xsai-codex 0.0.1

package/LICENSE.md

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Moeru AI
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,41 @@
+# xsAI Codex
+
+OpenAI Codex provider for xsAI.
+
+Requires Baseline 2025 [`Uint8Array.fromBase64`](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Uint8Array/fromBase64) support.
+
+## Usage
+
+```ts
+import { responses } from '@xsai-ext/responses'
+import { authorizeCodexHeadless, createCodex } from 'xsai-codex'
+
+const auth = await authorizeCodexHeadless({
+  onUserCode: ({ instructions }) => {
+    console.log(instructions)
+  },
+})
+
+const codex = await createCodex({ auth })
+
+const result = responses({
+  ...(await codex('gpt-5.5')),
+  input: 'Write a small TypeScript function.',
+  instructions: 'You\'re a helpful assistant.',
+  // maxOutputTokens: 0 // Codex doesn't support `maxOutputTokens`.
+  store: false, // `store` must be `false`.
+})
+```
+
+### Example
+
+```bash
+git clone https://github.com/moeru-ai/xsai-codex
+cd xsai-codex
+pnpm i
+pnpm dev
+```
+
+## License
+
+[MIT](LICENSE.md)

package/dist/index.d.ts

@@ -0,0 +1,33 @@
+import { ResponsesOptions } from '@xsai-ext/responses';
+
+type CodexModels = 'gpt-5.2' | 'gpt-5.3-codex' | 'gpt-5.4' | 'gpt-5.4-mini' | 'gpt-5.5';
+
+interface CodexAuthTokens {
+    access: string;
+    accountId?: string;
+    expires: number;
+    refresh: string;
+}
+interface CodexHeadlessAuthorizeOptions {
+    onUserCode?: (info: CodexUserCodeInfo) => Promise<void> | void;
+}
+interface CodexUserCodeInfo {
+    instructions: string;
+    interval: number;
+    url: string;
+    userCode: string;
+}
+declare const authorizeCodexHeadless: (options?: CodexHeadlessAuthorizeOptions) => Promise<CodexAuthTokens>;
+
+interface CreateCodexOptions {
+    auth: (() => CodexAuthTokens | Promise<CodexAuthTokens>) | CodexAuthTokens;
+    onAuthUpdate?: (auth: CodexAuthTokens) => Promise<void> | void;
+    originator?: string;
+    sessionId?: string;
+    userAgent?: string;
+}
+type CreateCodexResult = (model: CodexModels | (string & {})) => Promise<Pick<ResponsesOptions, 'apiKey' | 'baseURL' | 'headers' | 'model'>>;
+declare const createCodex: (options: CreateCodexOptions) => Promise<CreateCodexResult>;
+
+export { authorizeCodexHeadless, createCodex };
+export type { CodexAuthTokens, CodexHeadlessAuthorizeOptions, CodexModels, CodexUserCodeInfo, CreateCodexOptions, CreateCodexResult };

package/dist/index.js

@@ -0,0 +1,168 @@
+var version = "0.0.1";
+
+const CODEX_CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
+const CODEX_ISSUER = "https://auth.openai.com";
+const CODEX_TOKEN_URL = `${CODEX_ISSUER}/oauth/token`;
+const CODEX_DEVICE_AUTH_URL = `${CODEX_ISSUER}/api/accounts/deviceauth/usercode`;
+const CODEX_DEVICE_TOKEN_URL = `${CODEX_ISSUER}/api/accounts/deviceauth/token`;
+const CODEX_DEVICE_URL = `${CODEX_ISSUER}/codex/device`;
+const CODEX_DEVICE_REDIRECT_URL = `${CODEX_ISSUER}/deviceauth/callback`;
+const CODEX_OAUTH_POLLING_SAFETY_MARGIN_MS = 3e3;
+const CODEX_TOKEN_REFRESH_MARGIN_MS = 6e4;
+const CODEX_DUMMY_API_KEY = "codex-oauth";
+const CODEX_DEFAULT_ORIGINATOR = "xsai-codex";
+const CODEX_DEFAULT_USER_AGENT = `xsai-codex/${version}`;
+const CODEX_BASE_URL = "https://chatgpt.com/backend-api/codex/";
+
+const sleep = async (ms) => (
+  // eslint-disable-next-line @masknet/prefer-timer-id
+  new Promise((resolve) => setTimeout(resolve, ms))
+);
+const formatResponseError = async (message, response) => {
+  const body = await response.text().catch(() => "");
+  const details = body.trim().slice(0, 500);
+  return details.length > 0 ? `${message}: ${response.status} ${details}` : `${message}: ${response.status}`;
+};
+const jsonFetch = async (url, init, errorMessage) => {
+  const response = await fetch(url, init);
+  if (!response.ok) {
+    throw new Error(await formatResponseError(errorMessage, response));
+  }
+  return response.json();
+};
+const parseJwtClaims = (token) => {
+  const parts = token.split(".");
+  if (parts.length !== 3) {
+    return void 0;
+  }
+  try {
+    const payload = parts[1];
+    const bytes = Uint8Array.fromBase64(payload, { alphabet: "base64url" });
+    return JSON.parse(new TextDecoder().decode(bytes));
+  } catch {
+    return void 0;
+  }
+};
+const extractAccountIdFromClaims = (claims) => claims.chatgpt_account_id ?? claims["https://api.openai.com/auth"]?.chatgpt_account_id ?? claims.organizations?.[0]?.id;
+const extractAccountId = (tokens) => {
+  if (tokens.id_token !== void 0 && tokens.id_token.length > 0) {
+    const claims2 = parseJwtClaims(tokens.id_token);
+    const accountId = claims2 === void 0 ? void 0 : extractAccountIdFromClaims(claims2);
+    if (accountId !== void 0 && accountId.length > 0) {
+      return accountId;
+    }
+  }
+  const claims = parseJwtClaims(tokens.access_token);
+  return claims === void 0 ? void 0 : extractAccountIdFromClaims(claims);
+};
+const toCodexAuthTokens = (tokens, accountId = extractAccountId(tokens)) => ({
+  access: tokens.access_token,
+  expires: Date.now() + (tokens.expires_in ?? 3600) * 1e3,
+  refresh: tokens.refresh_token,
+  ...accountId !== void 0 && accountId.length > 0 && { accountId }
+});
+const refreshCodexAccessToken = async (refreshToken) => {
+  const tokens = await jsonFetch(
+    CODEX_TOKEN_URL,
+    {
+      body: new URLSearchParams({
+        client_id: CODEX_CLIENT_ID,
+        grant_type: "refresh_token",
+        refresh_token: refreshToken
+      }).toString(),
+      headers: { "Content-Type": "application/x-www-form-urlencoded" },
+      method: "POST"
+    },
+    "Codex token refresh failed"
+  );
+  return toCodexAuthTokens(tokens);
+};
+const authorizeCodexHeadless = async (options = {}) => {
+  const deviceData = await jsonFetch(
+    CODEX_DEVICE_AUTH_URL,
+    {
+      body: JSON.stringify({ client_id: CODEX_CLIENT_ID }),
+      headers: {
+        "Content-Type": "application/json",
+        "User-Agent": CODEX_DEFAULT_USER_AGENT
+      },
+      method: "POST"
+    },
+    "Failed to initiate Codex device authorization"
+  );
+  const interval = Math.max(Number.parseInt(String(deviceData.interval ?? 5)), 1) * 1e3;
+  await options.onUserCode?.({
+    instructions: `Open ${CODEX_DEVICE_URL} and enter code: ${deviceData.user_code}`,
+    interval,
+    url: CODEX_DEVICE_URL,
+    userCode: deviceData.user_code
+  });
+  while (true) {
+    const response = await fetch(CODEX_DEVICE_TOKEN_URL, {
+      body: JSON.stringify({
+        device_auth_id: deviceData.device_auth_id,
+        user_code: deviceData.user_code
+      }),
+      headers: {
+        "Content-Type": "application/json",
+        "User-Agent": CODEX_DEFAULT_USER_AGENT
+      },
+      method: "POST"
+    });
+    if (response.ok) {
+      const deviceToken = await response.json();
+      const tokens = await jsonFetch(
+        CODEX_TOKEN_URL,
+        {
+          body: new URLSearchParams({
+            client_id: CODEX_CLIENT_ID,
+            code: deviceToken.authorization_code,
+            code_verifier: deviceToken.code_verifier,
+            grant_type: "authorization_code",
+            redirect_uri: CODEX_DEVICE_REDIRECT_URL
+          }).toString(),
+          headers: { "Content-Type": "application/x-www-form-urlencoded" },
+          method: "POST"
+        },
+        "Codex token exchange failed"
+      );
+      return toCodexAuthTokens(tokens);
+    }
+    if (response.status !== 403 && response.status !== 404) {
+      throw new Error(await formatResponseError("Codex device authorization failed", response));
+    }
+    await sleep(interval + CODEX_OAUTH_POLLING_SAFETY_MARGIN_MS);
+  }
+};
+
+const createCodex = async (options) => {
+  let currentAuth = typeof options.auth === "function" ? await options.auth() : options.auth;
+  const resolveAuth = async () => {
+    if (currentAuth.expires - CODEX_TOKEN_REFRESH_MARGIN_MS <= Date.now()) {
+      const refreshed = await refreshCodexAccessToken(currentAuth.refresh);
+      currentAuth = {
+        ...refreshed,
+        accountId: refreshed.accountId ?? currentAuth.accountId
+      };
+      await options.onAuthUpdate?.(currentAuth);
+    }
+    return currentAuth;
+  };
+  return async (model) => {
+    const auth = await resolveAuth();
+    return {
+      apiKey: CODEX_DUMMY_API_KEY,
+      baseURL: CODEX_BASE_URL,
+      headers: {
+        "Authorization": `Bearer ${auth.access}`,
+        ...auth.accountId !== void 0 && auth.accountId.length > 0 && { "ChatGPT-Account-Id": auth.accountId },
+        "originator": options.originator ?? CODEX_DEFAULT_ORIGINATOR,
+        "User-Agent": options.userAgent ?? CODEX_DEFAULT_USER_AGENT,
+        ...options.sessionId !== void 0 && options.sessionId.length > 0 && { session_id: options.sessionId }
+      },
+      model
+    };
+  };
+};
+
+export { authorizeCodexHeadless, createCodex };

package/package.json

@@ -0,0 +1,50 @@
+{
+  "name": "xsai-codex",
+  "type": "module",
+  "version": "0.0.1",
+  "description": "OpenAI Codex provider for xsAI.",
+  "author": "Moeru AI",
+  "license": "MIT",
+  "homepage": "https://github.com/moeru-ai/xsai-codex",
+  "repository": "github:moeru-ai/xsai-codex",
+  "bugs": "https://github.com/moeru-ai/xsai-codex/issues",
+  "keywords": [
+    "xsai",
+    "openai",
+    "codex"
+  ],
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist"
+  ],
+  "peerDependencies": {
+    "@xsai-ext/responses": "0.5.0-beta.3"
+  },
+  "devDependencies": {
+    "@antfu/eslint-config": "^8.2.0",
+    "@clack/prompts": "^1.3.0",
+    "@moeru/eslint-config": "0.1.0-beta.18",
+    "@moeru/tsconfig": "0.1.0-beta.18",
+    "@types/node": "^25.6.2",
+    "@xsai-ext/responses": "0.5.0-beta.3",
+    "bumpp": "^11.1.0",
+    "eslint": "^10.2.0",
+    "pkgroll": "^2.27.0",
+    "tsx": "^4.21.0"
+  },
+  "scripts": {
+    "build": "pkgroll",
+    "bump": "bumpp --no-push",
+    "dev": "tsx scripts/example.ts",
+    "lint": "eslint ."
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts"
+}