@jeffreycao/copilot-api 2.7.1 → 2.7.3

package/README.md

@@ -22,15 +22,15 @@
   English | <a href="README.zh-CN.md">简体中文</a>
 </p>
 
-Copilot API is a local AI gateway that connects Claude Code, OpenCode, Codex, and other clients to GitHub Copilot, the built-in Codex provider, and third-party model providers through a unified API.
+Copilot API is a local AI gateway that connects Claude Code, OpenCode, Codex, and other clients to GitHub Copilot, the built-in Codex and xAI providers, and third-party model providers through a unified API.
 
 ## Highlights
 
 - **Unified API Gateway**: Serve OpenAI-compatible Chat Completions (`/v1/chat/completions`), the OpenAI Responses API (`/v1/responses`), and Anthropic-compatible Messages (`/v1/messages`) from one local endpoint.
-- **Multi-Provider**: Route GitHub Copilot, the built-in `codex` provider, and third-party providers (Kimi, DeepSeek, DashScope, OpenRouter, OpenCode Go, or a custom provider) behind the same gateway. GitHub Copilot is optional — with at least one enabled provider, the server starts in provider-only mode without a GitHub token.
-- **Coding Agent Ready**: First-class setups for Claude Code, OpenCode, and Codex, including the interactive `--claude-code` launcher and a merged model catalog for Codex.
+- **Multi-Provider**: Route GitHub Copilot, the built-in `codex` and `xai` providers, and third-party providers (Kimi, DeepSeek, DashScope, OpenRouter, OpenCode Go, or a custom provider from models.dev) behind the same gateway. GitHub Copilot is optional — with at least one enabled provider, the server starts in provider-only mode without a GitHub token.
+- **Coding Agent Ready**: First-class setups for Claude Code, OpenCode, and Codex, including settings.json gateway model discovery and a merged model catalog for Codex.
 - **Streaming & WebSocket**: SSE streaming on all three client-facing protocols. Upstream Copilot Responses traffic selects WebSocket or HTTP from each model's advertised endpoints; streamed Responses traffic for the built-in `codex` provider uses WebSocket by default and uses HTTP when `useResponsesApiWebSocket` is disabled.
-- **Desktop App**: Electron GUI with GitHub Copilot sign-in, Codex OAuth, provider configuration, token usage, logs, and one-click start/stop.
+- **Desktop App**: Electron GUI with GitHub Copilot sign-in, Codex and xAI OAuth, provider configuration, token usage, logs, and one-click start/stop.
 
 ## Quick Start
 
@@ -59,7 +59,7 @@ From here, jump to the guide for your client: [Claude Code](docs/guides/en/claud
 
 ## Compatibility
 
-Every client talks to the same local endpoint. The gateway routes each request to GitHub Copilot, the built-in `codex` provider, or a configured third-party provider, translating between protocols when the provider speaks a different one.
+Every client talks to the same local endpoint. The gateway routes each request to GitHub Copilot, the built-in `codex` or `xai` provider, or a configured third-party provider, translating between protocols when the provider speaks a different one.
 
 **Client / Protocol Matrix**
 
@@ -75,7 +75,7 @@ Every client talks to the same local endpoint. The gateway routes each request t
 
 ## Desktop App
 
-Prefer a GUI? The Electron desktop app in `desktop/` covers GitHub Copilot sign-in, OpenAI Codex OAuth, and API-key configuration for Kimi, DeepSeek, DashScope, OpenRouter, or a custom provider — with one-click start/stop of the local server, and the local endpoint, auth header, available models, usage, and logs in one window.
+Prefer a GUI? The Electron desktop app in `desktop/` covers GitHub Copilot sign-in, OpenAI Codex and xAI OAuth, and API-key configuration for Kimi, DeepSeek, DashScope, OpenRouter, or a custom provider from models.dev — with one-click start/stop of the local server, and the local endpoint, auth header, available models, usage, and logs in one window.
 
 <p align="center">
   <img src="docs/screenshots/desktop-dashboard.png" alt="Copilot API desktop app dashboard" width="49%" />
@@ -89,7 +89,7 @@ Windows x64 (`.exe`), macOS Apple Silicon (`.dmg`), and Linux x64 (`.AppImage`)
 | Guide | Contents |
 | --- | --- |
 | [Installation and Startup](docs/guides/en/getting-started.md) | Prerequisites, project overview, `npx` and source runs, provider-only mode without Copilot, and gateway API key setup |
-| [Claude Code](docs/guides/en/claude-code.md) | The `--claude-code` interactive launcher, `.claude/settings.json` environment variables, opus / sonnet / haiku tier mapping, auto-compact window, and WebSearch behavior |
+| [Claude Code](docs/guides/en/claude-code.md) | settings.json, gateway model discovery, model mappings, auto-compact window, and WebSearch behavior |
 | [OpenCode](docs/guides/en/opencode.md) | OpenCode OAuth login, the `@ai-sdk/anthropic` provider in `opencode.json`, `baseURL` conventions, model context limits, and thinking options |
 | [Codex](docs/guides/en/codex.md) | A full `config.toml` provider block, `GITHUB_COPILOT_API_KEY` environment variable setup, auto-review model mapping, generating `model_catalog.json`, and the merged model picker catalog with protocol adapters |
 | [Docker](docs/guides/en/docker.md) | Docker Compose quick start, the `/data` persistent mount and its ownership repair, supported environment variables, and host interface binding |

package/README.zh-CN.md

@@ -22,17 +22,17 @@
   <a href="README.md">English</a> | 简体中文
 </p>
 
-Copilot API 是一个本地 AI 网关，让 Claude Code、OpenCode、Codex 等客户端通过统一的 API 使用 GitHub Copilot、内置 Codex 和第三方模型服务。
+Copilot API 是一个本地 AI 网关，让 Claude Code、OpenCode、Codex 等客户端通过统一的 API 使用 GitHub Copilot、内置 Codex、xAI 和第三方模型服务。
 
 <a id="highlights"></a>
 
 ## 功能亮点
 
 - **统一 API 网关**：在同一个本地端点上提供 OpenAI 兼容的 Chat Completions（`/v1/chat/completions`）、OpenAI Responses API（`/v1/responses`）和 Anthropic 兼容的 Messages（`/v1/messages`）。
-- **多 Provider 接入**：在同一个网关后面统一路由 GitHub Copilot、内置 `codex` provider 和第三方 provider（Kimi、DeepSeek、DashScope、OpenRouter、OpenCode Go 或自定义 provider）。GitHub Copilot 是可选能力——只要至少有一个启用中的 provider，无需 GitHub token 也能按 provider-only 模式启动。
-- **为 Coding Agent 而生**：为 Claude Code、OpenCode 和 Codex 提供完整的配置指南，包括交互式 `--claude-code` 启动器和面向 Codex 的合并模型目录。
+- **多 Provider 接入**：在同一个网关后面统一路由 GitHub Copilot、内置 `codex`、`xai` provider 和第三方 provider（Kimi、DeepSeek、DashScope、OpenRouter、OpenCode Go 或从 models.dev 选择的自定义 provider）。GitHub Copilot 是可选能力——只要至少有一个启用中的 provider，无需 GitHub token 也能按 provider-only 模式启动。
+- **为 Coding Agent 而生**：为 Claude Code、OpenCode 和 Codex 提供完整的配置指南，包括 settings.json 网关模型发现和面向 Codex 的合并模型目录。
 - **Streaming 与 WebSocket**：三种面向客户端的协议都支持 SSE 流式输出。上游 Copilot Responses 流量会根据每个模型声明的端点选择 WebSocket 或 HTTP；内置 `codex` provider 的流式 Responses 请求默认走 WebSocket，关闭 `useResponsesApiWebSocket` 后改走 HTTP。
-- **桌面应用**：Electron 图形界面，支持 GitHub Copilot 登录、Codex OAuth、provider 配置、token 用量、日志查看和一键启动 / 停止。
+- **桌面应用**：Electron 图形界面，支持 GitHub Copilot 登录、Codex 与 xAI OAuth、provider 配置、token 用量、日志查看和一键启动 / 停止。
 
 <a id="quick-start"></a>
 
@@ -65,7 +65,7 @@ curl http://localhost:4141/v1/models
 
 ## 兼容性
 
-所有客户端都访问同一个本地端点。网关会把每个请求路由到 GitHub Copilot、内置 `codex` provider 或已配置的第三方 provider，并在 provider 使用不同协议时进行协议翻译。
+所有客户端都访问同一个本地端点。网关会把每个请求路由到 GitHub Copilot、内置 `codex`、`xai` provider 或已配置的第三方 provider，并在 provider 使用不同协议时进行协议翻译。
 
 **客户端 / 协议矩阵**
 
@@ -83,7 +83,7 @@ curl http://localhost:4141/v1/models
 
 ## 桌面应用
 
-更喜欢图形界面？`desktop/` 目录下的 Electron 桌面应用支持 GitHub Copilot 登录、OpenAI Codex OAuth，以及 Kimi、DeepSeek、DashScope、OpenRouter 或自定义 provider 的 API Key 配置——可以一键启动 / 停止本地服务，并在一个窗口里查看本地端点、鉴权 Header、可用模型、用量和日志。
+更喜欢图形界面？`desktop/` 目录下的 Electron 桌面应用支持 GitHub Copilot 登录、OpenAI Codex 与 xAI OAuth，以及 Kimi、DeepSeek、DashScope、OpenRouter 或从 models.dev 选择的自定义 provider 的 API Key 配置——可以一键启动 / 停止本地服务，并在一个窗口里查看本地端点、鉴权 Header、可用模型、用量和日志。
 
 <p align="center">
   <img src="docs/screenshots/desktop-dashboard.png" alt="Copilot API 桌面应用首页" width="49%" />
@@ -97,7 +97,7 @@ Windows x64（`.exe`）、macOS Apple Silicon（`.dmg`）和 Linux x64（`.AppIm
 | 文档 | 内容 |
 | --- | --- |
 | [安装与启动](docs/guides/zh-CN/getting-started.md) | 环境要求、项目概览、npx 与源码运行、无 Copilot 时的 provider-only 模式，以及网关 API Key 配置 |
-| [Claude Code](docs/guides/zh-CN/claude-code.md) | `--claude-code` 交互式启动器、`.claude/settings.json` 环境变量、opus / sonnet / haiku 档位映射、自动压缩窗口与 WebSearch 行为 |
+| [Claude Code](docs/guides/zh-CN/claude-code.md) | settings.json、网关模型发现、模型映射、自动压缩窗口与 WebSearch 行为 |
 | [OpenCode](docs/guides/zh-CN/opencode.md) | OpenCode OAuth 登录、`opencode.json` 中的 `@ai-sdk/anthropic` provider、`baseURL` 约定、模型上下文上限与思考选项 |
 | [Codex](docs/guides/zh-CN/codex.md) | 完整的 `config.toml` provider 配置块、`GITHUB_COPILOT_API_KEY` 环境变量设置、自动审核模型映射、生成 `model_catalog.json`，以及合并后的模型选择器目录与协议适配 |
 | [Docker](docs/guides/zh-CN/docker.md) | Docker Compose 快速启动、`/data` 持久化挂载与属主修复、支持的环境变量，以及监听所有网卡地址 |

package/dist/{auth-2VWfdcpq.js → auth-Db9N85kJ.js}

@@ -1,6 +1,6 @@
-import { S as ensurePaths, t as SUPPORTED_PROVIDER_TYPES, x as PATHS, y as setConfiguredApiKeys } from "./config-store-CARrUljo.js";
-import { a as normalizeProviderBaseUrl, c as setProviderConfig, f as loadModelsDevProviderOptions, n as getRawProviderConfig, r as isSupportedProviderType } from "./config-B2OaAnpL.js";
-import { $ as state, L as getConfiguredApiKeys, a as removeCodexAccount, i as persistCodexCredentials, l as setupGitHubToken, o as selectCodexAccount, t as getCodexAccounts, z as loginCodex } from "./token-Cx07G8-R.js";
+import { S as ensurePaths, t as SUPPORTED_PROVIDER_TYPES, x as PATHS, y as setConfiguredApiKeys } from "./config-store-Bgmf82i_.js";
+import { a as normalizeProviderBaseUrl, c as setProviderConfig, n as getRawProviderConfig, p as loadModelsDevProviderOptions, r as isSupportedProviderType } from "./config-D1F-TyTn.js";
+import { B as selectXaiAccount, G as loginCodex, L as getXaiAccounts, P as getConfiguredApiKeys, R as persistXaiCredentials, W as loginXai, a as removeCodexAccount, at as state, i as persistCodexCredentials, l as setupGitHubToken, o as selectCodexAccount, t as getCodexAccounts, z as removeXaiAccount } from "./token-D53u0RgN.js";
 import { defineCommand } from "citty";
 import consola from "consola";
 //#region src/lib/quick-providers.ts
@@ -87,11 +87,11 @@ async function prompt(message, options) {
 const authArgs = {
 	provider: {
 		type: "string",
-		description: "Provider to log in with or configure (copilot, codex, opencode-go, kimi, deepseek, dashscope, openrouter, custom)"
+		description: "Provider to log in with or configure (copilot, codex, xai, opencode-go, kimi, deepseek, dashscope, openrouter, custom)"
 	},
 	alias: {
 		type: "string",
-		description: "Optional alias for a Codex account"
+		description: "Optional alias for a Codex or xAI account"
 	},
 	verbose: {
 		alias: "v",
@@ -105,7 +105,11 @@ const authArgs = {
 		description: "Show provider access token on auth"
 	}
 };
-const BUILTIN_PROVIDER_NAMES = ["copilot", "codex"];
+const BUILTIN_PROVIDER_NAMES = [
+	"copilot",
+	"codex",
+	"xai"
+];
 const QUICK_PROVIDER_NAMES = Object.keys(QUICK_PROVIDER_CONFIGS);
 const AUTH_PROVIDER_NAMES = [
 	...BUILTIN_PROVIDER_NAMES,
@@ -118,6 +122,7 @@ const CUSTOM_PROVIDER_AUTH_TYPES = ["x-api-key", "authorization"];
 const AUTH_PROVIDER_LABELS = {
 	copilot: "GitHub Copilot",
 	codex: "OpenAI Codex",
+	xai: "xAI (SuperGrok Subscription)",
 	"opencode-go": "OpenCode Go",
 	kimi: "Kimi",
 	deepseek: "DeepSeek",
@@ -328,7 +333,7 @@ function buildCustomProviderConfig(existingProviderConfig, options) {
 		apiKey: options.apiKey,
 		...options.authType ? { authType: options.authType } : {},
 		pricingCurrency: options.pricingCurrency ?? existingProviderConfig.pricingCurrency,
-		...existingProviderConfig.codexModels !== void 0 ? { codexModels: existingProviderConfig.codexModels } : {},
+		...existingProviderConfig.agentsModels !== void 0 ? { agentsModels: existingProviderConfig.agentsModels } : {},
 		...existingProviderConfig.models ? { models: existingProviderConfig.models } : {}
 	};
 }
@@ -386,7 +391,7 @@ async function loginWithCodex(alias) {
 	consola.success(`Codex provider config written to ${PATHS.CONFIG_PATH} and credentials written to ${PATHS.CODEX_CREDENTIAL_PATH}`);
 }
 async function loginWithProvider(provider, alias) {
-	if (alias !== void 0 && provider !== "codex") throw new Error("--alias is only supported with the codex provider");
+	if (alias !== void 0 && provider !== "codex" && provider !== "xai") throw new Error("--alias is only supported with the codex or xai provider");
 	if (provider === "copilot") {
 		await setupGitHubToken({ force: true });
 		consola.success("GitHub token written to", PATHS.GITHUB_TOKEN_PATH);
@@ -396,6 +401,16 @@ async function loginWithProvider(provider, alias) {
 		await loginWithCodex(alias);
 		return;
 	}
+	if (provider === "xai") {
+		const credentials = await loginXai({ onAuth(info) {
+			consola.info("Open the following URL to authenticate with xAI:");
+			consola.log(info.url);
+			consola.info(`Open ${info.verificationUri} on any device and enter code: ${info.userCode}`);
+		} });
+		await persistXaiCredentials(credentials, { alias });
+		consola.success(`xAI provider config written to ${PATHS.CONFIG_PATH} and credentials written to ${PATHS.XAI_CREDENTIAL_PATH}`);
+		return;
+	}
 	if (isQuickProviderName(provider)) {
 		await configureQuickProvider(provider);
 		return;
@@ -419,31 +434,44 @@ async function runAuthLogin(options) {
 	consola.info(`Logging in with ${AUTH_PROVIDER_LABELS[provider]}`);
 	await loginWithProvider(provider, options.alias);
 }
-const authCodexArgs = {
+const authAccountArgs = {
 	list: {
 		alias: "l",
 		type: "boolean",
 		default: false,
-		description: "List stored Codex accounts"
+		description: "List stored OAuth accounts"
 	},
 	remove: {
 		alias: "r",
 		type: "string",
-		description: "Remove a Codex account by alias or account id; the account in use cannot be removed"
+		description: "Remove an OAuth account by alias or account id; the account in use cannot be removed"
 	},
 	use: {
 		alias: "u",
 		type: "string",
-		description: "Select a Codex account by alias or account id"
+		description: "Select an OAuth account by alias or account id"
 	}
 };
-function formatCodexAccountName(account) {
+function formatOAuthAccountName(account) {
 	return account.alias ? `${account.alias} (${account.accountId})` : account.accountId;
 }
-function formatCodexAccount(account) {
-	return `${account.active ? "*" : "-"} ${formatCodexAccountName(account)}`;
+function formatOAuthAccount(account) {
+	return `${account.active ? "*" : "-"} ${formatOAuthAccountName(account)}`;
 }
 async function runAuthCodex(options) {
+	return await runAuthAccounts("codex", options);
+}
+async function runAuthAccounts(provider, options) {
+	const label = provider === "codex" ? "Codex" : "xAI";
+	const accountsApi = provider === "codex" ? {
+		list: getCodexAccounts,
+		select: selectCodexAccount,
+		remove: removeCodexAccount
+	} : {
+		list: getXaiAccounts,
+		select: selectXaiAccount,
+		remove: removeXaiAccount
+	};
 	await ensurePaths();
 	if ([
 		options.list === true,
@@ -451,23 +479,23 @@ async function runAuthCodex(options) {
 		options.remove !== void 0
 	].filter(Boolean).length > 1) throw new Error("Use only one of --list, --use, or --remove per invocation");
 	if (options.use !== void 0) {
-		const account = await selectCodexAccount(options.use);
-		consola.success(`Selected Codex account ${formatCodexAccountName(account)}`);
-		consola.info("Restart the server to use the selected Codex account.");
+		const account = await accountsApi.select(options.use);
+		consola.success(`Selected ${label} account ${formatOAuthAccountName(account)}`);
+		consola.info(`Restart the server to use the selected ${label} account.`);
 		return;
 	}
 	if (options.remove !== void 0) {
-		const account = await removeCodexAccount(options.remove);
-		consola.success(`Removed Codex account ${formatCodexAccountName(account)}`);
+		const account = await accountsApi.remove(options.remove);
+		consola.success(`Removed ${label} account ${formatOAuthAccountName(account)}`);
 		return;
 	}
-	const accounts = await getCodexAccounts();
+	const accounts = await accountsApi.list();
 	if (accounts.length === 0) {
-		consola.info("No Codex accounts configured. Run `copilot-api auth login --provider codex` to add one.");
+		consola.info(`No ${label} accounts configured. Run \`copilot-api auth login --provider ${provider}\` to add one.`);
 		return;
 	}
-	consola.info("Configured Codex accounts:");
-	for (const account of accounts) consola.info(formatCodexAccount(account));
+	consola.info(`Configured ${label} accounts:`);
+	for (const account of accounts) consola.info(formatOAuthAccount(account));
 }
 const authKeysArgs = {
 	add: {
@@ -578,7 +606,7 @@ const authCodex = defineCommand({
 		name: "codex",
 		description: "List, select, or remove stored Codex accounts"
 	},
-	args: authCodexArgs,
+	args: authAccountArgs,
 	run({ args }) {
 		return runAuthCodex({
 			list: args.list,
@@ -595,6 +623,20 @@ const auth = defineCommand({
 	args: authArgs,
 	subCommands: {
 		codex: authCodex,
+		xai: defineCommand({
+			meta: {
+				name: "xai",
+				description: "Manage stored xAI accounts"
+			},
+			args: authAccountArgs,
+			run({ args }) {
+				return runAuthAccounts("xai", {
+					list: args.list,
+					remove: args.remove,
+					use: args.use
+				});
+			}
+		}),
 		login: authLogin,
 		keys: authKeys
 	},
@@ -609,6 +651,6 @@ const auth = defineCommand({
 	}
 });
 //#endregion
-export { runProviderSetup as a, runAuthLogin as i, runAuthCodex as n, runAuthKeys as r, auth as t };
+export { runAuthLogin as a, runAuthKeys as i, runAuthAccounts as n, runProviderSetup as o, runAuthCodex as r, auth as t };
 
-//# sourceMappingURL=auth-2VWfdcpq.js.map
+//# sourceMappingURL=auth-Db9N85kJ.js.map

package/dist/auth-Db9N85kJ.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-Db9N85kJ.js","names":[],"sources":["../src/lib/quick-providers.ts","../src/lib/interactive-prompt.ts","../src/auth.ts"],"sourcesContent":["import type { ProviderType } from \"./config\"\n\ninterface QuickProviderConfig {\n  type: ProviderType\n  baseUrl: string\n  pricingCurrency: string\n  editableType: boolean\n}\n\nexport const QUICK_PROVIDER_CONFIGS = {\n  \"opencode-go\": {\n    type: \"openai-compatible\",\n    baseUrl: \"https://opencode.ai/zen/go\",\n    pricingCurrency: \"USD\",\n    editableType: false,\n  },\n  kimi: {\n    type: \"openai-compatible\",\n    baseUrl: \"https://api.kimi.com/coding\",\n    pricingCurrency: \"USD\",\n    editableType: true,\n  },\n  deepseek: {\n    type: \"anthropic\",\n    baseUrl: \"https://api.deepseek.com/anthropic\",\n    pricingCurrency: \"CNY\",\n    editableType: true,\n  },\n  dashscope: {\n    type: \"openai-compatible\",\n    baseUrl: \"https://dashscope.aliyuncs.com/compatible-mode\",\n    pricingCurrency: \"CNY\",\n    editableType: true,\n  },\n  openrouter: {\n    type: \"anthropic\",\n    baseUrl: \"https://openrouter.ai/api\",\n    pricingCurrency: \"USD\",\n    editableType: false,\n  },\n} satisfies Record<string, QuickProviderConfig>\n\nexport type QuickProviderName = keyof typeof QUICK_PROVIDER_CONFIGS\n","import consola from \"consola\"\n\ninterface PromptSelectOption {\n  label: string\n  value: string\n  hint?: string\n}\n\ninterface TextPromptOptions {\n  type?: \"text\"\n  default?: string\n  initial?: string\n  placeholder?: string\n}\n\ninterface SelectPromptOptions {\n  type: \"select\"\n  initial?: string\n  options: Array<string | PromptSelectOption>\n}\n\nexport type InteractivePromptOptions = SelectPromptOptions | TextPromptOptions\n\ninterface ClackSelectOptions {\n  message: string\n  initialValue?: string\n  options: Array<PromptSelectOption>\n}\n\ninterface ClackTextOptions {\n  message: string\n  defaultValue?: string\n  initialValue?: string\n  placeholder?: string\n}\n\nexport interface ClackPromptBackend {\n  isCancel(value: unknown): boolean\n  select(options: ClackSelectOptions): Promise<string | symbol>\n  text(options: ClackTextOptions): Promise<string | symbol>\n}\n\ninterface PromptRuntime {\n  bunVersion?: string\n  platform: NodeJS.Platform\n  stdinIsTTY?: boolean\n  stdoutIsTTY?: boolean\n  stdoutIsTTYStream?: boolean\n}\n\n// Consola 3.4.2 bundles a prompt implementation that writes keyboard input to\n// tty fd 0. Bun treats that as a real stdin write on Windows and throws EPIPE.\nexport function shouldUseClackPrompt(\n  runtime: PromptRuntime = {\n    bunVersion: process.versions.bun,\n    platform: process.platform,\n    stdinIsTTY: process.stdin.isTTY,\n    stdoutIsTTY: process.stdout.isTTY,\n    stdoutIsTTYStream: typeof process.stdout.getColorDepth === \"function\",\n  },\n): boolean {\n  return Boolean(\n    runtime.platform === \"win32\"\n      && runtime.bunVersion\n      && runtime.stdinIsTTY\n      && runtime.stdoutIsTTY\n      && runtime.stdoutIsTTYStream,\n  )\n}\n\nfunction getCancelValue(options: InteractivePromptOptions): string | undefined {\n  return options.type === \"select\" ?\n      options.initial\n    : (options.default ?? options.initial)\n}\n\nexport async function promptWithClack(\n  message: string,\n  options: InteractivePromptOptions,\n  backend: ClackPromptBackend,\n): Promise<string | undefined> {\n  if (options.type === \"select\") {\n    const value = await backend.select({\n      message,\n      options: options.options.map((option) =>\n        typeof option === \"string\" ? { label: option, value: option } : option,\n      ),\n      initialValue: options.initial,\n    })\n    if (backend.isCancel(value)) {\n      return getCancelValue(options)\n    }\n    return typeof value === \"string\" ? value : undefined\n  }\n\n  const value = await backend.text({\n    message,\n    defaultValue: options.default,\n    initialValue: options.initial,\n    placeholder: options.placeholder,\n  })\n  if (backend.isCancel(value)) {\n    return getCancelValue(options)\n  }\n  return typeof value === \"string\" ? value : undefined\n}\n\nexport async function prompt(\n  message: string,\n  options: InteractivePromptOptions,\n): Promise<string | undefined> {\n  if (!shouldUseClackPrompt()) {\n    if (options.type === \"select\") {\n      const value = await consola.prompt(message, options)\n      return typeof value === \"string\" ? value : undefined\n    }\n    return await consola.prompt(message, options)\n  }\n\n  const clack = await import(\"@clack/prompts\")\n  return await promptWithClack(message, options, clack)\n}\n","#!/usr/bin/env node\n\nimport { defineCommand } from \"citty\"\nimport consola from \"consola\"\n\nimport {\n  getRawProviderConfig,\n  isSupportedProviderType,\n  normalizeProviderBaseUrl,\n  setProviderConfig,\n  setConfiguredApiKeys,\n  SUPPORTED_PROVIDER_TYPES,\n  type ProviderAuthType,\n  type ProviderConfig,\n  type ProviderType,\n} from \"./lib/config\"\nimport { loginCodex } from \"./lib/oauth/codex\"\nimport { loginXai } from \"./lib/oauth/xai\"\nimport {\n  persistXaiCredentials,\n  getXaiAccounts,\n  selectXaiAccount,\n  removeXaiAccount,\n} from \"./lib/xai-token\"\nimport {\n  loadModelsDevProviderOptions,\n  type ModelsDevProviderOption,\n} from \"./lib/models-dev-cache\"\nimport { PATHS, ensurePaths } from \"./lib/paths\"\nimport { getConfiguredApiKeys } from \"./lib/request-auth\"\nimport {\n  QUICK_PROVIDER_CONFIGS,\n  type QuickProviderName,\n} from \"./lib/quick-providers\"\nimport { prompt } from \"./lib/interactive-prompt\"\nimport { state } from \"./lib/state\"\nimport {\n  getCodexAccounts,\n  persistCodexCredentials,\n  removeCodexAccount,\n  selectCodexAccount,\n  setupGitHubToken,\n  type CodexAccountSummary,\n} from \"./lib/token\"\n\ninterface RunAuthOptions {\n  alias?: string\n  provider?: string\n  verbose: boolean\n  showToken: boolean\n}\n\nconst authArgs = {\n  provider: {\n    type: \"string\",\n    description:\n      \"Provider to log in with or configure (copilot, codex, xai, opencode-go, kimi, deepseek, dashscope, openrouter, custom)\",\n  },\n  alias: {\n    type: \"string\",\n    description: \"Optional alias for a Codex or xAI account\",\n  },\n  verbose: {\n    alias: \"v\",\n    type: \"boolean\",\n    default: false,\n    description: \"Enable verbose logging\",\n  },\n  \"show-token\": {\n    type: \"boolean\",\n    default: false,\n    description: \"Show provider access token on auth\",\n  },\n} as const\n\nconst BUILTIN_PROVIDER_NAMES = [\"copilot\", \"codex\", \"xai\"] as const\nconst QUICK_PROVIDER_NAMES = Object.keys(\n  QUICK_PROVIDER_CONFIGS,\n) as Array<QuickProviderName>\nconst AUTH_PROVIDER_NAMES = [\n  ...BUILTIN_PROVIDER_NAMES,\n  ...QUICK_PROVIDER_NAMES,\n  \"custom\",\n] as const\nconst CUSTOM_PROVIDER_AUTH_TYPE_OPTION = \"__default__\"\nconst QUICK_PROVIDER_DEFAULT_TYPE_OPTION = \"__default__\"\nconst CUSTOM_PROVIDER_AUTH_TYPES = [\"x-api-key\", \"authorization\"] as const\n\ntype BuiltinProviderName = (typeof BUILTIN_PROVIDER_NAMES)[number]\ntype AuthProviderName = (typeof AUTH_PROVIDER_NAMES)[number]\ntype CustomProviderAuthType = (typeof CUSTOM_PROVIDER_AUTH_TYPES)[number]\n\nconst BUILTIN_PROVIDER_LABELS: Record<BuiltinProviderName, string> = {\n  copilot: \"GitHub Copilot\",\n  codex: \"OpenAI Codex\",\n  xai: \"xAI (SuperGrok Subscription)\",\n}\nconst AUTH_PROVIDER_LABELS: Record<AuthProviderName, string> = {\n  ...BUILTIN_PROVIDER_LABELS,\n  \"opencode-go\": \"OpenCode Go\",\n  kimi: \"Kimi\",\n  deepseek: \"DeepSeek\",\n  dashscope: \"DashScope\",\n  openrouter: \"OpenRouter\",\n  custom: \"Custom provider\",\n}\n\nfunction isAuthProviderName(\n  providerName: string,\n): providerName is AuthProviderName {\n  return AUTH_PROVIDER_NAMES.includes(providerName as AuthProviderName)\n}\n\nfunction isCustomProviderAuthType(\n  value: string,\n): value is CustomProviderAuthType {\n  return CUSTOM_PROVIDER_AUTH_TYPES.includes(value as CustomProviderAuthType)\n}\n\nfunction isQuickProviderName(\n  providerName: AuthProviderName,\n): providerName is QuickProviderName {\n  return QUICK_PROVIDER_NAMES.includes(providerName as QuickProviderName)\n}\n\nasync function resolveProviderSelection(\n  providerArg: string | undefined,\n): Promise<AuthProviderName> {\n  const availableProviders = [...AUTH_PROVIDER_NAMES]\n\n  if (providerArg !== undefined) {\n    const providerName = providerArg.trim()\n    if (!isAuthProviderName(providerName)) {\n      throw new Error(\n        `Unknown provider '${providerArg}'. Expected one of: ${availableProviders.join(\", \")}`,\n      )\n    }\n    return providerName\n  }\n\n  if (availableProviders.length === 1) {\n    return availableProviders[0]\n  }\n\n  const provider = await prompt(\"Select a provider to log in with\", {\n    type: \"select\",\n    options: availableProviders.map((providerName) => ({\n      label: `${AUTH_PROVIDER_LABELS[providerName]} (${providerName})`,\n      value: providerName,\n    })),\n  })\n\n  if (!provider || !isAuthProviderName(provider)) {\n    throw new Error(\"No provider selected\")\n  }\n\n  return provider\n}\n\nfunction assertCustomProviderName(providerName: string): void {\n  if (!providerName) {\n    throw new Error(\"Provider name must be a non-empty string\")\n  }\n\n  if (!/^[A-Za-z0-9][A-Za-z0-9_-]*$/u.test(providerName)) {\n    throw new Error(\n      \"Provider name must start with a letter or number and contain only letters, numbers, underscores, or hyphens\",\n    )\n  }\n\n  if (\n    providerName === \"copilot\"\n    || providerName === \"github-copilot\"\n    || providerName === \"codex\"\n  ) {\n    throw new Error(\n      `Provider name '${providerName}' is reserved for a builtin provider`,\n    )\n  }\n}\n\nasync function promptRequiredText(\n  message: string,\n  fieldName: string,\n): Promise<string> {\n  const value = await prompt(message, { type: \"text\" })\n  const normalizedValue = typeof value === \"string\" ? value.trim() : \"\"\n  if (!normalizedValue) {\n    throw new Error(`${fieldName} must be a non-empty string`)\n  }\n  return normalizedValue\n}\n\nfunction canUseMaskedPrompt(): boolean {\n  return Boolean(\n    process.stdin.isTTY\n      && process.stdout.isTTY\n      && typeof process.stdin.setRawMode === \"function\",\n  )\n}\n\nasync function promptMaskedText(message: string): Promise<string> {\n  if (!canUseMaskedPrompt()) {\n    const value = await prompt(message, { type: \"text\" })\n    return typeof value === \"string\" ? value : \"\"\n  }\n\n  return await new Promise<string>((resolve, reject) => {\n    let value = \"\"\n    const rawModeWasEnabled = process.stdin.isRaw === true\n\n    function cleanup(): void {\n      process.stdin.off(\"data\", onData)\n      process.stdin.setRawMode(rawModeWasEnabled)\n      process.stdin.pause()\n    }\n\n    function finish(): void {\n      cleanup()\n      process.stdout.write(\"\\n\")\n      resolve(value)\n    }\n\n    function cancel(): void {\n      cleanup()\n      process.stdout.write(\"\\n\")\n      reject(new Error(\"Prompt cancelled\"))\n    }\n\n    function onData(chunk: Buffer): void {\n      const input = chunk.toString(\"utf8\")\n\n      if (input.startsWith(\"\\u001B\")) {\n        return\n      }\n\n      for (const char of input) {\n        if (char === \"\\u0003\") {\n          cancel()\n          return\n        }\n\n        if (char === \"\\r\" || char === \"\\n\") {\n          finish()\n          return\n        }\n\n        if (char === \"\\b\" || char === \"\\u007F\") {\n          if (value.length > 0) {\n            value = value.slice(0, -1)\n            process.stdout.write(\"\\b \\b\")\n          }\n          continue\n        }\n\n        if (char >= \" \") {\n          value += char\n          process.stdout.write(\"*\")\n        }\n      }\n    }\n\n    process.stdout.write(`${message}: `)\n    process.stdin.setRawMode(true)\n    process.stdin.resume()\n    process.stdin.on(\"data\", onData)\n  })\n}\n\nasync function promptRequiredSecret(\n  message: string,\n  fieldName: string,\n): Promise<string> {\n  const value = await promptMaskedText(message)\n  const normalizedValue = value.trim()\n  if (!normalizedValue) {\n    throw new Error(`${fieldName} must be a non-empty string`)\n  }\n  return normalizedValue\n}\n\nasync function promptCustomProviderName(defaultName?: string): Promise<string> {\n  const value = await prompt(\"Enter provider name\", {\n    type: \"text\",\n    ...(defaultName ? { default: defaultName, initial: defaultName } : {}),\n  })\n  const providerName = (value || defaultName || \"\").trim()\n  assertCustomProviderName(providerName)\n  return providerName\n}\n\nasync function promptCustomProviderType(\n  defaultType?: ProviderType,\n): Promise<ProviderType> {\n  const providerType = await prompt(\"Select provider type\", {\n    type: \"select\",\n    initial: defaultType,\n    options: SUPPORTED_PROVIDER_TYPES.map((type) => ({\n      label: type,\n      value: type,\n    })),\n  })\n\n  if (\n    typeof providerType !== \"string\"\n    || !isSupportedProviderType(providerType)\n  ) {\n    throw new Error(\"No provider type selected\")\n  }\n\n  return providerType\n}\n\nasync function promptModelsDevProvider(): Promise<\n  ModelsDevProviderOption | undefined\n> {\n  const source = await prompt(\"Choose custom provider source\", {\n    type: \"select\",\n    options: [\n      { label: \"Enter manually\", value: \"manual\" },\n      { label: \"Choose from models.dev\", value: \"models-dev\" },\n    ],\n  })\n  if (source === \"manual\") return undefined\n  if (source !== \"models-dev\") throw new Error(\"No provider source selected\")\n\n  const providers = await loadModelsDevProviderOptions()\n  const query = (\n    (await prompt(\"Search models.dev providers (blank to list all)\", {\n      type: \"text\",\n    })) ?? \"\"\n  )\n    .trim()\n    .toLowerCase()\n  const matches = providers.filter(\n    (provider) =>\n      provider.id.toLowerCase().includes(query)\n      || provider.name.toLowerCase().includes(query),\n  )\n  if (matches.length === 0) {\n    throw new Error(\"No matching models.dev providers with a supported API URL\")\n  }\n  const selectedId = await prompt(\"Select a models.dev provider\", {\n    type: \"select\",\n    options: matches.map((provider) => ({\n      label: `${provider.name} (${provider.id}) — ${provider.type}`,\n      value: provider.id,\n    })),\n  })\n  const selectedProvider = matches.find(\n    (provider) => provider.id === selectedId,\n  )\n  if (!selectedProvider) throw new Error(\"No models.dev provider selected\")\n  return selectedProvider\n}\n\nasync function promptQuickProviderType(\n  defaultType: ProviderType,\n): Promise<ProviderType> {\n  const providerType = await prompt(\n    `Select provider type (default: ${defaultType})`,\n    {\n      type: \"select\",\n      options: [\n        {\n          label: `Default (${defaultType})`,\n          value: QUICK_PROVIDER_DEFAULT_TYPE_OPTION,\n        },\n        ...SUPPORTED_PROVIDER_TYPES.map((type) => ({\n          label: type,\n          value: type,\n        })),\n      ],\n    },\n  )\n\n  if (providerType === QUICK_PROVIDER_DEFAULT_TYPE_OPTION) {\n    return defaultType\n  }\n\n  if (\n    typeof providerType === \"string\"\n    && isSupportedProviderType(providerType)\n  ) {\n    return providerType\n  }\n\n  throw new Error(\"No provider type selected\")\n}\n\nfunction getDefaultProviderAuthType(\n  providerType: ProviderType,\n): ProviderAuthType {\n  return providerType === \"anthropic\" ? \"x-api-key\" : \"authorization\"\n}\n\nasync function promptCustomProviderAuthType(\n  providerType: ProviderType,\n): Promise<ProviderAuthType | undefined> {\n  const defaultAuthType = getDefaultProviderAuthType(providerType)\n  const authType = await prompt(\"Select provider auth type\", {\n    type: \"select\",\n    options: [\n      {\n        label: `Default (${defaultAuthType})`,\n        value: CUSTOM_PROVIDER_AUTH_TYPE_OPTION,\n      },\n      ...CUSTOM_PROVIDER_AUTH_TYPES.map((value) => ({\n        label: value,\n        value,\n      })),\n    ],\n  })\n\n  if (authType === CUSTOM_PROVIDER_AUTH_TYPE_OPTION) {\n    return undefined\n  }\n\n  if (typeof authType === \"string\" && isCustomProviderAuthType(authType)) {\n    return authType\n  }\n\n  throw new Error(\"No provider auth type selected\")\n}\n\nasync function promptQuickProviderBaseUrl(\n  defaultBaseUrl: string,\n): Promise<string> {\n  const value = await prompt(\n    `Enter provider baseUrl (default: ${defaultBaseUrl})`,\n    {\n      type: \"text\",\n      default: defaultBaseUrl,\n      initial: defaultBaseUrl,\n    },\n  )\n  const baseUrl = normalizeProviderBaseUrl(\n    typeof value === \"string\" && value.trim() ? value : defaultBaseUrl,\n  )\n  if (!baseUrl) {\n    throw new Error(\"baseUrl must be a non-empty string\")\n  }\n\n  return baseUrl\n}\n\nfunction buildCustomProviderConfig(\n  existingProviderConfig: ProviderConfig,\n  options: {\n    apiKey: string\n    authType?: ProviderAuthType\n    baseUrl: string\n    pricingCurrency?: string\n    type: ProviderType\n    modelsDevProviderId?: string\n  },\n): ProviderConfig {\n  return {\n    type: options.type,\n    enabled: true,\n    baseUrl: options.baseUrl,\n    ...(options.modelsDevProviderId && {\n      modelsDevProviderId: options.modelsDevProviderId,\n    }),\n    apiKey: options.apiKey,\n    ...(options.authType ? { authType: options.authType } : {}),\n    pricingCurrency:\n      options.pricingCurrency ?? existingProviderConfig.pricingCurrency,\n    ...(existingProviderConfig.agentsModels !== undefined ?\n      { agentsModels: existingProviderConfig.agentsModels }\n    : {}),\n    ...(existingProviderConfig.models ?\n      { models: existingProviderConfig.models }\n    : {}),\n  }\n}\n\nasync function configureCustomProvider(): Promise<void> {\n  const catalogProvider = await promptModelsDevProvider()\n  const providerName = await promptCustomProviderName(catalogProvider?.id)\n  const type = await promptCustomProviderType(catalogProvider?.type)\n  const baseUrl =\n    catalogProvider ?\n      await promptQuickProviderBaseUrl(catalogProvider.api)\n    : normalizeProviderBaseUrl(\n        await promptRequiredText(\"Enter provider baseUrl\", \"baseUrl\"),\n      )\n  if (!baseUrl) {\n    throw new Error(\"baseUrl must be a non-empty string\")\n  }\n\n  const apiKey = await promptRequiredSecret(\"Enter provider apiKey\", \"apiKey\")\n  const authType = await promptCustomProviderAuthType(type)\n  const existingProviderConfig = getRawProviderConfig(providerName) ?? {}\n\n  setProviderConfig(\n    providerName,\n    buildCustomProviderConfig(existingProviderConfig, {\n      apiKey,\n      authType,\n      baseUrl,\n      modelsDevProviderId: catalogProvider?.id,\n      type,\n    }),\n  )\n\n  consola.success(\n    `Custom provider '${providerName}' written to ${PATHS.CONFIG_PATH}`,\n  )\n}\n\nasync function configureQuickProvider(\n  providerName: QuickProviderName,\n): Promise<void> {\n  const defaultProviderConfig = QUICK_PROVIDER_CONFIGS[providerName]\n  const apiKey = await promptRequiredSecret(\n    `Enter ${providerName} apiKey`,\n    \"apiKey\",\n  )\n  const type =\n    defaultProviderConfig.editableType ?\n      await promptQuickProviderType(defaultProviderConfig.type)\n    : defaultProviderConfig.type\n  const baseUrl = await promptQuickProviderBaseUrl(\n    defaultProviderConfig.baseUrl,\n  )\n  const existingProviderConfig = getRawProviderConfig(providerName) ?? {}\n\n  setProviderConfig(\n    providerName,\n    buildCustomProviderConfig(existingProviderConfig, {\n      apiKey,\n      baseUrl,\n      pricingCurrency: defaultProviderConfig.pricingCurrency,\n      type,\n    }),\n  )\n\n  consola.success(\n    `${AUTH_PROVIDER_LABELS[providerName]} provider '${providerName}' written to ${PATHS.CONFIG_PATH}`,\n  )\n}\n\nasync function loginWithCodex(alias?: string): Promise<void> {\n  const credentials = await loginCodex({\n    onAuth(info) {\n      consola.info(\"Open the following URL to authenticate with Codex:\")\n      consola.log(info.url)\n      if (info.instructions) {\n        consola.info(info.instructions)\n      }\n    },\n    onPrompt(message) {\n      return prompt(message, { type: \"text\" }).then((value) => value ?? \"\")\n    },\n    onProgress(message) {\n      consola.debug(message)\n    },\n  })\n\n  await persistCodexCredentials(credentials, {\n    activateAccount: true,\n    alias,\n    enableProvider: true,\n  })\n  consola.success(\n    `Codex provider config written to ${PATHS.CONFIG_PATH} and credentials written to ${PATHS.CODEX_CREDENTIAL_PATH}`,\n  )\n}\n\nasync function loginWithProvider(\n  provider: AuthProviderName,\n  alias?: string,\n): Promise<void> {\n  if (alias !== undefined && provider !== \"codex\" && provider !== \"xai\") {\n    throw new Error(\"--alias is only supported with the codex or xai provider\")\n  }\n\n  if (provider === \"copilot\") {\n    await setupGitHubToken({ force: true })\n    consola.success(\"GitHub token written to\", PATHS.GITHUB_TOKEN_PATH)\n    return\n  }\n\n  if (provider === \"codex\") {\n    await loginWithCodex(alias)\n    return\n  }\n\n  if (provider === \"xai\") {\n    const credentials = await loginXai({\n      onAuth(info) {\n        consola.info(\"Open the following URL to authenticate with xAI:\")\n        consola.log(info.url)\n        consola.info(\n          `Open ${info.verificationUri} on any device and enter code: ${info.userCode}`,\n        )\n      },\n    })\n    await persistXaiCredentials(credentials, { alias })\n    consola.success(\n      `xAI provider config written to ${PATHS.CONFIG_PATH} and credentials written to ${PATHS.XAI_CREDENTIAL_PATH}`,\n    )\n    return\n  }\n\n  if (isQuickProviderName(provider)) {\n    await configureQuickProvider(provider)\n    return\n  }\n\n  await configureCustomProvider()\n}\n\nexport async function runProviderSetup(): Promise<void> {\n  const provider = await resolveProviderSelection(undefined)\n  consola.info(`Logging in with ${AUTH_PROVIDER_LABELS[provider]}`)\n  await loginWithProvider(provider)\n}\n\nexport async function runAuthLogin(options: RunAuthOptions): Promise<void> {\n  const tlsModule = await import(\"./lib/tls\")\n  tlsModule.enableSystemCACompat()\n\n  if (options.verbose) {\n    consola.level = 5\n    consola.info(\"Verbose logging enabled\")\n  }\n\n  state.showToken = options.showToken\n\n  await ensurePaths()\n  const provider = await resolveProviderSelection(options.provider)\n\n  consola.info(`Logging in with ${AUTH_PROVIDER_LABELS[provider]}`)\n  await loginWithProvider(provider, options.alias)\n}\n\nconst authAccountArgs = {\n  list: {\n    alias: \"l\",\n    type: \"boolean\",\n    default: false,\n    description: \"List stored OAuth accounts\",\n  },\n  remove: {\n    alias: \"r\",\n    type: \"string\",\n    description:\n      \"Remove an OAuth account by alias or account id; the account in use cannot be removed\",\n  },\n  use: {\n    alias: \"u\",\n    type: \"string\",\n    description: \"Select an OAuth account by alias or account id\",\n  },\n} as const\n\ninterface RunAuthAccountsOptions {\n  list?: boolean\n  remove?: string\n  use?: string\n}\n\nfunction formatOAuthAccountName(\n  account: Pick<CodexAccountSummary, \"accountId\" | \"alias\">,\n): string {\n  return account.alias ?\n      `${account.alias} (${account.accountId})`\n    : account.accountId\n}\n\nfunction formatOAuthAccount(account: CodexAccountSummary): string {\n  return `${account.active ? \"*\" : \"-\"} ${formatOAuthAccountName(account)}`\n}\n\nexport async function runAuthCodex(\n  options: RunAuthAccountsOptions,\n): Promise<void> {\n  return await runAuthAccounts(\"codex\", options)\n}\n\nexport async function runAuthAccounts(\n  provider: \"codex\" | \"xai\",\n  options: RunAuthAccountsOptions,\n): Promise<void> {\n  const label = provider === \"codex\" ? \"Codex\" : \"xAI\"\n  const accountsApi =\n    provider === \"codex\" ?\n      {\n        list: getCodexAccounts,\n        select: selectCodexAccount,\n        remove: removeCodexAccount,\n      }\n    : {\n        list: getXaiAccounts,\n        select: selectXaiAccount,\n        remove: removeXaiAccount,\n      }\n  await ensurePaths()\n\n  const operationCount = [\n    options.list === true,\n    options.use !== undefined,\n    options.remove !== undefined,\n  ].filter(Boolean).length\n  if (operationCount > 1) {\n    throw new Error(\"Use only one of --list, --use, or --remove per invocation\")\n  }\n\n  if (options.use !== undefined) {\n    const account = await accountsApi.select(options.use)\n    consola.success(\n      `Selected ${label} account ${formatOAuthAccountName(account)}`,\n    )\n    consola.info(`Restart the server to use the selected ${label} account.`)\n    return\n  }\n\n  if (options.remove !== undefined) {\n    const account = await accountsApi.remove(options.remove)\n    consola.success(\n      `Removed ${label} account ${formatOAuthAccountName(account)}`,\n    )\n    return\n  }\n\n  const accounts = await accountsApi.list()\n  if (accounts.length === 0) {\n    consola.info(\n      `No ${label} accounts configured. Run \\`copilot-api auth login --provider ${provider}\\` to add one.`,\n    )\n    return\n  }\n\n  consola.info(`Configured ${label} accounts:`)\n  for (const account of accounts) {\n    consola.info(formatOAuthAccount(account))\n  }\n}\n\nconst authKeysArgs = {\n  add: {\n    alias: \"a\",\n    type: \"string\",\n    description: \"Add an API key for gateway authentication\",\n  },\n  remove: {\n    alias: \"r\",\n    type: \"string\",\n    description: \"Remove an API key\",\n  },\n  list: {\n    alias: \"l\",\n    type: \"boolean\",\n    default: false,\n    description: \"List configured API keys\",\n  },\n  clear: {\n    type: \"boolean\",\n    default: false,\n    description: \"Remove all configured API keys\",\n  },\n} as const\n\ninterface RunAuthKeysOptions {\n  add?: string\n  remove?: string\n  list?: boolean\n  clear?: boolean\n}\n\nfunction normalizeAuthKeyValue(value: string): string {\n  const normalizedKey = value.trim()\n  if (!normalizedKey) {\n    throw new Error(\"API key must be a non-empty string\")\n  }\n  return normalizedKey\n}\n\nexport async function runAuthKeys(options: RunAuthKeysOptions): Promise<void> {\n  const tlsModule = await import(\"./lib/tls\")\n  tlsModule.enableSystemCACompat()\n\n  await ensurePaths()\n\n  const operations = [\n    ...(options.add !== undefined ? [\"add\"] : []),\n    ...(options.remove !== undefined ? [\"remove\"] : []),\n    ...(options.list ? [\"list\"] : []),\n    ...(options.clear ? [\"clear\"] : []),\n  ]\n  if (operations.length > 1) {\n    throw new Error(\n      \"Use only one of --add, --remove, --list, or --clear per invocation\",\n    )\n  }\n\n  const operation = operations[0] ?? \"list\"\n\n  if (operation === \"add\") {\n    const apiKey = normalizeAuthKeyValue(options.add ?? \"\")\n    const currentKeys = getConfiguredApiKeys()\n    if (currentKeys.includes(apiKey)) {\n      consola.info(\n        `API key already configured. ${currentKeys.length} API key(s) configured.`,\n      )\n      return\n    }\n    const storedKeys = setConfiguredApiKeys([...currentKeys, apiKey])\n    consola.success(\n      `API key added to ${PATHS.CONFIG_PATH}. ${storedKeys.length} API key(s) configured.`,\n    )\n    return\n  }\n\n  if (operation === \"remove\") {\n    const apiKey = normalizeAuthKeyValue(options.remove ?? \"\")\n    const currentKeys = getConfiguredApiKeys()\n    if (!currentKeys.includes(apiKey)) {\n      consola.info(\n        `API key not found. ${currentKeys.length} API key(s) configured.`,\n      )\n      return\n    }\n    const storedKeys = setConfiguredApiKeys(\n      currentKeys.filter((key) => key !== apiKey),\n    )\n    consola.success(\n      `API key removed from ${PATHS.CONFIG_PATH}. ${storedKeys.length} API key(s) configured.`,\n    )\n    return\n  }\n\n  if (operation === \"clear\") {\n    setConfiguredApiKeys([])\n    consola.success(`Removed all API keys from ${PATHS.CONFIG_PATH}.`)\n    return\n  }\n\n  const currentKeys = getConfiguredApiKeys()\n  if (currentKeys.length === 0) {\n    consola.info(\n      \"No API keys configured. Run `npx @jeffreycao/copilot-api@latest auth keys --add <key>` to add one.\",\n    )\n    return\n  }\n  consola.info(\"Configured API keys:\")\n  for (const key of currentKeys) {\n    consola.info(`- ${key}`)\n  }\n}\n\nconst authLogin = defineCommand({\n  meta: {\n    name: \"login\",\n    description:\n      \"Authenticate or configure a provider without running the server\",\n  },\n  args: authArgs,\n  run({ args }) {\n    return runAuthLogin({\n      alias: args.alias,\n      provider: args.provider,\n      verbose: args.verbose,\n      showToken: args[\"show-token\"],\n    })\n  },\n})\n\nconst authKeys = defineCommand({\n  meta: {\n    name: \"keys\",\n    description: \"Manage gateway API keys (auth.apiKeys) in the config\",\n  },\n  args: authKeysArgs,\n  run({ args }) {\n    return runAuthKeys({\n      add: args.add,\n      remove: args.remove,\n      list: args.list,\n      clear: args.clear,\n    })\n  },\n})\n\nconst authCodex = defineCommand({\n  meta: {\n    name: \"codex\",\n    description: \"List, select, or remove stored Codex accounts\",\n  },\n  args: authAccountArgs,\n  run({ args }) {\n    return runAuthCodex({\n      list: args.list,\n      remove: args.remove,\n      use: args.use,\n    })\n  },\n})\n\nexport const auth = defineCommand({\n  meta: {\n    name: \"auth\",\n    description: \"Run authentication flows without running the server\",\n  },\n  args: authArgs,\n  subCommands: {\n    codex: authCodex,\n    xai: defineCommand({\n      meta: { name: \"xai\", description: \"Manage stored xAI accounts\" },\n      args: authAccountArgs,\n      run({ args }) {\n        return runAuthAccounts(\"xai\", {\n          list: args.list,\n          remove: args.remove,\n          use: args.use,\n        })\n      },\n    }),\n    login: authLogin,\n    keys: authKeys,\n  },\n  run({ args }) {\n    if ((args._[0] ?? \"\").trim()) {\n      return\n    }\n\n    return runAuthLogin({\n      alias: args.alias,\n      provider: args.provider,\n      verbose: args.verbose,\n      showToken: args[\"show-token\"],\n    })\n  },\n})\n"],"mappings":";;;;;;AASA,MAAa,yBAAyB;CACpC,eAAe;EACb,MAAM;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;CAChB;CACA,MAAM;EACJ,MAAM;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;CAChB;CACA,UAAU;EACR,MAAM;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;CAChB;CACA,WAAW;EACT,MAAM;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;CAChB;CACA,YAAY;EACV,MAAM;EACN,SAAS;EACT,iBAAiB;EACjB,cAAc;CAChB;AACF;;;ACYA,SAAgB,qBACd,UAAyB;CACvB,YAAY,QAAQ,SAAS;CAC7B,UAAU,QAAQ;CAClB,YAAY,QAAQ,MAAM;CAC1B,aAAa,QAAQ,OAAO;CAC5B,mBAAmB,OAAO,QAAQ,OAAO,kBAAkB;AAC7D,GACS;CACT,OAAO,QACL,QAAQ,aAAa,WAChB,QAAQ,cACR,QAAQ,cACR,QAAQ,eACR,QAAQ,iBACf;AACF;AAEA,SAAS,eAAe,SAAuD;CAC7E,OAAO,QAAQ,SAAS,WACpB,QAAQ,UACP,QAAQ,WAAW,QAAQ;AAClC;AAEA,eAAsB,gBACpB,SACA,SACA,SAC6B;CAC7B,IAAI,QAAQ,SAAS,UAAU;EAC7B,MAAM,QAAQ,MAAM,QAAQ,OAAO;GACjC;GACA,SAAS,QAAQ,QAAQ,KAAK,WAC5B,OAAO,WAAW,WAAW;IAAE,OAAO;IAAQ,OAAO;GAAO,IAAI,MAClE;GACA,cAAc,QAAQ;EACxB,CAAC;EACD,IAAI,QAAQ,SAAS,KAAK,GACxB,OAAO,eAAe,OAAO;EAE/B,OAAO,OAAO,UAAU,WAAW,QAAQ,KAAA;CAC7C;CAEA,MAAM,QAAQ,MAAM,QAAQ,KAAK;EAC/B;EACA,cAAc,QAAQ;EACtB,cAAc,QAAQ;EACtB,aAAa,QAAQ;CACvB,CAAC;CACD,IAAI,QAAQ,SAAS,KAAK,GACxB,OAAO,eAAe,OAAO;CAE/B,OAAO,OAAO,UAAU,WAAW,QAAQ,KAAA;AAC7C;AAEA,eAAsB,OACpB,SACA,SAC6B;CAC7B,IAAI,CAAC,qBAAqB,GAAG;EAC3B,IAAI,QAAQ,SAAS,UAAU;GAC7B,MAAM,QAAQ,MAAM,QAAQ,OAAO,SAAS,OAAO;GACnD,OAAO,OAAO,UAAU,WAAW,QAAQ,KAAA;EAC7C;EACA,OAAO,MAAM,QAAQ,OAAO,SAAS,OAAO;CAC9C;CAGA,OAAO,MAAM,gBAAgB,SAAS,SAAS,MAD3B,OAAO,iBACyB;AACtD;;;ACrEA,MAAM,WAAW;CACf,UAAU;EACR,MAAM;EACN,aACE;CACJ;CACA,OAAO;EACL,MAAM;EACN,aAAa;CACf;CACA,SAAS;EACP,OAAO;EACP,MAAM;EACN,SAAS;EACT,aAAa;CACf;CACA,cAAc;EACZ,MAAM;EACN,SAAS;EACT,aAAa;CACf;AACF;AAEA,MAAM,yBAAyB;CAAC;CAAW;CAAS;AAAK;AACzD,MAAM,uBAAuB,OAAO,KAClC,sBACF;AACA,MAAM,sBAAsB;CAC1B,GAAG;CACH,GAAG;CACH;AACF;AACA,MAAM,mCAAmC;AACzC,MAAM,qCAAqC;AAC3C,MAAM,6BAA6B,CAAC,aAAa,eAAe;AAWhE,MAAM,uBAAyD;CAJ7D,SAAS;CACT,OAAO;CACP,KAAK;CAIL,eAAe;CACf,MAAM;CACN,UAAU;CACV,WAAW;CACX,YAAY;CACZ,QAAQ;AACV;AAEA,SAAS,mBACP,cACkC;CAClC,OAAO,oBAAoB,SAAS,YAAgC;AACtE;AAEA,SAAS,yBACP,OACiC;CACjC,OAAO,2BAA2B,SAAS,KAA+B;AAC5E;AAEA,SAAS,oBACP,cACmC;CACnC,OAAO,qBAAqB,SAAS,YAAiC;AACxE;AAEA,eAAe,yBACb,aAC2B;CAC3B,MAAM,qBAAqB,CAAC,GAAG,mBAAmB;CAElD,IAAI,gBAAgB,KAAA,GAAW;EAC7B,MAAM,eAAe,YAAY,KAAK;EACtC,IAAI,CAAC,mBAAmB,YAAY,GAClC,MAAM,IAAI,MACR,qBAAqB,YAAY,sBAAsB,mBAAmB,KAAK,IAAI,GACrF;EAEF,OAAO;CACT;CAEA,IAAI,mBAAmB,WAAW,GAChC,OAAO,mBAAmB;CAG5B,MAAM,WAAW,MAAM,OAAO,oCAAoC;EAChE,MAAM;EACN,SAAS,mBAAmB,KAAK,kBAAkB;GACjD,OAAO,GAAG,qBAAqB,cAAc,IAAI,aAAa;GAC9D,OAAO;EACT,EAAE;CACJ,CAAC;CAED,IAAI,CAAC,YAAY,CAAC,mBAAmB,QAAQ,GAC3C,MAAM,IAAI,MAAM,sBAAsB;CAGxC,OAAO;AACT;AAEA,SAAS,yBAAyB,cAA4B;CAC5D,IAAI,CAAC,cACH,MAAM,IAAI,MAAM,0CAA0C;CAG5D,IAAI,CAAC,+BAA+B,KAAK,YAAY,GACnD,MAAM,IAAI,MACR,6GACF;CAGF,IACE,iBAAiB,aACd,iBAAiB,oBACjB,iBAAiB,SAEpB,MAAM,IAAI,MACR,kBAAkB,aAAa,qCACjC;AAEJ;AAEA,eAAe,mBACb,SACA,WACiB;CACjB,MAAM,QAAQ,MAAM,OAAO,SAAS,EAAE,MAAM,OAAO,CAAC;CACpD,MAAM,kBAAkB,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI;CACnE,IAAI,CAAC,iBACH,MAAM,IAAI,MAAM,GAAG,UAAU,4BAA4B;CAE3D,OAAO;AACT;AAEA,SAAS,qBAA8B;CACrC,OAAO,QACL,QAAQ,MAAM,SACT,QAAQ,OAAO,SACf,OAAO,QAAQ,MAAM,eAAe,UAC3C;AACF;AAEA,eAAe,iBAAiB,SAAkC;CAChE,IAAI,CAAC,mBAAmB,GAAG;EACzB,MAAM,QAAQ,MAAM,OAAO,SAAS,EAAE,MAAM,OAAO,CAAC;EACpD,OAAO,OAAO,UAAU,WAAW,QAAQ;CAC7C;CAEA,OAAO,MAAM,IAAI,SAAiB,SAAS,WAAW;EACpD,IAAI,QAAQ;EACZ,MAAM,oBAAoB,QAAQ,MAAM,UAAU;EAElD,SAAS,UAAgB;GACvB,QAAQ,MAAM,IAAI,QAAQ,MAAM;GAChC,QAAQ,MAAM,WAAW,iBAAiB;GAC1C,QAAQ,MAAM,MAAM;EACtB;EAEA,SAAS,SAAe;GACtB,QAAQ;GACR,QAAQ,OAAO,MAAM,IAAI;GACzB,QAAQ,KAAK;EACf;EAEA,SAAS,SAAe;GACtB,QAAQ;GACR,QAAQ,OAAO,MAAM,IAAI;GACzB,uBAAO,IAAI,MAAM,kBAAkB,CAAC;EACtC;EAEA,SAAS,OAAO,OAAqB;GACnC,MAAM,QAAQ,MAAM,SAAS,MAAM;GAEnC,IAAI,MAAM,WAAW,MAAQ,GAC3B;GAGF,KAAK,MAAM,QAAQ,OAAO;IACxB,IAAI,SAAS,KAAU;KACrB,OAAO;KACP;IACF;IAEA,IAAI,SAAS,QAAQ,SAAS,MAAM;KAClC,OAAO;KACP;IACF;IAEA,IAAI,SAAS,QAAQ,SAAS,KAAU;KACtC,IAAI,MAAM,SAAS,GAAG;MACpB,QAAQ,MAAM,MAAM,GAAG,EAAE;MACzB,QAAQ,OAAO,MAAM,OAAO;KAC9B;KACA;IACF;IAEA,IAAI,QAAQ,KAAK;KACf,SAAS;KACT,QAAQ,OAAO,MAAM,GAAG;IAC1B;GACF;EACF;EAEA,QAAQ,OAAO,MAAM,GAAG,QAAQ,GAAG;EACnC,QAAQ,MAAM,WAAW,IAAI;EAC7B,QAAQ,MAAM,OAAO;EACrB,QAAQ,MAAM,GAAG,QAAQ,MAAM;CACjC,CAAC;AACH;AAEA,eAAe,qBACb,SACA,WACiB;CAEjB,MAAM,mBAAkB,MADJ,iBAAiB,OAAO,EAAA,CACd,KAAK;CACnC,IAAI,CAAC,iBACH,MAAM,IAAI,MAAM,GAAG,UAAU,4BAA4B;CAE3D,OAAO;AACT;AAEA,eAAe,yBAAyB,aAAuC;CAK7E,MAAM,gBAAgB,MAJF,OAAO,uBAAuB;EAChD,MAAM;EACN,GAAI,cAAc;GAAE,SAAS;GAAa,SAAS;EAAY,IAAI,CAAC;CACtE,CAAC,KAC8B,eAAe,GAAA,CAAI,KAAK;CACvD,yBAAyB,YAAY;CACrC,OAAO;AACT;AAEA,eAAe,yBACb,aACuB;CACvB,MAAM,eAAe,MAAM,OAAO,wBAAwB;EACxD,MAAM;EACN,SAAS;EACT,SAAS,yBAAyB,KAAK,UAAU;GAC/C,OAAO;GACP,OAAO;EACT,EAAE;CACJ,CAAC;CAED,IACE,OAAO,iBAAiB,YACrB,CAAC,wBAAwB,YAAY,GAExC,MAAM,IAAI,MAAM,2BAA2B;CAG7C,OAAO;AACT;AAEA,eAAe,0BAEb;CACA,MAAM,SAAS,MAAM,OAAO,iCAAiC;EAC3D,MAAM;EACN,SAAS,CACP;GAAE,OAAO;GAAkB,OAAO;EAAS,GAC3C;GAAE,OAAO;GAA0B,OAAO;EAAa,CACzD;CACF,CAAC;CACD,IAAI,WAAW,UAAU,OAAO,KAAA;CAChC,IAAI,WAAW,cAAc,MAAM,IAAI,MAAM,6BAA6B;CAE1E,MAAM,YAAY,MAAM,6BAA6B;CACrD,MAAM,SACH,MAAM,OAAO,mDAAmD,EAC/D,MAAM,OACR,CAAC,KAAM,GAAA,CAEN,KAAK,CAAC,CACN,YAAY;CACf,MAAM,UAAU,UAAU,QACvB,aACC,SAAS,GAAG,YAAY,CAAC,CAAC,SAAS,KAAK,KACrC,SAAS,KAAK,YAAY,CAAC,CAAC,SAAS,KAAK,CACjD;CACA,IAAI,QAAQ,WAAW,GACrB,MAAM,IAAI,MAAM,2DAA2D;CAE7E,MAAM,aAAa,MAAM,OAAO,gCAAgC;EAC9D,MAAM;EACN,SAAS,QAAQ,KAAK,cAAc;GAClC,OAAO,GAAG,SAAS,KAAK,IAAI,SAAS,GAAG,MAAM,SAAS;GACvD,OAAO,SAAS;EAClB,EAAE;CACJ,CAAC;CACD,MAAM,mBAAmB,QAAQ,MAC9B,aAAa,SAAS,OAAO,UAChC;CACA,IAAI,CAAC,kBAAkB,MAAM,IAAI,MAAM,iCAAiC;CACxE,OAAO;AACT;AAEA,eAAe,wBACb,aACuB;CACvB,MAAM,eAAe,MAAM,OACzB,kCAAkC,YAAY,IAC9C;EACE,MAAM;EACN,SAAS,CACP;GACE,OAAO,YAAY,YAAY;GAC/B,OAAO;EACT,GACA,GAAG,yBAAyB,KAAK,UAAU;GACzC,OAAO;GACP,OAAO;EACT,EAAE,CACJ;CACF,CACF;CAEA,IAAI,iBAAiB,oCACnB,OAAO;CAGT,IACE,OAAO,iBAAiB,YACrB,wBAAwB,YAAY,GAEvC,OAAO;CAGT,MAAM,IAAI,MAAM,2BAA2B;AAC7C;AAEA,SAAS,2BACP,cACkB;CAClB,OAAO,iBAAiB,cAAc,cAAc;AACtD;AAEA,eAAe,6BACb,cACuC;CAEvC,MAAM,WAAW,MAAM,OAAO,6BAA6B;EACzD,MAAM;EACN,SAAS,CACP;GACE,OAAO,YALW,2BAA2B,YAK1B,EAAgB;GACnC,OAAO;EACT,GACA,GAAG,2BAA2B,KAAK,WAAW;GAC5C,OAAO;GACP;EACF,EAAE,CACJ;CACF,CAAC;CAED,IAAI,aAAa,kCACf;CAGF,IAAI,OAAO,aAAa,YAAY,yBAAyB,QAAQ,GACnE,OAAO;CAGT,MAAM,IAAI,MAAM,gCAAgC;AAClD;AAEA,eAAe,2BACb,gBACiB;CACjB,MAAM,QAAQ,MAAM,OAClB,oCAAoC,eAAe,IACnD;EACE,MAAM;EACN,SAAS;EACT,SAAS;CACX,CACF;CACA,MAAM,UAAU,yBACd,OAAO,UAAU,YAAY,MAAM,KAAK,IAAI,QAAQ,cACtD;CACA,IAAI,CAAC,SACH,MAAM,IAAI,MAAM,oCAAoC;CAGtD,OAAO;AACT;AAEA,SAAS,0BACP,wBACA,SAQgB;CAChB,OAAO;EACL,MAAM,QAAQ;EACd,SAAS;EACT,SAAS,QAAQ;EACjB,GAAI,QAAQ,uBAAuB,EACjC,qBAAqB,QAAQ,oBAC/B;EACA,QAAQ,QAAQ;EAChB,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;EACzD,iBACE,QAAQ,mBAAmB,uBAAuB;EACpD,GAAI,uBAAuB,iBAAiB,KAAA,IAC1C,EAAE,cAAc,uBAAuB,aAAa,IACpD,CAAC;EACH,GAAI,uBAAuB,SACzB,EAAE,QAAQ,uBAAuB,OAAO,IACxC,CAAC;CACL;AACF;AAEA,eAAe,0BAAyC;CACtD,MAAM,kBAAkB,MAAM,wBAAwB;CACtD,MAAM,eAAe,MAAM,yBAAyB,iBAAiB,EAAE;CACvE,MAAM,OAAO,MAAM,yBAAyB,iBAAiB,IAAI;CACjE,MAAM,UACJ,kBACE,MAAM,2BAA2B,gBAAgB,GAAG,IACpD,yBACE,MAAM,mBAAmB,0BAA0B,SAAS,CAC9D;CACJ,IAAI,CAAC,SACH,MAAM,IAAI,MAAM,oCAAoC;CAGtD,MAAM,SAAS,MAAM,qBAAqB,yBAAyB,QAAQ;CAC3E,MAAM,WAAW,MAAM,6BAA6B,IAAI;CACxD,MAAM,yBAAyB,qBAAqB,YAAY,KAAK,CAAC;CAEtE,kBACE,cACA,0BAA0B,wBAAwB;EAChD;EACA;EACA;EACA,qBAAqB,iBAAiB;EACtC;CACF,CAAC,CACH;CAEA,QAAQ,QACN,oBAAoB,aAAa,eAAe,MAAM,aACxD;AACF;AAEA,eAAe,uBACb,cACe;CACf,MAAM,wBAAwB,uBAAuB;CACrD,MAAM,SAAS,MAAM,qBACnB,SAAS,aAAa,UACtB,QACF;CACA,MAAM,OACJ,sBAAsB,eACpB,MAAM,wBAAwB,sBAAsB,IAAI,IACxD,sBAAsB;CAC1B,MAAM,UAAU,MAAM,2BACpB,sBAAsB,OACxB;CACA,MAAM,yBAAyB,qBAAqB,YAAY,KAAK,CAAC;CAEtE,kBACE,cACA,0BAA0B,wBAAwB;EAChD;EACA;EACA,iBAAiB,sBAAsB;EACvC;CACF,CAAC,CACH;CAEA,QAAQ,QACN,GAAG,qBAAqB,cAAc,aAAa,aAAa,eAAe,MAAM,aACvF;AACF;AAEA,eAAe,eAAe,OAA+B;CAC3D,MAAM,cAAc,MAAM,WAAW;EACnC,OAAO,MAAM;GACX,QAAQ,KAAK,oDAAoD;GACjE,QAAQ,IAAI,KAAK,GAAG;GACpB,IAAI,KAAK,cACP,QAAQ,KAAK,KAAK,YAAY;EAElC;EACA,SAAS,SAAS;GAChB,OAAO,OAAO,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,MAAM,UAAU,SAAS,EAAE;EACtE;EACA,WAAW,SAAS;GAClB,QAAQ,MAAM,OAAO;EACvB;CACF,CAAC;CAED,MAAM,wBAAwB,aAAa;EACzC,iBAAiB;EACjB;EACA,gBAAgB;CAClB,CAAC;CACD,QAAQ,QACN,oCAAoC,MAAM,YAAY,8BAA8B,MAAM,uBAC5F;AACF;AAEA,eAAe,kBACb,UACA,OACe;CACf,IAAI,UAAU,KAAA,KAAa,aAAa,WAAW,aAAa,OAC9D,MAAM,IAAI,MAAM,0DAA0D;CAG5E,IAAI,aAAa,WAAW;EAC1B,MAAM,iBAAiB,EAAE,OAAO,KAAK,CAAC;EACtC,QAAQ,QAAQ,2BAA2B,MAAM,iBAAiB;EAClE;CACF;CAEA,IAAI,aAAa,SAAS;EACxB,MAAM,eAAe,KAAK;EAC1B;CACF;CAEA,IAAI,aAAa,OAAO;EACtB,MAAM,cAAc,MAAM,SAAS,EACjC,OAAO,MAAM;GACX,QAAQ,KAAK,kDAAkD;GAC/D,QAAQ,IAAI,KAAK,GAAG;GACpB,QAAQ,KACN,QAAQ,KAAK,gBAAgB,iCAAiC,KAAK,UACrE;EACF,EACF,CAAC;EACD,MAAM,sBAAsB,aAAa,EAAE,MAAM,CAAC;EAClD,QAAQ,QACN,kCAAkC,MAAM,YAAY,8BAA8B,MAAM,qBAC1F;EACA;CACF;CAEA,IAAI,oBAAoB,QAAQ,GAAG;EACjC,MAAM,uBAAuB,QAAQ;EACrC;CACF;CAEA,MAAM,wBAAwB;AAChC;AAEA,eAAsB,mBAAkC;CACtD,MAAM,WAAW,MAAM,yBAAyB,KAAA,CAAS;CACzD,QAAQ,KAAK,mBAAmB,qBAAqB,WAAW;CAChE,MAAM,kBAAkB,QAAQ;AAClC;AAEA,eAAsB,aAAa,SAAwC;CAEzE,CAAA,MADwB,OAAO,qBAAA,CACrB,qBAAqB;CAE/B,IAAI,QAAQ,SAAS;EACnB,QAAQ,QAAQ;EAChB,QAAQ,KAAK,yBAAyB;CACxC;CAEA,MAAM,YAAY,QAAQ;CAE1B,MAAM,YAAY;CAClB,MAAM,WAAW,MAAM,yBAAyB,QAAQ,QAAQ;CAEhE,QAAQ,KAAK,mBAAmB,qBAAqB,WAAW;CAChE,MAAM,kBAAkB,UAAU,QAAQ,KAAK;AACjD;AAEA,MAAM,kBAAkB;CACtB,MAAM;EACJ,OAAO;EACP,MAAM;EACN,SAAS;EACT,aAAa;CACf;CACA,QAAQ;EACN,OAAO;EACP,MAAM;EACN,aACE;CACJ;CACA,KAAK;EACH,OAAO;EACP,MAAM;EACN,aAAa;CACf;AACF;AAQA,SAAS,uBACP,SACQ;CACR,OAAO,QAAQ,QACX,GAAG,QAAQ,MAAM,IAAI,QAAQ,UAAU,KACvC,QAAQ;AACd;AAEA,SAAS,mBAAmB,SAAsC;CAChE,OAAO,GAAG,QAAQ,SAAS,MAAM,IAAI,GAAG,uBAAuB,OAAO;AACxE;AAEA,eAAsB,aACpB,SACe;CACf,OAAO,MAAM,gBAAgB,SAAS,OAAO;AAC/C;AAEA,eAAsB,gBACpB,UACA,SACe;CACf,MAAM,QAAQ,aAAa,UAAU,UAAU;CAC/C,MAAM,cACJ,aAAa,UACX;EACE,MAAM;EACN,QAAQ;EACR,QAAQ;CACV,IACA;EACE,MAAM;EACN,QAAQ;EACR,QAAQ;CACV;CACJ,MAAM,YAAY;CAOlB,IALuB;EACrB,QAAQ,SAAS;EACjB,QAAQ,QAAQ,KAAA;EAChB,QAAQ,WAAW,KAAA;CACrB,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,SACG,GACnB,MAAM,IAAI,MAAM,2DAA2D;CAG7E,IAAI,QAAQ,QAAQ,KAAA,GAAW;EAC7B,MAAM,UAAU,MAAM,YAAY,OAAO,QAAQ,GAAG;EACpD,QAAQ,QACN,YAAY,MAAM,WAAW,uBAAuB,OAAO,GAC7D;EACA,QAAQ,KAAK,0CAA0C,MAAM,UAAU;EACvE;CACF;CAEA,IAAI,QAAQ,WAAW,KAAA,GAAW;EAChC,MAAM,UAAU,MAAM,YAAY,OAAO,QAAQ,MAAM;EACvD,QAAQ,QACN,WAAW,MAAM,WAAW,uBAAuB,OAAO,GAC5D;EACA;CACF;CAEA,MAAM,WAAW,MAAM,YAAY,KAAK;CACxC,IAAI,SAAS,WAAW,GAAG;EACzB,QAAQ,KACN,MAAM,MAAM,gEAAgE,SAAS,eACvF;EACA;CACF;CAEA,QAAQ,KAAK,cAAc,MAAM,WAAW;CAC5C,KAAK,MAAM,WAAW,UACpB,QAAQ,KAAK,mBAAmB,OAAO,CAAC;AAE5C;AAEA,MAAM,eAAe;CACnB,KAAK;EACH,OAAO;EACP,MAAM;EACN,aAAa;CACf;CACA,QAAQ;EACN,OAAO;EACP,MAAM;EACN,aAAa;CACf;CACA,MAAM;EACJ,OAAO;EACP,MAAM;EACN,SAAS;EACT,aAAa;CACf;CACA,OAAO;EACL,MAAM;EACN,SAAS;EACT,aAAa;CACf;AACF;AASA,SAAS,sBAAsB,OAAuB;CACpD,MAAM,gBAAgB,MAAM,KAAK;CACjC,IAAI,CAAC,eACH,MAAM,IAAI,MAAM,oCAAoC;CAEtD,OAAO;AACT;AAEA,eAAsB,YAAY,SAA4C;CAE5E,CAAA,MADwB,OAAO,qBAAA,CACrB,qBAAqB;CAE/B,MAAM,YAAY;CAElB,MAAM,aAAa;EACjB,GAAI,QAAQ,QAAQ,KAAA,IAAY,CAAC,KAAK,IAAI,CAAC;EAC3C,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,QAAQ,IAAI,CAAC;EACjD,GAAI,QAAQ,OAAO,CAAC,MAAM,IAAI,CAAC;EAC/B,GAAI,QAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;CACnC;CACA,IAAI,WAAW,SAAS,GACtB,MAAM,IAAI,MACR,oEACF;CAGF,MAAM,YAAY,WAAW,MAAM;CAEnC,IAAI,cAAc,OAAO;EACvB,MAAM,SAAS,sBAAsB,QAAQ,OAAO,EAAE;EACtD,MAAM,cAAc,qBAAqB;EACzC,IAAI,YAAY,SAAS,MAAM,GAAG;GAChC,QAAQ,KACN,+BAA+B,YAAY,OAAO,wBACpD;GACA;EACF;EACA,MAAM,aAAa,qBAAqB,CAAC,GAAG,aAAa,MAAM,CAAC;EAChE,QAAQ,QACN,oBAAoB,MAAM,YAAY,IAAI,WAAW,OAAO,wBAC9D;EACA;CACF;CAEA,IAAI,cAAc,UAAU;EAC1B,MAAM,SAAS,sBAAsB,QAAQ,UAAU,EAAE;EACzD,MAAM,cAAc,qBAAqB;EACzC,IAAI,CAAC,YAAY,SAAS,MAAM,GAAG;GACjC,QAAQ,KACN,sBAAsB,YAAY,OAAO,wBAC3C;GACA;EACF;EACA,MAAM,aAAa,qBACjB,YAAY,QAAQ,QAAQ,QAAQ,MAAM,CAC5C;EACA,QAAQ,QACN,wBAAwB,MAAM,YAAY,IAAI,WAAW,OAAO,wBAClE;EACA;CACF;CAEA,IAAI,cAAc,SAAS;EACzB,qBAAqB,CAAC,CAAC;EACvB,QAAQ,QAAQ,6BAA6B,MAAM,YAAY,EAAE;EACjE;CACF;CAEA,MAAM,cAAc,qBAAqB;CACzC,IAAI,YAAY,WAAW,GAAG;EAC5B,QAAQ,KACN,oGACF;EACA;CACF;CACA,QAAQ,KAAK,sBAAsB;CACnC,KAAK,MAAM,OAAO,aAChB,QAAQ,KAAK,KAAK,KAAK;AAE3B;AAEA,MAAM,YAAY,cAAc;CAC9B,MAAM;EACJ,MAAM;EACN,aACE;CACJ;CACA,MAAM;CACN,IAAI,EAAE,QAAQ;EACZ,OAAO,aAAa;GAClB,OAAO,KAAK;GACZ,UAAU,KAAK;GACf,SAAS,KAAK;GACd,WAAW,KAAK;EAClB,CAAC;CACH;AACF,CAAC;AAED,MAAM,WAAW,cAAc;CAC7B,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,MAAM;CACN,IAAI,EAAE,QAAQ;EACZ,OAAO,YAAY;GACjB,KAAK,KAAK;GACV,QAAQ,KAAK;GACb,MAAM,KAAK;GACX,OAAO,KAAK;EACd,CAAC;CACH;AACF,CAAC;AAED,MAAM,YAAY,cAAc;CAC9B,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,MAAM;CACN,IAAI,EAAE,QAAQ;EACZ,OAAO,aAAa;GAClB,MAAM,KAAK;GACX,QAAQ,KAAK;GACb,KAAK,KAAK;EACZ,CAAC;CACH;AACF,CAAC;AAED,MAAa,OAAO,cAAc;CAChC,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,MAAM;CACN,aAAa;EACX,OAAO;EACP,KAAK,cAAc;GACjB,MAAM;IAAE,MAAM;IAAO,aAAa;GAA6B;GAC/D,MAAM;GACN,IAAI,EAAE,QAAQ;IACZ,OAAO,gBAAgB,OAAO;KAC5B,MAAM,KAAK;KACX,QAAQ,KAAK;KACb,KAAK,KAAK;IACZ,CAAC;GACH;EACF,CAAC;EACD,OAAO;EACP,MAAM;CACR;CACA,IAAI,EAAE,QAAQ;EACZ,KAAK,KAAK,EAAE,MAAM,GAAA,CAAI,KAAK,GACzB;EAGF,OAAO,aAAa;GAClB,OAAO,KAAK;GACZ,UAAU,KAAK;GACf,SAAS,KAAK;GACd,WAAW,KAAK;EAClB,CAAC;CACH;AACF,CAAC"}

package/dist/auth-Dr0MaZp1.js

@@ -0,0 +1,2 @@
+import { t as auth } from "./auth-Db9N85kJ.js";
+export { auth };

package/dist/{config-B2OaAnpL.js → config-D1F-TyTn.js}

@@ -1,4 +1,4 @@
-import { _ as readEditableConfigFromDisk, b as writeConfigToDisk, c as getConfig, n as defaultConfig, r as defaultContextManagement, t as SUPPORTED_PROVIDER_TYPES, v as reloadConfig, x as PATHS } from "./config-store-CARrUljo.js";
+import { _ as readEditableConfigFromDisk, b as writeConfigToDisk, c as getConfig, n as defaultConfig, r as defaultContextManagement, t as SUPPORTED_PROVIDER_TYPES, v as reloadConfig, x as PATHS } from "./config-store-Bgmf82i_.js";
 import consola from "consola";
 import { createHash, randomUUID } from "node:crypto";
 import path from "node:path";
@@ -267,6 +267,20 @@ function parseSelectableProviders(data) {
 		selectableProviderModelPricing
 	};
 }
+function parseModelOutputTokens(data) {
+	const providers = Object.create(null);
+	for (const [providerId, provider] of Object.entries(data)) {
+		if (!isRecord(provider) || !isRecord(provider.models)) continue;
+		const models = Object.create(null);
+		for (const [modelId, model] of Object.entries(provider.models)) {
+			if (!isRecord(model) || model.status === "deprecated") continue;
+			const output = positiveNumber(model.limit?.output);
+			if (output !== void 0 && Number.isInteger(output)) models[modelId] = output;
+		}
+		providers[providerId] = models;
+	}
+	return providers;
+}
 function parseCatalog(data) {
 	const provider = isRecord(data) ? data[OPENCODE_GO] : void 0;
 	const models = isRecord(provider) ? provider.models : void 0;
@@ -299,6 +313,7 @@ function parseCatalog(data) {
 		configs,
 		providerTypes,
 		records,
+		modelOutputTokens: parseModelOutputTokens(data),
 		...parseSelectableProviders(data)
 	};
 }
@@ -334,6 +349,9 @@ function getModelsDevModelApi(providerId, modelId) {
 function getModelsDevModelPricing(providerId, modelId) {
 	return snapshot?.selectableProviderModelPricing[providerId]?.[modelId];
 }
+function getModelsDevModelMaxOutputTokens(providerId, modelId) {
+	return snapshot?.modelOutputTokens[providerId]?.[modelId];
+}
 async function loadModelsDevProviderOptions() {
 	if (!snapshot) {
 		const cachePath = activeCachePath ?? path.join(PATHS.APP_DIR, "models-dev-api.json");
@@ -495,8 +513,8 @@ function resolveProviderAuthType(providerName, authType, providerType) {
 	if (authType === void 0) return defaultAuthType;
 	if (authType === "x-api-key") return "x-api-key";
 	if (authType === "oauth2") {
-		if (providerName === "codex") return authType;
-		consola.warn(`Provider ${providerName} has authType 'oauth2', which is only supported by the builtin codex provider, falling back to ${defaultAuthType}`);
+		if (providerName === "codex" || providerName === "xai") return authType;
+		consola.warn(`Provider ${providerName} has authType 'oauth2', which is only supported by the builtin codex and xai providers, falling back to ${defaultAuthType}`);
 		return defaultAuthType;
 	}
 	if (authType === "authorization" || authType === "azure-entra") return authType;
@@ -504,7 +522,7 @@ function resolveProviderAuthType(providerName, authType, providerType) {
 	return defaultAuthType;
 }
 function isProviderApiKeyRequired(providerName, authType) {
-	return authType !== "azure-entra" && !(providerName === "codex" && authType === "oauth2");
+	return authType !== "azure-entra" && !((providerName === "codex" || providerName === "xai") && authType === "oauth2");
 }
 function getRawProviderConfig(name) {
 	const providerName = name.trim();
@@ -560,7 +578,7 @@ function getProviderConfig(name) {
 		authTypeExplicit: provider.authType !== void 0,
 		pricingCurrency: normalizePricingCurrency(provider.pricingCurrency),
 		models: provider.models,
-		codexModels: provider.codexModels
+		agentsModels: provider.agentsModels
 	};
 }
 function resolveEffectiveProviderType(providerConfig, model) {
@@ -609,6 +627,6 @@ function isReservedProviderName(name) {
 	return name.trim() === "copilot" || name.trim() === "github-copilot";
 }
 //#endregion
-export { resolveMappedModel as C, isGpt56OrAbove as S, getReasoningEffortForModel as _, normalizeProviderBaseUrl as a, isContextManagementEnabledForMessages as b, setProviderConfig as c, getOpencodeGoModelRecords as d, loadModelsDevProviderOptions as f, getModelResponsesApiCompactThreshold as g, getModelMappings as h, listEnabledProviders as i, getOpencodeGoModelConfig as l, getExtraPromptForModel as m, getRawProviderConfig as n, resolveEffectiveProviderType as o, startModelsDevCache as p, isSupportedProviderType as r, resolveProviderConfigForModel as s, getProviderConfig as t, getOpencodeGoModelIds as u, getSmallModel as v, setModelMappings as w, isContextManagementEnabledForResponses as x, getSmallModelForProvider as y };
+export { isGpt56OrAbove as C, isContextManagementEnabledForResponses as S, setModelMappings as T, getModelResponsesApiCompactThreshold as _, normalizeProviderBaseUrl as a, getSmallModelForProvider as b, setProviderConfig as c, getOpencodeGoModelIds as d, getOpencodeGoModelRecords as f, getModelMappings as g, getExtraPromptForModel as h, listEnabledProviders as i, getModelsDevModelMaxOutputTokens as l, startModelsDevCache as m, getRawProviderConfig as n, resolveEffectiveProviderType as o, loadModelsDevProviderOptions as p, isSupportedProviderType as r, resolveProviderConfigForModel as s, getProviderConfig as t, getOpencodeGoModelConfig as u, getReasoningEffortForModel as v, resolveMappedModel as w, isContextManagementEnabledForMessages as x, getSmallModel as y };
 
-//# sourceMappingURL=config-B2OaAnpL.js.map
+//# sourceMappingURL=config-D1F-TyTn.js.map