@longrun-ai/codex-auth 0.1.0

package/dist/llm/chatgpt.js

@@ -0,0 +1,351 @@
+import { readFileSync } from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { Headers, ProxyAgent, fetch } from 'undici';
+import { CODEX_INTERNAL_ORIGINATOR_OVERRIDE_ENV_VAR, DEFAULT_CHATGPT_BASE_URL, DEFAULT_ORIGINATOR, } from '../auth/schema.js';
+import { resolveCodexHome } from '../auth/storage.js';
+export function createChatGptStartRequest(options) {
+    return buildChatGptRequest(options, [buildUserMessage(options)]);
+}
+export function createChatGptContinuationRequest(options) {
+    const nextInput = buildUserMessage(options);
+    return buildChatGptRequest(options, [...options.history, nextInput]);
+}
+function hasUserText(options) {
+    return 'userText' in options;
+}
+function buildUserMessage(options) {
+    const content = hasUserText(options)
+        ? [{ type: 'input_text', text: options.userText }]
+        : options.userContent;
+    return {
+        type: 'message',
+        role: 'user',
+        content,
+    };
+}
+function buildChatGptRequest(options, input) {
+    return {
+        model: options.model,
+        instructions: options.instructions,
+        input,
+        tools: options.tools ?? [],
+        tool_choice: 'auto',
+        parallel_tool_calls: options.parallel_tool_calls ?? false,
+        reasoning: options.reasoning ?? null,
+        store: options.store ?? false,
+        stream: true,
+        include: options.include ?? [],
+        prompt_cache_key: options.prompt_cache_key,
+        text: options.text,
+    };
+}
+export class ChatGptTriggerError extends Error {
+    status;
+    body;
+    statusText;
+    constructor(status, body, statusText) {
+        super(`ChatGPT responses request failed (${status}): ${body || statusText || 'unknown error'}`);
+        this.name = 'ChatGptTriggerError';
+        this.status = status;
+        this.body = body;
+        this.statusText = statusText;
+    }
+}
+async function emitChatGptEvents(response, receiver) {
+    if (!response.body) {
+        return;
+    }
+    const reader = response.body.getReader();
+    const decoder = new TextDecoder();
+    let buffer = '';
+    let dataLines = [];
+    const emit = async () => {
+        if (dataLines.length === 0) {
+            return;
+        }
+        const data = dataLines.join('\n');
+        dataLines = [];
+        if (!data) {
+            return;
+        }
+        let event;
+        try {
+            event = JSON.parse(data);
+        }
+        catch {
+            return;
+        }
+        await receiver.onEvent(event);
+    };
+    while (true) {
+        const { value, done } = await reader.read();
+        buffer += decoder.decode(value ?? new Uint8Array(), { stream: !done });
+        const lines = buffer.split(/\r?\n/);
+        buffer = lines.pop() ?? '';
+        for (const line of lines) {
+            if (line === '') {
+                await emit();
+                continue;
+            }
+            if (line.startsWith('data:')) {
+                dataLines.push(line.slice('data:'.length).trimStart());
+            }
+        }
+        if (done) {
+            break;
+        }
+    }
+    if (buffer.length > 0) {
+        dataLines.push(buffer.trim());
+    }
+    await emit();
+}
+export class ChatGptClient {
+    baseUrl;
+    codexBaseUrl;
+    headers;
+    dispatcher;
+    constructor(credentials, options = {}) {
+        const normalizedBaseUrl = normalizeChatgptBaseUrl(options.baseUrl ?? DEFAULT_CHATGPT_BASE_URL);
+        this.baseUrl = normalizedBaseUrl;
+        this.codexBaseUrl = ensureCodexBaseUrl(normalizedBaseUrl);
+        const originator = options.originator ??
+            process.env[CODEX_INTERNAL_ORIGINATOR_OVERRIDE_ENV_VAR] ??
+            DEFAULT_ORIGINATOR;
+        const userAgent = options.userAgent ?? buildUserAgent(originator, resolveCodexHome(options.codexHome));
+        this.headers = {
+            Authorization: `Bearer ${credentials.accessToken}`,
+            'ChatGPT-Account-ID': credentials.accountId,
+            originator,
+            'User-Agent': userAgent,
+        };
+        this.dispatcher = resolveProxyAgent(this.baseUrl, options);
+    }
+    async request(path, init = {}) {
+        return this.requestAtBase(this.baseUrl, path, init);
+    }
+    async responses(payload, init = {}) {
+        const headers = new Headers(init.headers ?? {});
+        if (!headers.has('accept')) {
+            const stream = Boolean(payload.stream);
+            headers.set('accept', stream ? 'text/event-stream' : 'application/json');
+        }
+        return this.requestAtBase(this.codexBaseUrl, 'responses', {
+            ...init,
+            method: init.method ?? 'POST',
+            headers,
+            json: payload,
+        });
+    }
+    async trigger(payload, receiver, init = {}) {
+        const response = await this.responsesWithRetry(payload, init);
+        if (!response.ok) {
+            const body = await response.text();
+            throw new ChatGptTriggerError(response.status, body, response.statusText);
+        }
+        await emitChatGptEvents(response, receiver);
+        return response.status;
+    }
+    async responsesWithRetry(payload, init) {
+        try {
+            return await this.responses(payload, init);
+        }
+        catch (err) {
+            if (!isRetriableFetchError(err)) {
+                throw err;
+            }
+            await delay(250);
+            return await this.responses(payload, init);
+        }
+    }
+    async requestAtBase(baseUrl, path, init) {
+        const url = new URL(path, baseUrl);
+        const headers = new Headers(init.headers ?? {});
+        for (const [key, value] of Object.entries(this.headers)) {
+            headers.set(key, value);
+        }
+        let body = init.body;
+        if (init.json !== undefined) {
+            body = JSON.stringify(init.json);
+            if (!headers.has('content-type')) {
+                headers.set('content-type', 'application/json');
+            }
+        }
+        const { json, ...rest } = init;
+        return fetch(url.toString(), {
+            ...rest,
+            headers,
+            body,
+            dispatcher: this.dispatcher,
+        });
+    }
+}
+function isRetriableFetchError(err) {
+    if (!(err instanceof TypeError))
+        return false;
+    return err.message.toLowerCase().includes('fetch failed');
+}
+function delay(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+export function credentialsFromAuthState(auth) {
+    if (auth.mode !== 'chatgpt' || !auth.tokens) {
+        throw new Error('ChatGPT token data is not available.');
+    }
+    if (!auth.tokens.accountId) {
+        throw new Error('ChatGPT account id is missing.');
+    }
+    return {
+        accessToken: auth.tokens.accessToken,
+        accountId: auth.tokens.accountId,
+    };
+}
+export async function createChatGptClientFromManager(manager, options = {}) {
+    const auth = await manager.auth();
+    if (!auth) {
+        throw new Error('Auth data is not available.');
+    }
+    const credentials = credentialsFromAuthState(auth);
+    return new ChatGptClient(credentials, options);
+}
+function normalizeChatgptBaseUrl(baseUrl) {
+    let normalized = baseUrl.trim();
+    while (normalized.endsWith('/')) {
+        normalized = normalized.slice(0, -1);
+    }
+    const needsBackendApi = (normalized.startsWith('https://chatgpt.com') ||
+        normalized.startsWith('https://chat.openai.com')) &&
+        !normalized.includes('/backend-api');
+    if (needsBackendApi) {
+        normalized = `${normalized}/backend-api`;
+    }
+    return normalized.endsWith('/') ? normalized : `${normalized}/`;
+}
+function ensureCodexBaseUrl(baseUrl) {
+    const normalized = normalizeChatgptBaseUrl(baseUrl);
+    if (normalized.includes('/codex/')) {
+        return normalized;
+    }
+    return normalized.endsWith('/') ? `${normalized}codex/` : `${normalized}/codex/`;
+}
+function buildUserAgent(originator, codexHome) {
+    const version = resolveClientVersion(codexHome);
+    const osType = resolveOsType();
+    const osVersion = os.release();
+    const arch = resolveArchitecture();
+    const terminal = resolveTerminalToken();
+    const candidate = `${originator}/${version} (${osType} ${osVersion}; ${arch}) ${terminal}`;
+    return sanitizeHeaderValue(candidate);
+}
+function resolveClientVersion(codexHome) {
+    const version = readCodexVersionFromHome(codexHome);
+    if (!version) {
+        return '0.0.0';
+    }
+    return normalizeClientVersion(version) ?? '0.0.0';
+}
+function readCodexVersionFromHome(codexHome) {
+    try {
+        const versionPath = path.join(codexHome, 'version.json');
+        const raw = readFileSync(versionPath, 'utf8');
+        const parsed = JSON.parse(raw);
+        return parsed.latest_version ?? parsed.version;
+    }
+    catch {
+        return undefined;
+    }
+}
+function normalizeClientVersion(version) {
+    const match = version.match(/(\\d+)\\.(\\d+)\\.(\\d+)/);
+    if (!match) {
+        return undefined;
+    }
+    return `${match[1]}.${match[2]}.${match[3]}`;
+}
+function resolveOsType() {
+    switch (os.type()) {
+        case 'Darwin':
+            return 'Mac OS';
+        case 'Windows_NT':
+            return 'Windows';
+        default:
+            return os.type();
+    }
+}
+function resolveArchitecture() {
+    switch (process.arch) {
+        case 'x64':
+            return 'x86_64';
+        default:
+            return process.arch;
+    }
+}
+function resolveTerminalToken() {
+    const termProgram = process.env.TERM_PROGRAM;
+    if (termProgram) {
+        const version = process.env.TERM_PROGRAM_VERSION;
+        return version ? `${termProgram}/${version}` : termProgram;
+    }
+    const term = process.env.TERM;
+    if (term) {
+        return term;
+    }
+    return 'unknown';
+}
+function sanitizeHeaderValue(value) {
+    return Array.from(value)
+        .map((ch) => {
+        if (ch >= ' ' && ch <= '~') {
+            return ch;
+        }
+        return '_';
+    })
+        .join('');
+}
+function getEnvProxy(upper, lower) {
+    return process.env[upper] ?? process.env[lower];
+}
+function shouldBypassProxy(host, noProxy) {
+    if (!noProxy) {
+        return false;
+    }
+    const entries = noProxy
+        .split(',')
+        .map((entry) => entry.trim())
+        .filter(Boolean);
+    if (entries.length === 0) {
+        return false;
+    }
+    if (entries.includes('*')) {
+        return true;
+    }
+    return entries.some((entry) => {
+        if (entry.startsWith('.')) {
+            return host.endsWith(entry);
+        }
+        return host === entry;
+    });
+}
+function resolveProxyAgent(baseUrl, options) {
+    if (options.useEnvProxy === false) {
+        return undefined;
+    }
+    if (options.proxyUrl) {
+        return new ProxyAgent(options.proxyUrl);
+    }
+    const url = new URL(baseUrl);
+    const host = url.hostname;
+    const noProxy = getEnvProxy('NO_PROXY', 'no_proxy');
+    if (shouldBypassProxy(host, noProxy)) {
+        return undefined;
+    }
+    const httpsProxy = getEnvProxy('HTTPS_PROXY', 'https_proxy');
+    const httpProxy = getEnvProxy('HTTP_PROXY', 'http_proxy');
+    const proxyUrl = url.protocol === 'https:' ? (httpsProxy ?? httpProxy) : (httpProxy ?? httpsProxy);
+    if (!proxyUrl) {
+        return undefined;
+    }
+    return new ProxyAgent(proxyUrl);
+}
+//# sourceMappingURL=chatgpt.js.map

package/dist/llm/chatgpt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chatgpt.js","sourceRoot":"","sources":["../../src/llm/chatgpt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAGpD,OAAO,EAEL,0CAA0C,EAC1C,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AA6QtD,MAAM,UAAU,yBAAyB,CACvC,OAAwC;IAExC,OAAO,mBAAmB,CAAC,OAAO,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,OAA2C;IAE3C,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC5C,OAAO,mBAAmB,CAAC,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,WAAW,CAClB,OAAyB;IAEzB,OAAO,UAAU,IAAI,OAAO,CAAC;AAC/B,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAyB;IACjD,MAAM,OAAO,GAAyB,WAAW,CAAC,OAAO,CAAC;QACxD,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;QAClD,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IACxB,OAAO;QACL,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,MAAM;QACZ,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAAkC,EAClC,KAA4B;IAE5B,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,KAAK;QACL,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;QAC1B,WAAW,EAAE,MAAM;QACnB,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,IAAI,KAAK;QACzD,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;QACpC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK;QAC7B,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;QAC9B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,IAAI,EAAE,OAAO,CAAC,IAAI;KACnB,CAAC;AACJ,CAAC;AA4ID,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,MAAM,CAAS;IACf,IAAI,CAAS;IACb,UAAU,CAAS;IAE5B,YAAY,MAAc,EAAE,IAAY,EAAE,UAAkB;QAC1D,KAAK,CAAC,qCAAqC,MAAM,MAAM,IAAI,IAAI,UAAU,IAAI,eAAe,EAAE,CAAC,CAAC;QAChG,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF;AAID,KAAK,UAAU,iBAAiB,CAC9B,QAAwB,EACxB,QAA8B;IAE9B,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,SAAS,GAAa,EAAE,CAAC;IAE7B,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;QACtB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,SAAS,GAAG,EAAE,CAAC;QACf,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,IAAI,KAAkC,CAAC;QACvC,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC,CAAC;IAEF,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QAE3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;gBAChB,MAAM,IAAI,EAAE,CAAC;gBACb,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAED,IAAI,IAAI,EAAE,CAAC;YACT,MAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,IAAI,EAAE,CAAC;AACf,CAAC;AAED,MAAM,OAAO,aAAa;IACP,OAAO,CAAS;IAChB,YAAY,CAAS;IACrB,OAAO,CAAyB;IAChC,UAAU,CAAc;IAEzC,YAAY,WAA+B,EAAE,UAAgC,EAAE;QAC7E,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,OAAO,CAAC,OAAO,IAAI,wBAAwB,CAAC,CAAC;QAC/F,IAAI,CAAC,OAAO,GAAG,iBAAiB,CAAC;QACjC,IAAI,CAAC,YAAY,GAAG,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;QAE1D,MAAM,UAAU,GACd,OAAO,CAAC,UAAU;YAClB,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC;YACvD,kBAAkB,CAAC;QACrB,MAAM,SAAS,GACb,OAAO,CAAC,SAAS,IAAI,cAAc,CAAC,UAAU,EAAE,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QACvF,IAAI,CAAC,OAAO,GAAG;YACb,aAAa,EAAE,UAAU,WAAW,CAAC,WAAW,EAAE;YAClD,oBAAoB,EAAE,WAAW,CAAC,SAAS;YAC3C,UAAU;YACV,YAAY,EAAE,SAAS;SACxB,CAAC;QAEF,IAAI,CAAC,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,OAA2B,EAAE;QACvD,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,SAAS,CACb,OAAgC,EAChC,OAA2B,EAAE;QAE7B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE;YACxD,GAAG,IAAI;YACP,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM;YAC7B,OAAO;YACP,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CACX,OAAgC,EAChC,QAA8B,EAC9B,OAA2B,EAAE;QAE7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,mBAAmB,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC5C,OAAO,QAAQ,CAAC,MAAM,CAAC;IACzB,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,OAAgC,EAChC,IAAwB;QAExB,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChC,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YACjB,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,OAAe,EACf,IAAY,EACZ,IAAwB;QAExB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAEhD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACxD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1B,CAAC;QAED,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACrB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;gBACjC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QAC/B,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YAC3B,GAAG,IAAI;YACP,OAAO;YACP,IAAI;YACJ,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,qBAAqB,CAAC,GAAY;IACzC,IAAI,CAAC,CAAC,GAAG,YAAY,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,OAAO,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAe;IACtD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;QACpC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;KACjC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,OAAoB,EACpB,UAAgC,EAAE;IAElC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,WAAW,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IACnD,OAAO,IAAI,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAe;IAC9C,IAAI,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAChC,OAAO,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,eAAe,GACnB,CAAC,UAAU,CAAC,UAAU,CAAC,qBAAqB,CAAC;QAC3C,UAAU,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC;QACnD,CAAC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACvC,IAAI,eAAe,EAAE,CAAC;QACpB,UAAU,GAAG,GAAG,UAAU,cAAc,CAAC;IAC3C,CAAC;IACD,OAAO,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,CAAC;AAClE,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,UAAU,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,QAAQ,CAAC,CAAC,CAAC,GAAG,UAAU,SAAS,CAAC;AACnF,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB,EAAE,SAAiB;IAC3D,MAAM,OAAO,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IACxC,MAAM,SAAS,GAAG,GAAG,UAAU,IAAI,OAAO,KAAK,MAAM,IAAI,SAAS,KAAK,IAAI,KAAK,QAAQ,EAAE,CAAC;IAC3F,OAAO,mBAAmB,CAAC,SAAS,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,oBAAoB,CAAC,SAAiB;IAC7C,MAAM,OAAO,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,sBAAsB,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC;AACpD,CAAC;AAED,SAAS,wBAAwB,CAAC,SAAiB;IACjD,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkD,CAAC;QAChF,OAAO,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,OAAO,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe;IAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,aAAa;IACpB,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QAClB,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,YAAY;YACf,OAAO,SAAS,CAAC;QACnB;YACE,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB;IAC1B,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,KAAK;YACR,OAAO,QAAQ,CAAC;QAClB;YACE,OAAO,OAAO,CAAC,IAAI,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB;IAC3B,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IAC7C,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACjD,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;IAC7D,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IAC9B,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SACrB,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QACV,IAAI,EAAE,IAAI,GAAG,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC;YAC3B,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,KAAa;IAC/C,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,OAA2B;IAClE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,OAAO;SACpB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAC5B,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,IAAI,KAAK,KAAK,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,OAA6B;IACvE,IAAI,OAAO,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;QAClC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC1B,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACpD,IAAI,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;QACrC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,WAAW,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,WAAW,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAC1D,MAAM,QAAQ,GACZ,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,UAAU,CAAC,CAAC;IAEpF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC"}

package/dist/oauth/browserLogin.d.ts

@@ -0,0 +1,25 @@
+import { AuthCredentialsStoreMode } from '../auth/schema.js';
+export interface BrowserLoginOptions {
+    codexHome?: string;
+    clientId?: string;
+    issuer?: string;
+    port?: number;
+    openBrowser?: boolean;
+    forceState?: string;
+    forcedChatgptWorkspaceId?: string;
+    storeMode?: AuthCredentialsStoreMode;
+    originator?: string;
+}
+export interface LoginServer {
+    authUrl: string;
+    actualPort: number;
+    waitForCompletion(): Promise<void>;
+    cancel(): Promise<void>;
+}
+export declare function runLoginServer(options?: BrowserLoginOptions): Promise<LoginServer>;
+export declare function buildAuthorizeUrl(issuer: string, clientId: string, redirectUri: string, pkce: {
+    codeVerifier: string;
+    codeChallenge: string;
+}, state: string, forcedChatgptWorkspaceId?: string, originator?: string): string;
+export declare function ensureWorkspaceAllowed(expected: string | undefined, idToken: string): void;
+//# sourceMappingURL=browserLogin.d.ts.map

package/dist/oauth/browserLogin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browserLogin.d.ts","sourceRoot":"","sources":["../../src/oauth/browserLogin.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,wBAAwB,EAMzB,MAAM,mBAAmB,CAAC;AAQ3B,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,SAAS,CAAC,EAAE,wBAAwB,CAAC;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AAED,wBAAsB,cAAc,CAAC,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,WAAW,CAAC,CAqH5F;AA2FD,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,EACrD,KAAK,EAAE,MAAM,EACb,wBAAwB,CAAC,EAAE,MAAM,EACjC,UAAU,CAAC,EAAE,MAAM,GAClB,MAAM,CAoBR;AAgBD,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAe1F"}

package/dist/oauth/browserLogin.js

@@ -0,0 +1,231 @@
+import http from 'node:http';
+import net from 'node:net';
+import { URL } from 'node:url';
+import { CLIENT_ID, CODEX_INTERNAL_ORIGINATOR_OVERRIDE_ENV_VAR, DEFAULT_ISSUER, DEFAULT_LOGIN_PORT, DEFAULT_ORIGINATOR, } from '../auth/schema.js';
+import { persistTokens, resolveCodexHome } from '../auth/storage.js';
+import { getBooleanClaim, getStringClaim, jwtAuthClaims } from '../utils/jwt.js';
+import { openBrowser } from '../utils/openBrowser.js';
+import { generatePkce, generateState } from './pkce.js';
+import { exchangeCodeForTokens, obtainApiKey } from './tokenExchange.js';
+import { parseIdToken } from './tokenParsing.js';
+export async function runLoginServer(options = {}) {
+    const codexHome = resolveCodexHome(options.codexHome);
+    const clientId = options.clientId ?? CLIENT_ID;
+    const issuer = (options.issuer ?? DEFAULT_ISSUER).replace(/\/$/, '');
+    const port = options.port ?? DEFAULT_LOGIN_PORT;
+    const openInBrowser = options.openBrowser ?? true;
+    const storeMode = options.storeMode ?? 'file';
+    const originator = options.originator ??
+        process.env[CODEX_INTERNAL_ORIGINATOR_OVERRIDE_ENV_VAR] ??
+        DEFAULT_ORIGINATOR;
+    const pkce = generatePkce();
+    const state = options.forceState ?? generateState();
+    const { server, actualPort } = await bindServer(port);
+    const redirectUri = `http://localhost:${actualPort}/auth/callback`;
+    const authUrl = buildAuthorizeUrl(issuer, clientId, redirectUri, pkce, state, options.forcedChatgptWorkspaceId, originator);
+    if (openInBrowser) {
+        openBrowser(authUrl);
+    }
+    const completion = createCompletion();
+    server.on('request', async (req, res) => {
+        const url = new URL(req.url ?? '/', 'http://localhost');
+        if (url.pathname === '/auth/callback') {
+            try {
+                const queryState = url.searchParams.get('state');
+                if (queryState !== state) {
+                    respondPlain(res, 400, 'State mismatch');
+                    return;
+                }
+                const code = url.searchParams.get('code');
+                if (!code) {
+                    respondPlain(res, 400, 'Missing authorization code');
+                    return;
+                }
+                const tokens = await exchangeCodeForTokens(issuer, clientId, redirectUri, pkce.codeVerifier, code);
+                ensureWorkspaceAllowed(options.forcedChatgptWorkspaceId, tokens.idToken);
+                let apiKey;
+                try {
+                    apiKey = await obtainApiKey(issuer, clientId, tokens.idToken);
+                }
+                catch {
+                    apiKey = undefined;
+                }
+                persistTokens(codexHome, apiKey, tokens.idToken, tokens.accessToken, tokens.refreshToken, storeMode);
+                const successUrl = composeSuccessUrl(actualPort, issuer, tokens.idToken, tokens.accessToken);
+                res.statusCode = 302;
+                res.setHeader('Location', successUrl);
+                res.setHeader('Connection', 'close');
+                res.end();
+            }
+            catch (error) {
+                const message = error instanceof Error ? error.message : String(error);
+                respondPlain(res, 500, `Token exchange failed: ${message}`);
+            }
+            return;
+        }
+        if (url.pathname === '/success') {
+            respondHtml(res, 200, successHtml());
+            completion.resolve();
+            server.close();
+            return;
+        }
+        if (url.pathname === '/cancel') {
+            respondPlain(res, 200, 'Login cancelled');
+            completion.reject(new Error('Login cancelled'));
+            server.close();
+            return;
+        }
+        respondPlain(res, 404, 'Not Found');
+    });
+    return {
+        authUrl,
+        actualPort,
+        waitForCompletion: () => completion.promise,
+        cancel: async () => {
+            await sendCancelRequest(actualPort);
+        },
+    };
+}
+function createCompletion() {
+    let resolve;
+    let reject;
+    const promise = new Promise((res, rej) => {
+        resolve = res;
+        reject = rej;
+    });
+    return { promise, resolve: resolve, reject: reject };
+}
+async function bindServer(port) {
+    const maxAttempts = 10;
+    const retryDelayMs = 200;
+    let cancelAttempted = false;
+    for (let attempt = 0; attempt < maxAttempts; attempt += 1) {
+        const server = http.createServer();
+        const result = await new Promise((resolve, reject) => {
+            server.once('error', (err) => {
+                reject(err);
+            });
+            server.listen(port, '127.0.0.1', () => {
+                const address = server.address();
+                if (!address || typeof address === 'string') {
+                    reject(new Error('Unable to determine the server port'));
+                    return;
+                }
+                resolve({ server, actualPort: address.port });
+            });
+        }).catch(async (err) => {
+            if (err instanceof Error && err.code === 'EADDRINUSE') {
+                if (!cancelAttempted) {
+                    cancelAttempted = true;
+                    await sendCancelRequest(port);
+                }
+                await sleep(retryDelayMs);
+                return null;
+            }
+            throw err;
+        });
+        if (result) {
+            return result;
+        }
+    }
+    throw new Error(`Port 127.0.0.1:${port} is already in use`);
+}
+function respondPlain(res, status, body) {
+    res.statusCode = status;
+    res.setHeader('Content-Type', 'text/plain; charset=utf-8');
+    res.setHeader('Connection', 'close');
+    res.end(body);
+}
+function respondHtml(res, status, body) {
+    res.statusCode = status;
+    res.setHeader('Content-Type', 'text/html; charset=utf-8');
+    res.setHeader('Connection', 'close');
+    res.end(body);
+}
+function successHtml() {
+    return `<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <title>Codex login complete</title>
+    <style>
+      body { font-family: system-ui, -apple-system, sans-serif; margin: 40px; }
+      h1 { font-size: 20px; }
+      p { color: #555; }
+    </style>
+  </head>
+  <body>
+    <h1>Signed in</h1>
+    <p>You can return to the terminal.</p>
+  </body>
+</html>`;
+}
+export function buildAuthorizeUrl(issuer, clientId, redirectUri, pkce, state, forcedChatgptWorkspaceId, originator) {
+    const query = {
+        response_type: 'code',
+        client_id: clientId,
+        redirect_uri: redirectUri,
+        scope: 'openid profile email offline_access',
+        code_challenge: pkce.codeChallenge,
+        code_challenge_method: 'S256',
+        id_token_add_organizations: 'true',
+        codex_cli_simplified_flow: 'true',
+        state,
+        originator: originator ?? DEFAULT_ORIGINATOR,
+    };
+    if (forcedChatgptWorkspaceId) {
+        query.allowed_workspace_id = forcedChatgptWorkspaceId;
+    }
+    const qs = new URLSearchParams(query);
+    return `${issuer}/oauth/authorize?${qs.toString()}`;
+}
+async function sendCancelRequest(port) {
+    await new Promise((resolve) => {
+        const client = net.connect({ host: '127.0.0.1', port }, () => {
+            client.write(`GET /cancel HTTP/1.1\r\nHost: 127.0.0.1:${port}\r\nConnection: close\r\n\r\n`);
+        });
+        client.setTimeout(2000, () => {
+            client.destroy();
+            resolve();
+        });
+        client.on('error', () => resolve());
+        client.on('close', () => resolve());
+    });
+}
+export function ensureWorkspaceAllowed(expected, idToken) {
+    if (!expected) {
+        return;
+    }
+    const info = parseIdToken(idToken);
+    const actual = info.chatgpt_account_id;
+    if (!actual) {
+        throw new Error('Login is restricted to a specific workspace, but the token did not include an chatgpt_account_id claim.');
+    }
+    if (actual !== expected) {
+        throw new Error(`Login is restricted to workspace id ${expected}.`);
+    }
+}
+function composeSuccessUrl(port, issuer, idToken, accessToken) {
+    const tokenClaims = jwtAuthClaims(idToken);
+    const accessClaims = jwtAuthClaims(accessToken);
+    const orgId = getStringClaim(tokenClaims.organization_id) ?? '';
+    const projectId = getStringClaim(tokenClaims.project_id) ?? '';
+    const completed = getBooleanClaim(tokenClaims.completed_platform_onboarding) ?? false;
+    const isOwner = getBooleanClaim(tokenClaims.is_org_owner) ?? false;
+    const needsSetup = !completed && isOwner;
+    const planType = getStringClaim(accessClaims.chatgpt_plan_type) ?? '';
+    const platformUrl = issuer === DEFAULT_ISSUER ? 'https://platform.openai.com' : 'https://platform.api.openai.org';
+    const params = new URLSearchParams({
+        id_token: idToken,
+        needs_setup: String(needsSetup),
+        org_id: orgId,
+        project_id: projectId,
+        plan_type: planType,
+        platform_url: platformUrl,
+    });
+    return `http://localhost:${port}/success?${params.toString()}`;
+}
+async function sleep(ms) {
+    await new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=browserLogin.js.map

package/dist/oauth/browserLogin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browserLogin.js","sourceRoot":"","sources":["../../src/oauth/browserLogin.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B,OAAO,EAEL,SAAS,EACT,0CAA0C,EAC1C,cAAc,EACd,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAqBjD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,UAA+B,EAAE;IACpE,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,SAAS,CAAC;IAC/C,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,cAAc,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,kBAAkB,CAAC;IAChD,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC;IAClD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,MAAM,UAAU,GACd,OAAO,CAAC,UAAU;QAClB,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC;QACvD,kBAAkB,CAAC;IAErB,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,IAAI,aAAa,EAAE,CAAC;IAEpD,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,oBAAoB,UAAU,gBAAgB,CAAC;IACnE,MAAM,OAAO,GAAG,iBAAiB,CAC/B,MAAM,EACN,QAAQ,EACR,WAAW,EACX,IAAI,EACJ,KAAK,EACL,OAAO,CAAC,wBAAwB,EAChC,UAAU,CACX,CAAC;IAEF,IAAI,aAAa,EAAE,CAAC;QAClB,WAAW,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC;IAEtC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAExD,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACjD,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;oBACzB,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC;oBACzC,OAAO;gBACT,CAAC;gBACD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,4BAA4B,CAAC,CAAC;oBACrD,OAAO;gBACT,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,qBAAqB,CACxC,MAAM,EACN,QAAQ,EACR,WAAW,EACX,IAAI,CAAC,YAAY,EACjB,IAAI,CACL,CAAC;gBAEF,sBAAsB,CAAC,OAAO,CAAC,wBAAwB,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;gBAEzE,IAAI,MAA0B,CAAC;gBAC/B,IAAI,CAAC;oBACH,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;gBAChE,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,GAAG,SAAS,CAAC;gBACrB,CAAC;gBAED,aAAa,CACX,SAAS,EACT,MAAM,EACN,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,YAAY,EACnB,SAAS,CACV,CAAC;gBAEF,MAAM,UAAU,GAAG,iBAAiB,CAClC,UAAU,EACV,MAAM,EACN,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,WAAW,CACnB,CAAC;gBACF,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;gBACtC,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;gBACrC,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvE,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,0BAA0B,OAAO,EAAE,CAAC,CAAC;YAC9D,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;YAChC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;YACrC,UAAU,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC/B,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,CAAC;YAC1C,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAChD,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QAED,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,OAAO;QACP,UAAU;QACV,iBAAiB,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO;QAC3C,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,MAAM,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACtC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB;IAKvB,IAAI,OAAmB,CAAC;IACxB,IAAI,MAA4B,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,OAAO,GAAG,GAAG,CAAC;QACd,MAAM,GAAG,GAAG,CAAC;IACf,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAQ,EAAE,MAAM,EAAE,MAAO,EAAE,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,MAAM,WAAW,GAAG,EAAE,CAAC;IACvB,MAAM,YAAY,GAAG,GAAG,CAAC;IACzB,IAAI,eAAe,GAAG,KAAK,CAAC;IAE5B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAG7B,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC3B,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;gBACpC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAC5C,MAAM,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC;oBACzD,OAAO;gBACT,CAAC;gBACD,OAAO,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAChD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACrB,IAAI,GAAG,YAAY,KAAK,IAAK,GAA6B,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACjF,IAAI,CAAC,eAAe,EAAE,CAAC;oBACrB,eAAe,GAAG,IAAI,CAAC;oBACvB,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;gBAChC,CAAC;gBACD,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC;gBAC1B,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;QAEH,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,oBAAoB,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,YAAY,CAAC,GAAwB,EAAE,MAAc,EAAE,IAAY;IAC1E,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;IACxB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;IAC3D,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACrC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,GAAwB,EAAE,MAAc,EAAE,IAAY;IACzE,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;IACxB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;IAC1D,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACrC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,WAAW;IAClB,OAAO;;;;;;;;;;;;;;;QAeD,CAAC;AACT,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,QAAgB,EAChB,WAAmB,EACnB,IAAqD,EACrD,KAAa,EACb,wBAAiC,EACjC,UAAmB;IAEnB,MAAM,KAAK,GAA2B;QACpC,aAAa,EAAE,MAAM;QACrB,SAAS,EAAE,QAAQ;QACnB,YAAY,EAAE,WAAW;QACzB,KAAK,EAAE,qCAAqC;QAC5C,cAAc,EAAE,IAAI,CAAC,aAAa;QAClC,qBAAqB,EAAE,MAAM;QAC7B,0BAA0B,EAAE,MAAM;QAClC,yBAAyB,EAAE,MAAM;QACjC,KAAK;QACL,UAAU,EAAE,UAAU,IAAI,kBAAkB;KAC7C,CAAC;IAEF,IAAI,wBAAwB,EAAE,CAAC;QAC7B,KAAK,CAAC,oBAAoB,GAAG,wBAAwB,CAAC;IACxD,CAAC;IAED,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO,GAAG,MAAM,oBAAoB,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;AACtD,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAC3C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE;YAC3D,MAAM,CAAC,KAAK,CAAC,2CAA2C,IAAI,+BAA+B,CAAC,CAAC;QAC/F,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE;YAC3B,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAA4B,EAAE,OAAe;IAClF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC;IACvC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,yGAAyG,CAC1G,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,GAAG,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAY,EACZ,MAAc,EACd,OAAe,EACf,WAAmB;IAEnB,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,YAAY,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAEhD,MAAM,KAAK,GAAG,cAAc,CAAC,WAAW,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;IAChE,MAAM,SAAS,GAAG,cAAc,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAC/D,MAAM,SAAS,GAAG,eAAe,CAAC,WAAW,CAAC,6BAA6B,CAAC,IAAI,KAAK,CAAC;IACtF,MAAM,OAAO,GAAG,eAAe,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC;IACnE,MAAM,UAAU,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC;IACzC,MAAM,QAAQ,GAAG,cAAc,CAAC,YAAY,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;IAEtE,MAAM,WAAW,GACf,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,iCAAiC,CAAC;IAEhG,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC;QAC/B,MAAM,EAAE,KAAK;QACb,UAAU,EAAE,SAAS;QACrB,SAAS,EAAE,QAAQ;QACnB,YAAY,EAAE,WAAW;KAC1B,CAAC,CAAC;IAEH,OAAO,oBAAoB,IAAI,YAAY,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,EAAU;IAC7B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC1D,CAAC"}

package/dist/oauth/deviceCode.d.ts

@@ -0,0 +1,21 @@
+import { AuthCredentialsStoreMode } from '../auth/schema.js';
+export interface DeviceCode {
+    verificationUrl: string;
+    userCode: string;
+    deviceAuthId: string;
+    interval: number;
+}
+export interface DeviceCodeOptions {
+    codexHome?: string;
+    issuer?: string;
+    clientId?: string;
+    forcedChatgptWorkspaceId?: string;
+    storeMode?: AuthCredentialsStoreMode;
+}
+export interface DeviceCodeLoginOptions extends DeviceCodeOptions {
+    onDeviceCode?: (code: DeviceCode) => void;
+}
+export declare function requestDeviceCode(options?: DeviceCodeOptions): Promise<DeviceCode>;
+export declare function completeDeviceCodeLogin(options: DeviceCodeOptions, deviceCode: DeviceCode): Promise<void>;
+export declare function runDeviceCodeLogin(options?: DeviceCodeLoginOptions): Promise<DeviceCode>;
+//# sourceMappingURL=deviceCode.d.ts.map

package/dist/oauth/deviceCode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deviceCode.d.ts","sourceRoot":"","sources":["../../src/oauth/deviceCode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAA6B,MAAM,mBAAmB,CAAC;AAMxF,MAAM,WAAW,UAAU;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,SAAS,CAAC,EAAE,wBAAwB,CAAC;CACtC;AAED,MAAM,WAAW,sBAAuB,SAAQ,iBAAiB;IAC/D,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,CAAC;CAC3C;AAED,wBAAsB,iBAAiB,CAAC,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,UAAU,CAAC,CAwC5F;AAED,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,IAAI,CAAC,CAwCf;AAED,wBAAsB,kBAAkB,CACtC,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,UAAU,CAAC,CAKrB"}