@monotykamary/pi-better-openai 0.1.23

package/package.json

@@ -0,0 +1,94 @@
+{
+  "name": "@monotykamary/pi-better-openai",
+  "version": "0.1.23",
+  "description": "Improve OpenAI in pi with fast mode, usage stats, realtime voice, image generation, and footer polish.",
+  "keywords": [
+    "fast",
+    "gpt",
+    "image",
+    "openai",
+    "pi",
+    "pi-extension",
+    "pi-package",
+    "priority",
+    "service-tier",
+    "voice",
+    "webrtc"
+  ],
+  "homepage": "https://github.com/monotykamary/pi-better-openai#readme",
+  "bugs": {
+    "url": "https://github.com/monotykamary/pi-better-openai/issues"
+  },
+  "license": "MIT",
+  "author": "monotykamary",
+  "contributors": [
+    {
+      "name": "Matt Leong",
+      "url": "https://github.com/mattleong"
+    }
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/monotykamary/pi-better-openai.git"
+  },
+  "files": [
+    "index.ts",
+    "src/",
+    "README.md",
+    "LICENSE",
+    "THIRD_PARTY_NOTICES.md"
+  ],
+  "type": "module",
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "https-proxy-agent": "9.1.0",
+    "proxy-from-env": "2.1.0",
+    "sharp": "0.35.3",
+    "undici": "8.10.0",
+    "ws": "8.21.2"
+  },
+  "devDependencies": {
+    "@earendil-works/pi-coding-agent": "0.80.6",
+    "@earendil-works/pi-tui": "0.80.6",
+    "@types/node": "~22.19.0",
+    "@types/proxy-from-env": "1.0.4",
+    "@types/ws": "8.18.1",
+    "oxfmt": "^0.47.0",
+    "oxlint": "^1.62.0",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.5"
+  },
+  "peerDependencies": {
+    "@earendil-works/pi-coding-agent": "*",
+    "@earendil-works/pi-tui": "*"
+  },
+  "optionalDependencies": {
+    "@oh-my-pi/pi-natives-darwin-arm64": "17.2.9",
+    "@oh-my-pi/pi-natives-darwin-x64": "17.2.9",
+    "@oh-my-pi/pi-natives-linux-arm64": "17.2.9",
+    "@oh-my-pi/pi-natives-linux-x64": "17.2.9",
+    "@oh-my-pi/pi-natives-win32-x64": "17.2.9"
+  },
+  "overrides": {
+    "postcss": "8.5.25"
+  },
+  "engines": {
+    "node": ">=22.19.0"
+  },
+  "pi": {
+    "extensions": [
+      "./index.ts"
+    ]
+  },
+  "scripts": {
+    "check": "npm run typecheck && npm run lint && npm run format:check && npm test",
+    "format": "oxfmt .",
+    "format:check": "oxfmt --check .",
+    "lint": "oxlint --deny-warnings index.ts src/*.ts src/*/*.ts tests/*.ts",
+    "lint:fix": "oxlint --fix index.ts src/*.ts src/*/*.ts tests/*.ts",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit"
+  }
+}

package/src/codex-auth.ts

@@ -0,0 +1,136 @@
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
+import { piAgentDir } from "./paths.ts";
+
+export const AUTH_FILE = join(piAgentDir(), "auth.json");
+
+export type CodexCredentials = {
+  accessToken: string;
+  accountId: string;
+};
+
+export type CodexCredentialsWithSource = CodexCredentials & {
+  source: "modelRegistry" | "authFile";
+};
+
+function waitForSignal<T>(operation: Promise<T>, signal?: AbortSignal): Promise<T> {
+  if (!signal) return operation;
+  if (signal.aborted) return Promise.reject(signal.reason ?? new Error("Operation was aborted."));
+
+  return new Promise<T>((resolve, reject) => {
+    const onAbort = () => {
+      cleanup();
+      reject(signal.reason ?? new Error("Operation was aborted."));
+    };
+    const cleanup = () => signal.removeEventListener("abort", onAbort);
+    signal.addEventListener("abort", onAbort, { once: true });
+    void operation.then(
+      (value) => {
+        cleanup();
+        resolve(value);
+      },
+      (error: unknown) => {
+        cleanup();
+        reject(error);
+      },
+    );
+  });
+}
+
+function decodeBase64Url(value: string): string {
+  const normalized = value.replace(/-/g, "+").replace(/_/g, "/");
+  const padded = normalized + "=".repeat((4 - (normalized.length % 4)) % 4);
+  return Buffer.from(padded, "base64").toString("utf8");
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
+export function extractAccountIdFromJwt(token: string): string | undefined {
+  try {
+    const [, payload] = token.split(".");
+    if (!payload) return undefined;
+    const parsed = JSON.parse(decodeBase64Url(payload)) as unknown;
+    if (!isRecord(parsed)) return undefined;
+    const auth = parsed["https://api.openai.com/auth"];
+    if (!isRecord(auth)) return undefined;
+    const accountId = auth.chatgpt_account_id;
+    return typeof accountId === "string" && accountId.trim() ? accountId.trim() : undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+export function parseCodexRegistryCredentials(
+  raw: string | undefined,
+): CodexCredentials | undefined {
+  const value = raw?.trim();
+  if (!value) return undefined;
+  try {
+    const parsed = JSON.parse(value) as unknown;
+    if (isRecord(parsed)) {
+      const accessToken =
+        typeof parsed.access === "string"
+          ? parsed.access
+          : typeof parsed.token === "string"
+            ? parsed.token
+            : undefined;
+      const accountId =
+        typeof parsed.accountId === "string"
+          ? parsed.accountId
+          : typeof parsed.account_id === "string"
+            ? parsed.account_id
+            : undefined;
+      if (accessToken?.trim() && accountId?.trim())
+        return { accessToken: accessToken.trim(), accountId: accountId.trim() };
+    }
+  } catch {
+    // Plain bearer token is expected for openai-codex in pi.
+  }
+  const accountId = extractAccountIdFromJwt(value);
+  return accountId ? { accessToken: value, accountId } : undefined;
+}
+
+export function readCodexAuth(): CodexCredentials | undefined {
+  try {
+    const auth = JSON.parse(readFileSync(AUTH_FILE, "utf8")) as Record<
+      string,
+      | {
+          type?: string;
+          access?: string | null;
+          accountId?: string | null;
+          account_id?: string | null;
+          expires?: number | null;
+        }
+      | undefined
+    >;
+    const entry = auth["openai-codex"];
+    if (entry?.type !== "oauth") return undefined;
+    if (typeof entry.expires === "number" && Date.now() >= entry.expires) return undefined;
+    const accessToken = entry.access?.trim();
+    const accountId = (entry.accountId ?? entry.account_id)?.trim();
+    return accessToken && accountId ? { accessToken, accountId } : undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+export async function getCodexCredentials(
+  ctx?: Pick<ExtensionContext, "modelRegistry">,
+  signal?: AbortSignal,
+): Promise<CodexCredentialsWithSource | undefined> {
+  if (signal?.aborted) throw signal.reason ?? new Error("Operation was aborted.");
+  const registryRequest = ctx?.modelRegistry?.getApiKeyForProvider("openai-codex");
+  const registryToken = registryRequest
+    ? await waitForSignal(
+        registryRequest.catch(() => undefined),
+        signal,
+      )
+    : undefined;
+  const registryCredentials = parseCodexRegistryCredentials(registryToken);
+  if (registryCredentials) return { ...registryCredentials, source: "modelRegistry" };
+  const auth = readCodexAuth();
+  return auth ? { ...auth, source: "authFile" } : undefined;
+}