codex-lb 0.1.2__tar.gz

codex_lb-0.1.2/.dockerignore

@@ -0,0 +1,24 @@
+.git
+.gitignore
+__pycache__/
+*.pyc
+*.pyo
+*.pyd
+*.db
+*.sqlite
+.env
+.env.*
+.venv/
+.mypy_cache/
+.pytest_cache/
+.ruff_cache/
+.vscode/
+.idea/
+node_modules/
+coverage/
+dist/
+build/
+htmlcov/
+refs/
+docs/
+tests/

codex_lb-0.1.2/.env.example

@@ -0,0 +1,30 @@
+# Database
+CODEX_LB_DATABASE_URL=sqlite+aiosqlite:///~/.codex-lb/store.db
+
+# Upstream ChatGPT base URL (no /codex suffix)
+CODEX_LB_UPSTREAM_BASE_URL=https://chatgpt.com/backend-api
+
+# Timeouts (seconds)
+CODEX_LB_UPSTREAM_CONNECT_TIMEOUT_SECONDS=30
+CODEX_LB_STREAM_IDLE_TIMEOUT_SECONDS=300
+
+# OAuth / token refresh
+CODEX_LB_AUTH_BASE_URL=https://auth.openai.com
+CODEX_LB_OAUTH_CLIENT_ID=app_EMoamEEZ73f0CkXaXp7hrann
+CODEX_LB_OAUTH_SCOPE="openid profile email"
+CODEX_LB_OAUTH_TIMEOUT_SECONDS=30
+CODEX_LB_OAUTH_REDIRECT_URI=http://localhost:1455/auth/callback
+CODEX_LB_OAUTH_CALLBACK_HOST=127.0.0.1
+# Do not change the port. OpenAI dislikes changes.
+CODEX_LB_OAUTH_CALLBACK_PORT=1455
+CODEX_LB_TOKEN_REFRESH_TIMEOUT_SECONDS=30
+CODEX_LB_TOKEN_REFRESH_INTERVAL_DAYS=8
+
+# Encryption key file (optional override; recommended for Docker volumes)
+# CODEX_LB_ENCRYPTION_KEY_FILE=/var/lib/codex-lb/encryption.key
+
+# Upstream usage fetch
+CODEX_LB_USAGE_FETCH_TIMEOUT_SECONDS=10
+CODEX_LB_USAGE_FETCH_MAX_RETRIES=2
+CODEX_LB_USAGE_REFRESH_ENABLED=true
+CODEX_LB_USAGE_REFRESH_INTERVAL_SECONDS=60

codex_lb-0.1.2/.github/release-please-config.json

@@ -0,0 +1,13 @@
+{
+  "release-type": "python",
+  "packages": {
+    ".": {
+      "release-type": "python",
+      "changelog-path": "CHANGELOG.md",
+      "extra-files": [
+        "app/__init__.py"
+      ],
+      "skip-github-release": true
+    }
+  }
+}

codex_lb-0.1.2/.github/release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.1.2"
+}

codex_lb-0.1.2/.github/workflows/ci.yml

@@ -0,0 +1,95 @@
+name: CI
+
+on:
+  push:
+    branches: ["main"]
+  pull_request:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  lint:
+    name: Lint (ruff)
+    runs-on: ubuntu-24.04
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          python-version: "3.13"
+          enable-cache: true
+
+      - name: Ruff check
+        run: uvx ruff check .
+
+      - name: Ruff format (check)
+        run: uvx ruff format --check .
+
+  test:
+    name: Tests (pytest)
+    runs-on: ubuntu-24.04
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          python-version: "3.13"
+          enable-cache: true
+
+      - name: Install dependencies
+        run: uv sync --dev --frozen
+
+      - name: Run tests
+        run: uv run pytest
+
+  package:
+    name: Package (build)
+    runs-on: ubuntu-24.04
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          python-version: "3.13"
+          enable-cache: true
+
+      - name: Install package (runtime deps)
+        run: uv pip install -e .
+
+      - name: Import check
+        run: python -c "import app; import app.main; print('import ok')"
+
+      - name: Build sdist + wheel
+        run: uvx --from build python -m build
+
+  docker:
+    name: Docker build
+    runs-on: ubuntu-24.04
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Build Docker image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: Dockerfile
+          push: false
+          tags: codex-lb:ci
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

codex_lb-0.1.2/.github/workflows/release-please.yml

@@ -0,0 +1,25 @@
+name: Release Please
+
+on:
+  push:
+    branches:
+      - main
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  release-please:
+    runs-on: ubuntu-24.04
+    steps:
+      - name: Run release-please
+        uses: googleapis/release-please-action@v4
+        with:
+          token: ${{ secrets.RELEASE_PLEASE_TOKEN }}
+          config-file: .github/release-please-config.json
+          manifest-file: .github/release-please-manifest.json

codex_lb-0.1.2/.github/workflows/release.yml

@@ -0,0 +1,226 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - "v*.*.*"
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  build:
+    name: Build (sdist + wheel)
+    runs-on: ubuntu-24.04
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          python-version: "3.13"
+          enable-cache: true
+
+      - name: Verify tag matches pyproject version
+        shell: bash
+        run: |
+          python - <<'PY'
+          import os
+          import re
+          import sys
+          from pathlib import Path
+          try:
+              import tomllib  # py3.11+
+          except Exception:  # pragma: no cover
+              import tomli as tomllib
+
+          tag_ref = os.environ.get("GITHUB_REF", "")
+          tag = tag_ref.split("/")[-1]
+          m = re.fullmatch(r"v(\d+\.\d+\.\d+)", tag)
+          if not m:
+              print(f"Invalid tag format: {tag!r}")
+              sys.exit(1)
+          tag_ver = m.group(1)
+
+          data = tomllib.loads(Path("pyproject.toml").read_text(encoding="utf-8"))
+          proj_ver = data["project"]["version"]
+          if proj_ver != tag_ver:
+              print(f"pyproject.toml version ({proj_ver}) does not match tag ({tag_ver})")
+              sys.exit(1)
+          print(f"OK: {tag} matches pyproject.toml version {proj_ver}")
+          PY
+
+      - name: Build sdist + wheel
+        run: uvx --from build python -m build
+
+      - name: Upload dist artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/*
+
+  publish-to-pypi:
+    name: Publish to PyPI
+    needs: [build]
+    runs-on: ubuntu-24.04
+
+    permissions:
+      id-token: write
+
+    environment:
+      name: pypi
+      url: https://pypi.org/project/codex-lb/
+
+    steps:
+      - name: Download dist artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist
+
+      - name: List dist files
+        run: ls -la dist/
+
+      - name: Publish to PyPI (Trusted Publishing)
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          verbose: true
+          print-hash: true
+
+  docker-image:
+    name: Build and push Docker image
+    needs: [build]
+    runs-on: ubuntu-24.04
+
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract Docker metadata
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ghcr.io/${{ github.repository }}
+          tags: |
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=semver,pattern={{major}}
+            type=raw,value=latest
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: Dockerfile
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+  create-github-release:
+    name: Create GitHub Release
+    needs: [publish-to-pypi, docker-image]
+    runs-on: ubuntu-24.04
+
+    permissions:
+      contents: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Download dist artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist
+
+      - name: Generate release notes
+        id: notes
+        shell: bash
+        run: |
+          set -euo pipefail
+          TAG_NAME="${GITHUB_REF#refs/tags/}"
+          TAG_VERSION="${TAG_NAME#v}"
+          RELEASE_DATE="$(date -u +%Y-%m-%d)"
+
+          PREV_TAG=""
+          if git describe --tags --abbrev=0 "${TAG_NAME}^" >/dev/null 2>&1; then
+            PREV_TAG="$(git describe --tags --abbrev=0 "${TAG_NAME}^")"
+          fi
+
+          if [ -n "${PREV_TAG}" ]; then
+            RANGE="${PREV_TAG}..${TAG_NAME}"
+          else
+            RANGE="${TAG_NAME}"
+          fi
+
+          COMMIT_COUNT="$(git rev-list --count "${RANGE}")"
+
+          {
+            echo "## What's New in ${TAG_NAME}"
+            echo
+            echo "- Release date: ${RELEASE_DATE}"
+            echo "- Commits: ${COMMIT_COUNT}"
+            echo
+            if [ -n "${PREV_TAG}" ]; then
+              echo "### Changes"
+              git log --pretty=format:"- %s" "${RANGE}"
+            else
+              echo "### Changes"
+              git log --pretty=format:"- %s" "${RANGE}"
+            fi
+            echo
+            echo
+            echo "### Install / Run"
+            echo '```bash'
+            echo 'uvx codex-lb'
+            echo 'pip install codex-lb'
+            echo "docker pull ghcr.io/${GITHUB_REPOSITORY}:${TAG_VERSION}"
+            echo '```'
+            echo
+            echo "### Artifacts"
+            if ls dist >/dev/null 2>&1; then
+              ls -1 dist | sed 's/^/- dist\\//'
+            else
+              echo "- dist/ (not available)"
+            fi
+            echo
+            echo "### Contributors"
+            git shortlog -s "${RANGE}" | awk '{$1=$1}1' | sed 's/^/- /'
+          } > release_notes.md
+
+          echo "tag_name=${TAG_NAME}" >> "$GITHUB_OUTPUT"
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ steps.notes.outputs.tag_name }}
+          name: Release ${{ steps.notes.outputs.tag_name }}
+          body_path: release_notes.md
+          files: "dist/*"
+          draft: false
+          prerelease: false

codex_lb-0.1.2/.gitignore

@@ -0,0 +1,37 @@
+# Project-specific
+refs/
+poc/
+
+# Python
+.venv/
+__pycache__/
+*.py[cod]
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+
+# Env/config
+.env
+.env.*
+!.env.example
+.python-version
+
+# Build artifacts
+build/
+dist/
+
+# Node
+node_modules/
+
+# Editors/OS
+.DS_Store
+.idea/
+.vscode/
+*.swp
+*.swo
+*~
+
+# Local
+.local/
+
+app/static/components

codex_lb-0.1.2/.pre-commit-config.yaml

@@ -0,0 +1,7 @@
+repos:
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.14.10
+    hooks:
+      - id: ruff
+        args: ["--fix"]
+      - id: ruff-format

codex_lb-0.1.2/AGENTS.md

@@ -0,0 +1,35 @@
+# AGENTS
+
+## Environment
+- Python: .venv/bin/python (uv, CPython 3.13.3)
+
+## Code Conventions (Typing & Data Contracts)
+- Prefer strict typing end-to-end. Avoid `dict`, `Mapping[str, object]`, and `object` in app/service/repository layers when the shape is known.
+- Use explicit dataclasses or Pydantic models for internal payloads; convert to response schemas at the edge.
+- ORM models should be passed through services instead of generic containers; avoid `getattr`/`[]` access on ORM results.
+- Expose time values in dashboard APIs as ISO 8601 strings (`datetime` in schemas), not epoch numbers.
+- If a test depends on a contract change (field name/type), update the test to match the new typed schema.
+
+## Code Conventions (Structure & Responsibilities)
+- Keep domain boundaries clear: `core/` for reusable logic, `modules/*` for API-facing features, `db/` for persistence, `static/` for dashboard assets.
+- Follow module layout conventions in `app/modules/<feature>/`: `api.py` (routes), `service.py` (business logic), `repository.py` (DB access), `schemas.py` (Pydantic I/O models).
+- Prefer small, focused files; split when a file grows beyond a single responsibility or mixes layers.
+- Avoid god-classes: a class should have one reason to change and a narrow public surface.
+- Functions should be single-purpose and side-effect aware; separate pure transformations from I/O.
+- Do not mix API schema construction with persistence/query logic; map data in service layer.
+- Validate inputs early and fail fast with clear errors; never silently coerce invalid types.
+
+## Code Conventions (Testing / TC)
+- Add or update tests whenever contracts change (field names/types, response formats, default values).
+- Keep unit tests under `tests/unit` and integration tests under `tests/integration` using existing markers.
+- Tests should assert public behavior (API responses, service outputs) rather than internal implementation details.
+- Use fixtures for DB/session setup; do not introduce network calls outside the test server stubs.
+- Prefer deterministic inputs (fixed timestamps, explicit payloads) to avoid flaky tests.
+
+## Code Conventions (DI & Context)
+- Use FastAPI `Depends` providers in `app/dependencies.py` to construct per-request contexts (`*Context` dataclasses).
+- Contexts should hold only the session, repositories, and service for a single module; avoid cross-module service coupling.
+- Repositories must be constructed with the request-scoped `AsyncSession` from `get_session`; no global sessions.
+- Services should be instantiated inside context providers and receive repositories via constructor injection.
+- Background tasks or standalone scripts must create and manage their own session; do not reuse request contexts.
+- When adding a new module, define `api.py` endpoints that depend on a module-specific context provider.

codex_lb-0.1.2/CHANGELOG.md

@@ -0,0 +1,30 @@
+# Changelog
+
+## [0.1.2](https://github.com/Soju06/codex-lb/compare/v0.1.1...v0.1.2) (2026-01-12)
+
+
+### Bug Fixes
+
+* sync package __version__ ([3dd97e6](https://github.com/Soju06/codex-lb/commit/3dd97e6397a8ea9d3528c166d1e729936f98f737))
+
+## [0.1.1](https://github.com/Soju06/codex-lb/compare/v0.1.0...v0.1.1) (2026-01-12)
+
+
+### Bug Fixes
+
+* address lint warnings ([7c3cc06](https://github.com/Soju06/codex-lb/commit/7c3cc06c9a6a9a9a8895c1dd5fcc57b3c0eebdb3))
+* reactivate accounts when secondary quota clears ([58a4263](https://github.com/Soju06/codex-lb/commit/58a42630d644559f96f045a96c25d0126810542e))
+* skip project install in docker build ([64e9156](https://github.com/Soju06/codex-lb/commit/64e9156075c256ef48c0587ea1abb7cc092b97a5))
+
+
+### Documentation
+
+* add dashboard hero and accounts view ([3522654](https://github.com/Soju06/codex-lb/commit/3522654fe5d09adbe32895d4b24e8b00faac9dfe))
+
+## [0.1.0](https://github.com/Soju06/codex-lb/releases/tag/v0.1.0) (2026-01-07)
+
+
+### Bug Fixes
+
+* address lint warnings ([7c3cc06](https://github.com/Soju06/codex-lb/commit/7c3cc06c9a6a9a8895c1dd5fcc57b3c0eebdb3))
+* skip project install in docker build ([64e9156](https://github.com/Soju06/codex-lb/commit/64e9156075c256ef48c0587ea1abb7cc092b97a5))

codex_lb-0.1.2/Dockerfile

@@ -0,0 +1,38 @@
+# syntax=docker/dockerfile:1.7
+FROM python:3.13-slim AS build
+
+ENV PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1 \
+    UV_PROJECT_ENVIRONMENT=/opt/venv \
+    UV_LINK_MODE=copy
+
+WORKDIR /app
+
+RUN python -m venv /opt/venv
+ENV PATH="/opt/venv/bin:$PATH"
+
+RUN pip install --no-cache-dir uv
+
+COPY pyproject.toml uv.lock ./
+RUN --mount=type=cache,target=/root/.cache/uv \
+    uv sync --frozen --no-dev --no-install-project
+
+FROM python:3.13-slim AS runtime
+
+ENV PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1 \
+    PATH="/opt/venv/bin:$PATH"
+
+WORKDIR /app
+
+RUN adduser --disabled-password --gecos "" app \
+    && mkdir -p /var/lib/codex-lb \
+    && chown -R app:app /var/lib/codex-lb
+
+COPY --from=build /opt/venv /opt/venv
+COPY app app
+
+USER app
+EXPOSE 2455 1455
+
+CMD ["fastapi", "run", "--host", "0.0.0.0", "--port", "2455"]

codex_lb-0.1.2/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Soju06
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.