@terminai/core 0.23.0 → 0.25.0

package/dist/src/openai_chatgpt/imports.js

@@ -0,0 +1,164 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { promises as fs } from 'node:fs';
+import { ChatGptOAuthClient } from './oauthClient.js';
+const MAX_FILE_BYTES = 1024 * 1024;
+const MAX_TOKEN_LENGTH = 10_000;
+const MAX_ACCOUNT_ID_LENGTH = 200;
+export async function tryImportFromCodexCli(client = new ChatGptOAuthClient()) {
+    const codexHome = resolveCodexHome();
+    const authPath = path.join(codexHome, 'auth.json');
+    const raw = await readJsonFile(authPath).catch((e) => {
+        if (isEnoent(e))
+            return null;
+        throw e;
+    });
+    if (!raw)
+        return null;
+    const parsed = parseCodexAuthJson(raw);
+    if (!parsed)
+        return null;
+    const accountId = client.deriveAccountId({
+        accountId: parsed.accountId,
+        idToken: parsed.idToken,
+        accessToken: parsed.accessToken,
+    });
+    return {
+        token: {
+            accessToken: parsed.accessToken,
+            refreshToken: parsed.refreshToken,
+            tokenType: 'Bearer',
+            idToken: parsed.idToken,
+            expiresAt: undefined,
+            scope: undefined,
+        },
+        accountId,
+        lastRefresh: parsed.lastRefresh,
+    };
+}
+export async function tryImportFromOpenCode(client = new ChatGptOAuthClient()) {
+    const authPath = path.join(os.homedir(), '.opencode', 'auth', 'openai.json');
+    const raw = await readJsonFile(authPath).catch((e) => {
+        if (isEnoent(e))
+            return null;
+        throw e;
+    });
+    if (!raw)
+        return null;
+    const parsed = parseOpenCodeAuthJson(raw);
+    if (!parsed)
+        return null;
+    const accountId = client.deriveAccountId({
+        idToken: parsed.idToken,
+        accessToken: parsed.accessToken,
+    });
+    return {
+        token: {
+            accessToken: parsed.accessToken,
+            refreshToken: parsed.refreshToken,
+            tokenType: 'Bearer',
+            idToken: parsed.idToken,
+            expiresAt: parsed.expiresAt,
+            scope: undefined,
+        },
+        accountId,
+        lastRefresh: Date.now(),
+    };
+}
+function resolveCodexHome() {
+    const fromEnv = process.env['CODEX_HOME'];
+    if (typeof fromEnv === 'string' && fromEnv.trim().length > 0) {
+        return fromEnv.trim();
+    }
+    return path.join(os.homedir(), '.codex');
+}
+async function readJsonFile(filePath) {
+    const stat = await fs.stat(filePath);
+    if (stat.size > MAX_FILE_BYTES) {
+        throw new Error(`Refusing to read oversized auth file: ${filePath}`);
+    }
+    const text = await fs.readFile(filePath, 'utf8');
+    return JSON.parse(text);
+}
+function parseCodexAuthJson(value) {
+    if (!isPlainObject(value))
+        return null;
+    const tokens = value['tokens'];
+    if (!isPlainObject(tokens))
+        return null;
+    const access_token = tokens['access_token'];
+    const refresh_token = tokens['refresh_token'];
+    const id_token = tokens['id_token'];
+    const account_id = tokens['account_id'];
+    const last_refresh = value['last_refresh'];
+    if (!isStringWithin(access_token, MAX_TOKEN_LENGTH))
+        return null;
+    if (!isStringWithin(refresh_token, MAX_TOKEN_LENGTH))
+        return null;
+    const result = {
+        accessToken: access_token.trim(),
+        refreshToken: refresh_token.trim(),
+    };
+    if (isStringWithin(id_token, MAX_TOKEN_LENGTH)) {
+        result.idToken = id_token.trim();
+    }
+    if (isStringWithin(account_id, MAX_ACCOUNT_ID_LENGTH)) {
+        result.accountId = account_id.trim();
+    }
+    if (typeof last_refresh === 'number' && Number.isFinite(last_refresh)) {
+        result.lastRefresh = last_refresh;
+    }
+    return result;
+}
+function parseOpenCodeAuthJson(value) {
+    if (!isPlainObject(value))
+        return null;
+    // Supported shapes:
+    // 1) { type: "oauth", access: "...", refresh: "...", expires?: number }
+    // 2) { access_token: "...", refresh_token: "...", id_token?: "...", expires_at?: number }
+    const type = value['type'];
+    if (type !== undefined && type !== 'oauth') {
+        return null;
+    }
+    const access = value['access'] ?? value['access_token'];
+    const refresh = value['refresh'] ?? value['refresh_token'];
+    const idToken = value['id_token'];
+    const expires = value['expires'] ?? value['expires_at'] ?? value['expiresAt'];
+    if (!isStringWithin(access, MAX_TOKEN_LENGTH))
+        return null;
+    if (!isStringWithin(refresh, MAX_TOKEN_LENGTH))
+        return null;
+    const parsed = {
+        accessToken: access.trim(),
+        refreshToken: refresh.trim(),
+    };
+    if (isStringWithin(idToken, MAX_TOKEN_LENGTH)) {
+        parsed.idToken = idToken.trim();
+    }
+    if (typeof expires === 'number' && Number.isFinite(expires)) {
+        // OpenCode may store seconds, ms, or epoch; we accept epoch ms only if it looks plausible.
+        parsed.expiresAt = expires > 10_000_000_000 ? expires : expires * 1000;
+    }
+    return parsed;
+}
+function isPlainObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function isStringWithin(value, maxLen) {
+    return (typeof value === 'string' &&
+        value.trim().length > 0 &&
+        value.length <= maxLen);
+}
+function isEnoent(error) {
+    return (typeof error === 'object' &&
+        error !== null &&
+        'code' in error &&
+        error.code === 'ENOENT');
+}
+//# sourceMappingURL=imports.js.map

package/dist/src/openai_chatgpt/imports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"imports.js","sourceRoot":"","sources":["../../../src/openai_chatgpt/imports.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AAEzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,MAAM,cAAc,GAAG,IAAI,GAAG,IAAI,CAAC;AACnC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAA6B,IAAI,kBAAkB,EAAE;IAErD,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAEnD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;QAC5D,IAAI,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7B,MAAM,CAAC,CAAC;IACV,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC;QACvC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,EAAE;YACL,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,SAAS,EAAE,QAAQ;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,SAAS;YACpB,KAAK,EAAE,SAAS;SACjB;QACD,SAAS;QACT,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAA6B,IAAI,kBAAkB,EAAE;IAErD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;QAC5D,IAAI,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7B,MAAM,CAAC,CAAC;IACV,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC;QACvC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,EAAE;YACL,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,SAAS,EAAE,QAAQ;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,SAAS;SACjB;QACD,SAAS;QACT,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB;IACvB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC1C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7D,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAgB;IAC1C,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,IAAI,CAAC,IAAI,GAAG,cAAc,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,yCAAyC,QAAQ,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;AACrC,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IAOxC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAExC,MAAM,YAAY,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IAC5C,MAAM,aAAa,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IACxC,MAAM,YAAY,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;IAE3C,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAC;IAElE,MAAM,MAAM,GAMR;QACF,WAAW,EAAE,YAAY,CAAC,IAAI,EAAE;QAChC,YAAY,EAAE,aAAa,CAAC,IAAI,EAAE;KACnC,CAAC;IAEF,IAAI,cAAc,CAAC,QAAQ,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAC/C,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,CAAC;IACD,IAAI,cAAc,CAAC,UAAU,EAAE,qBAAqB,CAAC,EAAE,CAAC;QACtD,MAAM,CAAC,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;IACvC,CAAC;IACD,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACtE,MAAM,CAAC,WAAW,GAAG,YAAY,CAAC;IACpC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAM3C,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,oBAAoB;IACpB,wEAAwE;IACxE,0FAA0F;IAE1F,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;IAE9E,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5D,MAAM,MAAM,GAKR;QACF,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE;QAC1B,YAAY,EAAE,OAAO,CAAC,IAAI,EAAE;KAC7B,CAAC;IAEF,IAAI,cAAc,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAC9C,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC;IACD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,2FAA2F;QAC3F,MAAM,CAAC,SAAS,GAAG,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;IACzE,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,MAAc;IACpD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACvB,KAAK,CAAC,MAAM,IAAI,MAAM,CACvB,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACf,KAAK,CAAC,IAAI,KAAK,QAAQ,CACxB,CAAC;AACJ,CAAC"}

package/dist/src/openai_chatgpt/imports.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};

package/dist/src/openai_chatgpt/imports.test.js

@@ -0,0 +1,82 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { promises as fs } from 'node:fs';
+import { tryImportFromCodexCli, tryImportFromOpenCode } from './imports.js';
+import { ChatGptOAuthClient } from './oauthClient.js';
+import { CHATGPT_ACCOUNT_ID_CLAIM, OPENAI_AUTH_CLAIM } from './constants.js';
+function jwt(payload) {
+    const header = Buffer.from(JSON.stringify({ alg: 'none' })).toString('base64url');
+    const body = Buffer.from(JSON.stringify(payload)).toString('base64url');
+    return `${header}.${body}.`;
+}
+describe('imports', () => {
+    const tmpRoot = path.join(os.tmpdir(), `terminai-chatgpt-oauth-${Date.now()}`);
+    beforeEach(async () => {
+        await fs.mkdir(tmpRoot, { recursive: true });
+        vi.unstubAllEnvs();
+    });
+    afterEach(async () => {
+        await fs.rm(tmpRoot, { recursive: true, force: true });
+    });
+    it('imports from CODEX_HOME/auth.json', async () => {
+        const codexHome = path.join(tmpRoot, 'codex');
+        await fs.mkdir(codexHome, { recursive: true });
+        await fs.writeFile(path.join(codexHome, 'auth.json'), JSON.stringify({
+            tokens: {
+                access_token: jwt({
+                    [OPENAI_AUTH_CLAIM]: { chatgpt_account_id: 'acct_from_access' },
+                }),
+                refresh_token: 'refresh123',
+                id_token: jwt({
+                    [OPENAI_AUTH_CLAIM]: { chatgpt_account_id: 'acct_from_id' },
+                }),
+                account_id: 'acct_stored',
+            },
+            last_refresh: 123456,
+        }), 'utf8');
+        vi.stubEnv('CODEX_HOME', codexHome);
+        const payload = await tryImportFromCodexCli(new ChatGptOAuthClient());
+        expect(payload?.token.accessToken).toBeTruthy();
+        expect(payload?.token.refreshToken).toBe('refresh123');
+        // Stored account_id wins
+        expect(payload?.accountId).toBe('acct_stored');
+        expect(payload?.lastRefresh).toBe(123456);
+    });
+    it('imports from ~/.opencode/auth/openai.json under HOME', async () => {
+        const home = path.join(tmpRoot, 'home');
+        await fs.mkdir(path.join(home, '.opencode', 'auth'), { recursive: true });
+        await fs.writeFile(path.join(home, '.opencode', 'auth', 'openai.json'), JSON.stringify({
+            type: 'oauth',
+            access: jwt({
+                [OPENAI_AUTH_CLAIM]: { chatgpt_account_id: 'acct_1' },
+            }),
+            refresh: 'refresh_1',
+            expires: 123,
+        }), 'utf8');
+        vi.stubEnv('HOME', home);
+        const payload = await tryImportFromOpenCode(new ChatGptOAuthClient());
+        expect(payload?.token.refreshToken).toBe('refresh_1');
+        expect(payload?.accountId).toBe('acct_1');
+    });
+    it('imports legacy flat claim for backwards compatibility', async () => {
+        const home = path.join(tmpRoot, 'home-legacy');
+        await fs.mkdir(path.join(home, '.opencode', 'auth'), { recursive: true });
+        await fs.writeFile(path.join(home, '.opencode', 'auth', 'openai.json'), JSON.stringify({
+            type: 'oauth',
+            access: jwt({ [CHATGPT_ACCOUNT_ID_CLAIM]: 'acct_legacy' }),
+            refresh: 'refresh_legacy',
+        }), 'utf8');
+        vi.stubEnv('HOME', home);
+        const payload = await tryImportFromOpenCode(new ChatGptOAuthClient());
+        expect(payload?.token.refreshToken).toBe('refresh_legacy');
+        expect(payload?.accountId).toBe('acct_legacy');
+    });
+});
+//# sourceMappingURL=imports.test.js.map

package/dist/src/openai_chatgpt/imports.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"imports.test.js","sourceRoot":"","sources":["../../../src/openai_chatgpt/imports.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAE7E,SAAS,GAAG,CAAC,OAAgC;IAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,CAClE,WAAW,CACZ,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxE,OAAO,GAAG,MAAM,IAAI,IAAI,GAAG,CAAC;AAC9B,CAAC;AAED,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;IACvB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CACvB,EAAE,CAAC,MAAM,EAAE,EACX,0BAA0B,IAAI,CAAC,GAAG,EAAE,EAAE,CACvC,CAAC;IAEF,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EACjC,IAAI,CAAC,SAAS,CAAC;YACb,MAAM,EAAE;gBACN,YAAY,EAAE,GAAG,CAAC;oBAChB,CAAC,iBAAiB,CAAC,EAAE,EAAE,kBAAkB,EAAE,kBAAkB,EAAE;iBAChE,CAAC;gBACF,aAAa,EAAE,YAAY;gBAC3B,QAAQ,EAAE,GAAG,CAAC;oBACZ,CAAC,iBAAiB,CAAC,EAAE,EAAE,kBAAkB,EAAE,cAAc,EAAE;iBAC5D,CAAC;gBACF,UAAU,EAAE,aAAa;aAC1B;YACD,YAAY,EAAE,MAAM;SACrB,CAAC,EACF,MAAM,CACP,CAAC;QAEF,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QAEpC,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,kBAAkB,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,CAAC;QAChD,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvD,yBAAyB;QACzB,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/C,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,CAAC,EACnD,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,GAAG,CAAC;gBACV,CAAC,iBAAiB,CAAC,EAAE,EAAE,kBAAkB,EAAE,QAAQ,EAAE;aACtD,CAAC;YACF,OAAO,EAAE,WAAW;YACpB,OAAO,EAAE,GAAG;SACb,CAAC,EACF,MAAM,CACP,CAAC;QAEF,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAEzB,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,kBAAkB,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtD,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC/C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,CAAC,EACnD,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,wBAAwB,CAAC,EAAE,aAAa,EAAE,CAAC;YAC1D,OAAO,EAAE,gBAAgB;SAC1B,CAAC,EACF,MAAM,CACP,CAAC;QAEF,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAEzB,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,IAAI,kBAAkB,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC3D,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/openai_chatgpt/jwt.d.ts

@@ -0,0 +1,7 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export declare function decodeJwtPayload(token: string): Record<string, unknown>;

package/dist/src/openai_chatgpt/jwt.js

@@ -0,0 +1,31 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export function decodeJwtPayload(token) {
+    const parts = token.split('.');
+    if (parts.length < 2) {
+        throw new Error('Invalid JWT: missing payload');
+    }
+    const payloadB64Url = parts[1];
+    const json = Buffer.from(base64UrlToBase64(payloadB64Url), 'base64').toString('utf8');
+    const parsed = JSON.parse(json);
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+        throw new Error('Invalid JWT: payload is not an object');
+    }
+    return parsed;
+}
+function base64UrlToBase64(value) {
+    const normalized = value.replace(/-/g, '+').replace(/_/g, '/');
+    const padding = normalized.length % 4;
+    if (padding === 0)
+        return normalized;
+    if (padding === 2)
+        return normalized + '==';
+    if (padding === 3)
+        return normalized + '=';
+    throw new Error('Invalid base64url string');
+}
+//# sourceMappingURL=jwt.js.map

package/dist/src/openai_chatgpt/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../../../src/openai_chatgpt/jwt.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAC3E,MAAM,CACP,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IAC3C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,MAAiC,CAAC;AAC3C,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC;IACrC,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,UAAU,GAAG,IAAI,CAAC;IAC5C,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,UAAU,GAAG,GAAG,CAAC;IAC3C,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;AAC9C,CAAC"}

package/dist/src/openai_chatgpt/jwt.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};

package/dist/src/openai_chatgpt/jwt.test.js

@@ -0,0 +1,23 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect } from 'vitest';
+import { decodeJwtPayload } from './jwt.js';
+function jwt(payload) {
+    const header = Buffer.from(JSON.stringify({ alg: 'none' })).toString('base64url');
+    const body = Buffer.from(JSON.stringify(payload)).toString('base64url');
+    return `${header}.${body}.`;
+}
+describe('decodeJwtPayload', () => {
+    it('decodes base64url JSON payload', () => {
+        const token = jwt({ sub: 'user', foo: 'bar' });
+        expect(decodeJwtPayload(token)).toEqual({ sub: 'user', foo: 'bar' });
+    });
+    it('throws for invalid token', () => {
+        expect(() => decodeJwtPayload('not-a-jwt')).toThrow('Invalid JWT');
+    });
+});
+//# sourceMappingURL=jwt.test.js.map

package/dist/src/openai_chatgpt/jwt.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.test.js","sourceRoot":"","sources":["../../../src/openai_chatgpt/jwt.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAE5C,SAAS,GAAG,CAAC,OAAgC;IAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,CAClE,WAAW,CACZ,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxE,OAAO,GAAG,MAAM,IAAI,IAAI,GAAG,CAAC;AAC9B,CAAC;AAED,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,KAAK,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/C,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/openai_chatgpt/oauthClient.d.ts

@@ -0,0 +1,52 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { ChatGptOAuthCredentialPayload } from './types.js';
+export interface ChatGptOAuthClientOptions {
+    readonly clientId?: string;
+    readonly authorizeUrl?: string;
+    readonly tokenUrl?: string;
+    readonly refreshStaleMs?: number;
+}
+export interface ChatGptOAuthStart {
+    readonly authUrl: string;
+    readonly state: string;
+    readonly codeVerifier: string;
+}
+/**
+ * Error thrown when OpenAI returns refresh_token_reused.
+ * This indicates the stored credentials are permanently invalid.
+ */
+export declare class RefreshTokenReusedError extends Error {
+    constructor(message: string);
+}
+export declare class ChatGptOAuthClient {
+    private readonly clientId;
+    private readonly authorizeUrl;
+    private readonly tokenUrl;
+    private readonly refreshStaleMs;
+    constructor(options?: ChatGptOAuthClientOptions);
+    startAuthorization(input: {
+        redirectUri: string;
+        scope?: string;
+    }): ChatGptOAuthStart;
+    exchangeAuthorizationCode(input: {
+        code: string;
+        redirectUri: string;
+        codeVerifier: string;
+    }): Promise<ChatGptOAuthCredentialPayload>;
+    refresh(input: {
+        refreshToken: string;
+        existingRefreshToken?: string;
+    }): Promise<ChatGptOAuthCredentialPayload>;
+    shouldRefreshByStaleness(lastRefresh: number | undefined): boolean;
+    deriveAccountId(input: {
+        accountId?: string;
+        idToken?: string;
+        accessToken?: string;
+    }): string | undefined;
+    private toCredentialPayloadFromTokenResponse;
+}

package/dist/src/openai_chatgpt/oauthClient.js

@@ -0,0 +1,196 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import * as crypto from 'node:crypto';
+import { URL } from 'node:url';
+import { CHATGPT_ACCOUNT_ID_CLAIM, OPENAI_AUTH_CLAIM, OPENAI_AUTH_CHATGPT_ACCOUNT_ID_FIELD, CODEX_ORIGINATOR, DEFAULT_OPENAI_OAUTH_AUTHORIZE_URL, DEFAULT_OPENAI_OAUTH_CLIENT_ID, DEFAULT_OPENAI_OAUTH_TOKEN_URL, DEFAULT_REFRESH_STALE_MS, } from './constants.js';
+import { decodeJwtPayload } from './jwt.js';
+/**
+ * Error thrown when OpenAI returns refresh_token_reused.
+ * This indicates the stored credentials are permanently invalid.
+ */
+export class RefreshTokenReusedError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'RefreshTokenReusedError';
+    }
+}
+export class ChatGptOAuthClient {
+    clientId;
+    authorizeUrl;
+    tokenUrl;
+    refreshStaleMs;
+    constructor(options = {}) {
+        this.clientId =
+            options.clientId ??
+                process.env['TERMINAI_OPENAI_OAUTH_CLIENT_ID'] ??
+                DEFAULT_OPENAI_OAUTH_CLIENT_ID;
+        this.authorizeUrl =
+            options.authorizeUrl ?? DEFAULT_OPENAI_OAUTH_AUTHORIZE_URL;
+        this.tokenUrl = options.tokenUrl ?? DEFAULT_OPENAI_OAUTH_TOKEN_URL;
+        this.refreshStaleMs = options.refreshStaleMs ?? DEFAULT_REFRESH_STALE_MS;
+    }
+    startAuthorization(input) {
+        const { codeVerifier, codeChallenge } = generatePkceS256();
+        const state = crypto.randomBytes(16).toString('base64url');
+        const scope = input.scope ?? 'openid profile email offline_access';
+        const url = new URL(this.authorizeUrl);
+        url.searchParams.set('client_id', this.clientId);
+        url.searchParams.set('redirect_uri', input.redirectUri);
+        url.searchParams.set('response_type', 'code');
+        url.searchParams.set('scope', scope);
+        url.searchParams.set('code_challenge', codeChallenge);
+        url.searchParams.set('code_challenge_method', 'S256');
+        url.searchParams.set('state', state);
+        // Codex CLI parity flags (stability-first)
+        url.searchParams.set('id_token_add_organizations', 'true');
+        url.searchParams.set('codex_cli_simplified_flow', 'true');
+        url.searchParams.set('originator', CODEX_ORIGINATOR);
+        return { authUrl: url.toString(), state, codeVerifier };
+    }
+    async exchangeAuthorizationCode(input) {
+        const body = new URLSearchParams();
+        body.set('grant_type', 'authorization_code');
+        body.set('code', input.code);
+        body.set('redirect_uri', input.redirectUri);
+        body.set('client_id', this.clientId);
+        body.set('code_verifier', input.codeVerifier);
+        const response = await fetch(this.tokenUrl, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+            body: body.toString(),
+        });
+        if (!response.ok) {
+            const text = await response.text().catch(() => '');
+            throw new Error(`OpenAI OAuth token exchange failed (${response.status}): ${text}`);
+        }
+        const json = (await response.json());
+        return this.toCredentialPayloadFromTokenResponse(json);
+    }
+    async refresh(input) {
+        const response = await fetch(this.tokenUrl, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({
+                client_id: this.clientId,
+                grant_type: 'refresh_token',
+                refresh_token: input.refreshToken,
+                scope: 'openid profile email',
+            }),
+        });
+        if (!response.ok) {
+            const text = await response.text().catch(() => '');
+            // Detect refresh_token_reused error - this means stored creds are permanently invalid
+            if (response.status === 401 && text.includes('refresh_token_reused')) {
+                throw new RefreshTokenReusedError('ChatGPT OAuth session expired. Your refresh token was already used. Run /auth reset then /auth wizard to re-authenticate.');
+            }
+            throw new Error(`OpenAI OAuth refresh failed (${response.status}): ${text}`);
+        }
+        const json = (await response.json());
+        return this.toCredentialPayloadFromTokenResponse(json, {
+            existingRefreshToken: input.existingRefreshToken,
+        });
+    }
+    shouldRefreshByStaleness(lastRefresh) {
+        if (typeof lastRefresh !== 'number' || !Number.isFinite(lastRefresh)) {
+            return true;
+        }
+        return Date.now() - lastRefresh >= this.refreshStaleMs;
+    }
+    deriveAccountId(input) {
+        if (input.accountId && input.accountId.trim().length > 0) {
+            return input.accountId.trim();
+        }
+        const idToken = input.idToken?.trim();
+        if (idToken) {
+            const claim = tryGetChatGptAccountIdClaim(idToken);
+            if (claim)
+                return claim;
+        }
+        const accessToken = input.accessToken?.trim();
+        if (accessToken) {
+            const claim = tryGetChatGptAccountIdClaim(accessToken);
+            if (claim)
+                return claim;
+        }
+        return undefined;
+    }
+    toCredentialPayloadFromTokenResponse(tokenResponse, options) {
+        if (!tokenResponse.access_token ||
+            tokenResponse.access_token.length === 0) {
+            throw new Error('OpenAI OAuth token response missing access_token');
+        }
+        const refreshToken = tokenResponse.refresh_token && tokenResponse.refresh_token.length > 0
+            ? tokenResponse.refresh_token
+            : options?.existingRefreshToken;
+        if (!refreshToken || refreshToken.length === 0) {
+            throw new Error('OpenAI OAuth token response missing refresh_token');
+        }
+        const idToken = typeof tokenResponse.id_token === 'string' &&
+            tokenResponse.id_token.trim().length > 0
+            ? tokenResponse.id_token
+            : undefined;
+        const expiresAt = typeof tokenResponse.expires_in === 'number' &&
+            Number.isFinite(tokenResponse.expires_in) &&
+            tokenResponse.expires_in > 0
+            ? Date.now() + tokenResponse.expires_in * 1000
+            : undefined;
+        const token = {
+            accessToken: tokenResponse.access_token,
+            refreshToken,
+            tokenType: 'Bearer',
+            idToken,
+            expiresAt,
+            scope: tokenResponse.scope,
+        };
+        const accountId = this.deriveAccountId({
+            idToken,
+            accessToken: token.accessToken,
+        });
+        if (!accountId) {
+            throw new Error('ChatGPT OAuth account id is missing. Re-authenticate to obtain an id_token with chatgpt_account_id.');
+        }
+        return {
+            token,
+            accountId,
+            lastRefresh: Date.now(),
+        };
+    }
+}
+function generatePkceS256() {
+    const codeVerifier = crypto.randomBytes(32).toString('base64url');
+    const codeChallenge = crypto
+        .createHash('sha256')
+        .update(codeVerifier)
+        .digest('base64url');
+    return { codeVerifier, codeChallenge };
+}
+function tryGetChatGptAccountIdClaim(token) {
+    try {
+        const payload = decodeJwtPayload(token);
+        // Preferred: nested object at https://api.openai.com/auth
+        const authObj = payload[OPENAI_AUTH_CLAIM];
+        if (isPlainObject(authObj)) {
+            const accountId = authObj[OPENAI_AUTH_CHATGPT_ACCOUNT_ID_FIELD];
+            if (typeof accountId === 'string' && accountId.trim().length > 0) {
+                return accountId.trim();
+            }
+        }
+        // Fallback: legacy flat claim
+        const legacy = payload[CHATGPT_ACCOUNT_ID_CLAIM];
+        if (typeof legacy === 'string' && legacy.trim().length > 0) {
+            return legacy.trim();
+        }
+        return undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function isPlainObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=oauthClient.js.map

package/dist/src/openai_chatgpt/oauthClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthClient.js","sourceRoot":"","sources":["../../../src/openai_chatgpt/oauthClient.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EACL,wBAAwB,EACxB,iBAAiB,EACjB,oCAAoC,EACpC,gBAAgB,EAChB,kCAAkC,EAClC,8BAA8B,EAC9B,8BAA8B,EAC9B,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AAMxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAe5C;;;GAGG;AACH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,MAAM,OAAO,kBAAkB;IACZ,QAAQ,CAAS;IACjB,YAAY,CAAS;IACrB,QAAQ,CAAS;IACjB,cAAc,CAAS;IAExC,YAAY,UAAqC,EAAE;QACjD,IAAI,CAAC,QAAQ;YACX,OAAO,CAAC,QAAQ;gBAChB,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC;gBAC9C,8BAA8B,CAAC;QACjC,IAAI,CAAC,YAAY;YACf,OAAO,CAAC,YAAY,IAAI,kCAAkC,CAAC;QAC7D,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,8BAA8B,CAAC;QACnE,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC;IAC3E,CAAC;IAED,kBAAkB,CAAC,KAGlB;QACC,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,gBAAgB,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAE3D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,qCAAqC,CAAC;QACnE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACxD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;QACtD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;QACtD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAErC,2CAA2C;QAC3C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,4BAA4B,EAAE,MAAM,CAAC,CAAC;QAC3D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,2BAA2B,EAAE,MAAM,CAAC,CAAC;QAC1D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;QAErD,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,KAI/B;QACC,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QAE9C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;YAC1C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACtB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,uCAAuC,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CACnE,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA6B,CAAC;QACjE,OAAO,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAGb;QACC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;YAC1C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,SAAS,EAAE,IAAI,CAAC,QAAQ;gBACxB,UAAU,EAAE,eAAe;gBAC3B,aAAa,EAAE,KAAK,CAAC,YAAY;gBACjC,KAAK,EAAE,sBAAsB;aAC9B,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAEnD,sFAAsF;YACtF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;gBACrE,MAAM,IAAI,uBAAuB,CAC/B,2HAA2H,CAC5H,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,KAAK,CACb,gCAAgC,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAC5D,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA6B,CAAC;QACjE,OAAO,IAAI,CAAC,oCAAoC,CAAC,IAAI,EAAE;YACrD,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;SACjD,CAAC,CAAC;IACL,CAAC;IAED,wBAAwB,CAAC,WAA+B;QACtD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACrE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,IAAI,IAAI,CAAC,cAAc,CAAC;IACzD,CAAC;IAED,eAAe,CAAC,KAIf;QACC,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzD,OAAO,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAChC,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;QACtC,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;YACnD,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;QAED,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;QAC9C,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,2BAA2B,CAAC,WAAW,CAAC,CAAC;YACvD,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,oCAAoC,CAC1C,aAAuC,EACvC,OAA2C;QAE3C,IACE,CAAC,aAAa,CAAC,YAAY;YAC3B,aAAa,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EACvC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,YAAY,GAChB,aAAa,CAAC,aAAa,IAAI,aAAa,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;YACnE,CAAC,CAAC,aAAa,CAAC,aAAa;YAC7B,CAAC,CAAC,OAAO,EAAE,oBAAoB,CAAC;QACpC,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,OAAO,GACX,OAAO,aAAa,CAAC,QAAQ,KAAK,QAAQ;YAC1C,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YACtC,CAAC,CAAC,aAAa,CAAC,QAAQ;YACxB,CAAC,CAAC,SAAS,CAAC;QAEhB,MAAM,SAAS,GACb,OAAO,aAAa,CAAC,UAAU,KAAK,QAAQ;YAC5C,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,UAAU,CAAC;YACzC,aAAa,CAAC,UAAU,GAAG,CAAC;YAC1B,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,UAAU,GAAG,IAAI;YAC9C,CAAC,CAAC,SAAS,CAAC;QAEhB,MAAM,KAAK,GAAuB;YAChC,WAAW,EAAE,aAAa,CAAC,YAAY;YACvC,YAAY;YACZ,SAAS,EAAE,QAAQ;YACnB,OAAO;YACP,SAAS;YACT,KAAK,EAAE,aAAa,CAAC,KAAK;SAC3B,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC;YACrC,OAAO;YACP,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,qGAAqG,CACtG,CAAC;QACJ,CAAC;QAED,OAAO;YACL,KAAK;YACL,SAAS;YACT,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;SACxB,CAAC;IACJ,CAAC;CACF;AAED,SAAS,gBAAgB;IACvB,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAClE,MAAM,aAAa,GAAG,MAAM;SACzB,UAAU,CAAC,QAAQ,CAAC;SACpB,MAAM,CAAC,YAAY,CAAC;SACpB,MAAM,CAAC,WAAW,CAAC,CAAC;IACvB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAa;IAChD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAExC,0DAA0D;QAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC3C,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,OAAO,CAAC,oCAAoC,CAAC,CAAC;YAChE,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjE,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACjD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3D,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/src/openai_chatgpt/oauthClient.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};