@terminai/core 0.21.0 → 0.25.0

package/dist/src/openai_chatgpt/constants.js

@@ -0,0 +1,35 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export const OPENAI_CHATGPT_OAUTH_PROVIDER_ID = 'openai_chatgpt_oauth';
+export const OPENAI_CHATGPT_TOKEN_STORAGE_SERVICE = 'terminai-openai-chatgpt';
+export const OPENAI_CHATGPT_TOKEN_STORAGE_SERVER_NAME = 'openai-chatgpt';
+export const OPENAI_CHATGPT_CREDENTIAL_TYPE = 'openai-chatgpt';
+export const DEFAULT_CHATGPT_CODEX_BASE_URL = 'https://chatgpt.com/backend-api/codex';
+export const CHATGPT_CODEX_RESPONSES_PATH = 'responses';
+export const DEFAULT_OPENAI_OAUTH_CLIENT_ID = 'app_EMoamEEZ73f0CkXaXp7hrann';
+export const DEFAULT_OPENAI_OAUTH_AUTHORIZE_URL = 'https://auth.openai.com/oauth/authorize';
+export const DEFAULT_OPENAI_OAUTH_TOKEN_URL = 'https://auth.openai.com/oauth/token';
+export const DEFAULT_OPENAI_OAUTH_REDIRECT_PORT = 1455;
+export const DEFAULT_REFRESH_STALE_MS = 8 * 60 * 1000;
+// Legacy (older plugins/docs) — some JWTs used to expose this as a flat claim.
+export const CHATGPT_ACCOUNT_ID_CLAIM = 'https://api.openai.com/auth.chatgpt_account_id';
+// Codex CLI / OpenAI tokens expose auth details as a nested object claim.
+export const OPENAI_AUTH_CLAIM = 'https://api.openai.com/auth';
+export const OPENAI_AUTH_CHATGPT_ACCOUNT_ID_FIELD = 'chatgpt_account_id';
+export const CODEX_ORIGINATOR = 'codex_cli_rs';
+export const OPENAI_CHATGPT_OAUTH_DISABLE_ENV = 'TERMINAI_DISABLE_OPENAI_CHATGPT_OAUTH';
+export function isOpenAIChatGptOauthProviderDisabled(env = process.env) {
+    const raw = env[OPENAI_CHATGPT_OAUTH_DISABLE_ENV];
+    if (raw === undefined)
+        return false;
+    const normalized = raw.trim().toLowerCase();
+    return (normalized === '1' ||
+        normalized === 'true' ||
+        normalized === 'yes' ||
+        normalized === 'on');
+}
+//# sourceMappingURL=constants.js.map

package/dist/src/openai_chatgpt/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/openai_chatgpt/constants.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,gCAAgC,GAAG,sBAA+B,CAAC;AAEhF,MAAM,CAAC,MAAM,oCAAoC,GAC/C,yBAAkC,CAAC;AACrC,MAAM,CAAC,MAAM,wCAAwC,GACnD,gBAAyB,CAAC;AAC5B,MAAM,CAAC,MAAM,8BAA8B,GAAG,gBAAyB,CAAC;AAExE,MAAM,CAAC,MAAM,8BAA8B,GACzC,uCAAgD,CAAC;AACnD,MAAM,CAAC,MAAM,4BAA4B,GAAG,WAAoB,CAAC;AAEjE,MAAM,CAAC,MAAM,8BAA8B,GACzC,8BAAuC,CAAC;AAC1C,MAAM,CAAC,MAAM,kCAAkC,GAC7C,yCAAkD,CAAC;AACrD,MAAM,CAAC,MAAM,8BAA8B,GACzC,qCAA8C,CAAC;AAEjD,MAAM,CAAC,MAAM,kCAAkC,GAAG,IAAa,CAAC;AAChE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,wBAAwB,GACnC,gDAAyD,CAAC;AAE5D,0EAA0E;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,6BAAsC,CAAC;AACxE,MAAM,CAAC,MAAM,oCAAoC,GAC/C,oBAA6B,CAAC;AAChC,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAuB,CAAC;AAExD,MAAM,CAAC,MAAM,gCAAgC,GAC3C,uCAAgD,CAAC;AAEnD,MAAM,UAAU,oCAAoC,CAClD,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,GAAG,GAAG,GAAG,CAAC,gCAAgC,CAAC,CAAC;IAClD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAEpC,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,OAAO,CACL,UAAU,KAAK,GAAG;QAClB,UAAU,KAAK,MAAM;QACrB,UAAU,KAAK,KAAK;QACpB,UAAU,KAAK,IAAI,CACpB,CAAC;AACJ,CAAC"}

package/dist/src/openai_chatgpt/credentialStorage.d.ts

@@ -0,0 +1,18 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { ChatGptOAuthCredentialPayload, ChatGptOAuthStoredCredentials } from './types.js';
+export declare class ChatGptOAuthCredentialStorage {
+    private static storage;
+    static load(): Promise<ChatGptOAuthStoredCredentials | null>;
+    static save(payload: ChatGptOAuthCredentialPayload): Promise<void>;
+    /**
+     * Clear stored ChatGPT OAuth credentials.
+     * This method is intentionally infallible - it will never throw.
+     * This ensures /auth logout always succeeds, even if storage is corrupted.
+     */
+    static clear(): Promise<void>;
+}

package/dist/src/openai_chatgpt/credentialStorage.js

@@ -0,0 +1,116 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { HybridTokenStorage } from '../mcp/token-storage/hybrid-token-storage.js';
+import { coreEvents } from '../utils/events.js';
+import { OPENAI_CHATGPT_CREDENTIAL_TYPE, OPENAI_CHATGPT_TOKEN_STORAGE_SERVER_NAME, OPENAI_CHATGPT_TOKEN_STORAGE_SERVICE, } from './constants.js';
+const MAX_TOKEN_LENGTH = 10_000;
+const MAX_ACCOUNT_ID_LENGTH = 200;
+export class ChatGptOAuthCredentialStorage {
+    static storage = new HybridTokenStorage(OPENAI_CHATGPT_TOKEN_STORAGE_SERVICE);
+    static async load() {
+        try {
+            const credentials = await this.storage.getCredentials(OPENAI_CHATGPT_TOKEN_STORAGE_SERVER_NAME);
+            if (!credentials)
+                return null;
+            const parsed = parseStored(credentials);
+            return parsed;
+        }
+        catch (error) {
+            coreEvents.emitFeedback('error', 'Failed to load ChatGPT OAuth credentials', error);
+            throw new Error('Failed to load ChatGPT OAuth credentials', {
+                cause: error,
+            });
+        }
+    }
+    static async save(payload) {
+        validateToken(payload.token.accessToken, 'accessToken');
+        validateToken(payload.token.refreshToken, 'refreshToken');
+        if (payload.token.idToken)
+            validateToken(payload.token.idToken, 'idToken');
+        if (payload.accountId)
+            validateAccountId(payload.accountId);
+        const creds = {
+            serverName: OPENAI_CHATGPT_TOKEN_STORAGE_SERVER_NAME,
+            token: {
+                accessToken: payload.token.accessToken,
+                refreshToken: payload.token.refreshToken,
+                tokenType: payload.token.tokenType,
+                expiresAt: payload.token.expiresAt,
+                scope: payload.token.scope,
+            },
+            updatedAt: Date.now(),
+            credentialType: OPENAI_CHATGPT_CREDENTIAL_TYPE,
+            idToken: payload.token.idToken,
+            accountId: payload.accountId,
+            lastRefresh: payload.lastRefresh,
+        };
+        await this.storage.setCredentials(creds);
+    }
+    /**
+     * Clear stored ChatGPT OAuth credentials.
+     * This method is intentionally infallible - it will never throw.
+     * This ensures /auth logout always succeeds, even if storage is corrupted.
+     */
+    static async clear() {
+        // Try primary storage first
+        try {
+            await this.storage.deleteCredentials(OPENAI_CHATGPT_TOKEN_STORAGE_SERVER_NAME);
+        }
+        catch (error) {
+            // Log but don't throw - user recovery path must not be blocked
+            coreEvents.emitFeedback('warning', 'Could not clear ChatGPT OAuth credentials from primary storage', error);
+        }
+        // Also try clearing via clearAll on the storage as a fallback
+        try {
+            await this.storage.clearAll();
+        }
+        catch {
+            // Ignore - best effort
+        }
+    }
+}
+function parseStored(value) {
+    const raw = value;
+    if (raw.credentialType !== OPENAI_CHATGPT_CREDENTIAL_TYPE) {
+        throw new Error('Stored ChatGPT OAuth credentials have wrong credentialType');
+    }
+    if (!raw.token?.accessToken || typeof raw.token.accessToken !== 'string') {
+        throw new Error('Stored ChatGPT OAuth credentials missing accessToken');
+    }
+    if (!raw.token.refreshToken || typeof raw.token.refreshToken !== 'string') {
+        throw new Error('Stored ChatGPT OAuth credentials missing refreshToken');
+    }
+    if (raw.idToken !== undefined && typeof raw.idToken !== 'string') {
+        throw new Error('Stored ChatGPT OAuth credentials have invalid idToken');
+    }
+    if (raw.accountId !== undefined && typeof raw.accountId !== 'string') {
+        throw new Error('Stored ChatGPT OAuth credentials have invalid accountId');
+    }
+    if (raw.lastRefresh !== undefined && typeof raw.lastRefresh !== 'number') {
+        throw new Error('Stored ChatGPT OAuth credentials have invalid lastRefresh');
+    }
+    return raw;
+}
+function validateToken(value, field) {
+    const trimmed = value.trim();
+    if (trimmed.length === 0) {
+        throw new Error(`ChatGPT OAuth ${field} is missing/empty`);
+    }
+    if (trimmed.length > MAX_TOKEN_LENGTH) {
+        throw new Error(`ChatGPT OAuth ${field} is too long`);
+    }
+}
+function validateAccountId(value) {
+    const trimmed = value.trim();
+    if (trimmed.length === 0) {
+        throw new Error('ChatGPT OAuth accountId is missing/empty');
+    }
+    if (trimmed.length > MAX_ACCOUNT_ID_LENGTH) {
+        throw new Error('ChatGPT OAuth accountId is too long');
+    }
+}
+//# sourceMappingURL=credentialStorage.js.map

package/dist/src/openai_chatgpt/credentialStorage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentialStorage.js","sourceRoot":"","sources":["../../../src/openai_chatgpt/credentialStorage.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,8CAA8C,CAAC;AAElF,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EACL,8BAA8B,EAC9B,wCAAwC,EACxC,oCAAoC,GACrC,MAAM,gBAAgB,CAAC;AAMxB,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC,MAAM,OAAO,6BAA6B;IAChC,MAAM,CAAC,OAAO,GAAG,IAAI,kBAAkB,CAC7C,oCAAoC,CACrC,CAAC;IAEF,MAAM,CAAC,KAAK,CAAC,IAAI;QACf,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CACnD,wCAAwC,CACzC,CAAC;YACF,IAAI,CAAC,WAAW;gBAAE,OAAO,IAAI,CAAC;YAE9B,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;YACxC,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,UAAU,CAAC,YAAY,CACrB,OAAO,EACP,0CAA0C,EAC1C,KAAK,CACN,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,0CAA0C,EAAE;gBAC1D,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAsC;QACtD,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACxD,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO;YAAE,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC3E,IAAI,OAAO,CAAC,SAAS;YAAE,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAE5D,MAAM,KAAK,GAAkC;YAC3C,UAAU,EAAE,wCAAwC;YACpD,KAAK,EAAE;gBACL,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW;gBACtC,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,YAAY;gBACxC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS;gBAClC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS;gBAClC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK;aAC3B;YACD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,cAAc,EAAE,8BAA8B;YAC9C,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;YAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;SACjC,CAAC;QAEF,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,KAAoC,CAAC,CAAC;IAC1E,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,KAAK,CAAC,KAAK;QAChB,4BAA4B;QAC5B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAClC,wCAAwC,CACzC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,+DAA+D;YAC/D,UAAU,CAAC,YAAY,CACrB,SAAS,EACT,gEAAgE,EAChE,KAAK,CACN,CAAC;QACJ,CAAC;QAED,8DAA8D;QAC9D,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;IACH,CAAC;;AAGH,SAAS,WAAW,CAAC,KAAuB;IAC1C,MAAM,GAAG,GAAG,KAA0D,CAAC;IACvE,IAAI,GAAG,CAAC,cAAc,KAAK,8BAA8B,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IAED,OAAO,GAAoC,CAAC;AAC9C,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,KAAa;IACjD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,mBAAmB,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,cAAc,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;AACH,CAAC"}

package/dist/src/openai_chatgpt/credentialStorage.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};

package/dist/src/openai_chatgpt/credentialStorage.test.js

@@ -0,0 +1,73 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { OPENAI_CHATGPT_CREDENTIAL_TYPE, OPENAI_CHATGPT_TOKEN_STORAGE_SERVER_NAME, } from './constants.js';
+const mockHybridTokenStorage = vi.hoisted(() => ({
+    getCredentials: vi.fn(),
+    setCredentials: vi.fn(),
+    deleteCredentials: vi.fn(),
+}));
+vi.mock('../mcp/token-storage/hybrid-token-storage.js', () => ({
+    HybridTokenStorage: vi.fn(() => mockHybridTokenStorage),
+}));
+import { ChatGptOAuthCredentialStorage } from './credentialStorage.js';
+describe('ChatGptOAuthCredentialStorage', () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+    });
+    it('saves credentials with discriminator', async () => {
+        await ChatGptOAuthCredentialStorage.save({
+            token: {
+                accessToken: 'access',
+                refreshToken: 'refresh',
+                tokenType: 'Bearer',
+                idToken: 'id',
+            },
+            accountId: 'acct',
+            lastRefresh: 123,
+        });
+        expect(mockHybridTokenStorage.setCredentials).toHaveBeenCalledWith(expect.objectContaining({
+            serverName: OPENAI_CHATGPT_TOKEN_STORAGE_SERVER_NAME,
+            credentialType: OPENAI_CHATGPT_CREDENTIAL_TYPE,
+            accountId: 'acct',
+            lastRefresh: 123,
+            token: expect.objectContaining({
+                accessToken: 'access',
+                refreshToken: 'refresh',
+                tokenType: 'Bearer',
+            }),
+        }));
+    });
+    it('loads and validates discriminator', async () => {
+        mockHybridTokenStorage.getCredentials.mockResolvedValue({
+            serverName: OPENAI_CHATGPT_TOKEN_STORAGE_SERVER_NAME,
+            updatedAt: 1,
+            credentialType: OPENAI_CHATGPT_CREDENTIAL_TYPE,
+            token: {
+                accessToken: 'access',
+                refreshToken: 'refresh',
+                tokenType: 'Bearer',
+            },
+        });
+        const creds = await ChatGptOAuthCredentialStorage.load();
+        expect(creds?.token.accessToken).toBe('access');
+    });
+    it('throws if discriminator mismatches', async () => {
+        mockHybridTokenStorage.getCredentials.mockResolvedValue({
+            serverName: OPENAI_CHATGPT_TOKEN_STORAGE_SERVER_NAME,
+            updatedAt: 1,
+            credentialType: 'other',
+            token: {
+                accessToken: 'access',
+                refreshToken: 'refresh',
+                tokenType: 'Bearer',
+            },
+        });
+        await expect(ChatGptOAuthCredentialStorage.load()).rejects.toThrow('Failed to load ChatGPT OAuth credentials');
+    });
+});
+//# sourceMappingURL=credentialStorage.test.js.map

package/dist/src/openai_chatgpt/credentialStorage.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentialStorage.test.js","sourceRoot":"","sources":["../../../src/openai_chatgpt/credentialStorage.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EACL,8BAA8B,EAC9B,wCAAwC,GACzC,MAAM,gBAAgB,CAAC;AAExB,MAAM,sBAAsB,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/C,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;IACvB,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;IACvB,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;CAC3B,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,8CAA8C,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7D,kBAAkB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC;CACxD,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AAEvE,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,6BAA6B,CAAC,IAAI,CAAC;YACvC,KAAK,EAAE;gBACL,WAAW,EAAE,QAAQ;gBACrB,YAAY,EAAE,SAAS;gBACvB,SAAS,EAAE,QAAQ;gBACnB,OAAO,EAAE,IAAI;aACd;YACD,SAAS,EAAE,MAAM;YACjB,WAAW,EAAE,GAAG;SACjB,CAAC,CAAC;QAEH,MAAM,CAAC,sBAAsB,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAChE,MAAM,CAAC,gBAAgB,CAAC;YACtB,UAAU,EAAE,wCAAwC;YACpD,cAAc,EAAE,8BAA8B;YAC9C,SAAS,EAAE,MAAM;YACjB,WAAW,EAAE,GAAG;YAChB,KAAK,EAAE,MAAM,CAAC,gBAAgB,CAAC;gBAC7B,WAAW,EAAE,QAAQ;gBACrB,YAAY,EAAE,SAAS;gBACvB,SAAS,EAAE,QAAQ;aACpB,CAAC;SACH,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,sBAAsB,CAAC,cAAc,CAAC,iBAAiB,CAAC;YACtD,UAAU,EAAE,wCAAwC;YACpD,SAAS,EAAE,CAAC;YACZ,cAAc,EAAE,8BAA8B;YAC9C,KAAK,EAAE;gBACL,WAAW,EAAE,QAAQ;gBACrB,YAAY,EAAE,SAAS;gBACvB,SAAS,EAAE,QAAQ;aACpB;SACF,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,MAAM,6BAA6B,CAAC,IAAI,EAAE,CAAC;QACzD,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,sBAAsB,CAAC,cAAc,CAAC,iBAAiB,CAAC;YACtD,UAAU,EAAE,wCAAwC;YACpD,SAAS,EAAE,CAAC;YACZ,cAAc,EAAE,OAAO;YACvB,KAAK,EAAE;gBACL,WAAW,EAAE,QAAQ;gBACrB,YAAY,EAAE,SAAS;gBACvB,SAAS,EAAE,QAAQ;aACpB;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,6BAA6B,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAChE,0CAA0C,CAC3C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/openai_chatgpt/imports.d.ts

@@ -0,0 +1,10 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { ChatGptOAuthCredentialPayload } from './types.js';
+import { ChatGptOAuthClient } from './oauthClient.js';
+export declare function tryImportFromCodexCli(client?: ChatGptOAuthClient): Promise<ChatGptOAuthCredentialPayload | null>;
+export declare function tryImportFromOpenCode(client?: ChatGptOAuthClient): Promise<ChatGptOAuthCredentialPayload | null>;

package/dist/src/openai_chatgpt/imports.js

@@ -0,0 +1,164 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { promises as fs } from 'node:fs';
+import { ChatGptOAuthClient } from './oauthClient.js';
+const MAX_FILE_BYTES = 1024 * 1024;
+const MAX_TOKEN_LENGTH = 10_000;
+const MAX_ACCOUNT_ID_LENGTH = 200;
+export async function tryImportFromCodexCli(client = new ChatGptOAuthClient()) {
+    const codexHome = resolveCodexHome();
+    const authPath = path.join(codexHome, 'auth.json');
+    const raw = await readJsonFile(authPath).catch((e) => {
+        if (isEnoent(e))
+            return null;
+        throw e;
+    });
+    if (!raw)
+        return null;
+    const parsed = parseCodexAuthJson(raw);
+    if (!parsed)
+        return null;
+    const accountId = client.deriveAccountId({
+        accountId: parsed.accountId,
+        idToken: parsed.idToken,
+        accessToken: parsed.accessToken,
+    });
+    return {
+        token: {
+            accessToken: parsed.accessToken,
+            refreshToken: parsed.refreshToken,
+            tokenType: 'Bearer',
+            idToken: parsed.idToken,
+            expiresAt: undefined,
+            scope: undefined,
+        },
+        accountId,
+        lastRefresh: parsed.lastRefresh,
+    };
+}
+export async function tryImportFromOpenCode(client = new ChatGptOAuthClient()) {
+    const authPath = path.join(os.homedir(), '.opencode', 'auth', 'openai.json');
+    const raw = await readJsonFile(authPath).catch((e) => {
+        if (isEnoent(e))
+            return null;
+        throw e;
+    });
+    if (!raw)
+        return null;
+    const parsed = parseOpenCodeAuthJson(raw);
+    if (!parsed)
+        return null;
+    const accountId = client.deriveAccountId({
+        idToken: parsed.idToken,
+        accessToken: parsed.accessToken,
+    });
+    return {
+        token: {
+            accessToken: parsed.accessToken,
+            refreshToken: parsed.refreshToken,
+            tokenType: 'Bearer',
+            idToken: parsed.idToken,
+            expiresAt: parsed.expiresAt,
+            scope: undefined,
+        },
+        accountId,
+        lastRefresh: Date.now(),
+    };
+}
+function resolveCodexHome() {
+    const fromEnv = process.env['CODEX_HOME'];
+    if (typeof fromEnv === 'string' && fromEnv.trim().length > 0) {
+        return fromEnv.trim();
+    }
+    return path.join(os.homedir(), '.codex');
+}
+async function readJsonFile(filePath) {
+    const stat = await fs.stat(filePath);
+    if (stat.size > MAX_FILE_BYTES) {
+        throw new Error(`Refusing to read oversized auth file: ${filePath}`);
+    }
+    const text = await fs.readFile(filePath, 'utf8');
+    return JSON.parse(text);
+}
+function parseCodexAuthJson(value) {
+    if (!isPlainObject(value))
+        return null;
+    const tokens = value['tokens'];
+    if (!isPlainObject(tokens))
+        return null;
+    const access_token = tokens['access_token'];
+    const refresh_token = tokens['refresh_token'];
+    const id_token = tokens['id_token'];
+    const account_id = tokens['account_id'];
+    const last_refresh = value['last_refresh'];
+    if (!isStringWithin(access_token, MAX_TOKEN_LENGTH))
+        return null;
+    if (!isStringWithin(refresh_token, MAX_TOKEN_LENGTH))
+        return null;
+    const result = {
+        accessToken: access_token.trim(),
+        refreshToken: refresh_token.trim(),
+    };
+    if (isStringWithin(id_token, MAX_TOKEN_LENGTH)) {
+        result.idToken = id_token.trim();
+    }
+    if (isStringWithin(account_id, MAX_ACCOUNT_ID_LENGTH)) {
+        result.accountId = account_id.trim();
+    }
+    if (typeof last_refresh === 'number' && Number.isFinite(last_refresh)) {
+        result.lastRefresh = last_refresh;
+    }
+    return result;
+}
+function parseOpenCodeAuthJson(value) {
+    if (!isPlainObject(value))
+        return null;
+    // Supported shapes:
+    // 1) { type: "oauth", access: "...", refresh: "...", expires?: number }
+    // 2) { access_token: "...", refresh_token: "...", id_token?: "...", expires_at?: number }
+    const type = value['type'];
+    if (type !== undefined && type !== 'oauth') {
+        return null;
+    }
+    const access = value['access'] ?? value['access_token'];
+    const refresh = value['refresh'] ?? value['refresh_token'];
+    const idToken = value['id_token'];
+    const expires = value['expires'] ?? value['expires_at'] ?? value['expiresAt'];
+    if (!isStringWithin(access, MAX_TOKEN_LENGTH))
+        return null;
+    if (!isStringWithin(refresh, MAX_TOKEN_LENGTH))
+        return null;
+    const parsed = {
+        accessToken: access.trim(),
+        refreshToken: refresh.trim(),
+    };
+    if (isStringWithin(idToken, MAX_TOKEN_LENGTH)) {
+        parsed.idToken = idToken.trim();
+    }
+    if (typeof expires === 'number' && Number.isFinite(expires)) {
+        // OpenCode may store seconds, ms, or epoch; we accept epoch ms only if it looks plausible.
+        parsed.expiresAt = expires > 10_000_000_000 ? expires : expires * 1000;
+    }
+    return parsed;
+}
+function isPlainObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function isStringWithin(value, maxLen) {
+    return (typeof value === 'string' &&
+        value.trim().length > 0 &&
+        value.length <= maxLen);
+}
+function isEnoent(error) {
+    return (typeof error === 'object' &&
+        error !== null &&
+        'code' in error &&
+        error.code === 'ENOENT');
+}
+//# sourceMappingURL=imports.js.map

package/dist/src/openai_chatgpt/imports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"imports.js","sourceRoot":"","sources":["../../../src/openai_chatgpt/imports.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AAEzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,MAAM,cAAc,GAAG,IAAI,GAAG,IAAI,CAAC;AACnC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAA6B,IAAI,kBAAkB,EAAE;IAErD,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAEnD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;QAC5D,IAAI,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7B,MAAM,CAAC,CAAC;IACV,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC;QACvC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,EAAE;YACL,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,SAAS,EAAE,QAAQ;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,SAAS;YACpB,KAAK,EAAE,SAAS;SACjB;QACD,SAAS;QACT,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAA6B,IAAI,kBAAkB,EAAE;IAErD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;QAC5D,IAAI,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7B,MAAM,CAAC,CAAC;IACV,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC;QACvC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,EAAE;YACL,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,SAAS,EAAE,QAAQ;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,SAAS;SACjB;QACD,SAAS;QACT,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB;IACvB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC1C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7D,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAgB;IAC1C,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,IAAI,CAAC,IAAI,GAAG,cAAc,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,yCAAyC,QAAQ,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;AACrC,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IAOxC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAExC,MAAM,YAAY,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IAC5C,MAAM,aAAa,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IACxC,MAAM,YAAY,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;IAE3C,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAC;IAElE,MAAM,MAAM,GAMR;QACF,WAAW,EAAE,YAAY,CAAC,IAAI,EAAE;QAChC,YAAY,EAAE,aAAa,CAAC,IAAI,EAAE;KACnC,CAAC;IAEF,IAAI,cAAc,CAAC,QAAQ,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAC/C,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,CAAC;IACD,IAAI,cAAc,CAAC,UAAU,EAAE,qBAAqB,CAAC,EAAE,CAAC;QACtD,MAAM,CAAC,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;IACvC,CAAC;IACD,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACtE,MAAM,CAAC,WAAW,GAAG,YAAY,CAAC;IACpC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAM3C,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,oBAAoB;IACpB,wEAAwE;IACxE,0FAA0F;IAE1F,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;IAE9E,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5D,MAAM,MAAM,GAKR;QACF,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE;QAC1B,YAAY,EAAE,OAAO,CAAC,IAAI,EAAE;KAC7B,CAAC;IAEF,IAAI,cAAc,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAC9C,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC;IACD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,2FAA2F;QAC3F,MAAM,CAAC,SAAS,GAAG,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;IACzE,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,MAAc;IACpD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACvB,KAAK,CAAC,MAAM,IAAI,MAAM,CACvB,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACf,KAAK,CAAC,IAAI,KAAK,QAAQ,CACxB,CAAC;AACJ,CAAC"}

package/dist/src/openai_chatgpt/imports.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};

package/dist/src/openai_chatgpt/imports.test.js

@@ -0,0 +1,82 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { promises as fs } from 'node:fs';
+import { tryImportFromCodexCli, tryImportFromOpenCode } from './imports.js';
+import { ChatGptOAuthClient } from './oauthClient.js';
+import { CHATGPT_ACCOUNT_ID_CLAIM, OPENAI_AUTH_CLAIM } from './constants.js';
+function jwt(payload) {
+    const header = Buffer.from(JSON.stringify({ alg: 'none' })).toString('base64url');
+    const body = Buffer.from(JSON.stringify(payload)).toString('base64url');
+    return `${header}.${body}.`;
+}
+describe('imports', () => {
+    const tmpRoot = path.join(os.tmpdir(), `terminai-chatgpt-oauth-${Date.now()}`);
+    beforeEach(async () => {
+        await fs.mkdir(tmpRoot, { recursive: true });
+        vi.unstubAllEnvs();
+    });
+    afterEach(async () => {
+        await fs.rm(tmpRoot, { recursive: true, force: true });
+    });
+    it('imports from CODEX_HOME/auth.json', async () => {
+        const codexHome = path.join(tmpRoot, 'codex');
+        await fs.mkdir(codexHome, { recursive: true });
+        await fs.writeFile(path.join(codexHome, 'auth.json'), JSON.stringify({
+            tokens: {
+                access_token: jwt({
+                    [OPENAI_AUTH_CLAIM]: { chatgpt_account_id: 'acct_from_access' },
+                }),
+                refresh_token: 'refresh123',
+                id_token: jwt({
+                    [OPENAI_AUTH_CLAIM]: { chatgpt_account_id: 'acct_from_id' },
+                }),
+                account_id: 'acct_stored',
+            },
+            last_refresh: 123456,
+        }), 'utf8');
+        vi.stubEnv('CODEX_HOME', codexHome);
+        const payload = await tryImportFromCodexCli(new ChatGptOAuthClient());
+        expect(payload?.token.accessToken).toBeTruthy();
+        expect(payload?.token.refreshToken).toBe('refresh123');
+        // Stored account_id wins
+        expect(payload?.accountId).toBe('acct_stored');
+        expect(payload?.lastRefresh).toBe(123456);
+    });
+    it('imports from ~/.opencode/auth/openai.json under HOME', async () => {
+        const home = path.join(tmpRoot, 'home');
+        await fs.mkdir(path.join(home, '.opencode', 'auth'), { recursive: true });
+        await fs.writeFile(path.join(home, '.opencode', 'auth', 'openai.json'), JSON.stringify({
+            type: 'oauth',
+            access: jwt({
+                [OPENAI_AUTH_CLAIM]: { chatgpt_account_id: 'acct_1' },
+            }),
+            refresh: 'refresh_1',
+            expires: 123,
+        }), 'utf8');
+        vi.stubEnv('HOME', home);
+        const payload = await tryImportFromOpenCode(new ChatGptOAuthClient());
+        expect(payload?.token.refreshToken).toBe('refresh_1');
+        expect(payload?.accountId).toBe('acct_1');
+    });
+    it('imports legacy flat claim for backwards compatibility', async () => {
+        const home = path.join(tmpRoot, 'home-legacy');
+        await fs.mkdir(path.join(home, '.opencode', 'auth'), { recursive: true });
+        await fs.writeFile(path.join(home, '.opencode', 'auth', 'openai.json'), JSON.stringify({
+            type: 'oauth',
+            access: jwt({ [CHATGPT_ACCOUNT_ID_CLAIM]: 'acct_legacy' }),
+            refresh: 'refresh_legacy',
+        }), 'utf8');
+        vi.stubEnv('HOME', home);
+        const payload = await tryImportFromOpenCode(new ChatGptOAuthClient());
+        expect(payload?.token.refreshToken).toBe('refresh_legacy');
+        expect(payload?.accountId).toBe('acct_legacy');
+    });
+});
+//# sourceMappingURL=imports.test.js.map

package/dist/src/openai_chatgpt/imports.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"imports.test.js","sourceRoot":"","sources":["../../../src/openai_chatgpt/imports.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAE7E,SAAS,GAAG,CAAC,OAAgC;IAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,CAClE,WAAW,CACZ,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxE,OAAO,GAAG,MAAM,IAAI,IAAI,GAAG,CAAC;AAC9B,CAAC;AAED,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;IACvB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CACvB,EAAE,CAAC,MAAM,EAAE,EACX,0BAA0B,IAAI,CAAC,GAAG,EAAE,EAAE,CACvC,CAAC;IAEF,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EACjC,IAAI,CAAC,SAAS,CAAC;YACb,MAAM,EAAE;gBACN,YAAY,EAAE,GAAG,CAAC;oBAChB,CAAC,iBAAiB,CAAC,EAAE,EAAE,kBAAkB,EAAE,kBAAkB,EAAE;iBAChE,CAAC;gBACF,aAAa,EAAE,YAAY;gBAC3B,QAAQ,EAAE,GAAG,CAAC;oBACZ,CAAC,iBAAiB,CAAC,EAAE,EAAE,kBAAkB,EAAE,cAAc,EAAE;iBAC5D,CAAC;gBACF,UAAU,EAAE,aAAa;aAC1B;YACD,YAAY,EAAE,MAAM;SACrB,CAAC,EACF,MAAM,CACP,CAAC;QAEF,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QAEpC,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,kBAAkB,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,CAAC;QAChD,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvD,yBAAyB;QACzB,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/C,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,CAAC,EACnD,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,GAAG,CAAC;gBACV,CAAC,iBAAiB,CAAC,EAAE,EAAE,kBAAkB,EAAE,QAAQ,EAAE;aACtD,CAAC;YACF,OAAO,EAAE,WAAW;YACpB,OAAO,EAAE,GAAG;SACb,CAAC,EACF,MAAM,CACP,CAAC;QAEF,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAEzB,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,kBAAkB,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtD,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC/C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,CAAC,EACnD,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,wBAAwB,CAAC,EAAE,aAAa,EAAE,CAAC;YAC1D,OAAO,EAAE,gBAAgB;SAC1B,CAAC,EACF,MAAM,CACP,CAAC;QAEF,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAEzB,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,kBAAkB,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC3D,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/openai_chatgpt/jwt.d.ts

@@ -0,0 +1,7 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export declare function decodeJwtPayload(token: string): Record<string, unknown>;

package/dist/src/openai_chatgpt/jwt.js

@@ -0,0 +1,31 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export function decodeJwtPayload(token) {
+    const parts = token.split('.');
+    if (parts.length < 2) {
+        throw new Error('Invalid JWT: missing payload');
+    }
+    const payloadB64Url = parts[1];
+    const json = Buffer.from(base64UrlToBase64(payloadB64Url), 'base64').toString('utf8');
+    const parsed = JSON.parse(json);
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+        throw new Error('Invalid JWT: payload is not an object');
+    }
+    return parsed;
+}
+function base64UrlToBase64(value) {
+    const normalized = value.replace(/-/g, '+').replace(/_/g, '/');
+    const padding = normalized.length % 4;
+    if (padding === 0)
+        return normalized;
+    if (padding === 2)
+        return normalized + '==';
+    if (padding === 3)
+        return normalized + '=';
+    throw new Error('Invalid base64url string');
+}
+//# sourceMappingURL=jwt.js.map

package/dist/src/openai_chatgpt/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../../../src/openai_chatgpt/jwt.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAC3E,MAAM,CACP,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IAC3C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,MAAiC,CAAC;AAC3C,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC;IACrC,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,UAAU,GAAG,IAAI,CAAC;IAC5C,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,UAAU,GAAG,GAAG,CAAC;IAC3C,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;AAC9C,CAAC"}

package/dist/src/openai_chatgpt/jwt.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};

package/dist/src/openai_chatgpt/jwt.test.js

@@ -0,0 +1,23 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect } from 'vitest';
+import { decodeJwtPayload } from './jwt.js';
+function jwt(payload) {
+    const header = Buffer.from(JSON.stringify({ alg: 'none' })).toString('base64url');
+    const body = Buffer.from(JSON.stringify(payload)).toString('base64url');
+    return `${header}.${body}.`;
+}
+describe('decodeJwtPayload', () => {
+    it('decodes base64url JSON payload', () => {
+        const token = jwt({ sub: 'user', foo: 'bar' });
+        expect(decodeJwtPayload(token)).toEqual({ sub: 'user', foo: 'bar' });
+    });
+    it('throws for invalid token', () => {
+        expect(() => decodeJwtPayload('not-a-jwt')).toThrow('Invalid JWT');
+    });
+});
+//# sourceMappingURL=jwt.test.js.map

package/dist/src/openai_chatgpt/jwt.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.test.js","sourceRoot":"","sources":["../../../src/openai_chatgpt/jwt.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAE5C,SAAS,GAAG,CAAC,OAAgC;IAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,CAClE,WAAW,CACZ,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxE,OAAO,GAAG,MAAM,IAAI,IAAI,GAAG,CAAC;AAC9B,CAAC;AAED,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,KAAK,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/C,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}