@nick3/copilot-api 1.5.6 → 1.6.0

package/dist/{start-fPbCDj4c.js → start-DQlnH71A.js}

@@ -1,8 +1,8 @@
-import { O as state, a as cacheVsCodeDeviceId, h as getDeviceCode, i as cacheVSCodeVersion, j as initOpencodeVersion, m as getGitHubUser, n as cacheMacMachineId, o as cacheVsCodeSessionId, t as pollAccessToken } from "./poll-access-token-DFooFWhY.js";
-import { m as saveAccountToken, n as parseAccountType, r as addAccountToRegistry } from "./account-AacnHem5.js";
+import { P as initOpencodeVersion, a as cacheVsCodeSessionId, h as getDeviceCode, i as cacheVsCodeDeviceId, k as state, m as getGitHubUser, n as cacheMacMachineId, r as cacheVSCodeVersion, t as pollAccessToken } from "./poll-access-token-Bc6VwWab.js";
+import { h as saveAccountToken, n as parseAccountType, r as addAccountToRegistry } from "./account-B2tSWtVS.js";
 import { r as ensurePaths } from "./paths-DGlr310R.js";
-import "./get-copilot-token-cha9rQwA.js";
-import { b as mergeConfigWithDefaults, m as isAccountAffinityEnabled, t as accountsManager, u as getModelRefreshIntervalMs } from "./accounts-manager-BE-Dq5Wn.js";
+import "./get-copilot-token-p17sJyPU.js";
+import { T as isAccountAffinityEnabled, j as mergeConfigWithDefaults, n as applySharedSessionAffinityRetention, t as accountsManager, x as getModelRefreshIntervalMs } from "./accounts-manager-CAyZJSn8.js";
 import { defineCommand } from "citty";
 import consola from "consola";
 import { execSync } from "node:child_process";
@@ -183,6 +183,7 @@ async function runServer(options) {
 	state.rateLimitWait = options.rateLimitWait;
 	state.showToken = options.showToken;
 	await ensurePaths();
+	applySharedSessionAffinityRetention();
 	await cacheVSCodeVersion();
 	cacheMacMachineId();
 	cacheVsCodeSessionId();
@@ -214,7 +215,7 @@ async function runServer(options) {
 		await setupClaudeCode(models, serverUrl);
 	}
 	consola.box(`🌐 Admin UI: ${serverUrl}/admin`);
-	const { server } = await import("./server-DVpkQrk2.js");
+	const { server } = await import("./server-CFijvv3C.js");
 	serve({
 		fetch: server.fetch,
 		port: options.port,
@@ -316,4 +317,4 @@ const start = defineCommand({
 
 //#endregion
 export { runServer, start };
-//# sourceMappingURL=start-fPbCDj4c.js.map
+//# sourceMappingURL=start-DQlnH71A.js.map

package/dist/start-DQlnH71A.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"start-DQlnH71A.js","names":["process","commandBlock: string","accountType: AccountType"],"sources":["../src/lib/proxy.ts","../src/lib/shell.ts","../src/start.ts"],"sourcesContent":["import consola from \"consola\"\nimport { getProxyForUrl } from \"proxy-from-env\"\nimport { Agent, ProxyAgent, setGlobalDispatcher, type Dispatcher } from \"undici\"\n\nexport function initProxyFromEnv(): void {\n  if (typeof Bun !== \"undefined\") return\n\n  try {\n    const direct = new Agent()\n    const proxies = new Map<string, ProxyAgent>()\n\n    // We only need a minimal dispatcher that implements `dispatch` at runtime.\n    // Typing the object as `Dispatcher` forces TypeScript to require many\n    // additional methods. Instead, keep a plain object and cast when passing\n    // to `setGlobalDispatcher`.\n    const dispatcher = {\n      dispatch(\n        options: Dispatcher.DispatchOptions,\n        handler: Dispatcher.DispatchHandler,\n      ) {\n        try {\n          const origin =\n            typeof options.origin === \"string\" ?\n              new URL(options.origin)\n            : (options.origin as URL)\n          const get = getProxyForUrl as unknown as (\n            u: string,\n          ) => string | undefined\n          const raw = get(origin.toString())\n          const proxyUrl = raw && raw.length > 0 ? raw : undefined\n          if (!proxyUrl) {\n            consola.debug(`HTTP proxy bypass: ${origin.hostname}`)\n            return (direct as unknown as Dispatcher).dispatch(options, handler)\n          }\n          let agent = proxies.get(proxyUrl)\n          if (!agent) {\n            agent = new ProxyAgent(proxyUrl)\n            proxies.set(proxyUrl, agent)\n          }\n          let label = proxyUrl\n          try {\n            const u = new URL(proxyUrl)\n            label = `${u.protocol}//${u.host}`\n          } catch {\n            /* noop */\n          }\n          consola.debug(`HTTP proxy route: ${origin.hostname} via ${label}`)\n          return (agent as unknown as Dispatcher).dispatch(options, handler)\n        } catch {\n          return (direct as unknown as Dispatcher).dispatch(options, handler)\n        }\n      },\n      close() {\n        return direct.close()\n      },\n      destroy() {\n        return direct.destroy()\n      },\n    }\n\n    setGlobalDispatcher(dispatcher as unknown as Dispatcher)\n    consola.debug(\"HTTP proxy configured from environment (per-URL)\")\n  } catch (err) {\n    consola.debug(\"Proxy setup skipped:\", err)\n  }\n}\n","import { execSync } from \"node:child_process\"\nimport process from \"node:process\"\n\ntype ShellName = \"bash\" | \"zsh\" | \"fish\" | \"powershell\" | \"cmd\" | \"sh\"\ntype EnvVars = Record<string, string | undefined>\n\nfunction getShell(): ShellName {\n  const { platform, ppid, env } = process\n\n  if (platform === \"win32\") {\n    try {\n      const command = `wmic process get ParentProcessId,Name | findstr \"${ppid}\"`\n      const parentProcess = execSync(command, { stdio: \"pipe\" }).toString()\n\n      if (parentProcess.toLowerCase().includes(\"powershell.exe\")) {\n        return \"powershell\"\n      }\n    } catch {\n      return \"cmd\"\n    }\n\n    return \"cmd\"\n  } else {\n    const shellPath = env.SHELL\n    if (shellPath) {\n      if (shellPath.endsWith(\"zsh\")) return \"zsh\"\n      if (shellPath.endsWith(\"fish\")) return \"fish\"\n      if (shellPath.endsWith(\"bash\")) return \"bash\"\n    }\n\n    return \"sh\"\n  }\n}\n\n/**\n * Generates a copy-pasteable script to set multiple environment variables\n * and run a subsequent command.\n * @param {EnvVars} envVars - An object of environment variables to set.\n * @param {string} commandToRun - The command to run after setting the variables.\n * @returns {string} The formatted script string.\n */\nexport function generateEnvScript(\n  envVars: EnvVars,\n  commandToRun: string = \"\",\n): string {\n  const shell = getShell()\n  const filteredEnvVars = Object.entries(envVars).filter(\n    ([, value]) => value !== undefined,\n  ) as Array<[string, string]>\n\n  let commandBlock: string\n\n  switch (shell) {\n    case \"powershell\": {\n      commandBlock = filteredEnvVars\n        .map(([key, value]) => `$env:${key} = ${value}`)\n        .join(\"; \")\n      break\n    }\n    case \"cmd\": {\n      commandBlock = filteredEnvVars\n        .map(([key, value]) => `set ${key}=${value}`)\n        .join(\" & \")\n      break\n    }\n    case \"fish\": {\n      commandBlock = filteredEnvVars\n        .map(([key, value]) => `set -gx ${key} ${value}`)\n        .join(\"; \")\n      break\n    }\n    default: {\n      // bash, zsh, sh\n      const assignments = filteredEnvVars\n        .map(([key, value]) => `${key}=${value}`)\n        .join(\" \")\n      commandBlock = filteredEnvVars.length > 0 ? `export ${assignments}` : \"\"\n      break\n    }\n  }\n\n  if (commandBlock && commandToRun) {\n    const separator = shell === \"cmd\" ? \" & \" : \" && \"\n    return `${commandBlock}${separator}${commandToRun}`\n  }\n\n  return commandBlock || commandToRun\n}\n","#!/usr/bin/env node\n\nimport { defineCommand } from \"citty\"\nimport clipboard from \"clipboardy\"\nimport consola from \"consola\"\nimport { serve, type ServerHandler } from \"srvx\"\n\nimport { accountsManager } from \"./lib/accounts-manager\"\nimport { addAccountToRegistry, saveAccountToken } from \"./lib/accounts-registry\"\nimport {\n  getModelRefreshIntervalMs,\n  isAccountAffinityEnabled,\n  mergeConfigWithDefaults,\n} from \"./lib/config\"\nimport { initOpencodeVersion } from \"./lib/opencode\"\nimport { ensurePaths } from \"./lib/paths\"\nimport { initProxyFromEnv } from \"./lib/proxy\"\nimport { applySharedSessionAffinityRetention } from \"./lib/session-affinity-store\"\nimport { generateEnvScript } from \"./lib/shell\"\nimport { state } from \"./lib/state\"\nimport { parseAccountType, type AccountType } from \"./lib/types/account\"\nimport {\n  cacheMacMachineId,\n  cacheVSCodeVersion,\n  cacheVsCodeSessionId,\n  cacheVsCodeDeviceId,\n} from \"./lib/utils\"\nimport { getDeviceCode } from \"./services/github/get-device-code\"\nimport { getGitHubUser } from \"./services/github/get-user\"\nimport { pollAccessToken } from \"./services/github/poll-access-token\"\n\ninterface RunServerOptions {\n  port: number\n  verbose: boolean\n  accountType: AccountType\n  manual: boolean\n  rateLimit?: number\n  rateLimitWait: boolean\n  githubToken?: string\n  claudeCode: boolean\n  showToken: boolean\n  proxyEnv: boolean\n  skipAuth: boolean\n}\n\n/**\n * Run the interactive authentication flow to add a new account.\n * Called automatically when no accounts are found.\n */\nasync function runAuthFlow(accountType: AccountType): Promise<void> {\n  consola.warn(\"No accounts found. Starting authentication flow...\")\n\n  // Start device code flow\n  const deviceResponse = await getDeviceCode()\n  consola.info(\n    `Please enter the code \"${deviceResponse.user_code}\" at ${deviceResponse.verification_uri}`,\n  )\n\n  // Poll for access token\n  const token = await pollAccessToken(deviceResponse)\n\n  if (state.showToken) {\n    consola.info(\"GitHub token:\", token)\n  }\n\n  // Get user info to determine account ID\n  const user = await getGitHubUser({\n    githubToken: token,\n    accountType,\n  })\n  const accountId = user.login\n\n  // Save token and add to registry\n  await saveAccountToken(accountId, token)\n  await addAccountToRegistry({\n    id: accountId,\n    accountType,\n    addedAt: Date.now(),\n  })\n\n  consola.success(`Account \"${accountId}\" added successfully!`)\n}\n\nfunction logClaudeCodeTip(): void {\n  consola.log(\n    \"\\n💡 Tip: The --claude-code flag simply generates a clipboard command for launching Claude Code. \\n\"\n      + \"All models remain fully accessible without this flag, just configure the model ID directly in your settings.json file.\",\n  )\n}\n\ntype AvailableModels = NonNullable<\n  ReturnType<typeof accountsManager.getFirstAccountModels>\n>\n\nasync function setupClaudeCode(\n  models: AvailableModels,\n  serverUrl: string,\n): Promise<void> {\n  const selectedModel = await consola.prompt(\n    \"Select a model to use with Claude Code\",\n    {\n      type: \"select\",\n      options: models.data.map((model) => model.id),\n    },\n  )\n\n  const selectedSmallModel = await consola.prompt(\n    \"Select a small model to use with Claude Code\",\n    {\n      type: \"select\",\n      options: models.data.map((model) => model.id),\n    },\n  )\n\n  const command = generateEnvScript(\n    {\n      ANTHROPIC_BASE_URL: serverUrl,\n      ANTHROPIC_AUTH_TOKEN: \"dummy\",\n      ANTHROPIC_MODEL: selectedModel,\n      ANTHROPIC_DEFAULT_SONNET_MODEL: selectedModel,\n      ANTHROPIC_DEFAULT_HAIKU_MODEL: selectedSmallModel,\n      DISABLE_NON_ESSENTIAL_MODEL_CALLS: \"1\",\n      CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: \"1\",\n      CLAUDE_CODE_ATTRIBUTION_HEADER: \"0\",\n      CLAUDE_CODE_ENABLE_PROMPT_SUGGESTION: \"false\",\n      CLAUDE_CODE_DISABLE_TERMINAL_TITLE: \"true\",\n      CLAUDE_PLUGIN_ENABLE_QUESTION_RULES: \"true\",\n    },\n    \"claude\",\n  )\n\n  try {\n    clipboard.writeSync(command)\n    consola.success(\"Copied Claude Code command to clipboard!\")\n  } catch {\n    consola.warn(\n      \"Failed to copy to clipboard. Here is the Claude Code command:\",\n    )\n    consola.log(command)\n  }\n}\n\nexport async function runServer(options: RunServerOptions): Promise<void> {\n  // Ensure config is merged with defaults at startup\n  mergeConfigWithDefaults()\n  accountsManager.setAccountAffinityEnabled(isAccountAffinityEnabled())\n  accountsManager.setModelsRefreshIntervalMs(getModelRefreshIntervalMs())\n\n  await initOpencodeVersion()\n\n  if (options.proxyEnv) {\n    initProxyFromEnv()\n  }\n\n  state.verbose = options.verbose\n  if (options.verbose) {\n    consola.level = 5\n    consola.info(\"Verbose logging enabled\")\n  }\n\n  state.accountType = options.accountType\n  if (options.accountType !== \"individual\") {\n    consola.info(`Using ${options.accountType} plan GitHub account`)\n  }\n\n  state.manualApprove = options.manual\n  state.rateLimitSeconds = options.rateLimit\n  state.rateLimitWait = options.rateLimitWait\n  state.showToken = options.showToken\n\n  await ensurePaths()\n  applySharedSessionAffinityRetention()\n  await cacheVSCodeVersion()\n  cacheMacMachineId()\n  cacheVsCodeSessionId()\n  await cacheVsCodeDeviceId()\n\n  // Initialize accounts manager with VS Code version\n  await accountsManager.initialize(state.vsCodeVersion)\n\n  // If --github-token is provided, set it as a temporary (high priority) account\n  if (options.githubToken) {\n    await accountsManager.setTemporaryAccount(\n      options.githubToken,\n      options.accountType,\n    )\n    consola.info(\"Using provided GitHub token as temporary account\")\n  }\n\n  // Check if we have any accounts, if not, start the auth flow\n  if (!accountsManager.hasAccounts()) {\n    if (options.skipAuth) {\n      consola.warn(\n        \"No accounts found. Skipping auth flow (--skip-auth). Add accounts via the Admin UI.\",\n      )\n    } else {\n      try {\n        await runAuthFlow(options.accountType)\n\n        // Re-initialize accounts manager with the new account\n        accountsManager.shutdown()\n        await accountsManager.initialize(state.vsCodeVersion)\n        accountsManager.setModelsRefreshIntervalMs(getModelRefreshIntervalMs())\n      } catch (error) {\n        consola.error(\"Failed to add account:\", error)\n        process.exit(1)\n      }\n    }\n  }\n\n  // Get models from the first available account\n  const models = accountsManager.getFirstAccountModels()\n\n  consola.info(\n    `Available models: \\n${models?.data.map((model) => `- ${model.id}`).join(\"\\n\") ?? \"(no models loaded)\"}`,\n  )\n\n  const serverUrl = `http://localhost:${options.port}`\n\n  if (options.claudeCode) {\n    logClaudeCodeTip()\n    if (!models?.data.length) {\n      consola.error(\n        \"Claude Code requires available models. Add an account via the Admin UI or remove --claude-code.\",\n      )\n      process.exit(1)\n    }\n    await setupClaudeCode(models, serverUrl)\n  }\n\n  consola.box(`🌐 Admin UI: ${serverUrl}/admin`)\n\n  const { server } = await import(\"./server\")\n\n  serve({\n    fetch: server.fetch as ServerHandler,\n    port: options.port,\n    bun: {\n      idleTimeout: 0,\n    },\n  })\n}\n\nexport const start = defineCommand({\n  meta: {\n    name: \"start\",\n    description: \"Start the Copilot API server\",\n  },\n  args: {\n    port: {\n      alias: \"p\",\n      type: \"string\",\n      default: \"4141\",\n      description: \"Port to listen on\",\n    },\n    verbose: {\n      alias: \"v\",\n      type: \"boolean\",\n      default: false,\n      description: \"Enable verbose logging\",\n    },\n    \"account-type\": {\n      alias: \"a\",\n      type: \"string\",\n      default: \"individual\",\n      description: \"Account type to use (individual, business, enterprise)\",\n    },\n    manual: {\n      type: \"boolean\",\n      default: false,\n      description: \"Enable manual request approval\",\n    },\n    \"rate-limit\": {\n      alias: \"r\",\n      type: \"string\",\n      description: \"Rate limit in seconds between requests\",\n    },\n    wait: {\n      alias: \"w\",\n      type: \"boolean\",\n      default: false,\n      description:\n        \"Wait instead of error when rate limit is hit. Has no effect if rate limit is not set\",\n    },\n    \"github-token\": {\n      alias: \"g\",\n      type: \"string\",\n      description:\n        \"Provide GitHub token directly (must be generated using the `auth` subcommand)\",\n    },\n    \"claude-code\": {\n      alias: \"c\",\n      type: \"boolean\",\n      default: false,\n      description:\n        \"Generate a command to launch Claude Code with Copilot API config\",\n    },\n    \"show-token\": {\n      type: \"boolean\",\n      default: false,\n      description: \"Show GitHub and Copilot tokens on fetch and refresh\",\n    },\n    \"proxy-env\": {\n      type: \"boolean\",\n      default: false,\n      description: \"Initialize proxy from environment variables\",\n    },\n    \"skip-auth\": {\n      type: \"boolean\",\n      default: false,\n      description:\n        \"Skip the initial CLI auth flow when no accounts are found. Use this to add accounts via the Admin UI instead.\",\n    },\n  },\n  run({ args }) {\n    const rateLimitRaw = args[\"rate-limit\"]\n    const rateLimit =\n      // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition\n      rateLimitRaw === undefined ? undefined : Number.parseInt(rateLimitRaw, 10)\n\n    let accountType: AccountType\n    try {\n      accountType = parseAccountType(args[\"account-type\"])\n    } catch (error) {\n      consola.error(error instanceof Error ? error.message : String(error))\n      process.exit(1)\n    }\n\n    return runServer({\n      port: Number.parseInt(args.port, 10),\n      verbose: args.verbose,\n      accountType,\n      manual: args.manual,\n      rateLimit,\n      rateLimitWait: args.wait,\n      githubToken: args[\"github-token\"],\n      claudeCode: args[\"claude-code\"],\n      showToken: args[\"show-token\"],\n      proxyEnv: args[\"proxy-env\"],\n      skipAuth: args[\"skip-auth\"],\n    })\n  },\n})\n"],"mappings":";;;;;;;;;;;;;;;AAIA,SAAgB,mBAAyB;AACvC,KAAI,OAAO,QAAQ,YAAa;AAEhC,KAAI;EACF,MAAM,SAAS,IAAI,OAAO;EAC1B,MAAM,0BAAU,IAAI,KAAyB;AAmD7C,sBA7CmB;GACjB,SACE,SACA,SACA;AACA,QAAI;KACF,MAAM,SACJ,OAAO,QAAQ,WAAW,WACxB,IAAI,IAAI,QAAQ,OAAO,GACtB,QAAQ;KAIb,MAAM,MAHM,eAGI,OAAO,UAAU,CAAC;KAClC,MAAM,WAAW,OAAO,IAAI,SAAS,IAAI,MAAM;AAC/C,SAAI,CAAC,UAAU;AACb,cAAQ,MAAM,sBAAsB,OAAO,WAAW;AACtD,aAAQ,OAAiC,SAAS,SAAS,QAAQ;;KAErE,IAAI,QAAQ,QAAQ,IAAI,SAAS;AACjC,SAAI,CAAC,OAAO;AACV,cAAQ,IAAI,WAAW,SAAS;AAChC,cAAQ,IAAI,UAAU,MAAM;;KAE9B,IAAI,QAAQ;AACZ,SAAI;MACF,MAAM,IAAI,IAAI,IAAI,SAAS;AAC3B,cAAQ,GAAG,EAAE,SAAS,IAAI,EAAE;aACtB;AAGR,aAAQ,MAAM,qBAAqB,OAAO,SAAS,OAAO,QAAQ;AAClE,YAAQ,MAAgC,SAAS,SAAS,QAAQ;YAC5D;AACN,YAAQ,OAAiC,SAAS,SAAS,QAAQ;;;GAGvE,QAAQ;AACN,WAAO,OAAO,OAAO;;GAEvB,UAAU;AACR,WAAO,OAAO,SAAS;;GAE1B,CAEuD;AACxD,UAAQ,MAAM,mDAAmD;UAC1D,KAAK;AACZ,UAAQ,MAAM,wBAAwB,IAAI;;;;;;ACzD9C,SAAS,WAAsB;CAC7B,MAAM,EAAE,UAAU,MAAM,QAAQA;AAEhC,KAAI,aAAa,SAAS;AACxB,MAAI;AAIF,OAFsB,SADN,oDAAoD,KAAK,IACjC,EAAE,OAAO,QAAQ,CAAC,CAAC,UAAU,CAEnD,aAAa,CAAC,SAAS,iBAAiB,CACxD,QAAO;UAEH;AACN,UAAO;;AAGT,SAAO;QACF;EACL,MAAM,YAAY,IAAI;AACtB,MAAI,WAAW;AACb,OAAI,UAAU,SAAS,MAAM,CAAE,QAAO;AACtC,OAAI,UAAU,SAAS,OAAO,CAAE,QAAO;AACvC,OAAI,UAAU,SAAS,OAAO,CAAE,QAAO;;AAGzC,SAAO;;;;;;;;;;AAWX,SAAgB,kBACd,SACA,eAAuB,IACf;CACR,MAAM,QAAQ,UAAU;CACxB,MAAM,kBAAkB,OAAO,QAAQ,QAAQ,CAAC,QAC7C,GAAG,WAAW,UAAU,OAC1B;CAED,IAAIC;AAEJ,SAAQ,OAAR;EACE,KAAK;AACH,kBAAe,gBACZ,KAAK,CAAC,KAAK,WAAW,QAAQ,IAAI,KAAK,QAAQ,CAC/C,KAAK,KAAK;AACb;EAEF,KAAK;AACH,kBAAe,gBACZ,KAAK,CAAC,KAAK,WAAW,OAAO,IAAI,GAAG,QAAQ,CAC5C,KAAK,MAAM;AACd;EAEF,KAAK;AACH,kBAAe,gBACZ,KAAK,CAAC,KAAK,WAAW,WAAW,IAAI,GAAG,QAAQ,CAChD,KAAK,KAAK;AACb;EAEF,SAAS;GAEP,MAAM,cAAc,gBACjB,KAAK,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,QAAQ,CACxC,KAAK,IAAI;AACZ,kBAAe,gBAAgB,SAAS,IAAI,UAAU,gBAAgB;AACtE;;;AAIJ,KAAI,gBAAgB,aAElB,QAAO,GAAG,eADQ,UAAU,QAAQ,QAAQ,SACP;AAGvC,QAAO,gBAAgB;;;;;;;;;ACrCzB,eAAe,YAAY,aAAyC;AAClE,SAAQ,KAAK,qDAAqD;CAGlE,MAAM,iBAAiB,MAAM,eAAe;AAC5C,SAAQ,KACN,0BAA0B,eAAe,UAAU,OAAO,eAAe,mBAC1E;CAGD,MAAM,QAAQ,MAAM,gBAAgB,eAAe;AAEnD,KAAI,MAAM,UACR,SAAQ,KAAK,iBAAiB,MAAM;CAQtC,MAAM,aAJO,MAAM,cAAc;EAC/B,aAAa;EACb;EACD,CAAC,EACqB;AAGvB,OAAM,iBAAiB,WAAW,MAAM;AACxC,OAAM,qBAAqB;EACzB,IAAI;EACJ;EACA,SAAS,KAAK,KAAK;EACpB,CAAC;AAEF,SAAQ,QAAQ,YAAY,UAAU,uBAAuB;;AAG/D,SAAS,mBAAyB;AAChC,SAAQ,IACN,4NAED;;AAOH,eAAe,gBACb,QACA,WACe;CACf,MAAM,gBAAgB,MAAM,QAAQ,OAClC,0CACA;EACE,MAAM;EACN,SAAS,OAAO,KAAK,KAAK,UAAU,MAAM,GAAG;EAC9C,CACF;CAUD,MAAM,UAAU,kBACd;EACE,oBAAoB;EACpB,sBAAsB;EACtB,iBAAiB;EACjB,gCAAgC;EAChC,+BAduB,MAAM,QAAQ,OACvC,gDACA;GACE,MAAM;GACN,SAAS,OAAO,KAAK,KAAK,UAAU,MAAM,GAAG;GAC9C,CACF;EASG,mCAAmC;EACnC,0CAA0C;EAC1C,gCAAgC;EAChC,sCAAsC;EACtC,oCAAoC;EACpC,qCAAqC;EACtC,EACD,SACD;AAED,KAAI;AACF,YAAU,UAAU,QAAQ;AAC5B,UAAQ,QAAQ,2CAA2C;SACrD;AACN,UAAQ,KACN,gEACD;AACD,UAAQ,IAAI,QAAQ;;;AAIxB,eAAsB,UAAU,SAA0C;AAExE,0BAAyB;AACzB,iBAAgB,0BAA0B,0BAA0B,CAAC;AACrE,iBAAgB,2BAA2B,2BAA2B,CAAC;AAEvE,OAAM,qBAAqB;AAE3B,KAAI,QAAQ,SACV,mBAAkB;AAGpB,OAAM,UAAU,QAAQ;AACxB,KAAI,QAAQ,SAAS;AACnB,UAAQ,QAAQ;AAChB,UAAQ,KAAK,0BAA0B;;AAGzC,OAAM,cAAc,QAAQ;AAC5B,KAAI,QAAQ,gBAAgB,aAC1B,SAAQ,KAAK,SAAS,QAAQ,YAAY,sBAAsB;AAGlE,OAAM,gBAAgB,QAAQ;AAC9B,OAAM,mBAAmB,QAAQ;AACjC,OAAM,gBAAgB,QAAQ;AAC9B,OAAM,YAAY,QAAQ;AAE1B,OAAM,aAAa;AACnB,sCAAqC;AACrC,OAAM,oBAAoB;AAC1B,oBAAmB;AACnB,uBAAsB;AACtB,OAAM,qBAAqB;AAG3B,OAAM,gBAAgB,WAAW,MAAM,cAAc;AAGrD,KAAI,QAAQ,aAAa;AACvB,QAAM,gBAAgB,oBACpB,QAAQ,aACR,QAAQ,YACT;AACD,UAAQ,KAAK,mDAAmD;;AAIlE,KAAI,CAAC,gBAAgB,aAAa,CAChC,KAAI,QAAQ,SACV,SAAQ,KACN,sFACD;KAED,KAAI;AACF,QAAM,YAAY,QAAQ,YAAY;AAGtC,kBAAgB,UAAU;AAC1B,QAAM,gBAAgB,WAAW,MAAM,cAAc;AACrD,kBAAgB,2BAA2B,2BAA2B,CAAC;UAChE,OAAO;AACd,UAAQ,MAAM,0BAA0B,MAAM;AAC9C,UAAQ,KAAK,EAAE;;CAMrB,MAAM,SAAS,gBAAgB,uBAAuB;AAEtD,SAAQ,KACN,uBAAuB,QAAQ,KAAK,KAAK,UAAU,KAAK,MAAM,KAAK,CAAC,KAAK,KAAK,IAAI,uBACnF;CAED,MAAM,YAAY,oBAAoB,QAAQ;AAE9C,KAAI,QAAQ,YAAY;AACtB,oBAAkB;AAClB,MAAI,CAAC,QAAQ,KAAK,QAAQ;AACxB,WAAQ,MACN,kGACD;AACD,WAAQ,KAAK,EAAE;;AAEjB,QAAM,gBAAgB,QAAQ,UAAU;;AAG1C,SAAQ,IAAI,gBAAgB,UAAU,QAAQ;CAE9C,MAAM,EAAE,WAAW,MAAM,OAAO;AAEhC,OAAM;EACJ,OAAO,OAAO;EACd,MAAM,QAAQ;EACd,KAAK,EACH,aAAa,GACd;EACF,CAAC;;AAGJ,MAAa,QAAQ,cAAc;CACjC,MAAM;EACJ,MAAM;EACN,aAAa;EACd;CACD,MAAM;EACJ,MAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,aAAa;GACd;EACD,SAAS;GACP,OAAO;GACP,MAAM;GACN,SAAS;GACT,aAAa;GACd;EACD,gBAAgB;GACd,OAAO;GACP,MAAM;GACN,SAAS;GACT,aAAa;GACd;EACD,QAAQ;GACN,MAAM;GACN,SAAS;GACT,aAAa;GACd;EACD,cAAc;GACZ,OAAO;GACP,MAAM;GACN,aAAa;GACd;EACD,MAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,aACE;GACH;EACD,gBAAgB;GACd,OAAO;GACP,MAAM;GACN,aACE;GACH;EACD,eAAe;GACb,OAAO;GACP,MAAM;GACN,SAAS;GACT,aACE;GACH;EACD,cAAc;GACZ,MAAM;GACN,SAAS;GACT,aAAa;GACd;EACD,aAAa;GACX,MAAM;GACN,SAAS;GACT,aAAa;GACd;EACD,aAAa;GACX,MAAM;GACN,SAAS;GACT,aACE;GACH;EACF;CACD,IAAI,EAAE,QAAQ;EACZ,MAAM,eAAe,KAAK;EAC1B,MAAM,YAEJ,iBAAiB,SAAY,SAAY,OAAO,SAAS,cAAc,GAAG;EAE5E,IAAIC;AACJ,MAAI;AACF,iBAAc,iBAAiB,KAAK,gBAAgB;WAC7C,OAAO;AACd,WAAQ,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC;AACrE,WAAQ,KAAK,EAAE;;AAGjB,SAAO,UAAU;GACf,MAAM,OAAO,SAAS,KAAK,MAAM,GAAG;GACpC,SAAS,KAAK;GACd;GACA,QAAQ,KAAK;GACb;GACA,eAAe,KAAK;GACpB,aAAa,KAAK;GAClB,YAAY,KAAK;GACjB,WAAW,KAAK;GAChB,UAAU,KAAK;GACf,UAAU,KAAK;GAChB,CAAC;;CAEL,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "@nick3/copilot-api",
-  "version": "1.5.6",
+  "version": "1.6.0",
   "description": "Turn GitHub Copilot into OpenAI/Anthropic API compatible server. Usable with Claude Code Or Codex Or Opencode!",
   "keywords": [
     "proxy",

package/dist/account-AacnHem5.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"account-AacnHem5.js","names":["registryLock: Promise<void>","releaseLock!: () => void","parsed: unknown","registry: AccountRegistry","index: number","ACCOUNT_TYPE_VALUES: ReadonlyArray<AccountType>"],"sources":["../src/lib/account-client-identity.ts","../src/lib/accounts-registry.ts","../src/lib/types/account.ts"],"sourcesContent":["import { createHash, randomUUID } from \"node:crypto\"\n\nimport { normalizeDomain } from \"./api-config\"\n\nexport const DEFAULT_IDENTITY_OAUTH_APP = \"default\"\nexport const DEFAULT_IDENTITY_ENTERPRISE_DOMAIN = \"public\"\n\nexport interface AccountIdentityEnvironment {\n  oauthApp: string\n  enterpriseDomain: string\n}\n\nexport const getCurrentIdentityEnvironment = (): AccountIdentityEnvironment => {\n  const rawOauthApp = process.env.COPILOT_API_OAUTH_APP?.trim().toLowerCase()\n  const rawEnterpriseDomain = process.env.COPILOT_API_ENTERPRISE_URL?.trim()\n\n  return {\n    oauthApp: rawOauthApp || DEFAULT_IDENTITY_OAUTH_APP,\n    enterpriseDomain:\n      rawEnterpriseDomain ?\n        normalizeDomain(rawEnterpriseDomain).toLowerCase()\n      : DEFAULT_IDENTITY_ENTERPRISE_DOMAIN,\n  }\n}\n\nexport const buildIdentityKey = ({\n  login,\n  oauthApp,\n  enterpriseDomain,\n}: {\n  login: string\n  oauthApp: string\n  enterpriseDomain: string\n}): string => `${enterpriseDomain}:${oauthApp}:${login}`\n\nexport const createAccountDeviceId = (): string => randomUUID().toLowerCase()\n\nexport const createAccountMachineId = (): string =>\n  createHash(\"sha256\").update(randomUUID(), \"utf8\").digest(\"hex\")\n\nexport const createAccountSessionId = (): string =>\n  randomUUID() + Date.now().toString()\n","import fs from \"node:fs/promises\"\nimport { z } from \"zod\"\n\nimport type {\n  AccountClientIdentity,\n  AccountMeta,\n  AccountRegistry,\n} from \"~/lib/types/account\"\n\nimport {\n  DEFAULT_IDENTITY_ENTERPRISE_DOMAIN,\n  buildIdentityKey,\n  createAccountDeviceId,\n  createAccountMachineId,\n  getCurrentIdentityEnvironment,\n} from \"~/lib/account-client-identity\"\nimport { accountTokenPath, PATHS } from \"~/lib/paths\"\n\n/**\n * Validate account ID (GitHub login).\n * Rules:\n * - Only alphanumeric characters or single hyphens\n * - 1-39 chars\n * - Cannot begin or end with a hyphen\n * - No consecutive hyphens\n */\nexport function validateAccountId(id: string): boolean {\n  if (id.length === 0 || id.length > 39) return false\n  if (!/^[a-z0-9-]+$/i.test(id)) return false\n  if (id.startsWith(\"-\") || id.endsWith(\"-\")) return false\n  if (id.includes(\"--\")) return false\n  return true\n}\n\nconst accountMetaSchema = z.object({\n  id: z.string().refine(validateAccountId, {\n    message:\n      \"Invalid account id. Expected a GitHub login (1-39 chars, alphanumeric or single hyphens, no leading/trailing hyphen, no consecutive hyphens).\",\n  }),\n  accountType: z.enum([\"individual\", \"business\", \"enterprise\"]),\n  addedAt: z.number(),\n})\n\nconst accountClientIdentitySchema = z.object({\n  login: z.string().refine(validateAccountId, {\n    message:\n      \"Invalid client identity login. Expected a GitHub login (1-39 chars, alphanumeric or single hyphens, no leading/trailing hyphen, no consecutive hyphens).\",\n  }),\n  oauthApp: z.string().min(1),\n  enterpriseDomain: z.string().min(1),\n  deviceId: z\n    .string()\n    .regex(\n      /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/u,\n      \"Invalid device ID format. Expected a lowercase UUID.\",\n    ),\n  machineId: z\n    .string()\n    .regex(\n      /^[0-9a-f]{64}$/u,\n      \"Invalid machine ID format. Expected 64 lowercase hexadecimal characters.\",\n    ),\n  createdAt: z.number(),\n})\n\nconst accountRegistryV1Schema = z.object({\n  version: z.literal(1),\n  accounts: z.array(accountMetaSchema),\n})\n\nconst accountRegistryV2Schema = z.object({\n  version: z.literal(2),\n  accounts: z.array(accountMetaSchema),\n  clientIdentities: z.record(z.string(), accountClientIdentitySchema),\n})\n\nconst identityLocks = new Map<string, Promise<AccountClientIdentity>>()\nlet registryLock: Promise<void> = Promise.resolve()\n\nconst runWithRegistryLock = async <T>(\n  operation: () => Promise<T>,\n): Promise<T> => {\n  const previousLock = registryLock\n  let releaseLock!: () => void\n  registryLock = new Promise<void>((resolve) => {\n    releaseLock = resolve\n  })\n\n  await previousLock\n\n  try {\n    return await operation()\n  } finally {\n    releaseLock()\n  }\n}\n\n/**\n * Create an empty registry with the current schema version.\n */\nfunction createEmptyRegistry(): AccountRegistry {\n  return {\n    version: 2,\n    accounts: [],\n    clientIdentities: {},\n  }\n}\n\nconst createClientIdentity = ({\n  login,\n  oauthApp,\n  enterpriseDomain,\n}: {\n  login: string\n  oauthApp: string\n  enterpriseDomain: string\n}): AccountClientIdentity => ({\n  login,\n  oauthApp,\n  enterpriseDomain,\n  deviceId: createAccountDeviceId(),\n  machineId: createAccountMachineId(),\n  createdAt: Date.now(),\n})\n\nconst ensureRegistryIdentity = (\n  registry: AccountRegistry,\n  {\n    login,\n    oauthApp,\n    enterpriseDomain,\n  }: {\n    login: string\n    oauthApp: string\n    enterpriseDomain: string\n  },\n): AccountClientIdentity => {\n  const identityKey = buildIdentityKey({ login, oauthApp, enterpriseDomain })\n  const existing = registry.clientIdentities[identityKey]\n  if (existing) {\n    return existing\n  }\n\n  const created = createClientIdentity({\n    login,\n    oauthApp,\n    enterpriseDomain,\n  })\n  registry.clientIdentities[identityKey] = created\n  return created\n}\n\nconst ensureClientIdentitiesForAccounts = (\n  registry: AccountRegistry,\n): boolean => {\n  const { oauthApp, enterpriseDomain } = getCurrentIdentityEnvironment()\n  const countBefore = Object.keys(registry.clientIdentities).length\n\n  for (const account of registry.accounts) {\n    ensureRegistryIdentity(registry, {\n      login: account.id,\n      oauthApp,\n      enterpriseDomain,\n    })\n  }\n\n  return Object.keys(registry.clientIdentities).length !== countBefore\n}\n\nconst assertNoDuplicateAccounts = (registry: {\n  accounts: Array<AccountMeta>\n}) => {\n  const seen = new Set<string>()\n  for (const account of registry.accounts) {\n    if (seen.has(account.id)) {\n      throw new Error(\n        `Invalid accounts registry at ${PATHS.ACCOUNTS_REGISTRY_PATH}: duplicate account id \"${account.id}\"`,\n      )\n    }\n    seen.add(account.id)\n  }\n}\n\nconst loadRegistrySnapshot = async (): Promise<{\n  registry: AccountRegistry\n  shouldPersist: boolean\n}> => {\n  try {\n    const content = await fs.readFile(PATHS.ACCOUNTS_REGISTRY_PATH, \"utf8\")\n    if (!content.trim()) {\n      return {\n        registry: createEmptyRegistry(),\n        shouldPersist: false,\n      }\n    }\n\n    let parsed: unknown\n    try {\n      parsed = JSON.parse(content) as unknown\n    } catch (error) {\n      throw new Error(\n        `Invalid accounts registry JSON at ${PATHS.ACCOUNTS_REGISTRY_PATH}: ${\n          error instanceof Error ? error.message : String(error)\n        }`,\n      )\n    }\n\n    const isVersion2Record =\n      typeof parsed === \"object\"\n      && parsed !== null\n      && \"version\" in parsed\n      && parsed.version === 2\n    const result =\n      isVersion2Record ?\n        accountRegistryV2Schema.safeParse(parsed)\n      : accountRegistryV1Schema.safeParse(parsed)\n    if (!result.success) {\n      const issues = result.error.issues\n        .map((issue) => `${issue.path.join(\".\")}: ${issue.message}`)\n        .join(\"; \")\n\n      throw new Error(\n        `Invalid accounts registry at ${PATHS.ACCOUNTS_REGISTRY_PATH}: ${issues}`,\n      )\n    }\n\n    const parsedRegistry = result.data\n    const registry: AccountRegistry =\n      parsedRegistry.version === 2 ?\n        parsedRegistry\n      : {\n          version: 2,\n          accounts: parsedRegistry.accounts,\n          clientIdentities: {},\n        }\n\n    assertNoDuplicateAccounts(registry)\n\n    const identitiesBackfilled = ensureClientIdentitiesForAccounts(registry)\n\n    return {\n      registry,\n      shouldPersist: parsedRegistry.version !== 2 || identitiesBackfilled,\n    }\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") {\n      return {\n        registry: createEmptyRegistry(),\n        shouldPersist: false,\n      }\n    }\n    throw error\n  }\n}\n\nconst saveRegistryUnlocked = async (\n  registry: AccountRegistry,\n): Promise<void> => {\n  const content = JSON.stringify(registry, null, 2)\n  await fs.writeFile(PATHS.ACCOUNTS_REGISTRY_PATH, content, { mode: 0o600 })\n}\n\n/**\n * Load the accounts registry from disk.\n * Returns an empty registry if the file doesn't exist.\n */\nexport async function loadRegistry(): Promise<AccountRegistry> {\n  return runWithRegistryLock(async () => {\n    const { registry, shouldPersist } = await loadRegistrySnapshot()\n    if (shouldPersist) {\n      await saveRegistryUnlocked(registry)\n    }\n    return registry\n  })\n}\n\n/**\n * Save the accounts registry to disk with secure permissions.\n */\nexport async function saveRegistry(registry: AccountRegistry): Promise<void> {\n  await runWithRegistryLock(async () => {\n    await saveRegistryUnlocked(registry)\n  })\n}\n\nexport async function getAccountClientIdentity(\n  identityKey: string,\n): Promise<AccountClientIdentity | null> {\n  const registry = await loadRegistry()\n  return registry.clientIdentities[identityKey] ?? null\n}\n\nexport async function getAccountClientIdentityByLoginAndApp(\n  login: string,\n  oauthApp: string,\n): Promise<AccountClientIdentity | null> {\n  const registry = await loadRegistry()\n\n  const candidates = Object.values(registry.clientIdentities).filter(\n    (identity): identity is AccountClientIdentity =>\n      identity !== undefined\n      && identity.login === login\n      && identity.oauthApp === oauthApp,\n  )\n\n  const preferredCandidates = candidates.filter(\n    (identity) =>\n      identity.enterpriseDomain !== DEFAULT_IDENTITY_ENTERPRISE_DOMAIN,\n  )\n  const selectionPool =\n    preferredCandidates.length > 0 ? preferredCandidates : candidates\n\n  return selectionPool.reduce<AccountClientIdentity | null>(\n    (latest, current) => {\n      if (!latest || current.createdAt > latest.createdAt) return current\n      return latest\n    },\n    null,\n  )\n}\n\nexport async function ensureAccountClientIdentity({\n  login,\n  oauthApp,\n  enterpriseDomain,\n}: {\n  login: string\n  oauthApp: string\n  enterpriseDomain: string\n}): Promise<AccountClientIdentity> {\n  if (!validateAccountId(login)) {\n    throw new Error(`Invalid account ID: ${login}`)\n  }\n\n  const normalizedOauthApp = oauthApp.trim()\n  if (!normalizedOauthApp) {\n    throw new Error(\"OAuth app namespace must not be empty\")\n  }\n\n  const normalizedEnterpriseDomain = enterpriseDomain.trim()\n  if (!normalizedEnterpriseDomain) {\n    throw new Error(\"Enterprise domain namespace must not be empty\")\n  }\n\n  const identityKey = buildIdentityKey({\n    login,\n    oauthApp: normalizedOauthApp,\n    enterpriseDomain: normalizedEnterpriseDomain,\n  })\n  const existingLock = identityLocks.get(identityKey)\n  if (existingLock) {\n    return existingLock\n  }\n\n  const identityPromise = runWithRegistryLock(\n    async (): Promise<AccountClientIdentity> => {\n      const { registry, shouldPersist } = await loadRegistrySnapshot()\n      const existing = registry.clientIdentities[identityKey]\n      if (existing) {\n        if (shouldPersist) {\n          await saveRegistryUnlocked(registry)\n        }\n        return existing\n      }\n\n      const created = createClientIdentity({\n        login,\n        oauthApp: normalizedOauthApp,\n        enterpriseDomain: normalizedEnterpriseDomain,\n      })\n      registry.clientIdentities[identityKey] = created\n      await saveRegistryUnlocked(registry)\n      return created\n    },\n  )\n\n  identityLocks.set(identityKey, identityPromise)\n\n  try {\n    return await identityPromise\n  } finally {\n    if (identityLocks.get(identityKey) === identityPromise) {\n      identityLocks.delete(identityKey)\n    }\n  }\n}\n\n/**\n * Add an account to the registry.\n * The account is appended to the end of the list (lowest priority).\n */\nexport async function addAccountToRegistry(meta: AccountMeta): Promise<void> {\n  if (!validateAccountId(meta.id)) {\n    throw new Error(`Invalid account ID: ${meta.id}`)\n  }\n\n  await runWithRegistryLock(async () => {\n    const { registry } = await loadRegistrySnapshot()\n\n    // Check for duplicate\n    if (registry.accounts.some((a) => a.id === meta.id)) {\n      throw new Error(`Account already exists: ${meta.id}`)\n    }\n\n    registry.accounts.push(meta)\n    const { oauthApp, enterpriseDomain } = getCurrentIdentityEnvironment()\n    ensureRegistryIdentity(registry, {\n      login: meta.id,\n      oauthApp,\n      enterpriseDomain,\n    })\n    await saveRegistryUnlocked(registry)\n  })\n}\n\n/**\n * Remove an account from the registry by ID or index (1-based).\n * Returns the removed account metadata.\n */\nexport async function removeAccountFromRegistry(\n  idOrIndex: string | number,\n): Promise<AccountMeta> {\n  return runWithRegistryLock(async () => {\n    const { registry } = await loadRegistrySnapshot()\n    let index: number\n\n    if (typeof idOrIndex === \"number\") {\n      // 1-based index\n      index = idOrIndex - 1\n      if (index < 0 || index >= registry.accounts.length) {\n        throw new Error(`Invalid account index: ${idOrIndex}`)\n      }\n    } else {\n      index = registry.accounts.findIndex((a) => a.id === idOrIndex)\n      if (index === -1) {\n        throw new Error(`Account not found: ${idOrIndex}`)\n      }\n    }\n\n    const [removed] = registry.accounts.splice(index, 1)\n    await saveRegistryUnlocked(registry)\n    return removed\n  })\n}\n\n/**\n * List all accounts from the registry.\n */\nexport async function listAccountsFromRegistry(): Promise<Array<AccountMeta>> {\n  const registry = await loadRegistry()\n  return registry.accounts\n}\n\n/**\n * Load the GitHub token for a specific account.\n * Returns null if the token file doesn't exist.\n */\nexport async function loadAccountToken(id: string): Promise<string | null> {\n  if (!validateAccountId(id)) {\n    throw new Error(`Invalid account ID: ${id}`)\n  }\n\n  try {\n    const tokenPath = accountTokenPath(id)\n    const token = await fs.readFile(tokenPath, \"utf8\")\n    return token.trim() || null\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") {\n      return null\n    }\n    throw error\n  }\n}\n\n/**\n * Save the GitHub token for a specific account with secure permissions.\n */\nexport async function saveAccountToken(\n  id: string,\n  token: string,\n): Promise<void> {\n  if (!validateAccountId(id)) {\n    throw new Error(`Invalid account ID: ${id}`)\n  }\n\n  const tokenPath = accountTokenPath(id)\n  await fs.writeFile(tokenPath, token, { mode: 0o600 })\n}\n\n/**\n * Remove the GitHub token file for a specific account.\n */\nexport async function removeAccountToken(id: string): Promise<void> {\n  if (!validateAccountId(id)) {\n    throw new Error(`Invalid account ID: ${id}`)\n  }\n\n  const tokenPath = accountTokenPath(id)\n  try {\n    await fs.unlink(tokenPath)\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code !== \"ENOENT\") {\n      throw error\n    }\n    // File doesn't exist, nothing to remove\n  }\n}\n\n/**\n * Check if the legacy github_token file exists.\n */\nexport async function hasLegacyToken(): Promise<boolean> {\n  try {\n    const content = await fs.readFile(PATHS.GITHUB_TOKEN_PATH, \"utf8\")\n    return content.trim().length > 0\n  } catch {\n    return false\n  }\n}\n\n/**\n * Read the legacy github_token file.\n * Returns null if the file doesn't exist or is empty.\n */\nexport async function readLegacyToken(): Promise<string | null> {\n  try {\n    const content = await fs.readFile(PATHS.GITHUB_TOKEN_PATH, \"utf8\")\n    return content.trim() || null\n  } catch {\n    return null\n  }\n}\n\n/**\n * Check if the registry file exists and has accounts.\n */\nexport async function hasRegistry(): Promise<boolean> {\n  const registry = await loadRegistry()\n  return registry.accounts.length > 0\n}\n","import type { ModelsResponse } from \"~/services/copilot/get-models\"\n\n/**\n * Account type for GitHub Copilot subscription.\n */\nexport type AccountType = \"individual\" | \"business\" | \"enterprise\"\n\nexport const ACCOUNT_TYPE_VALUES: ReadonlyArray<AccountType> = [\n  \"individual\",\n  \"business\",\n  \"enterprise\",\n]\n\nexport function isAccountType(value: unknown): value is AccountType {\n  return (\n    typeof value === \"string\"\n    && (ACCOUNT_TYPE_VALUES as ReadonlyArray<string>).includes(value)\n  )\n}\n\nexport function parseAccountType(value: unknown): AccountType {\n  if (!isAccountType(value)) {\n    throw new Error(\n      `Invalid account type: ${String(value)}. Valid values: ${ACCOUNT_TYPE_VALUES.join(\n        \", \",\n      )}`,\n    )\n  }\n  return value\n}\n\n/**\n * Metadata for a registered account, stored in the registry file.\n */\nexport interface AccountMeta {\n  /** GitHub login (username) */\n  id: string\n  /** Account subscription type */\n  accountType: AccountType\n  /** Timestamp when the account was added */\n  addedAt: number\n}\n\nexport interface AccountClientIdentity {\n  /** Real GitHub login */\n  login: string\n  /** OAuth app namespace */\n  oauthApp: string\n  /** Enterprise domain namespace (\"public\" for github.com) */\n  enterpriseDomain: string\n  /** Account-scoped upstream device identifier */\n  deviceId: string\n  /** Account-scoped upstream machine identifier */\n  machineId: string\n  /** Creation timestamp for debugging/auditing */\n  createdAt: number\n}\n\n/**\n * Registry file structure for storing account metadata.\n */\nexport interface AccountRegistry {\n  /** Schema version for future migrations */\n  version: 2\n  /** Ordered list of accounts (order = priority) */\n  accounts: Array<AccountMeta>\n  /** Persistent client identities keyed by logical environment + login */\n  clientIdentities: Partial<Record<string, AccountClientIdentity>>\n}\n\n/**\n * Runtime state for an account, including tokens and quota information.\n */\nexport interface AccountRuntime extends AccountMeta {\n  /** Real GitHub login, used to resolve account-scoped identity */\n  accountLogin?: string\n  /** Persistent identity key used to load/store account-scoped identifiers */\n  identityKey?: string\n  /** GitHub personal access token */\n  githubToken: string\n  /** Copilot API token (obtained from GitHub) */\n  copilotToken?: string\n  /** Account-specific Copilot API base URL returned by GitHub */\n  copilotApiUrl?: string\n  /** VS Code version for API headers */\n  vsCodeVersion?: string\n  /** Account-scoped device identifier sent upstream */\n  clientDeviceId?: string\n  /** Account-scoped machine identifier sent upstream */\n  clientMachineId?: string\n  /** Account-scoped session identifier sent upstream */\n  clientSessionId?: string\n  /** Session refresh timer reference */\n  sessionRefreshTimer?: ReturnType<typeof setTimeout>\n  /** Cached available models for this account */\n  models?: ModelsResponse\n  /** Timestamp of last models fetch */\n  lastModelsFetch?: number\n  /** Whether models refresh is in progress */\n  isRefreshingModels?: boolean\n  /** Promise for an in-flight models refresh */\n  modelsRefreshPromise?: Promise<void>\n  /** Total premium interactions quota entitlement */\n  premiumEntitlement?: number\n  /** Remaining premium interactions quota */\n  premiumRemaining?: number\n  /** Reserved premium interaction units for in-flight requests */\n  premiumReserved?: number\n  /** Internal reservation map for idempotent release */\n  premiumReservations?: Map<symbol, number>\n  /** Whether this account has unlimited quota */\n  unlimited?: boolean\n  /** Whether this account allows overage billing (enterprise feature) */\n  overagePermitted?: boolean\n  /** Timestamp of last quota fetch */\n  lastQuotaFetch?: number\n  /** Token refresh timer reference */\n  refreshTimer?: ReturnType<typeof setInterval>\n  /** Whether this account has failed (e.g., 401 error) */\n  failed?: boolean\n  /** Failure reason if failed */\n  failureReason?: string\n  /** Whether quota refresh is in progress (prevents concurrent refreshes) */\n  isRefreshingQuota?: boolean\n  /** Promise for an in-flight quota refresh (allows concurrent callers to await the same refresh) */\n  quotaRefreshPromise?: Promise<void>\n}\n\n/**\n * Context required for making API calls on behalf of an account.\n * This is a subset of AccountRuntime used by service functions.\n */\nexport interface AccountContext {\n  /** Real GitHub login */\n  accountLogin?: string\n  /** GitHub personal access token */\n  githubToken: string\n  /** Copilot API token */\n  copilotToken?: string\n  /** Account-specific Copilot API base URL */\n  copilotApiUrl?: string\n  /** Account subscription type */\n  accountType: AccountType\n  /** VS Code version for API headers */\n  vsCodeVersion?: string\n  /** Account-scoped device identifier */\n  clientDeviceId?: string\n  /** Account-scoped machine identifier */\n  clientMachineId?: string\n  /** Account-scoped session identifier */\n  clientSessionId?: string\n}\n"],"mappings":";;;;;;;AAIA,MAAa,6BAA6B;AAC1C,MAAa,qCAAqC;AAOlD,MAAa,sCAAkE;CAC7E,MAAM,cAAc,QAAQ,IAAI,uBAAuB,MAAM,CAAC,aAAa;CAC3E,MAAM,sBAAsB,QAAQ,IAAI,4BAA4B,MAAM;AAE1E,QAAO;EACL,UAAU,eAAe;EACzB,kBACE,sBACE,gBAAgB,oBAAoB,CAAC,aAAa,GAClD;EACL;;AAGH,MAAa,oBAAoB,EAC/B,OACA,UACA,uBAKY,GAAG,iBAAiB,GAAG,SAAS,GAAG;AAEjD,MAAa,8BAAsC,YAAY,CAAC,aAAa;AAE7E,MAAa,+BACX,WAAW,SAAS,CAAC,OAAO,YAAY,EAAE,OAAO,CAAC,OAAO,MAAM;AAEjE,MAAa,+BACX,YAAY,GAAG,KAAK,KAAK,CAAC,UAAU;;;;;;;;;;;;ACftC,SAAgB,kBAAkB,IAAqB;AACrD,KAAI,GAAG,WAAW,KAAK,GAAG,SAAS,GAAI,QAAO;AAC9C,KAAI,CAAC,gBAAgB,KAAK,GAAG,CAAE,QAAO;AACtC,KAAI,GAAG,WAAW,IAAI,IAAI,GAAG,SAAS,IAAI,CAAE,QAAO;AACnD,KAAI,GAAG,SAAS,KAAK,CAAE,QAAO;AAC9B,QAAO;;AAGT,MAAM,oBAAoB,EAAE,OAAO;CACjC,IAAI,EAAE,QAAQ,CAAC,OAAO,mBAAmB,EACvC,SACE,iJACH,CAAC;CACF,aAAa,EAAE,KAAK;EAAC;EAAc;EAAY;EAAa,CAAC;CAC7D,SAAS,EAAE,QAAQ;CACpB,CAAC;AAEF,MAAM,8BAA8B,EAAE,OAAO;CAC3C,OAAO,EAAE,QAAQ,CAAC,OAAO,mBAAmB,EAC1C,SACE,4JACH,CAAC;CACF,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC3B,kBAAkB,EAAE,QAAQ,CAAC,IAAI,EAAE;CACnC,UAAU,EACP,QAAQ,CACR,MACC,mEACA,uDACD;CACH,WAAW,EACR,QAAQ,CACR,MACC,mBACA,2EACD;CACH,WAAW,EAAE,QAAQ;CACtB,CAAC;AAEF,MAAM,0BAA0B,EAAE,OAAO;CACvC,SAAS,EAAE,QAAQ,EAAE;CACrB,UAAU,EAAE,MAAM,kBAAkB;CACrC,CAAC;AAEF,MAAM,0BAA0B,EAAE,OAAO;CACvC,SAAS,EAAE,QAAQ,EAAE;CACrB,UAAU,EAAE,MAAM,kBAAkB;CACpC,kBAAkB,EAAE,OAAO,EAAE,QAAQ,EAAE,4BAA4B;CACpE,CAAC;AAEF,MAAM,gCAAgB,IAAI,KAA6C;AACvE,IAAIA,eAA8B,QAAQ,SAAS;AAEnD,MAAM,sBAAsB,OAC1B,cACe;CACf,MAAM,eAAe;CACrB,IAAIC;AACJ,gBAAe,IAAI,SAAe,YAAY;AAC5C,gBAAc;GACd;AAEF,OAAM;AAEN,KAAI;AACF,SAAO,MAAM,WAAW;WAChB;AACR,eAAa;;;;;;AAOjB,SAAS,sBAAuC;AAC9C,QAAO;EACL,SAAS;EACT,UAAU,EAAE;EACZ,kBAAkB,EAAE;EACrB;;AAGH,MAAM,wBAAwB,EAC5B,OACA,UACA,wBAK4B;CAC5B;CACA;CACA;CACA,UAAU,uBAAuB;CACjC,WAAW,wBAAwB;CACnC,WAAW,KAAK,KAAK;CACtB;AAED,MAAM,0BACJ,UACA,EACE,OACA,UACA,uBAMwB;CAC1B,MAAM,cAAc,iBAAiB;EAAE;EAAO;EAAU;EAAkB,CAAC;CAC3E,MAAM,WAAW,SAAS,iBAAiB;AAC3C,KAAI,SACF,QAAO;CAGT,MAAM,UAAU,qBAAqB;EACnC;EACA;EACA;EACD,CAAC;AACF,UAAS,iBAAiB,eAAe;AACzC,QAAO;;AAGT,MAAM,qCACJ,aACY;CACZ,MAAM,EAAE,UAAU,qBAAqB,+BAA+B;CACtE,MAAM,cAAc,OAAO,KAAK,SAAS,iBAAiB,CAAC;AAE3D,MAAK,MAAM,WAAW,SAAS,SAC7B,wBAAuB,UAAU;EAC/B,OAAO,QAAQ;EACf;EACA;EACD,CAAC;AAGJ,QAAO,OAAO,KAAK,SAAS,iBAAiB,CAAC,WAAW;;AAG3D,MAAM,6BAA6B,aAE7B;CACJ,MAAM,uBAAO,IAAI,KAAa;AAC9B,MAAK,MAAM,WAAW,SAAS,UAAU;AACvC,MAAI,KAAK,IAAI,QAAQ,GAAG,CACtB,OAAM,IAAI,MACR,gCAAgC,MAAM,uBAAuB,0BAA0B,QAAQ,GAAG,GACnG;AAEH,OAAK,IAAI,QAAQ,GAAG;;;AAIxB,MAAM,uBAAuB,YAGvB;AACJ,KAAI;EACF,MAAM,UAAU,MAAM,GAAG,SAAS,MAAM,wBAAwB,OAAO;AACvE,MAAI,CAAC,QAAQ,MAAM,CACjB,QAAO;GACL,UAAU,qBAAqB;GAC/B,eAAe;GAChB;EAGH,IAAIC;AACJ,MAAI;AACF,YAAS,KAAK,MAAM,QAAQ;WACrB,OAAO;AACd,SAAM,IAAI,MACR,qCAAqC,MAAM,uBAAuB,IAChE,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GAEzD;;EAQH,MAAM,SAJJ,OAAO,WAAW,YACf,WAAW,QACX,aAAa,UACb,OAAO,YAAY,IAGpB,wBAAwB,UAAU,OAAO,GACzC,wBAAwB,UAAU,OAAO;AAC7C,MAAI,CAAC,OAAO,SAAS;GACnB,MAAM,SAAS,OAAO,MAAM,OACzB,KAAK,UAAU,GAAG,MAAM,KAAK,KAAK,IAAI,CAAC,IAAI,MAAM,UAAU,CAC3D,KAAK,KAAK;AAEb,SAAM,IAAI,MACR,gCAAgC,MAAM,uBAAuB,IAAI,SAClE;;EAGH,MAAM,iBAAiB,OAAO;EAC9B,MAAMC,WACJ,eAAe,YAAY,IACzB,iBACA;GACE,SAAS;GACT,UAAU,eAAe;GACzB,kBAAkB,EAAE;GACrB;AAEL,4BAA0B,SAAS;EAEnC,MAAM,uBAAuB,kCAAkC,SAAS;AAExE,SAAO;GACL;GACA,eAAe,eAAe,YAAY,KAAK;GAChD;UACM,OAAO;AACd,MAAK,MAAgC,SAAS,SAC5C,QAAO;GACL,UAAU,qBAAqB;GAC/B,eAAe;GAChB;AAEH,QAAM;;;AAIV,MAAM,uBAAuB,OAC3B,aACkB;CAClB,MAAM,UAAU,KAAK,UAAU,UAAU,MAAM,EAAE;AACjD,OAAM,GAAG,UAAU,MAAM,wBAAwB,SAAS,EAAE,MAAM,KAAO,CAAC;;;;;;AAO5E,eAAsB,eAAyC;AAC7D,QAAO,oBAAoB,YAAY;EACrC,MAAM,EAAE,UAAU,kBAAkB,MAAM,sBAAsB;AAChE,MAAI,cACF,OAAM,qBAAqB,SAAS;AAEtC,SAAO;GACP;;;;;AAMJ,eAAsB,aAAa,UAA0C;AAC3E,OAAM,oBAAoB,YAAY;AACpC,QAAM,qBAAqB,SAAS;GACpC;;AAUJ,eAAsB,sCACpB,OACA,UACuC;CACvC,MAAM,WAAW,MAAM,cAAc;CAErC,MAAM,aAAa,OAAO,OAAO,SAAS,iBAAiB,CAAC,QACzD,aACC,aAAa,UACV,SAAS,UAAU,SACnB,SAAS,aAAa,SAC5B;CAED,MAAM,sBAAsB,WAAW,QACpC,aACC,SAAS,qBAAqB,mCACjC;AAID,SAFE,oBAAoB,SAAS,IAAI,sBAAsB,YAEpC,QAClB,QAAQ,YAAY;AACnB,MAAI,CAAC,UAAU,QAAQ,YAAY,OAAO,UAAW,QAAO;AAC5D,SAAO;IAET,KACD;;AAGH,eAAsB,4BAA4B,EAChD,OACA,UACA,oBAKiC;AACjC,KAAI,CAAC,kBAAkB,MAAM,CAC3B,OAAM,IAAI,MAAM,uBAAuB,QAAQ;CAGjD,MAAM,qBAAqB,SAAS,MAAM;AAC1C,KAAI,CAAC,mBACH,OAAM,IAAI,MAAM,wCAAwC;CAG1D,MAAM,6BAA6B,iBAAiB,MAAM;AAC1D,KAAI,CAAC,2BACH,OAAM,IAAI,MAAM,gDAAgD;CAGlE,MAAM,cAAc,iBAAiB;EACnC;EACA,UAAU;EACV,kBAAkB;EACnB,CAAC;CACF,MAAM,eAAe,cAAc,IAAI,YAAY;AACnD,KAAI,aACF,QAAO;CAGT,MAAM,kBAAkB,oBACtB,YAA4C;EAC1C,MAAM,EAAE,UAAU,kBAAkB,MAAM,sBAAsB;EAChE,MAAM,WAAW,SAAS,iBAAiB;AAC3C,MAAI,UAAU;AACZ,OAAI,cACF,OAAM,qBAAqB,SAAS;AAEtC,UAAO;;EAGT,MAAM,UAAU,qBAAqB;GACnC;GACA,UAAU;GACV,kBAAkB;GACnB,CAAC;AACF,WAAS,iBAAiB,eAAe;AACzC,QAAM,qBAAqB,SAAS;AACpC,SAAO;GAEV;AAED,eAAc,IAAI,aAAa,gBAAgB;AAE/C,KAAI;AACF,SAAO,MAAM;WACL;AACR,MAAI,cAAc,IAAI,YAAY,KAAK,gBACrC,eAAc,OAAO,YAAY;;;;;;;AASvC,eAAsB,qBAAqB,MAAkC;AAC3E,KAAI,CAAC,kBAAkB,KAAK,GAAG,CAC7B,OAAM,IAAI,MAAM,uBAAuB,KAAK,KAAK;AAGnD,OAAM,oBAAoB,YAAY;EACpC,MAAM,EAAE,aAAa,MAAM,sBAAsB;AAGjD,MAAI,SAAS,SAAS,MAAM,MAAM,EAAE,OAAO,KAAK,GAAG,CACjD,OAAM,IAAI,MAAM,2BAA2B,KAAK,KAAK;AAGvD,WAAS,SAAS,KAAK,KAAK;EAC5B,MAAM,EAAE,UAAU,qBAAqB,+BAA+B;AACtE,yBAAuB,UAAU;GAC/B,OAAO,KAAK;GACZ;GACA;GACD,CAAC;AACF,QAAM,qBAAqB,SAAS;GACpC;;;;;;AAOJ,eAAsB,0BACpB,WACsB;AACtB,QAAO,oBAAoB,YAAY;EACrC,MAAM,EAAE,aAAa,MAAM,sBAAsB;EACjD,IAAIC;AAEJ,MAAI,OAAO,cAAc,UAAU;AAEjC,WAAQ,YAAY;AACpB,OAAI,QAAQ,KAAK,SAAS,SAAS,SAAS,OAC1C,OAAM,IAAI,MAAM,0BAA0B,YAAY;SAEnD;AACL,WAAQ,SAAS,SAAS,WAAW,MAAM,EAAE,OAAO,UAAU;AAC9D,OAAI,UAAU,GACZ,OAAM,IAAI,MAAM,sBAAsB,YAAY;;EAItD,MAAM,CAAC,WAAW,SAAS,SAAS,OAAO,OAAO,EAAE;AACpD,QAAM,qBAAqB,SAAS;AACpC,SAAO;GACP;;;;;AAMJ,eAAsB,2BAAwD;AAE5E,SADiB,MAAM,cAAc,EACrB;;;;;;AAOlB,eAAsB,iBAAiB,IAAoC;AACzE,KAAI,CAAC,kBAAkB,GAAG,CACxB,OAAM,IAAI,MAAM,uBAAuB,KAAK;AAG9C,KAAI;EACF,MAAM,YAAY,iBAAiB,GAAG;AAEtC,UADc,MAAM,GAAG,SAAS,WAAW,OAAO,EACrC,MAAM,IAAI;UAChB,OAAO;AACd,MAAK,MAAgC,SAAS,SAC5C,QAAO;AAET,QAAM;;;;;;AAOV,eAAsB,iBACpB,IACA,OACe;AACf,KAAI,CAAC,kBAAkB,GAAG,CACxB,OAAM,IAAI,MAAM,uBAAuB,KAAK;CAG9C,MAAM,YAAY,iBAAiB,GAAG;AACtC,OAAM,GAAG,UAAU,WAAW,OAAO,EAAE,MAAM,KAAO,CAAC;;;;;AAMvD,eAAsB,mBAAmB,IAA2B;AAClE,KAAI,CAAC,kBAAkB,GAAG,CACxB,OAAM,IAAI,MAAM,uBAAuB,KAAK;CAG9C,MAAM,YAAY,iBAAiB,GAAG;AACtC,KAAI;AACF,QAAM,GAAG,OAAO,UAAU;UACnB,OAAO;AACd,MAAK,MAAgC,SAAS,SAC5C,OAAM;;;;;;AASZ,eAAsB,iBAAmC;AACvD,KAAI;AAEF,UADgB,MAAM,GAAG,SAAS,MAAM,mBAAmB,OAAO,EACnD,MAAM,CAAC,SAAS;SACzB;AACN,SAAO;;;;;;;AAQX,eAAsB,kBAA0C;AAC9D,KAAI;AAEF,UADgB,MAAM,GAAG,SAAS,MAAM,mBAAmB,OAAO,EACnD,MAAM,IAAI;SACnB;AACN,SAAO;;;;;;AAOX,eAAsB,cAAgC;AAEpD,SADiB,MAAM,cAAc,EACrB,SAAS,SAAS;;;;;ACnhBpC,MAAaC,sBAAkD;CAC7D;CACA;CACA;CACD;AAED,SAAgB,cAAc,OAAsC;AAClE,QACE,OAAO,UAAU,YACb,oBAA8C,SAAS,MAAM;;AAIrE,SAAgB,iBAAiB,OAA6B;AAC5D,KAAI,CAAC,cAAc,MAAM,CACvB,OAAM,IAAI,MACR,yBAAyB,OAAO,MAAM,CAAC,kBAAkB,oBAAoB,KAC3E,KACD,GACF;AAEH,QAAO"}