@jeffreycao/copilot-api 2.6.26 → 2.6.29

package/dist/{start-bv97pvAG.js → start-DX3Q5lol.js}

@@ -1,14 +1,11 @@
 import { S as ensurePaths, g as mergeConfigWithDefaults } from "./config-store-CARrUljo.js";
 import { i as listEnabledProviders, p as startModelsDevCache } from "./config-B2OaAnpL.js";
-import { i as HTTPError, r as isGitHubCopilotEnabled } from "./github-copilot-provider-DlQZgaCT.js";
-import { D as initOpencodeVersion, F as getConfiguredApiKeys, I as getMissingApiKeysMessage, S as copilotModelsHeaders, Z as state, _ as GITHUB_TOKEN_ENV, b as copilotBaseUrl, n as logUser, s as setupCopilotToken, v as readGitHubToken, y as readGitHubTokenFromEnv } from "./token-DgVri1k7.js";
-import { a as runProviderSetup } from "./auth-BUdtezdW.js";
-import { n as getLatestModelForFamily } from "./models-CHdnmX1S.js";
+import { r as isGitHubCopilotEnabled } from "./github-copilot-provider-DlQZgaCT.js";
+import { $ as state, L as getConfiguredApiKeys, R as getMissingApiKeysMessage, b as readGitHubToken, k as initOpencodeVersion, x as readGitHubTokenFromEnv, y as GITHUB_TOKEN_ENV } from "./token-0pmwyQAu.js";
+import { a as runProviderSetup } from "./auth-CmKD_Gmp.js";
+import { i as getLatestModelForFamily, t as setupCopilotRuntime } from "./copilot-runtime-B4x9RzsD.js";
 import { defineCommand } from "citty";
 import consola from "consola";
-import { createHash, randomUUID } from "node:crypto";
-import path from "node:path";
-import { networkInterfaces } from "node:os";
 import { getProxyForUrl } from "proxy-from-env";
 import { Agent, ProxyAgent, setGlobalDispatcher } from "undici";
 import { execSync } from "node:child_process";
@@ -178,273 +175,6 @@ function generateEnvScript(envVars, commandToRun = "") {
 	return commandBlock || commandToRun;
 }
 //#endregion
-//#region src/services/copilot/get-models.ts
-const getModels = async () => {
-	consola.info(`Fetching models from ${copilotBaseUrl(state)}/models`);
-	const response = await fetch(`${copilotBaseUrl(state)}/models`, { headers: copilotModelsHeaders(state) });
-	if (!response.ok) {
-		const errorText = await response.clone().text();
-		consola.error("Failed to get models response body", errorText);
-		throw new HTTPError("Failed to get models", response);
-	}
-	return await response.json();
-};
-//#endregion
-//#region src/services/copilot/models-cache.ts
-const MODELS_REFRESH_BASE_MS = 18e5;
-let modelsRefreshTimer = null;
-const stopModelsRefreshLoop = () => {
-	if (modelsRefreshTimer) {
-		clearTimeout(modelsRefreshTimer);
-		modelsRefreshTimer = null;
-	}
-};
-const refreshModels = async (fetcher) => {
-	const prevIds = new Set(state.models?.data.map((m) => m.id) ?? []);
-	const models = await fetcher();
-	state.models = {
-		...models,
-		data: models.data.filter((model) => model.policy?.state !== "disabled" && (model.model_picker_enabled || model.capabilities.type === "embeddings"))
-	};
-	const nextIds = state.models.data.map((m) => m.id);
-	const added = nextIds.filter((id) => !prevIds.has(id));
-	if (added.length > 0) consola.info(`Models refresh: ${added.length} new`);
-	else consola.debug(`Models refresh: no changes (${nextIds.length} total)`);
-};
-const scheduleModelsRefresh = (fetcher, intervalMs) => {
-	const delay = intervalMs + Math.floor(Math.random() * (intervalMs / 6));
-	consola.debug(`Scheduling next models refresh in ${Math.round(delay / 1e3)} seconds`);
-	stopModelsRefreshLoop();
-	modelsRefreshTimer = setTimeout(async () => {
-		try {
-			await refreshModels(fetcher);
-		} catch (error) {
-			consola.warn("Failed to refresh models, keeping previous cache.", error);
-		} finally {
-			scheduleModelsRefresh(fetcher, intervalMs);
-		}
-	}, delay);
-};
-async function cacheModels(fetcher = getModels, intervalMs = MODELS_REFRESH_BASE_MS) {
-	await refreshModels(fetcher);
-	scheduleModelsRefresh(fetcher, intervalMs);
-}
-//#endregion
-//#region src/lib/deviceid.ts
-const WINDOWS_DEVICE_ID_KEY = String.raw`\SOFTWARE\Microsoft\DeveloperTools`;
-const WINDOWS_DEVICE_ID_NAME = "deviceid";
-const windows64Architectures = /* @__PURE__ */ new Set([
-	"AMD64",
-	"ARM64",
-	"IA64"
-]);
-const getPosixHomeDir = () => {
-	if (!process.env.HOME) throw new Error("Home directory not found");
-	return process.env.HOME;
-};
-const getDeviceIdFilePath = () => {
-	let folder;
-	switch (process.platform) {
-		case "darwin":
-			folder = path.posix.join(getPosixHomeDir(), "Library", "Application Support");
-			break;
-		case "linux":
-			folder = process.env.XDG_CACHE_HOME ?? path.posix.join(getPosixHomeDir(), ".cache");
-			break;
-		default: throw new Error("Unsupported platform");
-	}
-	return path.posix.join(folder, "Microsoft", "DeveloperTools", "deviceid");
-};
-const isMissingFileError = (error) => {
-	return error instanceof Error && "code" in error && error.code === "ENOENT";
-};
-const readStoredDeviceIdFile = async (filePath) => {
-	const { readFile } = await import("node:fs/promises");
-	try {
-		return await readFile(filePath, "utf8");
-	} catch (error) {
-		if (isMissingFileError(error)) return;
-		throw error;
-	}
-};
-const writeStoredDeviceIdFile = async (filePath, deviceId) => {
-	const { mkdir, writeFile } = await import("node:fs/promises");
-	await mkdir(path.posix.dirname(filePath), { recursive: true });
-	await writeFile(filePath, deviceId, "utf8");
-};
-const getWindowsRegistryArch = () => {
-	const architecture = (process.env.PROCESSOR_ARCHITEW6432 ?? process.env.PROCESSOR_ARCHITECTURE)?.toUpperCase();
-	return architecture && windows64Architectures.has(architecture) ? "x64" : void 0;
-};
-const loadWinreg = async () => {
-	const module = await import("winreg");
-	return "default" in module ? module.default : module;
-};
-const isMissingRegistryError = (error) => {
-	if (!error) return false;
-	const errorCode = Number(error.code);
-	return Number.isFinite(errorCode) && errorCode === 1;
-};
-const createWindowsRegistry = async () => {
-	const Winreg = await loadWinreg();
-	return {
-		registry: new Winreg({
-			hive: Winreg.HKCU,
-			key: WINDOWS_DEVICE_ID_KEY,
-			arch: getWindowsRegistryArch()
-		}),
-		regSz: Winreg.REG_SZ
-	};
-};
-const readRegistryString = async (registry, name) => {
-	return new Promise((resolve, reject) => {
-		registry.get(name, (error, item) => {
-			if (isMissingRegistryError(error)) {
-				resolve(void 0);
-				return;
-			}
-			if (error) {
-				reject(error instanceof Error ? error : /* @__PURE__ */ new Error("Unknown registry error"));
-				return;
-			}
-			resolve(item?.value);
-		});
-	});
-};
-const writeRegistryString = async ({ registry, regSz, name, value }) => {
-	return new Promise((resolve, reject) => {
-		registry.set(name, regSz, value, (error) => {
-			if (error) {
-				reject(error instanceof Error ? error : /* @__PURE__ */ new Error("Unknown registry error"));
-				return;
-			}
-			resolve();
-		});
-	});
-};
-const getStoredVSCodeDeviceId = async () => {
-	switch (process.platform) {
-		case "win32": {
-			const { registry } = await createWindowsRegistry();
-			return readRegistryString(registry, WINDOWS_DEVICE_ID_NAME);
-		}
-		case "darwin":
-		case "linux": return readStoredDeviceIdFile(getDeviceIdFilePath());
-		default: throw new Error("Unsupported platform");
-	}
-};
-const setStoredVSCodeDeviceId = async (deviceId) => {
-	switch (process.platform) {
-		case "win32": {
-			const { registry, regSz } = await createWindowsRegistry();
-			await writeRegistryString({
-				registry,
-				regSz,
-				name: WINDOWS_DEVICE_ID_NAME,
-				value: deviceId
-			});
-			return;
-		}
-		case "darwin":
-		case "linux":
-			await writeStoredDeviceIdFile(getDeviceIdFilePath(), deviceId);
-			return;
-		default: throw new Error("Unsupported platform");
-	}
-};
-const createVSCodeDeviceId = () => randomUUID().toLowerCase();
-async function getVSCodeDeviceId() {
-	let deviceId;
-	try {
-		deviceId = await getStoredVSCodeDeviceId();
-	} catch (error) {
-		consola.debug("Failed to read VSCode device id", error);
-	}
-	if (deviceId) return deviceId;
-	const newDeviceId = createVSCodeDeviceId();
-	try {
-		await setStoredVSCodeDeviceId(newDeviceId);
-	} catch (error) {
-		consola.warn("Failed to persist VSCode device id, using ephemeral id", error);
-	}
-	return newDeviceId;
-}
-//#endregion
-//#region src/services/get-vscode-version.ts
-const FALLBACK = "1.139.1";
-async function getVSCodeVersion() {
-	await Promise.resolve();
-	return FALLBACK;
-}
-//#endregion
-//#region src/services/vscode-env.ts
-const cacheVSCodeVersion = async () => {
-	const response = await getVSCodeVersion();
-	state.vsCodeVersion = response;
-	consola.info(`Using VSCode version: ${response}`);
-};
-const invalidMacAddresses = /* @__PURE__ */ new Set([
-	"00:00:00:00:00:00",
-	"ff:ff:ff:ff:ff:ff",
-	"ac:de:48:00:11:22"
-]);
-function validateMacAddress(candidate) {
-	const tempCandidate = candidate.replaceAll("-", ":").toLowerCase();
-	return !invalidMacAddresses.has(tempCandidate);
-}
-function getMac() {
-	const ifaces = networkInterfaces();
-	for (const name in ifaces) {
-		const networkInterface = ifaces[name];
-		if (networkInterface) {
-			for (const { mac } of networkInterface) if (validateMacAddress(mac)) return mac;
-		}
-	}
-	return null;
-}
-const cacheMacMachineId = () => {
-	const macAddress = getMac() ?? randomUUID();
-	state.macMachineId = createHash("sha256").update(macAddress, "utf8").digest("hex");
-	consola.debug(`Using machine ID: ${state.macMachineId}`);
-};
-const cacheVsCodeDeviceId = async () => {
-	state.vsCodeDeviceId = await getVSCodeDeviceId();
-	consola.debug(`Using VSCode device ID: ${state.vsCodeDeviceId}`);
-};
-const SESSION_REFRESH_BASE_MS = 36e5;
-const SESSION_REFRESH_JITTER_MS = 12e5;
-let vsCodeSessionRefreshTimer = null;
-const generateSessionId = () => {
-	state.vsCodeSessionId = randomUUID() + Date.now().toString();
-	consola.debug(`Generated VSCode session ID: ${state.vsCodeSessionId}`);
-};
-const stopVsCodeSessionRefreshLoop = () => {
-	if (vsCodeSessionRefreshTimer) {
-		clearTimeout(vsCodeSessionRefreshTimer);
-		vsCodeSessionRefreshTimer = null;
-	}
-};
-const scheduleSessionIdRefresh = () => {
-	const randomDelay = Math.floor(Math.random() * SESSION_REFRESH_JITTER_MS);
-	const delay = SESSION_REFRESH_BASE_MS + randomDelay;
-	consola.debug(`Scheduling next VSCode session ID refresh in ${Math.round(delay / 1e3)} seconds`);
-	stopVsCodeSessionRefreshLoop();
-	vsCodeSessionRefreshTimer = setTimeout(() => {
-		try {
-			generateSessionId();
-		} catch (error) {
-			consola.error("Failed to refresh session ID, rescheduling...", error);
-		} finally {
-			scheduleSessionIdRefresh();
-		}
-	}, delay);
-};
-const cacheVsCodeSessionId = () => {
-	stopVsCodeSessionRefreshLoop();
-	generateSessionId();
-	scheduleSessionIdRefresh();
-};
-//#endregion
 //#region src/start.ts
 async function resolveGitHubToken(cliToken) {
 	if (cliToken) return {
@@ -464,15 +194,9 @@ async function resolveGitHubToken(cliToken) {
 	return null;
 }
 async function setupCopilotMode(githubToken, source, serverUrl, claudeCode) {
-	state.githubToken = githubToken;
+	state.githubTokenSource = source;
 	consola.info(source === "cli" ? "Using provided GitHub token" : source === "env" ? `Using GitHub token from the ${GITHUB_TOKEN_ENV} environment variable` : "Using GitHub token from local file");
-	await logUser();
-	await cacheVSCodeVersion();
-	cacheMacMachineId();
-	cacheVsCodeSessionId();
-	await cacheVsCodeDeviceId();
-	await setupCopilotToken();
-	await cacheModels();
+	await setupCopilotRuntime(githubToken);
 	if (claudeCode) runClaudeCode(serverUrl);
 }
 function runClaudeCode(serverUrl) {
@@ -549,7 +273,7 @@ async function runServer(options) {
 	if (resolvedGitHubToken && isGitHubCopilotEnabled()) await setupCopilotMode(resolvedGitHubToken.token, resolvedGitHubToken.source, serverUrl, options.claudeCode);
 	else await setupProviderMode(serverUrl, options.claudeCode);
 	consola.box(`🌐 Dashboard Viewer: ${serverUrl}/usage-viewer?endpoint=${serverUrl}/usage`);
-	const { createServer } = await import("./server-JC3AQpcl.js");
+	const { createServer } = await import("./server-VjfrS2Aw.js");
 	const server = createServer({ networkExposed: binding.networkExposed });
 	serve({
 		fetch: server.fetch,
@@ -618,4 +342,4 @@ const start = defineCommand({
 //#endregion
 export { start };
 
-//# sourceMappingURL=start-bv97pvAG.js.map
+//# sourceMappingURL=start-DX3Q5lol.js.map

package/dist/start-DX3Q5lol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"start-DX3Q5lol.js","names":["get","process"],"sources":["../src/lib/proxy.ts","../src/lib/server-host-shared.ts","../src/lib/server-host.ts","../src/lib/shell.ts","../src/start.ts"],"sourcesContent":["import consola from \"consola\"\nimport { getProxyForUrl } from \"proxy-from-env\"\nimport { Agent, ProxyAgent, setGlobalDispatcher, type Dispatcher } from \"undici\"\n\nlet proxyEnvDispatcher: Dispatcher | undefined\n\nexport function getProxyEnvDispatcher(): Dispatcher | undefined {\n  return proxyEnvDispatcher\n}\n\nexport function initProxyFromEnv(): void {\n  try {\n    const direct = new Agent()\n    const proxies = new Map<string, ProxyAgent>()\n\n    // We only need a minimal dispatcher that implements `dispatch` at runtime.\n    // Typing the object as `Dispatcher` forces TypeScript to require many\n    // additional methods. Instead, keep a plain object and cast when passing\n    // to `setGlobalDispatcher`.\n    const dispatcher = {\n      dispatch(\n        options: Dispatcher.DispatchOptions,\n        handler: Dispatcher.DispatchHandler,\n      ) {\n        try {\n          const origin =\n            typeof options.origin === \"string\" ?\n              new URL(options.origin)\n            : (options.origin as URL)\n          const get = getProxyForUrl as unknown as (\n            u: string,\n          ) => string | undefined\n          const raw = get(origin.toString())\n          const proxyUrl = raw && raw.length > 0 ? raw : undefined\n          if (!proxyUrl) {\n            consola.debug(`HTTP proxy bypass: ${origin.hostname}`)\n            return (direct as unknown as Dispatcher).dispatch(options, handler)\n          }\n          let agent = proxies.get(proxyUrl)\n          if (!agent) {\n            agent = new ProxyAgent(proxyUrl)\n            proxies.set(proxyUrl, agent)\n          }\n          let label = proxyUrl\n          try {\n            const u = new URL(proxyUrl)\n            label = `${u.protocol}//${u.host}`\n          } catch {\n            /* noop */\n          }\n          consola.debug(`HTTP proxy route: ${origin.hostname} via ${label}`)\n          return (agent as unknown as Dispatcher).dispatch(options, handler)\n        } catch {\n          return (direct as unknown as Dispatcher).dispatch(options, handler)\n        }\n      },\n      close() {\n        return direct.close()\n      },\n      destroy() {\n        return direct.destroy()\n      },\n    }\n\n    proxyEnvDispatcher = dispatcher as unknown as Dispatcher\n\n    if (typeof Bun !== \"undefined\") {\n      consola.debug(\"WebSocket proxy configured from environment (per-URL)\")\n      return\n    }\n\n    setGlobalDispatcher(proxyEnvDispatcher)\n    consola.debug(\"HTTP proxy configured from environment (per-URL)\")\n  } catch (err) {\n    consola.debug(\"Proxy setup skipped:\", err)\n  }\n}\n","// Pure hostname helpers shared by the gateway server (Node) and the desktop\n// app (including the renderer bundle). This module must stay free of\n// `node:*` imports because the renderer cannot use `node:net`; all\n// address-family checks live in `server-host.ts`.\nexport const INVALID_HOST_CHARACTERS = /[\\s/?#]/\n\n// Bind hosts that listen on every interface, in normalized form (no\n// brackets, so \"[::]\" is covered via `stripIpv6Brackets`).\nexport const NORMALIZED_WILDCARD_HOSTS = new Set([\"0.0.0.0\", \"::\"])\n\nexport function stripIpv6Brackets(hostname: string): string {\n  if (hostname.startsWith(\"[\") && hostname.endsWith(\"]\")) {\n    return hostname.slice(1, -1)\n  }\n  return hostname\n}\n\nexport function normalizeHostnameBase(hostname: string): string {\n  const normalized = stripIpv6Brackets(hostname.trim())\n  if (!normalized || INVALID_HOST_CHARACTERS.test(normalized)) {\n    throw new Error(`Invalid server host: ${JSON.stringify(hostname)}`)\n  }\n  return normalized\n}\n\nexport function isWildcardHostname(hostname: string): boolean {\n  return NORMALIZED_WILDCARD_HOSTS.has(stripIpv6Brackets(hostname.trim()))\n}\n","import { isIP } from \"node:net\"\n\nimport { isWildcardHostname, normalizeHostnameBase } from \"./server-host-shared\"\n\nexport const DEFAULT_SERVER_HOST = \"127.0.0.1\"\n\n// Listen failures that mean the hostname itself cannot be bound, as opposed\n// to the port being occupied (EADDRINUSE) or forbidden (EACCES). ENOTFOUND\n// covers unresolvable names such as typos, EADDRNOTAVAIL covers valid IPs\n// that are not assigned to this machine.\nconst INVALID_BIND_ERROR_CODES = new Set([\n  \"ENOTFOUND\",\n  \"EADDRNOTAVAIL\",\n  \"EINVAL\",\n  \"EAFNOSUPPORT\",\n  \"ENXIO\",\n])\n\nexport function isInvalidBindErrorCode(code?: string): boolean {\n  return !!code && INVALID_BIND_ERROR_CODES.has(code)\n}\n\nexport interface ServerBinding {\n  hostname: string\n  clientHostname: string\n  networkExposed: boolean\n}\n\nfunction isLoopbackIpv4(hostname: string): boolean {\n  return isIP(hostname) === 4 && hostname.split(\".\", 1)[0] === \"127\"\n}\n\nfunction isLoopbackMappedIpv4(hostname: string): boolean {\n  try {\n    const canonicalHostname = new URL(`http://[${hostname}]/`).hostname.slice(\n      1,\n      -1,\n    )\n    const mappedIpv4 = canonicalHostname.match(\n      /^::ffff:([\\da-f]{1,4}):[\\da-f]{1,4}$/,\n    )\n    if (!mappedIpv4) {\n      return false\n    }\n\n    return (Number.parseInt(mappedIpv4[1], 16) & 0xff00) === 0x7f00\n  } catch {\n    return false\n  }\n}\n\nexport function normalizeServerHostname(hostname: string): string {\n  return normalizeHostnameBase(hostname)\n}\n\nexport function isLoopbackHostname(hostname: string): boolean {\n  const normalized = normalizeServerHostname(hostname).toLowerCase()\n  if (normalized === \"localhost\" || normalized === \"localhost.\") {\n    return true\n  }\n  if (isLoopbackIpv4(normalized)) {\n    return true\n  }\n  if (isIP(normalized) !== 6) {\n    return false\n  }\n\n  if (normalized === \"::1\" || normalized === \"0:0:0:0:0:0:0:1\") {\n    return true\n  }\n\n  return isLoopbackMappedIpv4(normalized)\n}\n\nexport function resolveServerBinding(\n  hostname: string,\n  hasApiKeys: boolean,\n): ServerBinding {\n  const normalizedHostname = normalizeServerHostname(hostname)\n  const networkExposed = !isLoopbackHostname(normalizedHostname)\n\n  if (networkExposed && !hasApiKeys) {\n    throw new Error(\n      `Refusing to listen on non-loopback host ${JSON.stringify(normalizedHostname)} without gateway API keys. Run \\`npx @jeffreycao/copilot-api@latest auth keys --add <key>\\` first, or use \\`--host ${DEFAULT_SERVER_HOST}\\`.`,\n    )\n  }\n\n  return {\n    hostname: normalizedHostname,\n    clientHostname: resolveClientHostname(normalizedHostname),\n    networkExposed,\n  }\n}\n\nexport function resolveClientHostname(hostname: string): string {\n  const normalizedHostname = normalizeServerHostname(hostname)\n  // Wildcard binds listen on every interface, which clients cannot dial\n  // directly (0.0.0.0 is not a routable destination).\n  return isWildcardHostname(normalizedHostname) ? DEFAULT_SERVER_HOST : (\n      normalizedHostname.toLowerCase()\n    )\n}\n\nexport function resolveClientHostnameOrDefault(\n  hostname: string | null | undefined,\n): string {\n  const normalizedHostname = hostname?.trim()\n  return normalizedHostname ?\n      resolveClientHostname(normalizedHostname)\n    : DEFAULT_SERVER_HOST\n}\n\nexport function formatServerUrl(hostname: string, port: number): string {\n  const urlHostname =\n    isIP(hostname) === 6 ? `[${hostname.replace(\"%\", \"%25\")}]` : hostname\n  return `http://${urlHostname}:${port}`\n}\n","import { execSync } from \"node:child_process\"\nimport process from \"node:process\"\n\ntype ShellName = \"bash\" | \"zsh\" | \"fish\" | \"powershell\" | \"cmd\" | \"sh\"\ntype EnvVars = Record<string, string | undefined>\n\nfunction getShell(): ShellName {\n  const { platform, ppid, env } = process\n\n  if (platform === \"win32\") {\n    try {\n      const command = `wmic process get ParentProcessId,Name | findstr \"${ppid}\"`\n      const parentProcess = execSync(command, { stdio: \"pipe\" }).toString()\n\n      if (parentProcess.toLowerCase().includes(\"powershell.exe\")) {\n        return \"powershell\"\n      }\n    } catch {\n      return \"cmd\"\n    }\n\n    return \"cmd\"\n  } else {\n    const shellPath = env.SHELL\n    if (shellPath) {\n      if (shellPath.endsWith(\"zsh\")) return \"zsh\"\n      if (shellPath.endsWith(\"fish\")) return \"fish\"\n      if (shellPath.endsWith(\"bash\")) return \"bash\"\n    }\n\n    return \"sh\"\n  }\n}\n\n/**\n * Generates a copy-pasteable script to set multiple environment variables\n * and run a subsequent command.\n * @param {EnvVars} envVars - An object of environment variables to set.\n * @param {string} commandToRun - The command to run after setting the variables.\n * @returns {string} The formatted script string.\n */\nexport function generateEnvScript(\n  envVars: EnvVars,\n  commandToRun: string = \"\",\n): string {\n  const shell = getShell()\n  const filteredEnvVars = Object.entries(envVars).filter(\n    ([, value]) => value !== undefined,\n  ) as Array<[string, string]>\n\n  let commandBlock: string\n\n  switch (shell) {\n    case \"powershell\": {\n      commandBlock = filteredEnvVars\n        .map(([key, value]) => `$env:${key} = ${value}`)\n        .join(\"; \")\n      break\n    }\n    case \"cmd\": {\n      commandBlock = filteredEnvVars\n        .map(([key, value]) => `set ${key}=${value}`)\n        .join(\" & \")\n      break\n    }\n    case \"fish\": {\n      commandBlock = filteredEnvVars\n        .map(([key, value]) => `set -gx ${key} ${value}`)\n        .join(\"; \")\n      break\n    }\n    default: {\n      // bash, zsh, sh\n      const assignments = filteredEnvVars\n        .map(([key, value]) => `${key}=${value}`)\n        .join(\" \")\n      commandBlock = filteredEnvVars.length > 0 ? `export ${assignments}` : \"\"\n      break\n    }\n  }\n\n  if (commandBlock && commandToRun) {\n    const separator = shell === \"cmd\" ? \" & \" : \" && \"\n    return `${commandBlock}${separator}${commandToRun}`\n  }\n\n  return commandBlock || commandToRun\n}\n","#!/usr/bin/env node\n\nimport { defineCommand } from \"citty\"\nimport clipboard from \"clipboardy\"\nimport consola from \"consola\"\nimport { serve, type ServerHandler } from \"srvx\"\nimport invariant from \"tiny-invariant\"\n\nimport { runProviderSetup } from \"./auth\"\nimport { isGitHubCopilotEnabled } from \"./lib/github-copilot-provider\"\nimport { listEnabledProviders, mergeConfigWithDefaults } from \"./lib/config\"\nimport { setupCopilotRuntime } from \"~/lib/copilot-runtime\"\nimport {\n  GITHUB_TOKEN_ENV,\n  readGitHubToken,\n  readGitHubTokenFromEnv,\n} from \"./lib/credential-store\"\nimport { getLatestModelForFamily } from \"./lib/models\"\nimport { startModelsDevCache } from \"./lib/models-dev-cache\"\nimport { initOpencodeVersion } from \"./lib/opencode\"\nimport { ensurePaths } from \"./lib/paths\"\nimport { initProxyFromEnv } from \"./lib/proxy\"\nimport {\n  getConfiguredApiKeys,\n  getMissingApiKeysMessage,\n} from \"./lib/request-auth\"\nimport {\n  DEFAULT_SERVER_HOST,\n  formatServerUrl,\n  resolveServerBinding,\n} from \"./lib/server-host\"\nimport { generateEnvScript } from \"./lib/shell\"\nimport { state } from \"./lib/state\"\n\ninterface RunServerOptions {\n  host: string\n  port: number\n  verbose: boolean\n  githubToken?: string\n  claudeCode: boolean\n  showToken: boolean\n  proxyEnv: boolean\n}\n\ntype GitHubTokenSource = \"cli\" | \"env\" | \"file\"\n\n// The environment is preferred over the token file so the token never has to\n// travel through the process list; --github-token stays first for callers that\n// opt in explicitly.\nasync function resolveGitHubToken(\n  cliToken: string | undefined,\n): Promise<{ token: string; source: GitHubTokenSource } | null> {\n  if (cliToken) return { token: cliToken, source: \"cli\" }\n\n  const envToken = readGitHubTokenFromEnv()\n  if (envToken) return { token: envToken, source: \"env\" }\n\n  const fileToken = await readGitHubToken()\n  if (fileToken) return { token: fileToken, source: \"file\" }\n\n  return null\n}\n\nasync function setupCopilotMode(\n  githubToken: string,\n  source: GitHubTokenSource,\n  serverUrl: string,\n  claudeCode: boolean,\n): Promise<void> {\n  state.githubTokenSource = source\n  consola.info(\n    source === \"cli\" ? \"Using provided GitHub token\"\n    : source === \"env\" ?\n      `Using GitHub token from the ${GITHUB_TOKEN_ENV} environment variable`\n    : \"Using GitHub token from local file\",\n  )\n\n  await setupCopilotRuntime(githubToken)\n\n  if (claudeCode) {\n    runClaudeCode(serverUrl)\n  }\n}\n\nfunction runClaudeCode(serverUrl: string): void {\n  consola.log(\n    \"\\n💡 Tip: The --claude-code flag simply generates a clipboard command for launching Claude Code. \\n\"\n      + \"All models remain fully accessible without this flag, just configure the model ID directly in your settings.json file.\",\n  )\n\n  invariant(state.models, \"Models should be loaded by now\")\n\n  // Default to the latest available model for each Claude Code size tier so\n  // opus maps to opus, sonnet maps to sonnet, and haiku maps to haiku.\n  const opusModel = getLatestModelForFamily(\"opus\")?.id\n  const sonnetModel = getLatestModelForFamily(\"sonnet\")?.id\n  const haikuModel = getLatestModelForFamily(\"haiku\")?.id\n\n  consola.info(\n    \"Selected default Claude Code models:\\n\"\n      + `- Opus:   ${opusModel ?? \"(none available)\"}\\n`\n      + `- Sonnet: ${sonnetModel ?? \"(none available)\"}\\n`\n      + `- Haiku:  ${haikuModel ?? \"(none available)\"}`,\n  )\n\n  const command = generateEnvScript(\n    {\n      ANTHROPIC_BASE_URL: serverUrl,\n      ANTHROPIC_AUTH_TOKEN: \"dummy\",\n      ANTHROPIC_MODEL: sonnetModel ?? opusModel,\n      ANTHROPIC_DEFAULT_OPUS_MODEL: opusModel,\n      ANTHROPIC_DEFAULT_SONNET_MODEL: sonnetModel,\n      ANTHROPIC_DEFAULT_HAIKU_MODEL: haikuModel,\n      CLAUDE_CODE_USE_VERTEX: \"0\",\n      CLAUDE_CODE_USE_BEDROCK: \"0\",\n      DISABLE_NON_ESSENTIAL_MODEL_CALLS: \"1\",\n      CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: \"1\",\n      CLAUDE_CODE_ATTRIBUTION_HEADER: \"0\",\n      CLAUDE_CODE_ENABLE_PROMPT_SUGGESTION: \"false\",\n      CLAUDE_CODE_DISABLE_TERMINAL_TITLE: \"true\",\n      CLAUDE_CODE_ENABLE_AWAY_SUMMARY: \"0\",\n      CLAUDE_CODE_TOTAL_TOKENS_REMINDER: \"off\",\n      MCP_CONNECT_TIMEOUT_MS: \"20000\",\n    },\n    \"claude\",\n  )\n\n  try {\n    clipboard.writeSync(command)\n    consola.success(\"Copied Claude Code command to clipboard!\")\n  } catch {\n    consola.warn(\n      \"Failed to copy to clipboard. Here is the Claude Code command:\",\n    )\n    consola.log(command)\n  }\n}\n\nasync function setupProviderMode(\n  serverUrl: string,\n  claudeCode: boolean,\n): Promise<void> {\n  const enabledProviders = listEnabledProviders()\n\n  if (enabledProviders.length > 0) {\n    consola.info(`Using enabled providers: ${enabledProviders.join(\", \")}`)\n    return\n  }\n\n  if (!isGitHubCopilotEnabled()) {\n    throw new Error(\n      \"No enabled providers found. Enable GitHub Copilot with `copilot-api provider enable github-copilot`, or enable another configured provider.\",\n    )\n  }\n\n  consola.info(\"No enabled providers found. Setting one up...\")\n  await runProviderSetup()\n\n  if (state.githubToken && isGitHubCopilotEnabled()) {\n    // The setup flow persisted the token with the credential store.\n    await setupCopilotMode(state.githubToken, \"file\", serverUrl, claudeCode)\n    return\n  }\n\n  const providersAfterSetup = listEnabledProviders()\n  if (providersAfterSetup.length === 0) {\n    throw new Error(\n      \"Failed to configure any provider. Run `copilot-api auth login` to set one up.\",\n    )\n  }\n  consola.info(`Configured providers: ${providersAfterSetup.join(\", \")}`)\n}\n\nexport async function runServer(options: RunServerOptions): Promise<void> {\n  const tlsModule = await import(\"./lib/tls\")\n  tlsModule.enableSystemCACompat()\n\n  consola.options.throttle = 0\n\n  mergeConfigWithDefaults()\n\n  const configuredApiKeys = getConfiguredApiKeys()\n  const binding = resolveServerBinding(\n    options.host,\n    configuredApiKeys.length > 0,\n  )\n\n  const missingApiKeysMessage = getMissingApiKeysMessage()\n  if (missingApiKeysMessage) {\n    consola.info(missingApiKeysMessage)\n  }\n\n  await initOpencodeVersion()\n\n  if (options.proxyEnv) {\n    initProxyFromEnv()\n  }\n\n  state.verbose = options.verbose\n  if (options.verbose) {\n    consola.level = 5\n    consola.info(\"Verbose logging enabled\")\n  }\n\n  state.showToken = options.showToken\n\n  await ensurePaths()\n  await startModelsDevCache()\n\n  const serverUrl = formatServerUrl(binding.clientHostname, options.port)\n\n  const resolvedGitHubToken =\n    isGitHubCopilotEnabled() ?\n      await resolveGitHubToken(options.githubToken)\n    : null\n  if (resolvedGitHubToken && isGitHubCopilotEnabled()) {\n    await setupCopilotMode(\n      resolvedGitHubToken.token,\n      resolvedGitHubToken.source,\n      serverUrl,\n      options.claudeCode,\n    )\n  } else {\n    await setupProviderMode(serverUrl, options.claudeCode)\n  }\n\n  consola.box(\n    `🌐 Dashboard Viewer: ${serverUrl}/usage-viewer?endpoint=${serverUrl}/usage`,\n  )\n\n  const { createServer } = await import(\"./server\")\n  const server = createServer({ networkExposed: binding.networkExposed })\n\n  serve({\n    fetch: server.fetch as ServerHandler,\n    hostname: binding.hostname,\n    port: options.port,\n    bun: {\n      idleTimeout: 0,\n    },\n  })\n}\n\nexport const start = defineCommand({\n  meta: {\n    name: \"start\",\n    description: \"Start the Copilot API server\",\n  },\n  args: {\n    host: {\n      type: \"string\",\n      default: process.env.HOST?.trim() || DEFAULT_SERVER_HOST,\n      description: \"Host to listen on\",\n    },\n    port: {\n      alias: \"p\",\n      type: \"string\",\n      default: \"4141\",\n      description: \"Port to listen on\",\n    },\n    verbose: {\n      alias: \"v\",\n      type: \"boolean\",\n      default: false,\n      description: \"Enable verbose logging\",\n    },\n    \"github-token\": {\n      alias: \"g\",\n      type: \"string\",\n      description:\n        \"Provide GitHub token directly (must be generated using the `auth` subcommand)\",\n    },\n    \"claude-code\": {\n      alias: \"c\",\n      type: \"boolean\",\n      default: false,\n      description:\n        \"Generate a command to launch Claude Code with Copilot API config\",\n    },\n    \"show-token\": {\n      type: \"boolean\",\n      default: false,\n      description: \"Show GitHub and Copilot tokens on fetch and refresh\",\n    },\n    \"proxy-env\": {\n      type: \"boolean\",\n      default: false,\n      description: \"Initialize proxy from environment variables\",\n    },\n  },\n  run({ args }) {\n    return runServer({\n      host: args.host,\n      port: Number.parseInt(args.port, 10),\n      verbose: args.verbose,\n      githubToken: args[\"github-token\"],\n      claudeCode: args[\"claude-code\"],\n      showToken: args[\"show-token\"],\n      proxyEnv: args[\"proxy-env\"],\n    })\n  },\n})\n"],"mappings":";;;;;;;;;;;;;;;;;AAIA,IAAI;AAMJ,SAAgB,mBAAyB;CACvC,IAAI;EACF,MAAM,SAAS,IAAI,MAAM;EACzB,MAAM,0BAAU,IAAI,IAAwB;EAmD5C,qBAAqB;GA5CnB,SACE,SACA,SACA;IACA,IAAI;KACF,MAAM,SACJ,OAAO,QAAQ,WAAW,WACxB,IAAI,IAAI,QAAQ,MAAM,IACrB,QAAQ;KAIb,MAAM,MAAMA,eAAI,OAAO,SAAS,CAAC;KACjC,MAAM,WAAW,OAAO,IAAI,SAAS,IAAI,MAAM,KAAA;KAC/C,IAAI,CAAC,UAAU;MACb,QAAQ,MAAM,sBAAsB,OAAO,UAAU;MACrD,OAAQ,OAAiC,SAAS,SAAS,OAAO;KACpE;KACA,IAAI,QAAQ,QAAQ,IAAI,QAAQ;KAChC,IAAI,CAAC,OAAO;MACV,QAAQ,IAAI,WAAW,QAAQ;MAC/B,QAAQ,IAAI,UAAU,KAAK;KAC7B;KACA,IAAI,QAAQ;KACZ,IAAI;MACF,MAAM,IAAI,IAAI,IAAI,QAAQ;MAC1B,QAAQ,GAAG,EAAE,SAAS,IAAI,EAAE;KAC9B,QAAQ,CAER;KACA,QAAQ,MAAM,qBAAqB,OAAO,SAAS,OAAO,OAAO;KACjE,OAAQ,MAAgC,SAAS,SAAS,OAAO;IACnE,QAAQ;KACN,OAAQ,OAAiC,SAAS,SAAS,OAAO;IACpE;GACF;GACA,QAAQ;IACN,OAAO,OAAO,MAAM;GACtB;GACA,UAAU;IACR,OAAO,OAAO,QAAQ;GACxB;EAG4B;EAE9B,IAAI,OAAO,QAAQ,aAAa;GAC9B,QAAQ,MAAM,uDAAuD;GACrE;EACF;EAEA,oBAAoB,kBAAkB;EACtC,QAAQ,MAAM,kDAAkD;CAClE,SAAS,KAAK;EACZ,QAAQ,MAAM,wBAAwB,GAAG;CAC3C;AACF;;;ACxEA,MAAa,0BAA0B;AAIvC,MAAa,4CAA4B,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC;AAElE,SAAgB,kBAAkB,UAA0B;CAC1D,IAAI,SAAS,WAAW,GAAG,KAAK,SAAS,SAAS,GAAG,GACnD,OAAO,SAAS,MAAM,GAAG,EAAE;CAE7B,OAAO;AACT;AAEA,SAAgB,sBAAsB,UAA0B;CAC9D,MAAM,aAAa,kBAAkB,SAAS,KAAK,CAAC;CACpD,IAAI,CAAC,cAAc,wBAAwB,KAAK,UAAU,GACxD,MAAM,IAAI,MAAM,wBAAwB,KAAK,UAAU,QAAQ,GAAG;CAEpE,OAAO;AACT;AAEA,SAAgB,mBAAmB,UAA2B;CAC5D,OAAO,0BAA0B,IAAI,kBAAkB,SAAS,KAAK,CAAC,CAAC;AACzE;;;ACvBA,MAAa,sBAAsB;AAwBnC,SAAS,eAAe,UAA2B;CACjD,OAAO,KAAK,QAAQ,MAAM,KAAK,SAAS,MAAM,KAAK,CAAC,CAAC,CAAC,OAAO;AAC/D;AAEA,SAAS,qBAAqB,UAA2B;CACvD,IAAI;EAKF,MAAM,aAJoB,IAAI,IAAI,WAAW,SAAS,GAAG,CAAC,CAAC,SAAS,MAClE,GACA,EAEiC,CAAC,CAAC,MACnC,sCACF;EACA,IAAI,CAAC,YACH,OAAO;EAGT,QAAQ,OAAO,SAAS,WAAW,IAAI,EAAE,IAAI,WAAY;CAC3D,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAgB,wBAAwB,UAA0B;CAChE,OAAO,sBAAsB,QAAQ;AACvC;AAEA,SAAgB,mBAAmB,UAA2B;CAC5D,MAAM,aAAa,wBAAwB,QAAQ,CAAC,CAAC,YAAY;CACjE,IAAI,eAAe,eAAe,eAAe,cAC/C,OAAO;CAET,IAAI,eAAe,UAAU,GAC3B,OAAO;CAET,IAAI,KAAK,UAAU,MAAM,GACvB,OAAO;CAGT,IAAI,eAAe,SAAS,eAAe,mBACzC,OAAO;CAGT,OAAO,qBAAqB,UAAU;AACxC;AAEA,SAAgB,qBACd,UACA,YACe;CACf,MAAM,qBAAqB,wBAAwB,QAAQ;CAC3D,MAAM,iBAAiB,CAAC,mBAAmB,kBAAkB;CAE7D,IAAI,kBAAkB,CAAC,YACrB,MAAM,IAAI,MACR,2CAA2C,KAAK,UAAU,kBAAkB,EAAE,qHAAqH,oBAAoB,IACzN;CAGF,OAAO;EACL,UAAU;EACV,gBAAgB,sBAAsB,kBAAkB;EACxD;CACF;AACF;AAEA,SAAgB,sBAAsB,UAA0B;CAC9D,MAAM,qBAAqB,wBAAwB,QAAQ;CAG3D,OAAO,mBAAmB,kBAAkB,IAAI,sBAC5C,mBAAmB,YAAY;AAErC;AAWA,SAAgB,gBAAgB,UAAkB,MAAsB;CAGtE,OAAO,UADL,KAAK,QAAQ,MAAM,IAAI,IAAI,SAAS,QAAQ,KAAK,KAAK,EAAE,KAAK,SAClC,GAAG;AAClC;;;AC9GA,SAAS,WAAsB;CAC7B,MAAM,EAAE,UAAU,MAAM,QAAQC;CAEhC,IAAI,aAAa,SAAS;EACxB,IAAI;GACF,MAAM,UAAU,oDAAoD,KAAK;GAGzE,IAFsB,SAAS,SAAS,EAAE,OAAO,OAAO,CAAC,CAAC,CAAC,SAE3C,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS,gBAAgB,GACvD,OAAO;EAEX,QAAQ;GACN,OAAO;EACT;EAEA,OAAO;CACT,OAAO;EACL,MAAM,YAAY,IAAI;EACtB,IAAI,WAAW;GACb,IAAI,UAAU,SAAS,KAAK,GAAG,OAAO;GACtC,IAAI,UAAU,SAAS,MAAM,GAAG,OAAO;GACvC,IAAI,UAAU,SAAS,MAAM,GAAG,OAAO;EACzC;EAEA,OAAO;CACT;AACF;;;;;;;;AASA,SAAgB,kBACd,SACA,eAAuB,IACf;CACR,MAAM,QAAQ,SAAS;CACvB,MAAM,kBAAkB,OAAO,QAAQ,OAAO,CAAC,CAAC,QAC7C,GAAG,WAAW,UAAU,KAAA,CAC3B;CAEA,IAAI;CAEJ,QAAQ,OAAR;EACE,KAAK;GACH,eAAe,gBACZ,KAAK,CAAC,KAAK,WAAW,QAAQ,IAAI,KAAK,OAAO,CAAC,CAC/C,KAAK,IAAI;GACZ;EAEF,KAAK;GACH,eAAe,gBACZ,KAAK,CAAC,KAAK,WAAW,OAAO,IAAI,GAAG,OAAO,CAAC,CAC5C,KAAK,KAAK;GACb;EAEF,KAAK;GACH,eAAe,gBACZ,KAAK,CAAC,KAAK,WAAW,WAAW,IAAI,GAAG,OAAO,CAAC,CAChD,KAAK,IAAI;GACZ;EAEF,SAAS;GAEP,MAAM,cAAc,gBACjB,KAAK,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,CACxC,KAAK,GAAG;GACX,eAAe,gBAAgB,SAAS,IAAI,UAAU,gBAAgB;GACtE;EACF;CACF;CAEA,IAAI,gBAAgB,cAElB,OAAO,GAAG,eADQ,UAAU,QAAQ,QAAQ,SACP;CAGvC,OAAO,gBAAgB;AACzB;;;ACtCA,eAAe,mBACb,UAC8D;CAC9D,IAAI,UAAU,OAAO;EAAE,OAAO;EAAU,QAAQ;CAAM;CAEtD,MAAM,WAAW,uBAAuB;CACxC,IAAI,UAAU,OAAO;EAAE,OAAO;EAAU,QAAQ;CAAM;CAEtD,MAAM,YAAY,MAAM,gBAAgB;CACxC,IAAI,WAAW,OAAO;EAAE,OAAO;EAAW,QAAQ;CAAO;CAEzD,OAAO;AACT;AAEA,eAAe,iBACb,aACA,QACA,WACA,YACe;CACf,MAAM,oBAAoB;CAC1B,QAAQ,KACN,WAAW,QAAQ,gCACjB,WAAW,QACX,+BAA+B,iBAAiB,yBAChD,oCACJ;CAEA,MAAM,oBAAoB,WAAW;CAErC,IAAI,YACF,cAAc,SAAS;AAE3B;AAEA,SAAS,cAAc,WAAyB;CAC9C,QAAQ,IACN,2NAEF;CAEA,UAAU,MAAM,QAAQ,gCAAgC;CAIxD,MAAM,YAAY,wBAAwB,MAAM,CAAC,EAAE;CACnD,MAAM,cAAc,wBAAwB,QAAQ,CAAC,EAAE;CACvD,MAAM,aAAa,wBAAwB,OAAO,CAAC,EAAE;CAErD,QAAQ,KACN;YACiB,aAAa,mBAAmB,cAChC,eAAe,mBAAmB,cAClC,cAAc,oBACjC;CAEA,MAAM,UAAU,kBACd;EACE,oBAAoB;EACpB,sBAAsB;EACtB,iBAAiB,eAAe;EAChC,8BAA8B;EAC9B,gCAAgC;EAChC,+BAA+B;EAC/B,wBAAwB;EACxB,yBAAyB;EACzB,mCAAmC;EACnC,0CAA0C;EAC1C,gCAAgC;EAChC,sCAAsC;EACtC,oCAAoC;EACpC,iCAAiC;EACjC,mCAAmC;EACnC,wBAAwB;CAC1B,GACA,QACF;CAEA,IAAI;EACF,UAAU,UAAU,OAAO;EAC3B,QAAQ,QAAQ,0CAA0C;CAC5D,QAAQ;EACN,QAAQ,KACN,+DACF;EACA,QAAQ,IAAI,OAAO;CACrB;AACF;AAEA,eAAe,kBACb,WACA,YACe;CACf,MAAM,mBAAmB,qBAAqB;CAE9C,IAAI,iBAAiB,SAAS,GAAG;EAC/B,QAAQ,KAAK,4BAA4B,iBAAiB,KAAK,IAAI,GAAG;EACtE;CACF;CAEA,IAAI,CAAC,uBAAuB,GAC1B,MAAM,IAAI,MACR,6IACF;CAGF,QAAQ,KAAK,+CAA+C;CAC5D,MAAM,iBAAiB;CAEvB,IAAI,MAAM,eAAe,uBAAuB,GAAG;EAEjD,MAAM,iBAAiB,MAAM,aAAa,QAAQ,WAAW,UAAU;EACvE;CACF;CAEA,MAAM,sBAAsB,qBAAqB;CACjD,IAAI,oBAAoB,WAAW,GACjC,MAAM,IAAI,MACR,+EACF;CAEF,QAAQ,KAAK,yBAAyB,oBAAoB,KAAK,IAAI,GAAG;AACxE;AAEA,eAAsB,UAAU,SAA0C;CAExE,CAAA,MADwB,OAAO,qBAAA,CACrB,qBAAqB;CAE/B,QAAQ,QAAQ,WAAW;CAE3B,wBAAwB;CAExB,MAAM,oBAAoB,qBAAqB;CAC/C,MAAM,UAAU,qBACd,QAAQ,MACR,kBAAkB,SAAS,CAC7B;CAEA,MAAM,wBAAwB,yBAAyB;CACvD,IAAI,uBACF,QAAQ,KAAK,qBAAqB;CAGpC,MAAM,oBAAoB;CAE1B,IAAI,QAAQ,UACV,iBAAiB;CAGnB,MAAM,UAAU,QAAQ;CACxB,IAAI,QAAQ,SAAS;EACnB,QAAQ,QAAQ;EAChB,QAAQ,KAAK,yBAAyB;CACxC;CAEA,MAAM,YAAY,QAAQ;CAE1B,MAAM,YAAY;CAClB,MAAM,oBAAoB;CAE1B,MAAM,YAAY,gBAAgB,QAAQ,gBAAgB,QAAQ,IAAI;CAEtE,MAAM,sBACJ,uBAAuB,IACrB,MAAM,mBAAmB,QAAQ,WAAW,IAC5C;CACJ,IAAI,uBAAuB,uBAAuB,GAChD,MAAM,iBACJ,oBAAoB,OACpB,oBAAoB,QACpB,WACA,QAAQ,UACV;MAEA,MAAM,kBAAkB,WAAW,QAAQ,UAAU;CAGvD,QAAQ,IACN,wBAAwB,UAAU,yBAAyB,UAAU,OACvE;CAEA,MAAM,EAAE,iBAAiB,MAAM,OAAO;CACtC,MAAM,SAAS,aAAa,EAAE,gBAAgB,QAAQ,eAAe,CAAC;CAEtE,MAAM;EACJ,OAAO,OAAO;EACd,UAAU,QAAQ;EAClB,MAAM,QAAQ;EACd,KAAK,EACH,aAAa,EACf;CACF,CAAC;AACH;AAEA,MAAa,QAAQ,cAAc;CACjC,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,MAAM;EACJ,MAAM;GACJ,MAAM;GACN,SAAS,QAAQ,IAAI,MAAM,KAAK,KAAA;GAChC,aAAa;EACf;EACA,MAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,aAAa;EACf;EACA,SAAS;GACP,OAAO;GACP,MAAM;GACN,SAAS;GACT,aAAa;EACf;EACA,gBAAgB;GACd,OAAO;GACP,MAAM;GACN,aACE;EACJ;EACA,eAAe;GACb,OAAO;GACP,MAAM;GACN,SAAS;GACT,aACE;EACJ;EACA,cAAc;GACZ,MAAM;GACN,SAAS;GACT,aAAa;EACf;EACA,aAAa;GACX,MAAM;GACN,SAAS;GACT,aAAa;EACf;CACF;CACA,IAAI,EAAE,QAAQ;EACZ,OAAO,UAAU;GACf,MAAM,KAAK;GACX,MAAM,OAAO,SAAS,KAAK,MAAM,EAAE;GACnC,SAAS,KAAK;GACd,aAAa,KAAK;GAClB,YAAY,KAAK;GACjB,WAAW,KAAK;GAChB,UAAU,KAAK;EACjB,CAAC;CACH;AACF,CAAC"}

package/dist/{token-DgVri1k7.js → token-0pmwyQAu.js}

@@ -762,8 +762,9 @@ function buildCodexRequestHeaders(requestHeaders) {
 	applyOpencodeCodexHeaders(headers);
 	return headers;
 }
+const codexResponsesDependencies = { isResponsesApiWebSocketEnabled: () => isResponsesApiWebSocketEnabled() };
 function resolveCodexResponsesTransport(transport) {
-	return transport ?? (isResponsesApiWebSocketEnabled() ? "websocket" : "http");
+	return transport ?? (codexResponsesDependencies.isResponsesApiWebSocketEnabled() ? "websocket" : "http");
 }
 function buildCodexResponsesWebSocketHeaders(requestHeaders, options = {}) {
 	const headers = buildCodexResponsesHeaders(requestHeaders, options);
@@ -1836,6 +1837,8 @@ async function writeCodexCredentials(credentials, options = {}) {
 		const accountIdSelector = normalizeCodexAccountSelector(normalizedCredentials.accountId);
 		const existingIndex = store.accounts.findIndex((account) => account.accountId === normalizedCredentials.accountId);
 		if (existingIndex < 0 && options.insertIfMissing === false) return;
+		const existingRefreshToken = store.accounts[existingIndex]?.refreshToken;
+		if (options.expectedRefreshToken !== void 0 && existingRefreshToken !== options.expectedRefreshToken && existingRefreshToken !== normalizedCredentials.refreshToken) return;
 		if (existingIndex < 0 && store.accounts.some((account) => normalizeCodexAccountSelector(account.accountId) === accountIdSelector)) throw new Error(`Codex account id '${normalizedCredentials.accountId}' is already in use`);
 		if (existingIndex < 0 && store.accounts.length >= 3) throw new Error(`Codex supports at most 3 accounts`);
 		if (store.accounts.some((account, index) => index !== existingIndex && account.alias && normalizeCodexAccountSelector(account.alias) === accountIdSelector)) throw new Error(`Codex account id '${normalizedCredentials.accountId}' conflicts with another account alias`);
@@ -1996,13 +1999,15 @@ const defaultPollAccessTokenDependencies = {
 	sleep
 };
 const toSleepDuration = (intervalSeconds) => (intervalSeconds + 1) * 1e3;
-async function pollAccessToken(deviceCode, dependencies = defaultPollAccessTokenDependencies) {
+async function pollAccessToken(deviceCode, dependencies = defaultPollAccessTokenDependencies, options = {}) {
+	const { signal } = options;
 	const { clientId, headers } = getOauthAppConfig();
 	const { accessTokenUrl } = getOauthUrls();
 	const expiresAt = dependencies.now() + deviceCode.expires_in * 1e3;
 	let intervalSeconds = deviceCode.interval;
 	consola.debug(`Polling access token with interval of ${toSleepDuration(intervalSeconds)}ms`);
 	while (true) {
+		signal?.throwIfAborted();
 		if (dependencies.now() >= expiresAt) throw new Error("GitHub device code expired before authorization completed. Please log in again.");
 		const json = await requestAccessToken(accessTokenUrl, {
 			method: "POST",
@@ -2011,7 +2016,8 @@ async function pollAccessToken(deviceCode, dependencies = defaultPollAccessToken
 				client_id: clientId,
 				device_code: deviceCode.device_code,
 				grant_type: "urn:ietf:params:oauth:grant-type:device_code"
-			})
+			}),
+			signal
 		});
 		if (json) {
 			consola.debug("Polling access token response received");
@@ -2022,13 +2028,31 @@ async function pollAccessToken(deviceCode, dependencies = defaultPollAccessToken
 				consola.debug(`GitHub asked to slow down, polling interval is now ${intervalSeconds}s`);
 			} else if (json.error && json.error !== "authorization_pending") throw new Error(`GitHub device authorization failed: ${json.error_description ?? json.error}`);
 		}
-		await dependencies.sleep(toSleepDuration(intervalSeconds));
+		await sleepUnlessAborted(dependencies.sleep, toSleepDuration(intervalSeconds), signal);
+	}
+}
+async function sleepUnlessAborted(sleepFor, ms, signal) {
+	if (!signal) {
+		await sleepFor(ms);
+		return;
+	}
+	signal.throwIfAborted();
+	let onAbort;
+	const aborted = new Promise((_resolve, reject) => {
+		onAbort = () => reject(signal.reason);
+		signal.addEventListener("abort", onAbort, { once: true });
+	});
+	try {
+		await Promise.race([aborted, sleepFor(ms)]);
+	} finally {
+		if (onAbort) signal.removeEventListener("abort", onAbort);
 	}
 }
 /**
 * Resolves to `undefined` when the poll should simply be retried. The device
 * code stays valid until it expires, so a dropped connection (for example a
 * proxy closing the socket) or a non-2xx response must not abort the login.
+* A request aborted through `init.signal` rejects instead.
 */
 async function requestAccessToken(url, init) {
 	try {
@@ -2039,6 +2063,7 @@ async function requestAccessToken(url, init) {
 		}
 		return await response.json();
 	} catch (error) {
+		if (init.signal?.aborted) throw error;
 		consola.warn(`Failed to poll access token, will retry: ${describeError(error)}`);
 		return;
 	}
@@ -2054,8 +2079,9 @@ function describeError(error) {
 //#region src/lib/token.ts
 let copilotRefreshLoopController = null;
 let codexRefreshLoopController = null;
-let codexRefreshInFlight = null;
-let codexCredentialsPendingPersistence = null;
+let codexRuntimeGeneration = 0;
+const codexRefreshInFlight = /* @__PURE__ */ new Map();
+const codexCredentialsPendingPersistence = /* @__PURE__ */ new Map();
 const defaultCopilotTokenDependencies = {
 	getCopilotToken,
 	getCopilotUsage
@@ -2070,6 +2096,14 @@ const stopCodexRefreshLoop = () => {
 	codexRefreshLoopController.abort();
 	codexRefreshLoopController = null;
 };
+const invalidateCodexRuntime = () => {
+	codexRuntimeGeneration++;
+	stopCodexRefreshLoop();
+	state.codexAccessToken = void 0;
+	state.codexRefreshToken = void 0;
+	state.codexExpiresAt = void 0;
+	state.codexAccountId = void 0;
+};
 function applyCodexCredentials(credentials) {
 	state.codexAccessToken = credentials.accessToken;
 	state.codexRefreshToken = credentials.refreshToken;
@@ -2150,17 +2184,21 @@ async function removeCodexAccount(selector) {
 	});
 }
 async function persistCodexCredentials(credentials, options = {}) {
+	const generation = options.runtimeGeneration ?? codexRuntimeGeneration;
 	const persist = async () => {
 		await writeCodexCredentials(credentials, {
 			alias: options.alias,
-			insertIfMissing: options.insertIfMissing
+			insertIfMissing: options.insertIfMissing,
+			expectedRefreshToken: options.expectedRefreshToken
 		});
 		if (options.syncProvider !== false) syncCodexProviderConfig({
 			accountId: options.activateAccount ? credentials.accountId : void 0,
 			enabled: options.enableProvider ? true : void 0
 		});
-		applyCodexCredentials(credentials);
-		codexCredentialsPendingPersistence = null;
+		if (generation === codexRuntimeGeneration && (options.syncProvider !== false || getConfiguredCodexAccountId() === credentials.accountId)) applyCodexCredentials(credentials);
+		if (options.syncProvider !== false) {
+			for (const [key, pending] of codexCredentialsPendingPersistence) if (pending.accountId === credentials.accountId) codexCredentialsPendingPersistence.delete(key);
+		}
 	};
 	if (options.syncProvider === false) {
 		await persist();
@@ -2168,14 +2206,19 @@ async function persistCodexCredentials(credentials, options = {}) {
 	}
 	await withCodexAccountMutationLock(persist);
 }
-const defaultCodexRefreshDependencies = {
-	getCurrentCredentials: getLoadedCodexCredentials,
-	persistCodexCredentials: (credentials) => persistCodexCredentials(credentials, {
-		insertIfMissing: false,
-		syncProvider: false
-	}),
-	refreshCodexCredentials
-};
+function createCodexRefreshDependencies(credentials) {
+	const generation = codexRuntimeGeneration;
+	return {
+		getCurrentCredentials: getLoadedCodexCredentials,
+		persistCodexCredentials: (refreshed) => persistCodexCredentials(refreshed, {
+			insertIfMissing: false,
+			syncProvider: false,
+			expectedRefreshToken: credentials.refreshToken,
+			runtimeGeneration: generation
+		}),
+		refreshCodexCredentials
+	};
+}
 /**
 * Refreshes and persists Codex credentials through one module level
 * single-flight guard.
@@ -2186,29 +2229,31 @@ const defaultCodexRefreshDependencies = {
 * Codex request, so a burst of requests (or the background loop waking at the
 * same moment) must share a single attempt instead of burning the token.
 */
-function refreshCodexCredentialsOnce(credentials, dependencies = defaultCodexRefreshDependencies) {
-	const inFlight = codexRefreshInFlight;
+function refreshCodexCredentialsOnce(credentials, dependencies) {
+	const current = dependencies ? dependencies.getCurrentCredentials() : getLoadedCodexCredentials();
+	const rotated = current && current.accountId === credentials.accountId && current.refreshToken !== credentials.refreshToken ? current : null;
+	const base = rotated ?? credentials;
+	const refreshDependencies = dependencies ?? createCodexRefreshDependencies(base);
+	const refreshKey = JSON.stringify([base.accountId, base.refreshToken]);
+	const inFlight = codexRefreshInFlight.get(refreshKey);
 	if (inFlight) return inFlight;
 	const attempt = (async () => {
-		const pendingPersistence = codexCredentialsPendingPersistence;
+		const pendingPersistence = codexCredentialsPendingPersistence.get(refreshKey);
 		if (pendingPersistence) {
-			await dependencies.persistCodexCredentials(pendingPersistence);
-			if (codexCredentialsPendingPersistence === pendingPersistence) codexCredentialsPendingPersistence = null;
+			await refreshDependencies.persistCodexCredentials(pendingPersistence);
+			if (codexCredentialsPendingPersistence.get(refreshKey) === pendingPersistence) codexCredentialsPendingPersistence.delete(refreshKey);
 			return pendingPersistence;
 		}
-		const current = dependencies.getCurrentCredentials();
-		const rotated = current && current.refreshToken !== credentials.refreshToken ? current : null;
 		if (rotated && !isCodexCredentialsExpired(rotated)) return rotated;
-		const base = rotated ?? credentials;
-		const refreshed = await dependencies.refreshCodexCredentials(base);
-		codexCredentialsPendingPersistence = refreshed;
-		await dependencies.persistCodexCredentials(refreshed);
-		if (codexCredentialsPendingPersistence === refreshed) codexCredentialsPendingPersistence = null;
+		const refreshed = await refreshDependencies.refreshCodexCredentials(base);
+		codexCredentialsPendingPersistence.set(refreshKey, refreshed);
+		await refreshDependencies.persistCodexCredentials(refreshed);
+		if (codexCredentialsPendingPersistence.get(refreshKey) === refreshed) codexCredentialsPendingPersistence.delete(refreshKey);
 		return refreshed;
 	})();
-	codexRefreshInFlight = attempt;
+	codexRefreshInFlight.set(refreshKey, attempt);
 	const clearAttempt = () => {
-		if (codexRefreshInFlight === attempt) codexRefreshInFlight = null;
+		if (codexRefreshInFlight.get(refreshKey) === attempt) codexRefreshInFlight.delete(refreshKey);
 	};
 	attempt.then(clearAttempt, clearAttempt);
 	return attempt;
@@ -2241,6 +2286,17 @@ const setupCopilotToken = async (dependencies = defaultCopilotTokenDependencies)
 	});
 };
 const setupCodexToken = async () => {
+	while (getRawProviderConfig("codex")?.enabled !== false) {
+		const generation = codexRuntimeGeneration;
+		try {
+			await setupCodexTokenForGeneration(generation);
+		} catch (error) {
+			if (generation === codexRuntimeGeneration) throw error;
+		}
+		if (generation === codexRuntimeGeneration) return;
+	}
+};
+const setupCodexTokenForGeneration = async (generation) => {
 	const configuredAccountId = getConfiguredCodexAccountId();
 	const loadedCredentials = getLoadedCodexCredentials();
 	if (configuredAccountId && loadedCredentials?.accountId === configuredAccountId && !isCodexCredentialsExpired(loadedCredentials) && codexRefreshLoopController) return;
@@ -2248,6 +2304,7 @@ const setupCodexToken = async () => {
 	let selectedAccountId = configuredAccountId;
 	if (!selectedAccountId) {
 		store = await readCodexCredentialStore();
+		if (generation !== codexRuntimeGeneration) return;
 		if (!store || store.accounts.length === 0) throw new Error(`Codex credentials not found. Run \`copilot-api auth login --provider codex\` first.`);
 		if (store.accounts.length > 1) throw new Error("Multiple Codex accounts found but no account is selected. Run `copilot-api auth codex --use <alias-or-accountId>` first.");
 		selectedAccountId = store.accounts[0].accountId;
@@ -2261,6 +2318,7 @@ const setupCodexToken = async () => {
 	if (loadedCredentials && !selectedLoadedCredentials) stopCodexRefreshLoop();
 	if (!selectedLoadedCredentials) {
 		store ??= await readCodexCredentialStore();
+		if (generation !== codexRuntimeGeneration) return;
 		if (!store || store.accounts.length === 0) throw new Error(`Codex credentials not found. Run \`copilot-api auth login --provider codex\` first.`);
 	}
 	const credentials = selectedLoadedCredentials ?? store?.accounts.find((account) => account.accountId === selectedAccountId);
@@ -2270,6 +2328,7 @@ const setupCodexToken = async () => {
 		consola.debug("Refreshing expired Codex credentials");
 		nextCredentials = await refreshCodexCredentialsOnce(credentials);
 	}
+	if (generation !== codexRuntimeGeneration) return;
 	applyCodexCredentials(nextCredentials);
 	stopCodexRefreshLoop();
 	const controller = new AbortController();
@@ -2300,6 +2359,7 @@ const runCopilotRefreshLoop = async (refreshIn, signal, dependencies) => {
 		consola.debug("Refreshing Copilot token");
 		try {
 			const response = await dependencies.getCopilotToken();
+			if (signal.aborted) return;
 			applyCopilotTokenResponse(response);
 			refreshAtMs = getRefreshDeadlineMs(response.refresh_in);
 			retryDelayMs = RETRY_REFRESH_DELAY_MS;
@@ -2378,6 +2438,6 @@ async function logUser(dependencies = defaultCopilotTokenDependencies) {
 	state.tokenBasedBilling = copilotUser.token_based_billing;
 }
 //#endregion
-export { stripInternalRequestHeaders as $, compactSummaryPromptStart as A, forwardCodexResponses as B, copilotWebSocketHeaders as C, initOpencodeVersion as D, prepareMessageProxyHeaders as E, getConfiguredApiKeys as F, createResponsesHttpEventStream as G, requestContext as H, getMissingApiKeysMessage as I, getResponsesStreamTerminalDisposition as J, createResponsesSafeStream as K, loginCodex as L, compactTextOnlyGuard as M, createAuthMiddleware as N, compactAutoContinuePromptStarts as O, getConfiguredAdminApiKeys as P, FULL_MODEL_CATALOG_HEADER as Q, CODEX_API_BASE_URL as R, copilotModelsHeaders as S, prepareInteractionHeaders as T, resolveTraceId as U, generateTraceId as V, fetchUpstreamWithLifecycle as W, createWebSocketUrl as X, createPooledWebSocketStream as Y, state as Z, GITHUB_TOKEN_ENV as _, selectCodexAccount as a, copilotBaseUrl as b, setupGitHubToken as c, getUUID as d, isAsyncIterable as f, getCopilotUsage as g, parseUserIdMetadata as h, removeCodexAccount as i, compactSystemPromptStarts as j, compactMessageSections as k, generateRequestIdFromPayload as l, isResponsesStream as m, logUser as n, setupCodexToken as o, isNullish as p, encodePoolKeyPart as q, persistCodexCredentials as r, setupCopilotToken as s, getCodexAccounts as t, getRootSessionId as u, readGitHubToken as v, prepareForCompact as w, copilotHeaders as x, readGitHubTokenFromEnv as y, buildCodexRequestHeaders as z };
+export { state as $, compactAutoContinuePromptStarts as A, CODEX_API_BASE_URL as B, copilotHeaders as C, prepareInteractionHeaders as D, prepareForCompact as E, createAuthMiddleware as F, resolveTraceId as G, forwardCodexResponses as H, getConfiguredAdminApiKeys as I, createResponsesSafeStream as J, fetchUpstreamWithLifecycle as K, getConfiguredApiKeys as L, compactSummaryPromptStart as M, compactSystemPromptStarts as N, prepareMessageProxyHeaders as O, compactTextOnlyGuard as P, createWebSocketUrl as Q, getMissingApiKeysMessage as R, copilotBaseUrl as S, copilotWebSocketHeaders as T, generateTraceId as U, buildCodexRequestHeaders as V, requestContext as W, getResponsesStreamTerminalDisposition as X, encodePoolKeyPart as Y, createPooledWebSocketStream as Z, parseUserIdMetadata as _, removeCodexAccount as a, readGitHubToken as b, setupCopilotToken as c, generateRequestIdFromPayload as d, FULL_MODEL_CATALOG_HEADER as et, getRootSessionId as f, isResponsesStream as g, isNullish as h, persistCodexCredentials as i, compactMessageSections as j, initOpencodeVersion as k, setupGitHubToken as l, isAsyncIterable as m, invalidateCodexRuntime as n, selectCodexAccount as o, getUUID as p, createResponsesHttpEventStream as q, logUser as r, setupCodexToken as s, getCodexAccounts as t, stripInternalRequestHeaders as tt, stopCopilotRefreshLoop as u, getCopilotUsage as v, copilotModelsHeaders as w, readGitHubTokenFromEnv as x, GITHUB_TOKEN_ENV as y, loginCodex as z };
 
-//# sourceMappingURL=token-DgVri1k7.js.map
+//# sourceMappingURL=token-0pmwyQAu.js.map