Function writeCodexAuthFile

src/providers/codex/auth_state.ts:155–192

({
  accessToken,
  refreshToken,
  idToken = null,
  accountId = null,
  email = null,
  authMode = 'chatgpt',
  now = Date.now(),
  authPath = resolveCodexAuthPath(),
}: WriteCodexAuthOptions)

}

export async function writeCodexAuthFile({
  accessToken,
  refreshToken,
  idToken = null,
  accountId = null,
  email = null,
  authMode = 'chatgpt',
  now = Date.now(),
  authPath = resolveCodexAuthPath(),
}: WriteCodexAuthOptions): Promise<string> {
  const existing = readJsonObject(authPath) ?? {};
  const existingTokens = isRecord(existing.tokens) ? existing.tokens : {};
  const normalizedAccountId = firstString(
    accountId,
    existingTokens.account_id,
    existing.account_id,
  );
  const normalizedEmail = firstString(email, existing.email);
  const next = {
    ...existing,
    auth_mode: firstString(authMode, existing.auth_mode) ?? 'chatgpt',
    account_id: normalizedAccountId,
    email: normalizedEmail,
    OPENAI_API_KEY: Object.prototype.hasOwnProperty.call(existing, 'OPENAI_API_KEY')
      ? existing.OPENAI_API_KEY
      : null,
    last_refresh: new Date(now).toISOString(),
    tokens: {
      ...existingTokens,
      id_token: firstString(idToken, accessToken),
      access_token: accessToken,
      refresh_token: refreshToken,
      account_id: normalizedAccountId,
    },
  };
  await writeJsonAtomic(authPath, next);
  return authPath;
}

export function decodeJwtPayload(token: string | null | undefined): Record<string, any> | null {
  if (!token) {