indusagi 0.13.9 → 0.13.10

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## Unreleased
+
+### Fixed
+- **OpenAI browser redirect**: retries the registered `localhost:1457` callback when port `1455` is unavailable, and uses the selected redirect URI for both authorization and token exchange.
+- **Framework build dependency**: declares the `proxy-agent` package already used by the Bedrock adapter.
+
 ## [0.13.3]
 
 ### Changed

package/dist/ai.js

@@ -19284,6 +19284,7 @@ var CLIENT_ID2 = resolveOpenAICodexClientId();
 var AUTHORIZE_URL2 = "https://auth.openai.com/oauth/authorize";
 var TOKEN_URL2 = "https://auth.openai.com/oauth/token";
 var REDIRECT_URI2 = "http://localhost:1455/auth/callback";
+var FALLBACK_REDIRECT_URI = "http://localhost:1457/auth/callback";
 var SCOPE = "openid profile email offline_access api.connectors.read api.connectors.invoke";
 var JWT_CLAIM_PATH2 = "https://api.openai.com/auth";
 function createState() {
@@ -19468,27 +19469,47 @@ function startLocalOAuthServer(state) {
     } catch {
     }
   };
-  return new Promise((resolveServer) => {
-    server.listen(1455, "127.0.0.1", () => {
-      resolveServer({
-        close: closeQuietly,
-        cancelWait: () => gate.resolve(null),
-        waitForCode: () => gate.promise
-      });
-    });
-    server.on("error", (err) => {
-      console.error(
-        `[openai-codex] unable to bind http://127.0.0.1:1455 (${err.code}); falling back to manual code entry.`
-      );
-      gate.resolve(null);
-      resolveServer({
-        close: closeQuietly,
-        cancelWait: () => {
-        },
-        waitForCode: async () => null
-      });
-    });
+  const listen = (port) => new Promise((resolve) => {
+    const cleanup = () => {
+      server.off("error", onError);
+      server.off("listening", onListening);
+    };
+    const onError = () => {
+      cleanup();
+      resolve(false);
+    };
+    const onListening = () => {
+      cleanup();
+      resolve(true);
+    };
+    server.once("error", onError);
+    server.once("listening", onListening);
+    server.listen(port, "127.0.0.1");
   });
+  return (async () => {
+    for (const [port, redirectUri] of [
+      [1455, REDIRECT_URI2],
+      [1457, FALLBACK_REDIRECT_URI]
+    ]) {
+      if (await listen(port)) {
+        return {
+          close: closeQuietly,
+          cancelWait: () => gate.resolve(null),
+          redirectUri,
+          waitForCode: () => gate.promise
+        };
+      }
+    }
+    console.error("[openai-codex] callback ports 1455 and 1457 are unavailable; using manual code entry.");
+    gate.resolve(null);
+    return {
+      close: closeQuietly,
+      cancelWait: () => {
+      },
+      redirectUri: REDIRECT_URI2,
+      waitForCode: async () => null
+    };
+  })();
 }
 function getAccountId(accessToken) {
   const payload = decodeJwt(accessToken);
@@ -19499,7 +19520,12 @@ function getAccountId(accessToken) {
 async function loginOpenAICodex(options) {
   const { verifier, state, url } = await createAuthorizationFlow(options.originator);
   const server = await startLocalOAuthServer(state);
-  options.onAuth({ url, instructions: "Opening your browser \u2014 finish signing in there to continue." });
+  const authorizationUrl = new URL(url);
+  authorizationUrl.searchParams.set("redirect_uri", server.redirectUri);
+  options.onAuth({
+    url: authorizationUrl.toString(),
+    instructions: "Opening your browser \u2014 finish signing in there to continue."
+  });
   const codeFromPastedInput = (pasted) => {
     const parsed = parseAuthorizationInput(pasted);
     if (parsed.state && parsed.state !== state) {
@@ -19552,7 +19578,7 @@ async function loginOpenAICodex(options) {
     if (!code) {
       throw new Error("No authorization code was provided to complete sign-in.");
     }
-    const tokenResult = await exchangeAuthorizationCode(code, verifier);
+    const tokenResult = await exchangeAuthorizationCode(code, verifier, server.redirectUri);
     if (tokenResult.type !== "success") {
       throw new Error("Could not trade the authorization code for an access token");
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "indusagi",
-  "version": "0.13.9",
+  "version": "0.13.10",
   "description": "Indusagi — a terminal-first AI coding agent framework. Clean-room implementation.",
   "author": "Varun Israni",
   "license": "AGPL-3.0",
@@ -157,6 +157,7 @@
     "marked": "^18.0.4",
     "openai": "^6.41.0",
     "partial-json": "^0.1.7",
+    "proxy-agent": "^8.0.2",
     "react": "^18.3.1",
     "strip-ansi": "^7.2.0",
     "ulid": "^3.0.2",