@jeffreycao/copilot-api 2.6.33 → 2.7.1

package/dist/{start-DX3Q5lol.js → start-v0WnZYEn.js}

@@ -1,9 +1,9 @@
 import { S as ensurePaths, g as mergeConfigWithDefaults } from "./config-store-CARrUljo.js";
 import { i as listEnabledProviders, p as startModelsDevCache } from "./config-B2OaAnpL.js";
 import { r as isGitHubCopilotEnabled } from "./github-copilot-provider-DlQZgaCT.js";
-import { $ as state, L as getConfiguredApiKeys, R as getMissingApiKeysMessage, b as readGitHubToken, k as initOpencodeVersion, x as readGitHubTokenFromEnv, y as GITHUB_TOKEN_ENV } from "./token-0pmwyQAu.js";
-import { a as runProviderSetup } from "./auth-CmKD_Gmp.js";
-import { i as getLatestModelForFamily, t as setupCopilotRuntime } from "./copilot-runtime-B4x9RzsD.js";
+import { $ as state, L as getConfiguredApiKeys, R as getMissingApiKeysMessage, b as readGitHubToken, k as initOpencodeVersion, x as readGitHubTokenFromEnv, y as GITHUB_TOKEN_ENV } from "./token-Cx07G8-R.js";
+import { a as runProviderSetup } from "./auth-2VWfdcpq.js";
+import { i as getLatestModelForFamily, t as setupCopilotRuntime } from "./copilot-runtime-B7T_EuGD.js";
 import { defineCommand } from "citty";
 import consola from "consola";
 import { getProxyForUrl } from "proxy-from-env";
@@ -273,7 +273,7 @@ async function runServer(options) {
 	if (resolvedGitHubToken && isGitHubCopilotEnabled()) await setupCopilotMode(resolvedGitHubToken.token, resolvedGitHubToken.source, serverUrl, options.claudeCode);
 	else await setupProviderMode(serverUrl, options.claudeCode);
 	consola.box(`🌐 Dashboard Viewer: ${serverUrl}/usage-viewer?endpoint=${serverUrl}/usage`);
-	const { createServer } = await import("./server-VjfrS2Aw.js");
+	const { createServer } = await import("./server-BYG25POu.js");
 	const server = createServer({ networkExposed: binding.networkExposed });
 	serve({
 		fetch: server.fetch,
@@ -342,4 +342,4 @@ const start = defineCommand({
 //#endregion
 export { start };
 
-//# sourceMappingURL=start-DX3Q5lol.js.map
+//# sourceMappingURL=start-v0WnZYEn.js.map

package/dist/{start-DX3Q5lol.js.map → start-v0WnZYEn.js.map}

@@ -1 +1 @@
-{"version":3,"file":"start-DX3Q5lol.js","names":["get","process"],"sources":["../src/lib/proxy.ts","../src/lib/server-host-shared.ts","../src/lib/server-host.ts","../src/lib/shell.ts","../src/start.ts"],"sourcesContent":["import consola from \"consola\"\nimport { getProxyForUrl } from \"proxy-from-env\"\nimport { Agent, ProxyAgent, setGlobalDispatcher, type Dispatcher } from \"undici\"\n\nlet proxyEnvDispatcher: Dispatcher | undefined\n\nexport function getProxyEnvDispatcher(): Dispatcher | undefined {\n  return proxyEnvDispatcher\n}\n\nexport function initProxyFromEnv(): void {\n  try {\n    const direct = new Agent()\n    const proxies = new Map<string, ProxyAgent>()\n\n    // We only need a minimal dispatcher that implements `dispatch` at runtime.\n    // Typing the object as `Dispatcher` forces TypeScript to require many\n    // additional methods. Instead, keep a plain object and cast when passing\n    // to `setGlobalDispatcher`.\n    const dispatcher = {\n      dispatch(\n        options: Dispatcher.DispatchOptions,\n        handler: Dispatcher.DispatchHandler,\n      ) {\n        try {\n          const origin =\n            typeof options.origin === \"string\" ?\n              new URL(options.origin)\n            : (options.origin as URL)\n          const get = getProxyForUrl as unknown as (\n            u: string,\n          ) => string | undefined\n          const raw = get(origin.toString())\n          const proxyUrl = raw && raw.length > 0 ? raw : undefined\n          if (!proxyUrl) {\n            consola.debug(`HTTP proxy bypass: ${origin.hostname}`)\n            return (direct as unknown as Dispatcher).dispatch(options, handler)\n          }\n          let agent = proxies.get(proxyUrl)\n          if (!agent) {\n            agent = new ProxyAgent(proxyUrl)\n            proxies.set(proxyUrl, agent)\n          }\n          let label = proxyUrl\n          try {\n            const u = new URL(proxyUrl)\n            label = `${u.protocol}//${u.host}`\n          } catch {\n            /* noop */\n          }\n          consola.debug(`HTTP proxy route: ${origin.hostname} via ${label}`)\n          return (agent as unknown as Dispatcher).dispatch(options, handler)\n        } catch {\n          return (direct as unknown as Dispatcher).dispatch(options, handler)\n        }\n      },\n      close() {\n        return direct.close()\n      },\n      destroy() {\n        return direct.destroy()\n      },\n    }\n\n    proxyEnvDispatcher = dispatcher as unknown as Dispatcher\n\n    if (typeof Bun !== \"undefined\") {\n      consola.debug(\"WebSocket proxy configured from environment (per-URL)\")\n      return\n    }\n\n    setGlobalDispatcher(proxyEnvDispatcher)\n    consola.debug(\"HTTP proxy configured from environment (per-URL)\")\n  } catch (err) {\n    consola.debug(\"Proxy setup skipped:\", err)\n  }\n}\n","// Pure hostname helpers shared by the gateway server (Node) and the desktop\n// app (including the renderer bundle). This module must stay free of\n// `node:*` imports because the renderer cannot use `node:net`; all\n// address-family checks live in `server-host.ts`.\nexport const INVALID_HOST_CHARACTERS = /[\\s/?#]/\n\n// Bind hosts that listen on every interface, in normalized form (no\n// brackets, so \"[::]\" is covered via `stripIpv6Brackets`).\nexport const NORMALIZED_WILDCARD_HOSTS = new Set([\"0.0.0.0\", \"::\"])\n\nexport function stripIpv6Brackets(hostname: string): string {\n  if (hostname.startsWith(\"[\") && hostname.endsWith(\"]\")) {\n    return hostname.slice(1, -1)\n  }\n  return hostname\n}\n\nexport function normalizeHostnameBase(hostname: string): string {\n  const normalized = stripIpv6Brackets(hostname.trim())\n  if (!normalized || INVALID_HOST_CHARACTERS.test(normalized)) {\n    throw new Error(`Invalid server host: ${JSON.stringify(hostname)}`)\n  }\n  return normalized\n}\n\nexport function isWildcardHostname(hostname: string): boolean {\n  return NORMALIZED_WILDCARD_HOSTS.has(stripIpv6Brackets(hostname.trim()))\n}\n","import { isIP } from \"node:net\"\n\nimport { isWildcardHostname, normalizeHostnameBase } from \"./server-host-shared\"\n\nexport const DEFAULT_SERVER_HOST = \"127.0.0.1\"\n\n// Listen failures that mean the hostname itself cannot be bound, as opposed\n// to the port being occupied (EADDRINUSE) or forbidden (EACCES). ENOTFOUND\n// covers unresolvable names such as typos, EADDRNOTAVAIL covers valid IPs\n// that are not assigned to this machine.\nconst INVALID_BIND_ERROR_CODES = new Set([\n  \"ENOTFOUND\",\n  \"EADDRNOTAVAIL\",\n  \"EINVAL\",\n  \"EAFNOSUPPORT\",\n  \"ENXIO\",\n])\n\nexport function isInvalidBindErrorCode(code?: string): boolean {\n  return !!code && INVALID_BIND_ERROR_CODES.has(code)\n}\n\nexport interface ServerBinding {\n  hostname: string\n  clientHostname: string\n  networkExposed: boolean\n}\n\nfunction isLoopbackIpv4(hostname: string): boolean {\n  return isIP(hostname) === 4 && hostname.split(\".\", 1)[0] === \"127\"\n}\n\nfunction isLoopbackMappedIpv4(hostname: string): boolean {\n  try {\n    const canonicalHostname = new URL(`http://[${hostname}]/`).hostname.slice(\n      1,\n      -1,\n    )\n    const mappedIpv4 = canonicalHostname.match(\n      /^::ffff:([\\da-f]{1,4}):[\\da-f]{1,4}$/,\n    )\n    if (!mappedIpv4) {\n      return false\n    }\n\n    return (Number.parseInt(mappedIpv4[1], 16) & 0xff00) === 0x7f00\n  } catch {\n    return false\n  }\n}\n\nexport function normalizeServerHostname(hostname: string): string {\n  return normalizeHostnameBase(hostname)\n}\n\nexport function isLoopbackHostname(hostname: string): boolean {\n  const normalized = normalizeServerHostname(hostname).toLowerCase()\n  if (normalized === \"localhost\" || normalized === \"localhost.\") {\n    return true\n  }\n  if (isLoopbackIpv4(normalized)) {\n    return true\n  }\n  if (isIP(normalized) !== 6) {\n    return false\n  }\n\n  if (normalized === \"::1\" || normalized === \"0:0:0:0:0:0:0:1\") {\n    return true\n  }\n\n  return isLoopbackMappedIpv4(normalized)\n}\n\nexport function resolveServerBinding(\n  hostname: string,\n  hasApiKeys: boolean,\n): ServerBinding {\n  const normalizedHostname = normalizeServerHostname(hostname)\n  const networkExposed = !isLoopbackHostname(normalizedHostname)\n\n  if (networkExposed && !hasApiKeys) {\n    throw new Error(\n      `Refusing to listen on non-loopback host ${JSON.stringify(normalizedHostname)} without gateway API keys. Run \\`npx @jeffreycao/copilot-api@latest auth keys --add <key>\\` first, or use \\`--host ${DEFAULT_SERVER_HOST}\\`.`,\n    )\n  }\n\n  return {\n    hostname: normalizedHostname,\n    clientHostname: resolveClientHostname(normalizedHostname),\n    networkExposed,\n  }\n}\n\nexport function resolveClientHostname(hostname: string): string {\n  const normalizedHostname = normalizeServerHostname(hostname)\n  // Wildcard binds listen on every interface, which clients cannot dial\n  // directly (0.0.0.0 is not a routable destination).\n  return isWildcardHostname(normalizedHostname) ? DEFAULT_SERVER_HOST : (\n      normalizedHostname.toLowerCase()\n    )\n}\n\nexport function resolveClientHostnameOrDefault(\n  hostname: string | null | undefined,\n): string {\n  const normalizedHostname = hostname?.trim()\n  return normalizedHostname ?\n      resolveClientHostname(normalizedHostname)\n    : DEFAULT_SERVER_HOST\n}\n\nexport function formatServerUrl(hostname: string, port: number): string {\n  const urlHostname =\n    isIP(hostname) === 6 ? `[${hostname.replace(\"%\", \"%25\")}]` : hostname\n  return `http://${urlHostname}:${port}`\n}\n","import { execSync } from \"node:child_process\"\nimport process from \"node:process\"\n\ntype ShellName = \"bash\" | \"zsh\" | \"fish\" | \"powershell\" | \"cmd\" | \"sh\"\ntype EnvVars = Record<string, string | undefined>\n\nfunction getShell(): ShellName {\n  const { platform, ppid, env } = process\n\n  if (platform === \"win32\") {\n    try {\n      const command = `wmic process get ParentProcessId,Name | findstr \"${ppid}\"`\n      const parentProcess = execSync(command, { stdio: \"pipe\" }).toString()\n\n      if (parentProcess.toLowerCase().includes(\"powershell.exe\")) {\n        return \"powershell\"\n      }\n    } catch {\n      return \"cmd\"\n    }\n\n    return \"cmd\"\n  } else {\n    const shellPath = env.SHELL\n    if (shellPath) {\n      if (shellPath.endsWith(\"zsh\")) return \"zsh\"\n      if (shellPath.endsWith(\"fish\")) return \"fish\"\n      if (shellPath.endsWith(\"bash\")) return \"bash\"\n    }\n\n    return \"sh\"\n  }\n}\n\n/**\n * Generates a copy-pasteable script to set multiple environment variables\n * and run a subsequent command.\n * @param {EnvVars} envVars - An object of environment variables to set.\n * @param {string} commandToRun - The command to run after setting the variables.\n * @returns {string} The formatted script string.\n */\nexport function generateEnvScript(\n  envVars: EnvVars,\n  commandToRun: string = \"\",\n): string {\n  const shell = getShell()\n  const filteredEnvVars = Object.entries(envVars).filter(\n    ([, value]) => value !== undefined,\n  ) as Array<[string, string]>\n\n  let commandBlock: string\n\n  switch (shell) {\n    case \"powershell\": {\n      commandBlock = filteredEnvVars\n        .map(([key, value]) => `$env:${key} = ${value}`)\n        .join(\"; \")\n      break\n    }\n    case \"cmd\": {\n      commandBlock = filteredEnvVars\n        .map(([key, value]) => `set ${key}=${value}`)\n        .join(\" & \")\n      break\n    }\n    case \"fish\": {\n      commandBlock = filteredEnvVars\n        .map(([key, value]) => `set -gx ${key} ${value}`)\n        .join(\"; \")\n      break\n    }\n    default: {\n      // bash, zsh, sh\n      const assignments = filteredEnvVars\n        .map(([key, value]) => `${key}=${value}`)\n        .join(\" \")\n      commandBlock = filteredEnvVars.length > 0 ? `export ${assignments}` : \"\"\n      break\n    }\n  }\n\n  if (commandBlock && commandToRun) {\n    const separator = shell === \"cmd\" ? \" & \" : \" && \"\n    return `${commandBlock}${separator}${commandToRun}`\n  }\n\n  return commandBlock || commandToRun\n}\n","#!/usr/bin/env node\n\nimport { defineCommand } from \"citty\"\nimport clipboard from \"clipboardy\"\nimport consola from \"consola\"\nimport { serve, type ServerHandler } from \"srvx\"\nimport invariant from \"tiny-invariant\"\n\nimport { runProviderSetup } from \"./auth\"\nimport { isGitHubCopilotEnabled } from \"./lib/github-copilot-provider\"\nimport { listEnabledProviders, mergeConfigWithDefaults } from \"./lib/config\"\nimport { setupCopilotRuntime } from \"~/lib/copilot-runtime\"\nimport {\n  GITHUB_TOKEN_ENV,\n  readGitHubToken,\n  readGitHubTokenFromEnv,\n} from \"./lib/credential-store\"\nimport { getLatestModelForFamily } from \"./lib/models\"\nimport { startModelsDevCache } from \"./lib/models-dev-cache\"\nimport { initOpencodeVersion } from \"./lib/opencode\"\nimport { ensurePaths } from \"./lib/paths\"\nimport { initProxyFromEnv } from \"./lib/proxy\"\nimport {\n  getConfiguredApiKeys,\n  getMissingApiKeysMessage,\n} from \"./lib/request-auth\"\nimport {\n  DEFAULT_SERVER_HOST,\n  formatServerUrl,\n  resolveServerBinding,\n} from \"./lib/server-host\"\nimport { generateEnvScript } from \"./lib/shell\"\nimport { state } from \"./lib/state\"\n\ninterface RunServerOptions {\n  host: string\n  port: number\n  verbose: boolean\n  githubToken?: string\n  claudeCode: boolean\n  showToken: boolean\n  proxyEnv: boolean\n}\n\ntype GitHubTokenSource = \"cli\" | \"env\" | \"file\"\n\n// The environment is preferred over the token file so the token never has to\n// travel through the process list; --github-token stays first for callers that\n// opt in explicitly.\nasync function resolveGitHubToken(\n  cliToken: string | undefined,\n): Promise<{ token: string; source: GitHubTokenSource } | null> {\n  if (cliToken) return { token: cliToken, source: \"cli\" }\n\n  const envToken = readGitHubTokenFromEnv()\n  if (envToken) return { token: envToken, source: \"env\" }\n\n  const fileToken = await readGitHubToken()\n  if (fileToken) return { token: fileToken, source: \"file\" }\n\n  return null\n}\n\nasync function setupCopilotMode(\n  githubToken: string,\n  source: GitHubTokenSource,\n  serverUrl: string,\n  claudeCode: boolean,\n): Promise<void> {\n  state.githubTokenSource = source\n  consola.info(\n    source === \"cli\" ? \"Using provided GitHub token\"\n    : source === \"env\" ?\n      `Using GitHub token from the ${GITHUB_TOKEN_ENV} environment variable`\n    : \"Using GitHub token from local file\",\n  )\n\n  await setupCopilotRuntime(githubToken)\n\n  if (claudeCode) {\n    runClaudeCode(serverUrl)\n  }\n}\n\nfunction runClaudeCode(serverUrl: string): void {\n  consola.log(\n    \"\\n💡 Tip: The --claude-code flag simply generates a clipboard command for launching Claude Code. \\n\"\n      + \"All models remain fully accessible without this flag, just configure the model ID directly in your settings.json file.\",\n  )\n\n  invariant(state.models, \"Models should be loaded by now\")\n\n  // Default to the latest available model for each Claude Code size tier so\n  // opus maps to opus, sonnet maps to sonnet, and haiku maps to haiku.\n  const opusModel = getLatestModelForFamily(\"opus\")?.id\n  const sonnetModel = getLatestModelForFamily(\"sonnet\")?.id\n  const haikuModel = getLatestModelForFamily(\"haiku\")?.id\n\n  consola.info(\n    \"Selected default Claude Code models:\\n\"\n      + `- Opus:   ${opusModel ?? \"(none available)\"}\\n`\n      + `- Sonnet: ${sonnetModel ?? \"(none available)\"}\\n`\n      + `- Haiku:  ${haikuModel ?? \"(none available)\"}`,\n  )\n\n  const command = generateEnvScript(\n    {\n      ANTHROPIC_BASE_URL: serverUrl,\n      ANTHROPIC_AUTH_TOKEN: \"dummy\",\n      ANTHROPIC_MODEL: sonnetModel ?? opusModel,\n      ANTHROPIC_DEFAULT_OPUS_MODEL: opusModel,\n      ANTHROPIC_DEFAULT_SONNET_MODEL: sonnetModel,\n      ANTHROPIC_DEFAULT_HAIKU_MODEL: haikuModel,\n      CLAUDE_CODE_USE_VERTEX: \"0\",\n      CLAUDE_CODE_USE_BEDROCK: \"0\",\n      DISABLE_NON_ESSENTIAL_MODEL_CALLS: \"1\",\n      CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: \"1\",\n      CLAUDE_CODE_ATTRIBUTION_HEADER: \"0\",\n      CLAUDE_CODE_ENABLE_PROMPT_SUGGESTION: \"false\",\n      CLAUDE_CODE_DISABLE_TERMINAL_TITLE: \"true\",\n      CLAUDE_CODE_ENABLE_AWAY_SUMMARY: \"0\",\n      CLAUDE_CODE_TOTAL_TOKENS_REMINDER: \"off\",\n      MCP_CONNECT_TIMEOUT_MS: \"20000\",\n    },\n    \"claude\",\n  )\n\n  try {\n    clipboard.writeSync(command)\n    consola.success(\"Copied Claude Code command to clipboard!\")\n  } catch {\n    consola.warn(\n      \"Failed to copy to clipboard. Here is the Claude Code command:\",\n    )\n    consola.log(command)\n  }\n}\n\nasync function setupProviderMode(\n  serverUrl: string,\n  claudeCode: boolean,\n): Promise<void> {\n  const enabledProviders = listEnabledProviders()\n\n  if (enabledProviders.length > 0) {\n    consola.info(`Using enabled providers: ${enabledProviders.join(\", \")}`)\n    return\n  }\n\n  if (!isGitHubCopilotEnabled()) {\n    throw new Error(\n      \"No enabled providers found. Enable GitHub Copilot with `copilot-api provider enable github-copilot`, or enable another configured provider.\",\n    )\n  }\n\n  consola.info(\"No enabled providers found. Setting one up...\")\n  await runProviderSetup()\n\n  if (state.githubToken && isGitHubCopilotEnabled()) {\n    // The setup flow persisted the token with the credential store.\n    await setupCopilotMode(state.githubToken, \"file\", serverUrl, claudeCode)\n    return\n  }\n\n  const providersAfterSetup = listEnabledProviders()\n  if (providersAfterSetup.length === 0) {\n    throw new Error(\n      \"Failed to configure any provider. Run `copilot-api auth login` to set one up.\",\n    )\n  }\n  consola.info(`Configured providers: ${providersAfterSetup.join(\", \")}`)\n}\n\nexport async function runServer(options: RunServerOptions): Promise<void> {\n  const tlsModule = await import(\"./lib/tls\")\n  tlsModule.enableSystemCACompat()\n\n  consola.options.throttle = 0\n\n  mergeConfigWithDefaults()\n\n  const configuredApiKeys = getConfiguredApiKeys()\n  const binding = resolveServerBinding(\n    options.host,\n    configuredApiKeys.length > 0,\n  )\n\n  const missingApiKeysMessage = getMissingApiKeysMessage()\n  if (missingApiKeysMessage) {\n    consola.info(missingApiKeysMessage)\n  }\n\n  await initOpencodeVersion()\n\n  if (options.proxyEnv) {\n    initProxyFromEnv()\n  }\n\n  state.verbose = options.verbose\n  if (options.verbose) {\n    consola.level = 5\n    consola.info(\"Verbose logging enabled\")\n  }\n\n  state.showToken = options.showToken\n\n  await ensurePaths()\n  await startModelsDevCache()\n\n  const serverUrl = formatServerUrl(binding.clientHostname, options.port)\n\n  const resolvedGitHubToken =\n    isGitHubCopilotEnabled() ?\n      await resolveGitHubToken(options.githubToken)\n    : null\n  if (resolvedGitHubToken && isGitHubCopilotEnabled()) {\n    await setupCopilotMode(\n      resolvedGitHubToken.token,\n      resolvedGitHubToken.source,\n      serverUrl,\n      options.claudeCode,\n    )\n  } else {\n    await setupProviderMode(serverUrl, options.claudeCode)\n  }\n\n  consola.box(\n    `🌐 Dashboard Viewer: ${serverUrl}/usage-viewer?endpoint=${serverUrl}/usage`,\n  )\n\n  const { createServer } = await import(\"./server\")\n  const server = createServer({ networkExposed: binding.networkExposed })\n\n  serve({\n    fetch: server.fetch as ServerHandler,\n    hostname: binding.hostname,\n    port: options.port,\n    bun: {\n      idleTimeout: 0,\n    },\n  })\n}\n\nexport const start = defineCommand({\n  meta: {\n    name: \"start\",\n    description: \"Start the Copilot API server\",\n  },\n  args: {\n    host: {\n      type: \"string\",\n      default: process.env.HOST?.trim() || DEFAULT_SERVER_HOST,\n      description: \"Host to listen on\",\n    },\n    port: {\n      alias: \"p\",\n      type: \"string\",\n      default: \"4141\",\n      description: \"Port to listen on\",\n    },\n    verbose: {\n      alias: \"v\",\n      type: \"boolean\",\n      default: false,\n      description: \"Enable verbose logging\",\n    },\n    \"github-token\": {\n      alias: \"g\",\n      type: \"string\",\n      description:\n        \"Provide GitHub token directly (must be generated using the `auth` subcommand)\",\n    },\n    \"claude-code\": {\n      alias: \"c\",\n      type: \"boolean\",\n      default: false,\n      description:\n        \"Generate a command to launch Claude Code with Copilot API config\",\n    },\n    \"show-token\": {\n      type: \"boolean\",\n      default: false,\n      description: \"Show GitHub and Copilot tokens on fetch and refresh\",\n    },\n    \"proxy-env\": {\n      type: \"boolean\",\n      default: false,\n      description: \"Initialize proxy from environment variables\",\n    },\n  },\n  run({ args }) {\n    return runServer({\n      host: args.host,\n      port: Number.parseInt(args.port, 10),\n      verbose: args.verbose,\n      githubToken: args[\"github-token\"],\n      claudeCode: args[\"claude-code\"],\n      showToken: args[\"show-token\"],\n      proxyEnv: args[\"proxy-env\"],\n    })\n  },\n})\n"],"mappings":";;;;;;;;;;;;;;;;;AAIA,IAAI;AAMJ,SAAgB,mBAAyB;CACvC,IAAI;EACF,MAAM,SAAS,IAAI,MAAM;EACzB,MAAM,0BAAU,IAAI,IAAwB;EAmD5C,qBAAqB;GA5CnB,SACE,SACA,SACA;IACA,IAAI;KACF,MAAM,SACJ,OAAO,QAAQ,WAAW,WACxB,IAAI,IAAI,QAAQ,MAAM,IACrB,QAAQ;KAIb,MAAM,MAAMA,eAAI,OAAO,SAAS,CAAC;KACjC,MAAM,WAAW,OAAO,IAAI,SAAS,IAAI,MAAM,KAAA;KAC/C,IAAI,CAAC,UAAU;MACb,QAAQ,MAAM,sBAAsB,OAAO,UAAU;MACrD,OAAQ,OAAiC,SAAS,SAAS,OAAO;KACpE;KACA,IAAI,QAAQ,QAAQ,IAAI,QAAQ;KAChC,IAAI,CAAC,OAAO;MACV,QAAQ,IAAI,WAAW,QAAQ;MAC/B,QAAQ,IAAI,UAAU,KAAK;KAC7B;KACA,IAAI,QAAQ;KACZ,IAAI;MACF,MAAM,IAAI,IAAI,IAAI,QAAQ;MAC1B,QAAQ,GAAG,EAAE,SAAS,IAAI,EAAE;KAC9B,QAAQ,CAER;KACA,QAAQ,MAAM,qBAAqB,OAAO,SAAS,OAAO,OAAO;KACjE,OAAQ,MAAgC,SAAS,SAAS,OAAO;IACnE,QAAQ;KACN,OAAQ,OAAiC,SAAS,SAAS,OAAO;IACpE;GACF;GACA,QAAQ;IACN,OAAO,OAAO,MAAM;GACtB;GACA,UAAU;IACR,OAAO,OAAO,QAAQ;GACxB;EAG4B;EAE9B,IAAI,OAAO,QAAQ,aAAa;GAC9B,QAAQ,MAAM,uDAAuD;GACrE;EACF;EAEA,oBAAoB,kBAAkB;EACtC,QAAQ,MAAM,kDAAkD;CAClE,SAAS,KAAK;EACZ,QAAQ,MAAM,wBAAwB,GAAG;CAC3C;AACF;;;ACxEA,MAAa,0BAA0B;AAIvC,MAAa,4CAA4B,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC;AAElE,SAAgB,kBAAkB,UAA0B;CAC1D,IAAI,SAAS,WAAW,GAAG,KAAK,SAAS,SAAS,GAAG,GACnD,OAAO,SAAS,MAAM,GAAG,EAAE;CAE7B,OAAO;AACT;AAEA,SAAgB,sBAAsB,UAA0B;CAC9D,MAAM,aAAa,kBAAkB,SAAS,KAAK,CAAC;CACpD,IAAI,CAAC,cAAc,wBAAwB,KAAK,UAAU,GACxD,MAAM,IAAI,MAAM,wBAAwB,KAAK,UAAU,QAAQ,GAAG;CAEpE,OAAO;AACT;AAEA,SAAgB,mBAAmB,UAA2B;CAC5D,OAAO,0BAA0B,IAAI,kBAAkB,SAAS,KAAK,CAAC,CAAC;AACzE;;;ACvBA,MAAa,sBAAsB;AAwBnC,SAAS,eAAe,UAA2B;CACjD,OAAO,KAAK,QAAQ,MAAM,KAAK,SAAS,MAAM,KAAK,CAAC,CAAC,CAAC,OAAO;AAC/D;AAEA,SAAS,qBAAqB,UAA2B;CACvD,IAAI;EAKF,MAAM,aAJoB,IAAI,IAAI,WAAW,SAAS,GAAG,CAAC,CAAC,SAAS,MAClE,GACA,EAEiC,CAAC,CAAC,MACnC,sCACF;EACA,IAAI,CAAC,YACH,OAAO;EAGT,QAAQ,OAAO,SAAS,WAAW,IAAI,EAAE,IAAI,WAAY;CAC3D,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAgB,wBAAwB,UAA0B;CAChE,OAAO,sBAAsB,QAAQ;AACvC;AAEA,SAAgB,mBAAmB,UAA2B;CAC5D,MAAM,aAAa,wBAAwB,QAAQ,CAAC,CAAC,YAAY;CACjE,IAAI,eAAe,eAAe,eAAe,cAC/C,OAAO;CAET,IAAI,eAAe,UAAU,GAC3B,OAAO;CAET,IAAI,KAAK,UAAU,MAAM,GACvB,OAAO;CAGT,IAAI,eAAe,SAAS,eAAe,mBACzC,OAAO;CAGT,OAAO,qBAAqB,UAAU;AACxC;AAEA,SAAgB,qBACd,UACA,YACe;CACf,MAAM,qBAAqB,wBAAwB,QAAQ;CAC3D,MAAM,iBAAiB,CAAC,mBAAmB,kBAAkB;CAE7D,IAAI,kBAAkB,CAAC,YACrB,MAAM,IAAI,MACR,2CAA2C,KAAK,UAAU,kBAAkB,EAAE,qHAAqH,oBAAoB,IACzN;CAGF,OAAO;EACL,UAAU;EACV,gBAAgB,sBAAsB,kBAAkB;EACxD;CACF;AACF;AAEA,SAAgB,sBAAsB,UAA0B;CAC9D,MAAM,qBAAqB,wBAAwB,QAAQ;CAG3D,OAAO,mBAAmB,kBAAkB,IAAI,sBAC5C,mBAAmB,YAAY;AAErC;AAWA,SAAgB,gBAAgB,UAAkB,MAAsB;CAGtE,OAAO,UADL,KAAK,QAAQ,MAAM,IAAI,IAAI,SAAS,QAAQ,KAAK,KAAK,EAAE,KAAK,SAClC,GAAG;AAClC;;;AC9GA,SAAS,WAAsB;CAC7B,MAAM,EAAE,UAAU,MAAM,QAAQC;CAEhC,IAAI,aAAa,SAAS;EACxB,IAAI;GACF,MAAM,UAAU,oDAAoD,KAAK;GAGzE,IAFsB,SAAS,SAAS,EAAE,OAAO,OAAO,CAAC,CAAC,CAAC,SAE3C,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS,gBAAgB,GACvD,OAAO;EAEX,QAAQ;GACN,OAAO;EACT;EAEA,OAAO;CACT,OAAO;EACL,MAAM,YAAY,IAAI;EACtB,IAAI,WAAW;GACb,IAAI,UAAU,SAAS,KAAK,GAAG,OAAO;GACtC,IAAI,UAAU,SAAS,MAAM,GAAG,OAAO;GACvC,IAAI,UAAU,SAAS,MAAM,GAAG,OAAO;EACzC;EAEA,OAAO;CACT;AACF;;;;;;;;AASA,SAAgB,kBACd,SACA,eAAuB,IACf;CACR,MAAM,QAAQ,SAAS;CACvB,MAAM,kBAAkB,OAAO,QAAQ,OAAO,CAAC,CAAC,QAC7C,GAAG,WAAW,UAAU,KAAA,CAC3B;CAEA,IAAI;CAEJ,QAAQ,OAAR;EACE,KAAK;GACH,eAAe,gBACZ,KAAK,CAAC,KAAK,WAAW,QAAQ,IAAI,KAAK,OAAO,CAAC,CAC/C,KAAK,IAAI;GACZ;EAEF,KAAK;GACH,eAAe,gBACZ,KAAK,CAAC,KAAK,WAAW,OAAO,IAAI,GAAG,OAAO,CAAC,CAC5C,KAAK,KAAK;GACb;EAEF,KAAK;GACH,eAAe,gBACZ,KAAK,CAAC,KAAK,WAAW,WAAW,IAAI,GAAG,OAAO,CAAC,CAChD,KAAK,IAAI;GACZ;EAEF,SAAS;GAEP,MAAM,cAAc,gBACjB,KAAK,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,CACxC,KAAK,GAAG;GACX,eAAe,gBAAgB,SAAS,IAAI,UAAU,gBAAgB;GACtE;EACF;CACF;CAEA,IAAI,gBAAgB,cAElB,OAAO,GAAG,eADQ,UAAU,QAAQ,QAAQ,SACP;CAGvC,OAAO,gBAAgB;AACzB;;;ACtCA,eAAe,mBACb,UAC8D;CAC9D,IAAI,UAAU,OAAO;EAAE,OAAO;EAAU,QAAQ;CAAM;CAEtD,MAAM,WAAW,uBAAuB;CACxC,IAAI,UAAU,OAAO;EAAE,OAAO;EAAU,QAAQ;CAAM;CAEtD,MAAM,YAAY,MAAM,gBAAgB;CACxC,IAAI,WAAW,OAAO;EAAE,OAAO;EAAW,QAAQ;CAAO;CAEzD,OAAO;AACT;AAEA,eAAe,iBACb,aACA,QACA,WACA,YACe;CACf,MAAM,oBAAoB;CAC1B,QAAQ,KACN,WAAW,QAAQ,gCACjB,WAAW,QACX,+BAA+B,iBAAiB,yBAChD,oCACJ;CAEA,MAAM,oBAAoB,WAAW;CAErC,IAAI,YACF,cAAc,SAAS;AAE3B;AAEA,SAAS,cAAc,WAAyB;CAC9C,QAAQ,IACN,2NAEF;CAEA,UAAU,MAAM,QAAQ,gCAAgC;CAIxD,MAAM,YAAY,wBAAwB,MAAM,CAAC,EAAE;CACnD,MAAM,cAAc,wBAAwB,QAAQ,CAAC,EAAE;CACvD,MAAM,aAAa,wBAAwB,OAAO,CAAC,EAAE;CAErD,QAAQ,KACN;YACiB,aAAa,mBAAmB,cAChC,eAAe,mBAAmB,cAClC,cAAc,oBACjC;CAEA,MAAM,UAAU,kBACd;EACE,oBAAoB;EACpB,sBAAsB;EACtB,iBAAiB,eAAe;EAChC,8BAA8B;EAC9B,gCAAgC;EAChC,+BAA+B;EAC/B,wBAAwB;EACxB,yBAAyB;EACzB,mCAAmC;EACnC,0CAA0C;EAC1C,gCAAgC;EAChC,sCAAsC;EACtC,oCAAoC;EACpC,iCAAiC;EACjC,mCAAmC;EACnC,wBAAwB;CAC1B,GACA,QACF;CAEA,IAAI;EACF,UAAU,UAAU,OAAO;EAC3B,QAAQ,QAAQ,0CAA0C;CAC5D,QAAQ;EACN,QAAQ,KACN,+DACF;EACA,QAAQ,IAAI,OAAO;CACrB;AACF;AAEA,eAAe,kBACb,WACA,YACe;CACf,MAAM,mBAAmB,qBAAqB;CAE9C,IAAI,iBAAiB,SAAS,GAAG;EAC/B,QAAQ,KAAK,4BAA4B,iBAAiB,KAAK,IAAI,GAAG;EACtE;CACF;CAEA,IAAI,CAAC,uBAAuB,GAC1B,MAAM,IAAI,MACR,6IACF;CAGF,QAAQ,KAAK,+CAA+C;CAC5D,MAAM,iBAAiB;CAEvB,IAAI,MAAM,eAAe,uBAAuB,GAAG;EAEjD,MAAM,iBAAiB,MAAM,aAAa,QAAQ,WAAW,UAAU;EACvE;CACF;CAEA,MAAM,sBAAsB,qBAAqB;CACjD,IAAI,oBAAoB,WAAW,GACjC,MAAM,IAAI,MACR,+EACF;CAEF,QAAQ,KAAK,yBAAyB,oBAAoB,KAAK,IAAI,GAAG;AACxE;AAEA,eAAsB,UAAU,SAA0C;CAExE,CAAA,MADwB,OAAO,qBAAA,CACrB,qBAAqB;CAE/B,QAAQ,QAAQ,WAAW;CAE3B,wBAAwB;CAExB,MAAM,oBAAoB,qBAAqB;CAC/C,MAAM,UAAU,qBACd,QAAQ,MACR,kBAAkB,SAAS,CAC7B;CAEA,MAAM,wBAAwB,yBAAyB;CACvD,IAAI,uBACF,QAAQ,KAAK,qBAAqB;CAGpC,MAAM,oBAAoB;CAE1B,IAAI,QAAQ,UACV,iBAAiB;CAGnB,MAAM,UAAU,QAAQ;CACxB,IAAI,QAAQ,SAAS;EACnB,QAAQ,QAAQ;EAChB,QAAQ,KAAK,yBAAyB;CACxC;CAEA,MAAM,YAAY,QAAQ;CAE1B,MAAM,YAAY;CAClB,MAAM,oBAAoB;CAE1B,MAAM,YAAY,gBAAgB,QAAQ,gBAAgB,QAAQ,IAAI;CAEtE,MAAM,sBACJ,uBAAuB,IACrB,MAAM,mBAAmB,QAAQ,WAAW,IAC5C;CACJ,IAAI,uBAAuB,uBAAuB,GAChD,MAAM,iBACJ,oBAAoB,OACpB,oBAAoB,QACpB,WACA,QAAQ,UACV;MAEA,MAAM,kBAAkB,WAAW,QAAQ,UAAU;CAGvD,QAAQ,IACN,wBAAwB,UAAU,yBAAyB,UAAU,OACvE;CAEA,MAAM,EAAE,iBAAiB,MAAM,OAAO;CACtC,MAAM,SAAS,aAAa,EAAE,gBAAgB,QAAQ,eAAe,CAAC;CAEtE,MAAM;EACJ,OAAO,OAAO;EACd,UAAU,QAAQ;EAClB,MAAM,QAAQ;EACd,KAAK,EACH,aAAa,EACf;CACF,CAAC;AACH;AAEA,MAAa,QAAQ,cAAc;CACjC,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,MAAM;EACJ,MAAM;GACJ,MAAM;GACN,SAAS,QAAQ,IAAI,MAAM,KAAK,KAAA;GAChC,aAAa;EACf;EACA,MAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,aAAa;EACf;EACA,SAAS;GACP,OAAO;GACP,MAAM;GACN,SAAS;GACT,aAAa;EACf;EACA,gBAAgB;GACd,OAAO;GACP,MAAM;GACN,aACE;EACJ;EACA,eAAe;GACb,OAAO;GACP,MAAM;GACN,SAAS;GACT,aACE;EACJ;EACA,cAAc;GACZ,MAAM;GACN,SAAS;GACT,aAAa;EACf;EACA,aAAa;GACX,MAAM;GACN,SAAS;GACT,aAAa;EACf;CACF;CACA,IAAI,EAAE,QAAQ;EACZ,OAAO,UAAU;GACf,MAAM,KAAK;GACX,MAAM,OAAO,SAAS,KAAK,MAAM,EAAE;GACnC,SAAS,KAAK;GACd,aAAa,KAAK;GAClB,YAAY,KAAK;GACjB,WAAW,KAAK;GAChB,UAAU,KAAK;EACjB,CAAC;CACH;AACF,CAAC"}
+{"version":3,"file":"start-v0WnZYEn.js","names":["get","process"],"sources":["../src/lib/proxy.ts","../src/lib/server-host-shared.ts","../src/lib/server-host.ts","../src/lib/shell.ts","../src/start.ts"],"sourcesContent":["import consola from \"consola\"\nimport { getProxyForUrl } from \"proxy-from-env\"\nimport { Agent, ProxyAgent, setGlobalDispatcher, type Dispatcher } from \"undici\"\n\nlet proxyEnvDispatcher: Dispatcher | undefined\n\nexport function getProxyEnvDispatcher(): Dispatcher | undefined {\n  return proxyEnvDispatcher\n}\n\nexport function initProxyFromEnv(): void {\n  try {\n    const direct = new Agent()\n    const proxies = new Map<string, ProxyAgent>()\n\n    // We only need a minimal dispatcher that implements `dispatch` at runtime.\n    // Typing the object as `Dispatcher` forces TypeScript to require many\n    // additional methods. Instead, keep a plain object and cast when passing\n    // to `setGlobalDispatcher`.\n    const dispatcher = {\n      dispatch(\n        options: Dispatcher.DispatchOptions,\n        handler: Dispatcher.DispatchHandler,\n      ) {\n        try {\n          const origin =\n            typeof options.origin === \"string\" ?\n              new URL(options.origin)\n            : (options.origin as URL)\n          const get = getProxyForUrl as unknown as (\n            u: string,\n          ) => string | undefined\n          const raw = get(origin.toString())\n          const proxyUrl = raw && raw.length > 0 ? raw : undefined\n          if (!proxyUrl) {\n            consola.debug(`HTTP proxy bypass: ${origin.hostname}`)\n            return (direct as unknown as Dispatcher).dispatch(options, handler)\n          }\n          let agent = proxies.get(proxyUrl)\n          if (!agent) {\n            agent = new ProxyAgent(proxyUrl)\n            proxies.set(proxyUrl, agent)\n          }\n          let label = proxyUrl\n          try {\n            const u = new URL(proxyUrl)\n            label = `${u.protocol}//${u.host}`\n          } catch {\n            /* noop */\n          }\n          consola.debug(`HTTP proxy route: ${origin.hostname} via ${label}`)\n          return (agent as unknown as Dispatcher).dispatch(options, handler)\n        } catch {\n          return (direct as unknown as Dispatcher).dispatch(options, handler)\n        }\n      },\n      close() {\n        return direct.close()\n      },\n      destroy() {\n        return direct.destroy()\n      },\n    }\n\n    proxyEnvDispatcher = dispatcher as unknown as Dispatcher\n\n    if (typeof Bun !== \"undefined\") {\n      consola.debug(\"WebSocket proxy configured from environment (per-URL)\")\n      return\n    }\n\n    setGlobalDispatcher(proxyEnvDispatcher)\n    consola.debug(\"HTTP proxy configured from environment (per-URL)\")\n  } catch (err) {\n    consola.debug(\"Proxy setup skipped:\", err)\n  }\n}\n","// Pure hostname helpers shared by the gateway server (Node) and the desktop\n// app (including the renderer bundle). This module must stay free of\n// `node:*` imports because the renderer cannot use `node:net`; all\n// address-family checks live in `server-host.ts`.\nexport const INVALID_HOST_CHARACTERS = /[\\s/?#]/\n\n// Bind hosts that listen on every interface, in normalized form (no\n// brackets, so \"[::]\" is covered via `stripIpv6Brackets`).\nexport const NORMALIZED_WILDCARD_HOSTS = new Set([\"0.0.0.0\", \"::\"])\n\nexport function stripIpv6Brackets(hostname: string): string {\n  if (hostname.startsWith(\"[\") && hostname.endsWith(\"]\")) {\n    return hostname.slice(1, -1)\n  }\n  return hostname\n}\n\nexport function normalizeHostnameBase(hostname: string): string {\n  const normalized = stripIpv6Brackets(hostname.trim())\n  if (!normalized || INVALID_HOST_CHARACTERS.test(normalized)) {\n    throw new Error(`Invalid server host: ${JSON.stringify(hostname)}`)\n  }\n  return normalized\n}\n\nexport function isWildcardHostname(hostname: string): boolean {\n  return NORMALIZED_WILDCARD_HOSTS.has(stripIpv6Brackets(hostname.trim()))\n}\n","import { isIP } from \"node:net\"\n\nimport { isWildcardHostname, normalizeHostnameBase } from \"./server-host-shared\"\n\nexport const DEFAULT_SERVER_HOST = \"127.0.0.1\"\n\n// Listen failures that mean the hostname itself cannot be bound, as opposed\n// to the port being occupied (EADDRINUSE) or forbidden (EACCES). ENOTFOUND\n// covers unresolvable names such as typos, EADDRNOTAVAIL covers valid IPs\n// that are not assigned to this machine.\nconst INVALID_BIND_ERROR_CODES = new Set([\n  \"ENOTFOUND\",\n  \"EADDRNOTAVAIL\",\n  \"EINVAL\",\n  \"EAFNOSUPPORT\",\n  \"ENXIO\",\n])\n\nexport function isInvalidBindErrorCode(code?: string): boolean {\n  return !!code && INVALID_BIND_ERROR_CODES.has(code)\n}\n\nexport interface ServerBinding {\n  hostname: string\n  clientHostname: string\n  networkExposed: boolean\n}\n\nfunction isLoopbackIpv4(hostname: string): boolean {\n  return isIP(hostname) === 4 && hostname.split(\".\", 1)[0] === \"127\"\n}\n\nfunction isLoopbackMappedIpv4(hostname: string): boolean {\n  try {\n    const canonicalHostname = new URL(`http://[${hostname}]/`).hostname.slice(\n      1,\n      -1,\n    )\n    const mappedIpv4 = canonicalHostname.match(\n      /^::ffff:([\\da-f]{1,4}):[\\da-f]{1,4}$/,\n    )\n    if (!mappedIpv4) {\n      return false\n    }\n\n    return (Number.parseInt(mappedIpv4[1], 16) & 0xff00) === 0x7f00\n  } catch {\n    return false\n  }\n}\n\nexport function normalizeServerHostname(hostname: string): string {\n  return normalizeHostnameBase(hostname)\n}\n\nexport function isLoopbackHostname(hostname: string): boolean {\n  const normalized = normalizeServerHostname(hostname).toLowerCase()\n  if (normalized === \"localhost\" || normalized === \"localhost.\") {\n    return true\n  }\n  if (isLoopbackIpv4(normalized)) {\n    return true\n  }\n  if (isIP(normalized) !== 6) {\n    return false\n  }\n\n  if (normalized === \"::1\" || normalized === \"0:0:0:0:0:0:0:1\") {\n    return true\n  }\n\n  return isLoopbackMappedIpv4(normalized)\n}\n\nexport function resolveServerBinding(\n  hostname: string,\n  hasApiKeys: boolean,\n): ServerBinding {\n  const normalizedHostname = normalizeServerHostname(hostname)\n  const networkExposed = !isLoopbackHostname(normalizedHostname)\n\n  if (networkExposed && !hasApiKeys) {\n    throw new Error(\n      `Refusing to listen on non-loopback host ${JSON.stringify(normalizedHostname)} without gateway API keys. Run \\`npx @jeffreycao/copilot-api@latest auth keys --add <key>\\` first, or use \\`--host ${DEFAULT_SERVER_HOST}\\`.`,\n    )\n  }\n\n  return {\n    hostname: normalizedHostname,\n    clientHostname: resolveClientHostname(normalizedHostname),\n    networkExposed,\n  }\n}\n\nexport function resolveClientHostname(hostname: string): string {\n  const normalizedHostname = normalizeServerHostname(hostname)\n  // Wildcard binds listen on every interface, which clients cannot dial\n  // directly (0.0.0.0 is not a routable destination).\n  return isWildcardHostname(normalizedHostname) ? DEFAULT_SERVER_HOST : (\n      normalizedHostname.toLowerCase()\n    )\n}\n\nexport function resolveClientHostnameOrDefault(\n  hostname: string | null | undefined,\n): string {\n  const normalizedHostname = hostname?.trim()\n  return normalizedHostname ?\n      resolveClientHostname(normalizedHostname)\n    : DEFAULT_SERVER_HOST\n}\n\nexport function formatServerUrl(hostname: string, port: number): string {\n  const urlHostname =\n    isIP(hostname) === 6 ? `[${hostname.replace(\"%\", \"%25\")}]` : hostname\n  return `http://${urlHostname}:${port}`\n}\n","import { execSync } from \"node:child_process\"\nimport process from \"node:process\"\n\ntype ShellName = \"bash\" | \"zsh\" | \"fish\" | \"powershell\" | \"cmd\" | \"sh\"\ntype EnvVars = Record<string, string | undefined>\n\nfunction getShell(): ShellName {\n  const { platform, ppid, env } = process\n\n  if (platform === \"win32\") {\n    try {\n      const command = `wmic process get ParentProcessId,Name | findstr \"${ppid}\"`\n      const parentProcess = execSync(command, { stdio: \"pipe\" }).toString()\n\n      if (parentProcess.toLowerCase().includes(\"powershell.exe\")) {\n        return \"powershell\"\n      }\n    } catch {\n      return \"cmd\"\n    }\n\n    return \"cmd\"\n  } else {\n    const shellPath = env.SHELL\n    if (shellPath) {\n      if (shellPath.endsWith(\"zsh\")) return \"zsh\"\n      if (shellPath.endsWith(\"fish\")) return \"fish\"\n      if (shellPath.endsWith(\"bash\")) return \"bash\"\n    }\n\n    return \"sh\"\n  }\n}\n\n/**\n * Generates a copy-pasteable script to set multiple environment variables\n * and run a subsequent command.\n * @param {EnvVars} envVars - An object of environment variables to set.\n * @param {string} commandToRun - The command to run after setting the variables.\n * @returns {string} The formatted script string.\n */\nexport function generateEnvScript(\n  envVars: EnvVars,\n  commandToRun: string = \"\",\n): string {\n  const shell = getShell()\n  const filteredEnvVars = Object.entries(envVars).filter(\n    ([, value]) => value !== undefined,\n  ) as Array<[string, string]>\n\n  let commandBlock: string\n\n  switch (shell) {\n    case \"powershell\": {\n      commandBlock = filteredEnvVars\n        .map(([key, value]) => `$env:${key} = ${value}`)\n        .join(\"; \")\n      break\n    }\n    case \"cmd\": {\n      commandBlock = filteredEnvVars\n        .map(([key, value]) => `set ${key}=${value}`)\n        .join(\" & \")\n      break\n    }\n    case \"fish\": {\n      commandBlock = filteredEnvVars\n        .map(([key, value]) => `set -gx ${key} ${value}`)\n        .join(\"; \")\n      break\n    }\n    default: {\n      // bash, zsh, sh\n      const assignments = filteredEnvVars\n        .map(([key, value]) => `${key}=${value}`)\n        .join(\" \")\n      commandBlock = filteredEnvVars.length > 0 ? `export ${assignments}` : \"\"\n      break\n    }\n  }\n\n  if (commandBlock && commandToRun) {\n    const separator = shell === \"cmd\" ? \" & \" : \" && \"\n    return `${commandBlock}${separator}${commandToRun}`\n  }\n\n  return commandBlock || commandToRun\n}\n","#!/usr/bin/env node\n\nimport { defineCommand } from \"citty\"\nimport clipboard from \"clipboardy\"\nimport consola from \"consola\"\nimport { serve, type ServerHandler } from \"srvx\"\nimport invariant from \"tiny-invariant\"\n\nimport { runProviderSetup } from \"./auth\"\nimport { isGitHubCopilotEnabled } from \"./lib/github-copilot-provider\"\nimport { listEnabledProviders, mergeConfigWithDefaults } from \"./lib/config\"\nimport { setupCopilotRuntime } from \"~/lib/copilot-runtime\"\nimport {\n  GITHUB_TOKEN_ENV,\n  readGitHubToken,\n  readGitHubTokenFromEnv,\n} from \"./lib/credential-store\"\nimport { getLatestModelForFamily } from \"./lib/models\"\nimport { startModelsDevCache } from \"./lib/models-dev-cache\"\nimport { initOpencodeVersion } from \"./lib/opencode\"\nimport { ensurePaths } from \"./lib/paths\"\nimport { initProxyFromEnv } from \"./lib/proxy\"\nimport {\n  getConfiguredApiKeys,\n  getMissingApiKeysMessage,\n} from \"./lib/request-auth\"\nimport {\n  DEFAULT_SERVER_HOST,\n  formatServerUrl,\n  resolveServerBinding,\n} from \"./lib/server-host\"\nimport { generateEnvScript } from \"./lib/shell\"\nimport { state } from \"./lib/state\"\n\ninterface RunServerOptions {\n  host: string\n  port: number\n  verbose: boolean\n  githubToken?: string\n  claudeCode: boolean\n  showToken: boolean\n  proxyEnv: boolean\n}\n\ntype GitHubTokenSource = \"cli\" | \"env\" | \"file\"\n\n// The environment is preferred over the token file so the token never has to\n// travel through the process list; --github-token stays first for callers that\n// opt in explicitly.\nasync function resolveGitHubToken(\n  cliToken: string | undefined,\n): Promise<{ token: string; source: GitHubTokenSource } | null> {\n  if (cliToken) return { token: cliToken, source: \"cli\" }\n\n  const envToken = readGitHubTokenFromEnv()\n  if (envToken) return { token: envToken, source: \"env\" }\n\n  const fileToken = await readGitHubToken()\n  if (fileToken) return { token: fileToken, source: \"file\" }\n\n  return null\n}\n\nasync function setupCopilotMode(\n  githubToken: string,\n  source: GitHubTokenSource,\n  serverUrl: string,\n  claudeCode: boolean,\n): Promise<void> {\n  state.githubTokenSource = source\n  consola.info(\n    source === \"cli\" ? \"Using provided GitHub token\"\n    : source === \"env\" ?\n      `Using GitHub token from the ${GITHUB_TOKEN_ENV} environment variable`\n    : \"Using GitHub token from local file\",\n  )\n\n  await setupCopilotRuntime(githubToken)\n\n  if (claudeCode) {\n    runClaudeCode(serverUrl)\n  }\n}\n\nfunction runClaudeCode(serverUrl: string): void {\n  consola.log(\n    \"\\n💡 Tip: The --claude-code flag simply generates a clipboard command for launching Claude Code. \\n\"\n      + \"All models remain fully accessible without this flag, just configure the model ID directly in your settings.json file.\",\n  )\n\n  invariant(state.models, \"Models should be loaded by now\")\n\n  // Default to the latest available model for each Claude Code size tier so\n  // opus maps to opus, sonnet maps to sonnet, and haiku maps to haiku.\n  const opusModel = getLatestModelForFamily(\"opus\")?.id\n  const sonnetModel = getLatestModelForFamily(\"sonnet\")?.id\n  const haikuModel = getLatestModelForFamily(\"haiku\")?.id\n\n  consola.info(\n    \"Selected default Claude Code models:\\n\"\n      + `- Opus:   ${opusModel ?? \"(none available)\"}\\n`\n      + `- Sonnet: ${sonnetModel ?? \"(none available)\"}\\n`\n      + `- Haiku:  ${haikuModel ?? \"(none available)\"}`,\n  )\n\n  const command = generateEnvScript(\n    {\n      ANTHROPIC_BASE_URL: serverUrl,\n      ANTHROPIC_AUTH_TOKEN: \"dummy\",\n      ANTHROPIC_MODEL: sonnetModel ?? opusModel,\n      ANTHROPIC_DEFAULT_OPUS_MODEL: opusModel,\n      ANTHROPIC_DEFAULT_SONNET_MODEL: sonnetModel,\n      ANTHROPIC_DEFAULT_HAIKU_MODEL: haikuModel,\n      CLAUDE_CODE_USE_VERTEX: \"0\",\n      CLAUDE_CODE_USE_BEDROCK: \"0\",\n      DISABLE_NON_ESSENTIAL_MODEL_CALLS: \"1\",\n      CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: \"1\",\n      CLAUDE_CODE_ATTRIBUTION_HEADER: \"0\",\n      CLAUDE_CODE_ENABLE_PROMPT_SUGGESTION: \"false\",\n      CLAUDE_CODE_DISABLE_TERMINAL_TITLE: \"true\",\n      CLAUDE_CODE_ENABLE_AWAY_SUMMARY: \"0\",\n      CLAUDE_CODE_TOTAL_TOKENS_REMINDER: \"off\",\n      MCP_CONNECT_TIMEOUT_MS: \"20000\",\n    },\n    \"claude\",\n  )\n\n  try {\n    clipboard.writeSync(command)\n    consola.success(\"Copied Claude Code command to clipboard!\")\n  } catch {\n    consola.warn(\n      \"Failed to copy to clipboard. Here is the Claude Code command:\",\n    )\n    consola.log(command)\n  }\n}\n\nasync function setupProviderMode(\n  serverUrl: string,\n  claudeCode: boolean,\n): Promise<void> {\n  const enabledProviders = listEnabledProviders()\n\n  if (enabledProviders.length > 0) {\n    consola.info(`Using enabled providers: ${enabledProviders.join(\", \")}`)\n    return\n  }\n\n  if (!isGitHubCopilotEnabled()) {\n    throw new Error(\n      \"No enabled providers found. Enable GitHub Copilot with `copilot-api provider enable github-copilot`, or enable another configured provider.\",\n    )\n  }\n\n  consola.info(\"No enabled providers found. Setting one up...\")\n  await runProviderSetup()\n\n  if (state.githubToken && isGitHubCopilotEnabled()) {\n    // The setup flow persisted the token with the credential store.\n    await setupCopilotMode(state.githubToken, \"file\", serverUrl, claudeCode)\n    return\n  }\n\n  const providersAfterSetup = listEnabledProviders()\n  if (providersAfterSetup.length === 0) {\n    throw new Error(\n      \"Failed to configure any provider. Run `copilot-api auth login` to set one up.\",\n    )\n  }\n  consola.info(`Configured providers: ${providersAfterSetup.join(\", \")}`)\n}\n\nexport async function runServer(options: RunServerOptions): Promise<void> {\n  const tlsModule = await import(\"./lib/tls\")\n  tlsModule.enableSystemCACompat()\n\n  consola.options.throttle = 0\n\n  mergeConfigWithDefaults()\n\n  const configuredApiKeys = getConfiguredApiKeys()\n  const binding = resolveServerBinding(\n    options.host,\n    configuredApiKeys.length > 0,\n  )\n\n  const missingApiKeysMessage = getMissingApiKeysMessage()\n  if (missingApiKeysMessage) {\n    consola.info(missingApiKeysMessage)\n  }\n\n  await initOpencodeVersion()\n\n  if (options.proxyEnv) {\n    initProxyFromEnv()\n  }\n\n  state.verbose = options.verbose\n  if (options.verbose) {\n    consola.level = 5\n    consola.info(\"Verbose logging enabled\")\n  }\n\n  state.showToken = options.showToken\n\n  await ensurePaths()\n  await startModelsDevCache()\n\n  const serverUrl = formatServerUrl(binding.clientHostname, options.port)\n\n  const resolvedGitHubToken =\n    isGitHubCopilotEnabled() ?\n      await resolveGitHubToken(options.githubToken)\n    : null\n  if (resolvedGitHubToken && isGitHubCopilotEnabled()) {\n    await setupCopilotMode(\n      resolvedGitHubToken.token,\n      resolvedGitHubToken.source,\n      serverUrl,\n      options.claudeCode,\n    )\n  } else {\n    await setupProviderMode(serverUrl, options.claudeCode)\n  }\n\n  consola.box(\n    `🌐 Dashboard Viewer: ${serverUrl}/usage-viewer?endpoint=${serverUrl}/usage`,\n  )\n\n  const { createServer } = await import(\"./server\")\n  const server = createServer({ networkExposed: binding.networkExposed })\n\n  serve({\n    fetch: server.fetch as ServerHandler,\n    hostname: binding.hostname,\n    port: options.port,\n    bun: {\n      idleTimeout: 0,\n    },\n  })\n}\n\nexport const start = defineCommand({\n  meta: {\n    name: \"start\",\n    description: \"Start the Copilot API server\",\n  },\n  args: {\n    host: {\n      type: \"string\",\n      default: process.env.HOST?.trim() || DEFAULT_SERVER_HOST,\n      description: \"Host to listen on\",\n    },\n    port: {\n      alias: \"p\",\n      type: \"string\",\n      default: \"4141\",\n      description: \"Port to listen on\",\n    },\n    verbose: {\n      alias: \"v\",\n      type: \"boolean\",\n      default: false,\n      description: \"Enable verbose logging\",\n    },\n    \"github-token\": {\n      alias: \"g\",\n      type: \"string\",\n      description:\n        \"Provide GitHub token directly (must be generated using the `auth` subcommand)\",\n    },\n    \"claude-code\": {\n      alias: \"c\",\n      type: \"boolean\",\n      default: false,\n      description:\n        \"Generate a command to launch Claude Code with Copilot API config\",\n    },\n    \"show-token\": {\n      type: \"boolean\",\n      default: false,\n      description: \"Show GitHub and Copilot tokens on fetch and refresh\",\n    },\n    \"proxy-env\": {\n      type: \"boolean\",\n      default: false,\n      description: \"Initialize proxy from environment variables\",\n    },\n  },\n  run({ args }) {\n    return runServer({\n      host: args.host,\n      port: Number.parseInt(args.port, 10),\n      verbose: args.verbose,\n      githubToken: args[\"github-token\"],\n      claudeCode: args[\"claude-code\"],\n      showToken: args[\"show-token\"],\n      proxyEnv: args[\"proxy-env\"],\n    })\n  },\n})\n"],"mappings":";;;;;;;;;;;;;;;;;AAIA,IAAI;AAMJ,SAAgB,mBAAyB;CACvC,IAAI;EACF,MAAM,SAAS,IAAI,MAAM;EACzB,MAAM,0BAAU,IAAI,IAAwB;EAmD5C,qBAAqB;GA5CnB,SACE,SACA,SACA;IACA,IAAI;KACF,MAAM,SACJ,OAAO,QAAQ,WAAW,WACxB,IAAI,IAAI,QAAQ,MAAM,IACrB,QAAQ;KAIb,MAAM,MAAMA,eAAI,OAAO,SAAS,CAAC;KACjC,MAAM,WAAW,OAAO,IAAI,SAAS,IAAI,MAAM,KAAA;KAC/C,IAAI,CAAC,UAAU;MACb,QAAQ,MAAM,sBAAsB,OAAO,UAAU;MACrD,OAAQ,OAAiC,SAAS,SAAS,OAAO;KACpE;KACA,IAAI,QAAQ,QAAQ,IAAI,QAAQ;KAChC,IAAI,CAAC,OAAO;MACV,QAAQ,IAAI,WAAW,QAAQ;MAC/B,QAAQ,IAAI,UAAU,KAAK;KAC7B;KACA,IAAI,QAAQ;KACZ,IAAI;MACF,MAAM,IAAI,IAAI,IAAI,QAAQ;MAC1B,QAAQ,GAAG,EAAE,SAAS,IAAI,EAAE;KAC9B,QAAQ,CAER;KACA,QAAQ,MAAM,qBAAqB,OAAO,SAAS,OAAO,OAAO;KACjE,OAAQ,MAAgC,SAAS,SAAS,OAAO;IACnE,QAAQ;KACN,OAAQ,OAAiC,SAAS,SAAS,OAAO;IACpE;GACF;GACA,QAAQ;IACN,OAAO,OAAO,MAAM;GACtB;GACA,UAAU;IACR,OAAO,OAAO,QAAQ;GACxB;EAG4B;EAE9B,IAAI,OAAO,QAAQ,aAAa;GAC9B,QAAQ,MAAM,uDAAuD;GACrE;EACF;EAEA,oBAAoB,kBAAkB;EACtC,QAAQ,MAAM,kDAAkD;CAClE,SAAS,KAAK;EACZ,QAAQ,MAAM,wBAAwB,GAAG;CAC3C;AACF;;;ACxEA,MAAa,0BAA0B;AAIvC,MAAa,4CAA4B,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC;AAElE,SAAgB,kBAAkB,UAA0B;CAC1D,IAAI,SAAS,WAAW,GAAG,KAAK,SAAS,SAAS,GAAG,GACnD,OAAO,SAAS,MAAM,GAAG,EAAE;CAE7B,OAAO;AACT;AAEA,SAAgB,sBAAsB,UAA0B;CAC9D,MAAM,aAAa,kBAAkB,SAAS,KAAK,CAAC;CACpD,IAAI,CAAC,cAAc,wBAAwB,KAAK,UAAU,GACxD,MAAM,IAAI,MAAM,wBAAwB,KAAK,UAAU,QAAQ,GAAG;CAEpE,OAAO;AACT;AAEA,SAAgB,mBAAmB,UAA2B;CAC5D,OAAO,0BAA0B,IAAI,kBAAkB,SAAS,KAAK,CAAC,CAAC;AACzE;;;ACvBA,MAAa,sBAAsB;AAwBnC,SAAS,eAAe,UAA2B;CACjD,OAAO,KAAK,QAAQ,MAAM,KAAK,SAAS,MAAM,KAAK,CAAC,CAAC,CAAC,OAAO;AAC/D;AAEA,SAAS,qBAAqB,UAA2B;CACvD,IAAI;EAKF,MAAM,aAJoB,IAAI,IAAI,WAAW,SAAS,GAAG,CAAC,CAAC,SAAS,MAClE,GACA,EAEiC,CAAC,CAAC,MACnC,sCACF;EACA,IAAI,CAAC,YACH,OAAO;EAGT,QAAQ,OAAO,SAAS,WAAW,IAAI,EAAE,IAAI,WAAY;CAC3D,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAgB,wBAAwB,UAA0B;CAChE,OAAO,sBAAsB,QAAQ;AACvC;AAEA,SAAgB,mBAAmB,UAA2B;CAC5D,MAAM,aAAa,wBAAwB,QAAQ,CAAC,CAAC,YAAY;CACjE,IAAI,eAAe,eAAe,eAAe,cAC/C,OAAO;CAET,IAAI,eAAe,UAAU,GAC3B,OAAO;CAET,IAAI,KAAK,UAAU,MAAM,GACvB,OAAO;CAGT,IAAI,eAAe,SAAS,eAAe,mBACzC,OAAO;CAGT,OAAO,qBAAqB,UAAU;AACxC;AAEA,SAAgB,qBACd,UACA,YACe;CACf,MAAM,qBAAqB,wBAAwB,QAAQ;CAC3D,MAAM,iBAAiB,CAAC,mBAAmB,kBAAkB;CAE7D,IAAI,kBAAkB,CAAC,YACrB,MAAM,IAAI,MACR,2CAA2C,KAAK,UAAU,kBAAkB,EAAE,qHAAqH,oBAAoB,IACzN;CAGF,OAAO;EACL,UAAU;EACV,gBAAgB,sBAAsB,kBAAkB;EACxD;CACF;AACF;AAEA,SAAgB,sBAAsB,UAA0B;CAC9D,MAAM,qBAAqB,wBAAwB,QAAQ;CAG3D,OAAO,mBAAmB,kBAAkB,IAAI,sBAC5C,mBAAmB,YAAY;AAErC;AAWA,SAAgB,gBAAgB,UAAkB,MAAsB;CAGtE,OAAO,UADL,KAAK,QAAQ,MAAM,IAAI,IAAI,SAAS,QAAQ,KAAK,KAAK,EAAE,KAAK,SAClC,GAAG;AAClC;;;AC9GA,SAAS,WAAsB;CAC7B,MAAM,EAAE,UAAU,MAAM,QAAQC;CAEhC,IAAI,aAAa,SAAS;EACxB,IAAI;GACF,MAAM,UAAU,oDAAoD,KAAK;GAGzE,IAFsB,SAAS,SAAS,EAAE,OAAO,OAAO,CAAC,CAAC,CAAC,SAE3C,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS,gBAAgB,GACvD,OAAO;EAEX,QAAQ;GACN,OAAO;EACT;EAEA,OAAO;CACT,OAAO;EACL,MAAM,YAAY,IAAI;EACtB,IAAI,WAAW;GACb,IAAI,UAAU,SAAS,KAAK,GAAG,OAAO;GACtC,IAAI,UAAU,SAAS,MAAM,GAAG,OAAO;GACvC,IAAI,UAAU,SAAS,MAAM,GAAG,OAAO;EACzC;EAEA,OAAO;CACT;AACF;;;;;;;;AASA,SAAgB,kBACd,SACA,eAAuB,IACf;CACR,MAAM,QAAQ,SAAS;CACvB,MAAM,kBAAkB,OAAO,QAAQ,OAAO,CAAC,CAAC,QAC7C,GAAG,WAAW,UAAU,KAAA,CAC3B;CAEA,IAAI;CAEJ,QAAQ,OAAR;EACE,KAAK;GACH,eAAe,gBACZ,KAAK,CAAC,KAAK,WAAW,QAAQ,IAAI,KAAK,OAAO,CAAC,CAC/C,KAAK,IAAI;GACZ;EAEF,KAAK;GACH,eAAe,gBACZ,KAAK,CAAC,KAAK,WAAW,OAAO,IAAI,GAAG,OAAO,CAAC,CAC5C,KAAK,KAAK;GACb;EAEF,KAAK;GACH,eAAe,gBACZ,KAAK,CAAC,KAAK,WAAW,WAAW,IAAI,GAAG,OAAO,CAAC,CAChD,KAAK,IAAI;GACZ;EAEF,SAAS;GAEP,MAAM,cAAc,gBACjB,KAAK,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,CACxC,KAAK,GAAG;GACX,eAAe,gBAAgB,SAAS,IAAI,UAAU,gBAAgB;GACtE;EACF;CACF;CAEA,IAAI,gBAAgB,cAElB,OAAO,GAAG,eADQ,UAAU,QAAQ,QAAQ,SACP;CAGvC,OAAO,gBAAgB;AACzB;;;ACtCA,eAAe,mBACb,UAC8D;CAC9D,IAAI,UAAU,OAAO;EAAE,OAAO;EAAU,QAAQ;CAAM;CAEtD,MAAM,WAAW,uBAAuB;CACxC,IAAI,UAAU,OAAO;EAAE,OAAO;EAAU,QAAQ;CAAM;CAEtD,MAAM,YAAY,MAAM,gBAAgB;CACxC,IAAI,WAAW,OAAO;EAAE,OAAO;EAAW,QAAQ;CAAO;CAEzD,OAAO;AACT;AAEA,eAAe,iBACb,aACA,QACA,WACA,YACe;CACf,MAAM,oBAAoB;CAC1B,QAAQ,KACN,WAAW,QAAQ,gCACjB,WAAW,QACX,+BAA+B,iBAAiB,yBAChD,oCACJ;CAEA,MAAM,oBAAoB,WAAW;CAErC,IAAI,YACF,cAAc,SAAS;AAE3B;AAEA,SAAS,cAAc,WAAyB;CAC9C,QAAQ,IACN,2NAEF;CAEA,UAAU,MAAM,QAAQ,gCAAgC;CAIxD,MAAM,YAAY,wBAAwB,MAAM,CAAC,EAAE;CACnD,MAAM,cAAc,wBAAwB,QAAQ,CAAC,EAAE;CACvD,MAAM,aAAa,wBAAwB,OAAO,CAAC,EAAE;CAErD,QAAQ,KACN;YACiB,aAAa,mBAAmB,cAChC,eAAe,mBAAmB,cAClC,cAAc,oBACjC;CAEA,MAAM,UAAU,kBACd;EACE,oBAAoB;EACpB,sBAAsB;EACtB,iBAAiB,eAAe;EAChC,8BAA8B;EAC9B,gCAAgC;EAChC,+BAA+B;EAC/B,wBAAwB;EACxB,yBAAyB;EACzB,mCAAmC;EACnC,0CAA0C;EAC1C,gCAAgC;EAChC,sCAAsC;EACtC,oCAAoC;EACpC,iCAAiC;EACjC,mCAAmC;EACnC,wBAAwB;CAC1B,GACA,QACF;CAEA,IAAI;EACF,UAAU,UAAU,OAAO;EAC3B,QAAQ,QAAQ,0CAA0C;CAC5D,QAAQ;EACN,QAAQ,KACN,+DACF;EACA,QAAQ,IAAI,OAAO;CACrB;AACF;AAEA,eAAe,kBACb,WACA,YACe;CACf,MAAM,mBAAmB,qBAAqB;CAE9C,IAAI,iBAAiB,SAAS,GAAG;EAC/B,QAAQ,KAAK,4BAA4B,iBAAiB,KAAK,IAAI,GAAG;EACtE;CACF;CAEA,IAAI,CAAC,uBAAuB,GAC1B,MAAM,IAAI,MACR,6IACF;CAGF,QAAQ,KAAK,+CAA+C;CAC5D,MAAM,iBAAiB;CAEvB,IAAI,MAAM,eAAe,uBAAuB,GAAG;EAEjD,MAAM,iBAAiB,MAAM,aAAa,QAAQ,WAAW,UAAU;EACvE;CACF;CAEA,MAAM,sBAAsB,qBAAqB;CACjD,IAAI,oBAAoB,WAAW,GACjC,MAAM,IAAI,MACR,+EACF;CAEF,QAAQ,KAAK,yBAAyB,oBAAoB,KAAK,IAAI,GAAG;AACxE;AAEA,eAAsB,UAAU,SAA0C;CAExE,CAAA,MADwB,OAAO,qBAAA,CACrB,qBAAqB;CAE/B,QAAQ,QAAQ,WAAW;CAE3B,wBAAwB;CAExB,MAAM,oBAAoB,qBAAqB;CAC/C,MAAM,UAAU,qBACd,QAAQ,MACR,kBAAkB,SAAS,CAC7B;CAEA,MAAM,wBAAwB,yBAAyB;CACvD,IAAI,uBACF,QAAQ,KAAK,qBAAqB;CAGpC,MAAM,oBAAoB;CAE1B,IAAI,QAAQ,UACV,iBAAiB;CAGnB,MAAM,UAAU,QAAQ;CACxB,IAAI,QAAQ,SAAS;EACnB,QAAQ,QAAQ;EAChB,QAAQ,KAAK,yBAAyB;CACxC;CAEA,MAAM,YAAY,QAAQ;CAE1B,MAAM,YAAY;CAClB,MAAM,oBAAoB;CAE1B,MAAM,YAAY,gBAAgB,QAAQ,gBAAgB,QAAQ,IAAI;CAEtE,MAAM,sBACJ,uBAAuB,IACrB,MAAM,mBAAmB,QAAQ,WAAW,IAC5C;CACJ,IAAI,uBAAuB,uBAAuB,GAChD,MAAM,iBACJ,oBAAoB,OACpB,oBAAoB,QACpB,WACA,QAAQ,UACV;MAEA,MAAM,kBAAkB,WAAW,QAAQ,UAAU;CAGvD,QAAQ,IACN,wBAAwB,UAAU,yBAAyB,UAAU,OACvE;CAEA,MAAM,EAAE,iBAAiB,MAAM,OAAO;CACtC,MAAM,SAAS,aAAa,EAAE,gBAAgB,QAAQ,eAAe,CAAC;CAEtE,MAAM;EACJ,OAAO,OAAO;EACd,UAAU,QAAQ;EAClB,MAAM,QAAQ;EACd,KAAK,EACH,aAAa,EACf;CACF,CAAC;AACH;AAEA,MAAa,QAAQ,cAAc;CACjC,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,MAAM;EACJ,MAAM;GACJ,MAAM;GACN,SAAS,QAAQ,IAAI,MAAM,KAAK,KAAA;GAChC,aAAa;EACf;EACA,MAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,aAAa;EACf;EACA,SAAS;GACP,OAAO;GACP,MAAM;GACN,SAAS;GACT,aAAa;EACf;EACA,gBAAgB;GACd,OAAO;GACP,MAAM;GACN,aACE;EACJ;EACA,eAAe;GACb,OAAO;GACP,MAAM;GACN,SAAS;GACT,aACE;EACJ;EACA,cAAc;GACZ,MAAM;GACN,SAAS;GACT,aAAa;EACf;EACA,aAAa;GACX,MAAM;GACN,SAAS;GACT,aAAa;EACf;CACF;CACA,IAAI,EAAE,QAAQ;EACZ,OAAO,UAAU;GACf,MAAM,KAAK;GACX,MAAM,OAAO,SAAS,KAAK,MAAM,EAAE;GACnC,SAAS,KAAK;GACd,aAAa,KAAK;GAClB,YAAY,KAAK;GACjB,WAAW,KAAK;GAChB,UAAU,KAAK;EACjB,CAAC;CACH;AACF,CAAC"}

package/dist/{token-0pmwyQAu.js → token-Cx07G8-R.js}

@@ -987,8 +987,16 @@ const REDIRECT_URI = `http://localhost:${CALLBACK_PORT}${CALLBACK_PATH}`;
 const SCOPE = "openid profile email offline_access";
 const JWT_CLAIM_PATH = "https://api.openai.com/auth";
 const REFRESH_BUFFER_MS = 6e4;
-const CALLBACK_TIMEOUT_MS = 45e3;
+const CALLBACK_TIMEOUT_MS = 12e4;
 const REFRESH_TIMEOUT_MS = 3e4;
+var CodexOAuthError = class extends Error {
+	reason;
+	constructor(reason) {
+		super(reason === "callback_timeout" ? "Codex authorization timed out after 2 minutes" : "Could not listen for Codex authorization on port 1455");
+		this.reason = reason;
+		this.name = "CodexOAuthError";
+	}
+};
 function base64UrlEncode(bytes) {
 	return Buffer.from(bytes).toString("base64url");
 }
@@ -1108,7 +1116,7 @@ function renderOAuthErrorPage(message) {
 		message
 	});
 }
-async function exchangeAuthorizationCode(code, verifier) {
+async function exchangeAuthorizationCode(code, verifier, signal) {
 	const response = await fetch(TOKEN_URL, {
 		method: "POST",
 		headers: { "Content-Type": "application/x-www-form-urlencoded" },
@@ -1118,7 +1126,8 @@ async function exchangeAuthorizationCode(code, verifier) {
 			code,
 			code_verifier: verifier,
 			redirect_uri: REDIRECT_URI
-		})
+		}),
+		signal
 	});
 	if (!response.ok) {
 		const details = await response.text().catch(() => "");
@@ -1183,7 +1192,8 @@ async function createAuthorizationFlow() {
 		url: url.toString()
 	};
 }
-async function waitForAuthorizationCode(state) {
+async function waitForAuthorizationCode(state, signal) {
+	signal?.throwIfAborted();
 	let resolveCode;
 	const waitForCode = new Promise((resolve) => {
 		resolveCode = resolve;
@@ -1229,14 +1239,21 @@ async function waitForAuthorizationCode(state) {
 			});
 		});
 	} catch {
-		return null;
+		throw new CodexOAuthError("callback_unavailable");
 	}
+	let timeout;
+	const onAbort = () => resolveCode?.(null);
+	signal?.addEventListener("abort", onAbort, { once: true });
 	try {
-		const timeout = new Promise((resolve) => {
-			setTimeout(() => resolve(null), CALLBACK_TIMEOUT_MS);
-		});
-		return await Promise.race([waitForCode, timeout]);
+		signal?.throwIfAborted();
+		timeout = setTimeout(() => resolveCode?.(null), CALLBACK_TIMEOUT_MS);
+		const code = await waitForCode;
+		signal?.throwIfAborted();
+		if (!code) throw new CodexOAuthError("callback_timeout");
+		return code;
 	} finally {
+		clearTimeout(timeout);
+		signal?.removeEventListener("abort", onAbort);
 		await new Promise((resolve, reject) => {
 			server.close((error) => {
 				if (error) {
@@ -1245,24 +1262,39 @@ async function waitForAuthorizationCode(state) {
 				}
 				resolve();
 			});
+			server.closeAllConnections();
 		}).catch(() => void 0);
 	}
 }
 async function loginCodex(options) {
+	options.signal?.throwIfAborted();
 	const { verifier, state, url } = await createAuthorizationFlow();
+	options.signal?.throwIfAborted();
 	options.onAuth({
 		url,
 		instructions: "Please complete the login in the browser. If the browser does not automatically redirect, please paste the callback URL or code back to the terminal."
 	});
 	options.onProgress?.("Waiting for Codex OAuth callback");
-	let code = await waitForAuthorizationCode(state);
+	let code = null;
+	let callbackError;
+	try {
+		code = await waitForAuthorizationCode(state, options.signal);
+	} catch (error) {
+		options.signal?.throwIfAborted();
+		if (!(error instanceof CodexOAuthError)) throw error;
+		callbackError = error;
+	}
+	options.signal?.throwIfAborted();
 	if (!code) {
-		const parsed = parseAuthorizationInput(await options.onPrompt("Paste the authorization code or full redirect URL:"));
+		const input = await options.onPrompt("Paste the authorization code or full redirect URL:");
+		options.signal?.throwIfAborted();
+		const parsed = parseAuthorizationInput(input);
 		if (parsed.state && parsed.state !== state) throw new Error("Codex OAuth state mismatch");
 		code = parsed.code ?? null;
 	}
-	if (!code) throw new Error("Missing Codex authorization code");
-	const tokenResult = await exchangeAuthorizationCode(code, verifier);
+	if (!code) throw callbackError ?? /* @__PURE__ */ new Error("Missing Codex authorization code");
+	const tokenResult = await exchangeAuthorizationCode(code, verifier, options.signal);
+	options.signal?.throwIfAborted();
 	const accountId = getAccountId(tokenResult.accessToken);
 	if (!accountId) throw new Error("Failed to extract Codex account id from access token");
 	return {
@@ -2440,4 +2472,4 @@ async function logUser(dependencies = defaultCopilotTokenDependencies) {
 //#endregion
 export { state as $, compactAutoContinuePromptStarts as A, CODEX_API_BASE_URL as B, copilotHeaders as C, prepareInteractionHeaders as D, prepareForCompact as E, createAuthMiddleware as F, resolveTraceId as G, forwardCodexResponses as H, getConfiguredAdminApiKeys as I, createResponsesSafeStream as J, fetchUpstreamWithLifecycle as K, getConfiguredApiKeys as L, compactSummaryPromptStart as M, compactSystemPromptStarts as N, prepareMessageProxyHeaders as O, compactTextOnlyGuard as P, createWebSocketUrl as Q, getMissingApiKeysMessage as R, copilotBaseUrl as S, copilotWebSocketHeaders as T, generateTraceId as U, buildCodexRequestHeaders as V, requestContext as W, getResponsesStreamTerminalDisposition as X, encodePoolKeyPart as Y, createPooledWebSocketStream as Z, parseUserIdMetadata as _, removeCodexAccount as a, readGitHubToken as b, setupCopilotToken as c, generateRequestIdFromPayload as d, FULL_MODEL_CATALOG_HEADER as et, getRootSessionId as f, isResponsesStream as g, isNullish as h, persistCodexCredentials as i, compactMessageSections as j, initOpencodeVersion as k, setupGitHubToken as l, isAsyncIterable as m, invalidateCodexRuntime as n, selectCodexAccount as o, getUUID as p, createResponsesHttpEventStream as q, logUser as r, setupCodexToken as s, getCodexAccounts as t, stripInternalRequestHeaders as tt, stopCopilotRefreshLoop as u, getCopilotUsage as v, copilotModelsHeaders as w, readGitHubTokenFromEnv as x, GITHUB_TOKEN_ENV as y, loginCodex as z };
 
-//# sourceMappingURL=token-0pmwyQAu.js.map
+//# sourceMappingURL=token-Cx07G8-R.js.map