anypick 1.0.0 → 1.1.0

package/dist/providers/codex-refresh.js

@@ -1,64 +0,0 @@
-//#region src/providers/codex-refresh.ts
-/**
-* ChatGPT / Codex OAuth token refresh (no browser).
-*
-* Endpoint + client_id match the official Codex CLI binary
-* (https://auth.openai.com/oauth/token, app_EMoamEEZ73f0CkXaXp7hrann).
-*/
-var CODEX_OAUTH_TOKEN_URL = process.env.CODEX_REFRESH_TOKEN_URL_OVERRIDE?.trim() || "https://auth.openai.com/oauth/token";
-var CODEX_OAUTH_CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
-/**
-* Refresh Codex ChatGPT OAuth tokens in-memory from an auth.json object.
-*/
-async function refreshCodexAuth(auth, fetchFn = fetch) {
-	const refreshToken = auth.tokens?.refresh_token;
-	if (!refreshToken) throw new Error("No refresh_token in Codex auth. Re-login with: codex login");
-	const res = await fetchFn(CODEX_OAUTH_TOKEN_URL, {
-		method: "POST",
-		headers: {
-			"content-type": "application/x-www-form-urlencoded",
-			accept: "application/json"
-		},
-		body: new URLSearchParams({
-			grant_type: "refresh_token",
-			refresh_token: refreshToken,
-			client_id: CODEX_OAUTH_CLIENT_ID
-		})
-	});
-	if (!res.ok) {
-		const text = await res.text().catch(() => "");
-		throw new Error(`Codex token refresh failed (${res.status}): ${text.slice(0, 240)}`);
-	}
-	const data = await res.json();
-	if (!data.access_token) throw new Error("Codex token refresh returned no access_token.");
-	const next = {
-		...auth,
-		auth_mode: auth.auth_mode ?? "chatgpt",
-		tokens: {
-			...auth.tokens,
-			access_token: data.access_token,
-			refresh_token: data.refresh_token ?? refreshToken,
-			id_token: data.id_token ?? auth.tokens?.id_token
-		},
-		last_refresh: (/* @__PURE__ */ new Date()).toISOString()
-	};
-	return {
-		auth: next,
-		identity: identityFromAuth(next)
-	};
-}
-function identityFromAuth(auth) {
-	const idToken = auth.tokens?.id_token;
-	if (!idToken) return;
-	try {
-		const parts = idToken.split(".");
-		if (parts.length < 2) return;
-		const payload = JSON.parse(Buffer.from(parts[1], "base64url").toString("utf8"));
-		if (typeof payload.email === "string") return payload.email;
-		if (typeof payload.preferred_username === "string") return payload.preferred_username;
-	} catch {}
-}
-//#endregion
-export { CODEX_OAUTH_CLIENT_ID, CODEX_OAUTH_TOKEN_URL, refreshCodexAuth };
-
-//# sourceMappingURL=codex-refresh.js.map

package/dist/providers/codex-refresh.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"codex-refresh.js","names":[],"sources":["../../src/providers/codex-refresh.ts"],"sourcesContent":["/**\n * ChatGPT / Codex OAuth token refresh (no browser).\n *\n * Endpoint + client_id match the official Codex CLI binary\n * (https://auth.openai.com/oauth/token, app_EMoamEEZ73f0CkXaXp7hrann).\n */\n\nexport const CODEX_OAUTH_TOKEN_URL =\n  process.env.CODEX_REFRESH_TOKEN_URL_OVERRIDE?.trim() || 'https://auth.openai.com/oauth/token';\n\nexport const CODEX_OAUTH_CLIENT_ID = 'app_EMoamEEZ73f0CkXaXp7hrann';\n\nexport interface CodexAuthFile {\n  auth_mode?: string;\n  OPENAI_API_KEY?: string | null;\n  tokens?: {\n    id_token?: string;\n    access_token?: string;\n    refresh_token?: string;\n    account_id?: string;\n    [key: string]: unknown;\n  };\n  last_refresh?: string;\n  [key: string]: unknown;\n}\n\nexport interface CodexRefreshResult {\n  auth: CodexAuthFile;\n  identity?: string;\n}\n\n/**\n * Refresh Codex ChatGPT OAuth tokens in-memory from an auth.json object.\n */\nexport async function refreshCodexAuth(\n  auth: CodexAuthFile,\n  fetchFn: typeof fetch = fetch,\n): Promise<CodexRefreshResult> {\n  const refreshToken = auth.tokens?.refresh_token;\n  if (!refreshToken) {\n    throw new Error('No refresh_token in Codex auth. Re-login with: codex login');\n  }\n\n  const body = new URLSearchParams({\n    grant_type: 'refresh_token',\n    refresh_token: refreshToken,\n    client_id: CODEX_OAUTH_CLIENT_ID,\n  });\n\n  const res = await fetchFn(CODEX_OAUTH_TOKEN_URL, {\n    method: 'POST',\n    headers: {\n      'content-type': 'application/x-www-form-urlencoded',\n      accept: 'application/json',\n    },\n    body,\n  });\n\n  if (!res.ok) {\n    const text = await res.text().catch(() => '');\n    throw new Error(`Codex token refresh failed (${res.status}): ${text.slice(0, 240)}`);\n  }\n\n  const data = (await res.json()) as {\n    access_token?: string;\n    refresh_token?: string;\n    id_token?: string;\n    expires_in?: number;\n  };\n\n  if (!data.access_token) {\n    throw new Error('Codex token refresh returned no access_token.');\n  }\n\n  const next: CodexAuthFile = {\n    ...auth,\n    auth_mode: auth.auth_mode ?? 'chatgpt',\n    tokens: {\n      ...auth.tokens,\n      access_token: data.access_token,\n      refresh_token: data.refresh_token ?? refreshToken,\n      id_token: data.id_token ?? auth.tokens?.id_token,\n    },\n    last_refresh: new Date().toISOString(),\n  };\n\n  return {\n    auth: next,\n    identity: identityFromAuth(next),\n  };\n}\n\nfunction identityFromAuth(auth: CodexAuthFile): string | undefined {\n  const idToken = auth.tokens?.id_token;\n  if (!idToken) {\n    return undefined;\n  }\n  try {\n    const parts = idToken.split('.');\n    if (parts.length < 2) {\n      return undefined;\n    }\n    const payload = JSON.parse(Buffer.from(parts[1], 'base64url').toString('utf8')) as Record<\n      string,\n      unknown\n    >;\n    if (typeof payload.email === 'string') {\n      return payload.email;\n    }\n    if (typeof payload.preferred_username === 'string') {\n      return payload.preferred_username;\n    }\n  } catch {\n    // ignore\n  }\n  return undefined;\n}\n"],"mappings":";;;;;;;AAOA,IAAa,wBACX,QAAQ,IAAI,kCAAkC,KAAK,KAAK;AAE1D,IAAa,wBAAwB;;;;AAwBrC,eAAsB,iBACpB,MACA,UAAwB,OACK;CAC7B,MAAM,eAAe,KAAK,QAAQ;CAClC,IAAI,CAAC,cACH,MAAM,IAAI,MAAM,4DAA4D;CAS9E,MAAM,MAAM,MAAM,QAAQ,uBAAuB;EAC/C,QAAQ;EACR,SAAS;GACP,gBAAgB;GAChB,QAAQ;EACV;EACA,UAZe,gBAAgB;GAC/B,YAAY;GACZ,eAAe;GACf,WAAW;EACb,CAQE;CACF,CAAC;CAED,IAAI,CAAC,IAAI,IAAI;EACX,MAAM,OAAO,MAAM,IAAI,KAAK,CAAC,CAAC,YAAY,EAAE;EAC5C,MAAM,IAAI,MAAM,+BAA+B,IAAI,OAAO,KAAK,KAAK,MAAM,GAAG,GAAG,GAAG;CACrF;CAEA,MAAM,OAAQ,MAAM,IAAI,KAAK;CAO7B,IAAI,CAAC,KAAK,cACR,MAAM,IAAI,MAAM,+CAA+C;CAGjE,MAAM,OAAsB;EAC1B,GAAG;EACH,WAAW,KAAK,aAAa;EAC7B,QAAQ;GACN,GAAG,KAAK;GACR,cAAc,KAAK;GACnB,eAAe,KAAK,iBAAiB;GACrC,UAAU,KAAK,YAAY,KAAK,QAAQ;EAC1C;EACA,+BAAc,IAAI,KAAK,EAAA,CAAE,YAAY;CACvC;CAEA,OAAO;EACL,MAAM;EACN,UAAU,iBAAiB,IAAI;CACjC;AACF;AAEA,SAAS,iBAAiB,MAAyC;CACjE,MAAM,UAAU,KAAK,QAAQ;CAC7B,IAAI,CAAC,SACH;CAEF,IAAI;EACF,MAAM,QAAQ,QAAQ,MAAM,GAAG;EAC/B,IAAI,MAAM,SAAS,GACjB;EAEF,MAAM,UAAU,KAAK,MAAM,OAAO,KAAK,MAAM,IAAI,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC;EAI9E,IAAI,OAAO,QAAQ,UAAU,UAC3B,OAAO,QAAQ;EAEjB,IAAI,OAAO,QAAQ,uBAAuB,UACxC,OAAO,QAAQ;CAEnB,QAAQ,CAER;AAEF"}

package/dist/providers/codex-usage.d.ts

@@ -1,3 +0,0 @@
-import type { LiveUsage } from '../types.js';
-export declare function parseCodexUsage(value: unknown): LiveUsage | null;
-//# sourceMappingURL=codex-usage.d.ts.map

package/dist/providers/codex-usage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"codex-usage.d.ts","sourceRoot":"","sources":["../../src/providers/codex-usage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAmB,MAAM,UAAU,CAAC;AAE3D,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAwBhE"}

package/dist/providers/codex-usage.js

@@ -1,42 +0,0 @@
-//#region src/providers/codex-usage.ts
-function parseCodexUsage(value) {
-	if (!value || typeof value !== "object") return null;
-	const root = value;
-	const rateLimit = objectValue(root.rate_limit) ?? objectValue(root.rate_limits) ?? root;
-	const windows = [];
-	for (const [key, label] of [["primary_window", "primary"], ["secondary_window", "secondary"]]) {
-		const window = objectValue(rateLimit[key]);
-		const used = numberValue(window?.used_percent);
-		if (used == null) continue;
-		const resetsAtMs = resetAtMs(window);
-		windows.push({
-			label: usageLabel(label, window),
-			remainingPercent: Math.max(0, Math.min(100, Math.round(100 - used))),
-			...resetsAtMs != null ? { resetsAtMs } : {}
-		});
-	}
-	return windows.length ? { windows } : null;
-}
-function objectValue(value) {
-	return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
-}
-function numberValue(value) {
-	return typeof value === "number" && Number.isFinite(value) ? value : void 0;
-}
-function resetAtMs(window) {
-	const raw = numberValue(window?.reset_at) ?? numberValue(window?.resets_at);
-	if (raw != null) return raw < 1e10 ? raw * 1e3 : raw;
-	const afterSeconds = numberValue(window?.reset_after_seconds);
-	return afterSeconds != null ? Date.now() + afterSeconds * 1e3 : void 0;
-}
-function usageLabel(fallback, window) {
-	const seconds = numberValue(window?.limit_window_seconds);
-	if (!seconds) return fallback;
-	if (seconds % 86400 === 0) return `${seconds / 86400}d`;
-	if (seconds % 3600 === 0) return `${seconds / 3600}h`;
-	return `${Math.round(seconds / 60)}m`;
-}
-//#endregion
-export { parseCodexUsage };
-
-//# sourceMappingURL=codex-usage.js.map

package/dist/providers/codex-usage.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"codex-usage.js","names":[],"sources":["../../src/providers/codex-usage.ts"],"sourcesContent":["import type { LiveUsage, LiveUsageWindow } from '../types';\n\nexport function parseCodexUsage(value: unknown): LiveUsage | null {\n  if (!value || typeof value !== 'object') {\n    return null;\n  }\n  const root = value as Record<string, unknown>;\n  const rateLimit = objectValue(root.rate_limit) ?? objectValue(root.rate_limits) ?? root;\n  const windows: LiveUsageWindow[] = [];\n  for (const [key, label] of [\n    ['primary_window', 'primary'],\n    ['secondary_window', 'secondary'],\n  ] as const) {\n    const window = objectValue(rateLimit[key]);\n    const used = numberValue(window?.used_percent);\n    if (used == null) {\n      continue;\n    }\n    const resetsAtMs = resetAtMs(window);\n    windows.push({\n      label: usageLabel(label, window),\n      remainingPercent: Math.max(0, Math.min(100, Math.round(100 - used))),\n      ...(resetsAtMs != null ? { resetsAtMs } : {}),\n    });\n  }\n  return windows.length ? { windows } : null;\n}\n\nfunction objectValue(value: unknown): Record<string, unknown> | undefined {\n  return value && typeof value === 'object' && !Array.isArray(value)\n    ? (value as Record<string, unknown>)\n    : undefined;\n}\n\nfunction numberValue(value: unknown): number | undefined {\n  return typeof value === 'number' && Number.isFinite(value) ? value : undefined;\n}\n\nfunction resetAtMs(window: Record<string, unknown> | undefined): number | undefined {\n  const raw = numberValue(window?.reset_at) ?? numberValue(window?.resets_at);\n  if (raw != null) {\n    return raw < 10_000_000_000 ? raw * 1_000 : raw;\n  }\n  const afterSeconds = numberValue(window?.reset_after_seconds);\n  return afterSeconds != null ? Date.now() + afterSeconds * 1_000 : undefined;\n}\n\nfunction usageLabel(fallback: string, window: Record<string, unknown> | undefined): string {\n  const seconds = numberValue(window?.limit_window_seconds);\n  if (!seconds) {\n    return fallback;\n  }\n  if (seconds % 86_400 === 0) {\n    return `${seconds / 86_400}d`;\n  }\n  if (seconds % 3_600 === 0) {\n    return `${seconds / 3_600}h`;\n  }\n  return `${Math.round(seconds / 60)}m`;\n}\n"],"mappings":";AAEA,SAAgB,gBAAgB,OAAkC;CAChE,IAAI,CAAC,SAAS,OAAO,UAAU,UAC7B,OAAO;CAET,MAAM,OAAO;CACb,MAAM,YAAY,YAAY,KAAK,UAAU,KAAK,YAAY,KAAK,WAAW,KAAK;CACnF,MAAM,UAA6B,CAAC;CACpC,KAAK,MAAM,CAAC,KAAK,UAAU,CACzB,CAAC,kBAAkB,SAAS,GAC5B,CAAC,oBAAoB,WAAW,CAClC,GAAY;EACV,MAAM,SAAS,YAAY,UAAU,IAAI;EACzC,MAAM,OAAO,YAAY,QAAQ,YAAY;EAC7C,IAAI,QAAQ,MACV;EAEF,MAAM,aAAa,UAAU,MAAM;EACnC,QAAQ,KAAK;GACX,OAAO,WAAW,OAAO,MAAM;GAC/B,kBAAkB,KAAK,IAAI,GAAG,KAAK,IAAI,KAAK,KAAK,MAAM,MAAM,IAAI,CAAC,CAAC;GACnE,GAAI,cAAc,OAAO,EAAE,WAAW,IAAI,CAAC;EAC7C,CAAC;CACH;CACA,OAAO,QAAQ,SAAS,EAAE,QAAQ,IAAI;AACxC;AAEA,SAAS,YAAY,OAAqD;CACxE,OAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAC5D,QACD,KAAA;AACN;AAEA,SAAS,YAAY,OAAoC;CACvD,OAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAAI,QAAQ,KAAA;AACvE;AAEA,SAAS,UAAU,QAAiE;CAClF,MAAM,MAAM,YAAY,QAAQ,QAAQ,KAAK,YAAY,QAAQ,SAAS;CAC1E,IAAI,OAAO,MACT,OAAO,MAAM,OAAiB,MAAM,MAAQ;CAE9C,MAAM,eAAe,YAAY,QAAQ,mBAAmB;CAC5D,OAAO,gBAAgB,OAAO,KAAK,IAAI,IAAI,eAAe,MAAQ,KAAA;AACpE;AAEA,SAAS,WAAW,UAAkB,QAAqD;CACzF,MAAM,UAAU,YAAY,QAAQ,oBAAoB;CACxD,IAAI,CAAC,SACH,OAAO;CAET,IAAI,UAAU,UAAW,GACvB,OAAO,GAAG,UAAU,MAAO;CAE7B,IAAI,UAAU,SAAU,GACtB,OAAO,GAAG,UAAU,KAAM;CAE5B,OAAO,GAAG,KAAK,MAAM,UAAU,EAAE,EAAE;AACrC"}

package/dist/providers/codex.d.ts

@@ -1,61 +0,0 @@
-import type { Account, AccountMeta, LiveAuthStatus, LiveUsage, Provider, SourceAdapter } from '../types.js';
-/**
- * OpenAI Codex CLI + Desktop
- *
- * CLI live auth: ~/.codex/auth.json
- * Desktop app may keep a different in-memory ChatGPT account (multi-account),
- * but AnyPick can only back up and restore ~/.codex/auth.json. Therefore
- * detectLive() deliberately reports that file, keeping detection, backup,
- * restore, and snapshot matching on one authority.
- */
-export declare class CodexProvider implements Provider {
-    private readonly home;
-    private readonly fetchFn;
-    readonly id = "codex";
-    readonly name = "OpenAI Codex";
-    readonly shortName = "Codex";
-    readonly description = "Manages ~/.codex/auth.json";
-    roleDefaults(): Record<string, string>;
-    suggestModels(): Record<string, string>;
-    roleFriendlyModels(): readonly string[];
-    staticFallbackModels(): readonly string[];
-    constructor(home?: string, fetchFn?: typeof fetch);
-    sourceAdapter(account: Account): SourceAdapter;
-    private get authPath();
-    detectLive(): Promise<LiveAuthStatus>;
-    /**
-     * Read the Codex/ChatGPT rate-limit snapshot for auth.json only. When
-     * Codex Desktop reports another account as active, auth.json may be stale;
-     * in that case return nothing rather than risk showing another account's
-     * quota.
-     */
-    liveUsage(): Promise<LiveUsage | null>;
-    /** CLI / file-based session (~/.codex/auth.json). */
-    private detectFromAuthFile;
-    /**
-     * Codex Desktop writes the signed-in ChatGPT account into Sentry scope
-     * (and rate-limit UI state). That is often ahead of ~/.codex/auth.json
-     * after an in-app account switch.
-     */
-    private detectFromDesktopApp;
-    backup(destDir: string): Promise<Partial<Pick<AccountMeta, 'identity' | 'label' | 'notes'>>>;
-    restore(srcDir: string): Promise<void>;
-    describeSnapshot(srcDir: string): Promise<Partial<Pick<AccountMeta, 'identity' | 'label' | 'notes'>>>;
-    /**
-     * Delete local auth.json only — does NOT call OpenAI logout/revoke.
-     * Saved anypick snapshots remain valid for restore.
-     */
-    clearLive(): Promise<void>;
-    /**
-     * Refresh ChatGPT OAuth tokens inside a snapshot dir (auth.json).
-     */
-    refreshAuth(authDir: string): Promise<Partial<Pick<AccountMeta, 'identity' | 'label' | 'notes'>>>;
-    /**
-     * Compare this snapshot's session material against the live Codex login.
-     * Prefers refresh_token (unique per session) over account_id so two
-     * snapshots of the same ChatGPT account are not both marked live.
-     */
-    snapshotMatchesLive(snapshotDir: string): Promise<boolean>;
-}
-export declare const codexProvider: CodexProvider;
-//# sourceMappingURL=codex.d.ts.map

package/dist/providers/codex.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../../src/providers/codex.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,OAAO,EACP,WAAW,EACX,cAAc,EACd,SAAS,EACT,QAAQ,EACR,aAAa,EACd,MAAM,UAAU,CAAC;AAgBlB;;;;;;;;GAQG;AACH,qBAAa,aAAc,YAAW,QAAQ;IAuB1C,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAvB1B,QAAQ,CAAC,EAAE,WAAW;IACtB,QAAQ,CAAC,IAAI,kBAAkB;IAC/B,QAAQ,CAAC,SAAS,WAAW;IAC7B,QAAQ,CAAC,WAAW,gCAAgC;IAEpD,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAErC;IAED,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAEtC;IAED,kBAAkB,IAAI,SAAS,MAAM,EAAE,CAEtC;IAED,oBAAoB,IAAI,SAAS,MAAM,EAAE,CAExC;IAED,YACmB,IAAI,SAAY,EAChB,OAAO,GAAE,OAAO,KAAa,EAC5C;IAEJ,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,CAE7C;IAED,OAAO,KAAK,QAAQ,GAEnB;IAEK,UAAU,IAAI,OAAO,CAAC,cAAc,CAAC,CAE1C;IAED;;;;;OAKG;IACG,SAAS,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CA+B3C;IAED,qDAAqD;YACvC,kBAAkB;IA0BhC;;;;OAIG;YACW,oBAAoB;IA0E5B,MAAM,CACV,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,GAAG,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CASrE;IAEK,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE3C;IAEK,gBAAgB,CACpB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,GAAG,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAWrE;IAED;;;OAGG;IACG,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAS/B;IAED;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,GAAG,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CASrE;IAED;;;;OAIG;IACG,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAO/D;CACF;AAED,eAAO,MAAM,aAAa,eAAsB,CAAC"}

package/dist/providers/codex.js

@@ -1,212 +0,0 @@
-import { backupRequiredFile, expandHome, pathExists, readJsonFile, restoreRequiredFile, writeJsonFile } from "../utils/fs.js";
-import { OPENAI_MODELS } from "../catalog/providers.js";
-import { codexAccountAdapter } from "../sources/account-adapters.js";
-import { parseCodexUsage } from "./codex-usage.js";
-import { refreshCodexAuth } from "./codex-refresh.js";
-import { fingerprintLiveAuth, fingerprintSnapshot } from "./auth-fingerprint.js";
-import { codexAccountId, extractCodexIdentity, hasCodexAuth } from "./codex-identity.js";
-import { join } from "node:path";
-import { rm } from "node:fs/promises";
-import { homedir } from "node:os";
-//#region src/providers/codex.ts
-/**
-* OpenAI Codex CLI + Desktop
-*
-* CLI live auth: ~/.codex/auth.json
-* Desktop app may keep a different in-memory ChatGPT account (multi-account),
-* but AnyPick can only back up and restore ~/.codex/auth.json. Therefore
-* detectLive() deliberately reports that file, keeping detection, backup,
-* restore, and snapshot matching on one authority.
-*/
-var CodexProvider = class {
-	home;
-	fetchFn;
-	id = "codex";
-	name = "OpenAI Codex";
-	shortName = "Codex";
-	description = "Manages ~/.codex/auth.json";
-	roleDefaults() {
-		return { default: "gpt-5.6-sol" };
-	}
-	suggestModels() {
-		return { ...OPENAI_MODELS };
-	}
-	roleFriendlyModels() {
-		return [
-			"gpt-5.6-sol",
-			"gpt-5.6-terra",
-			"gpt-5.6-luna",
-			"gpt-5.3-codex"
-		];
-	}
-	staticFallbackModels() {
-		return [
-			"gpt-5.6-sol",
-			"gpt-5.6-terra",
-			"gpt-5.3-codex"
-		];
-	}
-	constructor(home = homedir(), fetchFn = fetch) {
-		this.home = home;
-		this.fetchFn = fetchFn;
-	}
-	sourceAdapter(account) {
-		return codexAccountAdapter(account);
-	}
-	get authPath() {
-		return process.env.CODEX_AUTH_PATH ?? join(this.home, ".codex", "auth.json");
-	}
-	async detectLive() {
-		return this.detectFromAuthFile();
-	}
-	/**
-	* Read the Codex/ChatGPT rate-limit snapshot for auth.json only. When
-	* Codex Desktop reports another account as active, auth.json may be stale;
-	* in that case return nothing rather than risk showing another account's
-	* quota.
-	*/
-	async liveUsage() {
-		const file = await this.detectFromAuthFile();
-		if (!file.present || !file.accountId) return null;
-		const desktop = await this.detectFromDesktopApp();
-		if (desktop?.accountId && desktop.accountId !== file.accountId) return null;
-		try {
-			const accessToken = (await readJsonFile(this.authPath)).tokens?.access_token;
-			if (!accessToken) return null;
-			const response = await this.fetchFn("https://chatgpt.com/backend-api/wham/usage", {
-				headers: {
-					authorization: `Bearer ${accessToken}`,
-					"chatgpt-account-id": file.accountId
-				},
-				signal: AbortSignal.timeout(5e3)
-			});
-			if (!response.ok) return null;
-			return parseCodexUsage(await response.json());
-		} catch {
-			return null;
-		}
-	}
-	/** CLI / file-based session (~/.codex/auth.json). */
-	async detectFromAuthFile() {
-		const path = this.authPath;
-		if (!await pathExists(path)) return { present: false };
-		try {
-			const data = await readJsonFile(path);
-			if (!hasCodexAuth(data)) return { present: false };
-			const identity = extractCodexIdentity(data);
-			const accountId = codexAccountId(data);
-			return {
-				present: true,
-				identity,
-				accountId,
-				details: [typeof data.auth_mode === "string" ? data.auth_mode : void 0, accountId ? `acct:${accountId.slice(0, 8)}` : null].filter(Boolean).join(" ")
-			};
-		} catch {
-			return {
-				present: true,
-				details: "auth.json present (unreadable)"
-			};
-		}
-	}
-	/**
-	* Codex Desktop writes the signed-in ChatGPT account into Sentry scope
-	* (and rate-limit UI state). That is often ahead of ~/.codex/auth.json
-	* after an in-app account switch.
-	*/
-	async detectFromDesktopApp() {
-		const candidates = [join(this.home, "Library", "Application Support", "Codex", "sentry", "scope_v3.json"), join(this.home, ".config", "Codex", "sentry", "scope_v3.json")];
-		for (const path of candidates) {
-			if (!await pathExists(path)) continue;
-			try {
-				const raw = await readJsonFile(path);
-				const user = (raw.scope ?? raw).user;
-				if (!user || typeof user !== "object") continue;
-				const accountId = typeof user.account_id === "string" ? user.account_id.trim() : "";
-				if (!accountId) continue;
-				const method = typeof user.authMethod === "string" ? user.authMethod : void 0;
-				if (method && method !== "chatgpt") continue;
-				return {
-					accountId,
-					identity: typeof user.email === "string" ? user.email : void 0
-				};
-			} catch {}
-		}
-		try {
-			const statePath = join(this.home, ".codex", ".codex-global-state.json");
-			if (await pathExists(statePath)) {
-				const map = (await readJsonFile(statePath))["electron-persisted-atom-state"]?.["rate-limit-reset-home-announcement-dismissal-by-account-id"];
-				if (map && typeof map === "object") {
-					const entries = Object.entries(map);
-					if (entries.length === 1 && entries[0]?.[0]) return { accountId: entries[0][0] };
-					let best = null;
-					for (const [id, v] of entries) {
-						const ts = typeof v?.dismissedAtMs === "number" ? v.dismissedAtMs : 0;
-						if (!best || ts > best.ts) best = {
-							id,
-							ts
-						};
-					}
-					if (best?.id) return { accountId: best.id };
-				}
-			}
-		} catch {}
-		return null;
-	}
-	async backup(destDir) {
-		const dest = join(destDir, "auth.json");
-		await backupRequiredFile(this.authPath, dest, "Codex auth.json");
-		try {
-			return { identity: extractCodexIdentity(await readJsonFile(dest)) };
-		} catch {
-			return {};
-		}
-	}
-	async restore(srcDir) {
-		await restoreRequiredFile(join(srcDir, "auth.json"), expandHome(this.authPath), "auth.json");
-	}
-	async describeSnapshot(srcDir) {
-		const path = join(srcDir, "auth.json");
-		if (!await pathExists(path)) return {};
-		try {
-			return { identity: extractCodexIdentity(await readJsonFile(path)) };
-		} catch {
-			return {};
-		}
-	}
-	/**
-	* Delete local auth.json only — does NOT call OpenAI logout/revoke.
-	* Saved anypick snapshots remain valid for restore.
-	*/
-	async clearLive() {
-		const path = expandHome(this.authPath);
-		for (const p of [path, `${path}.lock`]) try {
-			await rm(p, { force: true });
-		} catch {}
-	}
-	/**
-	* Refresh ChatGPT OAuth tokens inside a snapshot dir (auth.json).
-	*/
-	async refreshAuth(authDir) {
-		const path = join(authDir, "auth.json");
-		if (!await pathExists(path)) throw new Error(`No auth.json in ${authDir}`);
-		const { auth, identity } = await refreshCodexAuth(await readJsonFile(path));
-		await writeJsonFile(path, auth, 384);
-		return { identity };
-	}
-	/**
-	* Compare this snapshot's session material against the live Codex login.
-	* Prefers refresh_token (unique per session) over account_id so two
-	* snapshots of the same ChatGPT account are not both marked live.
-	*/
-	async snapshotMatchesLive(snapshotDir) {
-		const liveFp = await fingerprintLiveAuth("codex", this.home);
-		if (!liveFp) return false;
-		const snap = await fingerprintSnapshot("codex", snapshotDir);
-		return snap != null && snap === liveFp;
-	}
-};
-var codexProvider = new CodexProvider();
-//#endregion
-export { CodexProvider, codexProvider };
-
-//# sourceMappingURL=codex.js.map

package/dist/providers/codex.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"codex.js","names":[],"sources":["../../src/providers/codex.ts"],"sourcesContent":["import { join } from 'node:path';\nimport { homedir } from 'node:os';\nimport { rm } from 'node:fs/promises';\nimport type {\n  Account,\n  AccountMeta,\n  LiveAuthStatus,\n  LiveUsage,\n  Provider,\n  SourceAdapter,\n} from '../types';\nimport { parseCodexUsage } from './codex-usage';\nimport { OPENAI_MODELS } from '../catalog/providers';\nimport { codexAccountAdapter } from '../sources/account-adapters';\nimport {\n  backupRequiredFile,\n  expandHome,\n  pathExists,\n  readJsonFile,\n  restoreRequiredFile,\n  writeJsonFile,\n} from '../utils/fs';\nimport { refreshCodexAuth, type CodexAuthFile } from './codex-refresh';\nimport { fingerprintLiveAuth, fingerprintSnapshot } from './auth-fingerprint';\nimport { hasCodexAuth, codexAccountId, extractCodexIdentity } from './codex-identity';\n\n/**\n * OpenAI Codex CLI + Desktop\n *\n * CLI live auth: ~/.codex/auth.json\n * Desktop app may keep a different in-memory ChatGPT account (multi-account),\n * but AnyPick can only back up and restore ~/.codex/auth.json. Therefore\n * detectLive() deliberately reports that file, keeping detection, backup,\n * restore, and snapshot matching on one authority.\n */\nexport class CodexProvider implements Provider {\n  readonly id = 'codex';\n  readonly name = 'OpenAI Codex';\n  readonly shortName = 'Codex';\n  readonly description = 'Manages ~/.codex/auth.json';\n\n  roleDefaults(): Record<string, string> {\n    return { default: 'gpt-5.6-sol' };\n  }\n\n  suggestModels(): Record<string, string> {\n    return { ...OPENAI_MODELS };\n  }\n\n  roleFriendlyModels(): readonly string[] {\n    return ['gpt-5.6-sol', 'gpt-5.6-terra', 'gpt-5.6-luna', 'gpt-5.3-codex'];\n  }\n\n  staticFallbackModels(): readonly string[] {\n    return ['gpt-5.6-sol', 'gpt-5.6-terra', 'gpt-5.3-codex'];\n  }\n\n  constructor(\n    private readonly home = homedir(),\n    private readonly fetchFn: typeof fetch = fetch,\n  ) {}\n\n  sourceAdapter(account: Account): SourceAdapter {\n    return codexAccountAdapter(account);\n  }\n\n  private get authPath(): string {\n    return process.env.CODEX_AUTH_PATH ?? join(this.home, '.codex', 'auth.json');\n  }\n\n  async detectLive(): Promise<LiveAuthStatus> {\n    return this.detectFromAuthFile();\n  }\n\n  /**\n   * Read the Codex/ChatGPT rate-limit snapshot for auth.json only. When\n   * Codex Desktop reports another account as active, auth.json may be stale;\n   * in that case return nothing rather than risk showing another account's\n   * quota.\n   */\n  async liveUsage(): Promise<LiveUsage | null> {\n    const file = await this.detectFromAuthFile();\n    if (!file.present || !file.accountId) {\n      return null;\n    }\n    const desktop = await this.detectFromDesktopApp();\n    if (desktop?.accountId && desktop.accountId !== file.accountId) {\n      return null;\n    }\n\n    try {\n      const auth = await readJsonFile<CodexAuthFile>(this.authPath);\n      const accessToken = auth.tokens?.access_token;\n      if (!accessToken) {\n        return null;\n      }\n      const response = await this.fetchFn('https://chatgpt.com/backend-api/wham/usage', {\n        headers: {\n          authorization: `Bearer ${accessToken}`,\n          'chatgpt-account-id': file.accountId,\n        },\n        signal: AbortSignal.timeout(5_000),\n      });\n      if (!response.ok) {\n        return null;\n      }\n      return parseCodexUsage(await response.json());\n    } catch {\n      // Usage is optional; account detection/switching must remain available.\n      return null;\n    }\n  }\n\n  /** CLI / file-based session (~/.codex/auth.json). */\n  private async detectFromAuthFile(): Promise<LiveAuthStatus & { accountId?: string }> {\n    const path = this.authPath;\n    if (!(await pathExists(path))) {\n      return { present: false };\n    }\n    try {\n      const data = await readJsonFile<Record<string, unknown>>(path);\n      if (!hasCodexAuth(data)) {\n        return { present: false };\n      }\n      const identity = extractCodexIdentity(data);\n      const accountId = codexAccountId(data);\n      const mode = typeof data.auth_mode === 'string' ? data.auth_mode : undefined;\n      return {\n        present: true,\n        identity,\n        accountId,\n        details: [mode, accountId ? `acct:${accountId.slice(0, 8)}` : null]\n          .filter(Boolean)\n          .join(' '),\n      };\n    } catch {\n      return { present: true, details: 'auth.json present (unreadable)' };\n    }\n  }\n\n  /**\n   * Codex Desktop writes the signed-in ChatGPT account into Sentry scope\n   * (and rate-limit UI state). That is often ahead of ~/.codex/auth.json\n   * after an in-app account switch.\n   */\n  private async detectFromDesktopApp(): Promise<{\n    accountId: string;\n    identity?: string;\n  } | null> {\n    const candidates = [\n      join(this.home, 'Library', 'Application Support', 'Codex', 'sentry', 'scope_v3.json'),\n      // Linux / other\n      join(this.home, '.config', 'Codex', 'sentry', 'scope_v3.json'),\n    ];\n\n    for (const path of candidates) {\n      if (!(await pathExists(path))) {\n        continue;\n      }\n      try {\n        const raw = await readJsonFile<Record<string, unknown>>(path);\n        const scope = (raw.scope ?? raw) as Record<string, unknown>;\n        const user = scope.user as Record<string, unknown> | undefined;\n        if (!user || typeof user !== 'object') {\n          continue;\n        }\n        const accountId = typeof user.account_id === 'string' ? user.account_id.trim() : '';\n        if (!accountId) {\n          continue;\n        }\n        // Optional: only trust ChatGPT auth method\n        const method = typeof user.authMethod === 'string' ? user.authMethod : undefined;\n        if (method && method !== 'chatgpt') {\n          continue;\n        }\n        return {\n          accountId,\n          identity: typeof user.email === 'string' ? user.email : undefined,\n        };\n      } catch {\n        // try next path\n      }\n    }\n\n    // Fallback: rate-limit dismissal map keys are ChatGPT account ids the app knows.\n    // Prefer the most recently dismissed / only key when sentry is missing.\n    try {\n      const statePath = join(this.home, '.codex', '.codex-global-state.json');\n      if (await pathExists(statePath)) {\n        const state = await readJsonFile<Record<string, unknown>>(statePath);\n        const atom = state['electron-persisted-atom-state'] as Record<string, unknown> | undefined;\n        const map = atom?.['rate-limit-reset-home-announcement-dismissal-by-account-id'] as\n          | Record<string, { dismissedAtMs?: number }>\n          | undefined;\n        if (map && typeof map === 'object') {\n          const entries = Object.entries(map);\n          if (entries.length === 1 && entries[0]?.[0]) {\n            return { accountId: entries[0][0] };\n          }\n          // most recently dismissed\n          let best: { id: string; ts: number } | null = null;\n          for (const [id, v] of entries) {\n            const ts = typeof v?.dismissedAtMs === 'number' ? v.dismissedAtMs : 0;\n            if (!best || ts > best.ts) {\n              best = { id, ts };\n            }\n          }\n          if (best?.id) {\n            return { accountId: best.id };\n          }\n        }\n      }\n    } catch {\n      // ignore\n    }\n\n    return null;\n  }\n\n  async backup(\n    destDir: string,\n  ): Promise<Partial<Pick<AccountMeta, 'identity' | 'label' | 'notes'>>> {\n    const dest = join(destDir, 'auth.json');\n    await backupRequiredFile(this.authPath, dest, 'Codex auth.json');\n    try {\n      const data = await readJsonFile<Record<string, unknown>>(dest);\n      return { identity: extractCodexIdentity(data) };\n    } catch {\n      return {};\n    }\n  }\n\n  async restore(srcDir: string): Promise<void> {\n    await restoreRequiredFile(join(srcDir, 'auth.json'), expandHome(this.authPath), 'auth.json');\n  }\n\n  async describeSnapshot(\n    srcDir: string,\n  ): Promise<Partial<Pick<AccountMeta, 'identity' | 'label' | 'notes'>>> {\n    const path = join(srcDir, 'auth.json');\n    if (!(await pathExists(path))) {\n      return {};\n    }\n    try {\n      const data = await readJsonFile<Record<string, unknown>>(path);\n      return { identity: extractCodexIdentity(data) };\n    } catch {\n      return {};\n    }\n  }\n\n  /**\n   * Delete local auth.json only — does NOT call OpenAI logout/revoke.\n   * Saved anypick snapshots remain valid for restore.\n   */\n  async clearLive(): Promise<void> {\n    const path = expandHome(this.authPath);\n    for (const p of [path, `${path}.lock`]) {\n      try {\n        await rm(p, { force: true });\n      } catch {\n        // ignore\n      }\n    }\n  }\n\n  /**\n   * Refresh ChatGPT OAuth tokens inside a snapshot dir (auth.json).\n   */\n  async refreshAuth(\n    authDir: string,\n  ): Promise<Partial<Pick<AccountMeta, 'identity' | 'label' | 'notes'>>> {\n    const path = join(authDir, 'auth.json');\n    if (!(await pathExists(path))) {\n      throw new Error(`No auth.json in ${authDir}`);\n    }\n    const current = await readJsonFile<CodexAuthFile>(path);\n    const { auth, identity } = await refreshCodexAuth(current);\n    await writeJsonFile(path, auth, 0o600);\n    return { identity };\n  }\n\n  /**\n   * Compare this snapshot's session material against the live Codex login.\n   * Prefers refresh_token (unique per session) over account_id so two\n   * snapshots of the same ChatGPT account are not both marked live.\n   */\n  async snapshotMatchesLive(snapshotDir: string): Promise<boolean> {\n    const liveFp = await fingerprintLiveAuth('codex', this.home);\n    if (!liveFp) {\n      return false;\n    }\n    const snap = await fingerprintSnapshot('codex', snapshotDir);\n    return snap != null && snap === liveFp;\n  }\n}\n\nexport const codexProvider = new CodexProvider();\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAmCA,IAAa,gBAAb,MAA+C;CAuB1B;CACA;CAvBnB,KAAc;CACd,OAAgB;CAChB,YAAqB;CACrB,cAAuB;CAEvB,eAAuC;EACrC,OAAO,EAAE,SAAS,cAAc;CAClC;CAEA,gBAAwC;EACtC,OAAO,EAAE,GAAG,cAAc;CAC5B;CAEA,qBAAwC;EACtC,OAAO;GAAC;GAAe;GAAiB;GAAgB;EAAe;CACzE;CAEA,uBAA0C;EACxC,OAAO;GAAC;GAAe;GAAiB;EAAe;CACzD;CAEA,YACE,OAAwB,QAAQ,GAChC,UAAyC,OACzC;EAFiB,KAAA,OAAA;EACA,KAAA,UAAA;CAChB;CAEH,cAAc,SAAiC;EAC7C,OAAO,oBAAoB,OAAO;CACpC;CAEA,IAAY,WAAmB;EAC7B,OAAO,QAAQ,IAAI,mBAAmB,KAAK,KAAK,MAAM,UAAU,WAAW;CAC7E;CAEA,MAAM,aAAsC;EAC1C,OAAO,KAAK,mBAAmB;CACjC;;;;;;;CAQA,MAAM,YAAuC;EAC3C,MAAM,OAAO,MAAM,KAAK,mBAAmB;EAC3C,IAAI,CAAC,KAAK,WAAW,CAAC,KAAK,WACzB,OAAO;EAET,MAAM,UAAU,MAAM,KAAK,qBAAqB;EAChD,IAAI,SAAS,aAAa,QAAQ,cAAc,KAAK,WACnD,OAAO;EAGT,IAAI;GAEF,MAAM,eAAc,MADD,aAA4B,KAAK,QAAQ,EAAA,CACnC,QAAQ;GACjC,IAAI,CAAC,aACH,OAAO;GAET,MAAM,WAAW,MAAM,KAAK,QAAQ,8CAA8C;IAChF,SAAS;KACP,eAAe,UAAU;KACzB,sBAAsB,KAAK;IAC7B;IACA,QAAQ,YAAY,QAAQ,GAAK;GACnC,CAAC;GACD,IAAI,CAAC,SAAS,IACZ,OAAO;GAET,OAAO,gBAAgB,MAAM,SAAS,KAAK,CAAC;EAC9C,QAAQ;GAEN,OAAO;EACT;CACF;;CAGA,MAAc,qBAAuE;EACnF,MAAM,OAAO,KAAK;EAClB,IAAI,CAAE,MAAM,WAAW,IAAI,GACzB,OAAO,EAAE,SAAS,MAAM;EAE1B,IAAI;GACF,MAAM,OAAO,MAAM,aAAsC,IAAI;GAC7D,IAAI,CAAC,aAAa,IAAI,GACpB,OAAO,EAAE,SAAS,MAAM;GAE1B,MAAM,WAAW,qBAAqB,IAAI;GAC1C,MAAM,YAAY,eAAe,IAAI;GAErC,OAAO;IACL,SAAS;IACT;IACA;IACA,SAAS,CALE,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY,KAAA,GAKjD,YAAY,QAAQ,UAAU,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,CAChE,OAAO,OAAO,CAAC,CACf,KAAK,GAAG;GACb;EACF,QAAQ;GACN,OAAO;IAAE,SAAS;IAAM,SAAS;GAAiC;EACpE;CACF;;;;;;CAOA,MAAc,uBAGJ;EACR,MAAM,aAAa,CACjB,KAAK,KAAK,MAAM,WAAW,uBAAuB,SAAS,UAAU,eAAe,GAEpF,KAAK,KAAK,MAAM,WAAW,SAAS,UAAU,eAAe,CAC/D;EAEA,KAAK,MAAM,QAAQ,YAAY;GAC7B,IAAI,CAAE,MAAM,WAAW,IAAI,GACzB;GAEF,IAAI;IACF,MAAM,MAAM,MAAM,aAAsC,IAAI;IAE5D,MAAM,QADS,IAAI,SAAS,IAAA,CACT;IACnB,IAAI,CAAC,QAAQ,OAAO,SAAS,UAC3B;IAEF,MAAM,YAAY,OAAO,KAAK,eAAe,WAAW,KAAK,WAAW,KAAK,IAAI;IACjF,IAAI,CAAC,WACH;IAGF,MAAM,SAAS,OAAO,KAAK,eAAe,WAAW,KAAK,aAAa,KAAA;IACvE,IAAI,UAAU,WAAW,WACvB;IAEF,OAAO;KACL;KACA,UAAU,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ,KAAA;IAC1D;GACF,QAAQ,CAER;EACF;EAIA,IAAI;GACF,MAAM,YAAY,KAAK,KAAK,MAAM,UAAU,0BAA0B;GACtE,IAAI,MAAM,WAAW,SAAS,GAAG;IAG/B,MAAM,OADO,MADO,aAAsC,SAAS,EAAA,CAChD,gCACP,GAAO;IAGnB,IAAI,OAAO,OAAO,QAAQ,UAAU;KAClC,MAAM,UAAU,OAAO,QAAQ,GAAG;KAClC,IAAI,QAAQ,WAAW,KAAK,QAAQ,EAAE,GAAG,IACvC,OAAO,EAAE,WAAW,QAAQ,EAAE,CAAC,GAAG;KAGpC,IAAI,OAA0C;KAC9C,KAAK,MAAM,CAAC,IAAI,MAAM,SAAS;MAC7B,MAAM,KAAK,OAAO,GAAG,kBAAkB,WAAW,EAAE,gBAAgB;MACpE,IAAI,CAAC,QAAQ,KAAK,KAAK,IACrB,OAAO;OAAE;OAAI;MAAG;KAEpB;KACA,IAAI,MAAM,IACR,OAAO,EAAE,WAAW,KAAK,GAAG;IAEhC;GACF;EACF,QAAQ,CAER;EAEA,OAAO;CACT;CAEA,MAAM,OACJ,SACqE;EACrE,MAAM,OAAO,KAAK,SAAS,WAAW;EACtC,MAAM,mBAAmB,KAAK,UAAU,MAAM,iBAAiB;EAC/D,IAAI;GAEF,OAAO,EAAE,UAAU,qBAAqB,MADrB,aAAsC,IAAI,CACjB,EAAE;EAChD,QAAQ;GACN,OAAO,CAAC;EACV;CACF;CAEA,MAAM,QAAQ,QAA+B;EAC3C,MAAM,oBAAoB,KAAK,QAAQ,WAAW,GAAG,WAAW,KAAK,QAAQ,GAAG,WAAW;CAC7F;CAEA,MAAM,iBACJ,QACqE;EACrE,MAAM,OAAO,KAAK,QAAQ,WAAW;EACrC,IAAI,CAAE,MAAM,WAAW,IAAI,GACzB,OAAO,CAAC;EAEV,IAAI;GAEF,OAAO,EAAE,UAAU,qBAAqB,MADrB,aAAsC,IAAI,CACjB,EAAE;EAChD,QAAQ;GACN,OAAO,CAAC;EACV;CACF;;;;;CAMA,MAAM,YAA2B;EAC/B,MAAM,OAAO,WAAW,KAAK,QAAQ;EACrC,KAAK,MAAM,KAAK,CAAC,MAAM,GAAG,KAAK,MAAM,GACnC,IAAI;GACF,MAAM,GAAG,GAAG,EAAE,OAAO,KAAK,CAAC;EAC7B,QAAQ,CAER;CAEJ;;;;CAKA,MAAM,YACJ,SACqE;EACrE,MAAM,OAAO,KAAK,SAAS,WAAW;EACtC,IAAI,CAAE,MAAM,WAAW,IAAI,GACzB,MAAM,IAAI,MAAM,mBAAmB,SAAS;EAG9C,MAAM,EAAE,MAAM,aAAa,MAAM,iBAAiB,MAD5B,aAA4B,IAAI,CACG;EACzD,MAAM,cAAc,MAAM,MAAM,GAAK;EACrC,OAAO,EAAE,SAAS;CACpB;;;;;;CAOA,MAAM,oBAAoB,aAAuC;EAC/D,MAAM,SAAS,MAAM,oBAAoB,SAAS,KAAK,IAAI;EAC3D,IAAI,CAAC,QACH,OAAO;EAET,MAAM,OAAO,MAAM,oBAAoB,SAAS,WAAW;EAC3D,OAAO,QAAQ,QAAQ,SAAS;CAClC;AACF;AAEA,IAAa,gBAAgB,IAAI,cAAc"}

package/dist/providers/gemini-antigravity-oauth.d.ts

@@ -1,83 +0,0 @@
-/**
- * Antigravity OAuth credential loading + parsing.
- *
- * Antigravity logins are not stored under ~/.gemini; the credential lives in
- * the OS credential store (via the Go library github.com/zalando/go-keyring,
- * service="gemini", account/username="antigravity"), or in a portable file
- * passed explicitly. This module is imported by both the proxy child process
- * (to serve requests) and the main process (to snapshot the credential when
- * adding an account). It has no project dependencies so it stays a leaf.
- *
- * Storage format differs by OS (confirmed from go-keyring source):
- *   macOS   — Keychain generic password, value = "go-keyring-base64:" + base64(JSON)
- *             (base64 only on darwin, to survive the `security` CLI).
- *   Linux   — Secret Service (D-Bus), attributes {service, username}, raw JSON value.
- *   Windows — Credential Manager, target "gemini:antigravity", raw JSON blob.
- * The JSON payload is {token:{access_token,refresh_token,token_type,expiry}}.
- */
-export interface GeminiOAuthCredentials {
-    access_token?: string;
-    refresh_token?: string;
-    expiry_date?: number;
-    token_type?: string;
-}
-export interface AntigravityKeyringPayload {
-    token?: {
-        access_token?: string;
-        refresh_token?: string;
-        token_type?: string;
-        expiry?: string;
-    };
-}
-type FetchLike = (input: string, init?: RequestInit) => Promise<Response>;
-/** True on platforms where we know how to read the credential store. */
-export declare function antigravityKeychainSupported(): boolean;
-export declare function loadAntigravityOAuthCredentials(credentialFile?: string): Promise<GeminiOAuthCredentials | null>;
-/**
- * The credential store's own payload, undiminished.
- *
- * `loadAntigravityOAuthCredentials` reduces the token to what the proxy needs;
- * a snapshot that has to be written back must keep the whole thing, or the
- * account restored later is not the account that was saved.
- */
-export declare function readAntigravityOAuthPayload(credentialFile?: string): Promise<AntigravityKeyringPayload | null>;
-/**
- * Materializes an access token before writing back to the OS credential store.
- * Antigravity's desktop client does not refresh a token-less or expired keychain
- * entry during setup, so we do it here. An access token without an expiry must
- * also be refreshed: Antigravity's unified state treats a missing expiry as
- * epoch zero and refuses to use it.
- */
-export declare function hydrateAntigravityOAuthPayload(payload: AntigravityKeyringPayload, fetchImpl?: FetchLike): Promise<AntigravityKeyringPayload>;
-/**
- * Put a snapshotted Antigravity credential back into the OS credential store,
- * so Antigravity itself follows an account switch rather than only AnyPick's
- * proxy — the whole point of switching.
- *
- * Writes with an update flag wherever the platform offers one: updating in
- * place keeps the existing item's access control, so Antigravity reads it back
- * without a new authorization prompt. Creating the item from nothing cannot
- * inherit an ACL that was never granted, and the first read will prompt.
- */
-export declare function saveAntigravityOAuthCredential(payload: AntigravityKeyringPayload): Promise<void>;
-/**
- * Is there an Antigravity credential in the OS credential store?
- *
- * This asks only whether the entry exists and never reads its value, which is
- * what keeps it cheap enough for `detectLive()`: on macOS the Keychain access
- * prompt is raised by reading the secret (`security ... -w`), not by listing an
- * item's attributes. Use `loadAntigravityOAuthCredentials` when you need the
- * credential itself and the prompt is acceptable.
- */
-export declare function antigravityCredentialExists(): Promise<boolean>;
-/**
- * Remove the Antigravity credential from the OS credential store so Antigravity
- * prompts for a fresh sign-in. Local only — the OAuth grant stays valid upstream.
- *
- * Returns false when there was nothing to delete or the platform is unsupported;
- * a missing entry is the desired end state either way.
- */
-export declare function deleteAntigravityOAuthCredential(): Promise<boolean>;
-export declare function parseAntigravityOAuthCredential(raw: string): GeminiOAuthCredentials | null;
-export {};
-//# sourceMappingURL=gemini-antigravity-oauth.d.ts.map

package/dist/providers/gemini-antigravity-oauth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gemini-antigravity-oauth.d.ts","sourceRoot":"","sources":["../../src/providers/gemini-antigravity-oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAqBH,MAAM,WAAW,sBAAsB;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,CAAC,EAAE;QACN,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,KAAK,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAE1E,wEAAwE;AACxE,wBAAgB,4BAA4B,IAAI,OAAO,CAItD;AAiFD,wBAAsB,+BAA+B,CACnD,cAAc,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAUxC;AAED;;;;;;GAMG;AACH,wBAAsB,2BAA2B,CAC/C,cAAc,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC,CA8B3C;AAED;;;;;;GAMG;AACH,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,yBAAyB,EAClC,SAAS,GAAE,SAAiB,GAC3B,OAAO,CAAC,yBAAyB,CAAC,CAiDpC;AAED;;;;;;;;;GASG;AACH,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,IAAI,CAAC,CA4Df;AAgBD;;;;;;;;GAQG;AACH,wBAAsB,2BAA2B,IAAI,OAAO,CAAC,OAAO,CAAC,CAmCpE;AAED;;;;;;GAMG;AACH,wBAAsB,gCAAgC,IAAI,OAAO,CAAC,OAAO,CAAC,CAuCzE;AA8BD,wBAAgB,+BAA+B,CAAC,GAAG,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI,CAY1F"}