codex-mode 0.1.0a7__py3-none-any.whl

codex_mode/__init__.py

@@ -0,0 +1,2 @@
+"""Independent Linux utility for switching Codex authentication routes."""
+__version__ = '0.1.0a7'

codex_mode/__main__.py

@@ -0,0 +1,3 @@
+from .cli import main
+
+raise SystemExit(main())

codex_mode/accounts.py

@@ -0,0 +1,91 @@
+"""Named ChatGPT credentials; history stays in the selected CODEX_HOME."""
+import json
+import re
+from . import engine as e
+
+def path(root, name, create=True):
+    if not re.fullmatch(r'[A-Za-z0-9][A-Za-z0-9_-]{0,63}', name):
+        raise ValueError('账号名仅允许字母、数字、横线和下划线，最长 64 字符。')
+    folder=root/'auth-profiles'/'accounts'
+    if (root/'auth-profiles').is_symlink() or folder.is_symlink():
+        raise RuntimeError('账号目录不能是符号链接。')
+    if create:folder.mkdir(parents=True,mode=0o700,exist_ok=True)
+    target=folder/(name+'.json')
+    if target.is_symlink():raise RuntimeError('账号文件不能是符号链接。')
+    return target
+
+def identity(auth):
+    return (auth.get('tokens') or {}).get('account_id')
+
+def save(root, name):
+    auth=e.read_auth(root/'auth.json')
+    if not e.chat_auth(auth):raise RuntimeError('当前目录没有 ChatGPT 登录。')
+    target=path(root,name)
+    if target.exists():raise RuntimeError('账号名已存在，请使用新名称，避免覆盖凭据。')
+    e.atomic(target,json.dumps(auth))
+    settings=e.read_auth(root/'codex-mode.json')
+    settings['active_account']=name
+    e.atomic(root/'codex-mode.json',json.dumps(settings))
+    e.say('✓ 当前登录已保存为 '+name+'（未切换线路）。','ok')
+
+def login(root,name):
+    target=path(root,name)
+    if target.exists():raise RuntimeError('账号名已存在，请使用新名称。')
+    # Official login runs in an empty staging home, never the active home.
+    import tempfile
+    import shutil
+    staging=e.Path(tempfile.mkdtemp(prefix='account-login-',dir=target.parent))
+    try:
+        e.atomic(staging/'config.toml','model_provider="openai"\ncli_auth_credentials_store="file"\n')
+        result=e.subprocess.run([e.BIN,'login','--device-auth'],env=e.codex_env(staging))
+        if result.returncode:raise RuntimeError('登录未完成，当前登录未修改。')
+        auth=e.read_auth(staging/'auth.json')
+        if not e.chat_auth(auth):raise RuntimeError('未获得 ChatGPT 登录凭据。')
+        e.atomic(target,json.dumps(auth))
+        e.say('✓ 已保存账号 '+name+'；尚未启用。','ok')
+    finally:shutil.rmtree(staging)
+
+def listing(root):
+    settings=e.read_auth(root/'codex-mode.json')
+    folder=root/'auth-profiles'/'accounts'
+    if folder.is_symlink():raise RuntimeError('账号目录不能是符号链接。')
+    names=sorted(p.stem for p in folder.glob('*.json') if not p.is_symlink())
+    for name in names:
+        print(name+(' · 当前选中' if name==settings.get('active_account') else ''))
+    if not names:print('尚无命名账号。运行 login --account NAME。')
+
+def switch(root,name,force=False,disconnect_idle=False):
+    target=path(root,name)
+    selected=e.read_auth(target)
+    if not e.chat_auth(selected):raise RuntimeError('账号未登录：'+name)
+    # Stop only servers associated with this home, before changing any credentials.
+    if force:e.force_stop(root)
+    else:e.ensure_idle(root,disconnect_idle=disconnect_idle,allow_interrupt=False)
+    originals={p:p.read_bytes() if p.exists() else None for p in
+               (root/'auth.json',root/'codex-mode.json',root/'config.toml',root/'auth-profiles'/'chatgpt.auth.json')}
+    settings=e.read_auth(root/'codex-mode.json')
+    current=e.read_auth(root/'auth.json')
+    old=settings.get('active_account')
+    if not old and e.chat_auth(current):
+        # Preserve the pre-existing login when adopting named accounts.
+        old='previous-'+e.datetime.datetime.now().strftime('%Y%m%d-%H%M%S-%f')
+        e.atomic(path(root,old),json.dumps(current))
+    if old and e.chat_auth(current):
+        previous=path(root,old)
+        stored=e.read_auth(previous)
+        if not identity(current) or identity(current)!=identity(stored):
+            raise RuntimeError('当前登录与记录账号不一致，已取消，避免覆盖其他账号。')
+        e.atomic(previous,json.dumps(current))
+    # Reload: switching to the same account must use refreshed credentials.
+    selected=e.read_auth(target)
+    try:
+        e.atomic(root/'auth.json',json.dumps(selected))
+        e.switch(root,'chatgpt',disconnect_idle=disconnect_idle,force=False)
+        settings['active_account']=name
+        e.atomic(root/'codex-mode.json',json.dumps(settings))
+    except BaseException:
+        for p,data in originals.items():
+            if data is None:p.unlink(missing_ok=True)
+            else:e.atomic(p,data)
+        raise
+    e.say('账号：'+name)

codex_mode/benchmark.py

@@ -0,0 +1,99 @@
+"""Isolated hello requests; source home is read-only and never switched."""
+import json
+import os
+from pathlib import Path
+import signal
+import statistics
+import subprocess
+import tempfile
+import time
+from . import engine as e
+
+def result(stdout, stderr, code):
+    events=[]
+    for line in stdout.splitlines():
+        try:
+            value=json.loads(line)
+            if isinstance(value,dict):events.append(value)
+        except ValueError:continue
+    messages=[v.get('item',{}).get('text','') for v in events
+              if v.get('type')=='item.completed' and v.get('item',{}).get('type')=='agent_message']
+    unsafe=any(v.get('item',{}).get('type') in ('command_execution','file_change','mcp_tool_call','web_search')
+               for v in events)
+    passed=code==0 and any(v.get('type')=='turn.completed' for v in events) and any(messages) and not unsafe
+    if passed:return 'ok'
+    # Never print untrusted upstream errors: they may include URLs or credentials.
+    combined=(stdout+'\n'+stderr).lower()
+    if unsafe:return 'unexpected_tool'
+    if 'overloaded' in combined or 'overload' in combined:return 'overloaded'
+    if 'usage limit' in combined or 'rate limit' in combined or '429' in combined:return 'limited'
+    if 'unauthorized' in combined or '401' in combined or 'refresh' in combined:return 'auth_error'
+    if 'not supported' in combined or 'model_not_found' in combined:return 'model_error'
+    return 'request_failed'
+
+def sample(source,mode,binary,model,effort,timeout,account=None):
+    with tempfile.TemporaryDirectory(prefix='codex-mode-speed-') as directory:
+        root=Path(directory);home=root/'home';work=root/'work'
+        home.mkdir(mode=0o700);work.mkdir(mode=0o700)
+        env=e.codex_env(home)
+        # Scrub other alternate-auth/service overrides from this child only.
+        for name in ('CODEX_MODE_BENCH_KEY','CODEX_HOME','CHATGPT_BASE_URL'):
+            env.pop(name,None)
+        env['CODEX_HOME']=str(home)
+        provider={'name':'isolated speed test','wire_api':'responses','supports_websockets':False,
+                  'base_url':e.CHAT_URL if mode=='chatgpt' else e.API_URL}
+        if mode=='chatgpt':
+            if account:
+                from .accounts import path
+                auth=e.read_auth(path(source,account,create=False))
+            else:
+                auth=e.read_auth(source/'auth.json')
+                if not e.chat_auth(auth):auth=e.read_auth(source/'auth-profiles'/'chatgpt.auth.json')
+            if not e.chat_auth(auth):raise RuntimeError('ChatGPT 登录缺失')
+            e.atomic(home/'auth.json',json.dumps(auth))
+            provider['requires_openai_auth']=True
+        else:
+            if not e.API_URL:raise RuntimeError('API 地址缺失')
+            env['CODEX_MODE_BENCH_KEY']=e.key_for(source)
+            provider['env_key']='CODEX_MODE_BENCH_KEY'
+        config='model_provider="direct"\ncli_auth_credentials_store="file"\napproval_policy="never"\nweb_search="disabled"\n'
+        config+='model='+json.dumps(model)+'\nmodel_reasoning_effort='+json.dumps(effort)+'\n'
+        config+='developer_instructions="Respond to the greeting briefly. Do not use any tools."\n'
+        config+='[features]\nshell_tool=false\nunified_exec=false\ngoals=false\nshell_snapshot=false\n'
+        config+='[model_providers.direct]\n'
+        for name,value in provider.items():config+=name+'='+json.dumps(value)+'\n'
+        e.atomic(home/'config.toml',config)
+        cmd=[binary,'exec','--ephemeral','--json','--skip-git-repo-check','--ignore-rules',
+             '--sandbox','read-only','--color','never','--cd',str(work),'hello']
+        started=time.perf_counter()
+        process=subprocess.Popen(cmd,env=env,cwd=work,stdout=subprocess.PIPE,stderr=subprocess.PIPE,
+                                 text=True,start_new_session=True)
+        try:
+            out,err=process.communicate(timeout=timeout)
+        except subprocess.TimeoutExpired:
+            os.killpg(process.pid,signal.SIGKILL);process.communicate()
+            return {'status':'timeout','seconds':time.perf_counter()-started}
+        except BaseException:
+            if process.poll() is None:os.killpg(process.pid,signal.SIGKILL)
+            process.communicate();raise
+        return {'status':result(out,err,process.returncode),'seconds':time.perf_counter()-started}
+
+def run(source,binary,model='gpt-5.6-sol',effort='medium',rounds=1,timeout=120,account=None):
+    e.say('测速 · '+model+' / '+effort+' · hello · '+str(rounds)+' 轮')
+    e.say('真实请求消耗额度/费用；含 CLI 启动、排队和重试，不是纯模型延迟。')
+    e.say('仅使用临时目录；不切换线路或停止现有任务。ChatGPT 测试可能刷新临时副本的登录令牌。')
+    measurements={'chatgpt':[],'api':[]}
+    for index in range(rounds):
+        for label in (('chatgpt','api') if index%2==0 else ('api','chatgpt')):
+            e.say('  '+label+' · 第 '+str(index+1)+' 轮…')
+            try:r=sample(source,label,binary,model,effort,timeout,account)
+            except (RuntimeError,OSError,ValueError):r={'status':'setup_error','seconds':None}
+            measurements[label].append(r)
+            e.say('  '+('✓' if r['status']=='ok' else '✗')+' '+label+' · '+r['status']+
+                  (' · %.2fs'%r['seconds'] if r['seconds'] is not None else ''),
+                  'ok' if r['status']=='ok' else 'warn')
+    for label,values in measurements.items():
+        timings=[v['seconds'] for v in values if v['status']=='ok']
+        e.say(label+'：成功 '+str(len(timings))+'/'+str(rounds)+
+              ('，中位数 %.2fs'%statistics.median(timings) if timings else '，无有效测速结果'))
+    return measurements

codex_mode/cli.py

@@ -0,0 +1,199 @@
+"""Configuration and packaging entry point; credentials never enter CLI arguments."""
+import argparse
+import fcntl
+import getpass
+import json
+import os
+from pathlib import Path
+import queue
+import re
+import shutil
+import subprocess
+import sys
+import tempfile
+from urllib.parse import urlsplit
+
+from . import __version__
+from . import engine as e
+
+TESTED_VERSIONS = {(0,153,4),(0,154,0)}
+
+def url(value):
+    parsed=urlsplit(value)
+    if parsed.scheme not in ('http','https') or not parsed.hostname or parsed.username or parsed.password or parsed.query or parsed.fragment:
+        raise ValueError('URL must be http(s), without credentials, query or fragment.')
+    return value.rstrip('/')
+
+def codex_binary(value):
+    found=shutil.which(value) if value else shutil.which('codex')
+    if not found:raise RuntimeError('Codex executable not found. Install Codex or pass --codex-bin PATH.')
+    return str(Path(found).absolute())
+
+def check_version(binary):
+    result=subprocess.run([binary,'--version'],capture_output=True,text=True,timeout=10,check=True)
+    match=re.search(r'\b(\d+)\.(\d+)\.(\d+)\b',result.stdout)
+    if not match or tuple(map(int,match.groups())) not in TESTED_VERSIONS:
+        raise RuntimeError('Untested Codex version: '+result.stdout.strip()+'. Supported: 0.153.4, 0.154.0.')
+    return result.stdout.strip()
+
+def configure(root,settings,binary):
+    e.API_URL=url(settings['api_url']) if settings.get('api_url') else ''
+    e.HEALTH_URL=url(settings['health_url']) if settings.get('health_url') else None
+    e.BIN=binary or 'codex'
+    aliases=settings.get('provider_aliases',['direct'])
+    if not isinstance(aliases,list) or 'direct' not in aliases or any(not isinstance(a,str) or not re.fullmatch(r'[A-Za-z0-9_-]+',a) or a in ('openai','ollama','lmstudio') for a in aliases):
+        raise ValueError('Invalid provider aliases; direct is required and built-in openai cannot be overridden.')
+    e.ALIASES=list(dict.fromkeys(aliases))
+    name=settings.get('key_env')
+    if name and not re.fullmatch(r'[A-Za-z_][A-Za-z0-9_]*',name):raise ValueError('Invalid key environment variable name.')
+
+def initialize(root,args):
+    settings=e.read_auth(root/'codex-mode.json')
+    if args.api_url:settings['api_url']=url(args.api_url)
+    if not settings.get('api_url'):raise RuntimeError('Pass --api-url URL to initialize the API route.')
+    if args.health_url:settings['health_url']=url(args.health_url)
+    if args.codex_bin:settings['codex_bin']=codex_binary(args.codex_bin)
+    if args.provider_alias:settings['provider_aliases']=list(dict.fromkeys(['direct']+args.provider_alias))
+    settings.setdefault('provider_aliases',['direct'])
+    key=None
+    if args.key_env:settings['key_env']=args.key_env
+    elif args.prompt_key:
+        if not sys.stdin.isatty():raise RuntimeError('API key prompt requires a terminal.')
+        key=getpass.getpass('API key（隐藏输入）：').strip();settings.pop('key_env',None)
+    elif args.import_api_key:
+        key=e.read_auth(root/'auth.json').get('OPENAI_API_KEY');settings.pop('key_env',None)
+    if (args.prompt_key or args.import_api_key) and (not isinstance(key,str) or not key.strip()):
+        raise RuntimeError('No API key was supplied/imported. Existing settings unchanged.')
+    configure(root,settings,None)
+    profile=root/'auth-profiles';profile.mkdir(mode=0o700,exist_ok=True)
+    # Back up only existing tool-owned files; initialization does not alter Codex config/auth.
+    targets=[root/'codex-mode.json']+([profile/'sub2api.auth.json'] if key else [])
+    if any(p.exists() for p in targets):
+        backup=root/'mode-backups'/('init-'+e.datetime.datetime.now().strftime('%Y%m%d-%H%M%S-%f'))
+        backup.mkdir(parents=True,mode=0o700)
+        for p in targets:
+            if p.exists():shutil.copy2(p,backup/p.name);os.chmod(backup/p.name,0o600)
+    originals={p:p.read_bytes() if p.exists() else None for p in targets}
+    try:
+        if key:e.atomic(profile/'sub2api.auth.json',json.dumps({'OPENAI_API_KEY':key.strip()}))
+        e.atomic(root/'codex-mode.json',json.dumps(settings,ensure_ascii=False,indent=2)+'\n')
+    except BaseException:
+        for path,data in originals.items():
+            if data is None:path.unlink(missing_ok=True)
+            else:e.atomic(path,data)
+        raise
+    e.say('✓ 初始化完成。Codex 当前配置和登录保持原样。','ok')
+
+def doctor(root,binary):
+    print('Codex:',check_version(binary))
+    for process in e.processes(root):check_version(process['exe'])
+    print('Goal handling: manual pause; no goal RPC required')
+    print('State directory:',root)
+    print('API endpoint:',e.API_URL or 'not configured')
+    print('Provider aliases:',', '.join(e.ALIASES))
+    e.say('✓ 基础版本与协议检查通过（不代表网络或所有历史会话已验证）。','ok')
+
+def run(argv=None):
+    parser=argparse.ArgumentParser(description='Switch Codex ChatGPT/API routes with shared history (Linux alpha).')
+    parser.add_argument('command',nargs='?',default='setup',choices=['setup','verify','scan','restore','init','doctor','status','login','chatgpt','api','sub2api','accounts','account-save','speed','_key'])
+    parser.add_argument('--model',default='gpt-5.6-sol',help='测速模型')
+    parser.add_argument('--effort',choices=['low','medium','high','xhigh'],default='medium')
+    parser.add_argument('--rounds',type=int,default=1)
+    parser.add_argument('--timeout',type=int,default=120)
+    parser.add_argument('--account',help='Named ChatGPT account; login/chatgpt/account-save/speed')
+    parser.add_argument('--version',action='version',version='codex-mode '+__version__)
+    parser.add_argument('--state-dir',default=os.environ.get('CODEX_HOME',str(Path.home()/'.codex')))
+    parser.add_argument('--codex-bin',help='Codex executable; otherwise use settings or PATH')
+    parser.add_argument('-v','--verbose',action='store_true')
+    parser.add_argument('--dry-run',action='store_true',help='Preview route without changing files, processes or goals')
+    parser.add_argument('--disconnect-idle',action='store_true')
+    parser.add_argument('--force',action='store_true',help='Confirm forced shutdown before switching; reconnect starts the new service')
+    parser.add_argument('--api-url',help='Responses API base URL; used by init')
+    parser.add_argument('--health-url',help='Optional unauthenticated health endpoint; used by init')
+    parser.add_argument('--backup',help='Completed backup directory; used by restore/verify')
+    parser.add_argument('--request-test',action='store_true',help='Confirm minimal real requests; used by verify')
+    parser.add_argument('--provider-alias',action='append',help='Explicitly manage a historical provider ID; used by init')
+    keys=parser.add_mutually_exclusive_group()
+    keys.add_argument('--key-env',help='API key environment variable name; used by init')
+    keys.add_argument('--prompt-key',action='store_true')
+    keys.add_argument('--import-api-key',action='store_true',help='Explicitly import OPENAI_API_KEY from existing auth.json')
+    args=parser.parse_args(argv);e.VERBOSE=args.verbose
+    if args.account and args.command not in ('login','chatgpt','account-save','speed'):parser.error('--account requires login/chatgpt/account-save/speed.')
+    if not 1<=args.rounds<=10 or not 5<=args.timeout<=600:parser.error('rounds: 1–10; timeout: 5–600 seconds.')
+    if args.command=='account-save' and not args.account:parser.error('account-save requires --account NAME.')
+    if args.force and args.command not in ('chatgpt','api','sub2api'):parser.error('--force requires a mode command.')
+    if args.command in ('restore','verify') and not args.backup:parser.error(args.command+' requires --backup DIR.')
+    if args.backup and args.command not in ('restore','verify'):parser.error('--backup requires restore/verify.')
+    if args.request_test and args.command!='verify':parser.error('--request-test requires verify.')
+    if sys.platform!='linux':raise RuntimeError('This alpha supports Linux only.')
+    os.umask(0o077)
+    root=Path(args.state_dir).expanduser().resolve()
+    if not (root/'config.toml').is_file() and args.command!='restore':raise RuntimeError('Missing config.toml in '+str(root)+'. Initialize Codex first.')
+    if not root.is_dir():raise RuntimeError('CODEX_HOME directory does not exist.')
+    if args.command=='_key':
+        if sys.stdout.isatty():raise RuntimeError('Internal credential command refuses terminal output.')
+        print(e.key_for(root));return
+    init_options=any([args.api_url,args.health_url,args.provider_alias,args.key_env,args.prompt_key,args.import_api_key])
+    if init_options and args.command!='init':parser.error('Setup options are only valid with init.')
+    if args.dry_run and args.command not in ('chatgpt','api','sub2api'):parser.error('--dry-run requires a mode command.')
+    settings={} if args.command in ('restore','scan') else e.read_auth(root/'codex-mode.json')
+    binary=None if args.command in ('init','status','scan','restore','accounts','account-save') or args.dry_run else codex_binary(args.codex_bin or settings.get('codex_bin'))
+    configure(root,settings,binary)
+    if args.command=='speed':
+        from .benchmark import run as speed
+        check_version(binary)
+        results=speed(root,binary,args.model,args.effort,args.rounds,args.timeout,args.account)
+        if any(not any(r['status']=='ok' for r in values) for values in results.values()):
+            raise RuntimeError('至少一条线路无有效测速结果；未切换线路。')
+        return
+    if args.command=='status':e.status(root);return
+    if args.command=='accounts':
+        from .accounts import listing
+        listing(root);return
+    if args.command=='scan':
+        from .onboarding import scan_home
+        inventory=scan_home(root)
+        print(json.dumps({key:value for key,value in inventory.items() if key!='threads'},ensure_ascii=False,indent=2));return
+    if args.command=='doctor':doctor(root,binary);return
+    mode='sub2api' if args.command in ('api','sub2api') else args.command
+    if args.dry_run:
+        if mode=='sub2api' and not e.API_URL:raise RuntimeError('Run init --api-url URL first.')
+        if args.account:
+            from .accounts import path
+            if not e.chat_auth(e.read_auth(path(root,args.account,create=False))):raise RuntimeError('账号未登录。')
+        e.render((root/'config.toml').read_text(),root,mode)
+        print('预览：'+mode+' → '+(e.CHAT_URL if mode=='chatgpt' else e.API_URL))
+        print('仅检查配置转换；未检查任务/网络，未修改任何文件、进程或 goal。');return
+    if binary:
+        check_version(binary)
+        for process in e.processes(root):check_version(process['exe'])
+    with (root/'.codex-mode.lock').open('a') as lock:
+        try:fcntl.flock(lock,fcntl.LOCK_EX|fcntl.LOCK_NB)
+        except BlockingIOError:raise RuntimeError('Another login or switch operation is running; finish it first.')
+        if args.command=='verify':
+            from .onboarding import verify_backup
+            verify_backup(root,args.backup,binary,request_tests=args.request_test)
+        elif args.command=='restore':
+            from .onboarding import restore_configuration
+            restore_configuration(root,args.backup)
+        elif args.command=='setup':
+            from .onboarding import setup
+            setup(root,binary,url)
+        elif args.command=='init':initialize(root,args)
+        elif args.command=='account-save':
+            from .accounts import save
+            e.ensure_idle(root,allow_interrupt=False)
+            save(root,args.account)
+        elif args.account:
+            from . import accounts
+            if mode=='login':accounts.login(root,args.account)
+            else:accounts.switch(root,args.account,force=args.force,disconnect_idle=args.disconnect_idle)
+        elif mode=='login':e.login(root)
+        else:e.switch(root,mode,disconnect_idle=args.disconnect_idle,force=args.force)
+
+def main(argv=None):
+    try:run(argv);return 0
+    except (KeyboardInterrupt,EOFError):
+        print(e.color('已取消；配置若未写入则保持原样。','warn',sys.stderr),file=sys.stderr);return 130
+    except (RuntimeError,OSError,ValueError,queue.Empty,subprocess.SubprocessError) as error:
+        print(e.color('未完成：'+e.error_text(error),'error',sys.stderr),file=sys.stderr);return 1