAY,aAAa,yBAAyB,SAAS,qBAAqB,iBAClF;CACA,OAAO;AACT;AAEA,SAAS,yBACP,cACA,UACS;CACT,OACE,aAAa,iBACV,EAAE,iBAAiB,WAAW,aAAa;AAElD;AAEA,SAAgB,qBAAqB,MAAqC;CACxE,MAAM,eAAe,KAAK,KAAK;CAC/B,IAAI,CAAC,cACH,OAAO;CAIT,OADe,UACH,CAAC,CAAC,YAAY,iBAAiB;AAC7C;AAEA,SAAgB,kBACd,MACA,UACgB;CAChB,MAAM,eAAe,KAAK,KAAK;CAC/B,IAAI,CAAC,cACH,MAAM,IAAI,MAAM,0CAA0C;CAG5D,IAAI,uBAAuB,YAAY,GACrC,MAAM,IAAI,MACR,YAAY,aAAa,0DAC3B;CAGF,MAAM,iBAAiB,2BAA2B;CASlD,kBAAkB;EAPhB,GAAG;EACH,WAAW;GACT,GAAG,eAAe;IACjB,eAAe;EAClB;CAGgB,CAAU;CAC5B,aAAa;CACb,OAAO,qBAAqB,YAAY,KAAK;AAC/C;AAEA,SAAgB,kBAAkB,MAA6C;CAC7E,MAAM,eAAe,KAAK,KAAK;CAC/B,IAAI,CAAC,cACH,OAAO;CAGT,IAAI,uBAAuB,YAAY,GAAG;EACxC,QAAQ,KACN,YAAY,aAAa,0DAC3B;EACA,OAAO;CACT;CAEA,MAAM,WAAW,qBAAqB,YAAY;CAClD,IAAI,CAAC,UACH,OAAO;CAGT,IAAI,SAAS,YAAY,OACvB,OAAO;CAGT,MAAM,OAAO,SAAS,QAAQ;CAC9B,IAAI,CAAC,wBAAwB,IAAI,GAAG;EAClC,QAAQ,KACN,YAAY,aAAa,4BAA4B,KAAK,mBAC5D;EACA,OAAO;CACT;CAEA,MAAM,UAAU,yBAAyB,SAAS,WAAW,EAAE;CAC/D,MAAM,WAAW,wBACf,cACA,SAAS,UACT,IACF;CACA,MAAM,UAAU,SAAS,UAAU,GAAA,CAAI,KAAK;CAC5C,MAAM,gBAAgB,CACpB,GAAI,UAAU,CAAC,IAAI,CAAC,SAAS,GAC7B,GAAI,yBAAyB,cAAc,QAAQ,KAAK,CAAC,SACvD,CAAC,QAAQ,IACT,CAAC,CACL;CAEA,IAAI,cAAc,SAAS,GAAG;EAC5B,QAAQ,KACN,YAAY,aAAa,0BAA0B,cAAc,KAAK,MAAM,GAC9E;EACA,OAAO;CACT;CAEA,OAAO;EACL,MAAM;EACN;EACA;EACA;EACA;EACA,iBAAiB,yBAAyB,SAAS,eAAe;EAClE,QAAQ,SAAS;CACnB;AACF;AAEA,SAAgB,6BACd,gBACA,OACc;CACd,MAAM,cAAc,eAAe,SAAS;CAC5C,IAAI,aAAa,QAAQ,wBAAwB,YAAY,IAAI,GAC/D,OAAO,YAAY;CAGrB,IAAI,eAAe,SAAS,eAAe;EACzC,IAAI,iCAAiC,KAAK,KAAK,GAC7C,OAAO;EAET,IAAI,iCAAiC,KAAK,KAAK,GAC7C,OAAO;CAEX;CAEA,OAAO,eAAe;AACxB;AAEA,SAAS,yBACP,OACoB;CAEpB,OADiB,OAAO,KAAK,CAAC,CAAC,YAAY,KACxB,KAAA;AACrB;AAEA,SAAgB,uBAAsC;CACpD,MAAM,SAAS,UAAU;CAEzB,OADsB,OAAO,KAAK,OAAO,aAAa,CAAC,CACpC,CAAC,CAAC,QAAQ,SAAS,kBAAkB,IAAI,MAAM,IAAI;AACxE;AAEA,SAAgB,uBAAuB,MAAuB;CAC5D,OAAO,KAAK,KAAK,MAAM;AACzB"}