@openai-oauth/core 2.0.0-beta.0 → 2.0.0-beta.2

package/dist/auth.d.ts

@@ -2,6 +2,7 @@ import { type FetchFunction, type OpenAIOAuthTokenResponse } from "./runtime.js"
 export type EffectiveAuth = {
     accessToken: string;
     accountId: string;
+    isFedRamp?: boolean;
     idToken?: string;
     refreshToken?: string;
     sourcePath?: string;

package/dist/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAGA,OAAO,EAIN,KAAK,aAAa,EAClB,KAAK,wBAAwB,EAG7B,MAAM,cAAc,CAAA;AAuBrB,MAAM,MAAM,aAAa,GAAG;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,KAAK,EAAE,aAAa,CAAA;IACpB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,qBAAqB,GAAG;IACnC,KAAK,EAAE,wBAAwB,CAAA;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,aAAa,CAAA;CACnB,CAAA;AAkDD,eAAO,MAAM,uBAAuB,GACnC,MAAM,IAAI,CAAC,aAAa,EAAE,aAAa,GAAG,aAAa,CAAC,EACxD,MAAK,IAAiB,KACpB,OAA4E,CAAA;AAgB/E,eAAO,MAAM,yBAAyB,GAAI,eAAe,MAAM,KAAG,MAAM,EAmBvE,CAAA;AAgFD,eAAO,MAAM,wBAAwB,GAAI,eAAe,MAAM,KAAG,MAUhE,CAAA;AAED,eAAO,MAAM,cAAc,GAC1B,SAAS,qBAAqB,KAC5B,OAAO,CAAC,eAAe,CAsCzB,CAAA;AAyCD,eAAO,MAAM,cAAc,GAC1B,SAAS,iBAAiB,KACxB,OAAO,CAAC,aAAa,CAkFvB,CAAA"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAGA,OAAO,EAKN,KAAK,aAAa,EAClB,KAAK,wBAAwB,EAG7B,MAAM,cAAc,CAAA;AAwBrB,MAAM,MAAM,aAAa,GAAG;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,KAAK,EAAE,aAAa,CAAA;IACpB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,qBAAqB,GAAG;IACnC,KAAK,EAAE,wBAAwB,CAAA;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,aAAa,CAAA;CACnB,CAAA;AAmDD,eAAO,MAAM,uBAAuB,GACnC,MAAM,IAAI,CAAC,aAAa,EAAE,aAAa,GAAG,aAAa,CAAC,EACxD,MAAK,IAAiB,KACpB,OAA4E,CAAA;AAgB/E,eAAO,MAAM,yBAAyB,GAAI,eAAe,MAAM,KAAG,MAAM,EAmBvE,CAAA;AAsFD,eAAO,MAAM,wBAAwB,GAAI,eAAe,MAAM,KAAG,MAUhE,CAAA;AAED,eAAO,MAAM,cAAc,GAC1B,SAAS,qBAAqB,KAC5B,OAAO,CAAC,eAAe,CAwCzB,CAAA;AAsCD,eAAO,MAAM,cAAc,GAC1B,SAAS,iBAAiB,KACxB,OAAO,CAAC,aAAa,CA0FvB,CAAA"}

package/dist/auth.js

@@ -1,7 +1,7 @@
 import { promises as fs } from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import { DEFAULT_OPENAI_OAUTH_CLIENT_ID, DEFAULT_OPENAI_OAUTH_ISSUER, deriveAccountId, parseJwtClaims, refreshOpenAIOAuthTokens, } from "./runtime.js";
+import { DEFAULT_OPENAI_OAUTH_CLIENT_ID, DEFAULT_OPENAI_OAUTH_ISSUER, deriveAccountId, deriveChatGptAccountIsFedRamp, parseJwtClaims, refreshOpenAIOAuthTokens, } from "./runtime.js";
 const DEFAULT_AUTH_CLIENT_ID = process.env.CHATGPT_LOCAL_CLIENT_ID ?? DEFAULT_OPENAI_OAUTH_CLIENT_ID;
 const DEFAULT_AUTH_ISSUER = process.env.CHATGPT_LOCAL_ISSUER ?? DEFAULT_OPENAI_OAUTH_ISSUER;
 const AUTH_FILENAME = "auth.json";
@@ -70,11 +70,14 @@ const resolveWritePath = (preferred) => {
     return path.join(os.homedir(), ".chatgpt-local", AUTH_FILENAME);
 };
 const toAuthFile = (input) => {
-    const auth = {};
+    const auth = { ...input };
     const tokensValue = input.tokens;
     if (typeof input.OPENAI_API_KEY === "string" && input.OPENAI_API_KEY) {
         auth.OPENAI_API_KEY = input.OPENAI_API_KEY;
     }
+    else {
+        delete auth.OPENAI_API_KEY;
+    }
     if (isRecord(tokensValue) && Object.keys(tokensValue).length > 0) {
         auth.tokens = {
             id_token: typeof tokensValue.id_token === "string"
@@ -91,9 +94,15 @@ const toAuthFile = (input) => {
                 : undefined,
         };
     }
+    else {
+        delete auth.tokens;
+    }
     if (typeof input.last_refresh === "string" && input.last_refresh) {
         auth.last_refresh = input.last_refresh;
     }
+    else {
+        delete auth.last_refresh;
+    }
     return auth;
 };
 const readAuthFile = async (candidates) => {
@@ -139,6 +148,7 @@ export const saveAuthTokens = async (options) => {
     }
     await writeAuthFile(filePath, {
         ...existing,
+        auth_mode: "chatgpt",
         tokens: {
             id_token: options.token.idToken,
             access_token: options.token.accessToken,
@@ -152,6 +162,7 @@ export const saveAuthTokens = async (options) => {
         auth: {
             accessToken: options.token.accessToken,
             accountId,
+            isFedRamp: options.token.isFedRamp,
             idToken: options.token.idToken,
             refreshToken: options.token.refreshToken,
             sourcePath: filePath,
@@ -160,24 +171,20 @@ export const saveAuthTokens = async (options) => {
     };
 };
 const refreshChatGptTokens = async (refreshToken, clientId, issuer, tokenUrl, fetchFn) => {
-    try {
-        const refreshed = await refreshOpenAIOAuthTokens({
-            refreshToken,
-            clientId,
-            issuer,
-            tokenUrl,
-            fetch: fetchFn,
-        });
-        return {
-            accessToken: refreshed.accessToken,
-            idToken: refreshed.idToken,
-            refreshToken: refreshed.refreshToken ?? refreshToken,
-            accountId: refreshed.accountId,
-        };
-    }
-    catch {
-        return undefined;
-    }
+    const refreshed = await refreshOpenAIOAuthTokens({
+        refreshToken,
+        clientId,
+        issuer,
+        tokenUrl,
+        fetch: fetchFn,
+    });
+    return {
+        accessToken: refreshed.accessToken,
+        idToken: refreshed.idToken,
+        refreshToken: refreshed.refreshToken ?? refreshToken,
+        accountId: refreshed.accountId,
+        isFedRamp: refreshed.isFedRamp,
+    };
 };
 const normalizeTokens = (tokens) => {
     const maybeString = (value) => typeof value === "string" && value.length > 0 ? value : undefined;
@@ -200,30 +207,36 @@ export const loadAuthTokens = async (options) => {
     let idToken = tokens.id_token;
     let refreshToken = tokens.refresh_token;
     let accountId = tokens.account_id ?? deriveAccountId(idToken);
+    let isFedRamp = deriveChatGptAccountIsFedRamp(idToken) ||
+        deriveChatGptAccountIsFedRamp(accessToken);
     let lastRefresh = authData.last_refresh;
     const needsRefresh = ensureFresh &&
         typeof refreshToken === "string" &&
         shouldRefreshAccessToken(accessToken, lastRefresh, now());
     if (needsRefresh && typeof refreshToken === "string") {
         const refreshed = await refreshChatGptTokens(refreshToken, clientId, issuer, tokenUrl, fetch);
-        if (refreshed) {
-            accessToken = refreshed.accessToken;
-            idToken = refreshed.idToken ?? idToken;
-            refreshToken = refreshed.refreshToken ?? refreshToken;
-            accountId = refreshed.accountId ?? accountId;
-            lastRefresh = now().toISOString();
-            const writePath = resolveWritePath(readResult.path ?? authFilePath);
-            await writeAuthFile(writePath, {
-                ...authData,
-                tokens: {
-                    id_token: idToken,
-                    access_token: accessToken,
-                    refresh_token: refreshToken,
-                    account_id: accountId,
-                },
-                last_refresh: lastRefresh,
-            });
-        }
+        accessToken = refreshed.accessToken;
+        idToken = refreshed.idToken ?? idToken;
+        refreshToken = refreshed.refreshToken ?? refreshToken;
+        accountId = refreshed.accountId ?? accountId;
+        isFedRamp =
+            isFedRamp ||
+                refreshed.isFedRamp === true ||
+                deriveChatGptAccountIsFedRamp(idToken) ||
+                deriveChatGptAccountIsFedRamp(accessToken);
+        lastRefresh = now().toISOString();
+        const writePath = resolveWritePath(readResult.path ?? authFilePath);
+        await writeAuthFile(writePath, {
+            ...authData,
+            auth_mode: "chatgpt",
+            tokens: {
+                id_token: idToken,
+                access_token: accessToken,
+                refresh_token: refreshToken,
+                account_id: accountId,
+            },
+            last_refresh: lastRefresh,
+        });
     }
     if (typeof accessToken !== "string" || accessToken.length === 0) {
         throw new Error("ChatGPT access token not found. Run `codex login` to create auth.json.");
@@ -234,6 +247,7 @@ export const loadAuthTokens = async (options) => {
     return {
         accessToken,
         accountId,
+        isFedRamp,
         idToken,
         refreshToken,
         sourcePath: readResult.path ?? resolveWritePath(authFilePath),

package/dist/models.d.ts

@@ -0,0 +1,32 @@
+export declare const DEFAULT_CODEX_CLIENT_VERSION = "0.144.1";
+type FetchLike = typeof fetch;
+export type CodexModelInfo = {
+    slug: string;
+    visibility?: string;
+    supportedInApi?: boolean;
+    minimalClientVersion?: string;
+    useResponsesLite?: boolean;
+    preferWebsockets?: boolean;
+    supportVerbosity?: boolean;
+    defaultVerbosity?: string;
+    defaultReasoningLevel?: string;
+    defaultReasoningSummary?: string;
+    supportsParallelToolCalls?: boolean;
+    availableInPlans?: string[];
+    raw: Record<string, unknown>;
+};
+export type ResolveCodexClientVersionOptions = {
+    codexVersion?: string;
+    fetchImpl?: FetchLike;
+    onWarning?: (message: string) => void;
+};
+export type FetchCodexModelCatalogOptions = ResolveCodexClientVersionOptions;
+export type CodexModelCatalogClient = {
+    request(path: string, init?: RequestInit): Promise<Response>;
+};
+export declare const resolveCodexClientVersion: (options?: ResolveCodexClientVersionOptions) => Promise<string>;
+export declare const resetCodexClientVersionCache: () => void;
+export declare const fetchCodexModelCatalog: (client: CodexModelCatalogClient, options?: FetchCodexModelCatalogOptions) => Promise<CodexModelInfo[]>;
+export declare const isPublicCodexModel: (model: CodexModelInfo) => boolean;
+export {};
+//# sourceMappingURL=models.d.ts.map

package/dist/models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../src/models.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,4BAA4B,YAAY,CAAA;AAKrD,KAAK,SAAS,GAAG,OAAO,KAAK,CAAA;AAE7B,MAAM,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,yBAAyB,CAAC,EAAE,OAAO,CAAA;IACnC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC3B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC5B,CAAA;AAED,MAAM,MAAM,gCAAgC,GAAG;IAC9C,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CACrC,CAAA;AAED,MAAM,MAAM,6BAA6B,GAAG,gCAAgC,CAAA;AAE5E,MAAM,MAAM,uBAAuB,GAAG;IACrC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CAC5D,CAAA;AAiFD,eAAO,MAAM,yBAAyB,GACrC,UAAS,gCAAqC,KAC5C,OAAO,CAAC,MAAM,CA4ChB,CAAA;AAED,eAAO,MAAM,4BAA4B,QAAO,IAI/C,CAAA;AAED,eAAO,MAAM,sBAAsB,GAClC,QAAQ,uBAAuB,EAC/B,UAAS,6BAAkC,KACzC,OAAO,CAAC,cAAc,EAAE,CA8B1B,CAAA;AAED,eAAO,MAAM,kBAAkB,GAAI,OAAO,cAAc,KAAG,OAEK,CAAA"}

package/dist/models.js

@@ -0,0 +1,131 @@
+export const DEFAULT_CODEX_CLIENT_VERSION = "0.144.1";
+const CODEX_VERSION_CACHE_TTL_MS = 60 * 60 * 1000;
+const CODEX_REGISTRY_URL = "https://registry.npmjs.org/@openai/codex/latest";
+const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const normalizeVersion = (value) => {
+    if (typeof value !== "string") {
+        return undefined;
+    }
+    return value.trim().match(/\b\d+\.\d+\.\d+\b/)?.[0];
+};
+const optionalString = (value) => typeof value === "string" && value.length > 0 ? value : undefined;
+const optionalBoolean = (value) => typeof value === "boolean" ? value : undefined;
+const optionalStrings = (value) => Array.isArray(value)
+    ? value.filter((item) => typeof item === "string")
+    : undefined;
+const toCodexModelInfo = (value) => {
+    if (!isRecord(value)) {
+        return undefined;
+    }
+    const slug = optionalString(value.slug);
+    if (!slug) {
+        return undefined;
+    }
+    return {
+        slug,
+        visibility: optionalString(value.visibility),
+        supportedInApi: optionalBoolean(value.supported_in_api),
+        minimalClientVersion: optionalString(value.minimal_client_version),
+        useResponsesLite: optionalBoolean(value.use_responses_lite),
+        preferWebsockets: optionalBoolean(value.prefer_websockets),
+        supportVerbosity: optionalBoolean(value.support_verbosity),
+        defaultVerbosity: optionalString(value.default_verbosity),
+        defaultReasoningLevel: optionalString(value.default_reasoning_level),
+        defaultReasoningSummary: optionalString(value.default_reasoning_summary),
+        supportsParallelToolCalls: optionalBoolean(value.supports_parallel_tool_calls),
+        availableInPlans: optionalStrings(value.available_in_plans),
+        raw: value,
+    };
+};
+const toUpstreamErrorMessage = (bodyText) => {
+    if (!bodyText) {
+        return "Failed to load models from Codex.";
+    }
+    try {
+        const parsed = JSON.parse(bodyText);
+        if (isRecord(parsed)) {
+            if (typeof parsed.detail === "string" && parsed.detail.length > 0) {
+                return parsed.detail;
+            }
+            if (isRecord(parsed.error) && typeof parsed.error.message === "string") {
+                return parsed.error.message;
+            }
+        }
+    }
+    catch { }
+    return bodyText;
+};
+let cachedCodexClientVersion;
+let codexClientVersionCacheExpiresAt = 0;
+let inflightCodexClientVersion;
+export const resolveCodexClientVersion = async (options = {}) => {
+    const explicitVersion = normalizeVersion(options.codexVersion);
+    if (explicitVersion) {
+        return explicitVersion;
+    }
+    const now = Date.now();
+    if (cachedCodexClientVersion && now < codexClientVersionCacheExpiresAt) {
+        return cachedCodexClientVersion;
+    }
+    if (inflightCodexClientVersion) {
+        return inflightCodexClientVersion;
+    }
+    const fetchImpl = options.fetchImpl ?? globalThis.fetch;
+    inflightCodexClientVersion = (async () => {
+        try {
+            const response = await fetchImpl(CODEX_REGISTRY_URL, {
+                headers: { accept: "application/json" },
+            });
+            if (response.ok) {
+                const parsed = (await response.json());
+                const version = normalizeVersion(parsed.version);
+                if (version) {
+                    cachedCodexClientVersion = version;
+                    codexClientVersionCacheExpiresAt =
+                        Date.now() + CODEX_VERSION_CACHE_TTL_MS;
+                    return version;
+                }
+            }
+        }
+        catch { }
+        options.onWarning?.(`Could not determine the latest Codex version. Falling back to ${DEFAULT_CODEX_CLIENT_VERSION}. Pass a version explicitly if you need to override it.`);
+        cachedCodexClientVersion = DEFAULT_CODEX_CLIENT_VERSION;
+        codexClientVersionCacheExpiresAt = Date.now() + CODEX_VERSION_CACHE_TTL_MS;
+        return DEFAULT_CODEX_CLIENT_VERSION;
+    })().finally(() => {
+        inflightCodexClientVersion = undefined;
+    });
+    return inflightCodexClientVersion;
+};
+export const resetCodexClientVersionCache = () => {
+    cachedCodexClientVersion = undefined;
+    codexClientVersionCacheExpiresAt = 0;
+    inflightCodexClientVersion = undefined;
+};
+export const fetchCodexModelCatalog = async (client, options = {}) => {
+    const clientVersion = await resolveCodexClientVersion(options);
+    const response = await client.request(`/models?client_version=${encodeURIComponent(clientVersion)}`);
+    const bodyText = await response.text();
+    if (!response.ok) {
+        throw new Error(toUpstreamErrorMessage(bodyText));
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(bodyText);
+    }
+    catch {
+        throw new Error("Codex returned an invalid models response.");
+    }
+    if (!isRecord(parsed) || !Array.isArray(parsed.models)) {
+        throw new Error("Codex returned a malformed models response.");
+    }
+    const models = parsed.models
+        .map(toCodexModelInfo)
+        .filter((model) => model !== undefined);
+    if (models.length === 0) {
+        throw new Error("Codex returned an empty models list.");
+    }
+    return models;
+};
+export const isPublicCodexModel = (model) => model.supportedInApi !== false &&
+    (model.visibility === undefined || model.visibility === "list");

package/dist/runtime.d.ts

@@ -10,6 +10,7 @@ export type FetchFunction = typeof fetch;
 export type OpenAIOAuthSession = {
     accessToken: string;
     accountId: string;
+    isFedRamp?: boolean;
     idToken?: string;
     refreshToken?: string;
     expiresAt?: string;
@@ -25,7 +26,6 @@ export type OpenAIOAuth = {
     headers?: Record<string, string>;
     instructions?: string;
     openAIBaseURL?: string;
-    storeResponses?: boolean;
 };
 export type SessionStore = {
     get(): Promise<OpenAIOAuthSession | null>;
@@ -56,6 +56,7 @@ export type OpenAIOAuthTokenResponse = {
     idToken?: string;
     expiresIn?: number;
     accountId?: string;
+    isFedRamp?: boolean;
     raw: unknown;
 };
 export type ExchangeOpenAIOAuthCodeOptions = {
@@ -79,10 +80,10 @@ export type RefreshOpenAIOAuthTokensOptions = {
 export type CodexOAuthRuntimeSettings = {
     auth: OpenAIOAuthSessionInput;
     baseURL?: string;
+    codexVersion?: string;
     fetch?: FetchFunction;
     headers?: Record<string, string>;
     instructions?: string;
-    storeResponses?: boolean;
     responsesState?: CodexResponsesState | false;
 };
 export type OpenAIOAuthTransportOptions = CodexOAuthRuntimeSettings & {
@@ -109,11 +110,11 @@ export type CodexOAuthClient = {
 export type NormalizeCodexResponsesBodyOptions = {
     instructions?: string;
     forceStream?: boolean;
-    storeResponses?: boolean;
 };
 export declare const usesServerReplayState: (value: Record<string, unknown>) => boolean;
 export declare const parseJwtClaims: (token: string | undefined) => Record<string, unknown> | undefined;
 export declare const deriveAccountId: (idToken: string | undefined) => string | undefined;
+export declare const deriveChatGptAccountIsFedRamp: (token: string | undefined) => boolean;
 export declare const createOpenAIOAuthRequest: (options: OpenAIOAuthRequestOptions) => Promise<OpenAIOAuthRequest>;
 export declare const exchangeOpenAIOAuthCode: (options: ExchangeOpenAIOAuthCodeOptions) => Promise<OpenAIOAuthTokenResponse>;
 export declare const refreshOpenAIOAuthTokens: (options: RefreshOpenAIOAuthTokensOptions) => Promise<OpenAIOAuthTokenResponse>;

package/dist/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAEhD,OAAO,EACN,+BAA+B,EAC/B,uBAAuB,EACvB,KAAK,eAAe,GACpB,MAAM,UAAU,CAAA;AACjB,OAAO,EACN,mBAAmB,EACnB,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,GAChC,MAAM,YAAY,CAAA;AAInB,eAAO,MAAM,sBAAsB,0CAA0C,CAAA;AAC7E,eAAO,MAAM,kCAAkC,kCACf,CAAA;AAChC,eAAO,MAAM,8BAA8B,iCAAiC,CAAA;AAC5E,eAAO,MAAM,2BAA2B,4BAA4B,CAAA;AACpE,eAAO,MAAM,0BAA0B,wCAAwC,CAAA;AAG/E,MAAM,MAAM,aAAa,GAAG,OAAO,KAAK,CAAA;AAExC,MAAM,MAAM,kBAAkB,GAAG;IAChC,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,uBAAuB,GAChC,kBAAkB,GAClB,CAAC,MAAM,OAAO,CAAC,kBAAkB,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC,CAAA;AAEzD,MAAM,MAAM,WAAW,GAAG;IACzB,IAAI,EAAE,cAAc,CAAA;IACpB,UAAU,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAA;IAChD,cAAc,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAA;IACpD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,aAAa,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,cAAc,CAAC,EAAE,OAAO,CAAA;CACxB,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IAC1B,GAAG,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAA;IACzC,GAAG,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,yBAAyB,GAAG;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,uBAAuB,CAAC,EAAE,OAAO,CAAA;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAA;CACnE,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAChC,gBAAgB,EAAE,MAAM,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,wBAAwB,GAAG;IACtC,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,GAAG,EAAE,OAAO,CAAA;CACZ,CAAA;AAED,MAAM,MAAM,8BAA8B,GAAG;IAC5C,IAAI,EAAE,MAAM,CAAA;IACZ,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,aAAa,CAAA;IACrB,MAAM,CAAC,EAAE,WAAW,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,+BAA+B,GAAG;IAC7C,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,aAAa,CAAA;IACrB,MAAM,CAAC,EAAE,WAAW,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,yBAAyB,GAAG;IACvC,IAAI,EAAE,uBAAuB,CAAA;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,aAAa,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,cAAc,CAAC,EAAE,mBAAmB,GAAG,KAAK,CAAA;CAC5C,CAAA;AAED,MAAM,MAAM,2BAA2B,GAAG,yBAAyB,GAAG;IACrE,aAAa,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IAClC,IAAI,EAAE,mBAAmB,CAAA;IACzB,QAAQ,EAAE,eAAe,CAAA;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,aAAa,CAAA;IACpB,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;IAChE,YAAY,EAAE;QACb,SAAS,EAAE,IAAI,CAAA;QACf,eAAe,EAAE,IAAI,CAAA;QACrB,MAAM,EAAE,IAAI,CAAA;QACZ,SAAS,EAAE,IAAI,CAAA;KACf,CAAA;CACD,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,aAAa,CAAA;IACpB,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;CAChE,CAAA;AAUD,MAAM,MAAM,kCAAkC,GAAG;IAChD,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,cAAc,CAAC,EAAE,OAAO,CAAA;CACxB,CAAA;AAkCD,eAAO,MAAM,qBAAqB,GACjC,OAAO,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC5B,OAeF,CAAA;AAaD,eAAO,MAAM,cAAc,GAC1B,OAAO,MAAM,GAAG,SAAS,KACvB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAkB5B,CAAA;AAED,eAAO,MAAM,eAAe,GAC3B,SAAS,MAAM,GAAG,SAAS,KACzB,MAAM,GAAG,SA+BX,CAAA;AAmED,eAAO,MAAM,wBAAwB,GACpC,SAAS,yBAAyB,KAChC,OAAO,CAAC,kBAAkB,CA4C5B,CAAA;AAED,eAAO,MAAM,uBAAuB,GACnC,SAAS,8BAA8B,KACrC,OAAO,CAAC,wBAAwB,CAahC,CAAA;AAEH,eAAO,MAAM,wBAAwB,GACpC,SAAS,+BAA+B,KACtC,OAAO,CAAC,wBAAwB,CAYhC,CAAA;AAsGH,eAAO,MAAM,2BAA2B,QAAO,MACpB,CAAA;AAE3B,eAAO,MAAM,2BAA2B,GACvC,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,UAAS,kCAAuC,KAC9C,MAAM,CAAC,MAAM,EAAE,OAAO,CAmBxB,CAAA;AA8FD,eAAO,MAAM,qBAAqB,GACjC,UAAU,yBAAyB,KACjC,aA8CF,CAAA;AAcD,eAAO,MAAM,sBAAsB,GAClC,UAAU,yBAAyB,KACjC,gBAUF,CAAA;AAED,eAAO,MAAM,0BAA0B,GACtC,UAAU,2BAA2B,KACnC,oBAkBF,CAAA"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAEhD,OAAO,EACN,+BAA+B,EAC/B,uBAAuB,EACvB,KAAK,eAAe,GACpB,MAAM,UAAU,CAAA;AACjB,OAAO,EACN,mBAAmB,EACnB,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,GAChC,MAAM,YAAY,CAAA;AAInB,eAAO,MAAM,sBAAsB,0CAA0C,CAAA;AAC7E,eAAO,MAAM,kCAAkC,kCACf,CAAA;AAChC,eAAO,MAAM,8BAA8B,iCAAiC,CAAA;AAC5E,eAAO,MAAM,2BAA2B,4BAA4B,CAAA;AACpE,eAAO,MAAM,0BAA0B,wCAAwC,CAAA;AAM/E,MAAM,MAAM,aAAa,GAAG,OAAO,KAAK,CAAA;AAExC,MAAM,MAAM,kBAAkB,GAAG;IAChC,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,uBAAuB,GAChC,kBAAkB,GAClB,CAAC,MAAM,OAAO,CAAC,kBAAkB,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC,CAAA;AAEzD,MAAM,MAAM,WAAW,GAAG;IACzB,IAAI,EAAE,cAAc,CAAA;IACpB,UAAU,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAA;IAChD,cAAc,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAA;IACpD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,aAAa,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IAC1B,GAAG,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAA;IACzC,GAAG,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,yBAAyB,GAAG;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,uBAAuB,CAAC,EAAE,OAAO,CAAA;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAA;CACnE,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAChC,gBAAgB,EAAE,MAAM,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,wBAAwB,GAAG;IACtC,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,GAAG,EAAE,OAAO,CAAA;CACZ,CAAA;AAED,MAAM,MAAM,8BAA8B,GAAG;IAC5C,IAAI,EAAE,MAAM,CAAA;IACZ,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,aAAa,CAAA;IACrB,MAAM,CAAC,EAAE,WAAW,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,+BAA+B,GAAG;IAC7C,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,aAAa,CAAA;IACrB,MAAM,CAAC,EAAE,WAAW,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,yBAAyB,GAAG;IACvC,IAAI,EAAE,uBAAuB,CAAA;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,KAAK,CAAC,EAAE,aAAa,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,cAAc,CAAC,EAAE,mBAAmB,GAAG,KAAK,CAAA;CAC5C,CAAA;AAED,MAAM,MAAM,2BAA2B,GAAG,yBAAyB,GAAG;IACrE,aAAa,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IAClC,IAAI,EAAE,mBAAmB,CAAA;IACzB,QAAQ,EAAE,eAAe,CAAA;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,aAAa,CAAA;IACpB,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;IAChE,YAAY,EAAE;QACb,SAAS,EAAE,IAAI,CAAA;QACf,eAAe,EAAE,IAAI,CAAA;QACrB,MAAM,EAAE,IAAI,CAAA;QACZ,SAAS,EAAE,IAAI,CAAA;KACf,CAAA;CACD,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,aAAa,CAAA;IACpB,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;CAChE,CAAA;AAUD,MAAM,MAAM,kCAAkC,GAAG;IAChD,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,WAAW,CAAC,EAAE,OAAO,CAAA;CACrB,CAAA;AAuCD,eAAO,MAAM,qBAAqB,GACjC,OAAO,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC5B,OAeF,CAAA;AAaD,eAAO,MAAM,cAAc,GAC1B,OAAO,MAAM,GAAG,SAAS,KACvB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAkB5B,CAAA;AAED,eAAO,MAAM,eAAe,GAC3B,SAAS,MAAM,GAAG,SAAS,KACzB,MAAM,GAAG,SA+BX,CAAA;AAED,eAAO,MAAM,6BAA6B,GACzC,OAAO,MAAM,GAAG,SAAS,KACvB,OAQF,CAAA;AA+FD,eAAO,MAAM,wBAAwB,GACpC,SAAS,yBAAyB,KAChC,OAAO,CAAC,kBAAkB,CA4C5B,CAAA;AAED,eAAO,MAAM,uBAAuB,GACnC,SAAS,8BAA8B,KACrC,OAAO,CAAC,wBAAwB,CAchC,CAAA;AAEH,eAAO,MAAM,wBAAwB,GACpC,SAAS,+BAA+B,KACtC,OAAO,CAAC,wBAAwB,CAYhC,CAAA;AAsGH,eAAO,MAAM,2BAA2B,QAAO,MACpB,CAAA;AA4G3B,eAAO,MAAM,2BAA2B,GACvC,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,UAAS,kCAAuC,KAC9C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAuD,CAAA;AAqPhF,eAAO,MAAM,qBAAqB,GACjC,UAAU,yBAAyB,KACjC,aA4EF,CAAA;AAcD,eAAO,MAAM,sBAAsB,GAClC,UAAU,yBAAyB,KACjC,gBAUF,CAAA;AAED,eAAO,MAAM,0BAA0B,GACtC,UAAU,2BAA2B,KACnC,oBAkBF,CAAA"}

package/dist/runtime.js

@@ -1,4 +1,5 @@
 import { withoutTrailingSlash } from "@ai-sdk/provider-utils";
+import { fetchCodexModelCatalog, isPublicCodexModel, } from "./models.js";
 import { CodexResponsesState } from "./state.js";
 export { collectCompletedResponseFromSse, iterateServerSentEvents, } from "./sse.js";
 export { CodexResponsesState, } from "./state.js";
@@ -9,6 +10,9 @@ export const DEFAULT_OPENAI_OAUTH_CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
 export const DEFAULT_OPENAI_OAUTH_ISSUER = "https://auth.openai.com";
 export const DEFAULT_OPENAI_OAUTH_SCOPE = "openid profile email offline_access";
 const DEFAULT_CODEX_INSTRUCTIONS = "";
+const MODEL_CATALOG_TTL_MS = 5 * 60 * 1000;
+const MODEL_CATALOG_FAILURE_TTL_MS = 60 * 1000;
+const RESPONSES_LITE_HEADER = "x-openai-internal-codex-responses-lite";
 const textEncoder = new TextEncoder();
 const bytesToBase64Url = (bytes) => {
     let binary = "";
@@ -100,6 +104,14 @@ export const deriveAccountId = (idToken) => {
     }
     return undefined;
 };
+export const deriveChatGptAccountIsFedRamp = (token) => {
+    const claims = parseJwtClaims(token);
+    if (!claims) {
+        return false;
+    }
+    const authClaim = claims["https://api.openai.com/auth"];
+    return isRecord(authClaim) && authClaim.chatgpt_account_is_fedramp === true;
+};
 const resolveTokenUrl = (issuer, tokenUrl) => tokenUrl ?? `${trimTrailingSlash(issuer)}/oauth/token`;
 const toTokenResponse = (payload) => {
     if (!isRecord(payload)) {
@@ -120,23 +132,50 @@ const toTokenResponse = (payload) => {
         idToken,
         expiresIn,
         accountId: deriveAccountId(idToken) ?? deriveAccountId(accessToken),
+        isFedRamp: deriveChatGptAccountIsFedRamp(idToken) ||
+            deriveChatGptAccountIsFedRamp(accessToken),
         raw: payload,
     };
 };
 const requestOpenAIOAuthTokens = async (options) => {
     const issuer = options.issuer ?? DEFAULT_OPENAI_OAUTH_ISSUER;
+    const isForm = options.encoding === "form";
     const response = await pickFetch(options.fetch)(resolveTokenUrl(issuer, options.tokenUrl), {
         method: "POST",
         headers: {
-            "Content-Type": "application/json",
+            "Content-Type": isForm
+                ? "application/x-www-form-urlencoded"
+                : "application/json",
         },
-        body: JSON.stringify(options.body),
+        body: isForm
+            ? new URLSearchParams(options.body).toString()
+            : JSON.stringify(options.body),
         signal: options.signal,
     });
+    const bodyText = await response.text();
     if (!response.ok) {
-        throw new Error(`OpenAI OAuth token request failed with HTTP ${response.status}.`);
+        let detail = "";
+        try {
+            const parsed = JSON.parse(bodyText);
+            if (isRecord(parsed)) {
+                const message = parsed.error_description ?? parsed.message ?? parsed.detail;
+                if (typeof message === "string") {
+                    detail = ` ${message}`;
+                }
+            }
+        }
+        catch { }
+        throw new Error(`OpenAI OAuth token request failed with HTTP ${response.status}.${detail}`);
+    }
+    try {
+        return toTokenResponse(JSON.parse(bodyText));
+    }
+    catch (error) {
+        if (error instanceof SyntaxError) {
+            throw new Error("OpenAI OAuth token response was not valid JSON.");
+        }
+        throw error;
     }
-    return toTokenResponse(await response.json());
 };
 export const createOpenAIOAuthRequest = async (options) => {
     const state = options.state ?? randomURLSafeString(24);
@@ -175,6 +214,7 @@ export const exchangeOpenAIOAuthCode = (options) => requestOpenAIOAuthTokens({
     tokenUrl: options.tokenUrl,
     fetch: options.fetch,
     signal: options.signal,
+    encoding: "form",
     body: {
         grant_type: "authorization_code",
         code: options.code,
@@ -188,11 +228,11 @@ export const refreshOpenAIOAuthTokens = (options) => requestOpenAIOAuthTokens({
     tokenUrl: options.tokenUrl,
     fetch: options.fetch,
     signal: options.signal,
+    encoding: "json",
     body: {
         grant_type: "refresh_token",
         refresh_token: options.refreshToken,
         client_id: options.clientId ?? DEFAULT_OPENAI_OAUTH_CLIENT_ID,
-        scope: DEFAULT_OPENAI_OAUTH_SCOPE,
     },
 });
 const pickFetch = (customFetch) => {
@@ -277,22 +317,90 @@ const decodeBody = async (body) => {
     return undefined;
 };
 export const getDefaultCodexInstructions = () => DEFAULT_CODEX_INSTRUCTIONS;
-export const normalizeCodexResponsesBody = (body, options = {}) => {
+const normalizeResponsesInput = (input) => typeof input === "string"
+    ? [
+        {
+            role: "user",
+            content: [{ type: "input_text", text: input }],
+        },
+    ]
+    : input;
+const addEncryptedReasoningContent = (include) => {
+    const values = Array.isArray(include)
+        ? include.filter((value) => typeof value === "string")
+        : [];
+    if (!values.includes("reasoning.encrypted_content")) {
+        values.push("reasoning.encrypted_content");
+    }
+    return values;
+};
+const applyModelDefaults = (normalized, modelInfo) => {
+    if (!modelInfo) {
+        return;
+    }
+    const reasoning = isRecord(normalized.reasoning)
+        ? { ...normalized.reasoning }
+        : {};
+    if (reasoning.effort === undefined &&
+        modelInfo.defaultReasoningLevel !== undefined) {
+        reasoning.effort = modelInfo.defaultReasoningLevel;
+    }
+    if (modelInfo.useResponsesLite) {
+        reasoning.context = "all_turns";
+    }
+    if (Object.keys(reasoning).length > 0) {
+        normalized.reasoning = reasoning;
+    }
+    if (modelInfo.supportVerbosity && modelInfo.defaultVerbosity !== undefined) {
+        const text = isRecord(normalized.text) ? { ...normalized.text } : {};
+        if (text.verbosity === undefined) {
+            text.verbosity = modelInfo.defaultVerbosity;
+        }
+        normalized.text = text;
+    }
+    if (!modelInfo.useResponsesLite) {
+        return;
+    }
+    const input = Array.isArray(normalized.input) ? [...normalized.input] : [];
+    const prefix = [];
+    const tools = Array.isArray(normalized.tools) ? normalized.tools : [];
+    if (tools.length > 0 &&
+        !input.some((item) => isRecord(item) && item.type === "additional_tools")) {
+        prefix.push({
+            type: "additional_tools",
+            role: "developer",
+            tools,
+        });
+    }
+    if (typeof normalized.instructions === "string" && normalized.instructions) {
+        prefix.push({
+            role: "developer",
+            content: [{ type: "input_text", text: normalized.instructions }],
+        });
+    }
+    normalized.input = [...prefix, ...input];
+    normalized.instructions = "";
+    normalized.parallel_tool_calls = false;
+    delete normalized.tools;
+};
+const normalizeCodexResponsesBodyInternal = (body, options = {}) => {
     const normalized = { ...body };
     const instructions = typeof normalized.instructions === "string"
         ? normalized.instructions
         : (options.instructions ?? getDefaultCodexInstructions());
     normalized.instructions = instructions;
-    if (normalized.store === undefined) {
-        normalized.store = options.storeResponses ?? false;
-    }
+    normalized.input = normalizeResponsesInput(normalized.input);
+    normalized.store = false;
+    normalized.include = addEncryptedReasoningContent(normalized.include);
+    applyModelDefaults(normalized, options.modelInfo);
     if (options.forceStream) {
         normalized.stream = true;
     }
     delete normalized.max_output_tokens;
     return normalized;
 };
-const prepareResponsesRequestBody = async (pathname, headers, body, settings, state) => {
+export const normalizeCodexResponsesBody = (body, options = {}) => normalizeCodexResponsesBodyInternal(body, options);
+const prepareResponsesRequestBody = async (pathname, headers, body, settings, state, auth, resolveModelInfo) => {
     if (!pathname.endsWith("/responses")) {
         return { body };
     }
@@ -311,10 +419,18 @@ const prepareResponsesRequestBody = async (pathname, headers, body, settings, st
             Array.isArray(parsed)) {
             return { body };
         }
-        const normalized = normalizeCodexResponsesBody(parsed, {
+        const wantsStream = parsed.stream === true;
+        const modelInfo = typeof parsed.model === "string"
+            ? await resolveModelInfo(auth, parsed.model)
+            : undefined;
+        const normalized = normalizeCodexResponsesBodyInternal(parsed, {
+            forceStream: true,
             instructions: settings.instructions,
-            storeResponses: settings.storeResponses,
+            modelInfo,
         });
+        if (modelInfo?.useResponsesLite) {
+            headers.set(RESPONSES_LITE_HEADER, "true");
+        }
         if (state?.requiresCachedState(normalized)) {
             await state.waitForPendingCaptures();
         }
@@ -322,6 +438,7 @@ const prepareResponsesRequestBody = async (pathname, headers, body, settings, st
         return {
             body: JSON.stringify(expanded),
             requestBody: expanded,
+            wantsStream,
         };
     }
     catch {
@@ -348,6 +465,101 @@ const captureResponsesState = (response, requestBody, state) => {
         headers: new Headers(response.headers),
     });
 };
+const finalizeResponsesResponse = async (response, prepared, state) => {
+    if (prepared.requestBody == null ||
+        prepared.wantsStream == null ||
+        !response.ok ||
+        response.body == null) {
+        return response;
+    }
+    if (prepared.wantsStream) {
+        return captureResponsesState(response, prepared.requestBody, state);
+    }
+    const completed = await collectCompletedResponseFromSse(response.body);
+    state?.rememberResponse(completed, prepared.requestBody);
+    const headers = new Headers(response.headers);
+    headers.delete("content-encoding");
+    headers.delete("content-length");
+    headers.set("content-type", "application/json");
+    return new Response(JSON.stringify(completed), {
+        status: response.status,
+        statusText: response.statusText,
+        headers,
+    });
+};
+const applyAuthHeaders = (headers, auth) => {
+    headers.delete("authorization");
+    headers.delete("chatgpt-account-id");
+    headers.delete("openai-beta");
+    headers.delete(RESPONSES_LITE_HEADER);
+    headers.delete("x-openai-fedramp");
+    headers.set("Authorization", `Bearer ${auth.accessToken}`);
+    headers.set("chatgpt-account-id", auth.accountId);
+    const isFedRamp = auth.isFedRamp ??
+        (deriveChatGptAccountIsFedRamp(auth.idToken) ||
+            deriveChatGptAccountIsFedRamp(auth.accessToken));
+    if (isFedRamp) {
+        headers.set("X-OpenAI-Fedramp", "true");
+    }
+};
+const createModelCatalogResolver = (fetch, baseURL, settings) => {
+    const cache = new Map();
+    const inflight = new Map();
+    return async (auth) => {
+        const cacheKey = `${auth.accountId}:${auth.isFedRamp === true}`;
+        const cached = cache.get(cacheKey);
+        if (cached && cached.expiresAt > Date.now()) {
+            return cached.result;
+        }
+        let loading = inflight.get(cacheKey);
+        if (!loading) {
+            loading = (async () => {
+                try {
+                    const models = await fetchCodexModelCatalog({
+                        request: async (path, init) => {
+                            const headers = new Headers(settings.headers);
+                            new Headers(init?.headers).forEach((value, key) => {
+                                headers.set(key, value);
+                            });
+                            applyAuthHeaders(headers, auth);
+                            return fetch(new URL(path.replace(/^\//, ""), `${baseURL}/`).toString(), {
+                                ...init,
+                                method: init?.method ?? "GET",
+                                headers,
+                            });
+                        },
+                    }, {
+                        codexVersion: settings.codexVersion,
+                        fetchImpl: fetch,
+                    });
+                    const result = { models };
+                    cache.set(cacheKey, {
+                        expiresAt: Date.now() + MODEL_CATALOG_TTL_MS,
+                        result,
+                    });
+                    return result;
+                }
+                catch (error) {
+                    const result = {
+                        models: [],
+                        error: error instanceof Error
+                            ? error
+                            : new Error("Failed to load models from Codex."),
+                    };
+                    cache.set(cacheKey, {
+                        expiresAt: Date.now() + MODEL_CATALOG_FAILURE_TTL_MS,
+                        result,
+                    });
+                    return result;
+                }
+            })().finally(() => {
+                inflight.delete(cacheKey);
+            });
+            inflight.set(cacheKey, loading);
+        }
+        return loading;
+    };
+};
 const resolveAuth = async (source) => {
     const auth = typeof source === "function" ? await source() : source;
     if (!auth) {
@@ -361,29 +573,48 @@ export const createCodexOAuthFetch = (settings) => {
     const responsesState = settings.responsesState === false
         ? undefined
         : (settings.responsesState ?? new CodexResponsesState());
+    const resolveModelCatalog = createModelCatalogResolver(fetch, baseURL, settings);
+    const resolveModelInfo = async (auth, model) => (await resolveModelCatalog(auth)).models.find((entry) => entry.slug === model);
     return async (input, init) => {
         const request = await readRequestParts(input, init);
         const targetUrl = resolveTargetUrl(request.url, baseURL);
         const target = new URL(targetUrl);
         const auth = await resolveAuth(settings.auth);
+        if ((request.method ?? "GET").toUpperCase() === "GET" &&
+            target.pathname.endsWith("/models") &&
+            !target.searchParams.has("client_version")) {
+            const catalog = await resolveModelCatalog(auth);
+            const models = catalog.models.filter(isPublicCodexModel);
+            if (models.length === 0) {
+                return Response.json({
+                    error: {
+                        message: catalog.error?.message ?? "Failed to load models from Codex.",
+                    },
+                }, { status: 502 });
+            }
+            return Response.json({
+                object: "list",
+                data: models.map((model) => ({
+                    id: model.slug,
+                    object: "model",
+                    created: 0,
+                    owned_by: "codex-oauth",
+                })),
+            });
+        }
         const headers = new Headers(settings.headers);
         request.headers.forEach((value, key) => {
             headers.set(key, value);
         });
-        headers.delete("authorization");
-        headers.delete("chatgpt-account-id");
-        headers.delete("openai-beta");
-        headers.set("Authorization", `Bearer ${auth.accessToken}`);
-        headers.set("chatgpt-account-id", auth.accountId);
-        headers.set("OpenAI-Beta", "responses=experimental");
-        const preparedBody = await prepareResponsesRequestBody(target.pathname, headers, request.body, settings, responsesState);
+        applyAuthHeaders(headers, auth);
+        const preparedBody = await prepareResponsesRequestBody(target.pathname, headers, request.body, settings, responsesState, auth, resolveModelInfo);
         const response = await fetch(target.toString(), {
             method: request.method ?? init?.method,
             headers,
             body: preparedBody.body,
             signal: request.signal ?? undefined,
         });
-        return captureResponsesState(response, preparedBody.requestBody, responsesState);
+        return finalizeResponsesResponse(response, preparedBody, responsesState);
     };
 };
 const resolveOpenAICompatibleUrl = (path, baseURL) => {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@openai-oauth/core",
-	"version": "2.0.0-beta.0",
+	"version": "2.0.0-beta.2",
 	"description": "Core auth and in-memory OpenAI-compatible transport for openai-oauth.",
 	"keywords": [
 		"openai",