@openai-oauth/core 2.0.0-beta.0

package/README.md

@@ -0,0 +1,58 @@
+# @openai-oauth/core
+
+[Docs](https://github.com/EvanZhouDev/openai-oauth#sdk-overview) | [GitHub](https://github.com/EvanZhouDev/openai-oauth) | [npm](https://www.npmjs.com/package/@openai-oauth/core)
+
+Lowest-level OpenAI OAuth and OpenAI-compatible transport primitives.
+
+```bash
+npm i @openai-oauth/core
+```
+
+Most apps should use `openai-oauth`, `@openai-oauth/local`, `@openai-oauth/react`, `@openai-oauth/ai-sdk`, or `@openai-oauth/openai-client` instead.
+
+## Package Notes
+
+`@openai-oauth/core` is for advanced integrations and adapter authors.
+
+Create an OpenAI-compatible transport from an explicit auth source:
+
+```ts
+import { createOpenAIOAuthTransport } from "@openai-oauth/core";
+
+const transport = createOpenAIOAuthTransport({
+	auth: async () => session,
+});
+
+const baseURL = transport.baseURL;
+const fetch = transport.fetch;
+```
+
+Create an OAuth request:
+
+```ts
+import { createOpenAIOAuthRequest } from "@openai-oauth/core";
+
+const request = await createOpenAIOAuthRequest({
+	redirectUri: "https://app.example.com/auth/callback",
+});
+```
+
+Node auth-file helpers are also exported for the CLI and `@openai-oauth/local`.
+
+Core exports include:
+
+- `createOpenAIOAuthTransport`
+- `createOpenAIOAuthRequest`
+- `createCodexOAuthClient`
+- `exchangeOpenAIOAuthCode`
+- `refreshOpenAIOAuthTokens`
+- `loadAuthTokens`
+- `saveAuthTokens`
+- `resolveCodexAuthFilePath`
+- `OpenAIOAuth`
+- `OpenAIOAuthSession`
+- `SessionStore`
+
+## More
+
+[Learn more in the openai-oauth README.](https://github.com/EvanZhouDev/openai-oauth#sdk-overview)

package/dist/auth.d.ts

@@ -0,0 +1,33 @@
+import { type FetchFunction, type OpenAIOAuthTokenResponse } from "./runtime.js";
+export type EffectiveAuth = {
+    accessToken: string;
+    accountId: string;
+    idToken?: string;
+    refreshToken?: string;
+    sourcePath?: string;
+    lastRefresh?: string;
+};
+export type AuthLoaderOptions = {
+    clientId?: string;
+    issuer?: string;
+    tokenUrl?: string;
+    authFilePath?: string;
+    fetch: FetchFunction;
+    ensureFresh?: boolean;
+    now?: () => Date;
+};
+export type SaveAuthTokensOptions = {
+    token: OpenAIOAuthTokenResponse;
+    authFilePath?: string;
+    now?: () => Date;
+};
+export type SavedAuthTokens = {
+    path: string;
+    auth: EffectiveAuth;
+};
+export declare const shouldRefreshAuthTokens: (auth: Pick<EffectiveAuth, "accessToken" | "lastRefresh">, now?: Date) => boolean;
+export declare const resolveAuthFileCandidates: (authFilePath?: string) => string[];
+export declare const resolveCodexAuthFilePath: (authFilePath?: string) => string;
+export declare const saveAuthTokens: (options: SaveAuthTokensOptions) => Promise<SavedAuthTokens>;
+export declare const loadAuthTokens: (options: AuthLoaderOptions) => Promise<EffectiveAuth>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAGA,OAAO,EAIN,KAAK,aAAa,EAClB,KAAK,wBAAwB,EAG7B,MAAM,cAAc,CAAA;AAuBrB,MAAM,MAAM,aAAa,GAAG;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,KAAK,EAAE,aAAa,CAAA;IACpB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,qBAAqB,GAAG;IACnC,KAAK,EAAE,wBAAwB,CAAA;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,aAAa,CAAA;CACnB,CAAA;AAkDD,eAAO,MAAM,uBAAuB,GACnC,MAAM,IAAI,CAAC,aAAa,EAAE,aAAa,GAAG,aAAa,CAAC,EACxD,MAAK,IAAiB,KACpB,OAA4E,CAAA;AAgB/E,eAAO,MAAM,yBAAyB,GAAI,eAAe,MAAM,KAAG,MAAM,EAmBvE,CAAA;AAgFD,eAAO,MAAM,wBAAwB,GAAI,eAAe,MAAM,KAAG,MAUhE,CAAA;AAED,eAAO,MAAM,cAAc,GAC1B,SAAS,qBAAqB,KAC5B,OAAO,CAAC,eAAe,CAsCzB,CAAA;AAyCD,eAAO,MAAM,cAAc,GAC1B,SAAS,iBAAiB,KACxB,OAAO,CAAC,aAAa,CAkFvB,CAAA"}

package/dist/auth.js

@@ -0,0 +1,242 @@
+import { promises as fs } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { DEFAULT_OPENAI_OAUTH_CLIENT_ID, DEFAULT_OPENAI_OAUTH_ISSUER, deriveAccountId, parseJwtClaims, refreshOpenAIOAuthTokens, } from "./runtime.js";
+const DEFAULT_AUTH_CLIENT_ID = process.env.CHATGPT_LOCAL_CLIENT_ID ?? DEFAULT_OPENAI_OAUTH_CLIENT_ID;
+const DEFAULT_AUTH_ISSUER = process.env.CHATGPT_LOCAL_ISSUER ?? DEFAULT_OPENAI_OAUTH_ISSUER;
+const AUTH_FILENAME = "auth.json";
+const REFRESH_EXPIRY_MARGIN_MS = 5 * 60 * 1000;
+const REFRESH_INTERVAL_MS = 55 * 60 * 1000;
+const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const parseIsoDate = (value) => {
+    if (typeof value !== "string" || !value) {
+        return undefined;
+    }
+    const date = new Date(value);
+    return Number.isNaN(date.getTime()) ? undefined : date;
+};
+const shouldRefreshAccessToken = (accessToken, lastRefresh, now) => {
+    if (typeof accessToken !== "string" || accessToken.length === 0) {
+        return true;
+    }
+    const claims = parseJwtClaims(accessToken);
+    const exp = claims && typeof claims.exp === "number" ? claims.exp : undefined;
+    if (typeof exp === "number") {
+        const expiryMs = exp * 1000;
+        if (expiryMs <= now.getTime() + REFRESH_EXPIRY_MARGIN_MS) {
+            return true;
+        }
+    }
+    const refreshedAt = parseIsoDate(lastRefresh);
+    if (refreshedAt) {
+        return refreshedAt.getTime() <= now.getTime() - REFRESH_INTERVAL_MS;
+    }
+    return false;
+};
+export const shouldRefreshAuthTokens = (auth, now = new Date()) => shouldRefreshAccessToken(auth.accessToken, auth.lastRefresh, now);
+const uniquePaths = (paths) => {
+    const seen = new Set();
+    const result = [];
+    for (const candidate of paths) {
+        if (!seen.has(candidate)) {
+            seen.add(candidate);
+            result.push(candidate);
+        }
+    }
+    return result;
+};
+export const resolveAuthFileCandidates = (authFilePath) => {
+    if (typeof authFilePath === "string" && authFilePath.length > 0) {
+        return [authFilePath];
+    }
+    const envHome = process.env.CHATGPT_LOCAL_HOME;
+    const codexHome = process.env.CODEX_HOME;
+    return uniquePaths([
+        authFilePath,
+        envHome ? path.join(envHome, AUTH_FILENAME) : undefined,
+        codexHome ? path.join(codexHome, AUTH_FILENAME) : undefined,
+        path.join(os.homedir(), ".chatgpt-local", AUTH_FILENAME),
+        path.join(os.homedir(), ".codex", AUTH_FILENAME),
+    ].filter((value) => typeof value === "string" && value.length > 0));
+};
+const resolveWritePath = (preferred) => {
+    if (preferred) {
+        return preferred;
+    }
+    const envHome = process.env.CHATGPT_LOCAL_HOME ?? process.env.CODEX_HOME;
+    if (envHome) {
+        return path.join(envHome, AUTH_FILENAME);
+    }
+    return path.join(os.homedir(), ".chatgpt-local", AUTH_FILENAME);
+};
+const toAuthFile = (input) => {
+    const auth = {};
+    const tokensValue = input.tokens;
+    if (typeof input.OPENAI_API_KEY === "string" && input.OPENAI_API_KEY) {
+        auth.OPENAI_API_KEY = input.OPENAI_API_KEY;
+    }
+    if (isRecord(tokensValue) && Object.keys(tokensValue).length > 0) {
+        auth.tokens = {
+            id_token: typeof tokensValue.id_token === "string"
+                ? tokensValue.id_token
+                : undefined,
+            access_token: typeof tokensValue.access_token === "string"
+                ? tokensValue.access_token
+                : undefined,
+            refresh_token: typeof tokensValue.refresh_token === "string"
+                ? tokensValue.refresh_token
+                : undefined,
+            account_id: typeof tokensValue.account_id === "string"
+                ? tokensValue.account_id
+                : undefined,
+        };
+    }
+    if (typeof input.last_refresh === "string" && input.last_refresh) {
+        auth.last_refresh = input.last_refresh;
+    }
+    return auth;
+};
+const readAuthFile = async (candidates) => {
+    for (const candidate of candidates) {
+        try {
+            const content = await fs.readFile(candidate, "utf-8");
+            const parsed = JSON.parse(content);
+            if (isRecord(parsed)) {
+                return { path: candidate, data: toAuthFile(parsed) };
+            }
+        }
+        catch { }
+    }
+    return {};
+};
+const ensureDirectory = async (filePath) => {
+    await fs.mkdir(path.dirname(filePath), { recursive: true });
+};
+const writeAuthFile = async (filePath, data) => {
+    await ensureDirectory(filePath);
+    await fs.writeFile(filePath, JSON.stringify(data, null, 2), {
+        encoding: "utf-8",
+        mode: 0o600,
+    });
+};
+export const resolveCodexAuthFilePath = (authFilePath) => {
+    if (authFilePath) {
+        return authFilePath;
+    }
+    const codexHome = process.env.CODEX_HOME;
+    return path.join(codexHome ?? path.join(os.homedir(), ".codex"), AUTH_FILENAME);
+};
+export const saveAuthTokens = async (options) => {
+    const filePath = resolveCodexAuthFilePath(options.authFilePath);
+    const existing = (await readAuthFile([filePath])).data ?? {};
+    const now = options.now ?? (() => new Date());
+    const savedAt = now().toISOString();
+    const accountId = options.token.accountId ??
+        deriveAccountId(options.token.idToken) ??
+        deriveAccountId(options.token.accessToken);
+    if (!accountId) {
+        throw new Error("ChatGPT account id not found in OpenAI OAuth token response.");
+    }
+    await writeAuthFile(filePath, {
+        ...existing,
+        tokens: {
+            id_token: options.token.idToken,
+            access_token: options.token.accessToken,
+            refresh_token: options.token.refreshToken,
+            account_id: accountId,
+        },
+        last_refresh: savedAt,
+    });
+    return {
+        path: filePath,
+        auth: {
+            accessToken: options.token.accessToken,
+            accountId,
+            idToken: options.token.idToken,
+            refreshToken: options.token.refreshToken,
+            sourcePath: filePath,
+            lastRefresh: savedAt,
+        },
+    };
+};
+const refreshChatGptTokens = async (refreshToken, clientId, issuer, tokenUrl, fetchFn) => {
+    try {
+        const refreshed = await refreshOpenAIOAuthTokens({
+            refreshToken,
+            clientId,
+            issuer,
+            tokenUrl,
+            fetch: fetchFn,
+        });
+        return {
+            accessToken: refreshed.accessToken,
+            idToken: refreshed.idToken,
+            refreshToken: refreshed.refreshToken ?? refreshToken,
+            accountId: refreshed.accountId,
+        };
+    }
+    catch {
+        return undefined;
+    }
+};
+const normalizeTokens = (tokens) => {
+    const maybeString = (value) => typeof value === "string" && value.length > 0 ? value : undefined;
+    return {
+        id_token: maybeString(tokens?.id_token),
+        access_token: maybeString(tokens?.access_token),
+        refresh_token: maybeString(tokens?.refresh_token),
+        account_id: maybeString(tokens?.account_id),
+    };
+};
+export const loadAuthTokens = async (options) => {
+    const { clientId = DEFAULT_AUTH_CLIENT_ID, issuer = DEFAULT_AUTH_ISSUER, tokenUrl, authFilePath, fetch, ensureFresh = true, now = () => new Date(), } = options;
+    if (typeof fetch !== "function") {
+        throw new Error("A fetch implementation is required to refresh ChatGPT tokens.");
+    }
+    const readResult = await readAuthFile(resolveAuthFileCandidates(authFilePath));
+    const authData = readResult.data ?? {};
+    const tokens = normalizeTokens(authData.tokens);
+    let accessToken = tokens.access_token;
+    let idToken = tokens.id_token;
+    let refreshToken = tokens.refresh_token;
+    let accountId = tokens.account_id ?? deriveAccountId(idToken);
+    let lastRefresh = authData.last_refresh;
+    const needsRefresh = ensureFresh &&
+        typeof refreshToken === "string" &&
+        shouldRefreshAccessToken(accessToken, lastRefresh, now());
+    if (needsRefresh && typeof refreshToken === "string") {
+        const refreshed = await refreshChatGptTokens(refreshToken, clientId, issuer, tokenUrl, fetch);
+        if (refreshed) {
+            accessToken = refreshed.accessToken;
+            idToken = refreshed.idToken ?? idToken;
+            refreshToken = refreshed.refreshToken ?? refreshToken;
+            accountId = refreshed.accountId ?? accountId;
+            lastRefresh = now().toISOString();
+            const writePath = resolveWritePath(readResult.path ?? authFilePath);
+            await writeAuthFile(writePath, {
+                ...authData,
+                tokens: {
+                    id_token: idToken,
+                    access_token: accessToken,
+                    refresh_token: refreshToken,
+                    account_id: accountId,
+                },
+                last_refresh: lastRefresh,
+            });
+        }
+    }
+    if (typeof accessToken !== "string" || accessToken.length === 0) {
+        throw new Error("ChatGPT access token not found. Run `codex login` to create auth.json.");
+    }
+    if (typeof accountId !== "string" || accountId.length === 0) {
+        throw new Error("ChatGPT account id not found in auth.json. Run `codex login` to create auth.json.");
+    }
+    return {
+        accessToken,
+        accountId,
+        idToken,
+        refreshToken,
+        sourcePath: readResult.path ?? resolveWritePath(authFilePath),
+        lastRefresh,
+    };
+};

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export type { AuthLoaderOptions, EffectiveAuth, SaveAuthTokensOptions, SavedAuthTokens, } from "./auth.js";
+export { loadAuthTokens, resolveAuthFileCandidates, resolveCodexAuthFilePath, saveAuthTokens, shouldRefreshAuthTokens, } from "./auth.js";
+export { type CodexOAuthClient, type CodexOAuthRuntimeSettings, CodexResponsesState, type CodexResponsesStateOptions, type CodexResponsesStateSnapshot, collectCompletedResponseFromSse, createCodexOAuthClient, createCodexOAuthFetch, createOpenAIOAuthRequest, createOpenAIOAuthTransport, DEFAULT_CODEX_BASE_URL, DEFAULT_OPENAI_COMPATIBLE_BASE_URL, DEFAULT_OPENAI_OAUTH_CLIENT_ID, DEFAULT_OPENAI_OAUTH_ISSUER, DEFAULT_OPENAI_OAUTH_SCOPE, deriveAccountId, exchangeOpenAIOAuthCode, type FetchFunction, getDefaultCodexInstructions, iterateServerSentEvents, type NormalizeCodexResponsesBodyOptions, normalizeCodexResponsesBody, type OpenAIOAuth, type OpenAIOAuthRequest, type OpenAIOAuthRequestOptions, type OpenAIOAuthSession, type OpenAIOAuthTokenResponse, type OpenAIOAuthTransport, type OpenAIOAuthTransportOptions, parseJwtClaims, refreshOpenAIOAuthTokens, type SessionStore, usesServerReplayState, } from "./runtime.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACX,iBAAiB,EACjB,aAAa,EACb,qBAAqB,EACrB,eAAe,GACf,MAAM,WAAW,CAAA;AAClB,OAAO,EACN,cAAc,EACd,yBAAyB,EACzB,wBAAwB,EACxB,cAAc,EACd,uBAAuB,GACvB,MAAM,WAAW,CAAA;AAClB,OAAO,EACN,KAAK,gBAAgB,EACrB,KAAK,yBAAyB,EAC9B,mBAAmB,EACnB,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAChC,+BAA+B,EAC/B,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,EACxB,0BAA0B,EAC1B,sBAAsB,EACtB,kCAAkC,EAClC,8BAA8B,EAC9B,2BAA2B,EAC3B,0BAA0B,EAC1B,eAAe,EACf,uBAAuB,EACvB,KAAK,aAAa,EAClB,2BAA2B,EAC3B,uBAAuB,EACvB,KAAK,kCAAkC,EACvC,2BAA2B,EAC3B,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,yBAAyB,EAC9B,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EACzB,KAAK,2BAA2B,EAChC,cAAc,EACd,wBAAwB,EACxB,KAAK,YAAY,EACjB,qBAAqB,GACrB,MAAM,cAAc,CAAA"}

package/dist/index.js

@@ -0,0 +1,2 @@
+export { loadAuthTokens, resolveAuthFileCandidates, resolveCodexAuthFilePath, saveAuthTokens, shouldRefreshAuthTokens, } from "./auth.js";
+export { CodexResponsesState, collectCompletedResponseFromSse, createCodexOAuthClient, createCodexOAuthFetch, createOpenAIOAuthRequest, createOpenAIOAuthTransport, DEFAULT_CODEX_BASE_URL, DEFAULT_OPENAI_COMPATIBLE_BASE_URL, DEFAULT_OPENAI_OAUTH_CLIENT_ID, DEFAULT_OPENAI_OAUTH_ISSUER, DEFAULT_OPENAI_OAUTH_SCOPE, deriveAccountId, exchangeOpenAIOAuthCode, getDefaultCodexInstructions, iterateServerSentEvents, normalizeCodexResponsesBody, parseJwtClaims, refreshOpenAIOAuthTokens, usesServerReplayState, } from "./runtime.js";

package/dist/runtime.d.ts

@@ -0,0 +1,125 @@
+import { CodexResponsesState } from "./state.js";
+export { collectCompletedResponseFromSse, iterateServerSentEvents, type ServerSentEvent, } from "./sse.js";
+export { CodexResponsesState, type CodexResponsesStateOptions, type CodexResponsesStateSnapshot, } from "./state.js";
+export declare const DEFAULT_CODEX_BASE_URL = "https://chatgpt.com/backend-api/codex";
+export declare const DEFAULT_OPENAI_COMPATIBLE_BASE_URL = "https://openai-oauth.local/v1";
+export declare const DEFAULT_OPENAI_OAUTH_CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
+export declare const DEFAULT_OPENAI_OAUTH_ISSUER = "https://auth.openai.com";
+export declare const DEFAULT_OPENAI_OAUTH_SCOPE = "openid profile email offline_access";
+export type FetchFunction = typeof fetch;
+export type OpenAIOAuthSession = {
+    accessToken: string;
+    accountId: string;
+    idToken?: string;
+    refreshToken?: string;
+    expiresAt?: string;
+    lastRefresh?: string;
+};
+export type OpenAIOAuthSessionInput = OpenAIOAuthSession | (() => Promise<OpenAIOAuthSession | null | undefined>);
+export type OpenAIOAuth = {
+    kind: "openai-oauth";
+    getSession(): Promise<OpenAIOAuthSession | null>;
+    refreshSession(): Promise<OpenAIOAuthSession | null>;
+    baseURL?: string;
+    fetch?: FetchFunction;
+    headers?: Record<string, string>;
+    instructions?: string;
+    openAIBaseURL?: string;
+    storeResponses?: boolean;
+};
+export type SessionStore = {
+    get(): Promise<OpenAIOAuthSession | null>;
+    set(session: OpenAIOAuthSession): Promise<void>;
+    clear(): Promise<void>;
+};
+export type OpenAIOAuthRequestOptions = {
+    clientId?: string;
+    issuer?: string;
+    redirectUri: string;
+    scope?: string;
+    state?: string;
+    codeVerifier?: string;
+    simplifiedFlow?: boolean;
+    idTokenAddOrganizations?: boolean;
+    extraParams?: Record<string, string | number | boolean | undefined>;
+};
+export type OpenAIOAuthRequest = {
+    authorizationUrl: string;
+    state: string;
+    codeVerifier: string;
+    codeChallenge: string;
+    redirectUri: string;
+};
+export type OpenAIOAuthTokenResponse = {
+    accessToken: string;
+    refreshToken?: string;
+    idToken?: string;
+    expiresIn?: number;
+    accountId?: string;
+    raw: unknown;
+};
+export type ExchangeOpenAIOAuthCodeOptions = {
+    code: string;
+    codeVerifier: string;
+    redirectUri: string;
+    clientId?: string;
+    issuer?: string;
+    tokenUrl?: string;
+    fetch?: FetchFunction;
+    signal?: AbortSignal;
+};
+export type RefreshOpenAIOAuthTokensOptions = {
+    refreshToken: string;
+    clientId?: string;
+    issuer?: string;
+    tokenUrl?: string;
+    fetch?: FetchFunction;
+    signal?: AbortSignal;
+};
+export type CodexOAuthRuntimeSettings = {
+    auth: OpenAIOAuthSessionInput;
+    baseURL?: string;
+    fetch?: FetchFunction;
+    headers?: Record<string, string>;
+    instructions?: string;
+    storeResponses?: boolean;
+    responsesState?: CodexResponsesState | false;
+};
+export type OpenAIOAuthTransportOptions = CodexOAuthRuntimeSettings & {
+    openAIBaseURL?: string;
+};
+export type OpenAIOAuthTransport = {
+    kind: "openai-compatible";
+    provider: "chatgpt-codex";
+    baseURL: string;
+    fetch: FetchFunction;
+    request: (path: string, init?: RequestInit) => Promise<Response>;
+    capabilities: {
+        responses: true;
+        chatCompletions: true;
+        models: true;
+        streaming: true;
+    };
+};
+export type CodexOAuthClient = {
+    baseURL: string;
+    fetch: FetchFunction;
+    request: (path: string, init?: RequestInit) => Promise<Response>;
+};
+export type NormalizeCodexResponsesBodyOptions = {
+    instructions?: string;
+    forceStream?: boolean;
+    storeResponses?: boolean;
+};
+export declare const usesServerReplayState: (value: Record<string, unknown>) => boolean;
+export declare const parseJwtClaims: (token: string | undefined) => Record<string, unknown> | undefined;
+export declare const deriveAccountId: (idToken: string | undefined) => string | undefined;
+export declare const createOpenAIOAuthRequest: (options: OpenAIOAuthRequestOptions) => Promise<OpenAIOAuthRequest>;
+export declare const exchangeOpenAIOAuthCode: (options: ExchangeOpenAIOAuthCodeOptions) => Promise<OpenAIOAuthTokenResponse>;
+export declare const refreshOpenAIOAuthTokens: (options: RefreshOpenAIOAuthTokensOptions) => Promise<OpenAIOAuthTokenResponse>;
+export declare const getDefaultCodexInstructions: () => string;
+export declare const normalizeCodexResponsesBody: (body: Record<string, unknown>, options?: NormalizeCodexResponsesBodyOptions) => Record<string, unknown>;
+export declare const createCodexOAuthFetch: (settings: CodexOAuthRuntimeSettings) => FetchFunction;
+export declare const createCodexOAuthClient: (settings: CodexOAuthRuntimeSettings) => CodexOAuthClient;
+export declare const createOpenAIOAuthTransport: (settings: OpenAIOAuthTransportOptions) => OpenAIOAuthTransport;
+//# sourceMappingURL=runtime.d.ts.map

package/dist/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAEhD,OAAO,EACN,+BAA+B,EAC/B,uBAAuB,EACvB,KAAK,eAAe,GACpB,MAAM,UAAU,CAAA;AACjB,OAAO,EACN,mBAAmB,EACnB,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,GAChC,MAAM,YAAY,CAAA;AAInB,eAAO,MAAM,sBAAsB,0CAA0C,CAAA;AAC7E,eAAO,MAAM,kCAAkC,kCACf,CAAA;AAChC,eAAO,MAAM,8BAA8B,iCAAiC,CAAA;AAC5E,eAAO,MAAM,2BAA2B,4BAA4B,CAAA;AACpE,eAAO,MAAM,0BAA0B,wCAAwC,CAAA;AAG/E,MAAM,MAAM,aAAa,GAAG,OAAO,KAAK,CAAA;AAExC,MAAM,MAAM,kBAAkB,GAAG;IAChC,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,uBAAuB,GAChC,kBAAkB,GAClB,CAAC,MAAM,OAAO,CAAC,kBAAkB,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC,CAAA;AAEzD,MAAM,MAAM,WAAW,GAAG;IACzB,IAAI,EAAE,cAAc,CAAA;IACpB,UAAU,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAA;IAChD,cAAc,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAA;IACpD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,aAAa,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,cAAc,CAAC,EAAE,OAAO,CAAA;CACxB,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IAC1B,GAAG,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAA;IACzC,GAAG,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,yBAAyB,GAAG;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,uBAAuB,CAAC,EAAE,OAAO,CAAA;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAA;CACnE,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAChC,gBAAgB,EAAE,MAAM,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,wBAAwB,GAAG;IACtC,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,GAAG,EAAE,OAAO,CAAA;CACZ,CAAA;AAED,MAAM,MAAM,8BAA8B,GAAG;IAC5C,IAAI,EAAE,MAAM,CAAA;IACZ,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,aAAa,CAAA;IACrB,MAAM,CAAC,EAAE,WAAW,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,+BAA+B,GAAG;IAC7C,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,aAAa,CAAA;IACrB,MAAM,CAAC,EAAE,WAAW,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,yBAAyB,GAAG;IACvC,IAAI,EAAE,uBAAuB,CAAA;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,aAAa,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,cAAc,CAAC,EAAE,mBAAmB,GAAG,KAAK,CAAA;CAC5C,CAAA;AAED,MAAM,MAAM,2BAA2B,GAAG,yBAAyB,GAAG;IACrE,aAAa,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IAClC,IAAI,EAAE,mBAAmB,CAAA;IACzB,QAAQ,EAAE,eAAe,CAAA;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,aAAa,CAAA;IACpB,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;IAChE,YAAY,EAAE;QACb,SAAS,EAAE,IAAI,CAAA;QACf,eAAe,EAAE,IAAI,CAAA;QACrB,MAAM,EAAE,IAAI,CAAA;QACZ,SAAS,EAAE,IAAI,CAAA;KACf,CAAA;CACD,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,aAAa,CAAA;IACpB,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;CAChE,CAAA;AAUD,MAAM,MAAM,kCAAkC,GAAG;IAChD,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,cAAc,CAAC,EAAE,OAAO,CAAA;CACxB,CAAA;AAkCD,eAAO,MAAM,qBAAqB,GACjC,OAAO,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC5B,OAeF,CAAA;AAaD,eAAO,MAAM,cAAc,GAC1B,OAAO,MAAM,GAAG,SAAS,KACvB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAkB5B,CAAA;AAED,eAAO,MAAM,eAAe,GAC3B,SAAS,MAAM,GAAG,SAAS,KACzB,MAAM,GAAG,SA+BX,CAAA;AAmED,eAAO,MAAM,wBAAwB,GACpC,SAAS,yBAAyB,KAChC,OAAO,CAAC,kBAAkB,CA4C5B,CAAA;AAED,eAAO,MAAM,uBAAuB,GACnC,SAAS,8BAA8B,KACrC,OAAO,CAAC,wBAAwB,CAahC,CAAA;AAEH,eAAO,MAAM,wBAAwB,GACpC,SAAS,+BAA+B,KACtC,OAAO,CAAC,wBAAwB,CAYhC,CAAA;AAsGH,eAAO,MAAM,2BAA2B,QAAO,MACpB,CAAA;AAE3B,eAAO,MAAM,2BAA2B,GACvC,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,UAAS,kCAAuC,KAC9C,MAAM,CAAC,MAAM,EAAE,OAAO,CAmBxB,CAAA;AA8FD,eAAO,MAAM,qBAAqB,GACjC,UAAU,yBAAyB,KACjC,aA8CF,CAAA;AAcD,eAAO,MAAM,sBAAsB,GAClC,UAAU,yBAAyB,KACjC,gBAUF,CAAA;AAED,eAAO,MAAM,0BAA0B,GACtC,UAAU,2BAA2B,KACnC,oBAkBF,CAAA"}